Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
Date sent: Thu, 17 Jul 2008 19:29:02 -0400 From: The Security Community [EMAIL PROTECTED] http://70percenters.googlepages.com/ Good heavens! You mean ... the CSI/FBI survey was never more than an ... opinion poll? My word! Whoever would have believed it! (I

[funsec] Torvalds attacks IT industry 'security circus'

2008-07-18 Thread Richard M. Smith
http://news.cnet.com/2100-1007-6243900.html?tag=nefd.top Linux creator Linus Torvalds has labeled makers of the OpenBSD operating system a bunch of masturbating monkeys, as part of a wider critique of what he said was self-centered behavior in the IT security industry. In an e-mail to the

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Thu, Jul 17, 2008 at 8:18 PM, Gadi Evron [EMAIL PROTECTED] wrote: On Thu, 17 Jul 2008, The Security Community wrote: Not reading the post below, I can tell you the numbers are based on real research, but it is so old my memory fails me. The link to this research is all the Security

Re: [funsec] Texas Bank Dumps Antivirus for Whitelisting

2008-07-18 Thread Valdis . Kletnieks
On Thu, 17 Jul 2008 18:05:39 EDT, Richard M. Smith said: So under HA, a Web browser can only show ASCII text files. After all, HTML itself is a programming language with intermingled code (ie., HTML tags) and data (text). BZZT! Wrong, but thank you for playing. :) The actual *hardware* may

Re: [funsec] Texas Bank Dumps Antivirus for Whitelisting

2008-07-18 Thread Richard M. Smith
I think I have been making the same point for the last 10 messages. ;-) HA does little to secure interpreters except for protecting against buffer overflow errors in an interpreter. VNA architecture can of course protect against buffer overflow errors also. The CPU needs to have the ability to

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Gadi Evron
On Fri, 18 Jul 2008, The Security Community wrote: On Thu, Jul 17, 2008 at 8:18 PM, Gadi Evron [EMAIL PROTECTED] wrote: On Thu, 17 Jul 2008, The Security Community wrote: Not reading the post below, I can tell you the numbers are based on real research, but it is so old my memory fails me.

Re: [funsec] the most brilliant advertising: Penis Reduction

2008-07-18 Thread RandallMan
-- Message: 1 Date: Thu, 17 Jul 2008 19:11:24 -0500 (CDT) From: Gadi Evron [EMAIL PROTECTED] Subject: [funsec] the most brilliant advertising: Penis Reduction To: funsec@linuxbox.org Message-ID: [EMAIL PROTECTED] Content-Type:

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Fri, Jul 18, 2008 at 10:35 AM, Gadi Evron [EMAIL PROTECTED] wrote: On Fri, 18 Jul 2008, The Security Community wrote: On Thu, Jul 17, 2008 at 8:18 PM, Gadi Evron [EMAIL PROTECTED] wrote: On Thu, 17 Jul 2008, The Security Community wrote: Not reading the post below, I can tell you the

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Gadi Evron
On Fri, 18 Jul 2008, The Security Community wrote: On Fri, Jul 18, 2008 at 10:35 AM, Gadi Evron [EMAIL PROTECTED] wrote: On Fri, 18 Jul 2008, The Security Community wrote: On Thu, Jul 17, 2008 at 8:18 PM, Gadi Evron [EMAIL PROTECTED] wrote: On Thu, 17 Jul 2008, The Security Community wrote:

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Young, Keith
There is no FBI research to support the 70% Lie. Probably never has been and never will be. No one can cite the original research because it doesn't exist. It is myth. It is urban legend. And how do you expect the FBI to produce data on their research of active/closed criminal

[funsec] Hostage ruse's fake Web site irks group with similar name

2008-07-18 Thread Richard M. Smith
http://www.cnn.com/2008/WORLD/americas/07/18/colombia.website/index.html Hostage ruse's fake Web site irks group with similar name BOGOTA, Colombia (CNN) -- Colombian military intelligence apparently set up a Web site for a fake humanitarian group as part of a ruse to dupe leftist rebels into

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Valdis . Kletnieks
On Fri, 18 Jul 2008 11:14:52 EDT, Young, Keith said: There is no FBI research to support the 70% Lie. Probably never has been and never will be. No one can cite the original research because it doesn't exist. It is myth. It is urban legend. And how do you expect the FBI to produce

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Fri, Jul 18, 2008 at 11:32 AM, [EMAIL PROTECTED] wrote: On Fri, 18 Jul 2008 11:14:52 EDT, Young, Keith said: I think Verizon Business's recent report (based on over 500 actual data breach incidents) is fairly credible. I'd certainly believe that insiders racked up 70% or more of the

[funsec] Dutch University Can Publish Controversial Oyster Research

2008-07-18 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Via El Reg. [snip] Dutch researchers will be able to publish their controversial report on the Mifare Classic (Oyster) RFID chip in October, a Dutch judge ruled today. Researchers from Radboud University in Nijmegen revealed two weeks ago they had

[funsec] Speaking of the risks of mixing code and data in data files

2008-07-18 Thread Richard M. Smith
http://www.infoworld.com/archives/emailPrint.jsp?R=printThisA=/article/08/0 7/18/New_worm_transcodes_MP3s_to_try_to_infect_PCs_1.html New worm transcodes MP3s to try to infect PCs July 18, 2008 A new kind of malicious software could pose a danger to Windows users who download music files

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Richard M. Smith
The issue is not what the number really is. The issue is the FBI never published it and journalists should stop using it until they can link to the facts. Personally, I find rapidly falling oil production in Mexico a much more compelling issue to be concerned with. Richard

[funsec] Where does the Republican Party stand on the 1st Amendment?

2008-07-18 Thread Richard M. Smith
http://blog.wired.com/27bstroke6/2008/07/gop-threatening.html GOP Threatens CafePress Over Shirts, Stickers and Logos The Republican National Committee is threatening to sue CafePress for hosting an online venue for vendors to hawk GOP-related regalia like T-shirts, stickers and portrayals of

[funsec] State considers pay-as-you-drive auto insurance

2008-07-18 Thread Richard M. Smith
http://www.latimes.com/business/la-fi-carinsure15-2008jul15,0,1541839.story SACRAMENTO -- An alliance of insurance companies and environmentalists wants to bring a new kind of mileage-based auto insurance to California and charge motorists only for the number of miles actually driven. Called pay

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Fri, Jul 18, 2008 at 1:20 PM, Richard M. Smith [EMAIL PROTECTED] wrote: Personally, I find rapidly falling oil production in Mexico a much more compelling issue to be concerned with. Richard And yet the 70% Lie goes on... here's another one for the Hall of Shame, published hours ago...

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Richard M. Smith
It's called a meme. They are hard to stop. It's easy to find many other examples. Richard -Original Message- From: The Security Community [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2008 2:27 PM To: Richard M. Smith Cc: funsec Subject: Re: [funsec] Stop The 70% Lie On Fri, Jul

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Valdis . Kletnieks
On Fri, 18 Jul 2008 14:26:34 EDT, The Security Community said: And yet the 70% Lie goes on... here's another one for the Hall of Shame, published hours ago... same claim, no proof... this NEVER stops... http://www.itworld.com/opinion/53670/beware-hacker-next-door Beware the hacker next

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Fri, Jul 18, 2008 at 2:40 PM, [EMAIL PROTECTED] wrote: On Fri, 18 Jul 2008 14:26:34 EDT, The Security Community said: And yet the 70% Lie goes on... here's another one for the Hall of Shame, published hours ago... same claim, no proof... this NEVER stops...

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Valdis . Kletnieks
On Fri, 18 Jul 2008 14:51:59 EDT, The Security Community said: If it bothers you *that* much, why don't you drop Calum and/or the ITWorld editorial staff a note about it? The comment is at the bottom of the page. Calum has been inducted into the 70 Percenters Hall of Shame. see

[funsec] Off Beat: Tennessee Police Use Controversial Drug to Subdue Prisoners

2008-07-18 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 WTF? Via WSMV.com. [snip] While the [Nashville, TH] Metro police had banned the use of Tasers for a time, they still used a controversial method to subdue unruly people, according to an I-Team report. The city's policy to use the method, which

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Fri, Jul 18, 2008 at 3:01 PM, [EMAIL PROTECTED] wrote: On Fri, 18 Jul 2008 14:51:59 EDT, The Security Community said: On the other hand, it's going to be very hard to fight the 70% are insiders meme until you find a way to debunk this survey:

[funsec] Security people need to be comfortable, darn it!

2008-07-18 Thread Alex Eckelberry
http://blog.washingtonpost.com/washingtonpostinvestigations/2008/07/the_ air_forces_use_of.html The Air Force's use of more than $16 million in counter-terrorism funds for comfort capsules on military planes has prompted an internal debate

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Fri, Jul 18, 2008 at 3:23 PM, Gadi Evron [EMAIL PROTECTED] wrote: On Fri, 18 Jul 2008 14:51:59 EDT, The Security Community said: The original number is from some research in the 70s. Then the articles should read According to some research done in the 70s... But they don't. FWIW, that

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Gadi Evron
On Fri, 18 Jul 2008 14:51:59 EDT, The Security Community said: If it bothers you *that* much, why don't you drop Calum and/or the ITWorld editorial staff a note about it? The comment is at the bottom of the page. Calum has been inducted into the 70 Percenters Hall of Shame. see

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Valdis . Kletnieks
On Fri, 18 Jul 2008 15:22:56 EDT, The Security Community said: Again, CyberArk != FBI and 47 != 70. You missed the point - if 47% are doing things that are quite possibly ECPA offenses, they could *easily* total 70% of *all* the incidents *all by themselves*. Assume 5 sysadmins at a company.

Re: [funsec] Off Beat: Tennessee Police Use Controversial Drug to Subdue Prisoners

2008-07-18 Thread William Lefkovics
That's scary... Maybe they inject the officers so they forget how they beat the unruly guys to a pulp. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Ferguson Sent: Friday, July 18, 2008 12:13 PM To: funsec@linuxbox.org Subject: [funsec] Off Beat:

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Jeff Kell
Gadi Evron wrote: The original number is from some research in the 70s. Yeah. Before the internet :-) Jeff ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread The Security Community
On Fri, Jul 18, 2008 at 3:47 PM, [EMAIL PROTECTED] wrote: On Fri, 18 Jul 2008 15:22:56 EDT, The Security Community said: Again, CyberArk != FBI and 47 != 70. You missed the point - if 47% are doing things that are quite possibly ECPA offenses, they could *easily* total 70% of *all* the

Re: [funsec] Where does the Republican Party stand on the 1st Amendment?

2008-07-18 Thread John C. A. Bambenek, GCIH, CISSP
I know all you new media types hate IP, but you know, having shameless no-talent hacks gank the work of actual good designers only serves to decimate yet another industry. See the news media for an example. On Fri, Jul 18, 2008 at 12:47 PM, Richard M. Smith [EMAIL PROTECTED] wrote:

Re: [funsec] Off Beat: Tennessee Police Use Controversial Drug to Subdue Prisoners

2008-07-18 Thread Rob Thompson
What the shit is going on in this country? The cops can drug you? Cameras on every freaking street corner. Electronic monitoring in Massachusetts that's coming up... WTF? Anyone ever seen Equilibrium? Is this where we are headed? On Fri, Jul 18, 2008 at 12:12 PM, Paul Ferguson [EMAIL

Re: [funsec] the most brilliant advertising: Penis Reduction

2008-07-18 Thread Rob Thompson
On Fri, Jul 18, 2008 at 7:54 AM, RandallMan [EMAIL PROTECTED] wrote: -- Message: 1 Date: Thu, 17 Jul 2008 19:11:24 -0500 (CDT) From: Gadi Evron [EMAIL PROTECTED] Subject: [funsec] the most brilliant advertising: Penis

Re: [funsec] Where does the Republican Party stand on the 1st Amendment?

2008-07-18 Thread Rob Thompson
Sorry for top posting, but to answer the question: Where does the Republican Party stand on the 1st Amendment? Right on top of it, with dog - crap covered shoes... Not that the Demo's are any better... On Fri, Jul 18, 2008 at 10:47 AM, Richard M. Smith [EMAIL PROTECTED] wrote:

[funsec] SF serving malware?

2008-07-18 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
OK, if Childs is behind this, fry him: if he isn't, fry them. Finjan reported Wednesday that the city of San Francisco Web site was one of over 1,000 sites treating visitors to malicious code. Vulnerable users got a Trojan loaded onto their machines that tries to join them to the Asprox

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
Date sent: Fri, 18 Jul 2008 08:11:29 -0400 From: The Security Community [EMAIL PROTECTED] The Security Community simply disagrees This is the usual state of The Security Community. == (quote inserted randomly by Pegasus Mailer) [EMAIL

Re: [funsec] SF serving malware?

2008-07-18 Thread Rob Thompson
On Fri, Jul 18, 2008 at 4:47 PM, Rob, grandpa of Ryan, Trevor, Devon Hannah [EMAIL PROTECTED] wrote: OK, if Childs is behind this, fry him: if he isn't, fry them. I'm with you on this one... Finjan reported Wednesday that the city of San Francisco Web site was one of over 1,000 sites

[funsec] U.S. House Defeats Paper Ballot Funding

2008-07-18 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Via FCW.com. [snip] The House rejected a bill last week that would have funded the purchase of paper ballots as a backup to electronic voting systems for the upcoming election. The bill would have directed the Election Assistance Commission to