<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>
<channel>
	<title>Comments for Brian Klumpp, CISSP, PCI-QSA</title>
	<atom:link href="http://blogs.nuspire.com/bkblog/?feed=comments-rss2" rel="self" type="application/rss+xml" />
	<link>http://blogs.nuspire.com/bkblog</link>
	<description>My 2 bits on securing networks and compliance</description>
	<pubDate>Thu, 09 Sep 2010 03:27:36 +0000</pubDate>
	<generator>http://wordpress.org/?v=abc</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Clarifications on WPA/TKIP Vulnerabilities by Tobias Englund</title>
		<link>http://blogs.nuspire.com/bkblog/?p=66#comment-56</link>
		<dc:creator>Tobias Englund</dc:creator>
		<pubDate>Thu, 11 Feb 2010 00:19:53 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=66#comment-56</guid>
		<description>Well put Brian,

not only is it an isssue with TKIP and its weaknesses, it is often left out what is what. To protect an enterprise connected to a publicly available network (all wireless networks should be considered as such), there are the same fundamental requirements as any enterprise connecting to the Internet:
Authentication, Encryption and Integrity verification.
It is disturbing to see how more focus is put on encryption than authentication and with the common practice of a global passphrase jeopardizing access to the entire corporate network.
WPA2 is a subset of the equation and typically stands for encryption whereas the whole 802.11i standard also calls for the practice of the 802.1X standard for authentication. How the latter then is used is key to the strength of the actual protection. WPA2 is used by hardware manufacturers as to say that security is not an issue anymore. Anybody with insight to a typical retailer network can testify to the many potential inroads for an attacker. I wish the same standards would apply in the WiFi world as for any enterprise remote user with access to sensitive assets.</description>
		<content:encoded><![CDATA[<p>Well put Brian,</p>
<p>not only is it an isssue with TKIP and its weaknesses, it is often left out what is what. To protect an enterprise connected to a publicly available network (all wireless networks should be considered as such), there are the same fundamental requirements as any enterprise connecting to the Internet:<br />
Authentication, Encryption and Integrity verification.<br />
It is disturbing to see how more focus is put on encryption than authentication and with the common practice of a global passphrase jeopardizing access to the entire corporate network.<br />
WPA2 is a subset of the equation and typically stands for encryption whereas the whole 802.11i standard also calls for the practice of the 802.1X standard for authentication. How the latter then is used is key to the strength of the actual protection. WPA2 is used by hardware manufacturers as to say that security is not an issue anymore. Anybody with insight to a typical retailer network can testify to the many potential inroads for an attacker. I wish the same standards would apply in the WiFi world as for any enterprise remote user with access to sensitive assets.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on 3rd Party Applications Open Holes Too! by hotspot shield</title>
		<link>http://blogs.nuspire.com/bkblog/?p=72#comment-48</link>
		<dc:creator>hotspot shield</dc:creator>
		<pubDate>Fri, 06 Nov 2009 05:33:33 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=72#comment-48</guid>
		<description>It is a great post thanks for posting it!</description>
		<content:encoded><![CDATA[<p>It is a great post thanks for posting it!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on 3rd Party Applications Open Holes Too! by Sue Massey</title>
		<link>http://blogs.nuspire.com/bkblog/?p=72#comment-47</link>
		<dc:creator>Sue Massey</dc:creator>
		<pubDate>Thu, 05 Nov 2009 23:31:52 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=72#comment-47</guid>
		<description>Would you be interested in exchanging blogrolls links with my site? Please email me if you are interested</description>
		<content:encoded><![CDATA[<p>Would you be interested in exchanging blogrolls links with my site? Please email me if you are interested</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Security Steps for Compliance Purposes? Why Not Just for the Sake of Security? by derekpm</title>
		<link>http://blogs.nuspire.com/bkblog/?p=51#comment-30</link>
		<dc:creator>derekpm</dc:creator>
		<pubDate>Mon, 13 Jul 2009 01:35:14 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=51#comment-30</guid>
		<description>Rather interesting. Has few times re-read for this purpose to remember. Thanks for interesting article. Waiting for trackback</description>
		<content:encoded><![CDATA[<p>Rather interesting. Has few times re-read for this purpose to remember. Thanks for interesting article. Waiting for trackback</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Security Steps for Compliance Purposes? Why Not Just for the Sake of Security? by flash</title>
		<link>http://blogs.nuspire.com/bkblog/?p=51#comment-29</link>
		<dc:creator>flash</dc:creator>
		<pubDate>Sun, 05 Jul 2009 06:08:52 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=51#comment-29</guid>
		<description>Perfect!</description>
		<content:encoded><![CDATA[<p>Perfect!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Small Merchants and PCI Compliance - Part 2:  Management Buy-in by How I Make $5000 a Month Posting Links on Google</title>
		<link>http://blogs.nuspire.com/bkblog/?p=42#comment-23</link>
		<dc:creator>How I Make $5000 a Month Posting Links on Google</dc:creator>
		<pubDate>Fri, 26 Jun 2009 00:38:51 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=42#comment-23</guid>
		<description>Loved your latest post, by the way.</description>
		<content:encoded><![CDATA[<p>Loved your latest post, by the way.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Small Merchants and PCI Compliance - Part 2:  Management Buy-in by Katy</title>
		<link>http://blogs.nuspire.com/bkblog/?p=42#comment-22</link>
		<dc:creator>Katy</dc:creator>
		<pubDate>Wed, 24 Jun 2009 02:58:28 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=42#comment-22</guid>
		<description>Pretty nice post. I just came across your site and wanted to say 
that I have really liked reading your posts. Anyway 
I'll be subscribing to your feed and I hope you write again soon!</description>
		<content:encoded><![CDATA[<p>Pretty nice post. I just came across your site and wanted to say<br />
that I have really liked reading your posts. Anyway<br />
I&#8217;ll be subscribing to your feed and I hope you write again soon!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Small Merchants and PCI Compliance - Part 2:  Management Buy-in by Edwin Alanouf</title>
		<link>http://blogs.nuspire.com/bkblog/?p=42#comment-21</link>
		<dc:creator>Edwin Alanouf</dc:creator>
		<pubDate>Sat, 20 Jun 2009 16:27:55 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=42#comment-21</guid>
		<description>That is some great information Brian.  I think it it would also be helpful if the trainer had enough knowledge, or preperation to show the parallal relevancies of PCI to other compliancies standards that company possibly may have to adhere to in the future, or when dealing with over seas regulations.</description>
		<content:encoded><![CDATA[<p>That is some great information Brian.  I think it it would also be helpful if the trainer had enough knowledge, or preperation to show the parallal relevancies of PCI to other compliancies standards that company possibly may have to adhere to in the future, or when dealing with over seas regulations.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Small Merchants and PCI Compliance by brian.klumpp</title>
		<link>http://blogs.nuspire.com/bkblog/?p=37#comment-20</link>
		<dc:creator>brian.klumpp</dc:creator>
		<pubDate>Thu, 18 Jun 2009 22:28:42 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=37#comment-20</guid>
		<description>Part 2:  http://blogs.nuspire.com/bkblog/?p=42
More to come!</description>
		<content:encoded><![CDATA[<p>Part 2:  <a href="http://blogs.nuspire.com/bkblog/?p=42" rel="nofollow">http://blogs.nuspire.com/bkblog/?p=42</a><br />
More to come!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Small Merchants and PCI Compliance by Brian Klumpp, CISSP, PCI-QSA &#187; Small Merchants and PCI Compliance - Part 2</title>
		<link>http://blogs.nuspire.com/bkblog/?p=37#comment-19</link>
		<dc:creator>Brian Klumpp, CISSP, PCI-QSA &#187; Small Merchants and PCI Compliance - Part 2</dc:creator>
		<pubDate>Thu, 18 Jun 2009 22:23:50 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.nuspire.com/bkblog/?p=37#comment-19</guid>
		<description>[...] small merchant you now know that you have to be PCI compliant.  If not, you can read my last post here on the topic.  As discussed in my last post, you should start with an IT Policy and an IT Security [...]</description>
		<content:encoded><![CDATA[<p>[...] small merchant you now know that you have to be PCI compliant.  If not, you can read my last post here on the topic.  As discussed in my last post, you should start with an IT Policy and an IT Security [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
