This Week in Security | Martin Kuppinger

Chinese hackers, US newspapers

This week, several US newspapers, including The New York Times and Wall Street Journal, have reported that they have experienced cyber-attacks related to their coverage of China. In the case of The Times, corporate passwords for every employee had been stolen. Chinese officials called allegations that the Chinese Government commissioned these attacks ?unprofessional and baseless?. However, it is not likely that Chinese hackers caused these incidents without at least tacit government approval. In fact, this appears to be sort of a sideshow to the bigger, unofficial and hidden cyber-war (a 21^st century sort of a ?cold war?) running in the background.

Distrust as a business model?

In a recent survey, the Ponemon Institute asked U.S. adults about the five companies they trust the most to protect the privacy of their personal information. It comes as no surprise that most of the companies forming the ?Internet Association? do not rank within the Top 20 of this list. Some like Apple have been in the Top 20 for years. On the other hand, Microsoft is now amongst these top-ranked companies. Overall, the Internet and Social Network providers have low ratings. It will be interesting to observe whether ?distrust? as a business model really works over a longer period. The study clearly shows that users are aware of privacy risks. The greater this awareness, the bigger the business risk for the ones who are ignoring these concerns.

UPnP networking flaw puts millions of PCs at risk

A recently discovered security flaw in the UPnP (Universal Plug-n-Play) networking protocol potentially puts millions of PCs at risk. UPnP is a protocol that allows network devices like printers, PCs, or routers to discover each other. By design, this discovery should be limited to the local network. However, the flaw allows attackers to identify devices on the internet and run some well-known attacks against them. The reason for the mass of vulnerable systems is that software libraries used to implement UPnP contain some flaws. Most likely, many of the systems at risk never will be patched because these devices are not sold anymore. Thus, there is a significant risk. Unfortunately, there is no simple solution to this issue. The best approach is ensuring that all incoming UPnP requests are blocked at the router and that this device itself does not use UPnP.

Where will all these people come from?

According to recent news, the Pentagon has decided to increase staffing for its cybersecurity force from 900 to 4,500 people. The most important question this news evokes: Where will all these people come from? I have no clue. We are in a situation where we lack experienced IT security professionals. Hiring 3,600 more of this rare species will be a tough job for the Pentagon. It also will wipe the market for cybersecurity professionals. For other companies and organizations that means they will increasingly rely on Managed Security Service Providers which at least can benefit to some degree from ?economies of scale?. The most important challenge with respect to cybersecurity for every economy in the upcoming years will be to force education of IT security professionals. Not only IT but IT security has to become part of education, starting in school. And IT security as a field of study should become one of the most attractive ones, to create the supply governmental and private organizations need urgently.

WhatsApp again

According to Canadian and Dutch data protection authorities, WhatsApp violates international privacy laws. Users do not have a choice to use the application without granting access to their entire address book. For company policies that simply means that usage of WhatsApp is unacceptable as long as any company-related address information is held on the device. Maybe WhatsApp should really start thinking about security and privacy.

Apple iOS 6.1 ? still an unacceptable approach for security patches

Apple this week released iOS 6.1. The update addresses a number of security issues. Amongst these are around 20 that allow infiltrating systems via the Internet and executing code on the target systems. Most of the bugs are related to the webkit which forms the foundation for the iOS Browser Safari. Some of them have been known for quite a while, even while there are no known attacks based on them. Nevertheless, an approach that delivers security patches that are delayed and not just in time, as Microsoft, Oracle and even Adobe do, is simply inadequate. It is long past time that Apple move towards better approaches to security patching. By the way: The update once again deleted the specific APN settings of my UMTS card. Updates that are not able to keep all configurations are just unprofessional.

Online banking: 25% of Germans don?t use it due to security concerns

A survey in Germany, ordered by the initiative D21 (Digital 21), showed that 26% of the participants do not use online banking due to security concerns. That comes as no surprise, when looking at some of the recent incidents. It also sheds an interesting light on the investments of banks to secure online business. A common complaint of banks is that securing online banking is too expensive. That is the reason for not investing in the most advanced technologies or for charging customers for every SMS send out-of-band with a TAN (transaction number). However, besides the money banks spend for successful attacks, the cost of 25% of the customers still relying on classical banking methods with the manual handling involved and thus high costs should not be underestimated. Banks should also consider that this might be just an initial trend and the tendency may be to go back to traditional methods. That then would increase costs for banks. Investing more in really secure online banking might be the cheaper way.

IBM and RSA build security analytics on Big Data technology

A recent announcement from IBM, and information from RSA show that Big Data technology gains momentum as a foundation for security analytics. This goes well beyond traditional SIEM (Security Information and Event Management) and opens new opportunities for advanced analytics of data from various sources. More on that in upcoming blog posts, KuppingerCole reports, and at EIC 2013.

Source: http://blogs.kuppingercole.com/kuppinger/2013/02/02/this-week-in-security/

joe paterno British Open MC Chris Colorado shooting suspect accuweather Finding Nemo 2 Provigil

Pentagon battles military rape epidemic image problem | Aftermath ...

cbsnews.com | Jan 27, 2013

(CBS News) NEW YORK ? Jennifer Norris has always described herself as a good soldier, a hard worker, and someone who stayed out of trouble.

At 24, the Bethel, Maine, native was looking for a bit more structure in her life while aiming for a graduate degree, so she went to her local military recruiting office and enlisted in the Air Force.

Her dream of serving her country was marred by countless incidents of sexual harassment, three attempted sexual assaults, and one rape.

The most violent attack occurred just weeks after Norris enlisted, when her recruiting officer invited her to what she believed was a party for fellow recruits at his home.

?I was excited to go and meet other new recruits,? Norris said in an interview. ?And I showed up at his house, and he proceeded to immediately start pressuring me to want to drink.?

Because she had driven, Norris did not consume any alcohol, but believes he put something in a glass that made her pass out.

?When I woke up, the whole house was dark. Nobody was there, and he picked me up, my basically powerless, lifeless body, and carried me into a bedroom, and he raped me,? Norris said.

She did not file a formal complaint.

?Because I hadn?t even started my career yet. I wasn?t about to go in and say the recruiter just raped me,? Norris said.

Norris went on to become a Technical Sergeant handling satellite communications. But she says she was subjected to repeated sexual advances by another superior officer and was afraid to report it.

?It?s the retaliation,? Norris said. ?I was scared to tell the commander, who it seemed like he was best friends with this man.?

Norris points out, once you?ve committed to the military, you can?t just walk away.

?We can?t quit,? she said. ?We are basically stuck in the situation unless someone in that chain of command helps us get out of it.?

Former Marine Anu Bhagwati is the executive director of the Service Women?s Action Network, which advocates for civil rights of the 15 percent of U.S. military personnel who are women.

The Invisible War ? Official Trailer

?There?s very few deterrents within the military to predators, to commanders who are negligent. In the civilian world, you have more access to redress as a victim,? Bhagwati said. ?In the civilian world, you can use the civil court system to sue your employer for damages. That is the biggest deterrent to discrimination and harassment in the workplace in the United States of America. That is not available to U.S. service members, and it?s a crying shame. ?

According to the Air Force?s own figures, there were more than 790 cases of sexual assault and harassment by service members reported last year, up from 614 the year before.

In 2011, there were also 883 reports of sexual assault and harassment in the Navy and Marines and 1,695 cases in the Army.

Most cases involved one service member allegedly attacking another, usually a woman.

Air Force calls number of sex assaults ?appalling?
Air Force officials find porn, beer bong in base sweeps
Air Force responds to sex scandal with policy changes: Lawmaker

Despite more than 3,000 reports of sexual misconduct for the third year in a row, only one in four attacks is reported. The Defense Department estimates the actual number of incidents is around 19,000 a year.

Norris told her story to the House Armed Services Committee last Wednesday, calling the ?thousands and thousands of male and female survivors? victims of ?the military?s sexual assault epidemic.?

Forty percent of female victims identify a perpetrator was of higher rank, and 23 percent say it was someone in their chain of command, Norris told the committee.

At that hearing, General Mark Welsh, the Air Force Chief of Staff, told members of Congress: ?The Air Force goal for sexual assault is not to lower the number. The goal is zero.?

Welsh announced that he was designating 60 Air Force attorneys to handle these complaints and was stationing one victims? advocate at every base.

In a written statement to CBS News, the Air Force added: ?Sexual assault is a crime and it violates our core values. Every allegation will be thoroughly investigated and commanders will consider the full range of disciplinary and administrative measures to include courts-martial while protecting the Constitutional rights of the accused.?

In 2004, the Pentagon established Sexual Assault Prevention and Response Office to combat sexual assault in the military, but the number of annual incidents keeps climbing.

?Congress continues to hold hearings, and nothing changes,? said California Congresswoman Jackie Speier, a member of the House Armed Services Committee.

Speier has proposed legislation to take sexual assault investigations out of the military chain of command and have cases reviewed by independent panels comprised of civilians and military experts.

Speier said, ?The victims often times are treated like they are pariahs, and they are ostracized, they are marginalized and over the course of very few months, often times they are diagnosed with what?s called a personality disorder and involuntarily discharged from the military.?

That?s what happened to Jennifer Norris, and after her 14 year Air Force career ended sooner than planned, she considered suicide.

?

?We had a gun,? Norris said of her and her husband, Lee. ?I wanted to use it, but my husband stopped me.?

?

Norris? attackers were never punished, and all were eventually honorably discharged with full benefits, she said.

Norris now works with Protect Our Defenders on behalf of service members victimized by sexual assault and harassment, and for a military rape crisis center.

She doesn?t have children, but does not believe she would encourage a daughter to pursue a military career.

?Not in this lifetime,? Norris said. ?My daughter would not join the military, knowing what I know.?

Like this:

Be the first to like this.

Source: http://aftermathnews.wordpress.com/2013/02/02/pentagon-battles-military-rape-epidemic-image-problem/

university of texas UT Austin Lizzie Velasquez NFL Network att libya engadget

National Restaurant Association Announces Kellogg Company as ...

WASHINGTON, Jan. 29, 2013 /PRNewswire-USNewswire/ ? The National Restaurant Association (NRA) today announced that the Kellogg Company has become a new sponsor of the NRA?s award-winning Kids LiveWell program, a voluntary industry-wide initiative designed to help parents make the healthful choice the easy choice for their children when dining out. The NRA applauded the foodservice supplier for its commitment to partner with restaurants in providing a growing selection of healthful choices on kids? menus.???

?The Kellogg Company is a natural partner for us and offers exciting opportunities as we work with our members to provide healthful, innovative menu items for children,? said Joan McGlockton , Vice President, Industry Affairs & Food Policy, National Restaurant Association. ?Kellogg?s expansive reach across the foodservice industry offers restaurants great options and tremendous flexibility in meeting the Kids LiveWell nutrition standards, which will allow us to grow the program and build on our success of providing healthful choices for families.?

?By forging a partnership with the Kids LiveWell program, the Kellogg Company continues our commitment to offer nutritious, flexible meal options for kids and their parents at and away from home,? said Dennis Moy , customer marketing manager, Kellogg Company. ?Our branded products offer a range of nutritious choices that appeal to both kids and parents. Kellogg understands consumers? demand for healthy menu options and we?re happy to help restaurant operators meet these needs.?

As a program partner, Kellogg will work hand-in-hand with restaurants to incorporate products into menu options. Kellogg offers multiple product choices that can help operators meet the Kids LiveWell criteria. With the growing demand for nutritious alternatives, the following solutions help to incorporate alternatives into a well-balanced meal: Morningstar Farms? and Gardenburger? veggie products; Keebler? Animal Crackers; Frosted Mini-Wheats Little Bites? Cinnamon cereal bowl packs; and Kellogg?s? Nutri-Grain? Cereal Bars, all of which offer enhanced nutrition such as whole grain, fiber, vitamins and minerals and/or lean protein.

The NRA launched Kids LiveWell in 2011 to help restaurants highlight their better-for-you menu choices for children. To join the program, restaurants agree to offer and promote a selection of menu items that meet nutrition criteria based on leading health organizations? scientific recommendations, including the USDA Dietary Guidelines. The initiative focuses on increasing consumption of fruit and vegetables, lean protein, whole grains and low-fat dairy, and limiting total calories, unhealthy fats, sugar and sodium. Currently, Kids LiveWell includes more than 120 restaurant brands representing more than 33,000 locations nationwide.

The NRA developed Kids LiveWell in collaboration with Healthy Dining, whose team of registered dietitians works with restaurants to identify and validate the qualifying menu choices. Participating restaurants and their qualifying items can be found on HealthyDiningFinder.com, and also via a free Kids LiveWell App in the Android Market and iTunes app store.

About Kellogg Company
Driven to enrich and delight the world through foods and brands that matter, Kellogg Company (NYSE: K) is the world?s leading producer of cereal, second largest producer of cookies and crackers and ? through the May 2012 acquisition of the iconic Pringles? business ? the world?s second largest savory snacks company. In addition, Kellogg is a leading producer of frozen foods. Every day, our well-loved brands ? produced in 18 countries and marketed in more than 180 countries ? nourish families so they can flourish and thrive. With 2011 sales of more than $13 billion, these brands include Cheez-It?, Coco Pops?, Corn Flakes?, Eggo?, Frosted Flakes?, Kashi?, Keebler?, Kellogg?s?, Mini-Wheats?, Pop-Tarts?, Pringles?, Rice Krispies?, Special K?, and many more. To learn more about Kellogg Company, including our corporate responsibility initiatives and rich heritage, please visit www.kelloggcompany.com.

Founded in 1919, the National Restaurant Association is the leading business association for the restaurant industry, which comprises 980,000 restaurant and foodservice outlets and a workforce of more than 13 million employees. We represent the industry in Washington, D.C., and advocate on its behalf. We operate the industry?s largest trade show (NRA Show May 18-21, 2013, in Chicago); leading food safety training and certification program (ServSafe); unique career-building high school program (the NRAEF?s ProStart, including the National ProStart Invitational April 19-21, 2013, in Baltimore, Md.); as well as the Kids LiveWell program promoting healthful kids? menu options. For more information, visit www.restaurant.org and find us on Twitter @WeRRestaurants, Facebook and YouTube.

SOURCE National Restaurant Association

RELATED LINKS
http://www.restaurant.org

Source: http://www.caviafrica.org/2013/02/01/national-restaurant-association-announces-kellogg-company-as-new-kids-livewell-partner/

Freddy E NHL lockout Honey Boo Boo pirate bay Psalms 91 once upon a time once upon a time

FTC slams (and punishes) social network Path for deceiving users

Rosa Golijan , NBC News ? ? ? 5 hrs.

The developers of Path have agreed to settle Federal Trade?Commission?(FTC) charges that the social network has deceived users and improperly collected personal information (including that of children). As part of the settlement, they'll have to "establish a comprehensive privacy program and to obtain independent privacy assessments every other year for the next 20 years."?And pay a fine of $800,000.

Path is an app-based social network which allows users to share "moments" ? photos, text, geographic locations, song names, and more ? with small networks of up to 150 friends. The social network was initially iOS-only, but is now available on Android as well.

The FTC's complaint primarily focuses on the Path iOS app ? version 2.0, to be specific ? which according to the agency had a misleading user interface which "provided consumers no meaningful choice regarding the collection of their personal information."

When users took advantage of the app's "Add Friends" feature in order to find existing connections on the social network, they were provided with the options to search their contacts, find friends from Facebook, or invite friends via email or SMS. There was just one problem:?

"Path automatically collected and stored personal information from the user?s mobile device address book even if the user had not selected the 'Find friends from your contacts' option,"?a press release by the FTC explains.?"For each contact in the user?s mobile device address book, Path automatically collected and stored any available first and last names, addresses, phone numbers, email addresses, Facebook and Twitter usernames and dates of birth."

The FTC alleges that Path deceived users by claiming that it "only" collects certain information such as IP addresses, browser types, site activity info and similar ? rather than snatching up and storing personal information from the users' contacts. This deception was deemed to be a violation of a Children's Online Privacy Protection (COPPA) rule, which requires those who run online services to notify parents and obtain their permission before information is collected from children under the age of 13.

Path's?developers?explain,?in?a?post?on?its?official?blog,?that?the?information?belonging?to?youngsters?was?collected?due?to?a?glitch.?"[T]here was a period of time where our system was not automatically rejecting people who indicated that they were under 13,"?they?write.?"Before the FTC reached out to us, we discovered and fixed this sign-up process qualification, and took further action by suspending any under age accounts that had mistakenly been allowed to be created."

No matter the explanation, neither this violation nor the overall deception of users is being taken lightly by the FTC. In addition to slamming Path with a civil penalty amounting to $800,000 for the COPPA violation, the agency is also prohibiting it from "making any misrepresentations about the extent to which it maintains the privacy and confidentiality of consumers? personal information." Path is also required to delete any information collected from users under the age of 13 (though the social network claims it already deleted the contact information previously gathered).

In a press release,?FTC Chairman Jon Leibowitz?emphasized that the agency is focusing on consumer privacy violations:

Over the years the FTC has been vigilant in responding to a long list of threats to consumer privacy, whether it?s mortgage applications thrown into open trash dumpsters, kids information culled by music fan websites, or unencrypted credit card information left vulnerable to hackers. ...?This settlement with Path shows that no matter what new technologies emerge, the agency will continue to safeguard the privacy of Americans.

Want more tech news?or interesting?links? You'll get plenty of both if you keep up with Rosa Golijan, the writer of this post, by following her on?Twitter, subscribing to her?Facebook?posts,?or circling her?on?Google+.

Source: http://www.nbcnews.com/technology/technolog/ftc-slams-punishes-social-network-path-deceiving-users-1B8211202

Oscar Pistorius Aliya Mustafina Kirk Urso London 2012 Javelin roger federer Olga Korbut Usain Bolt 2012 Olympics

Garnet red PlayStation 3 bundled with God of War: Ascension and 500GB HDD arrives this March for $349

Sony apparently sees 2013 as a chance to colorize its aging PlayStation 3 console, today announcing yet another new color for the superslim packing 500GB of storage. To match the blood red tattoos found all over God of War star Kratos' body, Sony colored this one garnet red, and is pairing the console with God of War: Ascension -- thusly, the bundle arrives on March 12, the same day God of War: Ascension is scheduled to go up for sale. Unlike its "Classic White" brethren, you won't get a full-year subscription to PlayStation Plus in this bundle -- a disappointment considering this one costs $50 more. It does, however, include not just a copy of God of War: Ascension, but also God of War Saga (which collects the first three God of War games) and God of War: Origins Collection (which bundles the two God of War PlayStation Portable games). That's a total of six God of War games included in this bundle, so you'd better really be into spending time with Kratos should you pick this up.

Gallery: Garnet Red PlayStation 3 (God of War: Ascension bundle)

Filed under: Gaming, HD, Sony

Comments

Source: http://www.engadget.com/2013/01/31/garnet-red-playstation-3/

Outback Bowl Carly Rae Jepsen dallas cowboys Rose Bowl 2013 kim kardashian anderson cooper kim kardashian pregnant

Tech Trends: The Mobile Wave ?Catching a wave is about timing ...

?

In the recent book by technologist Michael Saylor, CEO of MicroStrategy The Mobile Wave: How Mobile Intelligence Will Change Everything, Saylor argues that coming indispensability of mobile technologies. This ?the fifth wave of computer technology? will transform the possibilities of mobile computing on business, society, economies and everyday life.

?

Well, the fifth wave has already done this, and doubtlessly will continue to do so in ways we haven?t even imagined yet. From growing business opportunities in third world countries where there is a lack of what we consider basic business infrastructure, to providing educational opportunities elearning that build skills for the next generation of jobs globally, to managing energy consumption in our homes, mobile technology has already brought us extraordinary change to our daily lives.

?

Consumers are not the only ones embracing software and mobile applications. Traditional companies are becoming software companies that perform the functions of those traditional companies. Look at Amazon; they are a software company that sells books (and a whole lot of other products and services). Netflix is a streaming company that sells video viewing. Apple sells digital music. Skype sells telephone service. Disruptive technologies and their application are appearing faster than Moore?s law!

?

The innovative possibilities will only grow as the market grows. Comparing the number of people on the internet ten years ago to today: there were 50 million users on the internet who connected via dial up; today there are 2 billion internet users connecting in large part via broadband. By the end of this decade, there will be 5 billion smart phone users (Marc Andreessen interview on WSJ.com). Companies spend about ? of trillion per year on software today, so imagine the investment in software, mobile apps, cloud, SaaS, as the number of users explodes.

?

?
?

So where are the jobs? Taking note from some surfing tips, ?it is all about timing, positioning, and paddling hard?. A look at Indeed.com job titles posted online (see graph), shows Java and Jquery, Ruby, Saas, Android, Ios, Mobile App, Html5, Hadoop, Mongodb, Puppet, Ecommerce amongst the top trending job skills that companies are recruiting for.

?

Written by Redfish Technology

Redfish Technology writes articles on technology and employment trends on our Catch of the Day blog regularly. High tech and cleantech jobs are posted and updated weekly as well.

The Hook, Line & Sinker blog features expert perspectives on recruiting, staffing, hiring, leadership, work life balance, HR, and related subjects.

?

Further reading

Why Software Is Eating The World?

The Mobile Wave: How Mobile Intelligence Will Change Everything?

Matt Mills: Image recognition that triggers augmented reality

The Balancing Act: The Wireless Reach of Qualcomm

?

Source: http://www.redfishtech.com/catch_of_the_day/2013/01/tech-trends-the-mobile-wave-catching-a-wave-is-about-timing-positioning-and-paddling-hard/

oregon ducks rob gronkowski Coughing eddie murphy Stephanie Bongiovi stanford football guy fieri

Dating Don'ts: Divorce & Other Facts You Must Disclose On Your ...

Let me make this clear: I don?t have a problem with dating a divorced man. No problem at all.

What I?do?have a problem with is when a divorced man isn?t up front about it.

Menfolk of the world, I?m going to lay down some real talk right now: if your online dating profile doesn?t disclose that you are divorced, the moment you explain you are really ?divorced? and not just ?single,? I immediately think you are acting shady. Even if you?weren?t?trying to hide it! Even if you just married her so she could get a green card! Even if you have been divorced so long you?ve forgotten her middle name!

Finding out that ?single? signifier on his online dating profile actually should have read ?divorced? has happened to me a grand total of FIVE times. I shit you not! Yes, all the guys listed themselves as ?single? online, but mentioned their divorces at some point on the first date during the whole ?this is my whole resume and life recap? bit. One guy referred to an ex as his ?ex-girlfriend? first before letting it slip that they had been married. And an honorable mention goes to O?Ex-Boyfriend who dated me exclusively for two whole months before he let it drop that he wasn?t actually legally divorced yet, only separated. Oh, did you just happen to?forget to mention it?!?

Some of these men probably think they shouldn?t be?defined?by their divorce. That?s true, of course. People have long-term relationships and broken engagements and they don?t disclose those on their profiles. However, I would challenge men to assume why they think being divorced is automatically a negative on the dating market. For many women, it?s not a negative at all: a man who has a proven willingness to commit is actually an asset. But my concern is more psychologically paranoid. Nondisclosure of a piece of information so huge ??they once legally bound themselves to another person, promising ??til death do us part??? makes it seem like there?s a?reason?they?re not being up front. And if he?s not being up front about something major like his marital status, what?else?isn?t he being up front about?

Here?s two other facts you?must?disclose in your online dating profile:

• Kids:?Men are generally better about disclosing their children than their divorces. Why is that? It?s so strange, because arguably children are a bigger dealbreaker. Some women are cool with dating a man with kids, some women are not.?It presents a unique set of circumstances. You should be up front from the get-go, so a lady knows whether your couch will have crushed Cheerios between the sheets.
• STD Status:?Ami and I disagree on this one. She doesn?t think that going on a date with someone means there?s a presumption that sex will take place and that people should disclose once it?s clear sex is going to occur. Meanwhile, I say that you should at the very least?obliquely indicate?your STD status in some way prior to meeting a person for two reasons. One, so other people wirh similar STDs who may want to date someone who knows what they?re dealing with can find you, and two, so someone for whom an STD is a dealbreaker knows whether to to invest the time. For example, I was once chatting with a guy online who revealed to me that he had genital herpes. I wasn?t surprised at that disclosure, because he had indicated in his profile that he was willing to date someone who had an STD and I assumed (correctly) that meant he had one himself. We never ended up going out on a date for a reason unrelated to the herpes, but I thought he had an immense amount of integrity for fully informing me. And that immense amount of integrity only made me like him more.

What other facts do you think people should be open and honest about in their online dating profiles? Tell me what you think in the comments.

This post?originally appeared?on?The Frisky. Republished with permission.

Source: http://www.clutchmagonline.com/2013/01/dating-donts-divorce-other-facts-you-must-disclose-on-your-online-dating-profile/

texas relays meniscus the colony kids choice awards ncaa final four 2012 uk vs louisville university of kansas