SC World Congress Sound Bites

A Much delayed post, but I never got around to fitting it in while out of town. I attended last year’s SC Wold Congress in New York at the Sheraton. I look back on it now and it was influential in my search for new employment for companies on the leading edge of security.

I wanted to post up a few sound bites, I picked up from the congress… Note that these are now 9 months old:

In October 2009:
“If Facebook were a country it would be the 4th largest in the world”

“Ashton Kusher has more twitter followers than the entire population of Ireland”

“80% of companies today use social media in their recruiting process”

From the CSO of AT&T Stephen Hutnik, “70% of their bandwidth traffic is malicious or junk”

“AT&T is working on ‘Black Cloud’ services for intercepting and stopping DDoS attacks on their network, before they get to their intended targets”.

That last part concerns me as it involves the ISPs to get smart about the routes and type of traffic they are sending – which means they’ll have to scan it first to determine it’s nature and destination. Who’s to say what’s negative or positive, appropriate or indecent, private or public – privacy rights should be watched closely with what ever AT&T, Time Warner, Verizon or any other service provider decides what to do with traffic running over it’s networks.


I realize it’s been about a month since I posted. Mostly that’s because between March 15th and April 1st I was extensively interviewing for a new job. With much of my time torn between understanding companies and their core products, and enjoying any amount of free time outside the apartment I could knowing that when the right job presented itself, I wouldn’t be tasting that freedom for a long time.

Such is the truth. I started April 5th with a new company and quickly got caught up in 10-12 hour days, training, learning the processes and “coming up to speed” as the managers like to say. I haven’t missed the corporate jargon hunt. “Drinking from the fire-hose”, “core values” and “touchpoints”.

Then on April 17th, was hacked when an unauthorized user installed redirection iframes on my site to another webpage that was hosting malware. I didn’t discover it until the 23rd but didn’t get the clean up done until tonight. As far as I can tell the redirect wasn’t installed properly and all is clear; although I’m still going through a complete reinstall on my test server. What a pain this all is but since I have only a handful of page hits in the last few weeks I don’t expect too much exposure.

If you did click through to my site since the 17th, make sure you run full scans of your virus software. Always important to keep up-to-date on your desktop filters and make regular scans even when you think it’s working. I found cached trojans on a mail server drive that hadn’t been used in some time.

I have a few queued up posts I’ll fill back in and then hope to get back to a regular schedule including adding many of the photos I’ve taken over the last month.

Good to be back to work and back online. Cheers
Bad Religion – Infected

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Jacking Netflix

Netflix has relieved new and disturbing terms for their service which basically admit publicly, to what they were sued for:

“In determining priority for shipping and inventory allocation, we may utilize many different factors, including the number and type of DVDs you rent through our service, the membership plan you select, as well as other uses of our service by you. For example, if all other factors are the same, we give priority to those members who receive the fewest DVDs through our service. The type, number, mix and weighting of the various factors impacting shipping and inventory allocation will change from time to time and will be made in our sole and absolute discretion.”

In other words, if they find you renting and returning quickly, and it ups the amount of monthly dvds you rent, they can intentionally slow down your shipments so you don’t rent too many. They also mention in this section that “most people check out 1-11 dvds in a month”. I guess this is their target # for what they want to allow.

A good site to book mark now is:
Hacking Netflix @