Networking exec blasts wiretapping rules
93953
Requirements for broader wiretapping on Net phone and broadband connections are too costly, unwieldy, says Global Crossing.
620714
A top Microsoft executive promoted the company's licensing of network security protocols at theÂ Interop trade showÂ on Wednesday, but not before taking time out during a keynote address to defend the company's patent licensing program for open-source software.
87536
Can members of Al Qaeda use voice over Internet technology (VOIP) to avoid wiretaps?
610341
US President George W. Bush on Friday lashed out at Democratic lawmakers in the House of Representatives for blocking legislation that would extend a controversial wiretapping program.
270215
WASHINGTON -- The chairman of the Federal Trade Commission on Wednesday recommended against additional regulation of high-speed Internet traffic.
266647
A federal judge who used to authorize wiretaps in terrorism and espionage cases criticized yesterday President Bush's decision to order warrantless surveillance after the Sept. 11, 2001, attacks.
118261
The ever-expanding number of ways to communicate has raised concerns about the spread of confidential information through unsecure devices.
458947
(InfoWorld) - The biggest threat to your personal and professional security may be the information that your computer is already transmitting to the world around you. Data leakage might be a hot topic, given the list of high-profile incidents reported by businesses such as TJX Companies -- through which reams of detailed consumer records have been exposed -- but most people are already broadcasting enough information from their laptops to allow hackers to aim targeted attacks at their devices and corporate networks, according to security researchers. In a presentation at the ongoing Black Hat DC 2007 conference being held in Washington, DC, from Feb. 28 to Mar. 1, experts with Atlanta-based services provider Errata Security outlined a trend they've labeled as "data seepage." The concept is based on the idea that people using Wi-Fi systems to connect their computers to the Web in public settings such as airport lounges or coffee shops are handing out enough personal clues to give attackers plenty of ammunition to make them the target of their malware or hacks. Using a software application they have designed dubbed Ferret, Errata chief executive Robert Graham and chief technology officer Dave Maynor demonstrated how easy it is to intercept seemingly innocuous information from people's devices as they connect to the Internet. They can then take that data to create a detailed profile of the individual, their Web usage, and even their employers' IT networks. During the course of their presentation, the security experts were even able to use Ferret to intercept an e-mail sent to a reporter working in another conference session that included one of her applications' passwords. Whenever a user connects to the Web via Wi-Fi, or even if their laptop's wireless systems are merely left turned on, someone using such a so-called sniffing tool can garner data about where the user has traveled, what type of operating system or applications they use, and who they may work for, Graham said. For instance, the expert said that while sitting in airlines' business customer lounges it's not hard to look at details offered up freely by the machines of other travelers using Wi-Fi. In doing so, Ferret can detect what hotspots the person has been through, giving an idea of their physical location; determine what e-mail servers or IM systems they attempt to access, lending an idea of their software and potentially their employer; and even scoop their IM contacts to determine who they communicate with. "With seepage, we're talking about the distribution information that you actually mean to broadcast but which hackers can take and exploit for their own needs," Graham said. "All you have to do is turn on your computer and we can tell a lot about you." For instance, computers made by Apple offer up details of what operating system someone is using when they turn their machines on or access Wi-Fi. If captured by a hacker, this could allow them to target specific malware attacks at the individual based on any known vulnerabilities in their version of the OS. In addition to data related to Web connectivity or operating systems, such tools can be used to detect what types of anti-virus applications users are running when the software programs attempt to automatically download updates. With the wide number of known vulnerabilities existing in anti-virus programs, a hacker could easily take that information and use it to craft a targeted attack, the experts said. The tools can even be used to garner similar data from smartphones and other data-centric handhelds, according to the researchers. The experts contend that when the U.S. government was piecing together information about suspected terrorists after the Sept. 11 attacks, investigators likely relied on the same types of data to figure out where various people had traveled, who they communicated with, and what they might have been looking at on the Internet. Consumers may be upset about retailers who collect and expose sensitive information or unchecked government wiretaps, but they are unknowingly handing over a range of data that could be used to track their movements, steal their money, or penetrate their employers' networks. "Just by going to a lounge in an airport with a sniffer like this, you can easily develop a profile that can be used to exploit any weaknesses," Graham said. "You can move from [intercepting] a low-level MAC address to capturing high-level information in a very short amount of time." To help people understand just how much information can be gathered using sniffers like Ferret, Errata is posting the source code for the tool on its Web site so that developers can try it for themselves. The best advice that the security experts offered to end-users to protect themselves is to use personal firewalls and VPNs to cloak as much of their information and activity as possible. "It's not single pieces of information that we're warning about, it's the collection of pieces of data that offer detailed information about who you are," Maynor said. "If the government were collecting this information people would be up in arms, but as it is, they are already giving it away without a second thought."
173288
Six months before the San Jose-Cisco Systems controversy went public, Leon Nix knew the city risked violating its own rules by favoring the networking company's products in its new City Hall. But he feared speaking out, thinking his bosses might come after him.
80208
A senior developer surveys the cultural chasm between suits and geeks, and says that communication is possible -- but that managers need to keep a few things about the hacker's worldview in mind.
294185
Things are pretty informal at this organization, and network security isn't exactly tight. So when the head finance guy needs a little work done on his network account, IT admin simply asks what his password is.
164025
InfoWorld - Cisco Systems&#160;has&#160;expanded&#160;a&#160;range of security mechanisms for wired LANs&#160;to the&#160;wireless side of enterprise networks.
550856
A former Bush campaign official has been charged with plotting to jam the phone networks of political opponents during the November 2002 election.
462867
Howard Schmidt, former security advisor to the White House, warns of upcoming threats to businesses and the Net itself.
62123
(InfoWorld) - Cisco executives speaking at the ongoing Security Standard Conference claim that the networking giant hasn't sapped innovation in the security companies it has acquired in its efforts to add to its own expanse of IT systems-defense products, while some customers clearly feel otherwise. Taking the stage at the conference in Chicago on Monday to participate in a panel on Cisco's vision for warding off emerging threats and spam, the company's top security executives, and former IronPort Chief Executive Scott Weiss, defended the firm's growth-via-acquisition strategy. Cisco finalized its $830 million buyout of IronPort in June -- only the latest in a long string of such security acquisitions. The company has already begun blending the messaging and malware filtering gateway specialist's technologies into its firewalls, which the executives claim has created a new capability to provide customers with "wide packet inspection," an approach that adds reputation-based anti-attack capabilities to the systems' existing virus and spam detection abilities. Such integration work illustrates the fact that Cisco is improving the ability of its customers to defend their networks from attack and that the firm is serious about innovation and not just attempting to grow its revenues or boost sales of its networking gear by snapping-up other security vendors, Weiss told the assembled audience. Asked by a conference attendee whether major platform providers like Cisco, Microsoft, and IBM will continue to swallow smaller security companies, along with industry giants like Symantec, and how that will impact the availability of the cutting-edge technologies often developed by independent vendors, Weiss said that more consolidation is likely inevitable. Yet he also acknowledged that some niche players will continue to do well on their own. "All the [venture capital] firms that are into small security companies will likely make out like bandits, and there will be a scrum to get the good stuff," said Weiss, who is still heading up IronPort inside Cisco. "Bigger companies will have to decide whether to build, buy, or partner." Weiss highlighted Webroot, the anti-spyware software company that industry watchers have long tabbed for acquisition based on its specialized focus -- and which continues to defy those predictions and grow on its own -- as an example of the type of vendor that will be able to compete in a world where security is being driven further into other broadly-distributed IT platforms, such as Cisco's ubiquitous networking gear. "I think we'll continue to see new Webroots pop-up that can help deal with new threats," he said. "The issue for these companies is how broad is their platform and how to carve a significant portion of the infrastructure out; they have to ask themselves if their technology is broad enough to support a large, profitable company." Along with the benefits of melding together complimentary technologies, such as gateway filtering tools and firewalls, Weiss claims that customers are seeking integrated technologies from single vendors and increasingly looking for "one throat to choke" when selecting security tools. "Users of these technologies want products that talk to each other and have collaborative interfaces," he said. Customers worry about consolidation However, some existing Cisco customers claim that they are troubled by the continued pace of security industry consolidation. Even if Cisco can add many of the pieces that customers seek, it will likely not be able to provide technologies that are as innovative and effective as those made by independent vendors in some areas, said Waqas Akkawi, senior manager of IT security at Sirva, the moving giant that owns Allied Van Lines, Global Van Lines, and North American Van Lines, among other subsidiaries. Akkawi said that Cisco excels in some areas of security where it has experience, namely in network-based tools, but he noted that even some of those products, such as its IDS (intrusion detection systems) and IPS (intrusion prevention systems), also added via various acquisitions, don't measure up to those made by standalone providers. "Cisco is good at what they do naturally, as with firewalls, routers and switches, but they haven't done a good job on things like IPS and IDS where some other niche companies do a better job," said Akkawi. "In a lot of cases I think customers would be better off if these types of companies partnered instead of doing acquisitions or trying to build functionality into their existing products on their own. Sometimes a niche product that integrates well is going to be better than what these guys are talking about." Akkawi, who is a Cisco-certified IT pro, said that Sirva is constantly considering whether or not to go best-of-breed with independent vendors or buy into integrated security products like those being integrated by platform providers like Cisco's IronPort buyout. "These acquisitions will only work if a platform provider like Cisco can build the acquired technology into things they already do well. In some cases, these types of companies haven't been able to integrate everything they've bought, and we've seen some best-of-breed products go away," he said. "[Sirva] will likely continue to go fifty-fifty in terms of the integrated products we choose to buy, and the others we seek out to get true best-of-breed functionality." Many IT platform providers have moved aggressively in recent years to add security to their portfolios where it fits, as with EMC's buyout of authentication specialists RSA, along with IBM and HP's recent moves to add applications testing capabilities to their software development platforms via acquisition. The nature of the security industry is such that certain functions will be parceled into such widely-used technologies, while other newer tools will likely emerge from independents, said Mick Scully, vice president of product management at Cisco's Security Technology Group. Scully countered that despite any perception of cutting at innovation, Cisco is creating many new technology combinations that customers have responded well to, allowing its overall security business to crest $2 billion in revenues in the firm's fiscal 2006, representing a 25 percent annual growth rate in its overall security business. "There will always be a balance between best-of-breed and integrated security. The beauty of the market is that it is constantly changing at a rapid pace, and we will always see startups who address specific problems," Scully said. "But if you look at an acquisition like IronPort, we've left it almost entirely intact, run by the same team, even as we push its technologies into other products." Scully also highlighted the fact that Cisco has proven its chops as a security innovator, such as in creating the burgeoning market for NAC device authentication systems. He said that Cisco itself views its acquisitions as fifty-fifty propositions, looking for as many opportunities to continue to innovate the technologies its buys as it seeks opportunities to fold them into its other product lines. "It's an interesting dichotomy, I sort of see what these customers are saying, but we also believe that our standalone products, such as our NAC appliances, are already best-of-breed," Scully said. "As niche security markets become mature, merchant markets, we are going to look to get into those markets where we fit in; but we're also doing a lot of organic product development on our own, and we feel that we can offer best-of-breed capabilities in the security markets we compete in."
482496
A government lawyer used a dramatic scenario of a nuclear attack on Washington to illustrate his arguments Tuesday in defense of President Bush's warrantless wiretapping program.
617194
Despite the best efforts of the Wi-Fi industry to assure companies wireless networking is safe in the workplace, a new survey of executives finds security remains the leading barrier to WLAN adoption.