<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security Stallions Blog &#187; Android</title>
	<atom:link href="http://www.securitystallions.com/index.php/tag/android/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.securitystallions.com</link>
	<description>&#34;Musings of all things infosec...&#34;</description>
	<lastBuildDate>Tue, 02 Feb 2010 17:59:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
<atom:link rel="hub" href="http://pubsubhubbub.appspot.com"/><atom:link rel="hub" href="http://superfeedr.com/hubbub"/><cloud domain='www.securitystallions.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
		<item>
		<title>Daily Digs &#8211; 08.12.2009</title>
		<link>http://www.securitystallions.com/index.php/2009/08/12/daily-digs-08-12-2009/</link>
		<comments>http://www.securitystallions.com/index.php/2009/08/12/daily-digs-08-12-2009/#comments</comments>
		<pubDate>Thu, 13 Aug 2009 03:25:11 +0000</pubDate>
		<dc:creator>windexh8er</dc:creator>
				<category><![CDATA[Daily Digs]]></category>
		<category><![CDATA[Android]]></category>
		<category><![CDATA[Berkeley]]></category>
		<category><![CDATA[BreakingPoint]]></category>
		<category><![CDATA[debt]]></category>
		<category><![CDATA[Diebold]]></category>
		<category><![CDATA[elections]]></category>
		<category><![CDATA[Heartland]]></category>
		<category><![CDATA[MasterCard]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[NERC]]></category>
		<category><![CDATA[Nmap]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[Pre]]></category>
		<category><![CDATA[Safari]]></category>
		<category><![CDATA[Twitter]]></category>
		<category><![CDATA[wikileaks]]></category>

		<guid isPermaLink="false">http://www.securitystallions.com/?p=208</guid>
		<description><![CDATA[Good evening!  Wednesday, the kernel, of my week - oh how I'm glad you've almost come to a close.  The race for the weekend is all downhill from here.  We've got lots of great commentary and links to share today so on to the digs. Generally I'd like to stay away from vendors advertising new, [...]]]></description>
			<content:encoded><![CDATA[<p>Good evening!  Wednesday, the kernel, of my week - oh how I'm glad you've almost come to a close.  The race for the weekend is all downhill from here.  We've got lots of great commentary and links to share today so on to the digs.</p>
<p>Generally I'd like to stay away from vendors advertising new, must-have, fabulous, can't-live-without technology - but BreakingPoint posted something that just looks too damn cool.  "Write and simulate your own network strikes" they say!  So as not to break out into a commercial for them I'll just lead you to the link.  I can't say I've ever had a chance to drive any BreakingPoint gear (I'll definitely take one for a test drive if they want to send me something though) so please don't take this as an actual advocation.<br />
[<a href="http://www.breakingpointsystems.com/community/blog/write-and-simulate-your-own-security-strikes">Write and Simulate Your Own Network Strikes</a>]</p>
<p>Gartner has a fun little graphic up with regards to the hype cycle of emerging technologies.  While it's interesting to look at that's about all it's good for in my book.  Really, if an analyst at Gartner could predict the peak appropriately they wouldn't need to work at Gartner.  Then we get to the crux of the "inflated expectations with", hold your breath, e-book readers and cloud computing.  There are more little nuggets of thought-provoking humor (microblogging on the edge of the trough of disillusionment) scattered in the colorful roller-coaster-of-a-graphic so check it out.<br />
[<a href="http://blogs.reuters.com/commentaries/2009/08/11/twitter-backlash-foretold/">Twitter Backlash Foretold</a>]</p>
<p>UC Berkeley today disclosed they they may have disclosed roughly 493 SSN and other PII to a hacker.  That gets me thinking -- are the bigger schools just better at realizing they've been breached, or are they just the bigger target?<br />
[<a href="http://www.databreaches.net/?p=6651">Hackers Strike UC Berkeley</a>]</p>
<p>So I had a great laugh this morning with this one and then also learned an interesting tidbit of information from a coworker.  At the surface of the story most news outlets are running the piece that Judge Leonard Davis of the U.S. District Court for the Eastern District of Texas issued a permanent injunction against Microsoft that prohibits them from selling or importing Word that, basically, has any XML functionality.  That's what the mainstream press is running.  What I learned was that Smith County in Texas has it's own story of shady shenanigans and now I have some "Murder She Wrote" style literature for my enjoyment this weekend.  That's because in 1985 a book called "Smith County Justice" was published by a man named David Ellsworth.  Let's just say that you can't get the book in print anymore because local authorities used pressure of sorts to have the book pulled from publishing and all unsold copies burned.  Dum dum dum.  Anyway, I'll leave it to you to solve the mystery of Smith County.  Check out the links to get started!<br />
[<a href="http://news.cnet.com/8301-10805_3-10308013-75.html?part=rss&amp;subj=news&amp;tag=2547-1_3-0-20">Judge Orders Microsoft to Stop Selling Word</a>]<br />
[<a href="http://wikileaks.org/wiki/Smith_County_Justice">Wikileaks - Smith County Justice</a>]</p>
<p>Branden Williams informed me (well not directly) that MasterCard has finally gotten around to clarifying their previously ambiguous L1 and L2 merchant fine machine.  MasterCard yells "All hail QSA!" while Heartland banters "QSA - thou are heretic!".  Well, at this point I might as well post both links with this banter.  Is it a full moon out tonight?<br />
[<a href="http://blogs.verisign.com/securityconvergence/2009/08/mastercard_clarifies_their_pos.php">MasterCard Clarifies Their Position</a>]<br />
[<a href="http://www.csoonline.com/article/499527/Heartland_CEO_on_Data_Breach_QSAs_Let_Us_Down">Heartland CEO on Data Breach</a>]</p>
<p>Phish bombs away!  Want to pwn your own Safari 4 "Top Sites"?  Be prepared to get your electronica groove on with this screencast SecureThoughts has provided us with today.  On to the show ladies and gents!<br />
[<a href="http://securethoughts.com/2009/08/hijacking-safari-4-top-sites-with-phish-bombs/">Hijacking Safari 4 Top Sites with Phish Bombs</a>]</p>
<p>Diebold is up to their same old same old, quietly patching "secure" vote counting software.  If you like this story and are interested in more information on voting fraud and corruption I'd highly recommend watching "Uncounted - The New Math of American Elections".  A coworker of mine helped produce and contribute research to the documentary and it's presented very well.  After talking to him I learned that they actually had to chop out a few key segments because initial reactions were too strong from the public.  Anyway, get your vote fraud news on.</p>
<p>[<a href="http://www.wired.com/threatlevel/2009/08/diebold-audit-logs/">Diebold Quietly Patches Security Flaw in Vote Counting Software</a>]<br />
[<a href="http://www.uncountedthemovie.com/">Uncounted - The New Math of American Elections</a>]</p>
<p>The mobile-phone attacks are coming, the mobile-phone attacks are coming!  I didn't see this one on Gartner's hype cycle so it must be true.  C'mon anyone who hasn't seen this one coming since the release of the iPhone is living in a fantasy world where BeOS is making a comeback.  Ahh, the good old days of BeOS.  All in all it's a good discussion to be having now.  We're hitting the critical mass where it's becoming glaringly obvious why and where the monarchy approval system (i.e. Apple's App Store) fails, but at the same time why it's positioned well for sanity checks and balances of a completely open system that could easily be circumvented for the general populous.<br />
[<a href="http://www.computerworld.com/s/article/9136593/Android_security_chief_Mobile_phone_attacks_coming?source=rss_security">Android Security Chief: Mobile-Phone Attacks Coming</a>]</p>
<p>From the you-may-not-have-known bin we pull out some Nmap goodness I learned from the fabulous VOIPSA blog.  Nmap has a rather extensive set of fingerprints for VoIP devices!  OK, so you already knew that fingerprinting was a big part of why you use Nmap in the first place, right?  Well it struck me, while I was perusing the list, that I could (will) help by adding a few that I have access to that aren't in that list already.  Truth be told is that I felt like I haven't contributed anything back to the Nmap project recently and I really should.<br />
[<a href="http://voipsa.org/blog/2009/08/12/something-old-something-new-nmaps-voip-fingerprinting/">Something Old, Something New: Nmap's VoIP Fingerprinting</a>]</p>
<p>Wow there are lots of great links today!  Unfortunately I'm already &gt;20 minutes past due because of a busy evening.  We'll leave you with a list in the grab bag tonight.  If you find the daily digs useful, humorous or flat out lame feel free to let us know in the comments!  Take care ya'll...</p>
<p>-windexh8er</p>
<p>[<a href="http://news.cnet.com/8301-17938_105-10308608-1.html?part=rss&amp;subj=news&amp;tag=2547-1009_3-0-20">Dear Palm: Please Stop Tracking Me and My Pre Use</a>]<br />
[<a href="http://news.cnet.com/8301-1035_3-10308348-94.html?part=rss&amp;subj=news&amp;tag=2547-1_3-0-20">Typhoon Knocks Out Asia Telecom Cable</a>]<br />
[<a href="http://securityvulns.com/news/2WIRE/UA.html">2Wire Routers Unauthorized Access</a>]<br />
[<a href="http://www.scmagazineus.com/Energy-companies-say-NERC-standards-inadequate/article/141224/?DCMP=EMC-SCUS_Newswire">Energy Companies Say NERC Standards Inadequate</a>]<br />
[<a href="http://blogs.construx.com/blogs/stevemcc/archive/2007/11/01/technical-debt-2.aspx">Technical Debt</a>]</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securitystallions.com/index.php/2009/08/12/daily-digs-08-12-2009/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
