[1336] in Security FYI
[IS&T Security-FYI] SFYI Newsletter, November 21, 2008
daemon@ATHENA.MIT.EDU (Monique Yeaton)
Fri Nov 21 15:17:04 2008
Message-Id: <9C0539A7-B5CA-49BF-9D1C-A3297AB1CDCF@mit.edu>
From: Monique Yeaton <myeaton@mit.edu>
To: ist-security-fyi@mit.edu
Mime-Version: 1.0 (Apple Message framework v929.2)
Date: Fri, 21 Nov 2008 15:03:54 -0500
Cc: itss@mit.edu
Content-Type: multipart/mixed; boundary="===============1762797442=="
Errors-To: ist-security-fyi-bounces@mit.edu
--===============1762797442==
Content-Type: multipart/alternative; boundary=Apple-Mail-37--117468816
--Apple-Mail-37--117468816
Content-Type: text/plain;
charset=WINDOWS-1252;
format=flowed;
delsp=yes
Content-Transfer-Encoding: quoted-printable
In this issue:
1. Biggest Spammers Shut Down (Temporarily)
2. Emerging Cyber Threats for 2009
3. Patches for New Browsers
------------------------------------------------------------
1. Biggest Spammers Shut Down (Temporarily)
------------------------------------------------------------
The amount of spam being sent worldwide dropped noticeably about a =20
week ago after McColo, a northern California-based hosting provider =20
identified as hosting spamming organizations, was cut off by its =20
Internet providers. It is estimated that McColo hosted the machines =20
responsible for 75 percent of spam sent worldwide. The relief is =20
likely to be temporary, as operations that send the unsolicited =20
commercial email seek out other avenues to help them spread their wares.
McColo's connection to spamming mainly comes from its hosting several =20=
of the biggest botnets: groups of hacked computers (also called =20
'zombies') that are tied to a single command center. Aside from =20
hosting bot, spam and malware activity, McColo reportedly also hosted =20=
illegal content, such as child pornography.
The decisions to pull the plugs on the hosting companies were made by =20=
their service providers, not by security researchers or law =20
enforcement. The effort may not be enough to completely eradicate =20
spammers and other cyber criminals. In fact, many operations that are =20=
shut down by one service provider often resurface a short time later =20
at another location on the Internet.
Read full story:
=
<http://www.computerworld.com/action/article.do?command=3DviewArticleBasic=
&taxonomyName=3Dnetwork_security&articleId=3D9120542&taxonomyId=3D142&ints=
rc=3Dkc_top=20
>
If you're interested in the activities attributed to McColo, the =20
Washington Post which first released the story has put together a flow =20=
chart, available here:
=
<http://voices.washingtonpost.com/securityfix/2008/11/the_badness_that_was=
_mccolo.html=20
>
----------------------------------------------
2. Emerging Cyber Threats for 2009
----------------------------------------------
Internet-surfing cell phones were one of five top =93emerging cyber =20
threats=94 named in a new report by Georgia Tech=92s Information =
Security =20
Center. The number of people who own iPhones or other smart phones is =20=
growing rapidly, and users are beginning to store and send personal =20
information from the devices, making them a potentially rich target =20
for cyber-attackers. "As these devices have richer functionality, =20
you=92re going to be able to install applications, and we=92re going to =20=
run into the same kind of problems that laptops and desktops have," =20
said Mustaque Ahamad, director of the center, in an interview.
Another top threat cited in the report was malware, software designed =20=
to harm or take over a computer. Malware is usually disguised as =20
something a user would want to open, like an e-mail attachment or a =20
link on a Web site. These days cyber-criminals are using Facebook and =20=
other social networks to distribute malware. "The recipient clicks on =20=
the link supposedly sent by his/her friend, and then sees a prompt to =20=
install the latest version of Flash Player in order to watch the video =20=
clip," the report says. "The user clicks to install the update, but =20
actually installs a piece of malware on the machine." The report =20
expects a tenfold increase in the detection of malware in 2008 =20
compared to 2007.
The good news: Microsoft operating system security has improved and =20
auto-update features help both corporate and consumer end users stay =20
up to date with patches. Many software vendors including Firefox, =20
Adobe and Apple, are also shipping auto-patch/update capability with =20
each new software release.
If you're interested in reading the report, I have obtained a copy =20
(PDF) and posted it online here:
<http://web.mit.edu/myeaton/Public/CyberThreatsReport2009.pdf>
-------------------------------------
3. Patches for New Browsers
-------------------------------------
Both Google Chrome and Apple Safari for Windows have had security =20
problems. Google patched Chrome last week Tuesday to prevent attackers =20=
from stealing files from PCs running the open-source browser.
=
<http://www.networkworld.com/news/2008/111408-google-patches-chrome-file-s=
tealing.html?code=3Dnlsecuritynewsal170179=20
>
On Friday, Apple added anti-phishing protection to Safari, the last =20
major browser to receive the feature that blocks known identity-=20
stealing sites. The company also patched 11 security bugs in the =20
program, the bulk of them specific to the Microsoft Windows version.
=
<http://www.networkworld.com/news/2008/111408-apple-plays-catch-up-adds-an=
ti-fraud.html?code=3Dnlsecuritynewsal170182=20
>
Comment from Ed Skoudis of SANS: "It is probably a good idea to not =20
rely on a browser for your main web surfing until it has aged a bit, =20
giving the vendor time to work out the most egregious security flaws. =20=
How much time? My gut says about a year is needed before a browser =20
becomes reasonably (but not perfectly) scrubbed. Until then, have fun =20=
playing with these shiny new toys on an experimental box."
IS&T also suggests that MIT users do not run browser applications on =20
browsers that are not yet tested by the IS&T Software Release Team, =20
which checks for compatibility with the other software MIT uses before =20=
it recommends or fully supports them. To learn what software IS&T =20
recommends and supports see:
<http://web.mit.edu/ist/topics/software/>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
Monique Yeaton
IT Security Awareness Consultant
MIT Information Services & Technology (IS&T)
(617) 253-2715
http://web.mit.edu/ist/security
---------------------------------------
Important: DO NOT GIVE OUT YOUR PASSWORDS!
Ignore emails asking you to provide yours. IS&T will *NEVER* ask you =20
for your password.
--Apple-Mail-37--117468816
Content-Type: text/html;
charset=WINDOWS-1252
Content-Transfer-Encoding: quoted-printable
<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; "><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">In =
this issue:</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">1. =
Biggest Spammers Shut Down (Temporarily)</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; ">2. Emerging Cyber Threats =
for 2009</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">3. Patches for New Browsers</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">------------------------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">1. =
Biggest Spammers Shut Down (Temporarily)</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; =
">------------------------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">The amount of spam being sent =
worldwide dropped noticeably about a week ago after McColo, a northern =
California-based hosting provider identified as hosting spamming =
organizations, was cut off by its Internet providers. It is =
estimated that McColo hosted the machines responsible for 75 percent of =
spam sent worldwide. The relief is likely to be temporary, as =
operations that send the unsolicited commercial email seek out other =
avenues to help them spread their wares. </div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">McColo's connection to spamming =
mainly comes from its hosting several of the biggest botnets: groups of =
hacked computers (also called 'zombies') that are tied to a single =
command center. Aside from hosting bot, spam and malware activity, =
McColo reportedly also hosted illegal content, such as child =
pornography. </div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">The decisions to pull the plugs on the hosting companies were made by =
their service providers, not by security researchers or law enforcement. =
The effort may not be enough to completely eradicate spammers and other =
cyber criminals. In fact, many operations that are shut down by one =
service provider often resurface a short time later at another location =
on the Internet.</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">Read full story:</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; "><<a =
href=3D"http://www.computerworld.com/action/article.do?command=3DviewArtic=
leBasic&taxonomyName=3Dnetwork_security&articleId=3D9120542&ta=
xonomyId=3D142&intsrc=3Dkc_top">http://www.computerworld.com/action/ar=
ticle.do?command=3DviewArticleBasic&taxonomyName=3Dnetwork_security&am=
p;articleId=3D9120542&taxonomyId=3D142&intsrc=3Dkc_top</a>></div><=
div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">If you're interested in the =
activities attributed to McColo, the Washington Post which first =
released the story has put together a flow chart, available =
here:</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; "><<a =
href=3D"http://voices.washingtonpost.com/securityfix/2008/11/the_badness_t=
hat_was_mccolo.html">http://voices.washingtonpost.com/securityfix/2008/11/=
the_badness_that_was_mccolo.html</a>></div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; min-height: 17px; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">----------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">2. =
Emerging Cyber Threats for 2009</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; =
">----------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Internet-surfing cell phones were =
one of five top =93emerging cyber threats=94 named in a new report by =
Georgia Tech=92s Information Security Center. The number of people who =
own iPhones or other smart phones is growing rapidly, and users are =
beginning to store and send personal information from the devices, =
making them a potentially rich target for cyber-attackers. "As these =
devices have richer functionality, you=92re going to be able to install =
applications, and we=92re going to run into the same kind of problems =
that laptops and desktops have," said Mustaque Ahamad, director of the =
center, in an interview.</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">Another top threat cited in the report was malware, software designed =
to harm or take over a computer. Malware is usually disguised as =
something a user would want to open, like an e-mail attachment or a link =
on a Web site. These days cyber-criminals are using Facebook and other =
social networks to distribute malware. "The recipient clicks on the link =
supposedly sent by his/her friend, and then sees a prompt to install the =
latest version of Flash Player in order to watch the video clip," the =
report says. "The user clicks to install the update, but actually =
installs a piece of malware on the machine." The report expects a =
tenfold increase in the detection of malware in 2008 compared to =
2007. </div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">The good news: Microsoft operating system security has improved and =
auto-update features help both corporate and consumer end users stay up =
to date with patches. Many software vendors including Firefox, Adobe and =
Apple, are also shipping auto-patch/update capability with each new =
software release.</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">If =
you're interested in reading the report, I have obtained a copy (PDF) =
and posted it online here:</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; color: rgb(0, 80, 176); "><span =
style=3D"color: #000000"><</span><span style=3D"text-decoration: =
underline"><a =
href=3D"http://web.mit.edu/myeaton/Public/CyberThreatsReport2009.pdf">http=
://web.mit.edu/myeaton/Public/CyberThreatsReport2009.pdf</a></span><span =
style=3D"color: #000000">></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; =
">-------------------------------------</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; ">3. Patches for New =
Browsers</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">-------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Both Google Chrome and Apple =
Safari for Windows have had security problems. Google patched Chrome =
last week Tuesday to prevent attackers from stealing files from PCs =
running the open-source browser. </div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; "><<a =
href=3D"http://www.networkworld.com/news/2008/111408-google-patches-chrome=
-file-stealing.html?code=3Dnlsecuritynewsal170179">http://www.networkworld=
.com/news/2008/111408-google-patches-chrome-file-stealing.html?code=3Dnlse=
curitynewsal170179</a>> </div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">On =
Friday, Apple added anti-phishing protection to Safari, the last major =
browser to receive the feature that blocks known identity-stealing =
sites. The company also patched 11 security bugs in the program, the =
bulk of them specific to the Microsoft Windows version. </div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
"><<a =
href=3D"http://www.networkworld.com/news/2008/111408-apple-plays-catch-up-=
adds-anti-fraud.html?code=3Dnlsecuritynewsal170182">http://www.networkworl=
d.com/news/2008/111408-apple-plays-catch-up-adds-anti-fraud.html?code=3Dnl=
securitynewsal170182</a>></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">Comment from Ed Skoudis of SANS: "It is probably a good idea to not =
rely on a browser for your main web surfing until it has aged a bit, =
giving the vendor time to work out the most egregious security flaws. =
How much time? My gut says about a year is needed before a =
browser becomes reasonably (but not perfectly) scrubbed. Until =
then, have fun playing with these shiny new toys on an experimental =
box."</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">IS&T also suggests that MIT users do not run browser applications =
on browsers that are not yet tested by the IS&T Software Release =
Team, which checks for compatibility with the other software MIT uses =
before it recommends or fully supports them. To learn what software =
IS&T recommends and supports see:</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; "><<a =
href=3D"http://web.mit.edu/ist/topics/software/">http://web.mit.edu/ist/to=
pics/software/</a>></div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
apple-content-edited=3D"true"><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; =
white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: =
0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><div><span class=3D"Apple-style-span" =
style=3D"font-size: 12px; "><div style=3D"font-size: 12px; "><br =
class=3D"khtml-block-placeholder"></div><div style=3D"font-size: 12px; =
">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D</div><div style=3D"font-size: 12px; ">Monique Yeaton</div><div =
style=3D"font-size: 12px; ">IT Security Awareness Consultant</div><div =
style=3D"font-size: 12px; ">MIT Information Services & Technology =
(IS&T)</div><div style=3D"font-size: 12px; ">(617) =
253-2715</div><div style=3D"font-size: 12px; "><a =
href=3D"http://web.mit.edu/ist/security">http://web.mit.edu/ist/security</=
a></div></span></div><div><br></div><div><span class=3D"Apple-style-span" =
style=3D"color: rgb(192, 0, 0); font-family: Arial; font-size: 12px; =
font-weight: bold; =
">---------------------------------------</span></div><div><font =
class=3D"Apple-style-span" color=3D"#C00000" face=3D"Arial" =
size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
"><b><span class=3D"Apple-style-span" style=3D"color: rgb(0, 0, 0); =
font-family: Helvetica; font-size: 14px; font-weight: normal; =
"><div><font class=3D"Apple-style-span" color=3D"#C00000" face=3D"Arial" =
size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
"><b>Important: DO NOT GIVE OUT YOUR =
PASSWORDS! </b></span></font></div><div><font =
class=3D"Apple-style-span" color=3D"#C00000" face=3D"Arial" =
size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
"><b>Ignore emails asking you to provide yours. IS&T will *NEVER* =
ask you for your =
password. </b></span></font></div></span></b></span></font></div></di=
v></span></div></span></div></span></div></span></div></span></div></span>=
</div></span></div></span></div></span> </div><br></body></html>=
--Apple-Mail-37--117468816--
--===============1762797442==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
ist-security-fyi mailing list
ist-security-fyi@mit.edu
To Unsubscribe http://mailman.mit.edu/mailman/listinfo/ist-security-fyi
--===============1762797442==--