<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments for The InfoSec Blog</title>
	<atom:link href="http://infosecblog.antonaylward.com/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://infosecblog.antonaylward.com</link>
	<description>System Integrity: Without Integrity you don't have Security</description>
	<pubDate>Wed, 20 Aug 2008 14:08:46 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
		<item>
		<title>Comment on Not Microsoft&#8217;s fault? by antonaylward</title>
		<link>http://infosecblog.antonaylward.com/2008/07/17/not-microsofts-fault/#comment-5444</link>
		<dc:creator>antonaylward</dc:creator>
		<pubDate>Fri, 18 Jul 2008 13:02:29 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/?p=106#comment-5444</guid>
		<description>While on the subject ...
http://news.zdnet.co.uk/security/0,1000000189,39448526,00.htm

Hmm.  While the description matches Windows the same logic applies for Linux.  If you choose to do cross-file system symlinks to the hidden file system.

Like the old joke says .. "Don't do that, then".</description>
		<content:encoded><![CDATA[<p>While on the subject &#8230;<br />
<a href="http://news.zdnet.co.uk/security/0,1000000189,39448526,00.htm" rel="nofollow">http://news.zdnet.co.uk/security/0,1000000189,39448526,00.htm</a></p>
<p>Hmm.  While the description matches Windows the same logic applies for Linux.  If you choose to do cross-file system symlinks to the hidden file system.</p>
<p>Like the old joke says .. &#8220;Don&#8217;t do that, then&#8221;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on The truth About AV by antonaylward</title>
		<link>http://infosecblog.antonaylward.com/2006/07/06/truth-about-av/#comment-5438</link>
		<dc:creator>antonaylward</dc:creator>
		<pubDate>Thu, 17 Jul 2008 18:28:18 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2006/07/06/the-truth-about-av/#comment-5438</guid>
		<description>&lt;a href="http://bp0.blogger.com/_wICHhTiQmrA/SG5J7KMsDwI/AAAAAAAAB3s/GJ5Zr7bymOU/s1600-h/antivirus_industry_10years.gif" rel="nofollow"&gt;
&lt;img src="http://bp0.blogger.com/_wICHhTiQmrA/SG5J7KMsDwI/AAAAAAAAB3s/GJ5Zr7bymOU/s1600-h/antivirus_industry_10years.gif" alt="How things have changed in 10 years!" /&gt;
&lt;/a&gt;</description>
		<content:encoded><![CDATA[<p><a href="http://bp0.blogger.com/_wICHhTiQmrA/SG5J7KMsDwI/AAAAAAAAB3s/GJ5Zr7bymOU/s1600-h/antivirus_industry_10years.gif" rel="nofollow"><br />
<img src="http://bp0.blogger.com/_wICHhTiQmrA/SG5J7KMsDwI/AAAAAAAAB3s/GJ5Zr7bymOU/s1600-h/antivirus_industry_10years.gif" alt="How things have changed in 10 years!" /><br />
</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Collaboration Is Still a Singular, Personal Experience by Bill Royds</title>
		<link>http://infosecblog.antonaylward.com/2008/05/30/collaboration-is-still-a-singular-personal-experience/#comment-5233</link>
		<dc:creator>Bill Royds</dc:creator>
		<pubDate>Sun, 01 Jun 2008 12:06:09 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2008/05/30/collaboration-is-still-a-singular-personal-experience/#comment-5233</guid>
		<description>&gt; But it has to take a business change. And that’s coming slowly.

One interesting possibility for this is the Facebook system.  It has been so successful because it allows an interaction system that resembles real life social interactions. One can control somewhat who gets to see what detail of one’s persona, so people are willing to share thoughts and ideas more readily.

It also has a number of tools for collaboration built in which arerather intuitive to use.

It also has an open API for add-ons that allows great flexibility for what data types it handles.

I have heard rumours that Facebook is about to open source its basic software, so it might be something one could use internally for collaboration.

Bill Royds
wgr2ca@yahoo.ca</description>
		<content:encoded><![CDATA[<p>> But it has to take a business change. And that’s coming slowly.</p>
<p>One interesting possibility for this is the Facebook system.  It has been so successful because it allows an interaction system that resembles real life social interactions. One can control somewhat who gets to see what detail of one’s persona, so people are willing to share thoughts and ideas more readily.</p>
<p>It also has a number of tools for collaboration built in which arerather intuitive to use.</p>
<p>It also has an open API for add-ons that allows great flexibility for what data types it handles.</p>
<p>I have heard rumours that Facebook is about to open source its basic software, so it might be something one could use internally for collaboration.</p>
<p>Bill Royds<br />
<a href="mailto:wgr2ca@yahoo.ca">wgr2ca@yahoo.ca</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on History&#8217;s 5 Best Interface Designs by Covert Security Cameras</title>
		<link>http://infosecblog.antonaylward.com/2008/04/24/historys-5-best-interface-designs/#comment-5191</link>
		<dc:creator>Covert Security Cameras</dc:creator>
		<pubDate>Sat, 10 May 2008 20:34:46 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2008/04/24/historys-5-best-interface-designs/#comment-5191</guid>
		<description>&lt;strong&gt;Covert Security Cameras...&lt;/strong&gt;

I found your site on technorati and read a few of your other posts. Keep up the good work. I just added your RSS feed to my Google News Reader. Looking forward to reading more from you....</description>
		<content:encoded><![CDATA[<p><strong>Covert Security Cameras&#8230;</strong></p>
<p>I found your site on technorati and read a few of your other posts. Keep up the good work. I just added your RSS feed to my Google News Reader. Looking forward to reading more from you&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Green at home by antonaylward</title>
		<link>http://infosecblog.antonaylward.com/2007/12/07/green-at-home/#comment-4178</link>
		<dc:creator>antonaylward</dc:creator>
		<pubDate>Fri, 07 Dec 2007 15:56:09 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/12/07/green-at-home/#comment-4178</guid>
		<description>For Linux user, the &lt;a href="http://www.lesswatts.org/projects/powertop/" rel="nofollow"&gt;powertop&lt;/a&gt; utility can be used to see what is bringing your machine out of idle and causing it to consume power.  

On my machine Mozilla Thunderbird an Mozilla Firefox are the big culprits</description>
		<content:encoded><![CDATA[<p>For Linux user, the <a href="http://www.lesswatts.org/projects/powertop/" rel="nofollow">powertop</a> utility can be used to see what is bringing your machine out of idle and causing it to consume power.  </p>
<p>On my machine Mozilla Thunderbird an Mozilla Firefox are the big culprits</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Green at home by antonaylward</title>
		<link>http://infosecblog.antonaylward.com/2007/12/07/green-at-home/#comment-4177</link>
		<dc:creator>antonaylward</dc:creator>
		<pubDate>Fri, 07 Dec 2007 15:31:42 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/12/07/green-at-home/#comment-4177</guid>
		<description>When your CPU isn't executing intructions, it enters an idle mode and consumes far less energy. Any program that keeps the CPU from entering this idle state will cause your machine to consume more power, regardless of how processor intensive the process is.

The Linux 2.6.21 kernel introduces the so called tickless-idle feature. This feature allows the processor to be really idle for long periods of time, rather than having to wake up every millisecond for the timer tick.

So, if you want to tune your Linux box for ultimate power efficiency, enable the tickless-idle feature in your kernel.  It will help, but you also need to find out what programs are causing the machine to wake-up.</description>
		<content:encoded><![CDATA[<p>When your CPU isn&#8217;t executing intructions, it enters an idle mode and consumes far less energy. Any program that keeps the CPU from entering this idle state will cause your machine to consume more power, regardless of how processor intensive the process is.</p>
<p>The Linux 2.6.21 kernel introduces the so called tickless-idle feature. This feature allows the processor to be really idle for long periods of time, rather than having to wake up every millisecond for the timer tick.</p>
<p>So, if you want to tune your Linux box for ultimate power efficiency, enable the tickless-idle feature in your kernel.  It will help, but you also need to find out what programs are causing the machine to wake-up.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on &#8220;Who ya gonna call?&#8221; Certainly not qualified experts! by Woody Weaver</title>
		<link>http://infosecblog.antonaylward.com/2007/11/22/who-ya-gonna-call-certainly-not-qualified-experts/#comment-4165</link>
		<dc:creator>Woody Weaver</dc:creator>
		<pubDate>Wed, 05 Dec 2007 23:52:17 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/11/22/who-ya-gonna-call-certainly-not-qualified-experts/#comment-4165</guid>
		<description>Whaddya mean not a qualified expert?

&#62;&#62;"Tom has a genuine understanding of cyber-safety issues being a digital native and having suffered such cyber-issues as computer addiction," Senator Conroy said.

I think he understands about all those internet tubes.</description>
		<content:encoded><![CDATA[<p>Whaddya mean not a qualified expert?</p>
<p>&gt;&gt;&#8221;Tom has a genuine understanding of cyber-safety issues being a digital native and having suffered such cyber-issues as computer addiction,&#8221; Senator Conroy said.</p>
<p>I think he understands about all those internet tubes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Why I don&#8217;t see the need for elaborate Risk Analysis by WoodyWeaver</title>
		<link>http://infosecblog.antonaylward.com/2007/09/28/why-i-dont-see-the-need-for-elaborate-risk-analysis/#comment-3954</link>
		<dc:creator>WoodyWeaver</dc:creator>
		<pubDate>Wed, 03 Oct 2007 13:23:53 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/09/28/why-i-dont-see-the-need-for-elaborate-risk-analysis/#comment-3954</guid>
		<description>Something I will always remember was a quote by &lt;a href="https://www.isc2.org/cgi-bin/content.cgi?page=1159" rel="nofollow"&gt;Bill Murray,&lt;/a&gt; in response to some kid talking about how his site only used DES to protect transactions, and was trying to get them to upgrade to 3DES.  His statement: "If the use of DES is your weakest control, then your site is very secure indeed."

There is something to be said for focusing on macular degeneration for an individual who is otherwise generally healthy but whose eyesight is going.  But I think that is your point.  One could say the same thing
about this American obsession with the death of 5000 on 9/11, when "Modifiable behavioral risk factors are leading causes of mortality in the United States." and leads to the death of a million each year. (1238
JAMA, March 10, 2004 Vol 291, No. 10)

I think I've become cynical.  I do what I do, because it is a requirement.  I do try to improve security postures, but it is not in the way that clients expect nor is it what they requested.  Such is the way of business.</description>
		<content:encoded><![CDATA[<p>Something I will always remember was a quote by <a href="https://www.isc2.org/cgi-bin/content.cgi?page=1159" rel="nofollow">Bill Murray,</a> in response to some kid talking about how his site only used DES to protect transactions, and was trying to get them to upgrade to 3DES.  His statement: &#8220;If the use of DES is your weakest control, then your site is very secure indeed.&#8221;</p>
<p>There is something to be said for focusing on macular degeneration for an individual who is otherwise generally healthy but whose eyesight is going.  But I think that is your point.  One could say the same thing<br />
about this American obsession with the death of 5000 on 9/11, when &#8220;Modifiable behavioral risk factors are leading causes of mortality in the United States.&#8221; and leads to the death of a million each year. (1238<br />
JAMA, March 10, 2004 Vol 291, No. 10)</p>
<p>I think I&#8217;ve become cynical.  I do what I do, because it is a requirement.  I do try to improve security postures, but it is not in the way that clients expect nor is it what they requested.  Such is the way of business.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Schneier questions need for security industry by jmikesmith</title>
		<link>http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-2249</link>
		<dc:creator>jmikesmith</dc:creator>
		<pubDate>Mon, 30 Apr 2007 12:21:55 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-2249</guid>
		<description>Schneier is an idealist, but we need the occasional idealist to push us to do better.  We've been trying to design secure, economical computers since the late 60s.

I think Schneier's (legitimate) point is that, on average, built-in security is more effective than add-on security.  But it is also more expensive and less convenient.  Built-in security will never be a high priority until people start dying in large numbers because of computer security breaches.</description>
		<content:encoded><![CDATA[<p>Schneier is an idealist, but we need the occasional idealist to push us to do better.  We&#8217;ve been trying to design secure, economical computers since the late 60s.</p>
<p>I think Schneier&#8217;s (legitimate) point is that, on average, built-in security is more effective than add-on security.  But it is also more expensive and less convenient.  Built-in security will never be a high priority until people start dying in large numbers because of computer security breaches.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Schneier questions need for security industry by kshauret</title>
		<link>http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-1916</link>
		<dc:creator>kshauret</dc:creator>
		<pubDate>Fri, 27 Apr 2007 21:32:08 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-1916</guid>
		<description>I have not read the Schneir post in detail, but from Anton's comments feel I understand what he is trying to get at.  On the one hand Anton  is correct, "You can't fight basic economics!"  On the other hand we all need to be taking a different approach to securing our businesses, 
homes and critical infrastructures.
 
Security needs to "Become part of Everyone's DNA", part of the corporate culture, part of the way we do things.  Our schools need to begin teaching or at least do a better job of teaching ethics and good computer security practices beginning  already at kindergarten or before (by parents).  

Our youth are the ones that still have the potential to learn that a difficult password to guess does not mean it has to be difficult to remember or that it does not have to be painful to change it periodically. Good security and practices can become habit and natural, part of what is done becuase it is right, not because some legislater said we shoudl do it.  

Instilling good security habits and practices starting very young and reinforced throughout their schooling will make it possible for networks, applications, databases, systems, etc..  to be delivered that are secure because that is how you build them as part of the design and implementation life cycle, not needing to add the security in after they have been delivered and are in production.  When you build a network it would no longer need to be built as a "secure network" because they are already one and the same thing because that is the natural way to build them.  We don't have secure network and insecure networks we have networks. 

This will take time, but will need to one day get started.  We will have to have a few Romper Room graduates build some networks before "Security will begin to be part of our DNA" not something you add on just enought new controls because some legislation said we have to. 

Ken</description>
		<content:encoded><![CDATA[<p>I have not read the Schneir post in detail, but from Anton&#8217;s comments feel I understand what he is trying to get at.  On the one hand Anton  is correct, &#8220;You can&#8217;t fight basic economics!&#8221;  On the other hand we all need to be taking a different approach to securing our businesses,<br />
homes and critical infrastructures.</p>
<p>Security needs to &#8220;Become part of Everyone&#8217;s DNA&#8221;, part of the corporate culture, part of the way we do things.  Our schools need to begin teaching or at least do a better job of teaching ethics and good computer security practices beginning  already at kindergarten or before (by parents).  </p>
<p>Our youth are the ones that still have the potential to learn that a difficult password to guess does not mean it has to be difficult to remember or that it does not have to be painful to change it periodically. Good security and practices can become habit and natural, part of what is done becuase it is right, not because some legislater said we shoudl do it.  </p>
<p>Instilling good security habits and practices starting very young and reinforced throughout their schooling will make it possible for networks, applications, databases, systems, etc..  to be delivered that are secure because that is how you build them as part of the design and implementation life cycle, not needing to add the security in after they have been delivered and are in production.  When you build a network it would no longer need to be built as a &#8220;secure network&#8221; because they are already one and the same thing because that is the natural way to build them.  We don&#8217;t have secure network and insecure networks we have networks. </p>
<p>This will take time, but will need to one day get started.  We will have to have a few Romper Room graduates build some networks before &#8220;Security will begin to be part of our DNA&#8221; not something you add on just enought new controls because some legislation said we have to. </p>
<p>Ken</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Schneier questions need for security industry by Anton Aylward</title>
		<link>http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-1896</link>
		<dc:creator>Anton Aylward</dc:creator>
		<pubDate>Fri, 27 Apr 2007 16:43:48 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-1896</guid>
		<description>Please note: I didn't say the iPOD was broken.  The whole narure of the 'ecology' I'm trying to describe is about extending the functionality of a basic - but extendable - product.

Three other examples; the Apple ][, whose design features were mostly replicated in the PC, and in the motoring world, the Model T and the original Mini. Look at the reef "ecosystems" that grew up around their bare bones.  Look at the D.I.Y. industry and home furnishing and decorating.

Is the balance skewed?  Possibly, but so long as the market is "open" and customers have alternatives they will send a financial message to the manufacturers.  That's what the market is about and why monopolies and oligopolies are considered an 'evil' by economists.

Is capitalism blatent?  Of course.  What makes you think its possible for it not to be?

-- AJA</description>
		<content:encoded><![CDATA[<p>Please note: I didn&#8217;t say the iPOD was broken.  The whole narure of the &#8216;ecology&#8217; I&#8217;m trying to describe is about extending the functionality of a basic - but extendable - product.</p>
<p>Three other examples; the Apple ][, whose design features were mostly replicated in the PC, and in the motoring world, the Model T and the original Mini. Look at the reef &#8220;ecosystems&#8221; that grew up around their bare bones.  Look at the D.I.Y. industry and home furnishing and decorating.</p>
<p>Is the balance skewed?  Possibly, but so long as the market is &#8220;open&#8221; and customers have alternatives they will send a financial message to the manufacturers.  That&#8217;s what the market is about and why monopolies and oligopolies are considered an &#8216;evil&#8217; by economists.</p>
<p>Is capitalism blatent?  Of course.  What makes you think its possible for it not to be?</p>
<p>&#8211; AJA</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Schneier questions need for security industry by tg</title>
		<link>http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-1884</link>
		<dc:creator>tg</dc:creator>
		<pubDate>Fri, 27 Apr 2007 13:59:35 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/04/27/schneier-questions-need-for-security-industry/#comment-1884</guid>
		<description>I don't see how your argument is in any way a contradiction of what Schneier and others in the article said:

"I always used to think the security industry existed to make people scared and then sell them something to protect them from what they were afraid of. But now I think it exists because of what people are prepared to buy," he said, adding that investment in security products tends to be reactive to a problem a company has already suffered, making security a "fire extinguisher industry."

Your iPod analogy is wrong because the third-party add-on industry that has developed around the iPod has to do with _extending_ functionality of the product. Not revert it to something it should have been in the first place.

The security industry feeds the manufacturers who feed the security indtustry, etc. The manufacturers don't have to make products secure because an entire industry sits at the ready to pounce on the new products and do it for them.
There is not sufficient incentive to make secure applications or products.

I liken it more to Microsoft's recent statements about the Vista release, boasting about how many jobs and how many billions of revenue the new OS will create. Or rather, will _need_ to create just to keep it functional.

By the same token if I throw garbage on the street you could argue that I'm creating jobs for more garbage collectors, but what Schneier says is that enough is enough.

I actually agree with your basic premise, but it is a matter of degree. Right now the balance is _too_ skewed between what is a good, open model that will provide incentives for third-party spin-off security industries, and what is just blatant rape of capitalism -- people making money for no other reason than manufacturers being unwilling to provide a quality product.


And quoting H2G2 might earn you geek points, but your article is still wrong ;)</description>
		<content:encoded><![CDATA[<p>I don&#8217;t see how your argument is in any way a contradiction of what Schneier and others in the article said:</p>
<p>&#8220;I always used to think the security industry existed to make people scared and then sell them something to protect them from what they were afraid of. But now I think it exists because of what people are prepared to buy,&#8221; he said, adding that investment in security products tends to be reactive to a problem a company has already suffered, making security a &#8220;fire extinguisher industry.&#8221;</p>
<p>Your iPod analogy is wrong because the third-party add-on industry that has developed around the iPod has to do with _extending_ functionality of the product. Not revert it to something it should have been in the first place.</p>
<p>The security industry feeds the manufacturers who feed the security indtustry, etc. The manufacturers don&#8217;t have to make products secure because an entire industry sits at the ready to pounce on the new products and do it for them.<br />
There is not sufficient incentive to make secure applications or products.</p>
<p>I liken it more to Microsoft&#8217;s recent statements about the Vista release, boasting about how many jobs and how many billions of revenue the new OS will create. Or rather, will _need_ to create just to keep it functional.</p>
<p>By the same token if I throw garbage on the street you could argue that I&#8217;m creating jobs for more garbage collectors, but what Schneier says is that enough is enough.</p>
<p>I actually agree with your basic premise, but it is a matter of degree. Right now the balance is _too_ skewed between what is a good, open model that will provide incentives for third-party spin-off security industries, and what is just blatant rape of capitalism &#8212; people making money for no other reason than manufacturers being unwilling to provide a quality product.</p>
<p>And quoting H2G2 might earn you geek points, but your article is still wrong <img src='http://infosecblog.antonaylward.com/public/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Separation of Duties: InfoSec, IT and Audit by OpenTester &#187; Separation of Duties in Testing</title>
		<link>http://infosecblog.antonaylward.com/2007/03/15/separation-of-duties-infosec-it-and-audit/#comment-1588</link>
		<dc:creator>OpenTester &#187; Separation of Duties in Testing</dc:creator>
		<pubDate>Thu, 19 Apr 2007 19:28:13 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/03/15/separation-of-duties-infosec-it-and-audit/#comment-1588</guid>
		<description>[...] While reading another article on Security which talked about Separation of Duties: InfoSec, IT and Audit , I wondered about the following sentence: &#8220;What I am suggesting in this separation of duties between InfoSec, IT and Audit is no different from a doctor writing a prescription and the patient taking it to an apothecary to be filled. The apothecary isn’t doing the diagnosis or needs analysis, but he still plays an essential role.&#8221; [...]</description>
		<content:encoded><![CDATA[<p>[...] While reading another article on Security which talked about Separation of Duties: InfoSec, IT and Audit , I wondered about the following sentence: &#8220;What I am suggesting in this separation of duties between InfoSec, IT and Audit is no different from a doctor writing a prescription and the patient taking it to an apothecary to be filled. The apothecary isn’t doing the diagnosis or needs analysis, but he still plays an essential role.&#8221; [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on What exploitation of &#8220;Child Labour&#8221;? by sadashivan</title>
		<link>http://infosecblog.antonaylward.com/2006/12/11/what-exploitation-of-child-labour/#comment-1101</link>
		<dc:creator>sadashivan</dc:creator>
		<pubDate>Sat, 31 Mar 2007 19:43:28 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2006/12/11/what-exploitation-of-child-labour/#comment-1101</guid>
		<description>Child labour and society BLOG
http://sadashivan.com/childlabourblog/

37% say poverty, 33% say Over populated family 10% poll for Government policy failure, 6% weak law to protect, 2% say parent's unemployment and 1% say high education and living cost. You too join the poll and give your valuable opinion. Say what you feel the cause; Add your poll what and who is responsible for the child labour. 
A concern of child labour exists from poverty. We have to understand as why children go to work. If parents don't send their children to work I am sure factories will not be able to consume them. Why poor parents feel children as their assets who will earn money for their home? Are they forced by their parents to go to work? If yes why?
An appeal to International society International socieities and organisation need to understand real porblems behind child labour and come forward to solutions !!!!!!!!!!!!!!</description>
		<content:encoded><![CDATA[<p>Child labour and society BLOG<br />
<a href="http://sadashivan.com/childlabourblog/" rel="nofollow">http://sadashivan.com/childlabourblog/</a></p>
<p>37% say poverty, 33% say Over populated family 10% poll for Government policy failure, 6% weak law to protect, 2% say parent&#8217;s unemployment and 1% say high education and living cost. You too join the poll and give your valuable opinion. Say what you feel the cause; Add your poll what and who is responsible for the child labour.<br />
A concern of child labour exists from poverty. We have to understand as why children go to work. If parents don&#8217;t send their children to work I am sure factories will not be able to consume them. Why poor parents feel children as their assets who will earn money for their home? Are they forced by their parents to go to work? If yes why?<br />
An appeal to International society International socieities and organisation need to understand real porblems behind child labour and come forward to solutions !!!!!!!!!!!!!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Vista: Where UNIX was in the 1980s by Anton Aylward</title>
		<link>http://infosecblog.antonaylward.com/2007/03/14/vista-where-unix-was-in-the-1908s/#comment-624</link>
		<dc:creator>Anton Aylward</dc:creator>
		<pubDate>Wed, 14 Mar 2007 20:44:29 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/03/14/vista-where-unix-was-in-the-1908s/#comment-624</guid>
		<description>Yes, I remember that.  I think it did a dis-service to Apple to say they were &lt;em&gt;only&lt;/em&gt; eleven years ahead of Microsoft with their technology.</description>
		<content:encoded><![CDATA[<p>Yes, I remember that.  I think it did a dis-service to Apple to say they were <em>only</em> eleven years ahead of Microsoft with their technology.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Vista: Where UNIX was in the 1980s by ajr</title>
		<link>http://infosecblog.antonaylward.com/2007/03/14/vista-where-unix-was-in-the-1908s/#comment-623</link>
		<dc:creator>ajr</dc:creator>
		<pubDate>Wed, 14 Mar 2007 20:18:57 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/03/14/vista-where-unix-was-in-the-1908s/#comment-623</guid>
		<description>Remember Windows '95 = MacOS '84?</description>
		<content:encoded><![CDATA[<p>Remember Windows &#8216;95 = MacOS &#8216;84?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on 2006: The Year of the laptop &#8230; stolen that is by How PC Blades Are Changing Government IT - PC Blade Daily - Practical News and Views on Centralized Computing</title>
		<link>http://infosecblog.antonaylward.com/2007/01/01/2006-the-year-of-the-laptop-stolen-that-is/#comment-229</link>
		<dc:creator>How PC Blades Are Changing Government IT - PC Blade Daily - Practical News and Views on Centralized Computing</dc:creator>
		<pubDate>Tue, 20 Feb 2007 21:32:08 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2007/01/01/2006-the-year-of-the-laptop-stolen-that-is/#comment-229</guid>
		<description>[...] The myriad departments that make up the federal government face many of the same IT issues as corporations. The protection of data is paramount, the security of personnel information is crucial, and downtime isn’t really an option. Of course, for many governmental agencies the stakes are even higher. When a breach occurs, it’s not only an embarrassment; it becomes an issue on a public scale and, at times, affects people’s safety: “Federal investigators are frantically trying to determine what happened to a missing laptop computer that contains sensitive data on as many as 100 Drug Enforcement Administration investigations around the country, including a wealth of information about many of the agency’s confidential informants.” (Newsweek via The Infosec Blog) [...]</description>
		<content:encoded><![CDATA[<p>[...] The myriad departments that make up the federal government face many of the same IT issues as corporations. The protection of data is paramount, the security of personnel information is crucial, and downtime isn’t really an option. Of course, for many governmental agencies the stakes are even higher. When a breach occurs, it’s not only an embarrassment; it becomes an issue on a public scale and, at times, affects people’s safety: “Federal investigators are frantically trying to determine what happened to a missing laptop computer that contains sensitive data on as many as 100 Drug Enforcement Administration investigations around the country, including a wealth of information about many of the agency’s confidential informants.” (Newsweek via The Infosec Blog) [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on First of the Month Regular Security Violations by Anton Aylward</title>
		<link>http://infosecblog.antonaylward.com/2006/11/01/mailman-vulnerabiliites/#comment-9</link>
		<dc:creator>Anton Aylward</dc:creator>
		<pubDate>Wed, 01 Nov 2006 14:51:11 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2006/11/01/first-of-the-month-regular-security-violations/#comment-9</guid>
		<description>That's the Open Web Application Security Project - their mail page/wiki is at &lt;a rel="nofollow" target="_blank" href="http://www.owasp.org/index.php/Main_Page" rel="nofollow"&gt;http://www.owasp.org/index.php/Main_Page&lt;/a&gt;</description>
		<content:encoded><![CDATA[<p>That&#8217;s the Open Web Application Security Project - their mail page/wiki is at <a rel="nofollow" target="_blank" href="http://www.owasp.org/index.php/Main_Page" rel="nofollow">http://www.owasp.org/index.php/Main_Page</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on First of the Month Regular Security Violations by Neil McKellar</title>
		<link>http://infosecblog.antonaylward.com/2006/11/01/mailman-vulnerabiliites/#comment-8</link>
		<dc:creator>Neil McKellar</dc:creator>
		<pubDate>Wed, 01 Nov 2006 13:40:49 +0000</pubDate>
		<guid isPermaLink="false">http://infosecblog.antonaylward.com/2006/11/01/first-of-the-month-regular-security-violations/#comment-8</guid>
		<description>That annoys me, too.  For additional irony, I would note that OWASP uses MailMan for their various community mailing lists.</description>
		<content:encoded><![CDATA[<p>That annoys me, too.  For additional irony, I would note that OWASP uses MailMan for their various community mailing lists.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
