Archive

Archive for November, 2005

峨眉山报国寺、金顶、万佛顶、万年寺

November 25th, 2005 2 comments

到成都峨眉山参加一个市场活动,住在红珠山宾馆,这里有茂林修竹,小溪流水,附近空气清新,景色怡人,更有报国寺、卧虎寺等古刹名寺。下面是报国寺门票上所印“峨眉山报国寺简介”:

报国寺,原名会宗堂,为明光道人于万历四十三年(公元1615年)所建。祀普贤、广成子、楚狂牌位,无塑像,取释、道、儒三教会宗之意。清顺治时,行僧闻达禅师重修。康熙四十二年(公元1703年),取佛经中“四恩”之一的报国恩意,更名“报国寺”。由康熙御题,知县王藩代书“报国寺”金字横匾悬于山门之上。

寺周古楠修竹掩映,十分庄严伟丽。山门、弥勒殿、大雄殿、七佛殿、普贤殿以及客舍僧寮百间,布局井然,排列有序。还配有花影厅、七香轩、吟翠楼、待月山房等庭院建筑,并有花木点缀其间,即崇宏又雅丽,不啻为“名山起点”的第一大寺。

从雷洞坪作缆车到达金顶,缆车从云中钻出来,眼前立刻充满了晶莹透亮的雪松,还有蓝的多年没有见过的天空。站在金顶上,可以望见远远的贡嘎雪山,白皑皑的,纯洁的贡嘎雪山。

乘坐小火车到了万佛顶,撞钟三下祈福许愿。下得塔来,远望那无边的云海,心里有些恍惚的感觉,分不清是云是海,是俗境、还是仙界。

下午到万年寺,不愧是四大佛教圣地,每座寺院都宏伟壮观,别具特色:

万年寺为东晋隆安三年(公元399年)慧持禅师开建的普贤寺。唐慧通禅师于僖宗光启三年(公元887年)重建,改名白水寺。宋太平兴国五年(公元980年),茂真禅师扩建,改名白水普贤寺。内敕铸普贤骑象铜像,通高7.4米,象身长4.7米,重62吨。明万历二十八年(公元1600年)奉慈圣诏,遣中贵二人,赐金台泉禅师,仿印度热那寺样式,建无梁砖殿,殿壁两侧上方有横珑,上三层供铁佛3000;下三层供500罗汉,寺内还珍藏有一枚明万历皇帝赐的铜印;嘉靖年间锡兰(今斯里兰卡)友人送的“伽叶佛牙”、贝叶经,都是针对的文物。

万年寺右临石笋峰,群峰竟秀,古木葱茏,秋来层林尽染,“白云轻飞,黄叶点水”,颇有诗情画意,故称“白水秋风”。

Categories: Security Tags:

[Chinese]SOX Compliance and Related Organizations

November 25th, 2005 2 comments

这几天还在看萨班斯法案的东西,SEC要求上市公司以及向它提交财务报表的公司都要符合萨班斯SOX法案,其中的404条款和302条款提到了符合过程中IT控制的责任,但是没有提具体应该部署哪些“控制”。推荐大家参照COSO的符合性框架,COSO的符合性框架只提了五个层次的框架,但是还是没有指明到底应该部署哪些控制。于是关于具体控制选择指导就落到了CoBIT的肩上。ITGI的白皮书中特意强调没有”one-size-fits-all”的解决方案,每个企业应该根据自己的实际情况来决定IT控制的选择。但是,你的选择对不对呢?要看外部审计公司的审定。按照这个逻辑,这些外部审计公司(他们同时还作咨询业务)岂不是既是规则制订者,又是裁决者了。本身违反了SOD(Segregation of Duties)原则。这个看法可能不全面,甚至不对,大家批评指正。

下面是顺手记下的几个相关组织的情况。

* COSO :: The Committee of Sponsoring Organization of the Treadway Commission, 隶属于美国国会的反对虚假财务报告委员会(NCFR). COSO是一个通过商业道德、有效的内部控制和公司治理结构以致力于改善财务报告的美国民间组织。COSO形成于1985年。研究导致虚假财务报告的偶发因素,并为上市公司及其独立审计师,为SEC(美国证券交易委员会)和其他监管机构以及教育机构提供建议。该委员会由美国五个主要财务职业协会共同主办:AAA(美国会计学会)、AICPA(美国注册会计师协会)、FEI(财务经理协会)、IIA(内部审计师协会)和 NAA(全国会计师协会,现为 IMA、管理会计师协会)。它完全独立于各主办组织。代表来自于工业、公共会计、投资公司和NYSE(纽约证券交易所)。由于该委员会的第一任主席是 James C.Treadway,因此通常称为Treadway委员会。
* PCAOB :: Public Company Accounting Oversight Board 公众公司会计监管委员会
* ITGI :: IT Governance Institute 信息技术治理研究院(学会),该组织由很多咨询公司和大企业的资深人士组成,其出版的SOX符合与IT控制白皮书非常值得大家读一读。其他不少讲萨班斯SOX符合性的PPT,图都是取材于该白皮书。网址是http://www.itgi.org

萨班斯法案有很多误称,想一下子完全拼写正确可不那么容易。看看下面这么多的错别字:

SOX Humor: What is common among the following words: SarbanesOxley, sarbanes ox, Sabanes Oxley, Sabannes Oxley, sabanas, Saban Oxley, Sabane Oxley, sarban oxly, sorbonne oxley, sarban oxley, sarbannes oxley, sarbane-oxley, sarbanis oxley, sarbanne oxley, sarbanes oaxley, sarban oaxley, sarbanese oxley, sarbonnes oaxley, sorbanne oaxley, serbanes oaxley, sarbane oaxley, Sarbaines Oxley, sarbanesh oxley, Sarbaines Oxely, sarbenes oxley, Sorbane Oxley, Sarbanes Oakley, Sarbane Oxly, Sarbonnes Oxley, Sarbanas Oxlay, sarbane oakley, akslays, sarbain aksley, sarban aksleys, sarbane ausley, sarbans auxey, sarbarnes auxley, sarbin axlays, sabranes oxl, sabarnes axley, sabines exley, sabones osley, sarbone, sarboness, sardane, serbanss, serbians, sirbanes, sirbaness, sirbans, sirbanss, sirbens Oxley, sirbenss Oxley, sorbain Oxley, sorbaine Oxley, sorbanes Oxley, sorbaness Oxley, sorbenes Oxley, sorbeness Oxley, sorbian Oxley?

在国内萨班斯,萨宾斯的称呼也是都有的,不能说那个对,那个不对。你喜欢那个就用那个就是了

Categories: Security Tags:

历史档案-我为Sun打补丁

November 24th, 2005 7 comments

下面的短文是大概98年什么时候写的,那时候刚开始接受几台Sun Solaris机器的安全维护,”菜鸟”上路,边学边练,倒也开心,感觉天天都有新的收获。这个短文是为中计报的工程师手记专栏写的,但是没有发表。翻出来也挺有意思。98年时候的电信机房还是Sun的天下,工程师学的、用的都是Solaris。现在不同了,IBM签下越来越多的移动公司,HP也斩获大部分市场份额,Sun节节败退的感觉。

给系统打补丁是管理员的日常工作,尤其是选择了SUN工作站和Solaris以后,在获得了易用性的同时,也将自己和“补丁(patch)”“补丁包(patch-cluster)”紧紧联系在了一起。系统已经有半年多没有打过新补丁了,然而期间报导的系统漏洞却一个接一个地不停,尤其是几个关键系统程序的安全漏洞,像rpc.statd,automountd,rpc.ttdbserver,in.named等,并且我们的几个服务器在检查中连续出现被攻击甚至入侵的征兆。我感到越来越不安,决定下载一个最新的补丁包给系统们升升级,也安慰安慰自己。 Read more…

Categories: -Chinese- Tags: , ,

[Chinese]Skype与中国固网运营商的合作模式

November 18th, 2005 2 comments

前面的预测,Skype果然开始了与国内运营商的合作谈判,但是谈判会如何进行呢?国际上,将会越来越多的大大小小的厂商会推出基于P2P技术的各种新产品,竞争地位的运营商推出相应的应用来挑战主导运营商,都会全力来赶这趟P2P大潮。电信和网通两大主导固网运营商在信产部条文保护时间内,必须尽快研究拿出战略性的、全局性的对策,并迅速执行落实,不能停留在试探性的、测试性的“控制”活动上。疏导不受控业务的同时,开拓可控的P2P业务平台,以及相应的计费运营模式。时间越来越紧迫了。 Read more…

Categories: -Chinese-, P2P Tags: , ,

[Chinese] SIG (Security Immunity Gateway) of Huawei

November 14th, 2005 10 comments

下面是从华为公司网站上看到的关于华为安全免疫系统 SIG 的描述:

从网络蠕虫病毒的最大源头--终端用户计算机入手,检测用户计算机的安全状态。对不安全的计算机,提示其进行系统加固或杀毒操作。对于已经感染蠕虫病毒的计算机,根据安全接入策略,从网络接入层暂时隔离或限制,从而解决网络上蠕虫病毒泛滥的问题。

同时SIG系统还能够检测非法的VoIP用户,从接入层杜绝非法VoIP泛滥,减少国家和运营商的损失。

使用SIG,我们可以实现以下三点目标:
1、从最为复杂的问题出发点–用户的终端PC入手,自动检测用户终端病毒,加强弱点管理。
2、自动进行病毒检测,对终端用户提供增值服务。
3、提供阻断非法VOIP功能,提高运营商增量收入。

从 这段功能描述上看, SIG有些像思科公司的NAC计划,从终端入手治理网络安全威胁。可是,就非法VoIP的检测、阻断的功能描述上看,不知道这样的产品如何推向市场?与运 营商合作、由运营商推向自己的ADSL注册用户、阻断非法VoIP来帮助运营商提高增量收入(不知道华为SIG如何定义非法和合法VoIP)?那用户肯定 不愿意安装啊,我使用ADSL,就是想VoIP,我还想视频呢。

原来记得华为的NAC对应方案应该是EAD(端点准入防御),EAD面向用户侧的终端、SIG(从名字上看)面向运营商侧的网关设备?或许应该这样理解。

前面提到过国内桌面管理市场上的厂商,例如国外的CA, Microsoft, Landesk, BigFix, 国内的联创和华为等,看来大家的产品定位还是挺有”特色“的。

Categories: -English- Tags: , , ,

UTM (Unified Threat Management) Definition

November 14th, 2005 5 comments

According to IDC, UTM (Unified Threat Management) security appliances are defined as:

UTM security appliance products include multiple security features integrated into one box. To be included in this category, as opposed to other segments, the appliance MUST contain the ability to perform network firewalling, network intrusion detection and prevention, and gateway antivirus (AV). All of the capabilities in the appliance need not be utilised, but the functions must exist inherently in the appliance. In these products, the individual components cannot be separated.

Basically, UTM security appliances are charactered as some integration of the follow 6 features in one boxes:

  • * Firewall – these devices are typically deployed at the network perimeter, and therefore robust, stateful firewall capabilities with NAT are required.
  • * VPN – often deployed as branch office solutions on a corporate WAN, the ability to create a small number of secure VPN tunnels is essential.
  • * IDS/IPS – a firewall only enforces policy, and if that policy includes allowing inbound HTTP traffic to Web servers on the DMZ, then there is nothing the firewall can do to prevent HTTP exploits from subverting the target Web server. The IPS capability will detect and block such attempted exploits at the network perimeter, preventing the malicious traffic from ever reaching the server. An IDS-only capability can detect exploits and raise alerts, but will be unable to block the malicious traffic.
  • * Anti Virus – gateway Anti Virus prevents inbound virus traffic at the edge of the network, thus reinforcing desktop security solutions and blocking viruses before they reach the desktop. This solution can also prevent infected machines from propagating viruses outside the corporate network.
  • * Anti Spam – gateway Anti Spam can tag inbound e-mail, allowing it to be handled more effectively by desktop filtering solutions, or can block suspected spam mails completely. This solution can also prevent internal hosts from sending spam mail outside the corporate network.
  • * URL Filtering – using a constantly-updated database of categorised URLs, a gateway URL filtering solution can prevent employees from accessing objectionable or inappropriate Web sites from the corporate network
  • * Content Filtering – by scanning Web and mail traffic for specific content, a gateway content filtering solution can prevent objectionable or inappropriate material from passing into, or out of, the corporate network.

Categories: -English-, Security Tags: ,

Comment to “Skype Blocked at China”

November 11th, 2005 3 comments

At a previous post, “Skype’s road to China“, I introduced my view point of Skype at China, not bright as they are at other lands, due to the restrictions of the regulations and market circumstances. Along with the emerging technology/product from Verso, the “blocking of PC-to-phone”, ie. SkypeOut, was reported to be blocked at Shenzhen and other three cities at China.

A lot of report titiled “Skype-blocked at China” were headlined at many of world famouse relevant newpapers and journals. That kind of activity was even regarded as “bureaucratic politics” by Clark, managing director of BDA China.

The blocking of SkypeOut calls from Shenzhen started several days before Verso announced on Sept. 14 the availability of the NetSpective M-Class application filter, which the company billed as “carrier-grade Skype filtering technology.”

While Verso said in its release that the use of Skype is illegal in China, the situation is more nuanced.

Chinese government officials have been generally tolerant of VoIP software, such as Skype, that is used to make calls from one PC to another. But the ability of Skype users to make calls to a phone via the SkypeOut service is more sensitive, because this directly affects the revenue that operators such as China Telecom earn from international phone calls.

On the one hand, the Chinese government owns the carriers and will act to defend their interests, said Duncan Clark, managing director of BDA China, a telecommunications consultancy in Beijing. However, the Chinese government also wants to see the price of making phone calls come down, he said.

“It’s a question of bureaucratic politics,” Clark said.

It’s well known that Skype is different from Vonage, the latter is protected at USA as a VoIP service provider according to the FCC regulations, while the former is not. Because Skype makes money from network infrastructure of other telco companies without any revenue sharing or settlement mechanism.

At China, PC-to-Phone and Phone-to-Phone VoIP services are restricted to be “basic telecom service”, allowed to only a few state run telco companies. Althoug foreign companies will get more penetration opportunities along with WTO openness of telecom market, that would not benefit Skype, unless Skype succeed in transformation to a more transparent and open technology, e.g, communication protocol, key management, billing data output, interop with SIP, and etc.

It’s obvious that Skype represent a killer technology to provide voice and video services at a very lower cost (of course, not zero like what Skype spend on their services). It’s the responsibility of the government (in China, it’s MII) to represent consumers to force the service providers to make use of advanced technologies at the possibly earliest time (if they won’t, new licenses will be issued to other providers). But, as to China Telecom, China Netcom, and other service providers, they won’t give up their monopoly privileges currently have unless they are forced to. So “blocking skype at China” is only a tactic action to prepare themselves for the uncertainty of the future regulations.

The differences between PC and “Phone” are becoming more and more obsecure, so it will be more and more difficult to distinguish “PC to PC“ against “PC to Phone”. That’s why I suggest Skype’s road to China lies at penetrating into those handheld devices with WiMax, WiFi, GRPS, 3G wireless link.

Categories: -English-, P2P, Security, Telecom Tags: , , ,

[Chinese]萨班斯来了 zz

November 10th, 2005 No comments

下面的文章转载自信息产业网,其中关于主要上市公司在时间表的考虑较为详细。

(肖卓 张萍 人民邮电报, 2005-11-10 08:23:43)

近期,在美国上市的国内企业意识到,他们又将面临一个新的考验,考验来自一个棘手而严厉的“美国规则” — 萨班斯法案。

2002年7月30日,美国总统布什在签署“萨班斯法案”的新闻发布会上曾称“这是自罗斯福总统以来美国商业界影响最为深远的改革法案”。萨班斯究竟何 为?2001年12月,美国最大的能源公司——安然公司,突然申请破产保护;次年6月,美国世界通信爆发会计丑闻事件,诸多上市公司治理结构不平衡和外部 监督缺失,美国资本市场诚信岌岌可危。为此,美国国会和政府加速通过萨班斯法案。它犹如一记重拳,有力地规范了企业的财务制度,并通过加强内部控制,改进 了公司的治理状况。

萨班斯法案是美国自20世纪30年代颁布财务规则以来,最为严厉和企业必须严格遵守的财务法则。事实证明:触犯萨班斯法案,企业高管就有可能面临监禁等法律制裁,公司声誉下跌,投资人失去信心,企业失去再融资能力,最后不得不被迫退市。
Read more…

Categories: -Chinese- Tags: , ,

[Chinese]萨班斯法案引发的思考 zz

November 10th, 2005 No comments

下面这篇文章转载自中国信息产业网,总结了萨班斯法案对国内海外上市公司带来的影响,其中也讨论了对电信企业的影响。点击下载萨班斯法案的中文全文

萨班斯法案引发的思考

(□ 撰文/何 霞, 信息产业部电信研究院,2005-06-15 10:31:15)

针对安然、世通等财务欺诈事件,美国国会出台了《2002年公众公司会计改革和投资者保护法案》。该法案由美国众议院金融服务委员会主席奥克斯利和参议院 银行委员会主席萨班斯联合提出,又被称作《2002年萨班斯—奥克斯利法案》(简称萨班斯法案或SOX法案)。法案对美国《1933年证券法》、 《1934年证券交易法》作了不少修订,在会计职业监管、公司治理、证券市场监管等方面作出了许多新的规定。萨班斯法案的监管对象是在美国上市的公司。根 据该法案,在美国上市的中国电信企业在2006年初将要按照“COSO”的要求,向PCAOB和投资者交出自己的内控报告。这实际上已对在美国上市的中国 电信企业提出了新的要求。
Read more…

Categories: -Chinese- Tags: , ,

[Chinese]安全管理过程中的执行力

November 9th, 2005 13 comments

安全管理很多依赖于企业自身的企业管理水平,如果剥去安全策略、管理制度和流程的完备性、前瞻性等技术因素的包装,其实,企业治理过程中最为重要的要素之 一 - 执行力,对安全管理同样非常关键,它决定了那些(可能漂亮或者不怎么漂亮、完备或者不怎么完备的)安全策略、制度流程等是否能够得到落实。实际上是安全效 率(efficiency) 和 安全有效性或效力(effectiveness)的问题。开发几尺厚的安全策略制度流程手册文档,购买千兆防火墙、IDS,上安全管理中心(SOC)等等 这些措施大多都是面向的安全效率,而如何能够保证所有的或关键的安全措施都能够坚守岗位(Stick)、按照策略运转是效力问题。

在2002年准备SOC项目时,考虑推出了“可视化”、“可量化”、“可管理”、“可运营”等几个概念,强调了企业信息系统中安全风险的可视化和可量化, 能够实用技术手段揭示“冰山水面下的部分”。“可管理”、“可运营”强调了安全管理与企业管理的融合,安全管理要走出去,加强沟通宣传,避免“曲高和寡” 的技术主导倾向,时刻要考虑组织职位流程方面的落地能力、可操作性。

这一切做法的出发点从本质上说与IT治理、企业治理的思路是一致的,安全管理不需要“重新发明轮子”,我们只需要多借鉴,多思考,很多安全问题其实可以寻求安全之外的经验知识来帮助解决。安全管理活动中需要注意提高“执行力”。

Read more…

Anybody is scanning? Hope WP.com secure enough!

November 8th, 2005 3 comments

I noted the following entries at the “Referer” page, which seems like results from those web vulnerability scanning. It’s obviously from thosee script kiddies or a network scanning robot. Wow, full of threats the cyberspace. I believe the WP.com must have hardened the OS and application servers already to beat those scanners out. :)

12 DIRECT 1 /bbs/shell.aspttv.asp 7:53
13 DIRECT 1 /bbs/shell.asp 7:53
14 DIRECT 1 /bbs/webshell.aspttv.asp 7:53
15 DIRECT 1 /bbs/webshell.asp 7:53
16 DIRECT 1 /bbs/servu.exettv.asp 7:53
17 DIRECT 1 /bbs/servu.exe 7:53
18 DIRECT 1 /bbs/s-u.exettv.asp 7:53
19 DIRECT 1 /bbs/s-u.exe 7:53
20 DIRECT 1 /bbs/cmd.exettv.asp 7:53
21 DIRECT 1 /bbs/cmd.exe 7:53
22 DIRECT 1 /bbs/cmd.aspttv.asp 7:53
23 DIRECT 1 /bbs/cmd.asp 7:53
24 DIRECT 1 /bbs/diy.aspttv.asp 7:53
25 DIRECT 1 /bbs/diy.asp 7:52
Categories: Security Tags:

Comment to P2P Guard Whitepaper

November 8th, 2005 1 comment

偶尔间看到网上一份文件是国内某公司的P2P Guard号称可以全面管理P2P应用和带宽使用,

“某某公司针对这一现状,结合国内网络及P2P应用自身的特点,开发出了线速应用层P2P协议特征识别及具备自动学习和记忆功能的P2P Guard产品,为困扰中的ISP、IDC、ICP及各行业提出了全新的P2P流量管理和控制解决方案。”

于是下载一观。看完后,不仅慨然长叹。这是一个产品吗?这或许可以成为某一位研究生的毕业设计或者论文!下面摘录两个功能介绍:

  • 1 支持当今流行的P2P协议
    BT(已经支持BitComet ,BitTorrent Plus 等)
    EDONKEY(已经支持eDonkey, Overnet, eMule 等)
    Fasttrack(正在开发),DC(正在开发),POCO(正在开发)。
  • 2 记忆功能
    同一般的应用层防火墙不同的是,系统并不对每个数据包比较,因而极大的提高了系统的性能。同时智能学习算法还有记忆功能,系统能够记住早期已经判断出来的P2P服务器或客户端,因此在后续的通信中无需对数据包进行比较,进一步提高了性能

您看了也不禁会笑了。市场宣传何其“猛于虎”也!这就是人家为困扰中的ISP、IDC、ICP及各行业提出的全新P2P流量管理和控制解决方案。

注:本人坚决支持民族软件和安全产业,绝对无意冒犯该公司或者任何一位相关人士。只是就事论事,有感而发而已。如有得罪,还望海涵。

Categories: Security Tags:

A Typical O-Chart of Telecom Operators at China (Diagram)

November 4th, 2005 No comments

The below is a diagram of a typical o-chart of telecom operators at China. After a series of BPR and ITSM programs,  the o-chart and internal processes are changed a lot against that of a few years ago. As you see, more and more telecom companies establish “response centers” to quicken the “customer” response. Here the “customer” includes internal and external ones.

Telecom O-Chart at China

Categories: Telecom Tags:

Telecom Security Framework (Diagram)

November 4th, 2005 2 comments

Nowadays, the security for telecom operators is expanded to a very wide range, from 3G/IMS/SIP, to IM/P2P filtering, and even security issues related to various VAS(value added services). How to make a plan and blueprint for a telecom operator network security? You must be familiar to not only the BS7799, X.805, CoBit, SSE-CMM, CC and other standards, but those telecom technologies and specificication as well. A very challenging job! Isn’t it?

做电信安全有这么多年了,感觉上越来越累,越来越吃力。因为安全技术和标准的发展很快,更因为电信各种新技术的发展更快!我一向认为,即然是说电信网安全就必须深入电信、体现电信网的特点。这里并不是什么特例独行,也不是故意为了突显电信网的“电信级什么什么”带有的“自我优越感”,而是因为现在的电信网的确是越来越复杂了,而网络安全的内涵也越来越放大,放大到几乎什么“故障”、“中断”、“性能下降”都有可能被冠以网络安全的名下,业务连续性不是被很多安全咨询公司拿来当作自己的顾问服务内容吗。另外,SOX符合性有网络安全的事,城域网优化、网络提质有网络安全的事,垃圾短信、非法广告也有网络安全的事吧,网络安全主管要想办法过滤呀。更有当前的非法VoIP检测、P2P识别也成了网络安全的工作范畴。

呵呵,这下网络安全的饭碗是不是一下子光芒万丈了。如果还想靠防火墙、反病毒、IDS老三样产品,依靠Windows,Unix风险评估加固在电信里打天下,估摸着会越来越吃力。

Telecom Security Framework

Live software, network computer and on-demand computing

November 4th, 2005 No comments

Live software is very attrative, although it’s likely just reprint of concepts of network computer and on-demand computing.  Let’s see how Bill Gates defined “Live Software”:

In his presentation Tuesday, Gates described Live Software as software that works with many devices so user data and services are more portable. In this scenario, users do not have to sync up or reload personal information or services onto each device they use, but can access what they need whenever they want it, he said.

“One of the key principals of Live Software is it works with many devices,” Gates said. “Instead of the device being central as it has been in the past, forcing the user to move the data round, the kind of software we’re talking about today remembers what the user wants and then when the user shows up on any device, the services are brought down on any device.”

The vision Gates presented sounds similar to “the-network-is-the-computer” vision Sun Microsystems Inc. has been painting for some time, a vision in which myriad devices are linked to the Internet and can provide services to users as they travel and access the Web from different devices.

Click to see the full story.

Categories: Security Tags: