July 2018 - cypherpunks-legacy

What does CPM mean?
by "Peter A Steeves - logical"＠idirect.com 06 Jul '18

06 Jul '18

Please tell me what does CPM mean? I cannot even guess. Peter A. Steeves, B.Sc., M.Sc., Ph.D., P.Eng. Geomatics Engineer Geodetic Software Systems Logical(a)idirect.com http://www.GSSGeomatics.com http://TheLogicalSurveyor.com ______________________________________________________ >>>>>> WEBSITE SHOWCASES <<<<<< Examine carefully - those with email addresses included WILL trade links with you, you are encouraged to contact them. And, there are many ways to build a successful business. Just look at these successful sites/programs other members are involved in... ------------------------------------------------- CashPO is Paid E-Mail Central! Get FREE REFERRALS, _KEEP_ referrals when new programs are added; free advertising to other members, and soon chances to win cash! http://www.cashpo.net/CashPO/openpage.php4?c=2 ------------------------------------------------- Visit Ward's Gift Shop! Here you can find all your shopping needs on line, and good quality products; Everyday low prices! We have Dolls, Angels, Novelties, and so much much more to choose from. Go to our site, and get your Free Catalog today; over 3,000 Products to choose from. http://www.wardsgiftshop.com Trade Links - mailto:bjw123@freeonline.com ------------------------------------------------- Our Recommended Casino - Worldwidevegas.com Best Java Casino 2000 and 2001 - Get 20% with EVERY deposit not just your first. We accept Visa/MC, PayPal, and more. Fast Payouts, Fast Games, and Fast Support make this site #1. WorldwideVegas paid out over $20 Million this year. http://by.advertising.com/1/c/22555/27023/82101/82101 ------------------------------------------------- If you have a product, service, opportunity and/or quality merchandise that appeals to people worldwide, reach your target audience! For a fraction of what other large newsletters charge you can exhibit your website here for only $8 CPM. Why?... Because as a valuable member we want you to be successful! Order today - Exhibits are limited and published on a first come, first serve basis. http://bannersgomlm.com/ezine ______________________________________________________ >>>>>> MEMBER *REVIEWS* <<<<<< Visit these sites, look for what you like and any suggestions you can offer, and send your critique to MyInput And, after reviewing three sites, your web site will be added to the list! It's fun, easy, and it's a great opportunity to give some help and receive an informative review of your own site. SITES TO REVIEW: Site #143: http://www.selltheworldonline.com/default2.asp?ref=1282 gofreet(a)yahoo.com.au Site #144: http://www.tpcenterprises.com/ info(a)tpcenterprises.com Site #145: http://www.worldwidewebproductions.com Len Seider wORLDwIDEwEBPros(a)cs.com Site #146: http://www.candlecreations.com Melissa Kalmbach melscandles(a)msn.com Site #147: http://www.passionforperfume.com Janice Holton janice(a)passionforperfume.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SITE REVIEWED! Comments on Site #142: http://www.sharesmiles.com James Garrison webmaster(a)sharesmiles.com ~~~~ Fun, neat site. Quick loading, and very easy to navigate. The design was simple, but it was easy to find things. On the joke page it said you could add your own jokes but I didn't see any directions or form to do so. I thought the idea of the joke of the hour was neat. On the games page, underneath the link to send the page to friends it says '50 work message' and should be 'word' instead of 'work'. I think this would be a great site to include your contact information, and a form for your visitors to submit ideas to you on new things to include. ~~~~ Too many clashing colors. The links at the bottom need to be moved to top or the side for easy viewing. Kind of plain. Would recommend a few more well made graphics and a redesign on the table. ~~~~ I love the URL for your site, and did a lot of smiling at the cartoons and jokes. I would have liked to have seen some personal input from you - what made you start this site, why, for how long you've been doing this. With a personal touch and a feeling of getting to know you I would be more inclined to visit again, like visiting an old friend. Your site doesn't give me that feeling. The layout was good, and the content was excellent, it just felt like it was missing something. ~~~~ The tabbed interface is nice. But the center table with the border looks off center. Perhaps making the table more centered and higher/wider, maybe adding a bgcolor would help. ~~~~ This is a very crisp and clean site. Colorful without being too flashy. On the pages I would recommend moving the menu with the links to the top of the page - I first thought I had to use my back button to keep going back to the choices. I was impressed with the selection of games, jokes, and everything you had on your site. I bookmarked it to return to, and that's something you could include (directions on bookmarking your site). ~~~~ Fun Site which was easy to navigate and pages were clean- looking. Had some fun playing some of the games which I hadn't seen before. Great site for a bit of relaxation... without any HYPE or hard sell. Loved it... congratulations. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ______________________________________________________ moderator: Amy Mossel: Moderator(a)AEOpublishing.com posting: MyInput(a)AEOpublishing.com ______________________________________________________ Send posts and questions (or your answers) to: mailto:MyInput@AEOpublishing.com Please send suggestions and comments to: mailto:Moderator@AEOpublishing.com To change your subscribed address, send both new and old address to mailto:Moderator@AEOpublishing.com See below for unsubscribe instructions. Copyright 2001 AEOpublishing ----- End of Your Membership Exchange ------------------------------------------------ ------------------------------------------------ This email has been sent to cypherpunks(a)cyberpass.net at your request, by Your Membership Newsletter Services. Visit our Subscription Center to edit your interests or unsubscribe. http://ccprod.roving.com/roving/d.jsp?p=oo&id=bd7n7877.7y9lcwa6&m=bd7n7877&… View our privacy policy: http://ccprod.roving.com/roving/CCPrivacyPolicy.jsp Powered by Constant Contact(R) www.constantcontact.com ---1830007620.997173095259.JavaMail.RovAdmin.rovweb003 Content-Type: text/html; charset=iso-8859-1 <HTML>  <head> <title>Your Membership Exchange, #443</title> </head> <body bgcolor="#ffffff" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <IMG SRC="http://ccprod.roving.com/roving/sa/o.jsp?id=bd7n7877.7y9lcwa6&o=http://ccpr…" WIDTH=1 HEIGHT=1 alt=" ">  <center>    <table border="0" cellpadding="0" cellspacing="0" width="575"> <tr> <td width="25"><img src="http://ccprod.roving.com/roving/images/letters/gray-corner-tl.gif" width="25" height="25" border="0" alt=""></td> <td width="525" bgcolor="#666666"> </td> <td width="25" bgcolor="#666666"> </td> </tr>  <tr> <td width="25" bgcolor="#666666"> </td> <td width="525" bgcolor="#CCCCCC"> Your Membership Exchange, Issue #443</td> <td width="25" bgcolor="#666666"> </td> </tr>   <tr> <td width="25" bgcolor="#666666"> </td> <td width="525" bgcolor="#CCCCCC" align="right">August 7, 2001 </td> <td width="25" bgcolor="#666666"> </td> </tr>  <tr> <td width="575" colspan="3" height="1" bgcolor="#666666"><img src="http://ccprod.roving.com/roving/images/letters/spacer.gif" width="1" height="1" border="0" alt=""></td> </tr> <tr> <td width="25" bgcolor="#870000"> </td> <td width="525" bgcolor="#FFFFFF">  <table border="0" cellpadding="6" cellspacing="0" width="100%"> <tr> <td width="100%">  Your place to exchange ideas, ask questions, swap links, and share your skills!   ______________________________________________________ You are a member in at least one of these programs - You should be in them all! <a href="http://www.BannersGoMLM.com">BannersGoMLM.com</a> <a href="http://www.ProfitBanners.com">ProfitBanners.com</a> <a href="http://www.CashPromotions.com">CashPromotions.com</a> <a href="http://www.MySiteInc.com">MySiteInc.com</a> <a href="http://www.TimsHomeTownStories.com">TimsHomeTownStories.com</a> <a href="http://www.FreeLinksNetwork.com">FreeLinksNetwork.com</a> <a href="http://www.MyShoppingPlace.com">MyShoppingPlace.com</a> <a href="http://www.BannerCo-op.com">BannerCo-op.com</a> <a href="http://www.PutPEEL.com">PutPEEL.com</a> <a href="http://www.PutPEEL.net">PutPEEL.net</a> <a href="http://www.SELLinternetACCESS.com">SELLinternetACCESS.com</a> <a href="http://www.Be-Your-Own-ISP.com">Be-Your-Own-ISP.com</a> <a href="http://www.SeventhPower.com">SeventhPower.com</a> ______________________________________________________ Today's Special Announcement: Get 1000 Visitors to Your Site - FREE! "Discover how a 26 year old Philosophy Major earned over $70,000 Online last year.  And how *You Can, Too* - GUARANTEED!" Finally, a system that's so refined, you're Guaranteed to make money, or it's *100% FREE*!  There are only 3steps2profit on the Internet... Learn them, and gain *Your Personal Freedom*.  Click below NOW: <a href="http://www.3steps2profit.com/cgi-bin/profit.cgi?id=13023">http://www.3steps2profit.com/cgi-bin/profit.cgi?id=13023</a> ______________________________________________________ >> Q & A    QUESTIONS:      - Netscape 6 ruined all my pictures?      - What does CPM mean? >> MEMBER SHOWCASES >> MEMBER *REVIEWS*      - Sites to Review: #143, #144, #145, #146  & #147!      - Site #142 Reviewed! ______________________________________________________ >>>>>> QUESTIONS & ANSWERS <<<<<< Submit your questions & answers to <a href="mailto:MyInput@AEOpublishing.com">MyInput(a)AEOpublishing.com</a> QUESTIONS: From: susan wunder   - happycow(a)earthlink.net Subject:  Netscape 6 ruined all my pictures?   I need help and I don't know who to ask - I'm VERY new at this. I downloaded Netscape 6 and it has ruined all the pictures I had scanned and saved when I had Netscape 4.  Can you tell me how to fix it?  I tried to re-download 4 but I guess once you have 6 you can't go back!  Every picture I try to print now comes out all black.  Any suggestions? I appreciate any help you can give me or someplace you can tell me to go to look the info up.  Please keep in mind the instructions you give me have to be VERY basic, I know nothing!!! Thanks so much  - Susan   ++++ Next Question ++++ From:  Peter A Steeves   - logical(a)idirect.com Subject:  What does CPM mean? Please tell me what does CPM mean?  I cannot even guess.   Peter A. Steeves, B.Sc., M.Sc., Ph.D., P.Eng. Geomatics Engineer Geodetic Software Systems Logical(a)idirect.com <a href="http://www.GSSGeomatics.com">http://www.GSSGeomatics.com</a> <a href="http://TheLogicalSurveyor.com">http://TheLogicalSurveyor.com</a> ______________________________________________________ >>>>>> WEBSITE SHOWCASES <<<<<< Examine carefully - those with email addresses included WILL trade links with you, you are encouraged to contact them. And, there are many ways to build a successful business. Just look at these successful sites/programs other members are involved in.. ------------------------------------------------- CashPO is Paid E-Mail Central! Get FREE REFERRALS, _KEEP_ referrals when new programs are added; free advertising to other members, and soon chances to win cash! <a href="http://www.cashpo.net/CashPO/openpage.php4?c=2">http://www.cashpo.net/CashPO/openpage.php4?c=2</a> ------------------------------------------------- Visit Ward's Gift Shop!  Here you can find all your shopping needs on line, and good quality products; Everyday low prices! We have Dolls, Angels, Novelties, and so much much more to choose from. Go to our site, and get your Free Catalog today; over 3,000 Products to choose from.  <a href="http://www.wardsgiftshop.com">http://www.wardsgiftshop.com</a> Trade Links - <a href="mailto:bjw123@freeonline.com">mailto:bjw123@freeonline.com</a> ------------------------------------------------- Our Recommended Casino - Worldwidevegas.com Best Java Casino 2000 and 2001 - Get 20% with EVERY deposit not just your first.  We accept Visa/MC, PayPal, and more.  Fast Payouts, Fast Games, and Fast Support make this site #1.  WorldwideVegas paid out over $20 Million this year. <a href="http://by.advertising.com/1/c/22555/27023/82101/82101">http://by.advertising.com/1/c/22555/27023/82101/82101</a> ------------------------------------------------- If you have a product, service, opportunity and/or quality merchandise that appeals to people worldwide, reach your target audience! For a fraction of what other large newsletters charge you can exhibit your website here for only $8 CPM. Why?... Because as a valuable member we want you to be successful! Order today - Exhibits are limited and published on a first come, first serve basis. <a href="http://bannersgomlm.com/ezine">http://bannersgomlm.com/ezine</a> ______________________________________________________ >>>>>> MEMBER *REVIEWS* <<<<<< Visit these sites, look for what you like and any suggestions you can offer, and send your critique to MyInput And, after reviewing three sites, your web site will be added to the list! It's fun, easy, and it's a great opportunity to give some help and receive an informative review of your own site. Plus, you can also win a chance to have y our site chosen for a free website redesign. One randomly drawn winner each month!   SITES TO REVIEW: Site #143:  <a href="http://www.selltheworldonline.com/default2.asp?ref=1282">http://www.selltheworldonline.com/default2.asp?ref=1282</a> gofreet(a)yahoo.com.au Site #144:  <a href="http://www.tpcenterprises.com/">http://www.tpcenterprises.com/</a> info(a)tpcenterprises.com Site #145:   <a href="http://www.worldwidewebproductions.com">http://www.worldwidewebproductions.com</a> Len Seider wORLDwIDEwEBPros(a)cs.com Site #146:  <a href="http://www.candlecreations.com">http://www.candlecreations.com</a> Melissa Kalmbach melscandles(a)msn.com Site #147:  <a href="http://www.passionforperfume.com">http://www.passionforperfume.com</a> Janice Holton janice(a)passionforperfume.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   SITE  REVIEWED! Comments on Site #142:  <a href="http://www.sharesmiles.com">http://www.sharesmiles.com</a> James Garrison webmaster(a)sharesmiles.com ~~~~ Fun, neat site. Quick loading, and very easy to navigate. The design was simple, but it was easy to find things. On the joke page it said you could add your own jokes but I didn't see any directions or form to do so.  I thought the idea of the joke of the hour was neat.  On the games page, underneath the link to send the page to friends it says '50 work message' and should be 'word' instead of 'work'. I think this would be a great site to include your contact information, and a form for your visitors to submit ideas to you on new things to include. ~~~~ Too many clashing colors.  The links at the bottom need to be moved to top or the side for easy viewing.  Kind of plain.  Would recommend a few more well made graphics and a redesign on the table. ~~~~ I love the URL for your site, and did a lot of smiling at the cartoons and jokes.  I would have liked to have seen some personal input from you - what made you start this site, why, for how long you've been doing this.  With a personal touch and a feeling of getting to know you I would be more inclined to visit again, like visiting an old friend. Your site doesn't give me that feeling. The layout was good, and the content was excellent, it just felt like it was missing something. ~~~~ The tabbed interface is nice. But the center table with the border looks off center. Perhaps making the table more centered and higher/wider, maybe adding a bgcolor would help. ~~~~ This is a very crisp and clean site. Colorful without being too flashy. On the pages I would recommend moving the menu with the links to the top of the page - I first thought I had to use my back button to keep going back to the choices. I was impressed with the selection of games, jokes, and everything you had on your site.  I bookmarked it to return to, and that's something you could include (directions on bookmarking your site). ~~~~ Fun Site which was easy to navigate and pages were clean- looking. Had some fun playing some of the games which I hadn't seen before.  Great site for a bit of relaxation... without any HYPE or hard sell.  Loved it... congratulations. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ______________________________________________________ moderator: Amy Mossel  <a href="mailto:Moderator@AEOpublishing.com">Moderator</a> posting:   <a href="mailto:MyInput@AEOpublishing.com">MyInput(a)AEOpublishing.com</a> ______________________________________________________ Send posts and questions (or your answers) to:    <a href="mailto:MyInput@AEOpublishing.com">MyInput(a)AEOpublishing.com</a> Please send suggestions and comments to:    <a href="mailto:Moderator@AEOpublishing.com">Moderator(a)AEOpublishing.com</a> To change your subscribed address, send both new and old address to <a href="mailto:Moderator@AEOpublishing.com">Moderator(a)AEOpublishing.com</a> See below for unsubscribe instructions. Copyright 2001 AEOpublishing ----- End of Your Membership Exchange   <hr width="60%" size="1" align="left" NOSHADE>  </td> </tr> </table>  </td> <td width="25" bgcolor="#870000"> </td> </tr>  <tr> <td width="25" bgcolor="#870000"> </td> <td width="525" bgcolor="#870000" align="right"> </td> <td width="25"><img src="http://ccprod.roving.com/roving/images/letters/red-corner-br.gif" width="25" height="25" border="0" alt=""></td> </tr>  <tr> <td colspan="3" bgcolor="#FFFFFF" align="center">  This email was sent to cypherpunks(a)cyberpass.net, at your request, by <a href="http://ccprod.roving.com/roving/sa/s.jsp?id=bd7n7877.7y9lcwa6">Your Membership Newsletter Services</a>. Visit our Subscription Center to <a href="http://ccprod.roving.com/roving/d.jsp?p=oo&id=bd7n7877.7y9lcwa6&m=bd7n7877&…">edit</a> your interests or <a href="http://ccprod.roving.com/roving/d.jsp?p=oo&id=bd7n7877.7y9lcwa6&m=bd7n7877&…">unsubscribe</a>. View our <a href="http://ccprod.roving.com/roving/CCPrivacyPolicy.jsp">privacy policy</a>. Powered by <a href="http://www.constantcontact.com/index.jsp?cc=ctrlr" target="_blank"><img src="http://ccprod.roving.com/roving/images/cc-logo-color-sm.gif" border="0" alt="Constant Contact"></a>  </td> </tr> </table> </center> </body> </html> ---1830007620.997173095259.JavaMail.RovAdmin.rovweb003--

1 0

Tor 0.2.0.35 is released
by Roger Dingledine 06 Jul '18

06 Jul '18

Tor 0.2.0.35 fixes a big bug that was causing Tor relays with dynamic IP addresses to disappear from the network. It also fixes a rare crash bug on fast exit relays. https://www.torproject.org/easy-download.html Changes in version 0.2.0.35 - 2009-06-24 o Security fix: - Avoid crashing in the presence of certain malformed descriptors. Found by lark, and by automated fuzzing. - Fix an edge case where a malicious exit relay could convince a controller that the client's DNS question resolves to an internal IP address. Bug found and fixed by "optimist"; bugfix on 0.1.2.8-beta. o Major bugfixes: - Finally fix the bug where dynamic-IP relays disappear when their IP address changes: directory mirrors were mistakenly telling them their old address if they asked via begin_dir, so they never got an accurate answer about their new address, so they just vanished after a day. For belt-and-suspenders, relays that don't set Address in their config now avoid using begin_dir for all direct connections. Should fix bugs 827, 883, and 900. - Fix a timing-dependent, allocator-dependent, DNS-related crash bug that would occur on some exit nodes when DNS failures and timeouts occurred in certain patterns. Fix for bug 957. o Minor bugfixes: - When starting with a cache over a few days old, do not leak memory for the obsolete router descriptors in it. Bugfix on 0.2.0.33; fixes bug 672. - Hidden service clients didn't use a cached service descriptor that was older than 15 minutes, but wouldn't fetch a new one either, because there was already one in the cache. Now, fetch a v2 descriptor unless the same descriptor was added to the cache within the last 15 minutes. Fixes bug 997; reported by Marcus Griep. ------------------------------------------------------------------------ This is the Tor announcements list. If you want to unsubscribe, send mail to majordomo(a)seul.org with "unsubscribe or-announce" as your message. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[i2p] weekly status notes [nov 16]
by jrandom 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi y'all, its tuesday again * Index 1) Congestion 2) Streaming 3) BT 4) ??? * 1) Congestion I know, I'm breaking the habit of naming point 1 "Net status", but this week "congestion" seems appropriate. The network itself has been doing pretty well, but as the bittorrent usage increased, things started getting more and more clogged up, leading to an essential congestion collapse [1]. This was expected, and only reinforces our plan - get the new streaming lib out there, and revamp our tunnel management so we have sufficient data about peers to use when our fast peers fail. There were some other factors in play in the recent network problems, but the bulk can be traced to the congestion increase and resulting tunnel failures (which in turn caused all sorts of wild peer selection). [1] http://en.wikipedia.org/wiki/Congestion_collapse * 2) Streaming There has been a lot of progress with the streaming lib, and I've got a squid proxy rigged up to it through the live net that I've been using it frequently for my normal web browsing. With mule's help, we've been hammering the streams pretty hard too by piping frost and FUQID through the network (my god, I never realized how abusive frost was before doing this!) A few significant longstanding bugs have been tracked down this way, and some tweaks to help control massive numbers of connections have been added. Bulk streams are working great too, with both slow start and congestion avoidance, and the quick send/reply connections (ala HTTP get+response) are doing exactly what they should. I expect we'll draft some volunteers to try deploying it further over the next few days, and hopefully get us to the 0.4.2 level soon. I don't want to say it'll be so good that it does your dishes, and I'm sure there'll be bugs that slip through, but it does look promising. * 3) BT Barring the recent network troubles, the i2p-bt port has been making leaps and bounds. I know a few people have pulled down over a GB of data through it, and performance has been as expected (due to the old streaming lib, ~4KBps per peer in the swarm). I try to listen in on the work being discussed in the #i2p-bt channel - perhaps duck could give us a summary in the meeting? * 4) ??? Thazzit from me for now. See y'all in the meeting in a few minutes. =jr -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBQZpoZBpxS9rYd+OGEQJ7hQCgm635Z/qWpcfDiKQE2JO2Q3eAR/UAn2yQ ZEawa8wEMLl1tz/uk4BTENkb =ZS5w -----END PGP SIGNATURE----- _______________________________________________ i2p mailing list i2p(a)i2p.net http://i2p.dnsalias.net/mailman/listinfo/i2p ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

I, Cringely
by I, Cringely 06 Jul '18

06 Jul '18

I, Cringely The Cybersecurity Myth Posted: 02 Oct 2009 01:54 PM PDT The Department of Homeland Security (DHS) said this week it will hire up to 1,000 cybersecurity experts over the next three years to help protect U.S. computer networks. This was part of National Cybersecurity Awareness Month and the announcement was made by DHS Secretary Janet Napolitano, who also said they probably wont need to hire all 1,000 experts, which is good because I am pretty sure THERE ARENT ONE THOUSAND CIVILIAN CYBERSECURITY EXPERTS IN THE ENTIRE FRIGGIN WORLD!!!! So I polled six old friends who ARE cybersecurity experts and they kinda-sorta agreed with me. More on this below. But first I have to marvel that I even know six cybersecurity experts and even more amazing Im pretty sure they dont know each other. They seem to be like badgers, solitary creatures who only come out to mate. They are cynics, too. One questioned the term cybersecurity as being inappropriate. (It) depends on your definition of expert, said expert number one, who works deep in the military-industrial complex. If you mean someone who can spell cyber then sure (there are 1,000). If you mean those who know that cyber is short for cybernetics and has little to do with computers then probably not. I still occasionally use the title Cybernetic Psychophysicist. Sure enough, theres a very detailed definition of cybernetics here and it doesnt intrinsically have very much to do with computers or networks, though dont tell that to the DHS without first taking off your shoes and placing the definition in a one quart plastic bag. Duh! said expert number two who has spent his career at telcos and cable companies. Of course. You got it right. I doubt there are 1000 in the world. There are a lot of wannabees, or folks who think they are Define expert, said another friend from behind Door Number Three, who comes from the security software business. (An expert is) a person with a high degree of skill in or knowledge of a certain subject. Great, but the question is all about scope. I may be an expert cook but can I run a kitchen? Same thing with security there are tons of experts in specific areas. I was an expert in AV, IDS, and other areas. But I was not the all knowing security guru. (even though my knowledge base was very broad). This is where we run into unintended actuated consequences. An expert will make a choice and take an action. The end result may not be what they had anticipated because of other factors beyond the realm of their expertise caused an unanticipated consequence. Example: I am forced to use low sulfur gas because the experts say it produces 20 percent less harmful emissions. Too bad they did not notice it has a lower power quotient then a normal gas blend. As a result I use 30 percent more gas that is 30 percent more expensive (and puts four percent more sulfur into the air). So I believe there to be less then 30 real experts in security, but there may be well over 500 subject matter experts and perhaps another 1000 sous-security people. Now I brought in the big gun expert number four, an independent security consultant to foreign governments: My bet is that they are going to just pull the bodies from the Department of Defense and Department of Energy, he said. DoD has established a number of credentials required to be classified as a security specialist like CompTIA Security+, CISSP, etc. None of this stuff has any practical application because it is hardware/software neutral. Even if a government agency, (over 550 or them) allows you to sniff their network, are they going to let you evaluate the applications for bugs? I dont think so. Without scrubbing the software with products like Ounce Labs (owned by IBM), what is the point of evaluating the network? Another item of great importance is a security clearance to do the work. This is where you will get only one brand of thinking; DoD or DoE clearance. This will prohibit the security black hat types from ever being involved in the project without coming from the DoD or Energy. So you will end up with 1,000 Security Managers in the government with Sec+, and CISSP certifications, talking to cisco, Juniper, CheckPoint, Tipping Point, Microsoft, Oracle, Ounce Labs, etc. security professionals at $300 an hour doing the actual work. Thats 1,000 jobs for window dressing, releasing reports that end up on Drudge Report listing the number of breaches in Federal Government Agencies. When you look at the private sector protection of data standards for items like credit cards you have real teeth in your regulations. You dont have to take credit cards, but if you do then you need to be PCI compliant. Dont want to be PCI? No problem we wont allow you to use our credit cards. Where will that type of enforcement be with the wall of 2,000 eyes protecting the USA? No there wont be (this is Bob again) because governments are required to provide services to their citizens. Even the DHS cant shut down the government to cure a security breach, though I am beginning to believe they havent yet figured that part out. Im not sure there are even a handful (of experts) with any sort of broad experience, said expert number five, who is usually associated with security hardware. There probably are pockets of them, with specialized narrow experience, e.g. in banking, virus or DOS attacks, military networks, etc.. And even if there were 1,000, what would they be doing on behalf of Uncle Sam? Thats a great question given that we as a nation cant seem to hire and keep a national cybersecurity czar. So what are we doing hiring 1,000 experts given there is no boss? While it is great to have a Cybersecurity Awareness Month, whatever that is, and it might be great to add a thousand experts to protect our nation, if you look deeper into this story it is for the most part BS or HS and, I fear, CS to boot. Look, the number of CCIEs with security as a certification is 2,300 for the entire world. Subtract the 50 percent who work for cisco, then 50 percent again for those not working in the field any longer, and you get 500 cisco CCIE Security Experts worldwide. The only way to get another thousand in three years is by training them. But in the last four months with 800 available seats to sit for the cisco CCIE Security exam only one person has passed! The DHS is extremely unlikely to be able to find and train 1,000 cybersecurity experts in three years. Maybe theyll come up with 100 (more likely 5-10), but the DHS environment will make it unlikely very unlikely that all of those 100 will stick around. Secretary Napolitano says she might not need all 1,000, which to me says she is really looking for 3-5 people. And frankly that ought to be enough if they are truly experts and are both properly led and supported (which they probably wont be). So this is the wrong approach entirely. It wont work, the DHS probably knows it wont work (if they dont know that, well God help us all) but they see it as better than nothing. That doesnt worry me so much, though. What really worries me is the point brought up by cybersecurity expert number six, who himself came in from the cold: Sure there are 1,000 (cybersecurity experts), he said, but they are already employed as hackers.

1 0

Re: [FoRK] Does the web have a public timestamper?
by Matt Jensen 06 Jul '18

06 Jul '18

> A Surety patent in the area appears to have been successfully > challenged in 1999: > > http://www.entrust.com/news/files/11_09_99_258.htm > > - Gordon That challenge only defeated Surety's general claim to all forms of digital timestamping. There are other claims in the patent which still stand. The most useful of these is the chaining of hashes from one document to the next. Every week, Surety publishes a cumulative hash in the New York Times. Each new document is signed by hashing the document, and sigining that hash combined with the current, global, cumulative hash. This ensures that nobody can backdate a faked document. I had long thought about implementing this technique in a user-friendly app, where initial document hashing is done in client-side JavaScript. That would protect customer data, yet not require a software download (as Surety does). Applications include everything from dating the condition of something you take possession of (car, apartment, etc.), to dating blog entries to prove your journalistic integrity (i.e., to prove you don't backdate). With user-friendly software, you could offer timestamping for free and make your money with AdSense on your validation pages. It's funny, because this was a back-burner project I was planning on working on this morning. But this thread led me to check the patent situation more closely, and it seems to this layman that Surety's remaining patent claims are too powerful. -Matt Jensen http://mattjensen.com Seattle > Russell Turpin wrote: > > Long ago, I thought some site -- maybe a > > certificate source like Thawte? -- should > > provide a provable timestamping service > > over the web. The basic idea is that when > > an application wants to timestamp some > > item, such as an entry in QuickBooks or > > an executed PDF or whatever, it would > > (1) generate a signature of the item, > > using SHA1 or the favorite hash function > > du jour, (2) then post a request to the > > timestamp site with the signature, > > (3) in the hope of receiving (a) a global > > timestamp and (b) a validation signature > > of the timestamp and item signature. > > > > The website also would maintain a > > globally accessible log, by time, of what > > validation signatures it had generated. > > These provide independent proof if > > ever needed that the item was indeed > > timestamped -- and hence, existed -- > > when claimed. > > > > It seems to me that this would be useful > > for a broad range of applications, from > > bookkeepping to facility monitoring. I > > can imagine all sorts of reasons for wanting > > a verified timestamp, from the legal to > > the mundane. Is anyone doing this? > > > > > > _______________________________________________ > > FoRK mailing list > > http://xent.com/mailman/listinfo/fork > > > > _______________________________________________ > FoRK mailing list > http://xent.com/mailman/listinfo/fork > _______________________________________________ FoRK mailing list http://xent.com/mailman/listinfo/fork ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

serious threat models
by Steven M. Bellovin 06 Jul '18

06 Jul '18

I hate to play clipping service, but this story is too important not to mention. Many top Greek officials, including the Prime Minister, and the U.S. embassy had their mobile phones tapped. What makes this interesting is how it was done: software was installed on the switch that diverted calls to a prepaid phone. Think about who could manage that. http://www.guardian.co.uk/mobile/article/0,,1701298,00.html http://www.globetechnology.com/servlet/story/RTGAM.20060202.wcelltap0202/BN… ory/International/ --Steven M. Bellovin, http://www.cs.columbia.edu/~smb --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

More Surveillance Cams in NYC
by Elaine Newton 06 Jul '18

06 Jul '18

For IP if you wish... The New York Times April 23, 2006 Sunday Late Edition - Final SECTION: Section 4; Column 1; Week in Review Desk; IDEAS & TRENDS; Pg. 14 HEADLINE: The Camera Never Blinks, but It Multiplies BYLINE: By HENRY FOUNTAIN BODY: IT'S spring, and a new crop of police surveillance cameras is sprouting in cities big and small. New York is installing 500 on street corners; Chicago is upgrading several thousand; and even the city of Dillingham, Alaska, has 80 -- one for every 30 residents. Many of these newer cameras can pan, tilt and zoom, and are networked through the Internet, so video images can be viewed and stored centrally. They are often purchased with homeland security funds, meant for use against terrorism as well as street crime. But it is impossible for a police department to continuously monitor 2,000, 500 or even, in the case of Dillingham, 80 cameras. So other than producing mountains of visual data -- and raising the inevitable questions of privacy -- how useful are they? Law enforcement officials argue that just putting up a camera in plain sight can deter crime. And some see a future in which software will analyze video for possible signs of terrorist activity, like someone placing a suitcase in front of a building. ''We have seen significant dividends as a result of implementing this program,'' said Andrew Velasquez III, director of the Office of Emergency Management and Communications in Chicago. Drug trafficking has been reduced in areas where cameras have been installed, he said. And the city is starting a pilot program to see whether automated analysis can be effective. But some security experts say the cameras are of limited value -- largely in helping investigators after a crime -- and are not cost-effective. They point to a large study by the Home Office in Britain, which has perhaps the world's most videotaped population, that found cameras to be ineffective in reducing crime, except in locations like parking garages. And even scientists involved in the development of visual recognition software acknowledge that the programs do not work well enough yet. ''Cameras make people feel better,'' said Bruce Schneier, an expert on security technology and the author of ''Beyond Fear: Thinking Sensibly About Security in an Uncertain World.'' ''But they really don't make sense. At best they move crime around a little bit.'' For a business, a camera that makes crime go elsewhere might be valuable, Mr. Schneier said. ''If I put a camera in my store and the mugger goes to the store next door, that's a win for me,'' he said. But for a city, moving criminals to the next camera-less block doesn't reduce crime. And for the nation as a whole, moving terrorists from one city to another that has less surveillance doesn't make sense either. ''Why would I spend millions of dollars to move terrorism around?'' he said. Paul Browne, a deputy police commissioner in New York, said that so far the department had installed 52 cameras, clearly marked as police equipment, in areas that had seen spikes in crime. Once more policing has stabilized the situation, Mr. Browne said, ''cameras can be helpful in preventing a return of crime.'' But Scott Henson, director of the police accountability project of the Texas chapter of the American Civil Liberties Union, said cameras can skew how limited police resources are allocated. If cameras are monitored by officers, he said, ''resources are more likely to be dispatched to places where cameras are.' ''It lets technology usurp the role of police management,'' he added. Often, however, no one is actually watching the cameras. Officials in Dillingham admit this on the town's Web site, and Mr. Velasquez acknowledges it, too. ''We know we are going to have monitoring challenges,'' he said. Chicago is beginning a trial project using software that will sift through thousands of hours of video, trying to recognize unusual behavior, like leaving behind a suitcase. Such software is largely unproven, noted Elaine Newton, a fellow at the Stanford Law School Center for Internet and Society. ''These things are going to have error rates,'' she said. Face recognition and other biometric applications are particularly difficult, and often the results depend on the quality of the image or the lighting. ''Typically surveillance cameras are pretty low quality,'' she said. And they are often exposed to heat, which degrades image quality even more. As a result, Ms. Newton said, ''real-time analysis of lots of cameras isn't something that's going to be invested in.'' Instead, the analysis may become more selective. For instance, she said, surveillance images can be used to compile gross statistics, like numbers of people coming into an area at a given time. Or software might be used for simpler recognition tasks, like distinguishing one kind of vehicle from another. ''They're probably going to do things that are intelligent uses of data,'' Ms. Newton said. ''It really depends on what somebody is trying to get out of it.'' GRAPHIC: Photos: Street Scenes -- Public and private security cameras record the action in Midtown Manhattan. (Photographs by Tony Cenicola/The New York Times) -- Lauren Gelman Center for Internet and Society Stanford Law School (ph) 650-724-3358 http://cyberlaw.stanford.edu/blogs/gelman/ ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ <!doctype html public "-//W3C//DTD W3 HTML//EN"> <html><head><style type="text/css"></style><title>Elaine Newton- in the news</title></head><body> <div> The New York Times April 23, 2006 Sunday  Late Edition - Final SECTION: Section 4; Column 1; Week in Review Desk; IDEAS & TRENDS; Pg. 14 HEADLINE: The Camera Never Blinks, but It Multiplies BYLINE: By HENRY FOUNTAIN BODY:    IT'S spring, and a new crop of police surveillance cameras is sprouting in cities big and small. New York is installing 500 on street corners; Chicago is upgrading several thousand; and even the city of Dillingham, Alaska, has 80 -- one for every 30 residents.      Many of these newer cameras can pan, tilt and zoom, and are networked through the Internet, so video images can be viewed and stored centrally. They are often purchased with homeland security funds, meant for use against terrorism as well as street crime.     But it is impossible for a police department to continuously monitor 2,000, 500 or even, in the case of Dillingham, 80 cameras. So other than producing mountains of visual data -- and raising the inevitable questions of privacy -- how useful are they?      Law enforcement officials argue that just putting up a camera in plain sight can deter crime. And some see a future in which software will analyze video for possible signs of terrorist activity, like someone placing a suitcase in front of a building.      ''We have seen significant dividends as a result of implementing this program,'' said Andrew Velasquez III, director of the Office of Emergency Management and Communications in Chicago. Drug trafficking has been reduced in areas where cameras have been installed, he said. And the city is starting a pilot program to see whether automated analysis can be effective.      But some security experts say the cameras are of limited value -- largely in helping investigators after a crime -- and are not cost-effective. They point to a large study by the Home Office in Britain, which has perhaps the world's most videotaped population, that found cameras to be ineffective in reducing crime, except in locations like parking garages. And even scientists involved in the development of visual recognition software acknowledge that the programs do not work well enough yet.      ''Cameras make people feel better,'' said Bruce Schneier, an expert on security technology and the author of ''Beyond Fear: Thinking Sensibly About Security in an Uncertain World.'' ''But they really don't make sense. At best they move crime around a little bit.''      For a business, a camera that makes crime go elsewhere might be valuable, Mr. Schneier said. ''If I put a camera in my store and the mugger goes to the store next door, that's a win for me,'' he said.      But for a city, moving criminals to the next camera-less block doesn't reduce crime. And for the nation as a whole, moving terrorists from one city to another that has less surveillance doesn't make sense either. ''Why would I spend millions of dollars to move terrorism around?'' he said.      Paul Browne, a deputy police commissioner in New York, said that so far the department had installed 52 cameras, clearly marked as police equipment, in areas that had seen spikes in crime. Once more policing has stabilized the situation, Mr. Browne said, ''cameras can be helpful in preventing a return of crime.''      But Scott Henson, director of the police accountability project of the Texas chapter of the American Civil Liberties Union, said cameras can skew how limited police resources are allocated. If cameras are monitored by officers, he said, ''resources are more likely to be dispatched to places where cameras are.'      ''It lets technology usurp the role of police management,'' he added.      Often, however, no one is actually watching the cameras. Officials in Dillingham admit this on the town's Web site, and Mr. Velasquez acknowledges it, too. ''We know we are going to have monitoring challenges,'' he said.      Chicago is beginning a trial project using software that will sift through thousands of hours of video, trying to recognize unusual behavior, like leaving</div> <div>behind a suitcase.      Such software is largely unproven, noted Elaine Newton, a fellow at the Stanford Law School Center for Internet and Society. ''These things are going to have error rates,'' she said.      Face recognition and other biometric applications are particularly difficult, and often the results depend on the quality of the image or the lighting. ''Typically surveillance cameras are pretty low quality,'' she said. And they are often exposed to heat, which degrades image quality even more.      As a result, Ms. Newton said, ''real-time analysis of lots of cameras isn't something that's going to be invested in.'' Instead, the analysis may become more selective.      For instance, she said, surveillance images can be used to compile gross statistics, like numbers of people coming into an area at a given time. Or software might be used for simpler recognition tasks, like distinguishing one kind of vehicle from another.      ''They're probably going to do things that are intelligent uses of data,'' Ms. Newton said. ''It really depends on what somebody is trying to get out of it.'' GRAPHIC: Photos: Street Scenes -- Public and private security cameras record the action in Midtown Manhattan. (Photographs by Tony Cenicola/The New York Times)</div> <div> </div> <x-sigsep><pre>-- </pre></x-sigsep> <div>Lauren Gelman             Center for Internet and Society Stanford Law School (ph) 650-724-3358 http://cyberlaw.stanford.edu/blogs/gelman/ </div> <HR> You are subscribed as eugen(a)leitl.org To manage your subscription, go to <A HREF="http://v2.listbox.com/member/?listname=ip">http://v2.listbox.com/member /?listname=ip</A>Archives at: <A HREF="http://www.interesting-people.org/archives/interesting-people/">http:// www.interesting-people.org/archives/interesting-people/</A></body> </html> ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] More Surveillance Cams in NYC
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Tor 0.2.0.35 is released
by Roger Dingledine 06 Jul '18

06 Jul '18

Tor 0.2.0.35 fixes a big bug that was causing Tor relays with dynamic IP addresses to disappear from the network. It also fixes a rare crash bug on fast exit relays. https://www.torproject.org/easy-download.html Changes in version 0.2.0.35 - 2009-06-24 o Security fix: - Avoid crashing in the presence of certain malformed descriptors. Found by lark, and by automated fuzzing. - Fix an edge case where a malicious exit relay could convince a controller that the client's DNS question resolves to an internal IP address. Bug found and fixed by "optimist"; bugfix on 0.1.2.8-beta. o Major bugfixes: - Finally fix the bug where dynamic-IP relays disappear when their IP address changes: directory mirrors were mistakenly telling them their old address if they asked via begin_dir, so they never got an accurate answer about their new address, so they just vanished after a day. For belt-and-suspenders, relays that don't set Address in their config now avoid using begin_dir for all direct connections. Should fix bugs 827, 883, and 900. - Fix a timing-dependent, allocator-dependent, DNS-related crash bug that would occur on some exit nodes when DNS failures and timeouts occurred in certain patterns. Fix for bug 957. o Minor bugfixes: - When starting with a cache over a few days old, do not leak memory for the obsolete router descriptors in it. Bugfix on 0.2.0.33; fixes bug 672. - Hidden service clients didn't use a cached service descriptor that was older than 15 minutes, but wouldn't fetch a new one either, because there was already one in the cache. Now, fetch a v2 descriptor unless the same descriptor was added to the cache within the last 15 minutes. Fixes bug 997; reported by Marcus Griep. ------------------------------------------------------------------------ This is the Tor announcements list. If you want to unsubscribe, send mail to majordomo(a)seul.org with "unsubscribe or-announce" as your message. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

I, Cringely
by I, Cringely 06 Jul '18

06 Jul '18

I, Cringely The Cybersecurity Myth Posted: 02 Oct 2009 01:54 PM PDT The Department of Homeland Security (DHS) said this week it will hire up to 1,000 cybersecurity experts over the next three years to help protect U.S. computer networks. This was part of National Cybersecurity Awareness Month and the announcement was made by DHS Secretary Janet Napolitano, who also said they probably wont need to hire all 1,000 experts, which is good because I am pretty sure THERE ARENT ONE THOUSAND CIVILIAN CYBERSECURITY EXPERTS IN THE ENTIRE FRIGGIN WORLD!!!! So I polled six old friends who ARE cybersecurity experts and they kinda-sorta agreed with me. More on this below. But first I have to marvel that I even know six cybersecurity experts and even more amazing Im pretty sure they dont know each other. They seem to be like badgers, solitary creatures who only come out to mate. They are cynics, too. One questioned the term cybersecurity as being inappropriate. (It) depends on your definition of expert, said expert number one, who works deep in the military-industrial complex. If you mean someone who can spell cyber then sure (there are 1,000). If you mean those who know that cyber is short for cybernetics and has little to do with computers then probably not. I still occasionally use the title Cybernetic Psychophysicist. Sure enough, theres a very detailed definition of cybernetics here and it doesnt intrinsically have very much to do with computers or networks, though dont tell that to the DHS without first taking off your shoes and placing the definition in a one quart plastic bag. Duh! said expert number two who has spent his career at telcos and cable companies. Of course. You got it right. I doubt there are 1000 in the world. There are a lot of wannabees, or folks who think they are Define expert, said another friend from behind Door Number Three, who comes from the security software business. (An expert is) a person with a high degree of skill in or knowledge of a certain subject. Great, but the question is all about scope. I may be an expert cook but can I run a kitchen? Same thing with security there are tons of experts in specific areas. I was an expert in AV, IDS, and other areas. But I was not the all knowing security guru. (even though my knowledge base was very broad). This is where we run into unintended actuated consequences. An expert will make a choice and take an action. The end result may not be what they had anticipated because of other factors beyond the realm of their expertise caused an unanticipated consequence. Example: I am forced to use low sulfur gas because the experts say it produces 20 percent less harmful emissions. Too bad they did not notice it has a lower power quotient then a normal gas blend. As a result I use 30 percent more gas that is 30 percent more expensive (and puts four percent more sulfur into the air). So I believe there to be less then 30 real experts in security, but there may be well over 500 subject matter experts and perhaps another 1000 sous-security people. Now I brought in the big gun expert number four, an independent security consultant to foreign governments: My bet is that they are going to just pull the bodies from the Department of Defense and Department of Energy, he said. DoD has established a number of credentials required to be classified as a security specialist like CompTIA Security+, CISSP, etc. None of this stuff has any practical application because it is hardware/software neutral. Even if a government agency, (over 550 or them) allows you to sniff their network, are they going to let you evaluate the applications for bugs? I dont think so. Without scrubbing the software with products like Ounce Labs (owned by IBM), what is the point of evaluating the network? Another item of great importance is a security clearance to do the work. This is where you will get only one brand of thinking; DoD or DoE clearance. This will prohibit the security black hat types from ever being involved in the project without coming from the DoD or Energy. So you will end up with 1,000 Security Managers in the government with Sec+, and CISSP certifications, talking to cisco, Juniper, CheckPoint, Tipping Point, Microsoft, Oracle, Ounce Labs, etc. security professionals at $300 an hour doing the actual work. Thats 1,000 jobs for window dressing, releasing reports that end up on Drudge Report listing the number of breaches in Federal Government Agencies. When you look at the private sector protection of data standards for items like credit cards you have real teeth in your regulations. You dont have to take credit cards, but if you do then you need to be PCI compliant. Dont want to be PCI? No problem we wont allow you to use our credit cards. Where will that type of enforcement be with the wall of 2,000 eyes protecting the USA? No there wont be (this is Bob again) because governments are required to provide services to their citizens. Even the DHS cant shut down the government to cure a security breach, though I am beginning to believe they havent yet figured that part out. Im not sure there are even a handful (of experts) with any sort of broad experience, said expert number five, who is usually associated with security hardware. There probably are pockets of them, with specialized narrow experience, e.g. in banking, virus or DOS attacks, military networks, etc.. And even if there were 1,000, what would they be doing on behalf of Uncle Sam? Thats a great question given that we as a nation cant seem to hire and keep a national cybersecurity czar. So what are we doing hiring 1,000 experts given there is no boss? While it is great to have a Cybersecurity Awareness Month, whatever that is, and it might be great to add a thousand experts to protect our nation, if you look deeper into this story it is for the most part BS or HS and, I fear, CS to boot. Look, the number of CCIEs with security as a certification is 2,300 for the entire world. Subtract the 50 percent who work for cisco, then 50 percent again for those not working in the field any longer, and you get 500 cisco CCIE Security Experts worldwide. The only way to get another thousand in three years is by training them. But in the last four months with 800 available seats to sit for the cisco CCIE Security exam only one person has passed! The DHS is extremely unlikely to be able to find and train 1,000 cybersecurity experts in three years. Maybe theyll come up with 100 (more likely 5-10), but the DHS environment will make it unlikely very unlikely that all of those 100 will stick around. Secretary Napolitano says she might not need all 1,000, which to me says she is really looking for 3-5 people. And frankly that ought to be enough if they are truly experts and are both properly led and supported (which they probably wont be). So this is the wrong approach entirely. It wont work, the DHS probably knows it wont work (if they dont know that, well God help us all) but they see it as better than nothing. That doesnt worry me so much, though. What really worries me is the point brought up by cybersecurity expert number six, who himself came in from the cold: Sure there are 1,000 (cybersecurity experts), he said, but they are already employed as hackers.

1 0