<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security Stallions Blog &#187; Symantec</title>
	<atom:link href="http://www.securitystallions.com/index.php/tag/symantec/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.securitystallions.com</link>
	<description>&#34;Musings of all things infosec...&#34;</description>
	<lastBuildDate>Tue, 02 Feb 2010 17:59:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
<atom:link rel="hub" href="http://pubsubhubbub.appspot.com"/><atom:link rel="hub" href="http://superfeedr.com/hubbub"/><cloud domain='www.securitystallions.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
		<item>
		<title>Daily Digs &#8211; 08.06.2009</title>
		<link>http://www.securitystallions.com/index.php/2009/08/06/daily-digs-08-06-2009/</link>
		<comments>http://www.securitystallions.com/index.php/2009/08/06/daily-digs-08-06-2009/#comments</comments>
		<pubDate>Fri, 07 Aug 2009 04:34:00 +0000</pubDate>
		<dc:creator>windexh8er</dc:creator>
				<category><![CDATA[Daily Digs]]></category>
		<category><![CDATA[Adobe]]></category>
		<category><![CDATA[AV]]></category>
		<category><![CDATA[iPod Touch]]></category>
		<category><![CDATA[Symantec]]></category>
		<category><![CDATA[Trolls]]></category>
		<category><![CDATA[Twitter]]></category>
		<category><![CDATA[VirusTotal]]></category>

		<guid isPermaLink="false">http://www.securitystallions.com/?p=189</guid>
		<description><![CDATA[Well, it's a late post but better than none!  I hope everyone's week is winding down nicely and your Friday is more lax than the infrastructure folks had over at Twitter earlier today. A week or two ago I asked the Twitterverse who Adobe's CSO was and if they didn't have one who was responsible [...]]]></description>
			<content:encoded><![CDATA[<p>Well, it's a late post but better than none!  I hope everyone's week is winding down nicely and your Friday is more lax than the infrastructure folks had over at Twitter earlier today.</p>
<p>A week or two ago I asked the Twitterverse who Adobe's CSO was and if they didn't have one who was responsible for software security / quality.  Either way I'm not sure any professional in the industry today would have very good things to say about the path Adobe has been on recently.  That leads us to the CNet article comparing Adobe to Microsoft pre-2002.<br />
[<a href="http://news.cnet.com/8301-27080_3-10304455-245.html?part=rss&amp;subj=news&amp;tag=2547-1009_3-0-20">Is Adobe the Next (pre-2002) Microsoft?</a>]</p>
<p>If you market yourself as a "security" company and the majority of your products revolve around securing end user desktops you might just want to be able to pass the VB100 test.  El Reg ran an article this afternoon showing how CA and Symantec end up with a big fat fail.<br />
[<a href="http://www.theregister.co.uk/2009/08/06/vista_anti_virus_tests/">Top Vendors Flunk Vista Anti-Virus Test</a>]</p>
<p>Dave Lewis posted an article on Liquid Matrix today about Shipley the Troll.  OK, so Peter Shipley's not really a troll in the actual sense, but he's sure acting like one.<br />
[<a href="http://www.liquidmatrix.org/blog/2009/08/05/patent-trolls-go-after-network-security-vendors/">Patent Trolls Go After Network Security Vendors</a>]</p>
<p>Sometimes I wonder.  Really, I do, if what people write really translates in their head or not to something actually being logically feasible.  DarkReading has an article up about "weaponizing" an iPod Touch.  They go on to talk about how a researcher has outfitted his Touch with Metasploit and some other tools.  Even with Ruby 1.9.x Metasploit takes 5+ minutes to load and the fact that you're limited to wireless access only severely limits your success with regards to LAN race condition attacks.  Really guys -- there are better small form factors out there.  But, hey, if you like to shove square pegs in round holes for fun go for it!<br />
[<a href="http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=219100135&amp;cid=RSSfeed">Weaponizing Apple's iPod Touch</a>]</p>
<p>TrendMicro has a great review of KOOBFACE over on the blog today.  The diagram by itself is worth the click through so head on over and read all about it.<br />
[<a href="http://blog.trendmicro.com/the-real-face-of-koobface/">The Real Face of KOOBFACE</a>]</p>
<p>We'll close out today's (short) post with a little bit of irony.  I did a double take when I saw the title of this article and had to visit the actual site to validate it was even true.  But, yes, Symantec is suggesting that people use VirusTotal "when in doubt".  Yes, BigYellow throwing people over the fence to double check their awesome powers of AV.<br />
[<a href="http://www.symantec.com/connect/blogs/looks-suspicious-check-virustotalcom">Symantec Says Check VirusTotal</a>]</p>
<p>Well ladies and gents, this particular post has come to a close.  Yes, it's a little light, but hopefully the link content is good quality reading!  We even spared you one of thousands of links to the Twitter DoS.  We know you already know, why bother?  <img src='http://www.securitystallions.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>Thanks for stopping by and, as always, feel free to comment!</p>
<p>--windexh8er</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securitystallions.com/index.php/2009/08/06/daily-digs-08-06-2009/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
