<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Boundary Objects and Threat Modeling</title>
	<atom:link href="http://emergentchaos.com/archives/2009/02/boundary-objects-and-threat-modeling.html/feed" rel="self" type="application/rss+xml" />
	<link>http://emergentchaos.com/archives/2009/02/boundary-objects-and-threat-modeling.html</link>
	<description>The Emergent Chaos Jazz Combo</description>
	<lastBuildDate>Mon, 15 Mar 2010 15:02:09 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Adam</title>
		<link>http://emergentchaos.com/archives/2009/02/boundary-objects-and-threat-modeling.html/comment-page-1#comment-5488</link>
		<dc:creator>Adam</dc:creator>
		<pubDate>Sat, 07 Feb 2009 14:05:22 +0000</pubDate>
		<guid isPermaLink="false">http://emergentchaos.com/?p=3039#comment-5488</guid>
		<description>Robin, do you have a pointer?  I found this page, &lt;a href=&quot;http://e-government.bfh.ch/index.php?id=1172&amp;no_cache=1&amp;tx_bfhpersonalpages_p=rer2&amp;tx_bfhpersonalpages_screen=publications&amp;cHash=9c801397b2&quot; rel=&quot;nofollow&quot;&gt;http://e-government.bfh.ch/index.php?id=1172&amp;no_cache=1&amp;tx_bfhpersonalpages_p=rer2&amp;tx_bfhpersonalpages_screen=publications&amp;cHash=9c801397b2&lt;/a&gt; and was then stymied
</description>
		<content:encoded><![CDATA[<p>Robin, do you have a pointer?  I found this page, <a href="http://e-government.bfh.ch/index.php?id=1172&#038;no_cache=1&#038;tx_bfhpersonalpages_p=rer2&#038;tx_bfhpersonalpages_screen=publications&#038;cHash=9c801397b2" rel="nofollow">http://e-government.bfh.ch/index.php?id=1172&#038;no_cache=1&#038;tx_bfhpersonalpages_p=rer2&#038;tx_bfhpersonalpages_screen=publications&#038;cHash=9c801397b2</a> and was then stymied</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Robin Wilton</title>
		<link>http://emergentchaos.com/archives/2009/02/boundary-objects-and-threat-modeling.html/comment-page-1#comment-5487</link>
		<dc:creator>Robin Wilton</dc:creator>
		<pubDate>Sat, 07 Feb 2009 07:10:00 +0000</pubDate>
		<guid isPermaLink="false">http://emergentchaos.com/?p=3039#comment-5487</guid>
		<description>You might also want to look for work on boundary objects by Prof Reinhard Riedl of the Berner Fachhochschule.
</description>
		<content:encoded><![CDATA[<p>You might also want to look for work on boundary objects by Prof Reinhard Riedl of the Berner Fachhochschule.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Patrick Florer</title>
		<link>http://emergentchaos.com/archives/2009/02/boundary-objects-and-threat-modeling.html/comment-page-1#comment-5486</link>
		<dc:creator>Patrick Florer</dc:creator>
		<pubDate>Tue, 03 Feb 2009 18:25:05 +0000</pubDate>
		<guid isPermaLink="false">http://emergentchaos.com/?p=3039#comment-5486</guid>
		<description>Dear Adam,
Since I know of no other way to contact you, I am taking the liberty of using this vehicle to write to you to urge you to make a very strong statement correcting the way that people are mis-stating your blog about the cost of breaches presented in the Maine breach report.
Nowhere in that post can I find the $450 per record cost that I have seen several times in the computer press, or that I just heard during a podcast dated 1/27/2009, called &quot;The Network Security Podcast, Episode 136&quot; from Rich Mogull and Martin McKeay.
Here is the quote from your blog:
&quot;It also includes (pdf 24, printed 18) an interesting cost summary, with 243,000 accounts impacted by Hannaford having an estimated cost of $1.6MM, or about $6.50 per customer. The highest cost per person/card/account is the TJX incident at roughly $9 per card. Which is a stark contrast to the generally used $187 number from Ponnemon surveys.&quot;
I have just assumed that someone missed a decimal point somewhere - please correct me if I am wrong.
Kind regards,
Patrick Florer
</description>
		<content:encoded><![CDATA[<p>Dear Adam,<br />
Since I know of no other way to contact you, I am taking the liberty of using this vehicle to write to you to urge you to make a very strong statement correcting the way that people are mis-stating your blog about the cost of breaches presented in the Maine breach report.<br />
Nowhere in that post can I find the $450 per record cost that I have seen several times in the computer press, or that I just heard during a podcast dated 1/27/2009, called &#8220;The Network Security Podcast, Episode 136&#8243; from Rich Mogull and Martin McKeay.<br />
Here is the quote from your blog:<br />
&#8220;It also includes (pdf 24, printed 18) an interesting cost summary, with 243,000 accounts impacted by Hannaford having an estimated cost of $1.6MM, or about $6.50 per customer. The highest cost per person/card/account is the TJX incident at roughly $9 per card. Which is a stark contrast to the generally used $187 number from Ponnemon surveys.&#8221;<br />
I have just assumed that someone missed a decimal point somewhere &#8211; please correct me if I am wrong.<br />
Kind regards,<br />
Patrick Florer</p>
]]></content:encoded>
	</item>
</channel>
</rss>
