<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>RKWare.com &#187; Security</title>
	<atom:link href="http://rkware.com/category/computers/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://rkware.com</link>
	<description>Just another WordPress weblog</description>
	<lastBuildDate>Tue, 25 Jan 2011 16:19:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
		<item>
		<title>Gmail Compromise</title>
		<link>http://rkware.com/2011/01/gmail-compromise/</link>
		<comments>http://rkware.com/2011/01/gmail-compromise/#comments</comments>
		<pubDate>Fri, 21 Jan 2011 23:46:08 +0000</pubDate>
		<dc:creator>RyanK</dc:creator>
				<category><![CDATA[Computers]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://rkware.com/?p=145</guid>
		<description><![CDATA[Today, I had at least one email sent from my gmail account to 50 of my contacts. Below is the email that I&#8217;ve sent out to them. Perhaps it will help remind us how to react to these sorts of things. The short version&#8230; Check what has access to your account and change your password! [...]]]></description>
			<content:encoded><![CDATA[<div id=":1ds">
<p>Today, I had at least one email sent from my gmail account to 50 of my contacts. Below is the email that I&#8217;ve sent out to them. Perhaps it will help remind us how to react to these sorts of things. The short version&#8230; Check what has access to your account and change your password!</p>
<p>And now&#8230; the email that I sent (which amusingly, bounced to about 20 of those 50 contacts):</p>
<p>Earlier today at least one mass email went out from my gmail account to a random sampling of 50 of my gmail contacts, containing a link to readytoview.co.cc. My apologies&#8230; I&#8217;ve been at home sick today and was asleep at the time, and many have emailed me letting me know my account has been compromised.</p>
<div>The good news is, when I checked the link, the domain name is disabled now, but if you have clicked on it something may have been active that has compromised your gmail account. I&#8217;ve done some research on that url as well as some strange one&#8217;s I&#8217;ve seen in my email box lately. They are either dead, or redirect to dead URLs, and there&#8217;s little mention of them on in the internet&#8230;</div>
<div>At the bottom of gmail, there&#8217;s a link to view all activity on your gmail account. Here&#8217;s the last 5 entries for me:</div>
<div><span style="font-family: arial, sans-serif; font-size: 13px;"></p>
<table border="1" cellspacing="0" cellpadding="4" width="100%">
<tbody>
<tr style="font-size: 13px;">
<td style="font-family: arial, sans-serif;" width="40%" valign="top">Browser</td>
<td style="font-family: arial, sans-serif;" valign="top"><strong>*</strong> United States (IL) (99.53.112.xx)</td>
<td style="font-family: arial, sans-serif;" valign="top">5:19 pm (0 minutes ago)</td>
</tr>
<tr style="font-size: 13px;">
<td style="font-family: arial, sans-serif;" width="40%" valign="top">Mobile</td>
<td style="font-family: arial, sans-serif;" valign="top">United States (IL) (99.53.112.xx)</td>
<td style="font-family: arial, sans-serif;" valign="top">5:04 pm (14 minutes ago)</td>
</tr>
<tr style="font-size: 13px;">
<td style="font-family: arial, sans-serif;" width="40%" valign="top">Browser</td>
<td style="font-family: arial, sans-serif;" valign="top">Poland (62.87.147.61)</td>
<td style="font-family: arial, sans-serif;" valign="top">1:50 pm (3 hours ago)</td>
</tr>
<tr style="font-size: 13px;">
<td style="font-family: arial, sans-serif;" width="40%" valign="top">Mobile</td>
<td style="font-family: arial, sans-serif;" valign="top">United States (IL) (99.53.112.xx)</td>
<td style="font-family: arial, sans-serif;" valign="top">10:27 am (6 hours ago)</td>
</tr>
<tr style="font-size: 13px;">
<td style="font-family: arial, sans-serif;" width="40%" valign="top">Mobile</td>
<td style="font-family: arial, sans-serif;" valign="top">United States (IL) (208.54.7.xx)</td>
<td style="font-family: arial, sans-serif;" valign="top">1:48 am (15 hours ago)</td>
</tr>
</tbody>
</table>
<p></span></div>
<div><span style="font-family: arial, sans-serif;">The 99 IP is my home and at 10:30 this morning I sent an email to work, and the 208 IP is my cell phone provider. Clearly, the Poland IP address was not me.</span></div>
<div><span style="font-family: arial, sans-serif;"><br />
</span></div>
<div><span style="font-family: arial, sans-serif;">Also, that window will provide a method to allow you to sign out any other sessions that may be signed into your account if there are any active. Once you click that button, you&#8217;ll get:</span></div>
<div><span style="font-family: arial, sans-serif;"><br />
</span></div>
<div><span style="font-family: arial, sans-serif;"><span style="font-size: 13px;"></p>
<table border="0" cellspacing="0" cellpadding="8" width="97%" align="center">
<tbody>
<tr style="font-size: 13px;">
<td style="font-family: arial, sans-serif;" colspan="2" valign="top"><strong>Successfully signed out all other sessions.</strong><br />
Note: Users can log in again if they know your password or have it saved on their computer. If you are concerned about someone using your account without your permission, please <a style="font-family: arial, sans-serif;" href="https://www.google.com/accounts/ManageAccount?service=mail&amp;hl=en" target="_blank">change your password</a>.</td>
</tr>
</tbody>
</table>
<p></span></span></div>
<div><span style="font-family: arial, sans-serif;">The above link will take you to your manage your Google account page, which not only lets you change your password, but also review what sites you have given access to your Google account. If you see strange activity on your account, it may be a good idea to review the applications that are allowed to access your Google account.</span></div>
<div><span style="font-family: arial, sans-serif;"><br />
</span></div>
<div><span style="font-family: arial, sans-serif;">I&#8217;ve changed my password and apologize for the random email. On the upside, some of you I haven&#8217;t talked to in forever&#8230; and I don&#8217;t recognize </span><span style="font-family: arial, sans-serif;">some of the contacts&#8230; but its always good to reconnect! </span></div>
<div><span style="font-family: arial, sans-serif;"><br />
</span></div>
<div><span style="font-family: arial, sans-serif;">I&#8217;d be more then happy to help with anything technical or security related, so if you ever have any questions about anything&#8230; don&#8217;t hesitate to contact me&#8230; presuming you still trust me having my gmail account compromised a bit! =)</span></div>
<div><span style="font-family: arial, sans-serif;"><br />
</span></div>
<div><span style="font-family: arial, sans-serif;">Sorry again!</span></div>
<div><span style="font-family: arial, sans-serif;"></p>
<p></span></div>
<div><span style="font-family: arial, sans-serif;">Ryan</span></div>
<div><span style="font-family: arial, sans-serif;"><a href="http://www.rkware.com" target="_blank">http://www.rkware.com</a></span></div>
</div>
<!-- AdSense Now! Redux V1.80 -->
<!-- Post[count: 2] -->
<div class="adsense adsense-leadout" style="text-align:center;margin: 12px;"><script type="text/javascript"><!--
google_ad_client = "pub-8139069029219645";
/* 468x60, created 9/2/10 */
google_ad_slot = "2859267129";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></div><p><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Frkware.com%2F2011%2F01%2Fgmail-compromise%2F&amp;title=Gmail%20Compromise"><img src="http://rkware.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a> </p>]]></content:encoded>
			<wfw:commentRss>http://rkware.com/2011/01/gmail-compromise/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>One Laptop Per Child Disaster?</title>
		<link>http://rkware.com/2009/03/one-laptop-per-child-disaster/</link>
		<comments>http://rkware.com/2009/03/one-laptop-per-child-disaster/#comments</comments>
		<pubDate>Fri, 06 Mar 2009 03:58:15 +0000</pubDate>
		<dc:creator>RyanK</dc:creator>
				<category><![CDATA[Politics]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[OLPC]]></category>

		<guid isPermaLink="false">http://rkware.com/?p=17</guid>
		<description><![CDATA[I recently came across an interesting book, The Future of the Internet&#8211;And How to Stop It. (Yes, you can buy the book from Amazon, but the entire book is under a CC liscense and is available for download at the books website). It provides an interesting retrospective of how the Internet got to where it [...]]]></description>
			<content:encoded><![CDATA[<p><iframe src="http://rcm.amazon.com/e/cm?t=ryansblog05-20&#038;o=1&#038;p=8&#038;l=as1&#038;asins=0300124872&#038;md=10FE9736YVPPT7A0FBG2&#038;fc1=000000&#038;IS2=1&#038;lt1=_blank&#038;m=amazon&#038;lc1=0000FF&#038;bc1=000000&#038;bg1=FFFFFF&#038;f=ifr" style="float:right;width:120px;height:240px;margin-left:10px;" scrolling="no" marginwidth="0" marginheight="0" frameborder="0"></iframe>I recently came across an interesting book,<br />
<a href="http://www.amazon.com/gp/product/0300124872?ie=UTF8&#038;tag=ryansblog05-20&#038;linkCode=as2&#038;camp=1789&#038;creative=390957&#038;creativeASIN=0300124872">The Future of the Internet&#8211;And How to Stop It</a><img src="http://www.assoc-amazon.com/e/ir?t=ryansblog05-20&#038;l=as2&#038;o=1&#038;a=0300124872" width="1" height="1" border="0" alt="" style="border:none !important; margin:0px !important;" />. (Yes, you can buy the book from Amazon, but the entire book is under a CC liscense and is available for download at <a href="http://futureoftheinternet.org/download"> the books website</a>). It provides an interesting retrospective of how the Internet got to where it is, and what may happen to it in the future.</p>
<p>What&#8217;s really interesting is the point made in this <a href="http://www.amazon.com/gp/redirect.html?ie=UTF8&#038;location=http%3A%2F%2Fwww.amazon.com%2Freview%2FR3FGABHK9Y6FP2%3Fie%3DUTF8%26cdPage%3D1%26ref%255F%3Dcm%255Fcr%255Frev%255Fdetup%255Fredir%26newContentNum%3D5%26newContentID%3DMx2W9BTWYFDH88J&#038;tag=ryansblog05-20&#038;linkCode=ur2&#038;camp=1789&#038;creative=390957">really well written review</a><img src="https://www.assoc-amazon.com/e/ir?t=ryansblog05-20&#038;l=ur2&#038;o=1" width="1" height="1" border="0" alt="" style="border:none !important; margin:0px !important;" />:</p>
<blockquote><p>In passing, I love the brutal critique by Gene Spaford of the $100 laptop. He likens its projected impact&#8211;exposing millions to the bright side while not fixing their poverty, water, and disease&#8211;to subsidizing pet rats for every household just prior to the Black Death plague. My friend Lee Felsenstein is an equally virulent opponent of the $100 laptop, for different reasons. Me personally, I think the cell phone (but not the iPhone) is the only way to educate 5 billion people fast and with day to day relevance to their needs. </p></blockquote>
<p>Wow&#8230; I never really thought about it, but I think its completely accurate! <a href="http://en.wikipedia.org/wiki/One_Laptop_per_Child">The One Laptop Per Child</a> initiative has a noble goal of <a href="http://laptop.org/en/">providing inexpensive laptops to poor children</a> around the world as well as ensuring internet connectivity. I can&#8217;t argue with the educational aspects of the projects and it certainly would provide much more opportunity to many that the world has ignored for far too long.</p>
<p>However, its always been presumed that those opportunities are strictly positive. They may be overwhelmingly positive, but I&#8217;ve never considered the negative effects, nor the things it will have little to no effect on.</p>
<p>The Internet is <em><strong>NOT</strong></em> a safe place. This is obvious but most people forget this. Also, when most people think of the dangers of the internet, they think of either an <a href="http://en.wikipedia.org/wiki/Internet_stalking">Internet stalker</a> or <a href="http://en.wikipedia.org/wiki/Identity_theft">identity theft</a>, typically an unrealistic fear of intercepted e-commerce transactions. However, there are far more dangers that are often ignored both by those that are new to the internet (who typically aren&#8217;t aware of the dangers and are overly trusting) as well as by those that are quite experienced and are aware of at least some of the dangers (ie, they know what a <a href="http://en.wikipedia.org/wiki/Trojan_horse_(computing)">Trojan</a> is, and why they shouldn&#8217;t blindly run untrusted programs).</p>
<p>Whatever platform gets widely deployed will quickly endure a trial-by-fire in which it&#8217;s security is tested, for if there are any security holes which allow the laptop to be exploited to send spam or access their personal information, which is a time bomb waiting to happen. As much as I support open software, I&#8217;ll be the first to admit that it isn&#8217;t perfect and can be exploited. Microsoft certainly has a large target (and with saner software it might not be so easier to exploit), as will any other widely adopted software. As Zittrain says, &#8220;People rob banks because that&#8217;s where the money is&#8221;.</p>
<p>Does this mean that these projects should grind to a halt? Certainly not! However, I hope someone over there has thought long and hard about the security and privacy side of things. It isn&#8217;t listed in the Criticism section in OLPC&#8217;s Wikipedia page, but that either means it has been addressed sufficiently or it hasn&#8217;t yet occured to anyone to make any noise about it yet. </p>
<p>The other completly ignored aspect is how providing internet access won&#8217;t do a thing to help with other more important things. Sure, there&#8217;s a wealth of information available on the internet, and the education is valuable, but without clean water, medical supplies and political freedom to act on their new information, there really isn&#8217;t much one can do, other then realize just how bad they have it in comparison to the rest of the world.</p>
<p>Certainly some thing to think about.</p>
<p><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Frkware.com%2F2009%2F03%2Fone-laptop-per-child-disaster%2F&amp;title=One%20Laptop%20Per%20Child%20Disaster%3F"><img src="http://rkware.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a> </p>]]></content:encoded>
			<wfw:commentRss>http://rkware.com/2009/03/one-laptop-per-child-disaster/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

