<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Blogs @ Balius Inc &#187; security</title>
	<atom:link href="http://blogs.balius.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.balius.com</link>
	<description>Information Security ramblings and other geek stuff</description>
	<lastBuildDate>Mon, 15 Aug 2011 20:51:33 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>idea for authpf</title>
		<link>http://blogs.balius.com/2009/11/25/idea-for-authpf/</link>
		<comments>http://blogs.balius.com/2009/11/25/idea-for-authpf/#comments</comments>
		<pubDate>Thu, 26 Nov 2009 00:06:44 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[authpf]]></category>
		<category><![CDATA[OpenBSD]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.balius.com/?p=453</guid>
		<description><![CDATA[I know some sites trust their servers and let the servers talk to anywhere on the Internet or internally. Just had a thought, instead all servers should be blocked for all traffic except for business needed traffic. What about updates? The servers need to go fetch updates. (In those cases where the patches/updates are not&#8230; <a href="http://blogs.balius.com/2009/11/25/idea-for-authpf/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2009/11/25/idea-for-authpf/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Whitfield Diffie talks about secure cloud computing</title>
		<link>http://blogs.balius.com/2009/11/17/whitfield-diffie-talks-about-secure-cloud-computing/</link>
		<comments>http://blogs.balius.com/2009/11/17/whitfield-diffie-talks-about-secure-cloud-computing/#comments</comments>
		<pubDate>Tue, 17 Nov 2009 13:32:57 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[OpenBSD]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://new.balius.com/?p=389</guid>
		<description><![CDATA[In this article Whitfield Diffie talks talks about secure cloud computing.  I take comfort in knowing that he and I used to work for the same company, Sun Microsystems.  There are some really smart people at Sun.  The article is small and I recommend reading it.  I specifically quote part of the article below as&#8230; <a href="http://blogs.balius.com/2009/11/17/whitfield-diffie-talks-about-secure-cloud-computing/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2009/11/17/whitfield-diffie-talks-about-secure-cloud-computing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Oh great, now the IRS is making my information available (and YOURS too)</title>
		<link>http://blogs.balius.com/2008/10/17/oh-great-now-the-irs-is-making-my-information-available/</link>
		<comments>http://blogs.balius.com/2008/10/17/oh-great-now-the-irs-is-making-my-information-available/#comments</comments>
		<pubDate>Fri, 17 Oct 2008 20:06:41 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://ims.balius.com/?p=41</guid>
		<description><![CDATA[IRS deploys applications knowing they have security issues Oh great, the IRS knew about the issues yet still deployed the applications.  Those in charge and who approved this should be fired, IMNSHO.   Putting applications on the network with known vulnerabilities is not a wise decision, regardless of the data contained within.  Given the nature of the&#8230; <a href="http://blogs.balius.com/2008/10/17/oh-great-now-the-irs-is-making-my-information-available/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2008/10/17/oh-great-now-the-irs-is-making-my-information-available/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&quot;New&quot; TCP DDoS</title>
		<link>http://blogs.balius.com/2008/10/09/new-tcp-ddos/</link>
		<comments>http://blogs.balius.com/2008/10/09/new-tcp-ddos/#comments</comments>
		<pubDate>Thu, 09 Oct 2008 12:17:22 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[FUD]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[tcp]]></category>

		<guid isPermaLink="false">http://ims.balius.com/?p=34</guid>
		<description><![CDATA[I like what Fyodor has to say about this http://insecure.org/stf/tcp-dos-attack-explained.html I like this quote How do you know this is the same bug Robert and Jack found? I don&#8217;t, since they have refused to release full details. But this sounds like the same fundamental bug. Robert and Jack are smart fellows, so, again, I&#8217;m sure that&#8230; <a href="http://blogs.balius.com/2008/10/09/new-tcp-ddos/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2008/10/09/new-tcp-ddos/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>What companies are paying for loss of customers data</title>
		<link>http://blogs.balius.com/2008/06/12/what-companies-are-paying-for-loss-of-customers-data/</link>
		<comments>http://blogs.balius.com/2008/06/12/what-companies-are-paying-for-loss-of-customers-data/#comments</comments>
		<pubDate>Thu, 12 Jun 2008 08:05:45 +0000</pubDate>
		<dc:creator>Chad Stewart</dc:creator>
				<category><![CDATA[Blogs]]></category>
		<category><![CDATA[information loss]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://ims.balius.com/?p=21</guid>
		<description><![CDATA[Attrition Security Rant: Useless Compensation for Data Loss Incidents I agree 100% with this article.  I already have, paid for with my own money, a service that watches my credit report from all three agencies, and notifies me with any change.  I read an article by Bruce Schneier a while ago and came away from that&#8230; <a href="http://blogs.balius.com/2008/06/12/what-companies-are-paying-for-loss-of-customers-data/">[Continue Reading]</a>]]></description>
		<wfw:commentRss>http://blogs.balius.com/2008/06/12/what-companies-are-paying-for-loss-of-customers-data/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

