<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: washington]]></title>
    <link>http://securityratty.com/tag/washington</link>
    <description></description>
    <pubDate>Sat, 26 Jul 2008 00:29:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[RNC]]></title>
      <link>http://securityratty.com/article/be0e55d9cb445eec42568a38816bb728</link>
      <guid>http://securityratty.com/article/be0e55d9cb445eec42568a38816bb728</guid>
      <description><![CDATA[Yup, we have the RNC here in MN. Downtown is locked down pretty tight, you would need the combined powers of Chuck Norris and Bruce Schneier to even get a cup of coffee down there. Here is the round...]]></description>
      <content:encoded><![CDATA[<p>Yup, we have the RNC here in MN. Downtown is locked down pretty tight, you would need the combined powers of Chuck Norris and <a href="http://geekz.co.uk/schneierfacts/">Bruce Schneier</a> to even get a cup of coffee down there. Here is the round up from <a href="http://www.economist.com/blogs/freeexchange/2008/09/above_the_fold_251.cfm">The Economist&#39;s blog</a></p><br /><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; line-height: normal; ">You&#39;ll have to pardon me this morning if the round-up seems a bit off. I&#39;m still a little stunned at the spectacle of an arena full of (seemingly sober and sane) adults chanting, &quot;Drill, baby, drill&quot;.</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; line-height: normal;"><br /></span><span style="font-family: Verdana; line-height: normal; ">So let&#39;s see, what&#39;s in the news? Well, last night Republicans trotted out a Massachusetts venture capitalist and governor, the former mayor of New York City, former executives of eBay and HP, and an Alaskan neophyte pol who as mayor of a small town delivered $4,000 in federal pork for every man, woman, and child, in railing against coastal elites and Washington politics, while supporting a candidate who&#39;s been in the Senate for 26 years.</span></p></blockquote>]]></content:encoded>
      <pubDate>Thu, 04 Sep 2008 07:34:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/massachusetts venture capitalist">massachusetts venture capitalist</category>
      <category domain="http://securityratty.com/tag/alaskan neophyte pol">alaskan neophyte pol</category>
      <category domain="http://securityratty.com/tag/washington politics">washington politics</category>
      <category domain="http://securityratty.com/tag/bruce schneier">bruce schneier</category>
      <category domain="http://securityratty.com/tag/rnc">rnc</category>
      <category domain="http://securityratty.com/tag/federal pork">federal pork</category>
      <category domain="http://securityratty.com/tag/drill">drill</category>
      <category domain="http://securityratty.com/tag/round-up">round-up</category>
      <category domain="http://securityratty.com/tag/pretty tight">pretty tight</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/09/rnc.html">RNC</source>
    </item>
    <item>
      <title><![CDATA[DC Young IT Scene Growing]]></title>
      <link>http://securityratty.com/article/cfe7523038453c0b939b3153f29dbc01</link>
      <guid>http://securityratty.com/article/cfe7523038453c0b939b3153f29dbc01</guid>
      <description><![CDATA[The late 90s IT boom represented everything great about the American dream. If you had a brilliant idea, knew how to put it into production and had some idea on how to market said idea, you could make...]]></description>
      <content:encoded><![CDATA[<p>The late 90’s IT boom represented everything great about the American dream.&nbsp; If you had a brilliant idea, knew how to put it into production and had some idea on how to market said idea, you could make it and many were indeed making it big in Silicon Valley.
<p>This chance to “get rich quick” prompted many talented young entrepreneurs and IT specialists to move to the Valley, and in turn helped <a href="http://www.somewhatfrank.com/2008/07/web-20-startups.html" target="_blank">establish the area</a> as a hip young center for the most talented people in the field.&nbsp;
<p>The Beltway, (a.k.a. Washington, DC area) has always been known as a home for those wanting to enter into public service, or at least a career in grand gestures, however with the rapid growth of government-based IT needs, and the <a href="http://www.istrategylabs.com/giving-you-50000-for-office-space-and-lot-of-other-fun-things/" target="_blank">success of many IT companies</a> in the area, it is slowly <a href="http://eastcoastblogging.com/2008/07/28/crossmine-dcs-directory-of-technology-ventures/" target="_blank">transforming into an IT hub of its own</a>.&nbsp;
<p>[Note: Dave and Julia disagree with my perspective on the slow growth of DC as a tech hub. In their opinions, it always has been with many great IT companies founded and run out of the DC area, including AOL, UUnet, and The Motley Fool, to name a few. The area was properly positioned as the “Silicon Valley of the East” in the 90’s and was able to successfully cultivate a large and prominent IT culture. BUT it’s interesting that Silicon Valley dominates in terms of popular perception, as I believe and so do many friends I’ve discussed this with.]
<p>But perhaps that is changing. Dave wrote an earlier post about the <a href="http://blog.sciencelogic.com/whats-up-with-the-washington-posts-biz-section-coverage-of-local-business/05/2008" target="_blank">lack of local tech coverage in the Washington Post</a>. Recently, however, we’re seeing more relevant articles in the paper that highlight the growing DC young IT scene. Case in point, this <a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/08/10/AR2008081002026.html?wpisrc=newsletter" target="_blank">article</a> about LaunchBox, a DC tech incubator that will hopefully only serve to grow and enrich the community with more <a href="http://technosailor.com/2008/07/25/andrew-feinberg-to-join-technosailorcom/" target="_blank">talented young IT professionals and big thinkers</a>.&nbsp;
<p>The question that remains is <a href="http://blog.sciencelogic.com/a-new-generation-of-tech-in-dc/07/2008" target="_blank">how the culture</a> in this <a href="http://www.gottabemobile.com/Mobile+Tech+And+Social+Tools+Upset+Some+Congress+Folk.aspx" target="_blank">very traditional area</a> will change with this growth.&nbsp; </p>
]]></content:encoded>
      <pubDate>Tue, 02 Sep 2008 14:45:14 +0000</pubDate>
      <category domain="http://securityratty.com/tag/valley">valley</category>
      <category domain="http://securityratty.com/tag/silicon valley">silicon valley</category>
      <category domain="http://securityratty.com/tag/slow growth">slow growth</category>
      <category domain="http://securityratty.com/tag/growth">growth</category>
      <category domain="http://securityratty.com/tag/washington post">washington post</category>
      <category domain="http://securityratty.com/tag/brilliant idea">brilliant idea</category>
      <category domain="http://securityratty.com/tag/washington">washington</category>
      <category domain="http://securityratty.com/tag/idea">idea</category>
      <category domain="http://securityratty.com/tag/hub">hub</category>
      <source url="http://blog.sciencelogic.com/dc-young-it-scene-growing/09/2008">DC Young IT Scene Growing</source>
    </item>
    <item>
      <title><![CDATA[While I Was Out: Compendium of the Last Week's News]]></title>
      <link>http://securityratty.com/article/9b2e491a24c669b08b8cfdf0d0df0b47</link>
      <guid>http://securityratty.com/article/9b2e491a24c669b08b8cfdf0d0df0b47</guid>
      <description><![CDATA[You wouldn't listen, but continued to generate products, news stories, and analysis about wireless networking in my absence: Here's the run down of the last week or so's Wi-Fi and wireless stories....]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><strong>You wouldn't listen, but continued to generate products, news stories, and analysis about wireless networking in my absence:</strong> Here's the run down of the last week or so's Wi-Fi and wireless stories. (Yes, I enjoyed my time off.)</p>

<p><a href="http://www.informationweek.com/news/services/data/showArticle.jhtml?articleID=210200880"><strong>Fourth US airline to go Wi-Fi:</strong></a> Aircell says they have a fourth airline--after American, Delta, and Virgin America--on board for its in-flight Wi-Fi service. The aerial broadband provider's latest partner will be announced soon. Aircell's service went live in 15 American Airlines planes two weeks ago, and there's been a surprising lack of reporting from regular travelers or journalists since the big splash at the launch.</p>

<p><a href="http://seattlepi.nwsource.com/business/376308_software25.html"><strong>Microsoft, two universities research methods for better Wi-Fi handoff for vehicles:</strong></a> The researchers developed a method they call Vi-Fi, writes the Seattle Post-Intelligencer's Todd Bishop, which allows a system to maintain connections with several base stations at once, using a primary access point for traffic until a discontinuity is predicted or encountered. This allows seamless handoffs and continuous voice conversations. </p>

<p><a href="http://www.nytimes.com/2008/08/24/technology/24digi.html?_r=1&oref=slogin"><strong>Speaking of autos and Wi-Fi, concerns raised about Chrysler's in-car Wi-Fi option:</strong></a> Randall Stross wrote nearly two weeks ago in The New York Times about the problem of distraction. With the Internet at your fingertips, can you restrain yourself? The only problem with the humorous and accurate analysis is that millions of business travelers have 3G access via laptop cards already, so you'd think we'd already be seeing the bad effects of automotive area networks.</p>

<p><a href="http://www.omaha.com/index.php?u_page=2798&u_sid=10415031"><strong>A Wi-Fi booster can't post availability signs on highway:</strong></a> The Nebraska town of Louisville has free Wi-Fi downtown, and wanted to post "Visitor Wi-Fi" on a highway sign as another amenity. The state highway department has a policy that doesn't allow the promotion of Wi-Fi, because they believe they'd be inundated. A resident who runs a local Internet firm installed his own signs on the highway; the roads department removed them; he remounted them; they were removed again. The idea of zoning and mounting a billboard apparently hasn't come to the city officials' minds (or perhaps they're prohibited).</p>

<p><a href="http://www.lisburntoday.co.uk/news/PRIMARY-PULLS-PLUG-ON-WIFI.4435678.jp"><strong>The folks spreading misinformation about Wi-Fi health effects cause Ulster school to disable network:</strong></a> I can understand why non-technical folks might think that Wi-Fi has been proven to be unsafe, given the kind of information that's available on the Internet about wireless safety. While there are ongoing studies about the safety of cellular signals--and I'm convinced at this point there's no increased risk to an adult's health by using a cell phone--there is no specific and credible research linked to Wi-Fi, which broadcasts signals at a far lower level than a cell phone, most of the time in most uses.</p>

<p><a href="http://blog.seattlepi.nwsource.com/thebigblog/archives/147374.asp"><strong>Washington state shuts down rest-area Wi-Fi:</strong></a> The $3 for 15 minutes, $7 per day, or $30 per month Wi-Fi service at 28 of Washington's 42 rest areas has been turned off after a year for lack of use. Figures. The fees charged by Parsons and Road Connect aren't unreasonable for a nationally scoped plan, but are ridiculous for limited use. States should either bite the bullet and offer these service for free, partner with national roaming operators who can resell service into large networks of business travelers, or use ads to support the service. Highways in remote areas can typically pick up cell data networks, and ongoing costs should be minimal to operate such networks.</p>

<p><a href="http://www.techworld.com/news/index.cfm?RSS&NewsID=103501"><strong>IEEE approves fast-roaming standard, 802.11r:</strong></a> This new standard is designed to improve the handoff of devices between base stations. This is accomplished in part by allowing base stations to communicate security and quality of service information so that a VoIP over WLAN phone can immediately reassociate without the delay of authentication and other handshaking.</p>

<p><a href="http://www.marketwatch.com/news/story/freefi-networks-releases-figures-wi-fi/story.aspx?guid={5252EF0E-2563-42B7-8A95-2F893580E6F6}&dist=hppr"><strong>Denver airport sees 7,000 connections on a single day last week due to Democratic National Convention:</strong></a> FreeFi released the usage figures recently to show how their service is operating. The network started with about 600 daily users when the switchover from fee to free happened 10 months ago, and now carries about 3,500 daily connections.</p>

<p><a href="http://www.centredaily.com/living/travel/story/804003.html"><strong>Coffee Bean & Tea Leaf goes free:</strong></a> The chain of about 700 cafes will have free Wi-Fi installed by now in all its company-owned stores (about 300).</p>]]></content:encoded>
      <pubDate>Tue, 02 Sep 2008 10:55:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/free wi-fi">free wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/in-car wi-fi option">in-car wi-fi option</category>
      <category domain="http://securityratty.com/tag/wi-fi handoff">wi-fi handoff</category>
      <category domain="http://securityratty.com/tag/free wi-fi downtown">free wi-fi downtown</category>
      <category domain="http://securityratty.com/tag/month wi-fi service">month wi-fi service</category>
      <category domain="http://securityratty.com/tag/rest-area wi-fi">rest-area wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi booster">wi-fi booster</category>
      <category domain="http://securityratty.com/tag/in-flight wi-fi service">in-flight wi-fi service</category>
      <source url="http://wifinetnews.com/archives/008428.html">While I Was Out: Compendium of the Last Week's News</source>
    </item>
    <item>
      <title><![CDATA[Network failure delays flights across U.S.]]></title>
      <link>http://securityratty.com/article/3ae8d8161ff688b918f55bc632df4eaf</link>
      <guid>http://securityratty.com/article/3ae8d8161ff688b918f55bc632df4eaf</guid>
      <description><![CDATA[A network failure at a Georgia facility is being blamed for multiple flight delays across the eastern United States, including flights departing from major Northeastern cities such as Boston, New York...]]></description>
      <content:encoded><![CDATA[A network failure at a Georgia facility is being blamed for multiple flight delays across the eastern United States, including flights departing from major Northeastern cities such as Boston, New York and Washington, D.C.]]></content:encoded>
      <pubDate>Mon, 25 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network failure">network failure</category>
      <category domain="http://securityratty.com/tag/major northeastern cities">major northeastern cities</category>
      <category domain="http://securityratty.com/tag/multiple flight delays">multiple flight delays</category>
      <category domain="http://securityratty.com/tag/georgia facility">georgia facility</category>
      <category domain="http://securityratty.com/tag/flights">flights</category>
      <category domain="http://securityratty.com/tag/boston">boston</category>
      <category domain="http://securityratty.com/tag/washington">washington</category>
      <category domain="http://securityratty.com/tag/york">york</category>
      <category domain="http://securityratty.com/tag/eastern">eastern</category>
      <source url="http://www.networkworld.com/news/2008/082608-faa-delays.html?fsrc=rss-security">Network failure delays flights across U.S.</source>
    </item>
    <item>
      <title><![CDATA[Social Security Numbers Displayed On Maryland Courts Website]]></title>
      <link>http://securityratty.com/article/3673e83b82a7929a886ca9493f5a2ee9</link>
      <guid>http://securityratty.com/article/3673e83b82a7929a886ca9493f5a2ee9</guid>
      <description><![CDATA[Drivers in Virginia and Washington, D.C. whose drivers licenses have their Social Security numbers and who got traffic tickets in Maryland will find those numbers and other personal information on a...]]></description>
      <content:encoded><![CDATA[Drivers in Virginia and Washington, D.C. whose driver&#8217;s licenses have their Social Security numbers and who got traffic tickets in Maryland will find those numbers and other personal information on a Maryland state Web site. Maryland has never used Social Security numbers when issuing driver’s licenses, but Virginia and the District have.
Traffic citations are listed [...]]]></content:encoded>
      <pubDate>Wed, 13 Aug 2008 12:41:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/social security">social security</category>
      <category domain="http://securityratty.com/tag/maryland">maryland</category>
      <category domain="http://securityratty.com/tag/drivers">drivers</category>
      <category domain="http://securityratty.com/tag/drivers licenses">drivers licenses</category>
      <category domain="http://securityratty.com/tag/virginia">virginia</category>
      <category domain="http://securityratty.com/tag/traffic citations">traffic citations</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/web site">web site</category>
      <category domain="http://securityratty.com/tag/traffic tickets">traffic tickets</category>
      <source url="http://cyberinsecure.com/social-security-numbers-displayed-on-maryland-courts-website/">Social Security Numbers Displayed On Maryland Courts Website</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Boingo Expands to Dulles, Reagan; HP Buys Colubris]]></title>
      <link>http://securityratty.com/article/bf4c344b29225f02ac5e0b333132500e</link>
      <guid>http://securityratty.com/article/bf4c344b29225f02ac5e0b333132500e</guid>
      <description><![CDATA[Boingo Wireless's airport wireless division brings service to Washington's two airports: Dulles and Reagan (National) offer Wi-Fi under the regular terms. These airports carry 24m and 18m passengers,...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://biz.yahoo.com/bw/080812/20080812005136.html?.v=1"><strong>Boingo Wireless's airport wireless division brings service to Washington's two airports:</strong></a> Dulles and Reagan (National) offer Wi-Fi under the regular terms. These airports carry 24m and 18m passengers, respectively, each year. It's $5/hr, $8/24 hours, and $22/month (no contract commitment) for US access, and $39/mo for worldwide access (no contract commitment). The company isn't the exclusive operator, but appears as one of three Wi-Fi network choices when you're in the airport.</p>

<p><a href="http://money.cnn.com/news/newsfeeds/articles/djf500/200808121051DOWJONESDJONLINE000381_FORTUNE5.htm"><strong>HP buys Colubris:</strong></a> Colubris was an early wireless LAN company, making sophisticated hardware for the enterprise, but I've seen its market and products shift across many markets over several years, including hotspot offerings. I'd lost track of them in recent years, although this story says that the firm refocused on service providers rather than corporations. HP will integrate Colubris into ProCurve, which will compete more effectively against Cisco. A few years ago, there were beaucoup WLAN switch operators, each with somewhat different approaches and offerings. Airespace was bought by Cisco, Trapeze more recently by Belden, and Aruba went public.</p>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 08:05:30 +0000</pubDate>
      <category domain="http://securityratty.com/tag/buys colubris">buys colubris</category>
      <category domain="http://securityratty.com/tag/colubris">colubris</category>
      <category domain="http://securityratty.com/tag/contract commitment">contract commitment</category>
      <category domain="http://securityratty.com/tag/airports carry 24m">airports carry 24m</category>
      <category domain="http://securityratty.com/tag/airports">airports</category>
      <category domain="http://securityratty.com/tag/company">company</category>
      <category domain="http://securityratty.com/tag/wireless lan company">wireless lan company</category>
      <category domain="http://securityratty.com/tag/wi-fi network choices">wi-fi network choices</category>
      <category domain="http://securityratty.com/tag/hotspot offerings">hotspot offerings</category>
      <source url="http://wifinetnews.com/archives/008417.html">Wee-Fi: Boingo Expands to Dulles, Reagan; HP Buys Colubris</source>
    </item>
    <item>
      <title><![CDATA[UK Electronic Passport Cloned]]></title>
      <link>http://securityratty.com/article/6a81d22ed8789bb1273fb4d5796cb199</link>
      <guid>http://securityratty.com/article/6a81d22ed8789bb1273fb4d5796cb199</guid>
      <description><![CDATA[The headline says it all: &quot;Fakeproof e-passport is cloned in minutes
Does this surprise anyone? This is what I wrote about electronic passports two years ago in The Washington Post : The other...]]></description>
      <content:encoded><![CDATA[<p>The <a href="http://www.timesonline.co.uk/tol/news/uk/crime/article4467106.ece">headline</a> says it all: "‘Fakeproof’ e-passport is cloned in minutes."</p>

<p>Does this surprise anyone?  <a href="http://www.washingtonpost.com/wp-dyn/content/article/2006/09/15/AR2006091500923.html">This</a> is what I wrote about electronic passports two years ago in <i>The Washington Post</i>:</p>

<blockquote>The other security mechanisms are also vulnerable, and several security researchers have already discovered flaws. One found that he could identify individual chips via unique characteristics of the radio transmissions. Another successfully cloned a chip. The State Department called this a "meaningless stunt," pointing out that the researcher could not read or change the data. But the researcher spent only two weeks trying; the security of your passport has to be strong enough to last 10 years.

<p>This is perhaps the greatest risk. The security mechanisms on your passport chip have to last the lifetime of your passport. It is as ridiculous to think that passport security will remain secure for that long as it would be to think that you won't see another security update for Microsoft Windows in that time. Improvements in antenna technology will certainly increase the distance at which they can be read and might even allow unauthorized readers to penetrate the shielding.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=WxEtPK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=WxEtPK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=LKjanK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=LKjanK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 07 Aug 2008 02:11:52 +0000</pubDate>
      <category domain="http://securityratty.com/tag/passport">passport</category>
      <category domain="http://securityratty.com/tag/passport chip">passport chip</category>
      <category domain="http://securityratty.com/tag/fakeproof e-passport">fakeproof e-passport</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/passport security">passport security</category>
      <category domain="http://securityratty.com/tag/security researchers">security researchers</category>
      <category domain="http://securityratty.com/tag/security mechanisms">security mechanisms</category>
      <category domain="http://securityratty.com/tag/chip">chip</category>
      <category domain="http://securityratty.com/tag/antenna technology">antenna technology</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/uk_electronic_p.html">UK Electronic Passport Cloned</source>
    </item>
    <item>
      <title><![CDATA[A Step Inside the Guerilla CISOs Mind]]></title>
      <link>http://securityratty.com/article/64eaec4e660fa09813aba8382cbea7b4</link>
      <guid>http://securityratty.com/article/64eaec4e660fa09813aba8382cbea7b4</guid>
      <description><![CDATA[I toyed for several years about making an infosec hall of shame. Like seriously, I already had some candidates, you know who most of them are, its the same as the Washington Post Front-Page Metric
...]]></description>
      <content:encoded><![CDATA[<p>I toyed for several years about making an infosec hall of shame.  Like seriously, I already had some candidates, you know who most of them are, it&#8217;s the same as the <a href="http://www.guerilla-ciso.com/archives/346" target="_blank">Washington Post Front-Page Metric</a>.</p>
<p style="text-align: center;"><img src="http://farm4.static.flickr.com/3133/2307038533_857e37f8a5.jpg?v=0" alt="Hall of Fame, Hall of Shame" width="189" height="141" /></p>
<p style="text-align: center;"><em>Hall of Fame, Hall of Shame photo by </em><a href="http://www.flickr.com/photos/ulikleafar/" target="_blank"><em>leafar</em></a><em>.</em></p>
<p style="text-align: left;">And my friends and I had some other nummy tidbits from our travels out and about, doing this stuff in the place where theory meets the realities of implementation.</p>
<p style="text-align: left;">Now if you look around on The Guerilla CISO, you&#8217;ll find that I don&#8217;t have a Hall of Shame.  I eventually decided not to have one after much deliberation, and the reason is this:  If you have key decision-makers that are removed or abstracted from the impacts of the decisions that they make, it is not fair to publicly humiliate the people who have to live with the implementation of the decisions.</p>
<p style="text-align: left;">And for better or worse, that&#8217;s the way the Government&#8217;s security model (and many other things) works.</p>
<!-- Social Bookmarks BEGIN --><div class="social_bookmark"><em>Bookmark to:</em><br /><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://del.icio.us/post?url=http://www.guerilla-ciso.com/archives/441&amp;title=A+Step+Inside+the+Guerilla+CISO%26%238217%3Bs+Mind" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Del.icio.us"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/delicious.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Del.icio.us" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Del.icio.us" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://digg.com/submit?phase=2&amp;url=http://www.guerilla-ciso.com/archives/441&amp;title=A+Step+Inside+the+Guerilla+CISO%26%238217%3Bs+Mind" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to digg"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/digg.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to digg" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to digg" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://reddit.com/submit?url=http://www.guerilla-ciso.com/archives/441&amp;title=A+Step+Inside+the+Guerilla+CISO%26%238217%3Bs+Mind" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to reddit"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/reddit.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to reddit" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to reddit" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://feedmelinks.com/categorize?from=toolbar&amp;op=submit&amp;name=A+Step+Inside+the+Guerilla+CISO%26%238217%3Bs+Mind&amp;url=http://www.guerilla-ciso.com/archives/441&amp;version=0.7" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Feed Me Links"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/feedmelinks.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Feed Me Links" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Feed Me Links" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://www.technorati.com/faves?add=http://www.guerilla-ciso.com/archives/441" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Technorati"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/technorati.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Technorati" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Technorati" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://myweb2.search.yahoo.com/myresults/bookmarklet?u=http://www.guerilla-ciso.com/archives/441&amp;t=A+Step+Inside+the+Guerilla+CISO%26%238217%3Bs+Mind" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Yahoo My Web"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/yahoo_myweb.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Yahoo My Web" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Yahoo My Web" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://www.stumbleupon.com/refer.php?url=http://www.guerilla-ciso.com/archives/441&amp;title=A+Step+Inside+the+Guerilla+CISO%26%238217%3Bs+Mind" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Stumble Upon"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/stumbleupon.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Stumble Upon" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Stumble Upon" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://www.google.com/bookmarks/mark?op=edit&amp;output=popup&amp;bkmk=http://www.guerilla-ciso.com/archives/441&amp;title=A+Step+Inside+the+Guerilla+CISO%26%238217%3Bs+Mind" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Google Bookmarks"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/google.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Google Bookmarks" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Google Bookmarks" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://www.squidoo.com/lensmaster/bookmark?http://www.guerilla-ciso.com/archives/441" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Squidoo"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/squidoo.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Squidoo" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Squidoo" /></a><a class="social_img" onclick="window.open(this.href, '_blank', 'scrollbars=yes,menubar=no,height=600,width=750,resizable=yes,toolbar=no,location=no,status=no'); return false;" href="http://www.bloglines.com/sub/http://www.guerilla-ciso.com/archives/441" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Bloglines"><img src="http://www.guerilla-ciso.com/wp-content/plugins/social_bookmarks/bloglines.png" border="0" title="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Bloglines" alt="Add 'A Step Inside the Guerilla CISO&#8217;s Mind' to Bloglines" /></a></div>
<!-- Social Bookmarks END --><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/TheGuerillaCiso?a=6rKBbJ"><img src="http://feeds.feedburner.com/~f/TheGuerillaCiso?i=6rKBbJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/TheGuerillaCiso?a=Ky5fWj"><img src="http://feeds.feedburner.com/~f/TheGuerillaCiso?i=Ky5fWj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGuerillaCiso/~4/351642743" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 31 Jul 2008 11:33:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/infosec hall">infosec hall</category>
      <category domain="http://securityratty.com/tag/hall">hall</category>
      <category domain="http://securityratty.com/tag/shame">shame</category>
      <category domain="http://securityratty.com/tag/shame photo">shame photo</category>
      <category domain="http://securityratty.com/tag/governments security model">governments security model</category>
      <category domain="http://securityratty.com/tag/guerilla ciso">guerilla ciso</category>
      <category domain="http://securityratty.com/tag/implementation">implementation</category>
      <category domain="http://securityratty.com/tag/decisions">decisions</category>
      <category domain="http://securityratty.com/tag/nummy tidbits">nummy tidbits</category>
      <source url="http://feeds.feedburner.com/~r/TheGuerillaCiso/~3/351642743/441">A Step Inside the Guerilla CISOs Mind</source>
    </item>
    <item>
      <title><![CDATA[Long Island Proposal Snags Again, on Poles]]></title>
      <link>http://securityratty.com/article/479733758aebc5a0eefa89ed8a473de2</link>
      <guid>http://securityratty.com/article/479733758aebc5a0eefa89ed8a473de2</guid>
      <description><![CDATA[Long Island proposal still mired: The plan to put Wi-Fi up across two Long Island counties has seemed doomed to me from the start. The company that won the bid was untested, and its other...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.newsday.com/news/local/ny-liwifi0728,0,7393890.story?track=rss"><strong>Long Island proposal still mired:</strong></a> The plan to put Wi-Fi up across two Long Island counties has seemed doomed to me from the start. The company that won the bid was untested, and its other in-deployment or in-proposal networks are off the table. Expertise aside, it needs tens of millions to build such a network, and financing for company-funded metro-scale projects is not available. The counties involved have pledged no purchases of services. And, perhaps the final stroke, the local utility says that E-Path doesn't meet the test of being a telecom and paying less than $10 per year for pole placement, but instead must pay the all-comer rate of $50 per year.</p>

<p>This is a critical distinction. Telecoms are covered under the Telecom Act of 1996 that requires non-discriminatory access to utility poles to avoid incumbent local exchange carriers (ILECs) and utilities from being gatekeepers that prevent competitive service from emerging. There are a series of tests in the law and local qualifications, too, that allow a firm to be a registered telecom. An FCC decision last year ruled that companies that mix telecom and unregulated information services on the same wires aren't disqualified from getting the Telecom Act deal, however. </p>

<p>But E-Path seems to meet none of the criteria except their desire to pay $10 instead of $50 per year per pole. Utility poles have held up many other municipal networks. We're not hearing more about them these days because such networks are now being built on a smaller scale for different purposes, where the number of nodes and their placement is rather different than networks built with the intent of providing indoor coverage.</p>

<p>Cablevision, by the way, qualifies as a telecom, this article states, which helps them in placing nodes for their planned $300m network across their coverage territory. They can also mount nodes in-line with their cable lines, using power from their cable plant on the lines already.</p>

<p>E-Path appears to have a variety of communication problems as well. The article notes, "Tortoretti said his Washington, D.C., attorneys disagree with LIPA's interpretation. But the attorney Tortoretti said represents E-Path, Charles Rohe, said he couldn't speak about the company or the dispute."</p>

<p>Later, E-Path's "chief executive said he hopes the county will help with his LIPA dispute." But an aide to the Suffolk County executive said, "That's not really our issue. That's out of our control."</p>

<p>Correspondent Craig Plunkett, quoted near the end, points out that if the counties were to change their minds and want to buy services on the network, the proposal would have to be rebid (appears as the sound-alike "rebuild" by accident in the online article at this moment).</p>]]></content:encoded>
      <pubDate>Mon, 28 Jul 2008 07:07:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/telecom act">telecom act</category>
      <category domain="http://securityratty.com/tag/telecom act deal">telecom act deal</category>
      <category domain="http://securityratty.com/tag/telecom">telecom</category>
      <category domain="http://securityratty.com/tag/proposal">proposal</category>
      <category domain="http://securityratty.com/tag/island proposal">island proposal</category>
      <category domain="http://securityratty.com/tag/e-path">e-path</category>
      <category domain="http://securityratty.com/tag/networks">networks</category>
      <category domain="http://securityratty.com/tag/represents e-path">represents e-path</category>
      <category domain="http://securityratty.com/tag/municipal networks">municipal networks</category>
      <source url="http://wifinetnews.com/archives/008403.html">Long Island Proposal Snags Again, on Poles</source>
    </item>
    <item>
      <title><![CDATA[Are the Inmates Running the Jails in Maryland?]]></title>
      <link>http://securityratty.com/article/7a0898f4cc7afa75149ce8450c4807bf</link>
      <guid>http://securityratty.com/article/7a0898f4cc7afa75149ce8450c4807bf</guid>
      <description><![CDATA[The front page of today's Washington Post tells us that the Prince George's Facility has come under scrutiny after the sudden death of Police murder suspect, Ronnie L. White

The Post lists a number...]]></description>
      <content:encoded><![CDATA[The front page of today's Washington Post tells us that the Prince George's Facility has come under scrutiny after the sudden death of Police murder suspect, Ronnie L. White.  <br /><span id="fullpost"><br />The Post lists a number of correction officers who have been investigated, suspended and even jailed for wrong doings.  One 13 year veteran was convicted on second degree assault after he beat a woman so badly that he broke her rib.  That was not his first violent outburst however.  In the late '90s his then wife had to get three protective orders issued against him.  <br /><br />In 2004, he pleaded guilty to breaking a woman's rib. The woman whose rib he broke was pregnant with his child.  A judge put him on probation for that assault and ordered him to take anger management classes.  The child that the woman was carrying was not so lucky.  She miscarried days afer the beating. <br /></span><br />The jail which incarcerates 1500 inmates, is said to be overcrowded by Government reports.  The jail was built to hold 1330 inmates.  One hundred and seventy extra inmates is hardly a serious "overcrowding" problem.  The reported number of correction officers at 450, means that the ratio of imates to officers is not even 4:1.  Compare that to a place like Riker's Island in New York City where the ratio of inmates to officers is probably closer to 25:1 and you will see that the officers in Maryland should not have many reasons to complain.  <br /><br />Of course, they should not have any reason to break the law either, but they do.  Take the case of Renardo Humphrey, for instance.  He was jailed this week after being convicted of armed robbery.  Along with four others, he held up a couple of teenagers.  Then there is Officer Kenneth Paul St. Clair, who joined the Department in 2004.  This oxygen thief was convicted of second degree child abuse involving an 11 month old baby boy.  <br /><br />According to Police reports, the baby suffered multiple rib fractures, a skull fracture, internal bleeding, bruises on his face, chest, forehead and a bite mark on his shoulder.  If I ever receive a call from a telemarketer tying to solicit money from me to support the fine upstanding members of the Prince George's Correction Department, I will make sure I tell him the story of the the little baby boy that was brutalized by one of his clients.<br /><br />You may wonder why supervisors do not take more action and do not closely monitor the staff who apparently have a lot of anger management problems.  Some Departments admitted that they only do background checks when officers are going for promotion.  Therfore, if an officer is prone to beating up little babies and pregnant women, he just might go about his merry way without ever coming to notice - just so long as he does not seek promotion.  <br /><br />It would seem that all is not well with the Maryland Penal system.  Perhaps a good overhaul is called for.  It is not too much for society to expect that those who are entrusted with great authority do not abuse that authority.  If they do and start behaving like those who have been removed from society, then they too should suffer the same fate.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sat, 26 Jul 2008 00:29:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/officers">officers</category>
      <category domain="http://securityratty.com/tag/correction officers">correction officers</category>
      <category domain="http://securityratty.com/tag/maryland">maryland</category>
      <category domain="http://securityratty.com/tag/multiple rib fractures">multiple rib fractures</category>
      <category domain="http://securityratty.com/tag/rib">rib</category>
      <category domain="http://securityratty.com/tag/baby">baby</category>
      <category domain="http://securityratty.com/tag/baby boy">baby boy</category>
      <category domain="http://securityratty.com/tag/anger management classes">anger management classes</category>
      <category domain="http://securityratty.com/tag/anger management">anger management</category>
      <source url="http://www.thebulletproofblog.com/2008/07/are-inmates-running-jails-in-maryland.html">Are the Inmates Running the Jails in Maryland?</source>
    </item>
  </channel>
</rss>
