[1909] in Security FYI
[IS&T Security-FYI] SFYI Newsletter, July 27, 2009
daemon@ATHENA.MIT.EDU (Monique Yeaton)
Mon Jul 27 16:50:22 2009
Message-Id: <14187EFD-1456-4517-88DF-9639BA3CF516@mit.edu>
From: Monique Yeaton <myeaton@mit.edu>
To: ist-security-fyi@mit.edu
Mime-Version: 1.0 (Apple Message framework v935.3)
Date: Mon, 27 Jul 2009 16:47:47 -0400
Cc: itss@mit.edu
Content-Type: multipart/mixed; boundary="===============0654414057=="
Errors-To: ist-security-fyi-bounces@mit.edu
--===============0654414057==
Content-Type: multipart/signed; boundary=Apple-Mail-77--162472086; micalg=sha1;
protocol="application/pkcs7-signature"
--Apple-Mail-77--162472086
Content-Type: multipart/alternative;
boundary=Apple-Mail-76--162472145
--Apple-Mail-76--162472145
Content-Type: text/plain;
charset=US-ASCII;
format=flowed;
delsp=yes
Content-Transfer-Encoding: 7bit
In this issue:
1. Flaw Found in Adobe Products
2. Microsoft Releasing Out-of-Band Bulletins
3. Who is Replying to Spam?
4. GMail's Anti-Phishing Key
5. U.S. CyberCom Approved
------------------------------------------
1. Flaw Found in Adobe Products
------------------------------------------
Adobe plans to patch a critical vulnerability in Flash, Reader and
Acrobat this week. The patches for Flash are scheduled to be available
by July 30 and patches for Reader and Acrobat on July 31. The flaw is
already being exploited.
Systems affected:
* Adobe Flash Player 10.0.22.87 and earlier 10.x versions
* Adobe Flash Player 9.0.159.0 and earlier 9.x versions
* Adobe Reader and Acrobat 9.1.2 and earlier 9.x versions
Read the full story here: <http://voices.washingtonpost.com/securityfix/2009/07/attackers_target_new_adobe_fla.html
>
--------------------------------------------------------
2. Microsoft Releasing Out-of-Band Bulletins
--------------------------------------------------------
Microsoft has sent advance notification of two out-of-band security
bulletins that the company is intending to release on July 28, 2009.
One bulletin will be for the Microsoft Visual Studio product line;
application developers should be aware of updates available affecting
certain types of applications.
The second bulletin contains defense-in-depth changes to Internet
Explorer to address attack vectors related to the Visual Studio
bulletin, as well as fixes for unrelated vulnerabilities that are
rated Critical.
Read the notification in full here: <http://www.microsoft.com/technet/security/bulletin/ms09-jul-ans.mspx
>
------------------------------------
3. Who is Replying to Spam?
------------------------------------
The anti-spam group MAAWG did a survey on consumer email behavior and
security awareness. MAAWG is the Messaging Anti-Abuse Working Group (www.maawg.org
). The survey showed that almost a third of consumers admitted to
responding to a message they suspected might be spam and about 80
percent of users doubted their computers were at risk of ever being
infected with a "bot," which is a covertly planted virus capable of
sending spam or causing other damage without the user's knowledge.
The report "A Look at Consumers' Awareness of Email Security and
Practices" (available as download from their website) is based on 800
interviews with computer users in the U.S. and Canada who said they
were not security experts and who used email addresses that were not
managed by a professional IT department. The survey also found that
about two-thirds of the respondents considered themselves "very" or
"somewhat" knowledgeable in Internet security. However, 21 percent
said they take no action to prevent abusive messages from entering
their inbox.
Read the full story here: <http://www.maawg.org/news/maawg090715>
MIT has a spam filter for incoming mail. Learn more about the new Spam
Quarantine service here:
<http://ist.mit.edu/news/spamquarantine>
------------------------------------
4. GMail's Anti-Phishing Key
------------------------------------
If you use Gmail (and I'm not suggesting or recommending that you do
or don't), and are a heavy user of either eBay or PayPal, you may have
some extra protection from phishing scams targeting customers of
these companies. Google has added a "super-trustworthy, anti-phishing
key" to its email service. Basically, Gmail is requiring that any
email coming from eBay or PayPal has to originate from their
respective domains. If the email addresses don't end in "@ebay.com" or
"@paypal.com," then Gmail rejects the email.
Read the full story here: <http://gmailblog.blogspot.com/2009/07/new-in-labs-super-trustworthy-anti.html
>
------------------------------------
5. U.S. CyberCom Approved
------------------------------------
Defense Secretary Robert Gates approved the creation of a unified U.S.
Cyber Command (CyberCom) to oversee the protection of military
networks against cyber threats. The decision follows President Barack
Obama's announcement in May that he will establish a new cyber-
security office at the White House, whose chief will coordinate all
government efforts to protect computer networks. CyberCom will operate
under U.S. Strategic Command for military cyberspace operations.
The proposal to create the new command has been expected for some time
and is part of an effort to address growing threats to Defense
Department and Pentagon networks from foreign and domestic threats. As
part of its mission, CyberCom is also expected to develop a range of
offensive cyber warfare capabilities.
Read the full story here: <http://www.computerworld.com/s/article/9134744/Defense_Secretary_Gates_approves_creation_of_U.S._Cyber_Command?taxonomyName=networking_and_internet
>
or here: <http://online.wsj.com/article/SB124579956278644449.html>
=
=
=
========================================================================
Find current and older issues of Security FYI Newsletter: <http://kb.mit.edu/confluence/x/ehBB
>
--Apple-Mail-76--162472145
Content-Type: text/html;
charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; "><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">In this issue:</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">1. Flaw Found in Adobe =
Products</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">2. Microsoft Releasing Out-of-Band =
Bulletins</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">3. Who is Replying to Spam?</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">4. =
GMail's Anti-Phishing Key</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">5. U.S. CyberCom Approved</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
">------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">1. =
Flaw Found in Adobe Products</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; =
">------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">Adobe plans to patch a critical =
vulnerability in Flash, Reader and Acrobat this week. The patches for =
Flash are scheduled to be available by July 30 and patches for Reader =
and Acrobat on July 31. The flaw is already being exploited.</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">Systems affected:</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; "> * Adobe Flash Player 10.0.22.87 =
and earlier 10.x versions</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; "> * Adobe Flash Player 9.0.159.0 =
and earlier 9.x versions</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; "> * Adobe Reader and Acrobat =
9.1.2 and earlier 9.x versions</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">Read =
the full story here: <<a =
href=3D"http://voices.washingtonpost.com/securityfix/2009/07/attackers_tar=
get_new_adobe_fla.html">http://voices.washingtonpost.com/securityfix/2009/=
07/attackers_target_new_adobe_fla.html</a>></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
">--------------------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">2. =
Microsoft Releasing Out-of-Band Bulletins</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; =
">--------------------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">Microsoft has sent advance =
notification of two out-of-band security bulletins that the company is =
intending to release on July 28, 2009.</div><p style=3D"margin: 0.0px =
0.0px 0.0px 0.0px; font: 14.0px Arial"> </p><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">One bulletin will be for the =
Microsoft Visual Studio product line; application developers should be =
aware of updates available affecting certain types of =
applications.</div><p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: =
14.0px Arial"> </p><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">The second bulletin contains defense-in-depth =
changes to Internet Explorer to address attack vectors related to the =
Visual Studio bulletin, as well as fixes for unrelated vulnerabilities =
that are rated Critical.</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">Read =
the notification in full here: <<a =
href=3D"http://www.microsoft.com/technet/security/bulletin/ms09-jul-ans.ms=
px">http://www.microsoft.com/technet/security/bulletin/ms09-jul-ans.mspx</=
a>></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; min-height: 16px; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">3. Who =
is Replying to Spam?</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">The anti-spam group MAAWG did a =
survey on consumer email behavior and security awareness. MAAWG is the =
Messaging Anti-Abuse Working Group (<a =
href=3D"http://www.maawg.org">www.maawg.org</a>). The survey showed that =
almost a third of consumers admitted to responding to a message they =
suspected might be spam and about 80 percent of users doubted their =
computers were at risk of ever being infected with a "bot," which is a =
covertly planted virus capable of sending spam or causing other damage =
without the user's knowledge. </div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">The =
report "A Look at Consumers' Awareness of Email Security and Practices" =
(available as download from their website) is based on 800 interviews =
with computer users in the U.S. and Canada who said they were not =
security experts and who used email addresses that were not managed by a =
professional IT department. The survey also found that about two-thirds =
of the respondents considered themselves "very" or "somewhat" =
knowledgeable in Internet security. However, 21 percent said they take =
no action to prevent abusive messages from entering their =
inbox. </div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">Read the full story here: =
<<a =
href=3D"http://www.maawg.org/news/maawg090715">http://www.maawg.org/news/m=
aawg090715</a>></div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">MIT has a spam filter for =
incoming mail. Learn more about the new Spam Quarantine service =
here:</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; "><<a =
href=3D"http://ist.mit.edu/news/spamquarantine">http://ist.mit.edu/news/sp=
amquarantine</a>></div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; min-height: 16px; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">4. =
GMail's Anti-Phishing Key</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; =
">------------------------------------</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; min-height: 16px; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">If you use Gmail (and I'm not suggesting or =
recommending that you do or don't), and are a heavy user of either eBay =
or PayPal, you may have some extra protection from phishing scams =
targeting customers of these companies. Google has added a =
"super-trustworthy, anti-phishing key" to its email service. Basically, =
Gmail is requiring that any email coming from eBay or PayPal has to =
originate from their respective domains. If the email addresses don't =
end in "@ebay.com" or "@paypal.com," then Gmail rejects the =
email.</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">Read the full story here: =
<<a =
href=3D"http://gmailblog.blogspot.com/2009/07/new-in-labs-super-trustworth=
y-anti.html">http://gmailblog.blogspot.com/2009/07/new-in-labs-super-trust=
worthy-anti.html</a>></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; =
">------------------------------------</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">5. U.S. CyberCom =
Approved</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; ">------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">Defense Secretary Robert Gates =
approved the creation of a unified U.S. Cyber Command (CyberCom) to =
oversee the protection of military networks against cyber threats. The =
decision follows President Barack Obama's announcement in May that he =
will establish a new cyber-security office at the White House, whose =
chief will coordinate all government efforts to protect computer =
networks. CyberCom will operate under U.S. Strategic Command for =
military cyberspace operations.</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">The =
proposal to create the new command has been expected for some time and =
is part of an effort to address growing threats to Defense Department =
and Pentagon networks from foreign and domestic threats. As part of its =
mission, CyberCom is also expected to develop a range of offensive cyber =
warfare capabilities.</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">Read the full story here: =
<<a =
href=3D"http://www.computerworld.com/s/article/9134744/Defense_Secretary_G=
ates_approves_creation_of_U.S._Cyber_Command?taxonomyName=3Dnetworking_and=
_internet">http://www.computerworld.com/s/article/9134744/Defense_Secretar=
y_Gates_approves_creation_of_U.S._Cyber_Command?taxonomyName=3Dnetworking_=
and_internet</a>></div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">or here: <<a =
href=3D"http://online.wsj.com/article/SB124579956278644449.html">http://on=
line.wsj.com/article/SB124579956278644449.html</a>></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">Find current and older issues =
of Security FYI Newsletter: <<a =
href=3D"http://kb.mit.edu/confluence/x/ehBB"><span =
style=3D"text-decoration: underline ; color: =
#2151aa">http://kb.mit.edu/confluence/x/ehBB</span></a>></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div></body></html>=
--Apple-Mail-76--162472145--
--Apple-Mail-77--162472086
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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--Apple-Mail-77--162472086--
--===============0654414057==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
ist-security-fyi mailing list
ist-security-fyi@mit.edu
To Unsubscribe http://mailman.mit.edu/mailman/listinfo/ist-security-fyi
--===============0654414057==--
