<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: wholesale]]></title>
    <link>http://securityratty.com/tag/wholesale</link>
    <description></description>
    <pubDate>Wed, 02 Apr 2008 09:32:53 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Second hacker in TJX case pleads guilty]]></title>
      <link>http://securityratty.com/article/cc2cdfbd8f504dcec15ba0c58426466d</link>
      <guid>http://securityratty.com/article/cc2cdfbd8f504dcec15ba0c58426466d</guid>
      <description><![CDATA[One of the major players in the massive hacking incidents at TJX Companies Inc., BJ Wholesale Clubs Inc. and other retailers Monday pleaded guilty to identity theft and other felony charges in federal...]]></description>
      <content:encoded><![CDATA[One of the major players in the massive hacking incidents at TJX Companies Inc., BJ Wholesale Clubs Inc. and other retailers Monday pleaded guilty to identity theft and other felony charges in federal court in Boston.]]></content:encoded>
      <pubDate>Thu, 25 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tjx companies">tjx companies</category>
      <category domain="http://securityratty.com/tag/felony charges">felony charges</category>
      <category domain="http://securityratty.com/tag/wholesale clubs">wholesale clubs</category>
      <category domain="http://securityratty.com/tag/identity theft">identity theft</category>
      <category domain="http://securityratty.com/tag/retailers monday">retailers monday</category>
      <category domain="http://securityratty.com/tag/major players">major players</category>
      <category domain="http://securityratty.com/tag/federal court">federal court</category>
      <category domain="http://securityratty.com/tag/guilty">guilty</category>
      <category domain="http://securityratty.com/tag/boston">boston</category>
      <source url="http://www.networkworld.com/news/2008/092408-second-hacker-in-tjx-case.html?fsrc=rss-security">Second hacker in TJX case pleads guilty</source>
    </item>
    <item>
      <title><![CDATA[Second hacker in TJX case pleads guilty]]></title>
      <link>http://securityratty.com/article/678a16f4bc424b8063007dc052af15a5</link>
      <guid>http://securityratty.com/article/678a16f4bc424b8063007dc052af15a5</guid>
      <description><![CDATA[One of the major players in the massive hacking incidents at TJX Companies Inc., BJ Wholesale Clubs Inc. and other retailers pleaded guilty to identity theft and other felony fraud charges in federal...]]></description>
      <content:encoded><![CDATA[One of the major players in the massive hacking incidents at TJX Companies Inc., BJ Wholesale Clubs Inc. and other retailers pleaded guilty to identity theft and other felony fraud charges in federal court in Boston.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:d76a38c1785e664b3d88947df62adfe1:Dsns3e5Zp0xSJbnQK3WZIRutAWF5dfT41VYFpI7YcF%2F0RKa%2FTN%2BUe9VtAlltq%2F6BaOMAmiCMQwOfnRr0F98dBjW8qGHC7BQ4xVi%2F4lPRiH4%3D'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:3394465ae41af7a9734b3dbbaf3d2289:WODh0ugyevh6p6ynC4vD%2FIAarZTY1xiMdC63QG481q1EbfRjflSPWxjjukR%2F0zxNyO3djC1md2c7vRfu5803ppCaVPENxdPQiIcyTsIEYDo%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:331726513507f572c173353c12d71f8f:%2F5zlg2wDEBVx0KwmYs7brQaNeSCa7kWaVWv5Xq4156trmNz9bjh1%2BftdzD%2B%2BQnPiIQzMt%2FqMDLjAkjVm71veoPYqmU6SyKZGS0yGVFYxgJo%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:4c4652c9226eeb4d598cdfab29810df3:0fN1GjNj3e3oFbfTJNKslOCDEHZt815IejHIOcIqCvG5jBIUy1waPETeUrtT%2BfzSzErK2Xu13dI2Grivh4VcLBKjYTNhQECX9nYccwayfDE%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=faf11033d7e73d1b1a33e09cffb290fa" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=faf11033d7e73d1b1a33e09cffb290fa" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Wed, 24 Sep 2008 00:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/felony fraud charges">felony fraud charges</category>
      <category domain="http://securityratty.com/tag/tjx companies">tjx companies</category>
      <category domain="http://securityratty.com/tag/wholesale clubs">wholesale clubs</category>
      <category domain="http://securityratty.com/tag/identity theft">identity theft</category>
      <category domain="http://securityratty.com/tag/major players">major players</category>
      <category domain="http://securityratty.com/tag/guilty">guilty</category>
      <category domain="http://securityratty.com/tag/federal court">federal court</category>
      <category domain="http://securityratty.com/tag/boston">boston</category>
      <category domain="http://securityratty.com/tag/retailers">retailers</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=faf11033d7e73d1b1a33e09cffb290fa">Second hacker in TJX case pleads guilty</source>
    </item>
    <item>
      <title><![CDATA[Man accused in TJX data breach pleads guilty]]></title>
      <link>http://securityratty.com/article/86fa58e3a1edee261666cb9a0d35b9e8</link>
      <guid>http://securityratty.com/article/86fa58e3a1edee261666cb9a0d35b9e8</guid>
      <description><![CDATA[One of the 11 people arrested last month in connection with the massive data theft at TJX Companies Inc., BJ Wholesale Clubs Inc. and several other retailers pleaded guilty Thursday to four felony...]]></description>
      <content:encoded><![CDATA[One of the 11 people arrested last month in connection with the massive data theft at TJX Companies Inc., BJ Wholesale Clubs Inc. and several other retailers pleaded guilty Thursday to four felony counts including wire and credit card fraud and aggravated identity theft.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=48580?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=48580?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Sat, 13 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/credit card fraud">credit card fraud</category>
      <category domain="http://securityratty.com/tag/massive data theft">massive data theft</category>
      <category domain="http://securityratty.com/tag/tjx companies">tjx companies</category>
      <category domain="http://securityratty.com/tag/felony counts">felony counts</category>
      <category domain="http://securityratty.com/tag/guilty thursday">guilty thursday</category>
      <category domain="http://securityratty.com/tag/wholesale clubs">wholesale clubs</category>
      <category domain="http://securityratty.com/tag/identity theft">identity theft</category>
      <category domain="http://securityratty.com/tag/retailers">retailers</category>
      <category domain="http://securityratty.com/tag/connection">connection</category>
      <source url="http://www.networkworld.com/news/2008/091208-man-accused-in-tjx-data.html?fsrc=rss-security">Man accused in TJX data breach pleads guilty</source>
    </item>
    <item>
      <title><![CDATA[Petroleum Wholesale charged with exposing customers]]></title>
      <link>http://securityratty.com/article/1e0eee4c18853dda51b902995e1d952a</link>
      <guid>http://securityratty.com/article/1e0eee4c18853dda51b902995e1d952a</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
6/19/08

Organization
Petroleum Wholesale, L. P

Contractor/Consultant/Branch
None

Victims
Customers

Number Affected
Unknown

Types of Data
sensitive...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/pw.jpg" width="200" align="right" height="93"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>6/19/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.petroleumwholesale.com/sunmart.web/homepage.html">Petroleum Wholesale, L. P.</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>"sensitive personal information, including Social Security numbers, bank account numbers, and credit or debit card information"<br><br><span style="font-weight: bold;">Breach Description:</span><br>”HOUSTON -- Petroleum Wholesale, which operated Sunmart Travel Centers and Convenience Stores in 10 states, was charged by the Texas Attorney General of improperly disposing of customer records"<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.hcnonline.com/site/news.cfm?newsid=19788139&amp;BRD=1574&amp;PAG=461&amp;dept_id=532238&amp;rfi=6">The Pasadena Citizen</a> <br><a href="http://www.khou.com/news/local/crime/stories/khou080619_jj_storeid.1c30dcf3.html">KHOU-TV Channel 11 News</a> <br><a href="http://www.csnews.com/csn/news/article_display.jsp?vnu_content_id=1003819492">Convenience Store News</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>The Pasadena Citizen<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>HOUSTON - Texas Attorney General Greg Abbott today charged Houston-based Petroleum Wholesale, L.P., which operates Sunmart Travel Centers &amp; Convenience Stores in 10 states, for exposing its customers to identity theft.<br><br>According to the state's enforcement action, Petroleum Wholesale improperly discarded customer records containing sensitive personal information, including Social Security numbers, bank account numbers, and credit or debit card information.<br><br>"This defendant is charged with failing to protect its customers' sensitive information," Attorney General Abbott said.<br><br>"With more than 20,000 Texas victims each year, identity theft remains one of the nation's fastest-growing crimes. The Office of the Attorney General will continue working to protect Texans from identity theft."<br><br>Investigators with the Office of the Attorney General (OAG) discovered that the company improperly discarded hundreds of customer records in a publicly-accessible trash container outside its former headquarters.<br><span style="font-style: italic;">[Evan] According to information posted on the Petroleum Wholesale web site, "Petroleum Wholesale services more than 350 retail locations throughout ten states."&nbsp; This breach has the potential to affect many, many people.</span><br><br>According to investigators, the records included sales receipts with customers' names and full credit or debit card numbers with expiration dates.<br><br>The records also included returned checks, along with forms listing customers' names, banking routing numbers, driver's license and Social Security numbers.<br><br>The defendant is charged with violating the 2005 Identity Theft Enforcement and Protection Act, which requires the safeguarding and proper destruction of clients' sensitive personal information.<br><br>State law establishes penalties of up to $50,000 per violation of the Act.<br><span style="font-style: italic;">[Evan] This could add up quick.&nbsp; What's a better business decision, a few hundred bucks for a cross-cut shredder and accompanying procedures, or fifty grand per incident?&nbsp; Although, I am not sure that a shredder and procedures are not all that is needed in Petroleum Wholesale's information security program (assuming one exists).</span><br><br>The OAG also charged the company with violating Chapter 35 of the Business and Commerce Code, which requires businesses to develop retention and disposal procedures for their clients' personal information.<br><br>The law provides for civil penalties of up to $500 for each abandoned record.<br><br>For more information about preventing identity theft, contact the Office of the Attorney General at (800) 252-8011 or visit the agency's Web site at <a href="http://www.texasattorneygeneral.gov.<br><br><span">www.texasattorneygeneral.gov.<br><br><span</a> style="font-weight: bold;">Commentary:</span><br>One question that isn't clear from the news reports is whether or not this was a common practice at Petroleum Wholesale.&nbsp; Organizations should take heed of this case.&nbsp; I think actions taken by Mr. Abbott and other State Attorney Generals will only become more frequent.<br><br>I look forward to more information in the future about this case. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/06/22/pw.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Sun, 22 Jun 2008 17:58:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/sensitive personal information">sensitive personal information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/petroleum wholesale">petroleum wholesale</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/company">company</category>
      <category domain="http://securityratty.com/tag/company improperly">company improperly</category>
      <category domain="http://securityratty.com/tag/improperly">improperly</category>
      <category domain="http://securityratty.com/tag/debit card information">debit card information</category>
      <category domain="http://securityratty.com/tag/debit card">debit card</category>
      <source url="http://breachblog.com/2008/06/22/pw.aspx">Petroleum Wholesale charged with exposing customers</source>
    </item>
    <item>
      <title><![CDATA[So, CAN We Have DLP?]]></title>
      <link>http://securityratty.com/article/55f6fc8e7adf0a9b91953af0b69289cf</link>
      <guid>http://securityratty.com/article/55f6fc8e7adf0a9b91953af0b69289cf</guid>
      <description><![CDATA[Can we have DLP - data leak prevention
Well, can we have IDS? How about IPS? Can we really &quot;prevent intrusions?&quot; Can we really &quot;control access to our networks
The answer to &quot;can we have DLP?&quot; is...]]></description>
      <content:encoded><![CDATA[<p>Can we have <a href="http://chuvakin.blogspot.com/2008/05/in-passing-on-dlp.html">DLP</a> - data leak prevention? </p> <p>Well, can we have IDS? How about IPS? Can we really "prevent intrusions?" Can we really "control access to our networks?"</p> <p>The answer to "can we have DLP?" is actually pretty simple: if you think "DLP = box that prevents all data leaks" (and you also think that deploying IPS will "prevent intrusions"), then we can't. Forget it.</p> <p>But blame the idiots who called it "leak <strong>prevention</strong>" - if you think that "DLP will prevent all leaks" - sorry, but you are one of them! :-) If you treat "L" not as "leak" but as "loss" and hope that "DLP will prevent all data loss, whether intentional or not," you are an even BIGGER one.</p> <p>So rambling about <a href="http://www.networkworld.com/community/node/28864">"Can DLP Really Stop All Leaks"</a> is pretty silly. No, it can't. Pondering "<a href="http://www.computerweekly.com/blogs/stuart_king/2008/06/is-data-loss-prevention-really.html">Is DLP Possible</a>"&nbsp; is just as silly. No, complete prevention of all leaks is impossible, with OR without DLP technology. <a href="http://securityincite.com/TDI-2008-06-17#TSN1">Go read Mike R instead</a> :-)</p> <p>Why seemingly smart people behave in such childish manner? I dunno. Scratch all that. Instead ask:</p> <p><strong>Is today's <a href="http://www.nextiernetworks.com/">cutting-edge DLP technologies</a> USEFUL? </strong></p> <p>And the answer is "<strong>Hell yeah!"</strong></p> <p>If you see how much "fun" sensitive content goes over email (corp and personal web-based), gets uploaded to forums, channeled over IM file transfers, FTP'ed somewhere, you'd scream for one of these boxes. Accidental leaks, email address typos, non-malicious leaks, blatant disregard of security policy for the sake of "productivity", even phishing, "wholesale data theft" and amateur "employee hackers" probably account for 10x (100x?)&nbsp; more damage (in direct losses, brand damage, embarrassment and - yes! - non-compliance fines AND loss frequency) than "uber-hackers" (who might indeed go thru your DLP box like hot knife thru butter.) And if <a href="http://www.nextiernetworks.com/">an advanced DLP box</a> does one day stop some determined insider theft, that's just icing on the cake.</p> <p>That is why <a href="http://www.securosis.com">smart people</a> don't call it "DLP" - they call it "content monitoring and filtering." This sounds much less sexy, but much more useful. The boxes that will show up on your doorstep will still have "DLP" labels, but what they will do for you is really content monitoring and filtering.&nbsp; And even though it will not stop all data theft, DLP box will likely prove useful more than once...</p> <p>Finally, all rants about any preventative AND monitoring technologies should really end the same: <strong>go refresh your incident response plans. </strong></p> <p><strong>Possibly related posts:</strong></p> <ul> <li><a href="http://chuvakin.blogspot.com/2008/05/in-passing-on-dlp.html">"In Passing on DLP"</a></li></ul> <p>&nbsp;</p> <div class="wlWriterSmartContent" id="scid:0767317B-992E-4b12-91E0-4F059A8CECA8:b2cc045f-700a-482b-a6ec-0cf1615903c3" style="padding-right: 0px; display: inline; padding-left: 0px; padding-bottom: 0px; margin: 0px; padding-top: 0px">Technorati tags: <a href="http://technorati.com/tags/DLP" rel="tag">DLP</a>, <a href="http://technorati.com/tags/security" rel="tag">security</a>, <a href="http://technorati.com/tags/data%20loss" rel="tag">data loss</a>, <a href="http://technorati.com/tags/data%20theft" rel="tag">data theft</a>, <a href="http://technorati.com/tags/data%20protection" rel="tag">data protection</a></div>  <div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=co9oII"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=co9oII" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=AgRzgI"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=AgRzgI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=pkXrlI"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=pkXrlI" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/316563485" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 20 Jun 2008 12:59:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dlp">dlp</category>
      <category domain="http://securityratty.com/tag/cutting-edge dlp technologies">cutting-edge dlp technologies</category>
      <category domain="http://securityratty.com/tag/dlp technology">dlp technology</category>
      <category domain="http://securityratty.com/tag/dlp box">dlp box</category>
      <category domain="http://securityratty.com/tag/leak prevention">leak prevention</category>
      <category domain="http://securityratty.com/tag/leak">leak</category>
      <category domain="http://securityratty.com/tag/non-malicious leaks">non-malicious leaks</category>
      <category domain="http://securityratty.com/tag/leaks">leaks</category>
      <category domain="http://securityratty.com/tag/loss">loss</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/316563485/so-can-we-have-dlp.html">So, CAN We Have DLP?</source>
    </item>
    <item>
      <title><![CDATA[Analysis: Cotton Traders Hack A Warning For Business]]></title>
      <link>http://securityratty.com/article/e466668483b0b8b3b1318c2de31a64b0</link>
      <guid>http://securityratty.com/article/e466668483b0b8b3b1318c2de31a64b0</guid>
      <description><![CDATA[Well, a better headline might read another warning for business. Heres an analysis piece of the Cotton Traders credit card breach story that broke last week
From IT PRO
In many ways, Cotton Traders is...]]></description>
      <content:encoded><![CDATA[<p>Well, a better headline might read &#8220;another warning for business&#8221;. Here&#8217;s an analysis piece of the Cotton Trader&#8217;s credit card breach story that broke last week.</p>
<p>From IT PRO:</p>
<blockquote><p>In many ways, Cotton Traders is an ordinary, mid-sized British business. The company, which is based in Altringham, Cheshire, was founded in 1987 by two former England rugby captains, Fran Cotton and Steve Smith. Today, Cotton Traders operates a mail-order business, including online sales, a wholesale operation and a network of stores. Its turnover now exceeds £50 million. It is not involved in high finance or technology; nor is it an e-commerce pure play. It is typical of thousands of companies around the country that have used the internet to expand their sales, with some success. Its website is clean, simple and easy to use, and is designed to appeal to the mass market.</p>
<p>So if Cotton Traders could fall victim to an online criminal gang, so could almost any business that trades on the net. The security breach took place in January, although it was only confirmed by the company earlier this month, and attracted media attention over the last few days.</p></blockquote>
<p>The company maintains that the data was encrypted. for their sakes I hope that is was. I&#8217;m a little surprised of how long it took for the company to disclose this breach. It apparently took place in January and it only now has come to light. </p>
<p>Read on for the full article.</p>
<p><a href="http://www.itpro.co.uk/603714/analysis-cotton-traders-hack-a-warning-for-business">Article Link</a></p>

<p><a href="http://feeds.feedburner.com/~a/Liquidmatrix?a=goAfgd"><img src="http://feeds.feedburner.com/~a/Liquidmatrix?i=goAfgd" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=dWpxyI"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=dWpxyI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=eCOlvi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=eCOlvi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=GztZgi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=GztZgi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=NLGbOi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=NLGbOi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=ulshLi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=ulshLi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/Liquidmatrix/~4/313706126" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 17 Jun 2008 06:39:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/cotton traders">cotton traders</category>
      <category domain="http://securityratty.com/tag/mail-order business">mail-order business</category>
      <category domain="http://securityratty.com/tag/company maintains">company maintains</category>
      <category domain="http://securityratty.com/tag/company">company</category>
      <category domain="http://securityratty.com/tag/british business">british business</category>
      <category domain="http://securityratty.com/tag/sales">sales</category>
      <category domain="http://securityratty.com/tag/article link">article link</category>
      <category domain="http://securityratty.com/tag/security breach">security breach</category>
      <source url="http://feeds.feedburner.com/~r/Liquidmatrix/~3/313706126/">Analysis: Cotton Traders Hack A Warning For Business</source>
    </item>
    <item>
      <title><![CDATA[BART-Fi Moves Closer: Negotiation Under Way]]></title>
      <link>http://securityratty.com/article/b4d1f33384b09ea05ea38563bc167b00</link>
      <guid>http://securityratty.com/article/b4d1f33384b09ea05ea38563bc167b00</guid>
      <description><![CDATA[WiFi Rail gets a nod from the Bay Area Rapid Transportation (BART) authority's board: The board of the giant SF bay people mover has given a kind of tacit go-ahead for negotiations with WiFi Rail , a...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/train.jpg" align="right" border="0" hspace="5" /><strong>WiFi Rail gets a nod from the Bay Area Rapid Transportation (BART) authority's board:</strong> The board of the giant SF bay people mover has given a kind of tacit go-ahead for negotiations with <a href="http://www.wifirail.net/index.html"><strong>WiFi Rail</strong></a>, a company that has been testing a unique form of <a href="http://wifinetnews.com/archives/008153.html"><strong>delivering Wi-Fi using coaxial cable as antenna extensions</strong></a>. Cooper Lee, founder and CEO, told me that the approval lets them focus on nailing down a contract with the authority, which he believes should take just a couple of weeks, as WiFi Rail is eating the costs of the project.</p>

<p>While this may sound familiar to those following municipal Wi-Fi, this deal is substantially different: it's much more like unwiring an airport than a city, and thus the expense in unwiring should be quickly outweighed by the uptake by passengers. City-wide Wi-Fi promised 1 to 4 Mbps in most cases; WiFi Rail has tested out at 10s of Mbps--their technology turns rail segments into wireless LANs with excellent reception. They terminate with fiber all over, so aggregation and backhaul isn't an issue. And unlike an airport, where travelers might turn to 3G cell data, those solutions don't work in the underground portions of BART and many other places along the rights of way due to obstructions.</p>

<p>And this isn't a "we have a great idea, let us build it" scenario. WiFi Rail has had test projects running for nearly a year, with a segment in San Francisco active for part of that time, and those tests determined the board's interest in proceeding. WiFi Rail <a href="http://news.yahoo.com/s/pcworld/20080523/tc_pcworld/146275"><strong>told IDG News Service</strong></a> that 9,000 people have signed up for the current system and used 42,000 sessions. </p>

<p>WiFi Rail's network is currently free, and charges won't commence until the first stage is done. Lee said that fees, which will be about a dollar a day with subscriber discounts but are part of the negotiation with BART, will be charged at a 50-percent rate after the first phase is done until the whole network is complete. IDG notes that the company will be required to resell access at wholesale rates, and I expect aggregators like iPass (based in the Bay Area) and Boingo (further south in Santa Monica) will leap at reselling BART service, just as they do ferry-Fi here in the greater Puget Sound region.</p>

<p>The first route to be unwired will run from Balboa Park in San Francisco to two ends of a Y in Oakland, Lake Merritt and 19th St (see <a href="http://www.bart.gov/stations/map/systemMap.asp"><strong>system map</strong></a>). For the 180,000 regular business commuters of the system, of which WiFi Rail wants to achieve an initial 20-percent uptake among, continuous Wi-Fi service should be a godsend against boredom and overwork. Yes, I know, for some, it will mean <em>more expectation of work</em>, but for others, it's a way to be mildly productive while en route, avoiding longer hours in the office or more work at home.</p>

<p>I need to go ride the ferries here during rush hour to talk to commuters and see what usage is likely on BART. There are tens of thousands of regular ferry commuters with an average 30-minute crossing as part of a longer (45 to 90 minute) trip each way into Seattle and other communities. It's a reasonable comparison with BART both in scale and nature of passengers.</p>

<p>What say you, Californian BART riders? Do you look forward to iPod touch, iPhone, BlackBerry (with Wi-Fi), and laptop connectivity? Or do you want to stay unplugged?</p>]]></content:encoded>
      <pubDate>Fri, 23 May 2008 11:18:12 +0000</pubDate>
      <category domain="http://securityratty.com/tag/bart">bart</category>
      <category domain="http://securityratty.com/tag/wifi rail">wifi rail</category>
      <category domain="http://securityratty.com/tag/bart service">bart service</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/municipal wi-fi">municipal wi-fi</category>
      <category domain="http://securityratty.com/tag/californian bart riders">californian bart riders</category>
      <category domain="http://securityratty.com/tag/continuous wi-fi service">continuous wi-fi service</category>
      <category domain="http://securityratty.com/tag/commuters">commuters</category>
      <category domain="http://securityratty.com/tag/regular business commuters">regular business commuters</category>
      <source url="http://wifinetnews.com/archives/008330.html">BART-Fi Moves Closer: Negotiation Under Way</source>
    </item>
    <item>
      <title><![CDATA[Wayport Tops 10,000 McDonald's Locations]]></title>
      <link>http://securityratty.com/article/f8771881a38c1fc7d001b68fa32359dc</link>
      <guid>http://securityratty.com/article/f8771881a38c1fc7d001b68fa32359dc</guid>
      <description><![CDATA[Ten thousand is an arbitrary place to put a stick in the sand, but significant nonetheless: The milestone of 10,000 McDonald's wired up--a few hundred have back access only, due to being stores within...]]></description>
      <content:encoded><![CDATA[<p><strong><a href="http://www.wayport.com/NewsReleases.aspx?id=1832">Ten thousand is an arbitrary place to put a stick in the sand, but significant nonetheless:</a></strong> The milestone of 10,000 McDonald's wired up--a few hundred have back access only, due to being stores within WalMart centers--is a vindication of Wayport's long-term strategy, dating back to 2004. Wayport switched at that point from a slightly more public-faced, public-access company to one that understood that back-office operations could be just as valuable, if less sexy, than front-facing consumer networks. Dan Lowden, Wayport's long-time marketing and business development chief, said yesterday, "In a lot of these venues, the back office comes first. The Wi-Fi public access for some is a big priority, but for others it's a nice to have, great thing to have, but the priority is the back office."</p>

<p>Although several other quick-service restaurants like McDonald's lack any comprehensive Wi-Fi plan--Burger King, Wendy's, and Subway to name three of the largest--Wayport is locked out of working with direct competitors. This opens the potential for another firm to handle a several-thousand-location network. Wayport has worked with both McDonald's corporate-owned stores (about 2/3rds of stores in the U.S.), as well as reaching out to franchisees, who Lowden noted pay a predetermined flat rate for the service via McDonald's. "It's made them incredibly efficient to be able to offer this to their franchisees at one price, instead of variable pricing," he noted. Wayport acts as the layer between various telecom providers, applications and services, and the stores.</p>

<p>Wayport provides several kinds of back-office services, although credit-card processing was the first thing htey rolled out. They've extended to remote video feeds for security, Redbox DVD rental systems that are found in some McDonald's, and kiosks used for job applications. Lowden said Wayport offers things as straightforward but critical as a dial-up fail-safe when a broadband connection drops. </p>

<p>Wayport also manages AT&T's hotspot network, which puts them in the unwiring seat for the 7,000-odd Starbucks stores that will converted from T-Mobile to AT&T service during 2008. Wayport was once the clear leader in the hotspot builder market, with T-Mobile in the second position. Now, Wayport will be operating through a direct contract or management agreement over 18,000 hotspots in the U.S.; T-Mobile will likely be the second biggest with a couple thousand locations (Borders and FedEx/Kinko's tops among them). The No. 3 player is hard to figure. Panera? </p>

<p>I've been predicting for some time that media on the edge--music, videos, movies, and games stored on servers on the local Wi-Fi network--will be the next big development in venue-oriented Wi-Fi, with Starbucks likely far in the lead. Lowden wouldn't comment on any specific plans in the works, of course, but said generally, "Storing and caching all that content on the edge...hasn't been leveraged in the past, but it will be in the future to create a very unique experience." At Barnes & Noble, Wayport caches some multimedia data that's available to customers in the stores.</p>

<p>The advantage for in-store media storage is that you can leverage the speed of the local network, and add additional access points to distribute network load. The choke point is no longer the Internet connection, but local network speed. I expect--though Wayport, AT&T, and Starbucks haven't said it--that Starbucks infrastructure will be all 802.11n for this reason, likely with both 2.4 GHz and 5 GHz support for the best throughput in the higher-frequency band for media transactions. (In fact, I wouldn't be surprised if you could only buy movies via 5 GHz.)</p>

<p>Lowden also noted that the proliferation of mobile devices with Wi-Fi built in have led to them reaching out to venues that wouldn't have made sense for them to work with previously, and for unlikely candidates to reach out to them, too. Wayport is now working with a number of healthcare facilities that, while they have their own network infrastructure, wanted to outsource public access Wi-Fi (whether they choose to charge or underwrite it), and certain applications that they're not as experienced with running themselves.</p>

<p><strong>A little history:</strong> In 2001 and again in 2004, the heat seemed to be on the public side of Wi-Fi: lots of money to be made, ostensibly, lots of partnerships and venues to be built, and an overcrowded supply of infrastructure builders. The year before, Wayport looked to be an also-ran in the hotspot provider business. </p>

<p>Despite being one of the earliest firms to put Ethernet and then Wi-Fi into hotels, and build out hotspots in airports; and despite their survival of the first hotspot meltdown in 2001 during the dotcom crash and brief venture capital shortage; and despite their early entrance into allowing wholesale pricing for hotspot aggregators; the firm seemed about to be eclipsed by apparently deep-pocketed Cometa (with AT&T, IBM, and Intel in various capital and support roles), Toshiba's mom-and-pop focused turnkey system, and T-Mobile, which had the Starbucks contract. What a difference a year makes.</p>

<p>Cometa, Toshiba, and Wayport contended for the contract to build out back-office and public-access service at McDonald's in the U.S., and Wayport won. Within a few weeks, Toshiba passed its few hundred locations to Cometa, which shut its doors in May 2004. Wayport, meanwhile, had <a href="http://wifinetnews.com/archives/003377.html">cooked up a strategy</a> for McDonald's that it announced later that month. </p>

<p>Their approach involved a fixed-rate charged for unlimited access by retail network partners for all the locations in their pool. This meant that partners had a fixed cost, instead of a per-session cost, and Wayport could obtain specific revenue even before usage by a partner ramped up. Wayport hasn't discussed the details of this arrangement in depth since, but has partnered with Sony with its Mylo, Nintendo with its DS game player, and ZipIt with its wireless messaging appliance. </p>

<p>The McDonald's deal also apparently gave Wayport a way to extend its work with SBC-later-AT&T; Wayport had earlier in 2004 <a href="http://wifinetnews.com/archives/003151.html">became the managed-services contractor</a> for SBC to build out The UPS Store/Mailboxes Etc. nationwide. (UPS <a href="http://wifinetnews.com/archives/007770.html">dropped AT&T as its partner</a> in mid-2007, although that didn't appear to have anything to do with Wayport's role.)</p>

<p>AT&T through Wayport developed its large resold/managed footprint that incorporated resale of Wayport's McDonald's locations with the UPS Store and a few hundred other managed locations, including a handful of airports. The Cingular acquisition of AT&T Wireless put more airports in SBC's hands, too. (SBC was once the 60 percent majority owner of Cingular; when SBC and BellSouth, the other owner, merged that put the newly rebranded AT&T in charge of Cingular which it relabeled as AT&T. Confusing, huh?)</p>]]></content:encoded>
      <pubDate>Tue, 29 Apr 2008 05:25:32 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wayport">wayport</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/comprehensive wi-fi plan">comprehensive wi-fi plan</category>
      <category domain="http://securityratty.com/tag/local wi-fi network">local wi-fi network</category>
      <category domain="http://securityratty.com/tag/att service">att service</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/wayport offers">wayport offers</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/wayport caches">wayport caches</category>
      <source url="http://wifinetnews.com/archives/008294.html">Wayport Tops 10,000 McDonald's Locations</source>
    </item>
    <item>
      <title><![CDATA[EarthLink Shutters New Orleans, Staunches Own Losses]]></title>
      <link>http://securityratty.com/article/9705fcd4afe10a8b02f4bdfac2dd6f51</link>
      <guid>http://securityratty.com/article/9705fcd4afe10a8b02f4bdfac2dd6f51</guid>
      <description><![CDATA[The Big Easy gets a big loss with EarthLink's pullout: InformationWeek reports that EarthLink attempted to sell the network, get the city to buy it, and then to simply give the network (and its...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.informationweek.com/news/mobility/muni/showArticle.jhtml?articleID=207402189"><strong>The Big Easy gets a big loss with EarthLink's pullout:</strong></a> InformationWeek reports that EarthLink attempted to sell the network, get the city to buy it, and then to simply give the network (and its obligations) away, but had no takers on any front. </p>

<p>EarthLink <a href="http://ir.earthlink.net/secfiling.cfm?filingID=1104659-08-26319"><strong>announced its most recent quarter's earnings</strong></a> a few days ago, and they managed to turn a GAAP profit, while staunching the bleeding of so many businesses that had no short-term and seemingly little medium-term potential for net revenue. The company dramatically slashed its marketing, which they found only caused subscribers to join and quit. While revenue dropped from $290m to $235m year over year in Q1, operating costs and expenses were cut from $321m to $198m, with the most noticeable drop in sales and marketing ($99m to $31m) and operations and customer support ($60m to $39m). They recorded $58m in earnings versus a year ago's $22m loss. </p>

<p>Employees dropped from 2,108 to 922 during the period, while subscribers dropped from 5.7m to 3.6m. But it's worth noting that the biggest drop happened last year already: the 31-Dec-2007 subscriber count was 3.9m. They're making slightly more money from each of those remaining customers, and have slightly lower churn. Their municipal write-off is lower, too, as they've taken most of the expense, and have offloaded more and more of their future obligations.</p>

<p>The company still has the same problem that it had before it started unwinding its services beyond dial-up and broadband: None of its markets are expanding, and it has increasingly poor access to reasonably priced broadband to resell to customers, as no cable or DSL providers are obligated to provide true wholesale rates.<br />
</p>]]></content:encoded>
      <pubDate>Fri, 25 Apr 2008 11:52:07 +0000</pubDate>
      <category domain="http://securityratty.com/tag/earthlink">earthlink</category>
      <category domain="http://securityratty.com/tag/slightly lower churn">slightly lower churn</category>
      <category domain="http://securityratty.com/tag/slightly">slightly</category>
      <category domain="http://securityratty.com/tag/lower">lower</category>
      <category domain="http://securityratty.com/tag/loss">loss</category>
      <category domain="http://securityratty.com/tag/increasingly poor access">increasingly poor access</category>
      <category domain="http://securityratty.com/tag/earnings">earnings</category>
      <category domain="http://securityratty.com/tag/drop">drop</category>
      <category domain="http://securityratty.com/tag/noticeable drop">noticeable drop</category>
      <source url="http://wifinetnews.com/archives/008291.html">EarthLink Shutters New Orleans, Staunches Own Losses</source>
    </item>
    <item>
      <title><![CDATA[Air France Begins In-Flight Voice Trial]]></title>
      <link>http://securityratty.com/article/a6f4fe8f332cf8280f046790684b69f9</link>
      <guid>http://securityratty.com/article/a6f4fe8f332cf8280f046790684b69f9</guid>
      <description><![CDATA[Air France starts allowing phone calls in flight: Air France's single OnAir-equipped A318 has entered its next phase. Passengers can place and receive voice calls during flights. The first three...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://corporate.airfrance.com/index.php?id=alaune_detail&amp;L=1&amp;tx_ttnews%5Btt_news%5D=2696&amp;no_cache=1&amp;tt_news%5BBackPid%5D=2"><strong>Air France starts allowing phone calls in flight:</strong></a> Air France's single OnAir-equipped A318 has entered its next phase. Passengers can place and receive voice calls during flights. The first three months of this test involved only text messaging and mobile email; this phase will last three months, although earlier, both OnAir (the satellite-backed provider offering the service) and Air France said they'd pull the plug if calling were a problem. </p>

<p>Rates were not disclosed, but have been estimated at about US$2.50 per minute before the recent steep decline in the dollar. Carriers set the price; OnAir sets the wholesale rate.</p>]]></content:encoded>
      <pubDate>Wed, 02 Apr 2008 09:32:53 +0000</pubDate>
      <category domain="http://securityratty.com/tag/air france">air france</category>
      <category domain="http://securityratty.com/tag/air france starts">air france starts</category>
      <category domain="http://securityratty.com/tag/receive voice calls">receive voice calls</category>
      <category domain="http://securityratty.com/tag/onair">onair</category>
      <category domain="http://securityratty.com/tag/recent steep decline">recent steep decline</category>
      <category domain="http://securityratty.com/tag/onair sets">onair sets</category>
      <category domain="http://securityratty.com/tag/mobile email">mobile email</category>
      <category domain="http://securityratty.com/tag/carriers set">carriers set</category>
      <category domain="http://securityratty.com/tag/phase">phase</category>
      <source url="http://wifinetnews.com/archives/008252.html">Air France Begins In-Flight Voice Trial</source>
    </item>
  </channel>
</rss>
