<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>(A)bort, (R)etry, (I)gnore: Perspectives on Information Security</title>
	<atom:link href="http://freshdefense.net/blog/index.php/feed/" rel="self" type="application/rss+xml" />
	<link>http://freshdefense.net/blog</link>
	<description>Perspectives on Information Security and Intrusion Defense</description>
	<lastBuildDate>Thu, 02 Feb 2012 22:08:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Anti Publication Establishment</title>
		<link>http://freshdefense.net/blog/2012/02/02/anti-publication-establishment/</link>
		<comments>http://freshdefense.net/blog/2012/02/02/anti-publication-establishment/#comments</comments>
		<pubDate>Thu, 02 Feb 2012 22:08:56 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=264</guid>
		<description><![CDATA[To the tune of U2&#8242;s &#8220;God Part II&#8221;: I don&#8217;t believe in the ACM I don&#8217;t believe in the IEEE I &#8212; I&#8217;m going to set my mind free I don&#8217;t believe in publication counts Don&#8217;t beli&#8217;ve in acceptance rates I &#8212; I&#8217;m going to ignore PC gates I don&#8217;t want to bloat my CV [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2012/02/02/anti-publication-establishment/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>GOTOs</title>
		<link>http://freshdefense.net/blog/2011/11/28/gotos/</link>
		<comments>http://freshdefense.net/blog/2011/11/28/gotos/#comments</comments>
		<pubDate>Mon, 28 Nov 2011 17:24:27 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=262</guid>
		<description><![CDATA[Rewrite without GOTO&#8217;s: http://lxr.linux.no/linux+v3.1.3/mm/mmap.c#L1181 Go ahead, I&#8217;ll wait.]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/11/28/gotos/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Nexus holders smuggle (surprised?)</title>
		<link>http://freshdefense.net/blog/2011/07/19/nexus-holders-smuggle-surprised/</link>
		<comments>http://freshdefense.net/blog/2011/07/19/nexus-holders-smuggle-surprised/#comments</comments>
		<pubDate>Tue, 19 Jul 2011 21:54:59 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Current Events]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=257</guid>
		<description><![CDATA[http://www.cbc.ca/news/canada/british-columbia/story/2011/07/18/bc-nexus-pass-smuggling-border.html?ref=rss &#8220;I&#8217;m shocked; shocked to discover gambling in this establishment!&#8221; If you mark people as trusted, some of them will take advantage. It&#8217;s human nature. And the answer isn&#8217;t more enforcement. If your protective trade tariffs and domestic prices are much too high, people will shop elsewhere. And you can catch people buying engagement rings, [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/07/19/nexus-holders-smuggle-surprised/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Futility of Physical Security Measures</title>
		<link>http://freshdefense.net/blog/2011/06/18/the-futility-of-physical-security-measures/</link>
		<comments>http://freshdefense.net/blog/2011/06/18/the-futility-of-physical-security-measures/#comments</comments>
		<pubDate>Sat, 18 Jun 2011 19:07:46 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Current Events]]></category>
		<category><![CDATA[General Post]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=253</guid>
		<description><![CDATA[I recently made and posted a Youtube video of my 2 year old son getting a pat down at airport security. I figured I should provide a few words of context here to clarify my intent and the circumstances surrounding the video &#8212; and what security lessons we should draw from this incident and others [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/06/18/the-futility-of-physical-security-measures/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>BestBuy (and others) Disclose My Email Addr</title>
		<link>http://freshdefense.net/blog/2011/04/04/bestbuy-discloses-my-email-addr/</link>
		<comments>http://freshdefense.net/blog/2011/04/04/bestbuy-discloses-my-email-addr/#comments</comments>
		<pubDate>Mon, 04 Apr 2011 22:19:29 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Complaints]]></category>
		<category><![CDATA[Current Events]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=244</guid>
		<description><![CDATA[Update 5 April 2011: This is a big story. A big IT services FAIL: http://www.cbc.ca/news/business/story/2011/04/05/business-data-breach.html?ref=rss I&#8217;m getting ready for the wave of spam. BestBuy&#8217;s direct email service (i.e., legitimate spam) was hacked and the attackers got real, live email addresses: http://www.thestreet.com/story/11070689/1/retailers-victims-of-e-mail-hackers.html?CM_VEN=AD&#124;TWR&#124;JC On the one hand, this is no big deal. On the other, it&#8217;s kind [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/04/04/bestbuy-discloses-my-email-addr/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Enumerating Three Choices</title>
		<link>http://freshdefense.net/blog/2011/01/29/enumerating-three-choices/</link>
		<comments>http://freshdefense.net/blog/2011/01/29/enumerating-three-choices/#comments</comments>
		<pubDate>Sat, 29 Jan 2011 05:37:33 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Technical Article]]></category>
		<category><![CDATA[C code]]></category>
		<category><![CDATA[counting]]></category>
		<category><![CDATA[ternary]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=223</guid>
		<description><![CDATA[I was recently posed a question by a psychologist friend of mine. She needed to enumerate all possible answers to a set of 20 questions. Each individual question could have three answers. She then planned to count the actual frequency of answers from the test sample (say, N~=100) and run this result through some other [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/01/29/enumerating-three-choices/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cloud, Pocket, and Desk</title>
		<link>http://freshdefense.net/blog/2011/01/20/cloud-pocket-and-desk/</link>
		<comments>http://freshdefense.net/blog/2011/01/20/cloud-pocket-and-desk/#comments</comments>
		<pubDate>Fri, 21 Jan 2011 00:02:38 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Editorial]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=221</guid>
		<description><![CDATA[I just received some spam from the ACM touting some material about Cloud Computing. The email says, in part: &#8220;Cloud computing promises to radically change the way computer applications and services are constructed, delivered, and managed. It is a fundamental new paradigm in which computing is migrating from personal computers sitting on a desk to [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/01/20/cloud-pocket-and-desk/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Debugging an OS X Kernel Panic With Speculation and Innuendo</title>
		<link>http://freshdefense.net/blog/2011/01/19/debugging-an-os-x-kernel-panic-with-speculation-and-innuendo/</link>
		<comments>http://freshdefense.net/blog/2011/01/19/debugging-an-os-x-kernel-panic-with-speculation-and-innuendo/#comments</comments>
		<pubDate>Thu, 20 Jan 2011 01:23:36 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=219</guid>
		<description><![CDATA[Debugging the OS, even with full source, full debugging symbols, and a framework like kprobes or DTrace is a very hard exercise. Debugging OS X from a user perspective (without access to source, and with skimpy information in a crash report) is almost impossible. I&#8217;m willing to speculate a bit, though. My recent kernel panics [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/01/19/debugging-an-os-x-kernel-panic-with-speculation-and-innuendo/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Slow Curtain of Death</title>
		<link>http://freshdefense.net/blog/2011/01/18/slow-curtain-of-death/</link>
		<comments>http://freshdefense.net/blog/2011/01/18/slow-curtain-of-death/#comments</comments>
		<pubDate>Tue, 18 Jan 2011 23:29:16 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Complaints]]></category>
		<category><![CDATA[Technical Article]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=215</guid>
		<description><![CDATA[I should rename this blog &#8220;Complaints about Apple Mac OS X&#8221;. Apple has their own alternative to Microsoft&#8217;s &#8220;Blue Screen of Death.&#8221; I call it the &#8220;Slow Curtain of Death&#8221; &#8212; the machine suddenly stops responding, and a line proceeds from the top of the screen to the bottom, dimming the display and displaying a [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2011/01/18/slow-curtain-of-death/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>An Independent Internet: The Cloud Won&#8217;t Save You</title>
		<link>http://freshdefense.net/blog/2010/12/03/an-independent-internet-the-cloud-wont-save-you/</link>
		<comments>http://freshdefense.net/blog/2010/12/03/an-independent-internet-the-cloud-wont-save-you/#comments</comments>
		<pubDate>Fri, 03 Dec 2010 22:10:10 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Current Events]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=213</guid>
		<description><![CDATA[Sad story about influence on wikileaks&#8217;s ability to distribute content (see link below). Wikileaks runs into two problems: government pressure against companies providing hosting or directory services to wikileaks material &#8220;market&#8221; pressure arising from DDoS attack against shared infrastructure that has enough collateral damage to force the infrastructure owner to stop providing hosting or directory [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2010/12/03/an-independent-internet-the-cloud-wont-save-you/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lax Institutional Cybersecurity Bites UNC Cancer Researcher</title>
		<link>http://freshdefense.net/blog/2010/10/13/lax-institutional-cybersecurity-bites-unc-cancer-researcher/</link>
		<comments>http://freshdefense.net/blog/2010/10/13/lax-institutional-cybersecurity-bites-unc-cancer-researcher/#comments</comments>
		<pubDate>Wed, 13 Oct 2010 16:39:14 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Current Events]]></category>
		<category><![CDATA[cancer]]></category>
		<category><![CDATA[PII]]></category>
		<category><![CDATA[UNC]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=211</guid>
		<description><![CDATA[http://chronicle.com/article/Chapel-Hill-Researcher-Fights/124821/ The article is fairly sympathetic to her (Bonnie C. Yankaskas, Ph.D.) plight; if those are substantially the facts as reported, this looks like an administration undertaking C-Y-A security measures. Can a non-specialist, even as PI of the project, be blamed for not following &#8220;best practices&#8221; when most best practices are (1) ill-defined and (2) [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2010/10/13/lax-institutional-cybersecurity-bites-unc-cancer-researcher/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Early October Self-Induced DoS</title>
		<link>http://freshdefense.net/blog/2010/10/09/early-october-self-induced-dos/</link>
		<comments>http://freshdefense.net/blog/2010/10/09/early-october-self-induced-dos/#comments</comments>
		<pubDate>Sat, 09 Oct 2010 22:08:46 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Technical Article]]></category>
		<category><![CDATA[blog]]></category>
		<category><![CDATA[debugging]]></category>
		<category><![CDATA[DoS]]></category>
		<category><![CDATA[mysql]]></category>
		<category><![CDATA[php]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=208</guid>
		<description><![CDATA[I recently updated this blog from the WordPress control panel. All it takes to update is a single mouse click. This action was ill-advised, uniformed, and generally ignorant. First, I did not follow the advice in the upgrade dialog that urged me to back up my content. Second, when the update finished, none of my [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2010/10/09/early-october-self-induced-dos/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Gantt Charts in Excel</title>
		<link>http://freshdefense.net/blog/2010/10/02/gantt-charts-in-excel/</link>
		<comments>http://freshdefense.net/blog/2010/10/02/gantt-charts-in-excel/#comments</comments>
		<pubDate>Sat, 02 Oct 2010 15:34:57 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[General Post]]></category>
		<category><![CDATA[Excel]]></category>
		<category><![CDATA[Gantt Charts]]></category>
		<category><![CDATA[Office]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=206</guid>
		<description><![CDATA[Now, I&#8217;m not a big fan of some of Microsoft&#8217;s business practices or software, but I reserved a special disdain for their often impenetrable &#8220;documentation&#8221; &#8212; particularly Knowledge Base articles that seemed written by marketing and lawyers to keep any useful technical information away from the public. In terms of explaining things to office desk [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2010/10/02/gantt-charts-in-excel/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Network Intrusion Recovery Redeux</title>
		<link>http://freshdefense.net/blog/2010/09/29/network-intrusion-recovery-redeux/</link>
		<comments>http://freshdefense.net/blog/2010/09/29/network-intrusion-recovery-redeux/#comments</comments>
		<pubDate>Wed, 29 Sep 2010 16:44:48 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[General Post]]></category>
		<category><![CDATA[intrusion recovery]]></category>
		<category><![CDATA[LISA]]></category>
		<category><![CDATA[USENIX]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=203</guid>
		<description><![CDATA[In my attempts to track down all sorts of citation-related minutia for a research grant, I came across this blog post: http://saintaardvarkthecarpeted.com/blog/archive/2009/11/Sugar_Free_Jazz.html that summarizes my talk at USENIX LISA last year. It&#8217;s a warm fuzzy feeling to know that people paid attention.]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2010/09/29/network-intrusion-recovery-redeux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mini-Dissection of IRS Phishing Spam</title>
		<link>http://freshdefense.net/blog/2010/09/10/mini-dissection-of-irs-phishing-spam/</link>
		<comments>http://freshdefense.net/blog/2010/09/10/mini-dissection-of-irs-phishing-spam/#comments</comments>
		<pubDate>Fri, 10 Sep 2010 17:03:58 +0000</pubDate>
		<dc:creator>xoren</dc:creator>
				<category><![CDATA[Technical Article]]></category>

		<guid isPermaLink="false">http://freshdefense.net/blog/?p=198</guid>
		<description><![CDATA[Four days ago I received an email from tax-refunds@irs.gov. A selection of interesting headers from the message appears below (sensitive information, such as my email address, elided). You&#8217;ll note two things. First, this email came to one of my U of C addresses, but it purports to be from the IRS. Why would the IRS [...]]]></description>
		<wfw:commentRss>http://freshdefense.net/blog/2010/09/10/mini-dissection-of-irs-phishing-spam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.453 seconds -->

