<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>mcwresearch.com</title>
	<atom:link href="http://mcwresearch.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://mcwresearch.com</link>
	<description>Things I think I've thought about</description>
	<pubDate>Tue, 24 Mar 2009 19:27:04 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
	<language>en</language>
			<item>
		<title>Godzilla making poo</title>
		<link>http://mcwresearch.com/archives/651</link>
		<comments>http://mcwresearch.com/archives/651#comments</comments>
		<pubDate>Tue, 24 Mar 2009 19:27:04 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Rant]]></category>

		<category><![CDATA[Godzilla]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=651</guid>
		<description><![CDATA[Me: Gawd, It&#8217;s amazing to see how many people who&#8217;ve been laid off, who are now asking to be added to my LinkedIn profile.
Her: I guess you have to be connected as much as possible in times like these, you never know who will have a lead on a job. It&#8217;s sad to see the [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/651/feed</wfw:commentRss>
		</item>
		<item>
		<title>Conficker Hits French MoD</title>
		<link>http://mcwresearch.com/archives/650</link>
		<comments>http://mcwresearch.com/archives/650#comments</comments>
		<pubDate>Tue, 10 Feb 2009 12:57:44 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<category><![CDATA[cyber warfare]]></category>

		<category><![CDATA[Conficker]]></category>

		<category><![CDATA[downadup]]></category>

		<category><![CDATA[French MoD]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=650</guid>
		<description><![CDATA[The conficker/downadup worm has impacted the French Ministry of Defense, according to an article posted by The Telegraph.  According to the article; 
&#8230;aircraft were unable to download their flight plans after databases were infected by a Microsoft virus they had already been warned about several months beforehand.
At one point French naval staff were also [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/650/feed</wfw:commentRss>
		</item>
		<item>
		<title>Conficker FUD?</title>
		<link>http://mcwresearch.com/archives/648</link>
		<comments>http://mcwresearch.com/archives/648#comments</comments>
		<pubDate>Thu, 22 Jan 2009 15:44:48 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<category><![CDATA[Antivirus]]></category>

		<category><![CDATA[AV]]></category>

		<category><![CDATA[Conficker]]></category>

		<category><![CDATA[downadup]]></category>

		<category><![CDATA[FUD]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=648</guid>
		<description><![CDATA[Conficker, aka Downadup is gaining popularity among the non-techy news sites.  Today I ran across this article on Rawstory.com.  In it, David Perry of Trend Micro is quoted as saying &#8220;Downadup uses brute force from the infected network of botnets to break the password of the machine being attacked&#8221;.  
To my knowledge [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/648/feed</wfw:commentRss>
		</item>
		<item>
		<title>Worms are an effective weapon in cyber warfare</title>
		<link>http://mcwresearch.com/archives/647</link>
		<comments>http://mcwresearch.com/archives/647#comments</comments>
		<pubDate>Tue, 20 Jan 2009 19:56:00 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<category><![CDATA[cyber warfare]]></category>

		<category><![CDATA[Conficker]]></category>

		<category><![CDATA[HMS Ark Royal]]></category>

		<category><![CDATA[UK Ministry of Defense]]></category>

		<category><![CDATA[UK MoD]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=647</guid>
		<description><![CDATA[CIO.com has an article about a &#8216;rapidly spreading virus&#8217; that is giving the UK Ministry of Defense a run for its money.  
First, viruses don&#8217;t spread on the network &#8212; worms spread on the network and a virus can be their payload.
Semantic arguments aside, the story demonstrates just how effective a worm can still [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/647/feed</wfw:commentRss>
		</item>
		<item>
		<title>More on conficker</title>
		<link>http://mcwresearch.com/archives/646</link>
		<comments>http://mcwresearch.com/archives/646#comments</comments>
		<pubDate>Fri, 16 Jan 2009 18:56:40 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<category><![CDATA[Antivirus]]></category>

		<category><![CDATA[AV]]></category>

		<category><![CDATA[Conficker]]></category>

		<category><![CDATA[downadup]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=646</guid>
		<description><![CDATA[After providing this wordy response to my friend about the conficker worm and defenses for it, he asked another simple question; &#8220;So if we patch within weeks of MS release we&#8217;re good?&#8221;  To which I provided this less-than-simple answer; not completely.  
The patch stops the primary propagation method and AV stops the payload. [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/646/feed</wfw:commentRss>
		</item>
		<item>
		<title>Network worms are still effective</title>
		<link>http://mcwresearch.com/archives/644</link>
		<comments>http://mcwresearch.com/archives/644#comments</comments>
		<pubDate>Wed, 14 Jan 2009 17:08:10 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[AV sucks]]></category>

		<category><![CDATA[Security]]></category>

		<category><![CDATA[Antivirus]]></category>

		<category><![CDATA[Conficker]]></category>

		<category><![CDATA[Worm]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=644</guid>
		<description><![CDATA[A good friend recently emailed me to ask if AV would protect his servers from the Conficker worm and I thought this would be a good opportunity to continue my anti-antivirus tirade.  
The short answer to the question &#8216;will AV protect me from conficker&#8217; is &#8220;somewhat.&#8221;  Here&#8217;s why.  Below are the typical [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/644/feed</wfw:commentRss>
		</item>
		<item>
		<title>On Cyber War</title>
		<link>http://mcwresearch.com/archives/639</link>
		<comments>http://mcwresearch.com/archives/639#comments</comments>
		<pubDate>Fri, 02 Jan 2009 17:42:41 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<category><![CDATA[cyber warfare]]></category>

		<category><![CDATA[5GW]]></category>

		<category><![CDATA[Operation Cast Lead]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=639</guid>
		<description><![CDATA[We're hearing more and more of cyber attacks associated with physical attacks; Estonia, Georgia, and now Israel.  More often than not the attacks (usually website defacements or distributed denial of service (DDoS) attacks) are perpetrated by a lose-nit group of decentralized actors (open source warfare) rather than a well organized attack orchestrated by a military, government, or other hierarchal entity.  But as the tactics develop and effectiveness increases, cyber attacks will become more mainstream, just as other technologies of warfare develop and we progress further into <a href="http://globalguerrillas.typepad.com/globalguerrillas/2006/10/the_changing_fa.html">5th generation warfare</a> or 5GW.]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/639/feed</wfw:commentRss>
		</item>
		<item>
		<title>Invigorate Postini</title>
		<link>http://mcwresearch.com/archives/638</link>
		<comments>http://mcwresearch.com/archives/638#comments</comments>
		<pubDate>Mon, 29 Dec 2008 21:05:05 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<category><![CDATA[Content Manager]]></category>

		<category><![CDATA[Postini]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=638</guid>
		<description><![CDATA[One of the best features of Postini is the ability to write custom content filters.  I leverage these to snipe spam that Postini doesn&#8217;t catch.  One of my most effective (24,000+ caught in 42 days) is a filter I&#8217;ve titled &#8216;invigorate:&#8217;
Subject Line matches regex &#8220;(Viagra&#124;Cialis)&#8221; AND Body contains text &#8220;http://&#8221;
This will catch anything [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/638/feed</wfw:commentRss>
		</item>
		<item>
		<title>When the money is gone</title>
		<link>http://mcwresearch.com/archives/635</link>
		<comments>http://mcwresearch.com/archives/635#comments</comments>
		<pubDate>Tue, 23 Dec 2008 15:40:57 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=635</guid>
		<description><![CDATA[This year we&#8217;ve had to take a chainsaw to our security budget and jettison literally everything except maintenance upkeep.  
This presents a good opportunity to go through and clean house.  One of the things I&#8217;ve started is to bring all appliances to the same software version, across the board.  Another thing I&#8217;m [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/635/feed</wfw:commentRss>
		</item>
		<item>
		<title>where once sat a blog</title>
		<link>http://mcwresearch.com/archives/634</link>
		<comments>http://mcwresearch.com/archives/634#comments</comments>
		<pubDate>Sun, 07 Dec 2008 15:59:31 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
		
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/?p=634</guid>
		<description><![CDATA[This used to be a moderately maintained blog but I&#8217;m not sure what it has become, other than a collector of Internet dust.  
What to do, what to do?
	]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/634/feed</wfw:commentRss>
		</item>
	</channel>
</rss>
