Links for 2009-07-02
taint.org: Justin Mason's Weblog

• Filtering Companies Cant Be Sued By Blacklisted Firms, Court

  
  Want vulnerability information? Pony up the cash
  SecuriTeam Blogs

  The startup VoIPShield is changing its disclosure policy to stop giving out VoIP bugs for free and start charging vendors for it. CEO Rick Dalmazzi writes: Avaya doesnt have to pay us for anything. We do not require payment from you. Its Avayas choice if

  
  Gumblar Invades Best Buy
  TrendLabs | Malware Blog - by Trend Micro

  Earlier today, Trend Micro Technical Account Manager Fioravante Souza in Brazil spotted a (potentially harmful) URL that redirects users from the Best Buy domain site. Users who visit www.bestbuy.com, as it turns out, are redirected to the URL, hxxp:// pi

  
  Alternatives to Desktop Lockdown
  Roger's Information Security Blog

  This is another post based on notes from the Gartner Information Security Summit. Neil MacDonald gave a talk titled Five Alternatives to Desktop Lockdown: Balancing Control and Creativity.

  Desktop Lockdown has failed.

  But so has comple

  
  Brian Roberts Resigns as VP for Information Technology
  National Cyber Security - Blogs

  AUSTIN, Texas — Brian Roberts, vice president for information technology at The University of Texas at Austin since 2006, has resigned and will return to the faculty in the College of Liberal Arts, effective immediately.

  Media Advisory: Cisco Showcases Education Technology Solutions at NECC
  National Cyber Security - Blogs

  SAN JOSE, CA -- (Marketwire) -- 06/25/09 --

  
  WHAT:

  Cisco (Ensuring Investment in Healthcare Information Technology Does Not Flatline
  National Cyber Security - Blogs

  Given the $47 billion awarded in stimulus funding, it's clear the government's assumption is that healthcare information technology (IT) will deliver better care at lower cost. The IT industry and all the healthcare IT mavens are waving the flags and b

  
  Cloud computing 'may change Wall St business plans'
  National Cyber Security - Blogs

  News Article - Friday, 26 June 2009 12:11

  Category: AT&T to secure Amtrak information technology infrastructure
  National Cyber Security - Blogs

  Amtrak and AT&T; Inc. have signed a five-year agreement under which the telecommunications operator will provide Amt

  
  Xenos Extends Its Reach Into Central America, Venezuela and the Caribbean
  National Cyber Security - Blogs

  TORONTO, ONTARIO -- (Marketwire) -- 06/25/09 -- Xenos Group Inc. (TSX: XNS) today announced that it has inked a deal with Truenorth Corporation, one of the principal providers of information technology solutions in the Caribbean, to sell Xenos award-wi

  
  Lawmakers: IT Reform Tougher for Small Businesses
  National Cyber Security - Blogs

  WASHINGTON—Delays in the rollout of health information technology (HIT, or health IT), especially among smaller medical practices, could complicate efforts to reduce healthcare costs and reform the overall health insurance syste

  
  Fairmont Announces Green It Strategy
  National Cyber Security - Blogs

  Environmental Leader Continuing To Raise The Bar In Greening The Hotel Industry Death by Firefox: Bullets and Geolocation Lauren Weinstein's Blog None Facebook's future: "Wall" or nothing? You Know What's Stupid? Everything I Don't Understand In The Great Wall of Facebook, Wireds Fred Vogelstein contends that Facebook and Google are approaching a full-blown battle over the future of the Internet. Vogelste The Wranglers Technology Review Feed - TR Editors' Blog None PC Invader Costs Ky. County $415,000 Security Fix Cyber criminals based in Ukraine stole $415,000 from the coffers of Bullitt County, Kentucky this week. The crooks were aided by more than two dozen co-conspirators in the United States, as well as a strain of malicious software capable of defeating on Nevada's New Encryption Law; Made Moot By Its Own Data Breach Law? Realtime Community | IT Compliance On May 30, 2009, Nevada enacted a new law, SB 227, which will basically replace NRS 597.970 in January 2010. In many ways the new law is an improvement over the much more vague, and b PC Invader Costs Ky. County $415,000 Security Fix Cyber criminals based in Ukraine stole $415,000 from the coffers of Bullitt County, Kentucky this week. The crooks were aided by more than two dozen co-conspirators in the United States, as well as a strain of malicious software capable of defeating onlin Useless Useful Technology: IP6 #GartnerSecurity Roger's Information Security Blog These are notes from the last session at the 2009 Gartner Security Summit; a tongue in cheek look at the worst best practices in IT. We're all familiar with the upcoming change to IP version 6. The main impetus for performing this mig Judge Overrules Jury, Acquits Lori Drew in Cyberbullying Case Wired: Threat Level LOS ANGELES — A federal judge on Thursday overturned guilty verdicts against Lori Drew, and issued a directed acquittal on the three misdemeanor charges. Details to follow. Idea of the Day: Wider Potential of Health Care Infrastructure and Information Technology National Cyber Security - Blogs June 25, 2009 MDIA Participates at the Government Health Information Technology (GHIT) Conference in Washington, D.C., and Focuses Interest on ElectRIS the Electronic Diagnostic Record (EDR) National Cyber Security - Blogs By: Business Wire Jun. 25, 2009 05:13 PM Ronald J. Friedman, M.D., President and Chief Executive Officer of Medical Diagnostic Ass New DARPA Director Announced Computing Research Policy Blog Regina Dugan will become the first woman to head the Defense Advanced Research Projects Agency (DARPA) in its 51-year history, the Department of Defense announced today. Dugan takes the reins from acting director, Robert Leheny, who has been running the a FakeAlerts Uncovered McAfee Avert Labs It has been almost a year since the rogue antivirus products, a.k.a. scareware, became rampant. These Trojan families are typically spread via Drive by downloads, SEO poisoning, Spam campaigns and clever social engineering. Having these methods discussed Information Leakage from Keypads Schneier on Security Can anyone guess the entry codes for these door locks? Spam Speculates Michael Jacksons Murder TrendLabs | Malware Blog - by Trend Micro Michael Jackson has been dead for a week already, but there are still a lot of speculations regarding his death. The spam runs are plenty as well — a Michael Jackson-related spam was seen bearing the subject Who killed Michael Jackson?, coming from SMS remote code execution vulnerability in iPhone F-Secure Antivirus Research Weblog Charlie Miller, a well-known security researcher who specializes in Mac and iPhone security, yesterday revealed information about a new vulnerability in iPhone that allows remote code execution via SMS. Not a lot is known about the vulnerability, which wa Reportlinker Adds Healthcare Information Technology National Cyber Security - Blogs By Business Wire June 24, 2009 06:07 AM EDT Reportlinker.com announces that a U.S. Protests Chinese Computer Censorship Regulations National Cyber Security - Blogs By Mark Drajem June 24 (Bloomberg) -- U.S. Trade Representative Rebellion over an ID plan Emergent Chaos What they were emphatically not doing, said Jay Platt, the third-generation proprietor of the ranch, was abiding by a federally recommended livestock identification plan, intended to speed the tracing of animal diseases, that has caused an uproar among ra It's My Birthday Today! Sam Gentile As some people noticed on Facebook already, its my birthday today! And I am 47 already... Coming Through the Rye No More You Know What's Stupid? Everything I Don't Understand The verdict has just come through in the US District Court of Manhattan that has effected an injunction versus a Swedish author's "unauthorized" sequel to JD Salinger's beloved "Catcher in the Rye." The judge argues that the story, revolving around the China's Dam Delay F-Secure Antivirus Research Weblog The Wall Street Journal reports that Beijing has delayed its mandate to have Green Dam Youth Escort filtering software Worst Best Practices: Two Factor Authentication #GartnerSecurity Roger's Information Security Blog These are notes from the last session at the 2009 Gartner Security Summit; a tongue in cheek look at the worst best practices in IT. The real problem here isn't with all two factor authentication, rather it is with bad implementations. Probe blames e-mail loss on sabotage National Cyber Security - Blogs It can't ID deleter of Nagin messages Thursday, July 02, 2009 By John Pope Staff writer An unknown tech-savvy person -- possibly someone with high-level access to New Orleans' City Hall computer system -- d PC makers voluntarily supply Web filter in China National Cyber Security - Blogs By JOE McDONALD Thursday, July 2, 2009 3:45 AM MDT