<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for Rational Survivability</title>
	<atom:link href="http://www.rationalsurvivability.com/blog/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.rationalsurvivability.com/blog</link>
	<description>Hoff&#039;s Ramblings about Information Survivability, Information Centricity, Risk Management and Disruptive Innovation.</description>
	<lastBuildDate>Wed, 22 May 2013 05:46:55 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>Comment on About by Omid</title>
		<link>http://www.rationalsurvivability.com/blog/about/#comment-9416</link>
		<dc:creator>Omid</dc:creator>
		<pubDate>Wed, 22 May 2013 05:46:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?page_id=2#comment-9416</guid>
		<description><![CDATA[Awesome own-life commentary I would say. I actually LOVE half of the things you do and HATE the other half!:D]]></description>
		<content:encoded><![CDATA[<p>Awesome own-life commentary I would say. I actually LOVE half of the things you do and HATE the other half!:D</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on An Ode To Glass by Dave Walker</title>
		<link>http://www.rationalsurvivability.com/blog/2013/05/an-ode-to-glass/#comment-9404</link>
		<dc:creator>Dave Walker</dc:creator>
		<pubDate>Mon, 20 May 2013 11:38:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=3836#comment-9404</guid>
		<description><![CDATA[I&#039;m amazed at how few people are commenting on Glass as enabling &quot;Gargoyles&quot; from Neal Stephenson&#039;s &quot;Snow Crash&quot; (one of my favourite novels - &quot;The Diamond Age&quot; hasn&#039;t been discussed much in the additive manufacture world either yet, I give it a few months before it crops up big-time).

Other than poetry, I&#039;d be very interested to see your views on how well it works for spectacle-wearers (and I suspect you wouldn&#039;t be fazed by a request for some info on your glasses prescription, as part of that). While I&#039;m very interested in trying Glass out once it goes General Availability, I&#039;m on a -4.75 / -5.25 dioptre prescription (with minor but weird self-cancelling astigmatism - each eye is astigmatic, but in opposite directions so my brain cancels it) and therefore have some pretty obvious concerns. Weight and front / rear balance on Glass are also important; even with really lightweight lenses, my glasses still put a weight on my nose, and need pushing up from time to time.

On all the privacy brouhaha, my reckoning is that the final consumer product will also come in a version which doesn&#039;t have a camera (and has no camera aperture in the shell, to reflect this), and I&#039;d expect social reaction so far means that this will be the version most customers will buy. Naturally, early and developer units will include every hardware bell / whistle Google would be thinking of incorporating, as the project is still in the stage of gathering reactions to the fundamental tech and seeing what original things developers can think of, app-wise, to do with it.

So, mark me down as &quot;not particularly worried, but very interested&quot;:-).]]></description>
		<content:encoded><![CDATA[<p>I&#8217;m amazed at how few people are commenting on Glass as enabling &#8220;Gargoyles&#8221; from Neal Stephenson&#8217;s &#8220;Snow Crash&#8221; (one of my favourite novels &#8211; &#8220;The Diamond Age&#8221; hasn&#8217;t been discussed much in the additive manufacture world either yet, I give it a few months before it crops up big-time).</p>
<p>Other than poetry, I&#8217;d be very interested to see your views on how well it works for spectacle-wearers (and I suspect you wouldn&#8217;t be fazed by a request for some info on your glasses prescription, as part of that). While I&#8217;m very interested in trying Glass out once it goes General Availability, I&#8217;m on a -4.75 / -5.25 dioptre prescription (with minor but weird self-cancelling astigmatism &#8211; each eye is astigmatic, but in opposite directions so my brain cancels it) and therefore have some pretty obvious concerns. Weight and front / rear balance on Glass are also important; even with really lightweight lenses, my glasses still put a weight on my nose, and need pushing up from time to time.</p>
<p>On all the privacy brouhaha, my reckoning is that the final consumer product will also come in a version which doesn&#8217;t have a camera (and has no camera aperture in the shell, to reflect this), and I&#8217;d expect social reaction so far means that this will be the version most customers will buy. Naturally, early and developer units will include every hardware bell / whistle Google would be thinking of incorporating, as the project is still in the stage of gathering reactions to the fundamental tech and seeing what original things developers can think of, app-wise, to do with it.</p>
<p>So, mark me down as &#8220;not particularly worried, but very interested&#8221;:-).</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Intel TPM: The Root Of Trust&#8230;Is Made In China by Michael</title>
		<link>http://www.rationalsurvivability.com/blog/2013/02/intel-tpm-the-root-of-trust-is-made-in-china/#comment-9398</link>
		<dc:creator>Michael</dc:creator>
		<pubDate>Mon, 20 May 2013 06:36:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=3812#comment-9398</guid>
		<description><![CDATA[I have to agree that Made in China does not mean that something cannot be trusted. A perfect example is the Foxconn and Apple relationship. While it is far from perfect, I don&#039;t think that anybody would disagree that China has been ripping off iPHone left and right. It is all relative. As for a master backdoor, come on! I think people have been watching too many conspiracy theory flicks.]]></description>
		<content:encoded><![CDATA[<p>I have to agree that Made in China does not mean that something cannot be trusted. A perfect example is the Foxconn and Apple relationship. While it is far from perfect, I don&#8217;t think that anybody would disagree that China has been ripping off iPHone left and right. It is all relative. As for a master backdoor, come on! I think people have been watching too many conspiracy theory flicks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Breaking News: Successful SCADA Attack Confirmed &#8211; Mogull Is pwned! by Five things needed for the Internet of Things to be successful &#124; This, that and the other</title>
		<link>http://www.rationalsurvivability.com/blog/2007/12/breaking-news-successful-scada-attack-confirmed-mogull-is-pwned/#comment-9305</link>
		<dc:creator>Five things needed for the Internet of Things to be successful &#124; This, that and the other</dc:creator>
		<pubDate>Sat, 11 May 2013 05:16:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=254#comment-9305</guid>
		<description><![CDATA[[...] to it thus exposing them to new attacks and challenges. Things from Pacemakers to Insulin Pumps to Home Automation Systems have been shown to be vulnerable to attacks. As we rush to connect everything to the Internet, we [...]]]></description>
		<content:encoded><![CDATA[<p>[...] to it thus exposing them to new attacks and challenges. Things from Pacemakers to Insulin Pumps to Home Automation Systems have been shown to be vulnerable to attacks. As we rush to connect everything to the Internet, we [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Video Of My &#8217;12 Microsoft Bluehat Talk: Sh*t My Cloud Evangelist Says by Denial Of Service Protection</title>
		<link>http://www.rationalsurvivability.com/blog/2013/04/video-of-my-12-microsoft-bluehat-talk-sht-my-cloud-evangelist-says/#comment-9294</link>
		<dc:creator>Denial Of Service Protection</dc:creator>
		<pubDate>Thu, 09 May 2013 19:48:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=3827#comment-9294</guid>
		<description><![CDATA[Hi, great video talk. You should add more of those.]]></description>
		<content:encoded><![CDATA[<p>Hi, great video talk. You should add more of those.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Is What We Need&#8230;An OpSec K/T Boundary Extinction-Level Event? by DataVail</title>
		<link>http://www.rationalsurvivability.com/blog/2012/06/is-what-we-need-an-opsec-kt-boundary-extinction-level-event/#comment-9276</link>
		<dc:creator>DataVail</dc:creator>
		<pubDate>Tue, 07 May 2013 02:58:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=3580#comment-9276</guid>
		<description><![CDATA[I agree with the words of Gunny Highway from Heartbreak Ridge, we must “Improvise, adapt and overcome.” If we do not do this, then a lot of technology and other facts of the world that is ever changing are going to stay the same. This is well thought out article that I enjoyed since we share the same view points. I do have to say however, that even if the older generations do not want the &#039;youngsters&#039; on their yards, they have to think outside of the box as well. Since technology is evolving, the old timers may not be as equipped to use newer software and programs since they may be used to the &#039;old way&#039; of doing things. Do you agree?]]></description>
		<content:encoded><![CDATA[<p>I agree with the words of Gunny Highway from Heartbreak Ridge, we must “Improvise, adapt and overcome.” If we do not do this, then a lot of technology and other facts of the world that is ever changing are going to stay the same. This is well thought out article that I enjoyed since we share the same view points. I do have to say however, that even if the older generations do not want the &#8216;youngsters&#8217; on their yards, they have to think outside of the box as well. Since technology is evolving, the old timers may not be as equipped to use newer software and programs since they may be used to the &#8216;old way&#8217; of doing things. Do you agree?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Video Of My &#8217;12 Microsoft Bluehat Talk: Sh*t My Cloud Evangelist Says by Alana H.</title>
		<link>http://www.rationalsurvivability.com/blog/2013/04/video-of-my-12-microsoft-bluehat-talk-sht-my-cloud-evangelist-says/#comment-9212</link>
		<dc:creator>Alana H.</dc:creator>
		<pubDate>Mon, 22 Apr 2013 11:55:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=3827#comment-9212</guid>
		<description><![CDATA[Hi Hoff, 

Great and detailed overview on what the cloud can do for all parties involved. I wanted to know what your opinion was in regards to the cloud and its integration into the Internet of Things. How are these two going to work together to create a holistic experience for the average user a few years from now? 

Alana]]></description>
		<content:encoded><![CDATA[<p>Hi Hoff, </p>
<p>Great and detailed overview on what the cloud can do for all parties involved. I wanted to know what your opinion was in regards to the cloud and its integration into the Internet of Things. How are these two going to work together to create a holistic experience for the average user a few years from now? </p>
<p>Alana</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Is There a Difference Between Data LOSS and Data LEAKAGE Prevention? by VJ</title>
		<link>http://www.rationalsurvivability.com/blog/2008/06/is-there-a-difference-between-data-loss-and-data-leakage-prevention/#comment-9047</link>
		<dc:creator>VJ</dc:creator>
		<pubDate>Tue, 02 Apr 2013 14:52:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=149#comment-9047</guid>
		<description><![CDATA[So can I say generally that loss is intentional and malicious leakage is unintentional and not malicious.
No. Both loss and leak can be intentional or unintentional and can be malicious or just errors.
 
Loss = Destruction, theft, data corruption. Data is lost forever.
Leak = Unauthorized people get access to data.
 
Loss = malicious and intentional theft of data for nefarious purposes
Loss = Damaging data beyond recovery. Intentional or intentional. For example deleting files that are not backup and can never be recovered. Or sending a file that is corrupted in transit without the possibility to restore the file and send it again.
 
Example 1: Attacker A steals Chris Hoff next blog post and then sells it to the highest bidder, which will undoubtedly capture ~ $100,000 in pure profit.
Example one shows intentional data loss due to theft (malicious but not nefarious) – however if Chris Hoff has a backup of the blog then it would be a data intentional leak.
If Attacker A find the blog and corrupts it using a virus, then it will be an intentional data loss with nefarious purposes. The $100,000 will be a financial loss resulting from data loss.
 
Example 2: Person A infiltrates Person B&#039;s campaign managers home computer and steals schedule.
Again, the schedules cannot be recovered = loss, but if the schedule can be recovered = leak.
 
Leakage = accidental leakage of data due to inadequate controls, poor process or lack of policy awareness.
Example 1: Person A in accounting downloads company financial records to his un-encrypted USB stick so he can work on some analysis over the weekend on his home computer.
If the person has access to the data to do his\her job there is no leak. The leak would happen if somebody who does not have a valid business reason to use the data downloads it to the USB stick. Or if the employee shares the information with somebody who should not have access – this would be an intentional data leak.
 
Example 2: Person B in HR accidentally sends confidential payroll spreadsheet to all managers instead of the filtered spreadsheet which only lists personnel, reporting structure, and department number.
Yes, this would be an unintentional data leak.
 
So obviously the leakage scenarios are easier to prevent.

&lt;a href=&quot;#comment-1503&quot; rel=&quot;nofollow&quot;&gt;@Amrit &lt;/a&gt;]]></description>
		<content:encoded><![CDATA[<p>So can I say generally that loss is intentional and malicious leakage is unintentional and not malicious.<br />
No. Both loss and leak can be intentional or unintentional and can be malicious or just errors.</p>
<p>Loss = Destruction, theft, data corruption. Data is lost forever.<br />
Leak = Unauthorized people get access to data.</p>
<p>Loss = malicious and intentional theft of data for nefarious purposes<br />
Loss = Damaging data beyond recovery. Intentional or intentional. For example deleting files that are not backup and can never be recovered. Or sending a file that is corrupted in transit without the possibility to restore the file and send it again.</p>
<p>Example 1: Attacker A steals Chris Hoff next blog post and then sells it to the highest bidder, which will undoubtedly capture ~ $100,000 in pure profit.<br />
Example one shows intentional data loss due to theft (malicious but not nefarious) – however if Chris Hoff has a backup of the blog then it would be a data intentional leak.<br />
If Attacker A find the blog and corrupts it using a virus, then it will be an intentional data loss with nefarious purposes. The $100,000 will be a financial loss resulting from data loss.</p>
<p>Example 2: Person A infiltrates Person B&#8217;s campaign managers home computer and steals schedule.<br />
Again, the schedules cannot be recovered = loss, but if the schedule can be recovered = leak.</p>
<p>Leakage = accidental leakage of data due to inadequate controls, poor process or lack of policy awareness.<br />
Example 1: Person A in accounting downloads company financial records to his un-encrypted USB stick so he can work on some analysis over the weekend on his home computer.<br />
If the person has access to the data to do his\her job there is no leak. The leak would happen if somebody who does not have a valid business reason to use the data downloads it to the USB stick. Or if the employee shares the information with somebody who should not have access – this would be an intentional data leak.</p>
<p>Example 2: Person B in HR accidentally sends confidential payroll spreadsheet to all managers instead of the filtered spreadsheet which only lists personnel, reporting structure, and department number.<br />
Yes, this would be an unintentional data leak.</p>
<p>So obviously the leakage scenarios are easier to prevent.</p>
<p><a href="#comment-1503" rel="nofollow">@Amrit </a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on The Frogs Who Desired a King: A Virtualization &amp; Cloud Computing Fable [Slides] by Q&#38;A: Chris Hoff on cloud computing &#124; Threatpost</title>
		<link>http://www.rationalsurvivability.com/blog/2009/03/the-frogs-who-desired-a-king-a-virtualization-cloud-computing-fable-slides/#comment-8970</link>
		<dc:creator>Q&#38;A: Chris Hoff on cloud computing &#124; Threatpost</dc:creator>
		<pubDate>Mon, 25 Mar 2013 00:56:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=567#comment-8970</guid>
		<description><![CDATA[[...] addressed it with a LOL cat in my presentation, &#8220;The Frogs Who Desired a King.&#8221; It&#8217;s a stupid argument to make without context. Security is an enormous problem. If you [...]]]></description>
		<content:encoded><![CDATA[<p>[...] addressed it with a LOL cat in my presentation, &#8220;The Frogs Who Desired a King.&#8221; It&#8217;s a stupid argument to make without context. Security is an enormous problem. If you [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Can We Secure Cloud Computing?  Can We Afford Not To? by We Can&#8217;t Afford Not to Secure the Cloud &#124; Threatpost</title>
		<link>http://www.rationalsurvivability.com/blog/2009/10/can-we-secure-cloud-computing-can-we-afford-not-to/#comment-8969</link>
		<dc:creator>We Can&#8217;t Afford Not to Secure the Cloud &#124; Threatpost</dc:creator>
		<pubDate>Mon, 25 Mar 2013 00:55:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.rationalsurvivability.com/blog/?p=1491#comment-8969</guid>
		<description><![CDATA[[...] Guest Editorial by Christofer Hoff [...]]]></description>
		<content:encoded><![CDATA[<p>[...] Guest Editorial by Christofer Hoff [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
