[2401] in Security FYI
[IS&T Security-FYI] SFYI Newsletter, September 12, 2011
daemon@ATHENA.MIT.EDU (Monique Yeaton)
Mon Sep 12 15:43:24 2011
From: Monique Yeaton <myeaton@MIT.EDU>
To: "ist-security-fyi@mit.edu" <ist-security-fyi@MIT.EDU>
Date: Mon, 12 Sep 2011 15:42:07 -0400
Message-ID: <CA93D8CF.1C029%myeaton@exchange.mit.edu>
Content-Language: en-US
MIME-Version: 1.0
Cc: "itss@mit.edu" <itss@MIT.EDU>
Content-Type: multipart/mixed; boundary="===============1391564776=="
Errors-To: ist-security-fyi-bounces@MIT.EDU
--===============1391564776==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_CA93D8CF1C029myeatonexchangemitedu_"
--_000_CA93D8CF1C029myeatonexchangemitedu_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
In this issue:
1. Apache Denial-of-Service Update
2. DigiNotar Certificates Threat Averted by Vendors
3. Safer Browsing With Extensions
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
1. Apache Denial-of-Service Update
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
In the last Security FYI issue, we included a warning about the Apache web=
server DoS (denial of service) attack vulnerability, in which a relatively =
low number of requests directed at the server cause a denial of service con=
dition. After this warning went out, Red Hat released their patched Apache =
packages for RHEL 4, 5 and 6 on September 1.
Red Hat security update: <https://rhn.redhat.com/errata/RHSA-2011-1245.html=
<https://rhn.redhat.com/errata/RHSA-2011-1245.html%3E>>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
2. DigiNotar Certificates Threat Averted by Vendors
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Trust problems were caused when DigiNotar, a Dutch certificate authority, r=
eleased fraudulent SSL certificates two weeks ago. All major operating syst=
em (OS) vendors and browser developers have since released updates revoking=
the DigiNotar certificate.
Mozilla has released Firefox 3.6.22 and Firefox 6.0.2 to address this issue=
. Additional information can be found in the Mozilla Security Blog<http://b=
log.mozilla.com/security/2011/08/29/fraudulent-google-com-certificate/>.
Microsoft has removed the DigiNotar root certificates from the Microsoft Ce=
rtificate Trust List. This change affects all versions of Windows Vista, Wi=
ndows 7, Windows XP, Windows Server 2008, Windows Server 2008 R2, and Windo=
ws Server 2003. Additional information can be found in Microsoft Security A=
dvisory 2607712<http://www.microsoft.com/technet/security/advisory/2607712.=
mspx?pubDate=3D2011-08-29>.
Google Chrome users are protected from this attack due to Chrome's built-in=
certificate pinning feature. Google has also released Chrome 13.0.782.220 =
for Windows, Mac, Linux, and Chrome Frame to address this issue. Additional=
information can be found in the Google Security Blog<http://googleonlinese=
curity.blogspot.com/2011/08/update-on-attempted-man-in-middle.html> and in =
the Google Chrome Releases blog entry<http://googlechromereleases.blogspot.=
com/2011/09/stable-channel-update.html>.
Apple has released Security Update 2011-005<http://support.apple.com/kb/HT4=
920> for Mac OS X 10.6.8, Mac OS X Server 10.6.8, OS X Lion 10.7.1, and Lio=
n Server 10.7.1 to address this issue.
Adobe will be releasing an update to remove the DigiNotar certificate from =
the Adobe Approved Trust List. In the meantime, Adobe has released a blog =
entry<http://blogs.adobe.com/psirt/2011/09/update-on-diginotar-and-the-adob=
e-approved-trust-list-aatl.html> containing a work-around for Adobe Reader =
and Acrobat 9, and Adobe Reader and Acrobat X.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
3. Safer Browsing With Extensions
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
Did you know that you can make your browser even more secure by installing =
extensions? Let's take Firefox as an example and look at some Firefox add-o=
ns that are designed to protect you when browsing the Web:
* Want to prevent ads from appearing on the sites you visit and that cou=
ld potentially take you to more dangerous sites? Install Adblock Plus.
* Need protection against JavaScript, Java and other executable content =
that could cause cross-site scripting attacks (XSS), cross-zone DNS rebindi=
ng / CSRF attacks (router hacking) and Clickjacking attempts? Install NoScr=
ipt.
* Would you like to know which sites to trust? Install WOT.
* Want to know in which country the webserver resides that you're connec=
ted to? Install Flagfox.
* Want to preview sites before you click on their links? Install CoolPre=
views.
* Ever wonder if you're being tracked by Google, eBay or YouTube and wan=
t to block them? Install BetterPrivacy or Ghostery.
Find out more about Firefox extensions here: <https://addons.mozilla.org/en=
-US/firefox/extensions/><https://addons.mozilla.org/en-US/firefox/extension=
s/%3E>
Chrome extensions: <https://chrome.google.com/extensions>
Safari extensions: <https://extensions.apple.com/>
IE extensions: <http://www.ieaddons.com/en/>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D
Read all Security FYI Newsletter articles and submit comments online at htt=
p://securityfyi.wordpress.com/.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D
Monique Yeaton
IT Security Communications Consultant
MIT Information Services & Technology (IS&T)
(617) 253-2715
http://ist.mit.edu/security
--_000_CA93D8CF1C029myeatonexchangemitedu_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode:=
space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-si=
ze: 14px; font-family: Calibri, sans-serif; "><div><div><div><p style=3D"ma=
rgin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height: 16.0px"><br>=
</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">In this is=
sue:</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">1. Apache =
Denial-of-Service Update</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">2. DigiNot=
ar Certificates Threat Averted by Vendors</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">3. Safer B=
rowsing With Extensions</p><p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; fon=
t: 14.0px Arial"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">1. Apache =
Denial-of-Service Update</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">In the las=
t Security FYI issue, we included a warning about the Apache webserve=
r DoS (denial of service) attack vulnerability, in which a relatively low n=
umber of requests directed at the server cause a denial of service conditio=
n. After this warning went out, Red Hat released their patched Apache packa=
ges for RHEL 4, 5 and 6 on September 1.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Red Hat se=
curity update: <<a href=3D"https://rhn.redhat.com/errata/RHSA-2011-1245.=
html%3E">https://rhn.redhat.com/errata/RHSA-2011-1245.html</a>></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial"><br></p><p=
style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">2. DigiNot=
ar Certificates Threat Averted by Vendors</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Trust prob=
lems were caused when DigiNotar, a Dutch certificate authority, released fr=
audulent SSL certificates two weeks ago. All major operating system (O=
S) vendors and browser developers have since released updates revoking the =
DigiNotar certificate. </p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Mozilla ha=
s released Firefox 3.6.22 and Firefox 6.0.2 to address this issue. Addition=
al information can be found in the <a href=3D"http://blog.mozilla.com/secur=
ity/2011/08/29/fraudulent-google-com-certificate/">Mozilla Security Blog</a=
>.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Microsoft =
has removed the DigiNotar root certificates from the Microsoft Certificate =
Trust List. This change affects all versions of Windows Vista, Windows 7, W=
indows XP, Windows Server 2008, Windows Server 2008 R2, and Windows Se=
rver 2003. Additional information can be found in <a href=3D"http://ww=
w.microsoft.com/technet/security/advisory/2607712.mspx?pubDate=3D2011-08-29=
">Microsoft Security Advisory 2607712</a>.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Google Chr=
ome users are protected from this attack due to Chrome's built-in cert=
ificate pinning feature. Google has also released Chrome 13.0.782.220 =
for Windows, Mac, Linux, and Chrome Frame to address this issue. Addit=
ional information can be found in the <a href=3D"http://googleonlinesecurit=
y.blogspot.com/2011/08/update-on-attempted-man-in-middle.html">Google Secur=
ity Blog</a> and in the Google Chrome Releases <a href=3D"http://googl=
echromereleases.blogspot.com/2011/09/stable-channel-update.html">blog entry=
</a>.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Apple has =
released <a href=3D"http://support.apple.com/kb/HT4920">Security Update 201=
1-005</a> for Mac OS X 10.6.8, Mac OS X Server 10.6.8, OS X Lion 10.7.1, an=
d Lion Server 10.7.1 to address this issue.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Adobe will=
be releasing an update to remove the DigiNotar certificate from the Adobe =
Approved Trust List. In the meantime, Adobe has released a <a href=3D=
"http://blogs.adobe.com/psirt/2011/09/update-on-diginotar-and-the-adobe-app=
roved-trust-list-aatl.html">blog entry</a> containing a work-around for Ado=
be Reader and Acrobat 9, and Adobe Reader and Acrobat X.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial"><br></p><p=
style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">3. Safer B=
rowsing With Extensions</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</p=
>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Did you kn=
ow that you can make your browser even more secure by installing extensions=
? Let's take Firefox as an example and look at some Firefox add-ons that ar=
e designed to protect you when browsing the Web: </p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<ul style=3D"list-style-type: disc">
<li style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Want to p=
revent ads from appearing on the sites you visit and that could potentially=
take you to more dangerous sites? Install Adblock Plus. </li>
<li style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Need prot=
ection against JavaScript, Java and other executable content that could cau=
se cross-site scripting attacks (XSS), cross-zone DNS rebinding / CSRF atta=
cks (router hacking) and Clickjacking attempts? Install NoScript. </li=
>
<li style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Would you=
like to know which sites to trust? Install WOT. </li>
<li style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Want to k=
now in which country the webserver resides that you're connected to? Instal=
l Flagfox. </li>
<li style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Want to p=
review sites before you click on their links? Install CoolPreviews. </=
li><li style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Ever w=
onder if you're being tracked by Google, eBay or YouTube and want to block =
them? Install BetterPrivacy or Ghostery.</li>
</ul>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Find out m=
ore about Firefox extensions here: <<a href=3D"https://addons.mozilla.or=
g/en-US/firefox/extensions/%3E">https://addons.mozilla.org/en-US/firefox/ex=
tensions/></a></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Chrome ext=
ensions: <https://chrome.google.com/extensions> </p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Safari ext=
ensions: <https://extensions.apple.com/></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">IE extensi=
ons: <http://www.ieaddons.com/en/></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Read all S=
ecurity FYI Newsletter articles and submit comments online at htt=
p://securityfyi.wordpress.com/.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial; min-height=
: 16.0px"><br></p><p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px=
Arial; min-height: 16.0px"><br></p></div><div><div style=3D"word-wrap: bre=
ak-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; f=
ont-family: Helvetica; "><span class=3D"Apple-style-span" style=3D"border-c=
ollapse: separate; -webkit-border-horizontal-spacing: 0px; -webkit-border-v=
ertical-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-siz=
e: 14px; font-style: normal; font-variant: normal; font-weight: normal; let=
ter-spacing: normal; line-height: normal; -webkit-text-decorations-in-effec=
t: none; text-indent: 0px; -webkit-text-size-adjust: auto; text-transform: =
none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><spa=
n class=3D"Apple-style-span" style=3D"border-collapse: separate; -webkit-bo=
rder-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; color: =
rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; line-hei=
ght: normal; -webkit-text-decorations-in-effect: none; text-indent: 0px; -w=
ebkit-text-size-adjust: auto; text-transform: none; orphans: 2; white-space=
: normal; widows: 2; word-spacing: 0px; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; -webkit-border-horizontal-spacing: 0px;=
-webkit-border-vertical-spacing: 0px; color: rgb(0, 0, 0); font-family: He=
lvetica; font-size: 14px; font-style: normal; font-variant: normal; font-we=
ight: normal; letter-spacing: normal; line-height: normal; -webkit-text-dec=
orations-in-effect: none; text-indent: 0px; -webkit-text-size-adjust: auto;=
text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spa=
cing: 0px; "><span class=3D"Apple-style-span" style=3D"border-collapse: sep=
arate; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spac=
ing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; fon=
t-style: normal; font-variant: normal; font-weight: normal; letter-spacing:=
normal; line-height: normal; -webkit-text-decorations-in-effect: none; tex=
t-indent: 0px; -webkit-text-size-adjust: auto; text-transform: none; orphan=
s: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class=3D"A=
pple-style-span" style=3D"border-collapse: separate; -webkit-border-horizon=
tal-spacing: 0px; -webkit-border-vertical-spacing: 0px; color: rgb(0, 0, 0)=
; font-family: Helvetica; font-size: 14px; font-style: normal; font-variant=
: normal; font-weight: normal; letter-spacing: normal; line-height: normal;=
-webkit-text-decorations-in-effect: none; text-indent: 0px; -webkit-text-s=
ize-adjust: auto; text-transform: none; orphans: 2; white-space: normal; wi=
dows: 2; word-spacing: 0px; "><span class=3D"Apple-style-span" style=3D"bor=
der-collapse: separate; -webkit-border-horizontal-spacing: 0px; -webkit-bor=
der-vertical-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; fon=
t-size: 12px; font-style: normal; font-variant: normal; font-weight: normal=
; letter-spacing: normal; line-height: normal; -webkit-text-decorations-in-=
effect: none; text-indent: 0px; -webkit-text-size-adjust: auto; text-transf=
orm: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "=
><span class=3D"Apple-style-span" style=3D"border-collapse: separate; -webk=
it-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; co=
lor: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: nor=
mal; font-variant: normal; font-weight: normal; letter-spacing: normal; lin=
e-height: normal; -webkit-text-decorations-in-effect: none; text-indent: 0p=
x; -webkit-text-size-adjust: auto; text-transform: none; orphans: 2; white-=
space: normal; widows: 2; word-spacing: 0px; "><div style=3D"font-size: 12p=
x; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><span cla=
ss=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-st=
yle-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" styl=
e=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-size=
: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; ">Moni=
que Yeaton</span></span></span></span></span></span></div><div style=3D"fon=
t-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
"><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=
=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-styl=
e-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=
=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-size:=
12px; ">IT Security Communications Consultant</span></span></span></span><=
/span></span></div><div style=3D"font-size: 12px; "><span class=3D"Apple-st=
yle-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" styl=
e=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-size=
: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><spa=
n class=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"App=
le-style-span" style=3D"font-size: 12px; ">MIT Information Services & T=
echnology (IS&T)</span></span></span></span></span></span></div><div st=
yle=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-si=
ze: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><s=
pan class=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"A=
pple-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-spa=
n" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"fo=
nt-size: 12px; ">(617) 253-2715</span></span></span></span></span></span></=
div><div style=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=
=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-size:=
12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><span=
class=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"Appl=
e-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" =
style=3D"font-size: 12px; ">http://ist.mit.edu/security</span></span></span=
></span></span></span></div><div style=3D"font-size: 12px; "><br class=3D"k=
html-block-placeholder"></div><br class=3D"Apple-interchange-newline"></spa=
n></span></span></span></span></span></span></div></div></div></div></body>=
</html>
--_000_CA93D8CF1C029myeatonexchangemitedu_--
--===============1391564776==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
ist-security-fyi mailing list
ist-security-fyi@mit.edu
To Unsubscribe http://mailman.mit.edu/mailman/listinfo/ist-security-fyi
--===============1391564776==--
