<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments for Perimeter Grid</title>
	<atom:link href="http://perimetergrid.com/wp/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://perimetergrid.com/wp</link>
	<description>Building Security in a Networked World</description>
	<pubDate>Thu, 28 Aug 2008 02:27:20 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.1</generator>
		<item>
		<title>Comment on Ubuntu/Debian CRNG Cracked - SSH Vulnerable by DefCon 16, Day 1 &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2008/05/17/ubuntudebian-crng-cracked-ssh-vulnerable/#comment-128</link>
		<dc:creator>DefCon 16, Day 1 &#124; Perimeter Grid</dc:creator>
		<pubDate>Sun, 24 Aug 2008 21:15:25 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=50#comment-128</guid>
		<description>[...] The Debian OpenSSL PRNG flaw compromised 300 of the 1,500 relay identity keys, and 3 of the 6 directory authority keys.  If one [...]</description>
		<content:encoded><![CDATA[<p>[...] The Debian OpenSSL PRNG flaw compromised 300 of the 1,500 relay identity keys, and 3 of the 6 directory authority keys.  If one [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on BlackHat 2008, Day 2 by Arian</title>
		<link>http://perimetergrid.com/wp/2008/08/13/blackhat-2008-day-2/#comment-120</link>
		<dc:creator>Arian</dc:creator>
		<pubDate>Tue, 19 Aug 2008 01:55:22 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=66#comment-120</guid>
		<description>Also you might want to note -- Trey Ford spoke in the second talk with Jeremiah. He's a much more polished presenter and we all thought he'd do a better job so we switched. And he did. :)</description>
		<content:encoded><![CDATA[<p>Also you might want to note &#8212; Trey Ford spoke in the second talk with Jeremiah. He&#8217;s a much more polished presenter and we all thought he&#8217;d do a better job so we switched. And he did. <img src='http://perimetergrid.com/wp/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on BlackHat 2008, Day 2 by Arian</title>
		<link>http://perimetergrid.com/wp/2008/08/13/blackhat-2008-day-2/#comment-116</link>
		<dc:creator>Arian</dc:creator>
		<pubDate>Thu, 14 Aug 2008 03:16:17 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=66#comment-116</guid>
		<description>Nice writeup on the conference. Glad you liked the presentations. I only got through 34 slides of 70-some and one demo out of about 20. Look for much, much more detail &#38; demo apps/utils @ OWASP NYC and possibly BlackHat Amsterdam/US in 2009. The possibilities and permutations are endless and sometimes surprising. Email me directly if you have any questions about my presentation...</description>
		<content:encoded><![CDATA[<p>Nice writeup on the conference. Glad you liked the presentations. I only got through 34 slides of 70-some and one demo out of about 20. Look for much, much more detail &amp; demo apps/utils @ OWASP NYC and possibly BlackHat Amsterdam/US in 2009. The possibilities and permutations are endless and sometimes surprising. Email me directly if you have any questions about my presentation&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on The Mysterious DNS Exploit by The DNS Exploit Revealed&#8230; and used &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2008/07/17/the-mysterious-dns-exploit/#comment-99</link>
		<dc:creator>The DNS Exploit Revealed&#8230; and used &#124; Perimeter Grid</dc:creator>
		<pubDate>Tue, 29 Jul 2008 07:30:12 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=52#comment-99</guid>
		<description>[...] Dan Kaminsky&#8217;s DNS exploit I previously mentioned has been revealed.  It turns out that what Kaminsky found was pretty much [...]</description>
		<content:encoded><![CDATA[<p>[...] Dan Kaminsky&#8217;s DNS exploit I previously mentioned has been revealed.  It turns out that what Kaminsky found was pretty much [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Two-Factor Auth for World of Warcraft by Gunslinger</title>
		<link>http://perimetergrid.com/wp/2008/06/30/two-factor-auth-for-world-of-warcraft/#comment-90</link>
		<dc:creator>Gunslinger</dc:creator>
		<pubDate>Thu, 03 Jul 2008 04:34:00 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=51#comment-90</guid>
		<description>I guess this article just highlights what you're saying.
http://www.signonsandiego.com/news/state/20080701-1138-tec-atmbreach.html</description>
		<content:encoded><![CDATA[<p>I guess this article just highlights what you&#8217;re saying.<br />
<a href="http://www.signonsandiego.com/news/state/20080701-1138-tec-atmbreach.html" rel="nofollow">http://www.signonsandiego.com/news/state/20080701-1138-tec-atmbreach.html</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Two-Factor Auth for World of Warcraft by Grant Bugher</title>
		<link>http://perimetergrid.com/wp/2008/06/30/two-factor-auth-for-world-of-warcraft/#comment-89</link>
		<dc:creator>Grant Bugher</dc:creator>
		<pubDate>Wed, 02 Jul 2008 18:29:55 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=51#comment-89</guid>
		<description>What would be ideal is a dynamic-password-based or smart-card-based federated identity management system.  That way you could have one ID, used on multiple sites or services, but only one keyfob.  So long as you kept hold of your keyfob, it wouldn't even necessarily be less secure, though designing federated identity systems that are both usable &#038; secure turns out to be really hard.

Imagine if OpenID had you use your URL and a dynamic password and PIN, rather than a normal static password.</description>
		<content:encoded><![CDATA[<p>What would be ideal is a dynamic-password-based or smart-card-based federated identity management system.  That way you could have one ID, used on multiple sites or services, but only one keyfob.  So long as you kept hold of your keyfob, it wouldn&#8217;t even necessarily be less secure, though designing federated identity systems that are both usable &#038; secure turns out to be really hard.</p>
<p>Imagine if OpenID had you use your URL and a dynamic password and PIN, rather than a normal static password.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Two-Factor Auth for World of Warcraft by Anjela</title>
		<link>http://perimetergrid.com/wp/2008/06/30/two-factor-auth-for-world-of-warcraft/#comment-88</link>
		<dc:creator>Anjela</dc:creator>
		<pubDate>Tue, 01 Jul 2008 17:18:16 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=51#comment-88</guid>
		<description>Irony: I look at the RSA keyfobs and think "OMG MUST HAVE!", even though I'm not the kind of person who downloads illegitimate software.  Apparently I am that sort of geek.

The real trouble is going to come in when you have a dozen of these and need to know what goes with which.  (And what do you store them in?)  Of course, if they're branded like the Blizzard one, that helps with identification, but for banks, it might be in their best interest not to identify the keyfob quite so obviously.  But then you run into the trouble of customers who need that identification, because otherwise they'll forget what the thing is for.

But then, I really don't think it's a good practice to design &lt;I&gt;security&lt;/I&gt; software and protocols for the dumbest user out there -- truly secure systems are going to require a level of sophistication to use, and in the end, people learn to deal with that.  Actual housekeys haven't always existed, and I'm sure there was a real fuss about it when they started becoming common ("What if I lose it?!  Why should I need one of these?  Won't thieves realize my house has valuables in it if I take the trouble to lock it?"), but people dealt.

Of course, we live in a society where people are almost always willing to trade security for convenience.  I think part of my "OMG MUST HAVE" of the Blizzard keyfob is because I like the idea of being able to make my own decisions about &lt;I&gt;when&lt;/I&gt; to trade security for convenience.  This hasn't been forced on me by anybody, but it's there if I want it.  It's definitely something I find appealing.</description>
		<content:encoded><![CDATA[<p>Irony: I look at the RSA keyfobs and think &#8220;OMG MUST HAVE!&#8221;, even though I&#8217;m not the kind of person who downloads illegitimate software.  Apparently I am that sort of geek.</p>
<p>The real trouble is going to come in when you have a dozen of these and need to know what goes with which.  (And what do you store them in?)  Of course, if they&#8217;re branded like the Blizzard one, that helps with identification, but for banks, it might be in their best interest not to identify the keyfob quite so obviously.  But then you run into the trouble of customers who need that identification, because otherwise they&#8217;ll forget what the thing is for.</p>
<p>But then, I really don&#8217;t think it&#8217;s a good practice to design <i>security</i> software and protocols for the dumbest user out there &#8212; truly secure systems are going to require a level of sophistication to use, and in the end, people learn to deal with that.  Actual housekeys haven&#8217;t always existed, and I&#8217;m sure there was a real fuss about it when they started becoming common (&#8221;What if I lose it?!  Why should I need one of these?  Won&#8217;t thieves realize my house has valuables in it if I take the trouble to lock it?&#8221;), but people dealt.</p>
<p>Of course, we live in a society where people are almost always willing to trade security for convenience.  I think part of my &#8220;OMG MUST HAVE&#8221; of the Blizzard keyfob is because I like the idea of being able to make my own decisions about <i>when</i> to trade security for convenience.  This hasn&#8217;t been forced on me by anybody, but it&#8217;s there if I want it.  It&#8217;s definitely something I find appealing.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Passwords Aren&#8217;t Secure; Two-Factor Auth on a Credit Card by Two-Factor Auth for World of Warcraft &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2007/10/30/passwords-arent-secure-two-factor-auth-on-a-credit-card/#comment-86</link>
		<dc:creator>Two-Factor Auth for World of Warcraft &#124; Perimeter Grid</dc:creator>
		<pubDate>Mon, 30 Jun 2008 21:25:31 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2007/10/30/passwords-arent-secure-two-factor-auth-on-a-credit-card/#comment-86</guid>
		<description>[...] cards would be much more serious.  Yet my bank offers only passwords for protection, and other banks&#8217; &#8220;two-factor authentication&#8221; isn&#8217;t really (&#8221;something you know&#8221; and &#8220;something else you know&#8221; is not two factors, [...]</description>
		<content:encoded><![CDATA[<p>[...] cards would be much more serious.  Yet my bank offers only passwords for protection, and other banks&#8217; &#8220;two-factor authentication&#8221; isn&#8217;t really (&#8221;something you know&#8221; and &#8220;something else you know&#8221; is not two factors, [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Backdoored PNRGs from the NSA by Ubuntu/Debian CRNG Cracked - SSH Vulnerable &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2007/11/16/backdoored-pnrgs-from-the-nsa/#comment-81</link>
		<dc:creator>Ubuntu/Debian CRNG Cracked - SSH Vulnerable &#124; Perimeter Grid</dc:creator>
		<pubDate>Sun, 18 May 2008 02:41:25 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2007/11/16/backdoored-pnrgs-from-the-nsa/#comment-81</guid>
		<description>[...] number generator used by Debian Linux, the widely-used distribution on which Ubuntu is based.  As I have discussed before, flaws in the RNG underlying a cryptosystem can compromise the entire system &#8212; both block [...]</description>
		<content:encoded><![CDATA[<p>[...] number generator used by Debian Linux, the widely-used distribution on which Ubuntu is based.  As I have discussed before, flaws in the RNG underlying a cryptosystem can compromise the entire system &#8212; both block [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Surveillance and Ubiquity by Grant Bugher</title>
		<link>http://perimetergrid.com/wp/2008/04/10/surveillance-and-ubiquity/#comment-80</link>
		<dc:creator>Grant Bugher</dc:creator>
		<pubDate>Sat, 17 May 2008 20:58:53 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=45#comment-80</guid>
		<description>The courts in America are not corrupt in the way that courts in many nations are corrupt.  In many countries, barely-veiled bribery is a matter of course in most law enforcement proceedings; it's expected that cops and judges are bribed to the point that they're not necessarily even paid a living wage in actual salary.  In the United States, if you try to bribe a cop or judge, you are very likely to go to prison.  Sure, you might get lucky and get a corrupt one -- they exist, and a lot of people are corruptible if you have a &lt;I&gt;lot&lt;/I&gt; of money -- but it's taking a very serious chance.

I'm a libertarian; I agree with you that "victimless crimes" should not be crimes.  However, a "crime" is not an immoral act, but an illegal one -- and these laws do exist, whether we like them or not.  My point here is not that these laws are just; they aren't.  My point is that somebody -- in fact, most people -- think that these laws are a good idea, and passed them on purpose.  Even those people, however, do not want to live in the sort of society that will be created if these sorts of laws are enforced universally.  We're able to live in a mostly free society, despite these sorts of busybody-meddling laws, because it's impractical to enforce them more than a tiny fraction of the time.  Universal enforcement through surveillance and automation would horrify the general public, not just libertarian "crackpots" like ourselves, and that's what's going to result in real change to the legal system.</description>
		<content:encoded><![CDATA[<p>The courts in America are not corrupt in the way that courts in many nations are corrupt.  In many countries, barely-veiled bribery is a matter of course in most law enforcement proceedings; it&#8217;s expected that cops and judges are bribed to the point that they&#8217;re not necessarily even paid a living wage in actual salary.  In the United States, if you try to bribe a cop or judge, you are very likely to go to prison.  Sure, you might get lucky and get a corrupt one &#8212; they exist, and a lot of people are corruptible if you have a <i>lot</i> of money &#8212; but it&#8217;s taking a very serious chance.</p>
<p>I&#8217;m a libertarian; I agree with you that &#8220;victimless crimes&#8221; should not be crimes.  However, a &#8220;crime&#8221; is not an immoral act, but an illegal one &#8212; and these laws do exist, whether we like them or not.  My point here is not that these laws are just; they aren&#8217;t.  My point is that somebody &#8212; in fact, most people &#8212; think that these laws are a good idea, and passed them on purpose.  Even those people, however, do not want to live in the sort of society that will be created if these sorts of laws are enforced universally.  We&#8217;re able to live in a mostly free society, despite these sorts of busybody-meddling laws, because it&#8217;s impractical to enforce them more than a tiny fraction of the time.  Universal enforcement through surveillance and automation would horrify the general public, not just libertarian &#8220;crackpots&#8221; like ourselves, and that&#8217;s what&#8217;s going to result in real change to the legal system.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Sears &#038; KMart&#8217;s Official Malware by Grant Bugher</title>
		<link>http://perimetergrid.com/wp/2008/01/04/sears-kmarts-official-malware/#comment-79</link>
		<dc:creator>Grant Bugher</dc:creator>
		<pubDate>Sat, 17 May 2008 20:52:51 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2008/01/04/sears-kmarts-official-malware/#comment-79</guid>
		<description>Was anyone harmed?  Well, that depends on if you consider having your private data and web browsing history shared with various third parties with which you have no contractual agreement to be "harm."  Is comScore out robbing people?  Probably not.  But is this a violation of law and of people's trust?  Yes.  And does it result in private information being shared more widely than the user intended to agree to?  Absolutely.

It isn't so much that this particular incidence has been harmful, as that it's indicative of a larger problem -- the tactics that used to be considered the province of hackers and thieves are now being used by "legitimate" companies for ad targeting.  You may trust them not to abuse your data, but can you trust everyone they share it with?  The more the data is shared, the more likely that someone along the chain of custody will decide to make a quick buck.  The opportunity to commit a crime easily and without getting caught breeds crime even in normally honest people.</description>
		<content:encoded><![CDATA[<p>Was anyone harmed?  Well, that depends on if you consider having your private data and web browsing history shared with various third parties with which you have no contractual agreement to be &#8220;harm.&#8221;  Is comScore out robbing people?  Probably not.  But is this a violation of law and of people&#8217;s trust?  Yes.  And does it result in private information being shared more widely than the user intended to agree to?  Absolutely.</p>
<p>It isn&#8217;t so much that this particular incidence has been harmful, as that it&#8217;s indicative of a larger problem &#8212; the tactics that used to be considered the province of hackers and thieves are now being used by &#8220;legitimate&#8221; companies for ad targeting.  You may trust them not to abuse your data, but can you trust everyone they share it with?  The more the data is shared, the more likely that someone along the chain of custody will decide to make a quick buck.  The opportunity to commit a crime easily and without getting caught breeds crime even in normally honest people.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Ad Replacers Let Dan Kaminsky RickRoll the Entire Web by Charter Communications Using Ad Replacer &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2008/04/23/ad-replacers-let-dan-kaminsky-rickroll-the-web/#comment-76</link>
		<dc:creator>Charter Communications Using Ad Replacer &#124; Perimeter Grid</dc:creator>
		<pubDate>Fri, 16 May 2008 16:51:58 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=46#comment-76</guid>
		<description>[...] about privacy in the article is, in my opinion, a secondary issue.  As I&#8217;ve discussed before, using an ad replacer has other effects that may be much more serious.  It means Charter is now [...]</description>
		<content:encoded><![CDATA[<p>[...] about privacy in the article is, in my opinion, a secondary issue.  As I&#8217;ve discussed before, using an ad replacer has other effects that may be much more serious.  It means Charter is now [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Ad Replacers and the Future of the Internet by Charter Communications Using Ad Replacer &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2008/03/10/ad-replacers-and-the-future-of-the-internet/#comment-75</link>
		<dc:creator>Charter Communications Using Ad Replacer &#124; Perimeter Grid</dc:creator>
		<pubDate>Fri, 16 May 2008 16:51:32 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2008/03/10/ad-replacers-and-the-future-of-the-internet/#comment-75</guid>
		<description>[...] the discussion about privacy in the article is, in my opinion, a secondary issue.  As I&#8217;ve discussed before, using an ad replacer has other effects that may be much more serious.  It means Charter is [...]</description>
		<content:encoded><![CDATA[<p>[...] the discussion about privacy in the article is, in my opinion, a secondary issue.  As I&#8217;ve discussed before, using an ad replacer has other effects that may be much more serious.  It means Charter is [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Data Hiding at the Airport by Steve</title>
		<link>http://perimetergrid.com/wp/2008/05/01/data-hiding-at-the-airport/#comment-71</link>
		<dc:creator>Steve</dc:creator>
		<pubDate>Mon, 05 May 2008 11:05:52 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=47#comment-71</guid>
		<description>Very interesting article. I am using TrueCrypt for crypting, I think its the bes freeware program (ant open source) that makes very hard job ;)</description>
		<content:encoded><![CDATA[<p>Very interesting article. I am using TrueCrypt for crypting, I think its the bes freeware program (ant open source) that makes very hard job <img src='http://perimetergrid.com/wp/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Ad Replacers and the Future of the Internet by Ad Replacers Let Dan Kaminsky RickRoll the Entire Web &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2008/03/10/ad-replacers-and-the-future-of-the-internet/#comment-69</link>
		<dc:creator>Ad Replacers Let Dan Kaminsky RickRoll the Entire Web &#124; Perimeter Grid</dc:creator>
		<pubDate>Thu, 24 Apr 2008 05:11:25 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2008/03/10/ad-replacers-and-the-future-of-the-internet/#comment-69</guid>
		<description>[...] Ad Replacers and the Future of the Internet [...]</description>
		<content:encoded><![CDATA[<p>[...] Ad Replacers and the Future of the Internet [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Sears &#038; KMart&#8217;s Official Malware by joe malley</title>
		<link>http://perimetergrid.com/wp/2008/01/04/sears-kmarts-official-malware/#comment-64</link>
		<dc:creator>joe malley</dc:creator>
		<pubDate>Sat, 12 Apr 2008 01:07:30 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2008/01/04/sears-kmarts-official-malware/#comment-64</guid>
		<description>grant;

did anybody really get harmed?
dude!........no one has said they really use sears website and ever went to site

right?</description>
		<content:encoded><![CDATA[<p>grant;</p>
<p>did anybody really get harmed?<br />
dude!&#8230;&#8230;..no one has said they really use sears website and ever went to site</p>
<p>right?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Surveillance and Ubiquity by Jennifer</title>
		<link>http://perimetergrid.com/wp/2008/04/10/surveillance-and-ubiquity/#comment-63</link>
		<dc:creator>Jennifer</dc:creator>
		<pubDate>Fri, 11 Apr 2008 23:04:14 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/?p=45#comment-63</guid>
		<description>You have made a grave error in assumption -- that the courts in America are not corrupt.  Such naivete and ignorance.  You must not have had much experience with the courts at all.

Secondly, everything you mentioned - speeding, drugs, are NOT CRIMES.  A true crime requires a victim.  The "laws" you are talking about are simply totalitarian to begin with, and designed to make "criminals" of everyone, so that government officials can make everyone afraid.  

Surveillance will ultimately work best for the side that has POWER and can enforce things at the point of a gun.  Never forget it.</description>
		<content:encoded><![CDATA[<p>You have made a grave error in assumption &#8212; that the courts in America are not corrupt.  Such naivete and ignorance.  You must not have had much experience with the courts at all.</p>
<p>Secondly, everything you mentioned - speeding, drugs, are NOT CRIMES.  A true crime requires a victim.  The &#8220;laws&#8221; you are talking about are simply totalitarian to begin with, and designed to make &#8220;criminals&#8221; of everyone, so that government officials can make everyone afraid.  </p>
<p>Surveillance will ultimately work best for the side that has POWER and can enforce things at the point of a gun.  Never forget it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on SMB Reflection Made Way Too Easy by BackTrack 3: Demos of selected tools at ISIS Blogs</title>
		<link>http://perimetergrid.com/wp/2007/11/27/smb-reflection-made-way-too-easy/#comment-61</link>
		<dc:creator>BackTrack 3: Demos of selected tools at ISIS Blogs</dc:creator>
		<pubDate>Tue, 08 Apr 2008 17:52:25 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2007/11/27/smb-reflection-made-way-too-easy/#comment-61</guid>
		<description>[...] I used a tutorial from learnsecurityonline.com. The attack mechanism is described nicely here and here. In a few words, whats going on here is - a man in the middle reflection attack based on the [...]</description>
		<content:encoded><![CDATA[<p>[...] I used a tutorial from learnsecurityonline.com. The attack mechanism is described nicely here and here. In a few words, whats going on here is - a man in the middle reflection attack based on the [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why Hackers Love Wi-Fi by Hacking Wi-Fi: Part 1 &#124; Perimeter Grid</title>
		<link>http://perimetergrid.com/wp/2007/11/28/why-hackers-love-wi-fi/#comment-55</link>
		<dc:creator>Hacking Wi-Fi: Part 1 &#124; Perimeter Grid</dc:creator>
		<pubDate>Mon, 10 Mar 2008 15:54:10 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2007/11/29/why-hackers-love-wi-fi/#comment-55</guid>
		<description>[...] As I&#8217;ve mentioned before, the hacker community is very interested in wireless networking for a variety of reasons. Breaking into wireless networks is usually easy, can be untraceable if done properly, and offers opportunities for gathering information, attacking largely-undefended computers, or simply getting free anonymous Internet access. [...]</description>
		<content:encoded><![CDATA[<p>[...] As I&#8217;ve mentioned before, the hacker community is very interested in wireless networking for a variety of reasons. Breaking into wireless networks is usually easy, can be untraceable if done properly, and offers opportunities for gathering information, attacking largely-undefended computers, or simply getting free anonymous Internet access. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on How to Get a Job in Information Security by Calculated Decision &#187; Blog Archive &#187; Entering the Infosec Field From the Dev Side of the House</title>
		<link>http://perimetergrid.com/wp/2008/01/31/how-to-get-a-job-in-information-security/#comment-48</link>
		<dc:creator>Calculated Decision &#187; Blog Archive &#187; Entering the Infosec Field From the Dev Side of the House</dc:creator>
		<pubDate>Fri, 29 Feb 2008 07:14:26 +0000</pubDate>
		<guid isPermaLink="false">http://perimetergrid.com/wp/2008/01/31/how-to-get-a-job-in-information-security/#comment-48</guid>
		<description>[...] Grant Bugher of the Perimeter Grid blog had a post covering another route to the information security field.  The route he describes and has personally taken pulls heavily from experience in development and writing secure code.  This route is crazy interesting to me and I'm glad to see I'm naturally heading down the road he's talking about. [...]</description>
		<content:encoded><![CDATA[<p>[...] Grant Bugher of the Perimeter Grid blog had a post covering another route to the information security field.  The route he describes and has personally taken pulls heavily from experience in development and writing secure code.  This route is crazy interesting to me and I&#8217;m glad to see I&#8217;m naturally heading down the road he&#8217;s talking about. [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.679 seconds -->
