<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Best Parental Control</title>
	<atom:link href="http://www.best-parental-control.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.best-parental-control.com</link>
	<description>Expert Information on Parental Control</description>
	<lastBuildDate>Thu, 11 Mar 2010 20:26:36 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Wikibooks Cryptography Textbook</title>
		<link>http://www.best-parental-control.com/1623/wikibooks-cryptography-textbook/</link>
		<comments>http://www.best-parental-control.com/1623/wikibooks-cryptography-textbook/#comments</comments>
		<pubDate>Thu, 11 Mar 2010 20:26:36 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[cryptography]]></category>
		<category><![CDATA[open source]]></category>
		<category><![CDATA[textbook]]></category>
		<category><![CDATA[wikibooks]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://99639d39f39bb927a8ba17b3ee15239f</guid>
		<description><![CDATA[Over at Wikibooks, they're trying to write an open source <a href="http://en.wikibooks.org/wiki/Cryptography">cryptography textbook</a>.
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=iBTpn31Jwwo:23ap0p7YyV4:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=iBTpn31Jwwo:23ap0p7YyV4:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=iBTpn31Jwwo:23ap0p7YyV4:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a>
]]></description>
			<content:encoded><![CDATA[<p>Over at Wikibooks, they&#8217;re trying to write an open source <a href="http://en.wikibooks.org/wiki/Cryptography">cryptography textbook</a>.<br />
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=iBTpn31Jwwo:23ap0p7YyV4:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=iBTpn31Jwwo:23ap0p7YyV4:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=iBTpn31Jwwo:23ap0p7YyV4:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1623/wikibooks-cryptography-textbook/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Wanted: Trust Detector</title>
		<link>http://www.best-parental-control.com/1624/wanted-trust-detector/</link>
		<comments>http://www.best-parental-control.com/1624/wanted-trust-detector/#comments</comments>
		<pubDate>Thu, 11 Mar 2010 14:17:12 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[body signals]]></category>
		<category><![CDATA[experimental protocols]]></category>
		<category><![CDATA[facial recognition technology]]></category>
		<category><![CDATA[facial tics]]></category>
		<category><![CDATA[sensors and software]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://d3f30df7352952b564965900c856e72d</guid>
		<description><![CDATA[It's good to <a href="http://www.popsci.com/technology/article/2010-02/us-spooks-want-better-gauge-trust-matter-life-and-death">dream</a>:

IARPA's <a href="https://www.fbo.gov/index?s=opportunity&#38;mode=form&#38;id=e8a232ee02172d046ec7934d0af30005&#38;tab=core&#38;_cview=0">five-year plan</a> aims to design experiments that can measure trust with high certainty -- a tricky proposition for a psychological study. Developing such experimental protocols could prove very useful for assessing levels of trust within one-on-one talks, or even during group interactions.

A second part of the IARPA proposal might involve using new types of sensors and software to gauge human facial, language or body signals that might help predict trustworthiness. Perhaps <a href="http://www.popsci.com/technology/article/2009-10/fbi-facial-recognition-software-scan-highway-fugitive-motorists">facial recognition</a> technology that could deduce emotions or facial tics might help, not to mention better <a href="http://www.popsci.com/scitech/article/2002-07/terror-talk">lie detectors</a>.

IARPA is the <a href="http://www.iarpa.gov/">Intelligence Advanced Research Projects Activity</a>, the U.S. intelligence community's answer to DARPA.
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=LB2rWURkBPQ:J4inhLOqHio:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=LB2rWURkBPQ:J4inhLOqHio:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=LB2rWURkBPQ:J4inhLOqHio:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a>
]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s good to <a href="http://www.popsci.com/technology/article/2010-02/us-spooks-want-better-gauge-trust-matter-life-and-death">dream</a>:</p>
<p>IARPA&#8217;s <a href="https://www.fbo.gov/index?s=opportunity&#038;mode=form&#038;id=e8a232ee02172d046ec7934d0af30005&#038;tab=core&#038;_cview=0">five-year plan</a> aims to design experiments that can measure trust with high certainty &#8212; a tricky proposition for a psychological study. Developing such experimental protocols could prove very useful for assessing levels of trust within one-on-one talks, or even during group interactions.</p>
<p>A second part of the IARPA proposal might involve using new types of sensors and <a href="http://www.best-parental-control.com/tag/software/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with software">software</a> to gauge human facial, language or body signals that might help predict trustworthiness. Perhaps <a href="http://www.popsci.com/technology/article/2009-10/fbi-facial-recognition-software-scan-highway-fugitive-motorists">facial recognition</a> <a href="http://www.best-parental-control.com/tag/technology/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Technology">technology</a> that could deduce emotions or facial tics might help, not to mention better <a href="http://www.popsci.com/scitech/article/2002-07/terror-talk">lie detectors</a>.</p>
<p>IARPA is the <a href="http://www.iarpa.gov/">Intelligence Advanced Research Projects Activity</a>, the U.S. intelligence community&#8217;s answer to DARPA.<br />
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=LB2rWURkBPQ:J4inhLOqHio:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=LB2rWURkBPQ:J4inhLOqHio:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=LB2rWURkBPQ:J4inhLOqHio:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1624/wanted-trust-detector/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I&#8217;ve Got a Spy On You</title>
		<link>http://www.best-parental-control.com/1622/ive-got-a-spy-on-you/</link>
		<comments>http://www.best-parental-control.com/1622/ive-got-a-spy-on-you/#comments</comments>
		<pubDate>Thu, 11 Mar 2010 07:54:00 +0000</pubDate>
		<dc:creator>Francis Duncan</dc:creator>
				<category><![CDATA[Parental Control News]]></category>
		<category><![CDATA[online privacy]]></category>
		<category><![CDATA[online safety]]></category>
		<category><![CDATA[OnlinePrivacy]]></category>
		<category><![CDATA[OnlineSafety]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false">http://blog.safetyclicks.com/2010/03/11/ive-got-a-spy-on-you/</guid>
		<description><![CDATA[<p>Filed under: <a href="http://blog.safetyclicks.com/category/how-is-my-child-sharing-information/" rel="tag">Sharing Info Online</a>, <a href="http://blog.safetyclicks.com/category/internet-danger/" rel="tag">Internet Dangers</a>, <a href="http://blog.safetyclicks.com/category/technology/" rel="tag">Technology</a>, <a href="http://blog.safetyclicks.com/category/articles-of-interest/" rel="tag">Articles of Interest</a></p>There is a debate about how or if parents should use <a href="http://www.google.com/search?hl=en&#38;source=hp&#38;q=define%3A+spyware&#38;aq=0&#38;aqi=l1g10&#38;aql=&#38;oq=what+is+spy" target="_blank">spyware </a>on their kids' computer to find out what their kids are doing online. This is a debate between parents, but is not a legal debate. Apparently a high school in Philadelphia took this idea to another level.<br /><a href="http://abcnews.go.com/GMA/Parenting/pennsylvania-school-fbi-probe-webcam-students-spying/story?id=9905488" target="_blank"><br />A Pennsylvania school district</a> is being investigated by the FBI for remotely activating the web cams on the laptops they issued to students. The school district says that they were wanting to track online behavior when the students were supposed to be doing homework. The parents of these students disagree, saying it was a clear privacy violation. It is still unknown how the FBI will find, but I would not at all be surprised to find this a question posed to either the state's or the U.S. Supreme Court.<br /><br />What do you think? Privacy violation or good intentions communicated poorly?<p style="clear: both;padding: 8px 0 0 0;height: 2px;font-size: 1px;border: 0;margin: 0;padding: 0">&#160;</p><p><a href="http://blog.safetyclicks.com/2010/03/11/ive-got-a-spy-on-you/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&#160;&#124;&#160;<a href="http://blog.safetyclicks.com/forward/19391892/" title="Send this entry to a friend via email">Email this</a>&#160;&#124;&#160;<a href="http://www.technorati.com/cosmos/search.html?rank=&#38;fc=1&#38;url=http://blog.safetyclicks.com/2010/03/11/ive-got-a-spy-on-you/" title="Linking Blogs">Linking&#160;Blogs</a>&#160;&#124;&#160;<a href="http://blog.safetyclicks.com/2010/03/11/ive-got-a-spy-on-you/#comments" title="View reader comments on this entry">Comments</a></p>]]></description>
			<content:encoded><![CDATA[<p>Filed under: <a href="http://blog.safetyclicks.com/category/how-is-my-child-sharing-information/" rel="tag">Sharing Info <a href="http://www.best-parental-control.com/tag/online/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Online">Online</a></a>, <a href="http://blog.safetyclicks.com/category/internet-danger/" rel="tag"><a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Dangers</a>, <a href="http://blog.safetyclicks.com/category/technology/" rel="tag"><a href="http://www.best-parental-control.com/tag/technology/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Technology">Technology</a></a>, <a href="http://blog.safetyclicks.com/category/articles-of-interest/" rel="tag">Articles of Interest</a></p>
<p>There is a debate about how or if <a href="http://www.best-parental-control.com/tag/parents/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with parents">parents</a> should use <a href="http://www.google.com/search?hl=en&amp;source=hp&amp;q=define%3A+spyware&amp;aq=0&amp;aqi=l1g10&amp;aql=&amp;oq=what+is+spy" >spyware </a>on their kids&#8217; computer to find out what their kids are doing <a href="http://www.best-parental-control.com/tag/online/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Online">online</a>. This is a debate between <a href="http://www.best-parental-control.com/tag/parents/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with parents">parents</a>, but is not a legal debate. Apparently a high school in Philadelphia took this idea to another level.<br /><a href="http://abcnews.go.com/GMA/Parenting/pennsylvania-school-fbi-probe-webcam-students-spying/story?id=9905488" ><br />A Pennsylvania school district</a> is being investigated by the FBI for remotely activating the <a href="http://www.best-parental-control.com/tag/web/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Web">web</a> cams on the laptops they issued to students. The school district says that they were wanting to track <a href="http://www.best-parental-control.com/tag/online/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Online">online</a> behavior when the students were supposed to be doing homework. The <a href="http://www.best-parental-control.com/tag/parents/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with parents">parents</a> of these students disagree, saying it was a clear <a href="http://www.best-parental-control.com/tag/privacy/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Privacy">privacy</a> violation. It is still unknown how the FBI will find, but I would not at all be surprised to find this a question posed to either the state&#8217;s or the U.S. Supreme Court.</p>
<p>What do you think? <a href="http://www.best-parental-control.com/tag/privacy/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Privacy">Privacy</a> violation or good intentions communicated poorly?
<p style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;">&nbsp;</p>
<p><a href="http://blog.safetyclicks.com/2010/03/11/ive-got-a-spy-on-you/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://blog.safetyclicks.com/forward/19391892/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.technorati.com/cosmos/search.html?rank=&amp;fc=1&amp;url=http://blog.safetyclicks.com/2010/03/11/ive-got-a-spy-on-you/" title="Linking Blogs">Linking&nbsp;Blogs</a>&nbsp;|&nbsp;<a href="http://blog.safetyclicks.com/2010/03/11/ive-got-a-spy-on-you/#comments" title="View reader comments on this entry">Comments</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1622/ive-got-a-spy-on-you/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Nose Biometrics</title>
		<link>http://www.best-parental-control.com/1619/nose-biometrics/</link>
		<comments>http://www.best-parental-control.com/1619/nose-biometrics/#comments</comments>
		<pubDate>Wed, 10 Mar 2010 21:47:12 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[adrian evans]]></category>
		<category><![CDATA[covert surveillance]]></category>
		<category><![CDATA[imperial college london]]></category>
		<category><![CDATA[university of the west of england]]></category>
		<category><![CDATA[university of the west of england bristol]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://21dcfbd795004058a66c18434641523c</guid>
		<description><![CDATA[<a href="http://news.bbc.co.uk/2/hi/science/nature/8543292.stm">Really</a>:

Since they are hard to conceal, the study says, noses would work well for identification in covert surveillance.

The researchers say noses have been overlooked in the growing field of biometrics, studies into ways of identifying distinguishing traits in people.

"Noses are prominent facial features and yet their use as a biometric has been largely unexplored," said the University of Bath's Dr Adrian Evans.

"Ears have been looked at in detail, eyes have been looked at in terms of iris recognition but the nose has been neglected."

The researchers used a system called PhotoFace, developed by researchers at the University of the West of England, Bristol and Imperial College, London, for the 3D scans.
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=KbLHRL6S3Rw:7eno7JaklJA:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=KbLHRL6S3Rw:7eno7JaklJA:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=KbLHRL6S3Rw:7eno7JaklJA:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a>
]]></description>
			<content:encoded><![CDATA[<p><a href="http://news.bbc.co.uk/2/hi/science/nature/8543292.stm">Really</a>:</p>
<p>Since they are hard to conceal, the study says, noses would work well for identification in covert <a href="http://www.best-parental-control.com/tag/surveillance/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with surveillance">surveillance</a>.</p>
<p>The researchers say noses have been overlooked in the growing field of biometrics, studies into ways of identifying distinguishing traits in people.</p>
<p>&#8220;Noses are prominent facial features and yet their use as a biometric has been largely unexplored,&#8221; said the University of Bath&#8217;s Dr Adrian Evans.</p>
<p>&#8220;Ears have been looked at in detail, eyes have been looked at in terms of iris recognition but the nose has been neglected.&#8221;</p>
<p>The researchers used a system called PhotoFace, developed by researchers at the University of the West of England, Bristol and Imperial College, London, for the 3D scans.<br />
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=KbLHRL6S3Rw:7eno7JaklJA:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=KbLHRL6S3Rw:7eno7JaklJA:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=KbLHRL6S3Rw:7eno7JaklJA:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1619/nose-biometrics/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Limits of Identity Cards</title>
		<link>http://www.best-parental-control.com/1620/the-limits-of-identity-cards/</link>
		<comments>http://www.best-parental-control.com/1620/the-limits-of-identity-cards/#comments</comments>
		<pubDate>Wed, 10 Mar 2010 15:09:08 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[arbitrary rules]]></category>
		<category><![CDATA[computer law]]></category>
		<category><![CDATA[rational basis]]></category>
		<category><![CDATA[security review]]></category>
		<category><![CDATA[stephen mason]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://cb740f15b622ded9549890a44a06f1ea</guid>
		<description><![CDATA[Good legal paper on the limits of identity cards:  Stephen Mason and Nick Bohm, "<a href="http://www.stephenmason.eu/wp-content/uploads/2010/02/bohm-mason-identity.pdf">Identity and its Verification</a>," in Computer Law &#38; Security Review, Volume 26, Number 1, Jan 2010.

Those faced with the problem of how to verify a person's identity would be well advised to ask themselves the question, 'Identity with what?'  An enquirer equipped with the answer to this question is in a position to tackle, on a rational basis, the task of deciding what evidence will be useful for the purpose. Without the answer to the question, the verification of identity becomes a sadly familiar exercise in blind compliance with arbitrary rules.
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=aJ4IG-9biww:su3duIW8ggc:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=aJ4IG-9biww:su3duIW8ggc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=aJ4IG-9biww:su3duIW8ggc:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a>
]]></description>
			<content:encoded><![CDATA[<p>Good legal paper on the limits of identity cards:  Stephen Mason and Nick Bohm, &#8220;<a href="http://www.stephenmason.eu/wp-content/uploads/2010/02/bohm-mason-identity.pdf">Identity and its Verification</a>,&#8221; in Computer Law &#038; <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Review, Volume 26, Number 1, Jan 2010.</p>
<p>Those faced with the problem of how to verify a person&#8217;s identity would be well advised to ask themselves the question, &#8216;Identity with what?&#8217;  An enquirer equipped with the answer to this question is in a position to tackle, on a rational basis, the task of deciding what evidence will be useful for the purpose. Without the answer to the question, the verification of identity becomes a sadly familiar exercise in blind compliance with arbitrary rules.<br />
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=aJ4IG-9biww:su3duIW8ggc:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=aJ4IG-9biww:su3duIW8ggc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=aJ4IG-9biww:su3duIW8ggc:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1620/the-limits-of-identity-cards/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Network Security Podcast, Episode 188</title>
		<link>http://www.best-parental-control.com/1621/the-network-security-podcast-episode-188/</link>
		<comments>http://www.best-parental-control.com/1621/the-network-security-podcast-episode-188/#comments</comments>
		<pubDate>Wed, 10 Mar 2010 06:11:26 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[Conference]]></category>
		<category><![CDATA[network security]]></category>
		<category><![CDATA[rsa conference]]></category>
		<category><![CDATA[security news]]></category>
		<category><![CDATA[week]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://4030dc6463c75e73a6209ea323ae028b</guid>
		<description><![CDATA[Can you hear that? That&#8217;s the sound of air escaping as we all finally recover from the RSA conference. Rich and Martin are back, and Zach&#8230; never left (but did celebrate a birthday last week). We do a quick recap of RSA and then dig into the security news&#8230; much of which had nothing to [...]]]></description>
			<content:encoded><![CDATA[<p>Can you hear that? That&#8217;s the sound of air escaping as we all finally recover from the RSA conference. Rich and Martin are back, and Zach&#8230; never left (but did celebrate a birthday last <a href="http://www.best-parental-control.com/tag/week/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with week">week</a>). We do a quick recap of RSA and then dig into the <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> <a href="http://www.best-parental-control.com/tag/news/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with News">news</a>&#8230; much of which had nothing to [...]</p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1621/the-network-security-podcast-episode-188/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ubuntu CVE Tracker</title>
		<link>http://www.best-parental-control.com/1613/ubuntu-cve-tracker/</link>
		<comments>http://www.best-parental-control.com/1613/ubuntu-cve-tracker/#comments</comments>
		<pubDate>Wed, 10 Mar 2010 01:11:09 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[cve entries]]></category>
		<category><![CDATA[linux distributions]]></category>
		<category><![CDATA[national vulnerability database]]></category>
		<category><![CDATA[severity ratings]]></category>
		<category><![CDATA[vulnerability report]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://7c2feb0c592b5e2ac86547fa214f8f74</guid>
		<description><![CDATA[Today I was looking at some of the various vendor security and advisory sites and I noticed at the top of the Ubuntu site:&#160; For more details on a specific CVE or source package, please see the <a href="http://people.canonical.com/~ubuntu-security/cve/">Ubuntu CVE Tracker</a>.  I had not seen the Ubuntu CVE Tracker before, so I checked out, very interested because of the fact that certain sites continue to assert and report that some Linux distributions do not have any Unpatched issues.&#160; For example, take a look at the page <a href="http://secunia.com/advisories/product/28063/?task=advisories">Vulnerability Report: Ubuntu Linux 9.10 on secunia.com</a> (9.10 is Ubuntu Karmic Koala, released on October 29, 2009) and you?ll see a couple of interesting summary statistics as shown here:  <a href="http://secunia.com/advisories/product/28063/?task=advisories"><img style="border-bottom: 0px;border-left: 0px;float: none;margin-left: auto;border-top: 0px;margin-right: auto;border-right: 0px" border="0" alt="image" src="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_3.png" width="294" height="122" /></a><a href="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_5.png"><img style="border-bottom: 0px;border-left: 0px;float: none;margin-left: auto;border-top: 0px;margin-right: auto;border-right: 0px" border="0" alt="image" src="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_thumb_1.png" width="579" height="167" /></a>&#160;   Looks good, eh?&#160; However, if you take a look at the CVE tracker, you get a view that is a bit different:  <a href="http://people.canonical.com/~ubuntu-security/cve/main.html"><img style="border-bottom: 0px;border-left: 0px;float: none;margin-left: auto;border-top: 0px;margin-right: auto;border-right: 0px" border="0" alt="image" src="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_8.png" width="644" height="365" /></a>   You can see the <a href="http://people.canonical.com/risk.html">Risk Color Key</a>, but it is about what you?d expect.&#160; Red is High or Critical, orange is Medium and yellow is Low.&#160; The asterisk means that this is a package maintained by Canonical instead of a 3rd-party.  I didn?t bother to do a count, but I can see that the number of ?needed? fixes is somewhat larger than zero, however, I did not see an RED = High vulnerabilities, so I did check on more thing ? I wondered how these severity ratings mapped to CVSS as used by the National Vulnerability Database (ie, <a href="http://nvd.nist.gov">http://nvd.nist.gov</a>).&#160; I spot-checked a few:     CVE-2009-4537, kernel, Orange(Medium) by Canonical,&#160; High(7.8) by CVSS    CVE-2009-4565, sendmail, Orange(Medium) by Canonical,&#160; High(7.5) by CVSS    CVE-2010-0408, apache2, Orange(Medium) by Canonical,&#160; Medium(5.0) by CVSS    CVE-2010-0433, openssl, Orange(Medium) by Canonical,&#160; Medium(4.3) by CVSS    CVE-2007-5901, krb5 (kerberos), Yellow(Low) by Canonical, High(10.0) by CVSS   There were 474 CVE entries, so I didn?t do a comprehensive check, but it turns out that there are more than a few of these unfixed vulnerabilities that are rated High by CVSS.&#160; <img src="http://blogs.technet.com/aggbug.aspx?PostID=3317976" width="1" height="1"/>]]></description>
			<content:encoded><![CDATA[<p>Today I was looking at some of the various vendor <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> and advisory sites and I noticed at the top of the Ubuntu site:&#160; For more details on a specific CVE or source package, please see the <a href="http://people.canonical.com/~ubuntu-security/cve/">Ubuntu CVE Tracker</a>.  I had not seen the Ubuntu CVE Tracker before, so I checked out, very interested because of the fact that certain sites continue to assert and report that some Linux distributions do not have any Unpatched issues.&#160; For example, take a look at the page <a href="http://secunia.com/advisories/product/28063/?task=advisories">Vulnerability Report: Ubuntu Linux 9.10 on secunia.com</a> (9.10 is Ubuntu Karmic Koala, released on October 29, 2009) and you?ll see a couple of interesting summary statistics as shown here:  <a href="http://secunia.com/advisories/product/28063/?task=advisories"><img style="border-bottom: 0px; border-left: 0px; display: block; float: none; margin-left: auto; border-top: 0px; margin-right: auto; border-right: 0px" title="image" border="0" alt="image" src="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_3.png" width="294" height="122" /></a><a href="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_5.png"><img style="border-bottom: 0px; border-left: 0px; display: block; float: none; margin-left: auto; border-top: 0px; margin-right: auto; border-right: 0px" title="image" border="0" alt="image" src="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_thumb_1.png" width="579" height="167" /></a>&#160;   Looks good, eh?&#160; However, if you take a look at the CVE tracker, you get a view that is a bit different:  <a href="http://people.canonical.com/~ubuntu-security/cve/main.html"><img style="border-bottom: 0px; border-left: 0px; display: block; float: none; margin-left: auto; border-top: 0px; margin-right: auto; border-right: 0px" title="image" border="0" alt="image" src="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/UbuntuCVETracker_D586/image_8.png" width="644" height="365" /></a>   You can see the <a href="http://people.canonical.com/risk.html">Risk Color Key</a>, but it is about what you?d expect.&#160; Red is High or Critical, orange is Medium and yellow is Low.&#160; The asterisk means that this is a package maintained by Canonical instead of a 3rd-party.  I didn?t bother to do a count, but I can see that the number of ?needed? fixes is somewhat larger than zero, however, I did not see an RED = High vulnerabilities, so I did check on more thing ? I wondered how these severity ratings mapped to CVSS as used by the National Vulnerability Database (ie, <a href="http://nvd.nist.gov">http://nvd.nist.gov</a>).&#160; I spot-checked a few:     CVE-2009-4537, kernel, Orange(Medium) by Canonical,&#160; High(7.8) by CVSS    CVE-2009-4565, sendmail, Orange(Medium) by Canonical,&#160; High(7.5) by CVSS    CVE-2010-0408, apache2, Orange(Medium) by Canonical,&#160; Medium(5.0) by CVSS    CVE-2010-0433, openssl, Orange(Medium) by Canonical,&#160; Medium(4.3) by CVSS    CVE-2007-5901, krb5 (kerberos), Yellow(Low) by Canonical, High(10.0) by CVSS   There were 474 CVE entries, so I didn?t do a comprehensive check, but it turns out that there are more than a few of these unfixed vulnerabilities that are rated High by CVSS.&#160; <img src="http://blogs.technet.com/aggbug.aspx?PostID=3317976" width="1" height="1"/></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1613/ubuntu-cve-tracker/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Marc Rotenberg on Google&#8217;s Italian Privacy Case</title>
		<link>http://www.best-parental-control.com/1614/marc-rotenberg-on-googles-italian-privacy-case/</link>
		<comments>http://www.best-parental-control.com/1614/marc-rotenberg-on-googles-italian-privacy-case/#comments</comments>
		<pubDate>Tue, 09 Mar 2010 20:36:00 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[marc rotenberg]]></category>
		<category><![CDATA[privacy case]]></category>
		<category><![CDATA[relevant history]]></category>
		<category><![CDATA[york judge]]></category>
		<category><![CDATA[york legislature]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://97be6929fd3f3529277eb4da5cd9df29</guid>
		<description><![CDATA[Interesting <a href="http://www.huffingtonpost.com/marc-rotenberg/brandeis-in-italy-the-pri_b_481115.html">commentary</a>:

I don't think this is really a case about ISP liability at all. It is a case about the use of a person's image, without their consent, that generates commercial value for someone else. That is the essence of the Italian law at issue in this case. It is also how the right of privacy was first established in the United States.

The video at the center of this case was very popular in Italy and drove lots of users to the Google Video site. This boosted advertising and support for other Google services. As a consequence, Google actually had an incentive not to respond to the many requests it received before it actually took down the video.

Back in the U.S., here is the relevant history: after Brandeis and Warren published their famous article on the right to privacy in 1890, state courts struggled with its application. In a New York state case in 1902, a court rejected the newly proposed right. In a second case, a Georgia state court in 1905 endorsed it.

What is striking is that both cases involved the use of a person's image without their consent. In New York, it was a young girl, whose image was drawn and placed on an oatmeal box for advertising purposes. In Georgia, a man's image was placed in a newspaper, without his consent, to sell insurance.

Also important is the fact that the New York judge who rejected the privacy claim, suggested that the state assembly could simple pass a law to create the right. The New York legislature did exactly that and in 1903 New York enacted the first privacy law in the United States to protect a person's "name or likeness" for commercial use.

The whole thing is worth reading.
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=YPemt2AdOxE:oMwLL9_INkc:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=YPemt2AdOxE:oMwLL9_INkc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=YPemt2AdOxE:oMwLL9_INkc:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a>
]]></description>
			<content:encoded><![CDATA[<p>Interesting <a href="http://www.huffingtonpost.com/marc-rotenberg/brandeis-in-italy-the-pri_b_481115.html">commentary</a>:</p>
<p>I don&#8217;t think this is really a case about <a href="http://www.best-parental-control.com/tag/isp-liability/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with ISP liability">ISP liability</a> at all. It is a case about the use of a person&#8217;s image, without their consent, that generates commercial value for someone else. That is the essence of the Italian law at issue in this case. It is also how the right of <a href="http://www.best-parental-control.com/tag/privacy/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Privacy">privacy</a> was first established in the United States.</p>
<p>The <a href="http://www.best-parental-control.com/tag/video/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Video">video</a> at the center of this case was very popular in <a href="http://www.best-parental-control.com/tag/italy/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with italy">Italy</a> and drove lots of users to the <a href="http://www.best-parental-control.com/tag/google/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Google">Google</a> <a href="http://www.best-parental-control.com/tag/video/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Video">Video</a> site. This boosted advertising and support for other <a href="http://www.best-parental-control.com/tag/google/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Google">Google</a> services. As a consequence, <a href="http://www.best-parental-control.com/tag/google/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Google">Google</a> actually had an incentive not to respond to the many requests it received before it actually took down the <a href="http://www.best-parental-control.com/tag/video/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Video">video</a>.</p>
<p>Back in the U.S., here is the relevant history: after Brandeis and Warren published their famous <a href="http://www.best-parental-control.com/tag/article/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Article">article</a> on the right to <a href="http://www.best-parental-control.com/tag/privacy/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Privacy">privacy</a> in 1890, state courts struggled with its application. In a New York state case in 1902, a court rejected the newly proposed right. In a second case, a Georgia state court in 1905 endorsed it.</p>
<p>What is striking is that both cases involved the use of a person&#8217;s image without their consent. In New York, it was a young girl, whose image was drawn and placed on an oatmeal box for advertising purposes. In Georgia, a man&#8217;s image was placed in a newspaper, without his consent, to sell insurance.</p>
<p>Also important is the fact that the New York judge who rejected the <a href="http://www.best-parental-control.com/tag/privacy/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Privacy">privacy</a> claim, suggested that the state assembly could simple pass a law to create the right. The New York legislature did exactly that and in 1903 New York enacted the first <a href="http://www.best-parental-control.com/tag/privacy/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Privacy">privacy</a> law in the United States to protect a person&#8217;s &#8220;name or likeness&#8221; for commercial use.</p>
<p>The whole thing is worth reading.<br />
<a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=YPemt2AdOxE:oMwLL9_INkc:2mJPEYqXBVI"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=2mJPEYqXBVI" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=YPemt2AdOxE:oMwLL9_INkc:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=7Q72WNTAKBA" border="0"/></a> <a href="http://feeds.feedburner.com/~ff/schneier/fulltext?a=YPemt2AdOxE:oMwLL9_INkc:dnMXMwOfBR0"><img src="http://feeds.feedburner.com/~ff/schneier/fulltext?d=dnMXMwOfBR0" border="0"/></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1614/marc-rotenberg-on-googles-italian-privacy-case/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>March 2010 Security Bulletin Release</title>
		<link>http://www.best-parental-control.com/1615/march-2010-security-bulletin-release/</link>
		<comments>http://www.best-parental-control.com/1615/march-2010-security-bulletin-release/#comments</comments>
		<pubDate>Tue, 09 Mar 2010 20:02:03 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[file format converter]]></category>
		<category><![CDATA[microsoft producer]]></category>
		<category><![CDATA[microsoft security bulletin]]></category>
		<category><![CDATA[ms10]]></category>
		<category><![CDATA[windows movie maker]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://a03c3e94f21f2af4f7a7a6f0c1774e35</guid>
		<description><![CDATA[Today we are releasing two Important security bulletins addressing eight vulnerabilities in Windows and Microsoft Office. Both bulletins have an aggregate Exploitability Index rating of ?1? so we recommend that customers deploy these updates as soon as possible. The Microsoft <a href="http://technet.microsoft.com/en-us/security/cc998259.aspx">Exploitability Index</a> provides additional information to help customers prioritize deployment of monthly security bulletins. A summary of today?s security updates can be found on the Microsoft Security Bulletin <a href="http://www.microsoft.com/technet/security/bulletin/ms10-mar.mspx">webpage</a>.  <a href="http://www.microsoft.com/technet/security/bulletin/ms10-016.mspx">MS10-016</a> addresses one vulnerability in Windows Movie Maker. Both Windows XP and Windows Vista ship with affected versions (2.1 and 6.0 respectively). Version 2.6 is also vulnerable and can be freely downloaded and installed from the web. Customers who install 2.6 on any supported platform, including Windows 7, will be offered the update. In order to take advantage of the vulnerability, a user would need to open a specially crafted Movie Maker project file. These are files with the .mswmm file extension.  The MS10-016 bulletin also calls out Microsoft Producer 2003 in the affected products list. Producer 2003 is a free download with limited distribution. At this time, we are not offering an update for Producer 2003. Our standard approach is to produce updates that can be deployed automatically for all affected products at the same time but Producer 2003 does not offer a means for automatic update. Based on our investigation, we determined that the best way to protect the vast majority of customers was to release an update addressing the components that shipped with Windows. While we continue to investigate Producer 2003, we recommend that customers either uninstall the application or apply an available <a href="http://support.microsoft.com/kb/975561">Microsoft Fix It</a> to disassociate the project file type from the application to add an extra layer of security.   <a href="http://www.microsoft.com/technet/security/bulletin/ms10-017.mspx">MS10-017</a> affects all currently supported versions of Microsoft Office Excel. It also affects Office 2004 and Office 2008 for Mac, the Open XML File Format Converter for Mac, supported versions of Excel viewer and SharePoint 2007. As with most Office vulnerabilities, a user would have to open a specially crafted file in order to be exploited.  Since both of today?s bulletins require user interaction, we give them both a ?2? on our deployment priority scale:  <a href="http://blogs.technet.com/photos/msrcteam/images/3317885/original.aspx" target="_blank"><img border="0" src="http://blogs.technet.com/photos/msrcteam/images/3317885/original.aspx" width="500" /></a>  Our Severity and Exploitability Index slide offers additional guidance to help customers prioritize this month?s bulletins:  <a href="http://blogs.technet.com/photos/msrcteam/images/3317884/original.aspx" target="_blank"><img border="0" src="http://blogs.technet.com/photos/msrcteam/images/3317884/original.aspx" width="500" /></a>  In the following video, Adrian Stone and I give a brief overview of today?s bulletins:                  <a href="http://go.microsoft.com/fwlink/?LinkID=124807"> <img src="http://go.microsoft.com/fwlink/?LinkId=108181" alt="Get Microsoft Silverlight" style="border-style: none" /> </a>         More listening and viewing options:          <br />                     <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.wmv">Windows Media Video (WMV)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.wma">Windows Media Audio (WMA)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.mp4">iPod Video (MP4)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.mp3">MP3 Audio</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_2MB_edge.wmv">High Quality WMV (2.5 Mbps)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_Zune_edge.wmv">Zune Video (WMV)</a>                           Today we also re-released <a href="http://www.microsoft.com/technet/security/bulletin/ms09-033.mspx">MS09-033</a> to add Virtual Server 2005 to the affected products list. Customers who have already installed the update for affected products do not have any additional actions.   Additionally, we continue to to monitor the threat landscape around <a href="http://www.microsoft.com/technet/security/advisory/981169.mspx">Security Advisory 981169</a> regarding a vulnerability in VBScript that could allow remote code execution. We are not currently aware of any active attacks but encourage customers to review the advisory and apply the suggested workarounds where possible. Customers that are running Windows 7, Windows Server 2008, Windows Server 2008 R2, and Windows Vista are not affected.  Please join us tomorrow for a public webcast where Adrian Stone and I will go in to detail on these bulletins and answer customer questions with the help of the engineers who worked to produce them so please plan to join us.   Date: Wednesday, March 10    <br />Time: 11:00 a.m. PST (UTC -8)     <br />Registration: <a href="http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032427711">http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032427711</a>  Thanks!  Jerry Bryant    <br />Sr. Security Communications Manager Lead  *This posting is provided &#34;AS IS&#34; with no warranties, and confers no rights.*<img src="http://blogs.technet.com/aggbug.aspx?PostID=3317902" width="1" height="1"/>]]></description>
			<content:encoded><![CDATA[<p>Today we are releasing two Important <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> bulletins addressing eight vulnerabilities in Windows and <a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> Office. Both bulletins have an aggregate Exploitability Index rating of ?1? so we recommend that customers deploy these updates as soon as possible. The <a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> <a href="http://technet.microsoft.com/en-us/security/cc998259.aspx">Exploitability Index</a> provides additional information to help customers prioritize deployment of monthly <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> bulletins. A summary of today?s <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> updates can be found on the <a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Bulletin <a href="http://www.microsoft.com/technet/security/bulletin/ms10-mar.mspx">webpage</a>.  <a href="http://www.microsoft.com/technet/security/bulletin/ms10-016.mspx">MS10-016</a> addresses one vulnerability in Windows Movie Maker. Both Windows XP and Windows Vista ship with affected versions (2.1 and 6.0 respectively). Version 2.6 is also vulnerable and can be freely downloaded and installed from the <a href="http://www.best-parental-control.com/tag/web/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Web">web</a>. Customers who install 2.6 on any supported platform, including Windows 7, will be offered the update. In order to take advantage of the vulnerability, a user would need to open a specially crafted Movie Maker project file. These are files with the .mswmm file extension.  The MS10-016 bulletin also calls out <a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> Producer 2003 in the affected products list. Producer 2003 is a free download with limited distribution. At this time, we are not offering an update for Producer 2003. Our standard approach is to produce updates that can be deployed automatically for all affected products at the same time but Producer 2003 does not offer a means for automatic update. Based on our investigation, we determined that the best way to protect the vast majority of customers was to release an update addressing the components that shipped with Windows. While we continue to investigate Producer 2003, we recommend that customers either uninstall the application or apply an available <a href="http://support.microsoft.com/kb/975561"><a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> Fix It</a> to disassociate the project file type from the application to add an extra layer of <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a>.   <a href="http://www.microsoft.com/technet/security/bulletin/ms10-017.mspx">MS10-017</a> affects all currently supported versions of <a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> Office Excel. It also affects Office 2004 and Office 2008 for Mac, the Open XML File Format Converter for Mac, supported versions of Excel viewer and SharePoint 2007. As with most Office vulnerabilities, a user would have to open a specially crafted file in order to be exploited.  Since both of today?s bulletins require user interaction, we give them both a ?2? on our deployment priority scale:  <a href="http://blogs.technet.com/photos/msrcteam/images/3317885/original.aspx" ><img border="0" src="http://blogs.technet.com/photos/msrcteam/images/3317885/original.aspx" width="500" /></a>  Our Severity and Exploitability Index slide offers additional guidance to help customers prioritize this month?s bulletins:  <a href="http://blogs.technet.com/photos/msrcteam/images/3317884/original.aspx" ><img border="0" src="http://blogs.technet.com/photos/msrcteam/images/3317884/original.aspx" width="500" /></a>  In the following <a href="http://www.best-parental-control.com/tag/video/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Video">video</a>, Adrian Stone and I give a brief overview of today?s bulletins:                  <a href="http://go.microsoft.com/fwlink/?LinkID=124807" style="text-decoration: none;"> <img src="http://go.microsoft.com/fwlink/?LinkId=108181" alt="Get Microsoft Silverlight" style="border-style: none" /> </a>         More listening and viewing options:          <br />                     <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.wmv">Windows Media <a href="http://www.best-parental-control.com/tag/video/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Video">Video</a> (WMV)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.wma">Windows Media Audio (WMA)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.mp4">iPod <a href="http://www.best-parental-control.com/tag/video/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Video">Video</a> (MP4)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_edge.mp3">MP3 Audio</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_2MB_edge.wmv">High Quality WMV (2.5 Mbps)</a>             <a href="http://ecn.channel9.msdn.com/o9/edge/9/6/2/9/1/msrcmarbulletins2010_Zune_edge.wmv">Zune <a href="http://www.best-parental-control.com/tag/video/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Video">Video</a> (WMV)</a>                           Today we also re-released <a href="http://www.microsoft.com/technet/security/bulletin/ms09-033.mspx">MS09-033</a> to add Virtual Server 2005 to the affected products list. Customers who have already installed the update for affected products do not have any additional actions.   Additionally, we continue to to monitor the threat landscape around <a href="http://www.microsoft.com/technet/security/advisory/981169.mspx"><a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Advisory 981169</a> regarding a vulnerability in VBScript that could allow remote code execution. We are not currently aware of any active attacks but encourage customers to review the advisory and apply the suggested workarounds where possible. Customers that are running Windows 7, Windows Server 2008, Windows Server 2008 R2, and Windows Vista are not affected.  Please join us tomorrow for a public webcast where Adrian Stone and I will go in to detail on these bulletins and answer customer questions with the help of the engineers who worked to produce them so please plan to join us.   Date: Wednesday, March 10    <br />Time: 11:00 a.m. PST (UTC -8)     <br />Registration: <a href="http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032427711">http://msevents.<a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">microsoft</a>.com/CUI/EventDetail.aspx?EventID=1032427711</a>  Thanks!  <a href="http://www.best-parental-control.com/tag/jerry-bryant/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with jerry bryant">Jerry Bryant</a>    <br />Sr. <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Communications Manager Lead  *This posting is provided &quot;AS IS&quot; with no warranties, and confers no rights.*<img src="http://blogs.technet.com/aggbug.aspx?PostID=3317902" width="1" height="1"/></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1615/march-2010-security-bulletin-release/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Security Advisory 981374 Released</title>
		<link>http://www.best-parental-control.com/1616/security-advisory-981374-released/</link>
		<comments>http://www.best-parental-control.com/1616/security-advisory-981374-released/#comments</comments>
		<pubDate>Tue, 09 Mar 2010 18:28:00 +0000</pubDate>
		<dc:creator>softsecurity.com In focus</dc:creator>
				<category><![CDATA[Parental Articles of Interest]]></category>
		<category><![CDATA[configuring internet explorer]]></category>
		<category><![CDATA[data execution prevention]]></category>
		<category><![CDATA[internet explorer 5]]></category>
		<category><![CDATA[internet explorer 7]]></category>
		<category><![CDATA[internet explorer 8]]></category>

		<guid isPermaLink="false">tag:www.softsecurity.com://5c59712489cc7456304b21419be6e9f4</guid>
		<description><![CDATA[Hi everyone,
Today we released <a href="http://www.microsoft.com/technet/security/advisory/981374.mspx">Security Advisory 981374</a> addressing a publicly disclosed vulnerability in Internet Explorer 6 and Internet Explorer 7. Internet Explorer 8 is not affected by this issue. Customers using Internet Explorer 6 or 7 should <a href="http://www.microsoft.com/windows/internet-explorer/default.aspx">upgrade to Internet Explorer 8</a> immediately to benefit from the improved security features and defense in depth protections. Additionally, Internet Explorer 5.01 on Windows 2000 is not affected.
&#160;
At this time, we are aware of targeted attacks seeking to exploit this vulnerability against Internet Explorer 6. <a href="http://www.microsoft.com/windows/windows-vista/features/IE7-protected-mode.aspx">Internet Explorer Protected Mode</a> in Internet Explorer 7 running on Windows Vista helps to mitigate the impact of this issue. Additionally, Internet Explorer on Windows Server 2003 and Windows Server 2008 runs in a restricted mode that is known as <a href="http://go.microsoft.com/fwlink/?LinkId=92039">Enhanced Security Configuration</a>. This mode sets the security level for the Internet zone to High. This is a mitigating factor for Web sites that you have not added to the Internet Explorer Trusted sites zone. Please review the Security Advisory for additional workarounds which include modifying the Access Control List (ACL) on iepeers.dll (the affected component), setting the Internet and local Intranet security zones to "high", configuring Internet Explorer to prompt before running Active Scripting, and enabling Data Execution Prevention (DEP) where possible which makes it difficult to successfully exploit the vulnerability.
&#160;
As always, we are investigating this issue and will take appropriate action to protect customers when we have finalized a solution. This may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs.
Anyone believed to have been affected can visit: <a href="http://www.microsoft.com/protect/support/default.mspx">http://www.microsoft.com/protect/support/default.mspx</a> and should contact the national law enforcement agency in their country. Those in the United States can contact Customer Service and Support at no charge using the PC Safety hotline at 1-866-727-2338 (PCSAFETY).&#160; Additionally, customers in the United States should contact their local FBI office or report their situation at: <a href="http://www.ic3.gov/">www.ic3.gov</a>. Customers should follow the guidance in the advisory and our Protect Your PC guidance of enabling a firewall, getting software updates, and installing antivirus software (learn more by visiting the <a href="http://www.microsoft.com/protect">Protect Your PC web site</a>). International customers can find their Regional Customer Service Representative <a href="http://support.microsoft.com/common/international.aspx">http://support.microsoft.com/common/international.aspx</a>.
We are also working with our <a href="http://www.microsoft.com/security/msrc/mapp/overview.mspx">Microsoft Active Protections Program (MAPP)</a>, the <a href="http://www.microsoft.com/security/msra/default.mspx">Microsoft Security Response Alliance (MSRA)</a>, authorities and other industry partners to help provide broader protections for customers. Together with our partners, we will continue to monitor the threat landscape and will take action against any web sites that seek to exploit this vulnerability.
The Security Advisory will be updated with any new developments so if you are not already subscribed to our <a href="http://technet.microsoft.com/en-us/security/dd252948.aspx">comprehensive alerts</a>, please do so in order to be alerted by email when new information is added. 
Please review the advisory for additional details and if the situation changes, we will provide an update here on the MSRC blog.
Jerry Bryant<br />Sr. Security Communications Manager Lead
*This posting is provided "AS IS" with no warranties, and confers no rights.*<img src="http://blogs.technet.com/aggbug.aspx?PostID=3317883" width="1" height="1"/>]]></description>
			<content:encoded><![CDATA[<p>Hi everyone,<br />
Today we released <a href="http://www.microsoft.com/technet/security/advisory/981374.mspx" mce_href="http://www.microsoft.com/technet/security/advisory/981374.mspx"><a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Advisory 981374</a> addressing a publicly disclosed vulnerability in <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 6 and <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 7. <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 8 is not affected by this issue. Customers using <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 6 or 7 should <a href="http://www.microsoft.com/windows/internet-explorer/default.aspx" mce_href="http://www.microsoft.com/windows/internet-explorer/default.aspx">upgrade to <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 8</a> immediately to benefit from the improved <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> features and defense in depth protections. Additionally, <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 5.01 on Windows 2000 is not affected.<br />
&nbsp;<br />
At this time, we are aware of targeted attacks seeking to exploit this vulnerability against <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 6. <a href="http://www.microsoft.com/windows/windows-vista/features/IE7-protected-mode.aspx" mce_href="http://www.microsoft.com/windows/windows-vista/features/IE7-protected-mode.aspx"><a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer Protected Mode</a> in <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer 7 running on Windows Vista helps to mitigate the impact of this issue. Additionally, <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer on Windows Server 2003 and Windows Server 2008 runs in a restricted mode that is known as <a href="http://go.microsoft.com/fwlink/?LinkId=92039" mce_href="http://go.microsoft.com/fwlink/?LinkId=92039">Enhanced <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Configuration</a>. This mode sets the <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> level for the <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> zone to High. This is a mitigating factor for <a href="http://www.best-parental-control.com/tag/web/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Web">Web</a> sites that you have not added to the <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer Trusted sites zone. Please review the <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Advisory for additional workarounds which include modifying the <a href="http://www.best-parental-control.com/tag/access/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Access">Access</a> <a href="http://www.best-parental-control.com/tag/control/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Control">Control</a> List (ACL) on iepeers.dll (the affected component), setting the <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> and local Intranet <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> zones to &#8220;high&#8221;, configuring <a href="http://www.best-parental-control.com/tag/internet/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Internet">Internet</a> Explorer to prompt before running Active Scripting, and enabling <a href="http://www.best-parental-control.com/tag/data-execution-prevention/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with data execution prevention">Data Execution Prevention</a> (DEP) where possible which makes it difficult to successfully exploit the vulnerability.<br />
&nbsp;<br />
As always, we are investigating this issue and will take appropriate action to protect customers when we have finalized a solution. This may include providing a solution through our monthly <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> update release process, or an out-of-cycle <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">security</a> update, depending on customer needs.<br />
Anyone believed to have been affected can visit: <a href="http://www.microsoft.com/protect/support/default.mspx" mce_href="http://www.microsoft.com/protect/support/default.mspx">http://www.<a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">microsoft</a>.com/protect/support/default.mspx</a> and should contact the national law enforcement agency in their country. Those in the United States can contact Customer Service and Support at no charge using the PC <a href="http://www.best-parental-control.com/tag/safety/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with safety">Safety</a> hotline at 1-866-727-2338 (PCSAFETY).&nbsp; Additionally, customers in the United States should contact their local FBI office or report their situation at: <a href="http://www.ic3.gov/" mce_href="http://www.ic3.gov/">www.ic3.gov</a>. Customers should follow the guidance in the advisory and our Protect Your PC guidance of enabling a firewall, getting <a href="http://www.best-parental-control.com/tag/software/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with software">software</a> updates, and installing antivirus <a href="http://www.best-parental-control.com/tag/software/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with software">software</a> (learn more by visiting the <a href="http://www.microsoft.com/protect" mce_href="http://www.microsoft.com/protect">Protect Your PC <a href="http://www.best-parental-control.com/tag/web/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Web">web</a> site</a>). International customers can find their Regional Customer Service Representative <a href="http://support.microsoft.com/common/international.aspx" mce_href="http://support.microsoft.com/common/international.aspx">http://support.<a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">microsoft</a>.com/common/international.aspx</a>.<br />
We are also working with our <a href="http://www.microsoft.com/security/msrc/mapp/overview.mspx" mce_href="http://www.microsoft.com/security/msrc/mapp/overview.mspx"><a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> Active Protections Program (MAPP)</a>, the <a href="http://www.microsoft.com/security/msra/default.mspx" mce_href="http://www.microsoft.com/security/msra/default.mspx"><a href="http://www.best-parental-control.com/tag/microsoft/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with microsoft">Microsoft</a> <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Response Alliance (MSRA)</a>, authorities and other industry partners to help provide broader protections for customers. Together with our partners, we will continue to monitor the threat landscape and will take action against any <a href="http://www.best-parental-control.com/tag/web/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Web">web</a> sites that seek to exploit this vulnerability.<br />
The <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Advisory will be updated with any new developments so if you are not already subscribed to our <a href="http://technet.microsoft.com/en-us/security/dd252948.aspx" mce_href="http://technet.microsoft.com/en-us/security/dd252948.aspx">comprehensive alerts</a>, please do so in order to be alerted by email when new information is added.<br />
Please review the advisory for additional details and if the situation changes, we will provide an update here on the MSRC blog.<br />
<a href="http://www.best-parental-control.com/tag/jerry-bryant/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with jerry bryant">Jerry Bryant</a><br />Sr. <a href="http://www.best-parental-control.com/tag/security/" class="st_tag internal_tag" rel="tag nofollow" title="Posts tagged with Security">Security</a> Communications Manager Lead<br />
*This posting is provided &#8220;AS IS&#8221; with no warranties, and confers no rights.*<img src="http://blogs.technet.com/aggbug.aspx?PostID=3317883" width="1" height="1"/></p>
]]></content:encoded>
			<wfw:commentRss>http://www.best-parental-control.com/1616/security-advisory-981374-released/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
