- cypherpunks-legacy - lists.cpunks.org

REVIEW: "The dotCrime Manifesto", Phillip Hallam-Baker (was Re: [RISKS] Risks Digest 25.22))
by R.A. Hettinga 08 Jul '08

08 Jul '08

On Jul 8, 2008, at 2:21 PM, RISKS List Owner wrote: > Date: Thu, 03 Jul 2008 11:06:12 -0800 > From: Rob Slade <rmslade(a)shaw.ca> > Subject: REVIEW: "The dotCrime Manifesto", Phillip Hallam-Baker > > BKDCRMNF.RVW 20080317 > > "The dotCrime Manifesto", Phillip Hallam-Baker, 2008, 0-321-50358-9, > U$29.99/C$32.99 > %A Phillip Hallam-Baker dotcrimemanifesto.com hallam(a)gmail.com > %C P.O. Box 520, 26 Prince Andrew Place, Don Mills, Ontario M3C 2T8 > %D 2008 > %G 978-0-321-50358-9 0-321-50358-9 > %I Addison-Wesley Publishing Co. > %O U$29.99/C$32.99 416-447-5101 fax: 416-443-0948 800-822-6339 > %O http://www.amazon.com/exec/obidos/ASIN/0321503589/robsladesinterne > http://www.amazon.co.uk/exec/obidos/ASIN/0321503589/robsladesinte-21 > %O http://www.amazon.ca/exec/obidos/ASIN/0321503589/robsladesin03-20 > %O Audience n+ Tech 2 Writing 2 (see revfaq.htm for explanation) > %P 415 p. > %T "The dotCrime Manifesto: How to Stop Internet Crime" > > In the preface, the author notes that network and computer crime is a > matter of people, not of technology. However, he also notes that > changes to the network infrastructure, as well as improvements in > accountability, would assist in reducing user risk on the net. > > Section one enlarges on the theme that people are more important than > machines or protocols. Chapter one looks at the motive for Internet > crime > (money, just like non-computer crime), and repeats the motifs of the > preface. The text goes on to list various categories and examples of > network fraud. The content of chapter two is very interesting, but > it is > hard to find a central thread. Overall it appears to be saying that > computer criminals are not the masterminds implied by media > portrayals, but > that the problem of malfeasance is growing and needs to be seriously > addressed. What Hallam-Baker seems to mean by "Learning from > Mistakes," in > chapter three, is that security professionals often rely too much on > general > principles, rather than accepting a functional, if imperfect, > solution that > reduces the severity of the problem. Chapter four presents the > standard (if > you'll pardon the expression) discussion of change and the > acceptance of new > technologies. A process for driving change designed to improve the > Internet > infrastructure is proposed in chapter five. > > Section two examines ways to address some of the major network crime > risks. > Chapter six notes the problems with many common means of handling > spam. > SenderID and SPF is promoted in chapter seven (without expanding the > acronym > to Sender Policy Framework anywhere in the book that I could find). > Phishing, and protection against it, is discussed in chapter eight. > Chapter > nine is supposed to deal with botnets, but concentrates on trojans and > firewalls (although I was glad to see a mention of "reverse > firewalls," or > egress scanning, which is too often neglected). > > Section three details the security tools of cryptography and trust. > Chapter > ten outlines some history and concepts of cryptography. Trust, in > chapter > eleven, is confined to the need for aspects of public key > infrastructure > (PKI). > > Section four presents thoughts on accountability. Secure transport, > in > chapter twelve, starts with thoughts on SSL (Secure Sockets Layer), > and then > moves to more characteristics of certificates and the Extended > Verification > certificates. (The promotion of Verisign, infrequent and somewhat > amusing > in the earlier chapters is, by this point in the book, becoming > increasingly > annoying. The author is also starting to make more subjective > assertions, > such as boosting the trusted computing platform initiative.) Domain > Keys > Identified Mail (DKIM) is the major technology promoted in support > of secure > messaging, in chapter thirteen. Chapter fourteen, about secure > identity, > has an analysis of a variety of technologies. (The recommendations > about > technologies are supported even less than before, and the work now > starts to > sound rather doctrinaire.) It may seem rather odd to talk about > secure > names as opposed to identities, but Hallam-Baker is dealing with > identifiers > such as email addresses and domain names in chapter fifteen. Chapter > sixteen looks at various considerations in regard to securing > networks, > mostly in terms of authentication. Random thoughts on operating > system, > hardware, or application security make up chapter seventeen. The > author > stresses, in chapter eighteen, that the law, used in conjunction with > security technologies, can help in reducing overall threat levels. > Chapter > nineteen finishes off the text with a proposed outline of action > that recaps > the major points. > > Hallam-Baker uses a dry wit well, and to good effect in the book. The > humour supports and reinforces the points being made. So does his > extensive and generally reliable knowledge of computer technology and > history. In certain areas the author is either less knowledgeable or > careless in his wording, and, unfortunately, the effect is to lessen > the reader's confidence in his conclusions. This is a pity, since > Hallam-Baker is championing a number of positions that would promote > much greater safety and security on the Internet. Overall this work > is, for the non-specialist, a much-better-than-average introduction to > the issue of Internet crime and protection, and is also worth serious > consideration by security professionals for the thought-provoking > challenges to standard approaches to the problems examined. > > copyright Robert M. Slade, 2008 BKDCRMNF.RVW 2008031 > rslade(a)vcn.bc.ca slade(a)victoria.tc.ca rslade(a)computercrime.org > http://victoria.tc.ca/techrev/rms.htm

1 0

The bestRolex DateJust Rep1icaWatches at Aff0rdable prices, Japanese & swiss movements jbnh h0dk
by Harriette Ninfa 08 Jul '08

08 Jul '08

-------------------------------------------------------------- *** The Best & Finest ReplicaStore on net *** The cheapest among all other online ReplicaSites *** over 40 world famous branded WATCHES BRANDs to choose from http://thv.fstox.com -------------------------------------------------------------- * oRolexSports * oRolexDatejusts * A lange & Sohne * Aigner * Alain Silberstein * Audemars Piguet * Bell & Ross * Breguet * Breitling * Bvlgari * Cartier * Chanel * Chopard * Concord * Corum * Dior * Dolce & Gabbana * Ebel * Emporio Armani * Glashutte * Gucci * Hermes Watches * IWC * Jacob & Co * Jaeger LeCoultre * Longines * Louis Vuitton * Mont Blanc * Movado * Omega * Oris * Panerai * Patek Philippe * Philip Stein * Porsche Design * Rado * Roger Dubuis * Sarcar * Tag Heuer * Technomarine * Vacheron Constantin * Zenith ** Louis Vuitton Bags & Wallets ** Gucci bags ** Tiffany & Co Jewerly See to believe! http://tbbl.fstox.com

1 0

Rep|icaWatches Massive discounts on more than 5000 brand timepieces such as vRolex, Breitling, Cartier, Patek Philippe, Hermes, Franck Muller & .. wuan o5
by Julie Gladys 07 Jul '08

07 Jul '08

********* Latest Arrival ********* Just Added MANY Year 2008 new models : Japanese Movement Rep1ica : 100% Finest Quality Watch : Overnight Shipping : ship via DHL, UPS, FedEx & USPS View A-Z brands on our site http://rqy.mroil.com.cn

1 0

-=: Buy 88% Cheaper pills online from US DrugStore! FREE 4 Bonus BLUE Pills kgdcl 551y
by Jeri Lawanna 07 Jul '08

07 Jul '08

- =: US Drugstore := - Voted as No.1 US Pharmacy on Internet 0ver 80 meds on our online store We accept VISA, Master Card, JCB, Dinner & eCheck Mystery Gift with every PURCHASE! HURRY! LIMITED TIME! Checkout the Gift by clicking below link http://byyp.bbreuter.com.cn

1 0

SOLD OUT -- Did you know where to purchase great watch? qp92
by Dante Huff 06 Jul '08

06 Jul '08

Dear cypherpunks(a)jfet.org http://ewoosl.com What is Prestige Replica store? At King Replica, we specialize in the sales of brand-name quality, luxury replicas at some of the lowest prices possible. With our large selection of products, you can be sure to find that perfect gift for yourself or a loved one. Visit King Replica Shop! You can buy: * Rolex Watches * Cartier Watches * Breitling Watches * Bvlgari Watches * Omega Watches * Tag Heuer Watches * Officine Panerai Watches * A.Lange & Sohne Watches * Franck Muller Watches * Chopard Watches * Hermes Watches * Jacob & Co. Watches http://ewoosl.com Thanks Mary Moore cypherpunks(a)jfet.org wrote: > SOLD OUT -- - Do you want Rolex? or any other extra watch? j0p3grq0y2- out me now http://ewoosl.com/remove/

1 0

Reliable watches for everyone at Prestige Replicas
by Harry Bryant 06 Jul '08

06 Jul '08

If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Prestige Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://johnwalkerblog.blogspot.com/ As you are probably aware of, Prestige Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Prestige Replicas today! http://johnwalkerblog.blogspot.com/

1 0

-=: Buy 88% Cheaper pills online from US DrugStore! FREE 4 Bonus BLUE Pills wnchdo d8
by Shantelle Sadie 06 Jul '08

06 Jul '08

- =: US Drugstore := - Voted as No.1 US Pharmacy on Internet 0ver 80 meds on our online store We accept VISA, Master Card, JCB, Dinner & eCheck Mystery Gift with every PURCHASE! HURRY! LIMITED TIME! Checkout the Gift by clicking below link http://bmor.mooffx.com.cn

1 0

SOLD OUT -- -Do you want Rolex? or any other extra watch? iefs51
by Gerry Painter 06 Jul '08

06 Jul '08

Dear rsw(a)jfet.org http://jsooke.com What is Prestige Replica store? At King Replica, we specialize in the sales of brand-name quality, luxury replicas at some of the lowest prices possible. With our large selection of products, you can be sure to find that perfect gift for yourself or a loved one. Visit King Replica Shop! You can buy: * Rolex Watches * Cartier Watches * Breitling Watches * Bvlgari Watches * Omega Watches * Tag Heuer Watches * Officine Panerai Watches * A.Lange & Sohne Watches * Franck Muller Watches * Chopard Watches * Hermes Watches * Jacob & Co. Watches http://jsooke.com Thanks Ann Anniston rsw(a)jfet.org wrote: > SOLD OUT -- -Gucci or Louis Vuitton products bzfrppmgol- out me now http://jsooke.com/remove/

1 0

free ViagraCializ pills for any purcahse, Buy more FREE more! uoodj n11
by Love Madelyn 06 Jul '08

06 Jul '08

== A-Z medications to choose from == We give you FreeViagraPills (Free you 4-12 pills with any order) == ViagraPill == == Cialix Pills == == PenisGrowth Pack == == SQMA == == Phentrimine == == Levitr == == Tramadol == == FemaleViagra == & 400 more meds to choose from Claim your Free 4-12 ViagraPills here with us http://kioj.mndits.com.cn

1 0

SAD because of LOW EDUCATION? Cheap Price Degree/bacheelor/MasteerMBA/PhDD certificate calawu hti
by Vicenta Eulalia 06 Jul '08

06 Jul '08

It cost you nothing(Yes! $0) to give us a call, We will contact you back Absolutely N0 exams/tests/classes/books/interviews No pre-school Qualification needed! -------------------------------- For USA: 1-718-989-5740 Outside USA: +1-718-989-5740 -------------------------------- Degree, bacheelor, MasteerMBA and PhDD available in the field of your Choice that's right, you can even become a Doctor & receive ALL the benefits that comes with it! *** No One is turned down *** Confidentiality assured Please Leave Below 3 info in Voicemail: 1) Your NAME 2) Your COUNTRY 3) Your PHONE No. (with CountryCode) Call us NOW! 24 hours a day, 7 days a week to recieve your call -------------------------------- For USA: 1-718-989-5740 Outside USA: +1-718-989-5740 -------------------------------- Our Staff will get back to you in 1-3 working days

1 0