<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for Immutable Security</title>
	<atom:link href="http://www.immutablesecurity.com/index.php/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.immutablesecurity.com</link>
	<description>Information Security, Privacy and Personal Liberty</description>
	<lastBuildDate>Wed, 04 Aug 2010 16:54:17 -0500</lastBuildDate>
	<generator>http://wordpress.org/?v=abc</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Amtrak (In)Security by JC</title>
		<link>http://www.immutablesecurity.com/index.php/2010/06/10/amtrak-insecurity/comment-page-1/#comment-671</link>
		<dc:creator>JC</dc:creator>
		<pubDate>Wed, 04 Aug 2010 16:54:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=514#comment-671</guid>
		<description>A previoyus job I had (before 9/11) required weekly flying and I grew to dislike it. After 9/11 I grew to hate it. I&#039;ve been pulled aside because of one-way tickets, because of uncommon destinations and sometimes &quot;just because&quot;. I&#039;ve had personal belongings confiscated or damaged (I lost a laptop to damage one because the screener dropped it).

I now take the train whenever possible and one primary reason is because the lack of screening makes it a far more &quot;civilized way to travel. I&#039;m willing to take my chances. Being treated like cattle, and criminal cattle at that, is just too obnoxious.</description>
		<content:encoded><![CDATA[<p>A previoyus job I had (before 9/11) required weekly flying and I grew to dislike it. After 9/11 I grew to hate it. I&#8217;ve been pulled aside because of one-way tickets, because of uncommon destinations and sometimes &#8220;just because&#8221;. I&#8217;ve had personal belongings confiscated or damaged (I lost a laptop to damage one because the screener dropped it).</p>
<p>I now take the train whenever possible and one primary reason is because the lack of screening makes it a far more &#8220;civilized way to travel. I&#8217;m willing to take my chances. Being treated like cattle, and criminal cattle at that, is just too obnoxious.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Compiling the OSSEC Windows Agent on Windows by Tweets that mention Immutable Security » Compiling the OSSEC Windows Agent on Windows -- Topsy.com</title>
		<link>http://www.immutablesecurity.com/index.php/2010/07/06/compiling-the-ossec-agent-on-windows/comment-page-1/#comment-666</link>
		<dc:creator>Tweets that mention Immutable Security » Compiling the OSSEC Windows Agent on Windows -- Topsy.com</dc:creator>
		<pubDate>Tue, 06 Jul 2010 21:56:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=534#comment-666</guid>
		<description>[...] This post was mentioned on Twitter by Roer.com - the Blog!. Roer.com - the Blog! said: Compiling the OSSEC Windows Agent on Windows http://bit.ly/auBWdx #Security [...]</description>
		<content:encoded><![CDATA[<p>[...] This post was mentioned on Twitter by Roer.com &#8211; the Blog!. Roer.com &#8211; the Blog! said: Compiling the OSSEC Windows Agent on Windows <a href="http://bit.ly/auBWdx" rel="nofollow">http://bit.ly/auBWdx</a> #Security [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Will the Real S-1-7-23-3394466182-97151736-2635146241-1084 Please Stand? by Leigh Purdie</title>
		<link>http://www.immutablesecurity.com/index.php/2010/03/05/will-the-real-s-1-7-23-3394466182-97151736-2635146241-1084-please-stand/comment-page-1/#comment-665</link>
		<dc:creator>Leigh Purdie</dc:creator>
		<pubDate>Mon, 05 Jul 2010 22:47:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=449#comment-665</guid>
		<description>Horrible, isn&#039;t it Michael.

We get around this on the Snare Server side by pulling down the user to sid mapping, and then basically searching through the events, and tagging each SID with the corresponding UserID mapping.

I considered doing it directly in the agent, but the additional CPU requirement would have had sysadmins pulling their hair out when we&#039;re talking kilo-events-per-second on some systems. The MS Log viewer can do it, since it tends to operate on &#039;human viewing speeds&#039;.

Unfortunately, other log formats often exhibit the same problem, sending UID&#039;s exclusively rather than username information. As you mention, whilst technically &#039;correct&#039;, it certainly makes things awkward, and it also presents challenges for historical log analysis.

Sometimes log formats err too far on the side of human legibility, at the expense of ease of follow on processing (*cough*CISCO*cough* ... really guys - people are not going to wade through 17 gigs of logs without some sort of tool, even if it&#039;s just grep, awk and cut), whilst others streamline logs to the point of obfuscation. MS logs seem to wander between the two extremes.

Leigh. (Snare dev, InterSect Alliance).</description>
		<content:encoded><![CDATA[<p>Horrible, isn&#8217;t it Michael.</p>
<p>We get around this on the Snare Server side by pulling down the user to sid mapping, and then basically searching through the events, and tagging each SID with the corresponding UserID mapping.</p>
<p>I considered doing it directly in the agent, but the additional CPU requirement would have had sysadmins pulling their hair out when we&#8217;re talking kilo-events-per-second on some systems. The MS Log viewer can do it, since it tends to operate on &#8216;human viewing speeds&#8217;.</p>
<p>Unfortunately, other log formats often exhibit the same problem, sending UID&#8217;s exclusively rather than username information. As you mention, whilst technically &#8216;correct&#8217;, it certainly makes things awkward, and it also presents challenges for historical log analysis.</p>
<p>Sometimes log formats err too far on the side of human legibility, at the expense of ease of follow on processing (*cough*CISCO*cough* &#8230; really guys &#8211; people are not going to wade through 17 gigs of logs without some sort of tool, even if it&#8217;s just grep, awk and cut), whilst others streamline logs to the point of obfuscation. MS logs seem to wander between the two extremes.</p>
<p>Leigh. (Snare dev, InterSect Alliance).</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on On Acceptance of Risk by Tweets that mention Immutable Security » On Acceptance of Risk -- Topsy.com</title>
		<link>http://www.immutablesecurity.com/index.php/2010/06/21/on-acceptance-of-risk/comment-page-1/#comment-659</link>
		<dc:creator>Tweets that mention Immutable Security » On Acceptance of Risk -- Topsy.com</dc:creator>
		<pubDate>Mon, 21 Jun 2010 15:50:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=523#comment-659</guid>
		<description>[...] This post was mentioned on Twitter by Roer.com - the Blog!, Bill Nigh and Tim, Roer.com - the Blog!. Roer.com - the Blog! said: On Acceptance of Risk http://bit.ly/c521P9 #Security [...]</description>
		<content:encoded><![CDATA[<p>[...] This post was mentioned on Twitter by Roer.com &#8211; the Blog!, Bill Nigh and Tim, Roer.com &#8211; the Blog!. Roer.com &#8211; the Blog! said: On Acceptance of Risk <a href="http://bit.ly/c521P9" rel="nofollow">http://bit.ly/c521P9</a> #Security [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Thinking Like a Hacker by Tweets that mention Immutable Security » Thinking Like a Hacker -- Topsy.com</title>
		<link>http://www.immutablesecurity.com/index.php/2010/06/15/thinking-like-a-hacker/comment-page-1/#comment-656</link>
		<dc:creator>Tweets that mention Immutable Security » Thinking Like a Hacker -- Topsy.com</dc:creator>
		<pubDate>Tue, 15 Jun 2010 23:08:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=519#comment-656</guid>
		<description>[...] This post was mentioned on Twitter by Omar Alvarado G. and Roberto Martinez, kakroo. kakroo said: Thinking Like a Hacker http://bit.ly/9VNtd1 #Security [...]</description>
		<content:encoded><![CDATA[<p>[...] This post was mentioned on Twitter by Omar Alvarado G. and Roberto Martinez, kakroo. kakroo said: Thinking Like a Hacker <a href="http://bit.ly/9VNtd1" rel="nofollow">http://bit.ly/9VNtd1</a> #Security [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Ubuntu One Music Store Follows You Home by mstarks</title>
		<link>http://www.immutablesecurity.com/index.php/2010/05/17/ubuntu-one-music-store-follows-you-home/comment-page-1/#comment-651</link>
		<dc:creator>mstarks</dc:creator>
		<pubDate>Sat, 12 Jun 2010 00:51:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=502#comment-651</guid>
		<description>Jason,

First, I would like to thank you for taking the time to comment. I&#039;d like to respond to your thoughtful insights below:

&lt;blockquote cite=&quot;#commentbody-650&quot;&gt;
&lt;strong&gt;&lt;a href=&quot;#comment-650&quot; rel=&quot;nofollow&quot;&gt;Jason&lt;/a&gt; :&lt;/strong&gt;
&lt;p&gt;That first snippet is analogous to the copyright on most CD’s.  You don’t own the music on a CD when you buy it but rather it is licensed to you by the record label for your private use.  Same thing with most DVDs.  It is illegal to make a copy of a CD for a friend just like a digital file.&lt;/p&gt;
&lt;p&gt;Furthermore, if these restrictions were not in place the store would have trouble securing content from anyone but the tiniest indie labels and the selection would suck.&lt;/p&gt;
&lt;p&gt;Just because the software that sells you an album is free doesn’t mean the album is free.  This argument is like getting upset that you have to pay for things on an online store just because you are browsing that store on Firefox in Ubuntu.&lt;/p&gt;
&lt;p&gt;“if you’re using a free (as in freedom) OS, you expect ALL coming from it has the same licenses…”  This is a naive expectation.&lt;/p&gt;
&lt;/blockquote&gt;

You&#039;re right that I don&#039;t own the music on the CD or DVD, but I disagree that it is licensed to me to use. It&#039;s no more a license for me to use than there is a license for the artwork on my wall. Of course the RIAA would like to have you believe there is a license, like there is with most software, but the fact is that licenses are contracts. Contracts are voluntary agreements that are entered into between two or more parties with an exchange of value. I have never agreed to any contractual terms when i bought, opened or played a CD or DVD, therefore, what&#039;s left? Simple copyright law. And copyright law allows for a balance of rights. You&#039;re right that I can&#039;t make a copy and give it to my friend, as I didn&#039;t suggest that. That&#039;s covered under the first-sale doctrine. But I can lend, give it or sell it to my friend without the copyright holder&#039;s permission.

As to your point about the restrictions being in place and having trouble securing the content, I think you&#039;re right. The record labels are doing what they can to contract away rights we previously enjoyed. They would like nothing more than to destroy the aftermarket so they can maintain a hold. They tried DRM and when that didn&#039;t work, they resorted to contract law. 

Finally, I think you are confusing my use of the word free with the common use. I am using free in the context that free software is often defined in--that is, freedom. I pay for stuff all the time and am happy to pay for quality goods. But when an OS who purports the ideals of freedom integrates a way for users to contract them away, without so much as a warning about what is happening, I think that is cause for concern.</description>
		<content:encoded><![CDATA[<p>Jason,</p>
<p>First, I would like to thank you for taking the time to comment. I&#8217;d like to respond to your thoughtful insights below:</p>
<blockquote cite="#commentbody-650"><p>
<strong><a href="#comment-650" rel="nofollow">Jason</a> :</strong></p>
<p>That first snippet is analogous to the copyright on most CD’s.  You don’t own the music on a CD when you buy it but rather it is licensed to you by the record label for your private use.  Same thing with most DVDs.  It is illegal to make a copy of a CD for a friend just like a digital file.</p>
<p>Furthermore, if these restrictions were not in place the store would have trouble securing content from anyone but the tiniest indie labels and the selection would suck.</p>
<p>Just because the software that sells you an album is free doesn’t mean the album is free.  This argument is like getting upset that you have to pay for things on an online store just because you are browsing that store on Firefox in Ubuntu.</p>
<p>“if you’re using a free (as in freedom) OS, you expect ALL coming from it has the same licenses…”  This is a naive expectation.</p>
</blockquote>
<p>You&#8217;re right that I don&#8217;t own the music on the CD or DVD, but I disagree that it is licensed to me to use. It&#8217;s no more a license for me to use than there is a license for the artwork on my wall. Of course the RIAA would like to have you believe there is a license, like there is with most software, but the fact is that licenses are contracts. Contracts are voluntary agreements that are entered into between two or more parties with an exchange of value. I have never agreed to any contractual terms when i bought, opened or played a CD or DVD, therefore, what&#8217;s left? Simple copyright law. And copyright law allows for a balance of rights. You&#8217;re right that I can&#8217;t make a copy and give it to my friend, as I didn&#8217;t suggest that. That&#8217;s covered under the first-sale doctrine. But I can lend, give it or sell it to my friend without the copyright holder&#8217;s permission.</p>
<p>As to your point about the restrictions being in place and having trouble securing the content, I think you&#8217;re right. The record labels are doing what they can to contract away rights we previously enjoyed. They would like nothing more than to destroy the aftermarket so they can maintain a hold. They tried DRM and when that didn&#8217;t work, they resorted to contract law. </p>
<p>Finally, I think you are confusing my use of the word free with the common use. I am using free in the context that free software is often defined in&#8211;that is, freedom. I pay for stuff all the time and am happy to pay for quality goods. But when an OS who purports the ideals of freedom integrates a way for users to contract them away, without so much as a warning about what is happening, I think that is cause for concern.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Ubuntu One Music Store Follows You Home by Jason</title>
		<link>http://www.immutablesecurity.com/index.php/2010/05/17/ubuntu-one-music-store-follows-you-home/comment-page-1/#comment-650</link>
		<dc:creator>Jason</dc:creator>
		<pubDate>Fri, 11 Jun 2010 20:26:21 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=502#comment-650</guid>
		<description>That first snippet is analogous to the copyright on most CD&#039;s.  You don&#039;t own the music on a CD when you buy it but rather it is licensed to you by the record label for your private use.  Same thing with most DVDs.  It is illegal to make a copy of a CD for a friend just like a digital file.

Furthermore, if these restrictions were not in place the store would have trouble securing content from anyone but the tiniest indie labels and the selection would suck.

Just because the software that sells you an album is free doesn&#039;t mean the album is free.  This argument is like getting upset that you have to pay for things on an online store just because you are browsing that store on Firefox in Ubuntu.

&quot;if you’re using a free (as in freedom) OS, you expect ALL coming from it has the same licenses…&quot;  This is a naive expectation.</description>
		<content:encoded><![CDATA[<p>That first snippet is analogous to the copyright on most CD&#8217;s.  You don&#8217;t own the music on a CD when you buy it but rather it is licensed to you by the record label for your private use.  Same thing with most DVDs.  It is illegal to make a copy of a CD for a friend just like a digital file.</p>
<p>Furthermore, if these restrictions were not in place the store would have trouble securing content from anyone but the tiniest indie labels and the selection would suck.</p>
<p>Just because the software that sells you an album is free doesn&#8217;t mean the album is free.  This argument is like getting upset that you have to pay for things on an online store just because you are browsing that store on Firefox in Ubuntu.</p>
<p>&#8220;if you’re using a free (as in freedom) OS, you expect ALL coming from it has the same licenses…&#8221;  This is a naive expectation.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Amtrak (In)Security by Mark C. Wallace</title>
		<link>http://www.immutablesecurity.com/index.php/2010/06/10/amtrak-insecurity/comment-page-1/#comment-649</link>
		<dc:creator>Mark C. Wallace</dc:creator>
		<pubDate>Thu, 10 Jun 2010 17:20:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=514#comment-649</guid>
		<description>I&#039;m willing to make the trade. I take the train every day.  If they added the kind of security you&#039;re talking about the cost of train travel would soar (Many more employees, a complete redesign of the boarding platform and waiting area). Currently Union station can&#039;t handle the flow of people on and off the trains; if you add security to that and slow down the boarding process I would imagine that they&#039;d have to cut some of the train service.  Fewer people would take the trains - which would be nice - but in all probability the train would become economically unviable.

In an area with a traffic density as high as ours (which are the only places that trains make sense), you could do more damage with a personally owned vehicle loaded with explosives than you could with anything you could carry onto a train.  And the existing train has much more surveillance &amp; security.  It is already against the law to even mouth off to a train operator. If the train operator has any misgivings, there will be transit police waiting at the next stop. 

Please, don&#039;t ruin my commute.</description>
		<content:encoded><![CDATA[<p>I&#8217;m willing to make the trade. I take the train every day.  If they added the kind of security you&#8217;re talking about the cost of train travel would soar (Many more employees, a complete redesign of the boarding platform and waiting area). Currently Union station can&#8217;t handle the flow of people on and off the trains; if you add security to that and slow down the boarding process I would imagine that they&#8217;d have to cut some of the train service.  Fewer people would take the trains &#8211; which would be nice &#8211; but in all probability the train would become economically unviable.</p>
<p>In an area with a traffic density as high as ours (which are the only places that trains make sense), you could do more damage with a personally owned vehicle loaded with explosives than you could with anything you could carry onto a train.  And the existing train has much more surveillance &amp; security.  It is already against the law to even mouth off to a train operator. If the train operator has any misgivings, there will be transit police waiting at the next stop. </p>
<p>Please, don&#8217;t ruin my commute.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Ubuntu One Music Store Follows You Home by jado92mx</title>
		<link>http://www.immutablesecurity.com/index.php/2010/05/17/ubuntu-one-music-store-follows-you-home/comment-page-1/#comment-639</link>
		<dc:creator>jado92mx</dc:creator>
		<pubDate>Sun, 23 May 2010 03:41:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=502#comment-639</guid>
		<description>That is my eternel question: Why not Vorbis?
Ok, no technologic DRM is fine, but limits inside the Contract is not the best option; if you&#039;re using a free (as in freedom) OS, you expect ALL coming from it has the same licenses...

Greetings!
JaD!</description>
		<content:encoded><![CDATA[<p>That is my eternel question: Why not Vorbis?<br />
Ok, no technologic DRM is fine, but limits inside the Contract is not the best option; if you&#8217;re using a free (as in freedom) OS, you expect ALL coming from it has the same licenses&#8230;</p>
<p>Greetings!<br />
JaD!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Ubuntu One Music Store Follows You Home by Tweets that mention Immutable Security » Ubuntu One Music Store Follows You Home -- Topsy.com</title>
		<link>http://www.immutablesecurity.com/index.php/2010/05/17/ubuntu-one-music-store-follows-you-home/comment-page-1/#comment-637</link>
		<dc:creator>Tweets that mention Immutable Security » Ubuntu One Music Store Follows You Home -- Topsy.com</dc:creator>
		<pubDate>Tue, 18 May 2010 02:54:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.immutablesecurity.com/?p=502#comment-637</guid>
		<description>[...] This post was mentioned on Twitter by Windows Security. Windows Security said: Ubuntu One #Music_Store Follows You Home: [immutablesecurity.com] The new version of Ubuntu includes integration... http://dlvr.it/12w5F [...]</description>
		<content:encoded><![CDATA[<p>[...] This post was mentioned on Twitter by Windows Security. Windows Security said: Ubuntu One #Music_Store Follows You Home: [immutablesecurity.com] The new version of Ubuntu includes integration&#8230; <a href="http://dlvr.it/12w5F" rel="nofollow">http://dlvr.it/12w5F</a> [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
