<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: MBTA vs. MIT</title>
	<atom:link href="http://spiresecurity.com/?feed=rss2&#038;p=146" rel="self" type="application/rss+xml" />
	<link>http://spiresecurity.com/?p=146</link>
	<description>Risk and Cybersecurity Analysis</description>
	<lastBuildDate>Wed, 21 Aug 2013 23:28:51 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: Spire Security Viewpoint</title>
		<link>http://spiresecurity.com/?p=146&#038;cpage=1#comment-164</link>
		<dc:creator>Spire Security Viewpoint</dc:creator>
		<pubDate>Thu, 21 Aug 2008 10:29:56 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=146#comment-164</guid>
		<description><![CDATA[&lt;strong&gt;Response to Schneier on Full Disclosure&lt;/strong&gt;

As I mentioned in a previous post, the MBTA v. MIT scenario is extremely distasteful to me. I do believe the MIT students have a &quot;right&quot; to disclose the information they had. I also believe they increase risk in the process.
]]></description>
		<content:encoded><![CDATA[<p><strong>Response to Schneier on Full Disclosure</strong></p>
<p>As I mentioned in a previous post, the MBTA v. MIT scenario is extremely distasteful to me. I do believe the MIT students have a &#8220;right&#8221; to disclose the information they had. I also believe they increase risk in the process.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andy Steingruebl</title>
		<link>http://spiresecurity.com/?p=146&#038;cpage=1#comment-163</link>
		<dc:creator>Andy Steingruebl</dc:creator>
		<pubDate>Sun, 17 Aug 2008 17:26:33 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=146#comment-163</guid>
		<description><![CDATA[Pete,

It was the phrase &quot;I get how maddening that is, and it is even more maddening for me because I have to defend the MBTA&#039;s right to protect itself against the exposure of this insecure junk&quot;  that I took issue with.  I don&#039;t believe they have a right to protect themselves in this circumstance, at least not as they have done.

Perhaps I&#039;m just misinterpreting what you wrote.

]]></description>
		<content:encoded><![CDATA[<p>Pete,</p>
<p>It was the phrase &#8220;I get how maddening that is, and it is even more maddening for me because I have to defend the MBTA&#8217;s right to protect itself against the exposure of this insecure junk&#8221;  that I took issue with.  I don&#8217;t believe they have a right to protect themselves in this circumstance, at least not as they have done.</p>
<p>Perhaps I&#8217;m just misinterpreting what you wrote.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pete Lindstrom</title>
		<link>http://spiresecurity.com/?p=146&#038;cpage=1#comment-162</link>
		<dc:creator>Pete Lindstrom</dc:creator>
		<pubDate>Sun, 17 Aug 2008 14:38:59 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=146#comment-162</guid>
		<description><![CDATA[@Andy -

While I agree that the legal issues are interesting, that wasn&#039;t really the focus of this post. My intention was to comment on the immediate and near-term impact on risk, even under distasteful circumstances.
]]></description>
		<content:encoded><![CDATA[<p>@Andy -</p>
<p>While I agree that the legal issues are interesting, that wasn&#8217;t really the focus of this post. My intention was to comment on the immediate and near-term impact on risk, even under distasteful circumstances.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andy Steingruebl</title>
		<link>http://spiresecurity.com/?p=146&#038;cpage=1#comment-161</link>
		<dc:creator>Andy Steingruebl</dc:creator>
		<pubDate>Sun, 17 Aug 2008 04:36:41 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=146#comment-161</guid>
		<description><![CDATA[Pete,

The question here isn&#039;t one of harm.  The worst harm the MBTA is claiming is some financial damage.  The first amendment is quite clear on this point, as is supreme court case law.  The constitution is the controlling legal document, not the CFAA, and the judge mistakenly said, and the MBTA claimed.

I&#039;m hoping that this doesn&#039;t need to turn into a protracted legal battle.

For a nice read on previous first amendment cases I recommend &quot;Speaking Freely&quot; by Floyd Abrams.

None of this deals with whether the students could/should have disclosed responsibly.  Since they didn&#039;t commit a crime, they can&#039;t be prosecuted and as such, we can wish all day for how they could have done this differently, we simply shouldn&#039;t ask the government to step in and enforce that viewpoint.


]]></description>
		<content:encoded><![CDATA[<p>Pete,</p>
<p>The question here isn&#8217;t one of harm.  The worst harm the MBTA is claiming is some financial damage.  The first amendment is quite clear on this point, as is supreme court case law.  The constitution is the controlling legal document, not the CFAA, and the judge mistakenly said, and the MBTA claimed.</p>
<p>I&#8217;m hoping that this doesn&#8217;t need to turn into a protracted legal battle.</p>
<p>For a nice read on previous first amendment cases I recommend &#8220;Speaking Freely&#8221; by Floyd Abrams.</p>
<p>None of this deals with whether the students could/should have disclosed responsibly.  Since they didn&#8217;t commit a crime, they can&#8217;t be prosecuted and as such, we can wish all day for how they could have done this differently, we simply shouldn&#8217;t ask the government to step in and enforce that viewpoint.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: kurt wismer</title>
		<link>http://spiresecurity.com/?p=146&#038;cpage=1#comment-160</link>
		<dc:creator>kurt wismer</dc:creator>
		<pubDate>Sat, 16 Aug 2008 17:56:15 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=146#comment-160</guid>
		<description><![CDATA[it seems a shame, then, that the mbta exposed more information in their court documents than the mit students were going to expose in their presentation...

as i understand it, the students had no intention of revealing sufficient details to help people mount an attack and if mbta had made it clear that they wanted to see a copy of the presentation at an earlier date then a lot of nonsense that&#039;s occurred since wouldn&#039;t have happened and the confidential document the students prepared for the mbta that DID contain sufficient detail to help an attacker wouldn&#039;t have found it&#039;s way into mbta&#039;s public court documents...

i too think the mbta should have the right to keep secret certain details that could have cost them a lot of money, but i think they&#039;ve handled the issue in a completely incompetent manner...
]]></description>
		<content:encoded><![CDATA[<p>it seems a shame, then, that the mbta exposed more information in their court documents than the mit students were going to expose in their presentation&#8230;</p>
<p>as i understand it, the students had no intention of revealing sufficient details to help people mount an attack and if mbta had made it clear that they wanted to see a copy of the presentation at an earlier date then a lot of nonsense that&#8217;s occurred since wouldn&#8217;t have happened and the confidential document the students prepared for the mbta that DID contain sufficient detail to help an attacker wouldn&#8217;t have found it&#8217;s way into mbta&#8217;s public court documents&#8230;</p>
<p>i too think the mbta should have the right to keep secret certain details that could have cost them a lot of money, but i think they&#8217;ve handled the issue in a completely incompetent manner&#8230;</p>
]]></content:encoded>
	</item>
</channel>
</rss>
