<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
		xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
>

<channel>
	<title>I Am Security &#187; technical</title>
	<atom:link href="http://www.iamit.org/blog/tag/technical/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.iamit.org/blog</link>
	<description>Security news and research</description>
	<lastBuildDate>Wed, 25 Jan 2012 11:13:27 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
<cloud domain='www.iamit.org' port='80' path='/blog/?rsscloud=notify' registerProcedure='' protocol='http-post' />
	<copyright>Copyright &#xA9; I Am Security 2011 </copyright>
	<managingEditor>iamit@iamit.org (I Am Security)</managingEditor>
	<webMaster>iamit@iamit.org (I Am Security)</webMaster>
	<image>
		<url>http://www.iamit.org/blog/wp-content/plugins/podpress/images/powered_by_podpress.jpg</url>
		<title>I Am Security</title>
		<link>http://www.iamit.org/blog</link>
		<width>144</width>
		<height>144</height>
	</image>
	<itunes:subtitle></itunes:subtitle>
	<itunes:summary>Security news and research</itunes:summary>
	<itunes:keywords></itunes:keywords>
	<itunes:category text="Society &#38; Culture" />
	<itunes:author>I Am Security</itunes:author>
	<itunes:owner>
		<itunes:name>I Am Security</itunes:name>
		<itunes:email>iamit@iamit.org</itunes:email>
	</itunes:owner>
	<itunes:block>no</itunes:block>
	<itunes:explicit>no</itunes:explicit>
	<itunes:image href="http://www.iamit.org/blog/wp-content/plugins/podpress/images/powered_by_podpress_large.jpg" />
		<item>
		<title>Local PayPal Phishing &#8211; and why we need a CERT</title>
		<link>http://www.iamit.org/blog/2011/05/local-paypal-phishing-and-why-we-need-a-cert/</link>
		<comments>http://www.iamit.org/blog/2011/05/local-paypal-phishing-and-why-we-need-a-cert/#comments</comments>
		<pubDate>Tue, 03 May 2011 08:58:00 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[CERT]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[eCrime]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[technical]]></category>
		<category><![CDATA[technology]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=598</guid>
		<description><![CDATA[This just came in the mail: (twice &#8211; at two different mailboxes &#8211; I must be a high value target for these guys) A classic phishing email, with the only exception that it seems highly targeted at the Israeli market! &#8230; <a href="http://www.iamit.org/blog/2011/05/local-paypal-phishing-and-why-we-need-a-cert/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2011/05/local-paypal-phishing-and-why-we-need-a-cert/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Defining Penetration Testing</title>
		<link>http://www.iamit.org/blog/2011/03/defining-penetration-testing/</link>
		<comments>http://www.iamit.org/blog/2011/03/defining-penetration-testing/#comments</comments>
		<pubDate>Fri, 04 Mar 2011 11:03:26 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[penetration test]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[technical]]></category>
		<category><![CDATA[technology]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=573</guid>
		<description><![CDATA[I have been fortunate enough to be working with a group of peers from the security industry over the past few months (since November 2010) on finally creating a solid definition of what a penetration testing is. It has been &#8230; <a href="http://www.iamit.org/blog/2011/03/defining-penetration-testing/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2011/03/defining-penetration-testing/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>the art of not thinking about elephants</title>
		<link>http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/</link>
		<comments>http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/#comments</comments>
		<pubDate>Thu, 06 Jan 2011 08:24:43 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Security Research]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[exfiltration]]></category>
		<category><![CDATA[red team]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security policy]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=560</guid>
		<description><![CDATA[Approaching risk management should be done in the most holistic manner, this means that EVERY aspect of information flow should be taken into account. This article describes how a red-team test managed to exfiltrate data out of a closed/non-connected network using innovative thinking. <a href="http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2011/01/the-art-of-not-thinking-about-elephants/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Stuxnet Analysis Report</title>
		<link>http://www.iamit.org/blog/2010/10/stuxnet-analysis-report/</link>
		<comments>http://www.iamit.org/blog/2010/10/stuxnet-analysis-report/#comments</comments>
		<pubDate>Fri, 29 Oct 2010 21:34:34 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[cyberwar]]></category>
		<category><![CDATA[cyberwarfare]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[stuxnet]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=544</guid>
		<description><![CDATA[Stuxnet report officialy published by the CSFI-CWD <a href="http://www.iamit.org/blog/2010/10/stuxnet-analysis-report/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/10/stuxnet-analysis-report/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>The Botnet Wars &#8211; industry Q&amp;A</title>
		<link>http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/</link>
		<comments>http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/#comments</comments>
		<pubDate>Mon, 25 Oct 2010 12:43:49 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[eCrime]]></category>
		<category><![CDATA[malweb]]></category>
		<category><![CDATA[press]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[technical]]></category>
		<category><![CDATA[technology]]></category>
		<category><![CDATA[toolkit]]></category>
		<category><![CDATA[vulnerability]]></category>
		<category><![CDATA[web2.0]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/</guid>
		<description><![CDATA[I was approached recently by Bart Parys from Panda security in order to participate in an industry expert Q&#038;A about the botnet wars (apparently he did his homework as he got quite the lineup to participate in this, guessed he &#8230; <a href="http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/10/the-botnet-wars-industry-qa/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Pentesters and businessman are doing it wrong</title>
		<link>http://www.iamit.org/blog/2010/09/pentesters-and-businessman-are-doing-it-wrong/</link>
		<comments>http://www.iamit.org/blog/2010/09/pentesters-and-businessman-are-doing-it-wrong/#comments</comments>
		<pubDate>Mon, 27 Sep 2010 08:53:31 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[BruCon]]></category>
		<category><![CDATA[conference]]></category>
		<category><![CDATA[penetration test]]></category>
		<category><![CDATA[risk management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Source]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=529</guid>
		<description><![CDATA[What we are doing wrong as a security services industry, what businesses are doing wrong when they engage us, and how to fix it <a href="http://www.iamit.org/blog/2010/09/pentesters-and-businessman-are-doing-it-wrong/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/09/pentesters-and-businessman-are-doing-it-wrong/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Tying up loose ends before Vegas (scammer closure)</title>
		<link>http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/</link>
		<comments>http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/#comments</comments>
		<pubDate>Mon, 26 Jul 2010 09:20:36 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[summary]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=501</guid>
		<description><![CDATA[Instead of updating the post in question (again), I figured I&#8217;ll post all the new info here and call this a wrap. So, we all know about the security scammer now, and the different ways he is working to defraud &#8230; <a href="http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/07/tying-up-loose-ends-before-vegas-scammer-closure/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How [not to] scam security people</title>
		<link>http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/</link>
		<comments>http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/#comments</comments>
		<pubDate>Thu, 08 Jul 2010 06:48:52 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Security Research]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[Attack Vector]]></category>
		<category><![CDATA[cybercrime]]></category>
		<category><![CDATA[eCrime]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/</guid>
		<description><![CDATA[An analysis of a rogue security tool that tries to steal passwords and scam people out of their paypal money and accounts. <a href="http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2010/07/how-not-to-scam-security-people/feed/</wfw:commentRss>
		<slash:comments>27</slash:comments>
		</item>
		<item>
		<title>DefCon 17 talk video available!</title>
		<link>http://www.iamit.org/blog/2009/11/defcon-17-talk-video-available/</link>
		<comments>http://www.iamit.org/blog/2009/11/defcon-17-talk-video-available/#comments</comments>
		<pubDate>Sun, 15 Nov 2009 07:13:33 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Security Research]]></category>
		<category><![CDATA[conference]]></category>
		<category><![CDATA[defcon]]></category>
		<category><![CDATA[eCrime]]></category>
		<category><![CDATA[malweb]]></category>
		<category><![CDATA[predictions]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=379</guid>
		<description><![CDATA[DefCon 17 talk video of my talk <a href="http://www.iamit.org/blog/2009/11/defcon-17-talk-video-available/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2009/11/defcon-17-talk-video-available/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Blocking legitimate sites in real-time</title>
		<link>http://www.iamit.org/blog/2008/09/blocking-legitimate-sites-in-real-time/</link>
		<comments>http://www.iamit.org/blog/2008/09/blocking-legitimate-sites-in-real-time/#comments</comments>
		<pubDate>Mon, 22 Sep 2008 03:23:09 +0000</pubDate>
		<dc:creator>iamit</dc:creator>
				<category><![CDATA[Aladdin]]></category>
		<category><![CDATA[Opinion]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[technical]]></category>

		<guid isPermaLink="false">http://www.iamit.org/blog/?p=105</guid>
		<description><![CDATA[I Ran into this on Slashdot: http://tech.slashdot.org/tech/08/09/21/1827209.shtml. It seems like the Google filter for malicious sites was blocking a whole domain name &#8211; including all sub-domains, which happened to be a dynamic DNS provider. A Big false positive, and a &#8230; <a href="http://www.iamit.org/blog/2008/09/blocking-legitimate-sites-in-real-time/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://www.iamit.org/blog/2008/09/blocking-legitimate-sites-in-real-time/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

