<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="wordpress/2.0.2" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>

<channel>
	<title>The Sys-Security Group</title>
	<link>http://sys-security.com/blog</link>
	<description>Ofir Arkin's Information Security Group</description>
	<pubDate>Fri, 11 Jul 2008 17:48:53 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.0.2</generator>
	<language>en</language>
			<item>
		<title>Mobile ME orientation movie – Using Firefox</title>
		<link>http://sys-security.com/blog/2008/07/11/mobile-me-orientation-movie-%e2%80%93-using-firefox/</link>
		<comments>http://sys-security.com/blog/2008/07/11/mobile-me-orientation-movie-%e2%80%93-using-firefox/#comments</comments>
		<pubDate>Fri, 11 Jul 2008 17:48:53 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>Apple</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/07/11/mobile-me-orientation-movie-%e2%80%93-using-firefox/</guid>
		<description><![CDATA[I have decided to use a trail of Mobile ME. 
To my surprise on the orientation movie the browser used is Firefox and not Safari… Go Figure.

]]></description>
			<content:encoded><![CDATA[<p>I have decided to use a trail of Mobile ME. </p>
<p>To my surprise on the orientation movie the browser used is Firefox and not Safari… Go Figure.
</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/07/11/mobile-me-orientation-movie-%e2%80%93-using-firefox/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>Goodbye Blackberry?</title>
		<link>http://sys-security.com/blog/2008/07/11/goodbye-blackberry/</link>
		<comments>http://sys-security.com/blog/2008/07/11/goodbye-blackberry/#comments</comments>
		<pubDate>Fri, 11 Jul 2008 15:06:56 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>Apple</category>
	<category>Gadgets</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/07/11/goodbye-blackberry/</guid>
		<description><![CDATA[One of the interesting things Apple has added into Mobile ME and into the new 2.0 iPhone software is push email.
After examining several videos that are available online an interesting question is now raising – Where is Blackberry going to go from here?
Having PUSH email is an enormous advantage for all of us geeks that [...]]]></description>
			<content:encoded><![CDATA[<p>One of the interesting things Apple has added into Mobile ME and into the new 2.0 iPhone software is push email.</p>
<p>After examining several videos that are available online an interesting question is now raising – Where is Blackberry going to go from here?</p>
<p>Having PUSH email is an enormous advantage for all of us geeks that needs their email wherever they go and immediately.</p>
<p>Seems to me there is no gap anymore between Apple to Blackberry. From now on it is Blackberry trailing behind Apple not only with features, but also with Sales. </p>
<p>That said, you can get Blackberry on all major carriers (at least in the US), but only select offers the iPhone (usually a single per-country).</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/07/11/goodbye-blackberry/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>Where is Apple going with this?</title>
		<link>http://sys-security.com/blog/2008/07/08/where-is-apple-going-with-this/</link>
		<comments>http://sys-security.com/blog/2008/07/08/where-is-apple-going-with-this/#comments</comments>
		<pubDate>Tue, 08 Jul 2008 19:23:24 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>Apple</category>
	<category>Gadgets</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/07/08/where-is-apple-going-with-this/</guid>
		<description><![CDATA[I admit it.
I really do not understand Apple and its idiotic policy with regards to the iPhone 3G. Let’s assume I would like to buy the iPhone and pay 600 USD just to get it. According to some reports, I would still need to activate it. It would not be SIM free… I am not [...]]]></description>
			<content:encoded><![CDATA[<p>I admit it.</p>
<p>I really do not understand Apple and its idiotic policy with regards to the iPhone 3G. Let’s assume I would like to buy the iPhone and pay 600 USD just to get it. According to some reports, I would still need to activate it. It would not be SIM free… I am not sure if these reports are true, but if so this represents a lame way of moving back instead of moving forward for Apple.</p>
<p>What was so cool about the first generation iPhone? You could activate it at home (or not) using iTunes and the whole let’s go to the store thing did not apply.</p>
<p>Now you are forced to activate in store (Apple or AT&#038;T).</p>
<p>Frankly I am getting tired of this. The phone itself is not any new revelation to the mobile phone industry. So we have 3G, GPS and a better battery. The version Apple had to start with a year later.</p>
<p>If it turns out that you are to pay 600 USD for an unlocked iPhone 3G I do believe there might be other more interesting alternatives. Check out HTC touch Diamond, and the new Touch Pro (679 USD unlocked SIM free).</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/07/08/where-is-apple-going-with-this/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>Solid State Drives: (SSDs): More Power To You!</title>
		<link>http://sys-security.com/blog/2008/07/05/solid-state-drives-ssds-more-power-to-you/</link>
		<comments>http://sys-security.com/blog/2008/07/05/solid-state-drives-ssds-more-power-to-you/#comments</comments>
		<pubDate>Sat, 05 Jul 2008 17:40:52 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>Hardware</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/07/05/solid-state-drives-ssds-more-power-to-you/</guid>
		<description><![CDATA[The folks over at Tom’s Hardware performed a test trying to conclude whether Solid State Drives (SSDs) really reduces the power consumption of notebooks and whether they imporove battery life.
The bottom line is… they don’t!

]]></description>
			<content:encoded><![CDATA[<p>The folks over at <a href="http://www.tomshardware.com/reviews/ssd-hdd-battery,1955.html" target="_blank">Tom’s Hardware performed a test</a> trying to conclude whether Solid State Drives (SSDs) really reduces the power consumption of notebooks and whether they imporove battery life.</p>
<p>The bottom line is… they don’t!
</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/07/05/solid-state-drives-ssds-more-power-to-you/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>Here it comes: iPhone 3G</title>
		<link>http://sys-security.com/blog/2008/07/05/here-it-comes-iphone-3g/</link>
		<comments>http://sys-security.com/blog/2008/07/05/here-it-comes-iphone-3g/#comments</comments>
		<pubDate>Sat, 05 Jul 2008 17:34:36 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>Apple</category>
	<category>Gadgets</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/07/05/here-it-comes-iphone-3g/</guid>
		<description><![CDATA[I am sure you have all read about the new iPhone 3G and what it brings (or not) to the world of mobile phones.
Frankly I am a bit disappointed from the enhancements of the new iPhone (but it is better to have a 3G capability then not). I am still scratching my head understanding why [...]]]></description>
			<content:encoded><![CDATA[<p>I am sure you have all read about the new iPhone 3G and what it brings (or not) to the world of mobile phones.</p>
<p>Frankly I am a bit disappointed from the enhancements of the new iPhone (but it is better to have a 3G capability then not). I am still scratching my head understanding why can’t Apple make the iPhone be used as a modem? Oh well.</p>
<p>In my opinion the biggest addition is the app store. This is the new cash cow for Apple. Write your application and split the cash with us. Very creative move by Apple. I anticipate that GPS applications and Games will be the number 1 hit for the App store (or at least this is what I will be looking for).</p>
<p>The other part relates to how you get your hands on the phone and how much is this going to cost you. As a loyal citizen of Apple I had bought the first generation iPhone when it cost 600 USD (Steve, where is my other 100USD?). Now I need to put 300 USD more just to get committed to AT&#038;T again for 2-years.</p>
<p>Go figure.</p>
<p>This time I might wait a bit to hear whether the new iPhone is really that much of a change or whether it is just a nice enhancement.</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/07/05/here-it-comes-iphone-3g/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>Security Magazines: Reality vs. Fiction</title>
		<link>http://sys-security.com/blog/2008/07/05/security-magazines-reality-vs-fiction/</link>
		<comments>http://sys-security.com/blog/2008/07/05/security-magazines-reality-vs-fiction/#comments</comments>
		<pubDate>Sat, 05 Jul 2008 17:17:42 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>Security</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/07/05/security-magazines-reality-vs-fiction/</guid>
		<description><![CDATA[During the weekend I have read several articles that I had interest in from a number of security magazines / online publications.
What I have found is that most of the reporters that wrote these articles simply do not have the experience to know when they are being fed with FUD.
There is a big difference between [...]]]></description>
			<content:encoded><![CDATA[<p>During the weekend I have read several articles that I had interest in from a number of security magazines / online publications.</p>
<p>What I have found is that most of the reporters that wrote these articles simply do not have the experience to know when they are being fed with FUD.<br />
There is a big difference between on paper to the real world of deployment in the field. Some technologies which look great simply cannot scale or do not work as expected in the real world.</p>
<p>The problem is with the experience of the reporter that writes about the technology. The experience is not always there (there are exceptions of course) and therefore the FUD is spade. </p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/07/05/security-magazines-reality-vs-fiction/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>Virtualization: The Enemy of Most NAC Solutions</title>
		<link>http://sys-security.com/blog/2008/03/18/virtualization-the-enemy-of-most-nac-solutions/</link>
		<comments>http://sys-security.com/blog/2008/03/18/virtualization-the-enemy-of-most-nac-solutions/#comments</comments>
		<pubDate>Tue, 18 Mar 2008 22:23:37 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>NAC</category>
	<category>Security</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/03/18/virtualization-the-enemy-of-most-nac-solutions/</guid>
		<description><![CDATA[Tim Green is at it again targeting NAC and virtualization. I believe that he could have written about some more issues with NAC and virtualization that most NAC vendors are suffering from. 
Specifically, what happens when you have a virtualized environment on a Server that might host multiple guest operating systems? 
What is wrong with [...]]]></description>
			<content:encoded><![CDATA[<p>Tim Green is at it again targeting <a href="http://www.networkworld.com/newsletters/vpn/2008/0317nac1.html">NAC and virtualization</a>. I believe that he could have written about some more issues with NAC and virtualization that most NAC vendors are suffering from. </p>
<p>Specifically, what happens when you have a virtualized environment on a Server that might host multiple guest operating systems? </p>
<p>What is wrong with this scenario? Let’s take those NAC vendors that use the underlying switch infrastructure to place an element into quarantine VLAN until it’s posture is validated. Quarantine VLAN is a per port per device ‘technology’ meaning that is cannot be used for virtualization since it re-assigns the switch port’s VLAN ID to that of the quarantine VLAN. By doing this all the elements (virtual elements) using that switch port for their connectivity will also be assigned to that VLAN (meaning no communications for all). </p>
<p>Others may claim that the internal communications between the hosts is the problem. I disagree. I think that if the virtualization server’s administrator is installing another guest machine she is not doing that to break into the organization. It may be an unauthorized install, but not for malicious intents. The guest machine must be disallowed network access so communication with other systems on the network would not be possible (until either the guest machine is authorized and/or its posture is validated).</p>
<p>This brings me back mentioning that NAC solutions must first take care of rogue devices and network access (S-E-C-U-R-I-T-Y) and only then with compliance.</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/03/18/virtualization-the-enemy-of-most-nac-solutions/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>NAC Agents – Not The Solution To Look For</title>
		<link>http://sys-security.com/blog/2008/03/18/nac-agents-%e2%80%93-not-the-solution-to-look-for/</link>
		<comments>http://sys-security.com/blog/2008/03/18/nac-agents-%e2%80%93-not-the-solution-to-look-for/#comments</comments>
		<pubDate>Tue, 18 Mar 2008 21:54:29 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>NAC</category>
	<category>Security</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/03/18/nac-agents-%e2%80%93-not-the-solution-to-look-for/</guid>
		<description><![CDATA[I have been speaking about this for some time now - a NAC solution that relies on agents is a solution, which would be bound to fail in deployment. The problem is more emphasized on large-scale deployments.
I can count several reasons like the problem of identifying all the elements that the agent needs to be [...]]]></description>
			<content:encoded><![CDATA[<p>I have been speaking about this for some time now - a NAC solution that relies on agents is a solution, which would be bound to fail in deployment. The problem is more emphasized on large-scale deployments.</p>
<p>I can count several reasons like the problem of identifying all the elements that the agent needs to be installed on (organizations do not know what they have on the network as is. &#8230;And most of the NAC vendors do not know that to&#8230;), the NAC agent is one among many other agents that may already be installed on the element, a performance impact that may result from the agent, management overhead, and the fact that the agent is a target for a security breach. </p>
<p>Seems like I am not alone talking against the NAC agent approach. Tim Green of Network World published in his newsletter <a href="http://www.networkworld.com/newsletters/vpn/2008/0310nac1.html">an article about issues with NAC agents</a>.</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/03/18/nac-agents-%e2%80%93-not-the-solution-to-look-for/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>NAC deployment must be complete</title>
		<link>http://sys-security.com/blog/2008/02/17/nac-deployment-must-be-complete/</link>
		<comments>http://sys-security.com/blog/2008/02/17/nac-deployment-must-be-complete/#comments</comments>
		<pubDate>Sun, 17 Feb 2008 11:33:25 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>NAC</category>
	<category>Security</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2008/02/17/nac-deployment-must-be-complete/</guid>
		<description><![CDATA[NAC must scale. The deployment must include all sites, and not just a certain portion of the environment. If dependent on an appliance and/or on the switching fabric, it is bound to fail (time-to-value, effort and money). 
Any NAC deployment must cover the entire environment, so other venues accessing the network would not be possible. [...]]]></description>
			<content:encoded><![CDATA[<p>NAC must scale. The deployment must include all sites, and not just a certain portion of the environment. If dependent on an appliance and/or on the switching fabric, it is bound to fail (time-to-value, effort and money). </p>
<p>Any NAC deployment must cover the entire environment, so other venues accessing the network would not be possible. </p>
<p>One good example is with guest access. Enforcing guest access on specific locations, such as meeting rooms, etc. would fail once the guest will connect to those unprotected locations.</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2008/02/17/nac-deployment-must-be-complete/feed/</wfw:commentRSS>
		</item>
		<item>
		<title>iPhone 3G in 2008</title>
		<link>http://sys-security.com/blog/2007/12/04/iphone-3g-in-2008/</link>
		<comments>http://sys-security.com/blog/2007/12/04/iphone-3g-in-2008/#comments</comments>
		<pubDate>Tue, 04 Dec 2007 17:29:02 +0000</pubDate>
		<dc:creator>Administrator</dc:creator>
		
	<category>Apple</category>
	<category>Gadgets</category>
		<guid isPermaLink="false">http://sys-security.com/blog/2007/12/04/iphone-3g-in-2008/</guid>
		<description><![CDATA[So it seems Apple will be releasing a new version of its iPhone now with a 3G capability sometime next year.
The information was confirmed (leaked?) by no other then AT&#038;T’s CEO Randall Stephenson.
One of the interesting things to watch will be the battery lifetime when the iPhone will have 3G capabilities.
From my own experience I [...]]]></description>
			<content:encoded><![CDATA[<p>So it seems Apple will be releasing a new version of its iPhone now with a 3G capability sometime next year.</p>
<p>The information was <a target="_blank" href="http://www.bloomberg.com/apps/news?pid=20601103&#038;sid=aAoHevYzQJgw">confirmed</a> (leaked?) by no other then AT&#038;T’s CEO Randall Stephenson.</p>
<p>One of the interesting things to watch will be the battery lifetime when the iPhone will have 3G capabilities.</p>
<p>From my own experience I can tell that when you use WiFi the battery drains fast (ok not fast as with playing Video).
</p>
]]></content:encoded>
			<wfw:commentRSS>http://sys-security.com/blog/2007/12/04/iphone-3g-in-2008/feed/</wfw:commentRSS>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 1216915376.928 seconds -->
