<?xml version="1.0" encoding="UTF-8"?>
<!--Generated by Squarespace Site Server v5.11.81 (http://www.squarespace.com/) on Thu, 23 Feb 2012 19:52:31 GMT--><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0"><channel><title>Infosecurity.US</title><link>http://www.infosecurity.us/blog/</link><description></description><lastBuildDate>Thu, 23 Feb 2012 19:50:40 +0000</lastBuildDate><copyright></copyright><language>en-US</language><generator>Squarespace Site Server v5.11.81 (http://www.squarespace.com/)</generator><item><title>Nitrozac and Snaggy: Parent's Worst Facebook Nightmare</title><category>The Joy of Tech™</category><dc:creator>Marc Handelman</dc:creator><pubDate>Thu, 23 Feb 2012 16:30:37 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/23/nitrozac-and-snaggy-parents-worst-facebook-nightmare.html</link><guid isPermaLink="false">850802:9983539:15146062</guid><description><![CDATA[<p><span class="full-image-block ssNonEditable"><span><a href="http://www.geekculture.com/joyoftech/joyarchives/1655.html" target="_blank"><img style="width: 735px;" src="http://www.infosecurity.us/storage/images-15/1655.gif?__SQUARESPACE_CACHEVERSION=1329938699061" alt="" /></a></span><span class="thumbnail-caption" style="width: 735px;">via the genius of Notrozac and Snaggy at The Joy of Tech&trade;</span></span></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15146062.xml</wfw:commentRss></item><item><title>Say It Aint So: USAF AFSOC iPads, Russian Security Software and National Security</title><category>AFSOC</category><category>Blatant Stupidity</category><category>Chinese Manufactured Chips</category><category>Data Security</category><category>Information Security</category><category>USAF</category><category>iPad</category><dc:creator>Marc Handelman</dc:creator><pubDate>Thu, 23 Feb 2012 16:01:00 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/23/say-it-aint-so-usaf-afsoc-ipads-russian-security-software-an.html</link><guid isPermaLink="false">850802:9983539:15116328</guid><description><![CDATA[<p style="text-align: justify;"><span class="full-image-block ssNonEditable"><span><img style="width: 685px;" src="http://www.infosecurity.us/storage/images-15/ipadusaf.png?__SQUARESPACE_CACHEVERSION=1329933936629" alt="" /></span></span><em><strong>UPDATED</strong></em>: <a href="http://www.nextgov.com/nextgov/ng_20120221_7036.php" target="_blank">AFSOC has Cancelled the USAF iPad Order</a>!</p>
<p style="text-align: justify;"><a href="http://www.nextgov.com/nextgov/ng_20120217_4350.php" target="_blank">News</a>, of the latest lame-brained software provisioning decisions by our <a href="http://usaf.mil" target="_blank">Department of the Air Force</a>. This time, <a href="http://www.afsoc.af.mil/" target="_blank">Air Force Special Operations Command</a> [AFSOC] is contemplating the purchase of a large-ish number of licenses for <a href="http://www.apple.com" target="_blank">Apple Inc</a>. (NadsdaqGS: <a href="http://finance.yahoo.com/q?s=AAPL" target="_blank">AAPL</a>) <a href="http://www.apple.com/ipad" target="_blank"><span>iPad</span></a> &#8216;security&#8217; software, via Russian developers&#8230; What could possibly go wrong? Not to mention the utilization of embedded software risks on Chinese manufactured chip sets resident within the hardware platform itself&#8230; <em>Astounding</em>.</p>
<blockquote>
<p style="text-align: justify;">&#8220;&#8230;When the Air Force Special Operations Command decided to buy 2,861  made-in-China Apple iPad tablet computers in January to provide flight  crews with electronic navigation charts and technical manuals, it  specified mission security software developed, maintained and updated in  Russia&#8230;.&#8221;&nbsp; via <a href="http://www.nextgov.com" target="_blank">Nextgov&#8217;s</a> <a href="mailto:bBrewin@nextgov.com" target="_blank">Bob Brewin</a></p>
</blockquote>
<p style="text-align: justify;"><a href="http://www.nextgov.com/nextgov/ng_20120217_4350.php" target="_blank">∄</a></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15116328.xml</wfw:commentRss></item><item><title>Dalek's Last Supper</title><category>BBC</category><category>Buzzfeed.com</category><category>Daleks</category><category>Dr. Who</category><category>Evil Villains</category><category>Robots</category><category>Sarcasm</category><category>Scence Fiction</category><category>The Last Supper</category><dc:creator>Marc Handelman</dc:creator><pubDate>Thu, 23 Feb 2012 00:30:22 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/22/daleks-last-supper.html</link><guid isPermaLink="false">850802:9983539:15123224</guid><description><![CDATA[<p><span class="full-image-block ssNonEditable"><span><a href="http://www.buzzfeed.com/tonecartoons/the-last-supper-of-the-daleks-5ayf" target="_blank"><img src="http://www.infosecurity.us/storage/images-12/last-dalek-Supper.jpg?__SQUARESPACE_CACHEVERSION=1329856434691" alt="" /></a></span><span class="thumbnail-caption" style="width: 745px;">via Buzzfeed.com</span></span></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15123224.xml</wfw:commentRss></item><item><title>NIST Creates National Cybersecurity Center of Excellence</title><category>Data Security</category><category>Information Security</category><category>NIST</category><category>National Cybersecurity Center of Excellence</category><category>National Defense</category><dc:creator>Marc Handelman</dc:creator><pubDate>Thu, 23 Feb 2012 00:00:50 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/22/nist-creates-national-cybersecurity-center-of-excellence.html</link><guid isPermaLink="false">850802:9983539:15132813</guid><description><![CDATA[<p><span class="full-image-block ssNonEditable"><img style="width: 745px;" src="http://www.infosecurity.us/storage/images-11/NIST_Cyber Center Excellence Signatories.jpg?__SQUARESPACE_CACHEVERSION=1329930823052" alt="" /></span></p>
<p style="text-align: justify;"><em><strong><span style="font-size: 70%;">Memorandum of Understanding Signing Feb. 21, from&nbsp;  Montgomery County Executive Isiah Leggett, Maryland Lt. Governor Anthony  Brown, U.S. Senator for Maryland Barbara Mikulski and Under Secretary  of Commerce for Standards and Technology and NIST Director Patrick  Gallagher. [left to right] Credit: <a href="http://www.nist.gov" target="_blank">NIST</a></span></strong></em></p>
<p style="text-align: justify;"><a href="http://www.nist.gov/itl/csd/nccoe-022112.cfm" target="_blank">News</a>, of the creation of a <a class="offsite-link-inline" href="http://www.nist.gov/itl/csd/upload/nccoe.pdf" target="_blank">National Cybersecurity Center of Excellence</a> by the <a href="http://www.nist.gov" target="_blank">National Institute of Standards and Technology</a> has reached us here at the Ivory Tower of InfoSec, overlooking the <a href="http://www.nps.gov/olym/index.htm" target="_blank">Olympic Mountains</a> on the west, and <a href="http://www.nps.gov/mora/index.htm" target="_blank">Mount Rainier</a> on the south east, whilst awaiting a forecasted very light dusting of snow this weekend&#8230; The newly formed Center, a partnership of private and public sector&nbsp; entities with <a href="http://www.nist.gov/" target="_blank">NIST</a> and the State of Maryland and Montgomery County, Maryland, as the earliest noted  co-sponsors, will purportedly target&nbsp; strengthening of secure, trustworthy eGovernment and eCommerce in the United States of America.</p>
<p style="text-align: justify;"><a href="http://www.nist.gov/itl/csd/nccoe-022112.cfm" target="_blank">ↂ</a> , <a href="http://www.nist.gov/public_affairs/factsheet/nccoe.pdf" target="_blank">〓</a></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15132813.xml</wfw:commentRss></item><item><title>Bailout[s]</title><category>Bali Outs</category><category>Federal Reserver</category><category>Financial Truth</category><category>Secrets</category><dc:creator>Marc Handelman</dc:creator><pubDate>Wed, 22 Feb 2012 16:46:35 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/22/bailouts.html</link><guid isPermaLink="false">850802:9983539:15133610</guid><description><![CDATA[<p><span class="full-image-block ssNonEditable"><span><img style="width: 510px;" src="http://www.infosecurity.us/storage/images-15/Hidden-Bailout.jpg?__SQUARESPACE_CACHEVERSION=1329866519917" alt="" /></span></span></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15133610.xml</wfw:commentRss></item><item><title>Windows Application Trickery</title><category>Adware</category><category>Data Security</category><category>Infect Vectors</category><category>Information Security</category><category>MSFT</category><category>Microsoft Corporaiton</category><category>Vulnerabilites</category><dc:creator>Marc Handelman</dc:creator><pubDate>Wed, 22 Feb 2012 16:00:36 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/22/windows-application-trickery.html</link><guid isPermaLink="false">850802:9983539:15117027</guid><description><![CDATA[<p style="text-align: justify;"><span class="full-image-block ssNonEditable"><span><img style="width: 745px;" src="http://www.infosecurity.us/storage/bug_swatter.jpg?__SQUARESPACE_CACHEVERSION=1329856481229" alt="" /></span></span></p>
<p style="text-align: justify;">Superb <a href="http://www.ghacks.net/2012/02/20/how-programs-trick-you-into-installing-adware-on-your-computer/" target="_blank">write-up</a> at <a href="http://www.ghacks.net" target="_blank">gHacks</a>, targeting one of the more commonplace system infection vectors in existence: Adware. Interesting description of <a href="http://www.microsoft.com" target="_blank">Microsoft Corporation</a> (NasdaqGS: <a href="http://finance.yahoo.com/q?s=MSFT" target="_blank">MSFT</a>) third party <a href="http://www.microsoft.com/windows" target="_blank">Windows</a> applciation utilization of trickery and obfuscation in that effort. Today&#8217;s MustRead!</p>
<p style="text-align: justify;"><a href="http://www.ghacks.net/2012/02/20/how-programs-trick-you-into-installing-adware-on-your-computer/" target="_blank">⅋</a></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15117027.xml</wfw:commentRss></item><item><title>Pillsbury</title><category>Cinnamon Rolls</category><category>Doughboy</category><category>Empire</category><category>Humor</category><category>Leia</category><category>Pillsbury</category><category>Sarcasm</category><category>SciFi Up Dos</category><category>SetPhasersToLol.com</category><category>Star Wars Humor</category><category>Tech Humor</category><category>Vader</category><dc:creator>Marc Handelman</dc:creator><pubDate>Wed, 22 Feb 2012 00:30:36 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/21/pillsbury.html</link><guid isPermaLink="false">850802:9983539:15116497</guid><description><![CDATA[<p><span class="full-image-block ssNonEditable"><span><a href="http://scifi.icanhascheezburger.com/2012/02/20/sci-fi-fantasy-star-wars-pillsbury-called/" target="_blank"><img src="http://www.infosecurity.us/storage/images-14/pillsbury_called_setphaserstolol.com.png?__SQUARESPACE_CACHEVERSION=1329767902252" alt="" width="633" height="400" /></a></span></span></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15116497.xml</wfw:commentRss></item><item><title>iOS Security Flaw of the Day</title><category>Apple Inc. APple iOS</category><category>Information Security</category><category>Mobile Security</category><category>Security Flaws</category><dc:creator>Marc Handelman</dc:creator><pubDate>Wed, 22 Feb 2012 00:00:04 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/21/ios-security-flaw-of-the-day.html</link><guid isPermaLink="false">850802:9983539:15117045</guid><description><![CDATA[<p style="text-align: justify;"><iframe width="735" height="404" src="https://www.youtube-nocookie.com/embed/Vhy9_bYVIwk?rel=0" frameborder="0" allowfullscreen></iframe></p>
<p style="text-align: justify;">Today&#8217;s<a href="https://support.apple.com/kb/DL1472" target="_blank"> iOS 5.0.1</a> glaring security flaw: Password bypass permits Phone calls and Contacts perusal, when locked&#8230;</p>
<p style="text-align: justify;"><a style="font-size: 150%;" href="http://www.idownloadblog.com/2012/02/20/security-flaw-in-ios-5-0-1/" target="_blank">ʑ</a></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15117045.xml</wfw:commentRss></item><item><title>Nitrozac and Snaggy: Mountain Lion Safety</title><category>Apple Inc.</category><category>Humor</category><category>MAC OS X 10.8</category><category>Mountain Lion</category><category>Nitrozac and Snaggy</category><category>Sarcasm</category><category>Tech Humor</category><category>The Joy of Tech™</category><dc:creator>Marc Handelman</dc:creator><pubDate>Tue, 21 Feb 2012 16:30:32 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/21/nitrozac-and-snaggy-mountain-lion-safety.html</link><guid isPermaLink="false">850802:9983539:15105321</guid><description><![CDATA[<p><span class="full-image-block ssNonEditable"><span><a href="http://www.geekculture.com/joyoftech/joyarchives/1654.html" target="_blank"><img src="http://www.infosecurity.us/storage/images-15/1654.gif?__SQUARESPACE_CACHEVERSION=1329703080873" alt="" width="680" height="995" /></a></span><span class="thumbnail-caption" style="width: 636px;">via the genius of Nitrozac and Snaggy at The Joy of Tech&trade;</span></span></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15105321.xml</wfw:commentRss></item><item><title>Nortel Decades Long Breach Single Lesson</title><category>Blatant Stupidity</category><category>Information Security or the Lack Thereof</category><dc:creator>Marc Handelman</dc:creator><pubDate>Tue, 21 Feb 2012 16:00:55 +0000</pubDate><link>http://www.infosecurity.us/blog/2012/2/21/nortel-decades-long-breach-single-lesson.html</link><guid isPermaLink="false">850802:9983539:15114970</guid><description><![CDATA[<p><span class="full-image-block ssNonEditable"><span><img style="width: 735px;" src="http://www.infosecurity.us/storage/images-15/push-push.png?__SQUARESPACE_CACHEVERSION=1329795845677" alt="" /></span></span></p>
<p>Hire competent Security Engineers.</p>
<p><span style="font-size: 150%;"><a href="http://www.informationweek.com/news/security/attacks/232601092?printer_friendly=this-page" target="_blank">ʮ</a><br /></span></p>
]]></description><wfw:commentRss>http://www.infosecurity.us/blog/rss-comments-entry-15114970.xml</wfw:commentRss></item></channel></rss>
