<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>stevedoria.net &#187; Security</title>
	<atom:link href="http://blog.stevedoria.net/category/security/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.stevedoria.net</link>
	<description>Real-World Computing Experience Distilled</description>
	<lastBuildDate>Tue, 01 Jun 2010 08:49:37 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>The Necessity of Securing Backups</title>
		<link>http://blog.stevedoria.net/20080426/the-necessity-of-securing-backups</link>
		<comments>http://blog.stevedoria.net/20080426/the-necessity-of-securing-backups#comments</comments>
		<pubDate>Sun, 27 Apr 2008 00:53:35 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/20080426/the-necessity-of-securing-backups</guid>
		<description><![CDATA[Another case of lost backups has recently been featured on the pages of Slashdot. Let&#8217;s just hope that the &#8220;proprietary compression and encoding tools&#8221; place the strength of their cipher on a key, rather than a proprietor&#8217;s secret cipher algorithm. The article seems to suggest that third-party security consultants were unable to decipher the data [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20080426/the-necessity-of-securing-backups/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Secure Coding: Principles &amp; Practices</title>
		<link>http://blog.stevedoria.net/20070828/secure-coding-principles-practices</link>
		<comments>http://blog.stevedoria.net/20070828/secure-coding-principles-practices#comments</comments>
		<pubDate>Wed, 29 Aug 2007 03:29:12 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Software Engineering]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/20070828/secure-coding-principles-practices</guid>
		<description><![CDATA[I read Graff and van Wyk&#8217;s Secure Coding: Principles &#038; Practices to completion, but not because each page was more enlightening than the previous. I realized that the same themes and adages were being repeated constantly after having read half the book. Because it was pretty easy to get midway through the book, I decided [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20070828/secure-coding-principles-practices/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Securing SSH Connections</title>
		<link>http://blog.stevedoria.net/20070426/securing-ssh-connections</link>
		<comments>http://blog.stevedoria.net/20070426/securing-ssh-connections#comments</comments>
		<pubDate>Fri, 27 Apr 2007 06:10:28 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[IT Administration]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/20070426/securing-ssh-connections</guid>
		<description><![CDATA[Sure, traffic between an SSH client and server is enciphered, but how can certainty that the correct server is directly processing client requests be enhanced. A man in the middle attack occurs when an SSH server poses as the desired host, and forwards messages between the desired host and the client. The fake SSH server [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20070426/securing-ssh-connections/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Comments for RFC 959 &#8211; File Transfer Protocol</title>
		<link>http://blog.stevedoria.net/20070213/comments-for-rfc-959-file-transfer-protocol</link>
		<comments>http://blog.stevedoria.net/20070213/comments-for-rfc-959-file-transfer-protocol#comments</comments>
		<pubDate>Wed, 14 Feb 2007 03:07:13 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[IT Administration]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/20070213/comments-for-rfc-959-file-transfer-protocol</guid>
		<description><![CDATA[I do not allow people to use Telnet on servers that I manage, because usernames and passwords are transmitted over the network as clear text. As concerned about security as people are, I am surprised at peoples&#8217; insistence on using FTP. FTP, a network protocol that also transmits password information as clear text, continues to [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20070213/comments-for-rfc-959-file-transfer-protocol/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Pray for Better, Prepare for Worse</title>
		<link>http://blog.stevedoria.net/20061021/pray-for-better-prepare-for-worse</link>
		<comments>http://blog.stevedoria.net/20061021/pray-for-better-prepare-for-worse#comments</comments>
		<pubDate>Sat, 21 Oct 2006 09:14:28 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[IT Administration]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/20061021/pray-for-better-prepare-for-worse</guid>
		<description><![CDATA[All things mechanical will fail. A lack of sound disaster recovery procedures should keep a knowledgeable IT administrator awake at night. Measures to prevent data loss are needed by many recovery scenarios and are a worthwhile vehicle to discuss the overall need to practice disaster recovery procedures. Data backups are a key component of disaster [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20061021/pray-for-better-prepare-for-worse/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>H&amp;R Block and SSN Mismanagement</title>
		<link>http://blog.stevedoria.net/20060123/hr-block-and-ssn-mismanagement</link>
		<comments>http://blog.stevedoria.net/20060123/hr-block-and-ssn-mismanagement#comments</comments>
		<pubDate>Mon, 23 Jan 2006 20:46:40 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/20060123/hr-block-and-ssn-mismanagement</guid>
		<description><![CDATA[Paul Roberts uncovers H&#038;R Block&#8217;s mismanagement of social security numbers in H&#038;R Block Mailing Reveals Customers&#8217; SSNs. The leak was attributed to user error, but the blunder is most likely due to ill-implemented software. After all, software is responsible for printing the labels that are used for these software packages and for assessing their marketing [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20060123/hr-block-and-ssn-mismanagement/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Who&#8217;s Afraid of the Cookie Monster?</title>
		<link>http://blog.stevedoria.net/20051229/whos-afraid-of-the-cookie-monster</link>
		<comments>http://blog.stevedoria.net/20051229/whos-afraid-of-the-cookie-monster#comments</comments>
		<pubDate>Fri, 30 Dec 2005 00:13:54 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/20051229/whos-afraid-of-the-cookie-monster</guid>
		<description><![CDATA[Wired.com has an Associated Press article that discusses the NSA&#8217;s Lamest Spy Tool: Cookies. The first sentence in the article claims &#8220;the National Security Agency&#8217;s internet site has been placing files on visitors&#8217; computers that can track their web-surfing activity,&#8221; without bringing up any of these files&#8217; limitations. Articles like the one featured on Wired.com [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20051229/whos-afraid-of-the-cookie-monster/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Latest IE  Security Threat</title>
		<link>http://blog.stevedoria.net/20051129/latest-ie-security-threat</link>
		<comments>http://blog.stevedoria.net/20051129/latest-ie-security-threat#comments</comments>
		<pubDate>Wed, 30 Nov 2005 04:38:55 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[IT Administration]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/?p=41</guid>
		<description><![CDATA[An IT article is publicizing a remote hole in Microsoft Internet Explorer that can be allegedly used to execute arbitrary code. The latest virus definition update for McAfee VirusScan prevents the proof of concept page at computerterrorism.com from executing the payload right after Internet Explorer crashes, but systems without third-party security products may be vulnerable. [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20051129/latest-ie-security-threat/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Misguided Response on XML-RPC Worm</title>
		<link>http://blog.stevedoria.net/20051115/misguided-response-on-xml-rpc-worm</link>
		<comments>http://blog.stevedoria.net/20051115/misguided-response-on-xml-rpc-worm#comments</comments>
		<pubDate>Wed, 16 Nov 2005 02:21:40 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[IT Administration]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/?p=35</guid>
		<description><![CDATA[A recent worm, Lupper, is traversing the Internet and exploiting computers that run the XML-RPC package for PHP. The official XML-RPC for PHP homepage states that the package&#8217;s abuse of the PHP eval function created a security hole that allowed remote execution of arbitrary code. This means that any systems that run PHP and a [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20051115/misguided-response-on-xml-rpc-worm/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>My Hijacked Credit Card</title>
		<link>http://blog.stevedoria.net/20050910/my-hijacked-credit-card</link>
		<comments>http://blog.stevedoria.net/20050910/my-hijacked-credit-card#comments</comments>
		<pubDate>Sat, 10 Sep 2005 07:28:13 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.stevedoria.net/?p=20</guid>
		<description><![CDATA[I received an account statement for my Chase Platinum Visa credit card today and was shocked to discover new charges. It is surprising, because this credit card has never been used for purchases. There was one balance transfer that was done at the opening of the account to take advantage of a 0% APR for [...]]]></description>
		<wfw:commentRss>http://blog.stevedoria.net/20050910/my-hijacked-credit-card/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
