Category Archives: Food

Food-Defense Shutters Factory Tours

A reader from Apple forwarded me a story of the Vermont Press Bureau that says a popular tour shuttered over terrorism concerns.

The story centers around an issue of establishing role-based access to production; only trusted people with a business need should be allowed access. An industrial maple syrup facility that supplies chain stores and big box retailers is the example given in Vermont.

Their dilemma was whether to spend money on role-based access controls that can control visitors within the production area or use existing ones at the perimeter that disallow visitors. They chose to cancel their tours rather than upgrade security controls.

“One of fallouts of those guidelines was to restrict access to food plants a lot more than they ever have been in past,” says Dave Fusaro, editor-in-chief at Food Processing, an industry trade magazine. “Maybe the biggest loss was the plant tour. Used to be you could bring a Boy Scout troop in and walk right through. That ain’t going to happen anymore.”

Maple Grove, which bottles about 12 million pounds of maple syrup a year, is a mainstay on tour-bus itineraries. Jones says the company welcomes close to 120,000 people annually to its St. Johnsbury factory. But access to major retailers like Walmart and chain grocery stores, Jones says, outweigh the benefits of the company’s popular tour.

Unsubstantiated fear tactics unfortunately appear to be behind this decision.

Frank Busta, director emeritus of the National Center for Food Protection and Defense, says the new guidelines aren’t an overreaction.

“Let me paint you a scenario,” he says. “If someone got to a vulnerable location and got something into 1,000 gallons of maple syrup that went out in six-ounce bottles, and that got distributed rapidly in some big supermarket chain — wow. What a catastrophe.”

That makes maple syrup seem like some kind of essential food that everyone is going to eat three times a day. Instead I can imagine 1,000 gallons of maple syrup sitting unused in pantries and closets all over America. Even one incident is tragic but hyperbole about the vulnerability and threat does not help.

Let us take as an assumption that industrialized additives such as High Fructose Corn Syrup and Trans Fats are controversial at best and proven to be harmful at worst. How much of that “something” is being “distributed rapidly in some big supermarket chain”?

Yes, what a real catastrophe that is happening today as opposed to a theoretical one from potential terrorists. Tens of millions of seriously unhealthy people suffering from a lack of security control. Where does the National Center for Food Protection and Defense stand on this issue?

Here is another scenario. Meat. There are small batch catering incidents

…the June 13, 2009 nuptials were part of a notorious trio of salmonella outbreaks caused by an unlicensed caterer who served tainted beef and noodle salad at two weddings and a family reunion.

The three incidents sickened 180 people, hospitalized 10 — and now serve as a warning about the dangers of foodborne illness from catered events.

There also are big batch meat poisoning cases. One of just nine major beef recalls in 2009 was the Christmas Eve E.coli O157:H7 incident that involved 248,000 pounds of beef.

At least 21 people in 16 states have fallen ill after eating contaminated meat pulled from restaurants last month as part of a beef recall.

The U.S. Department of Agriculture (USDA) reports that recalled National Steak and Poultry beef products have been linked to 21 E. coli food poisoning cases, which have resulted in at least nine people being hospitalized.

371,000 people are hospitalized and 5,700 die each year — almost twice the number from 9/11 — according to the CDC. Are food security experts taking this into account when they say we should worry about terrorism in the food supply?

Consider that 143 million pounds of beef was recalled in 2008 alone!

A quick scan of the Current Recalls and Alerts from the FSIS of the USDA shows a long list of beef, chicken and pork products. It seems fairly normal for a plant to operate with unsanitary and unsafe production until inspectors eventually trace harm back to it, and then the plant is shutdown with a warning sent out to tens of millions of consumers.

Thus, although the “post 9/11” terror scenario grabs people’s attention it really does not reflect the reality of risk and food security in America.

Consumers eat products laced with “something” seriously harmful to their health as a regular practice and meat products continue to be recalled with thousands killed every year.

Maple Grove reported 120,000 visitors annually yet how many incidents did they have with food poisoning let alone terrorism? Enforcing role-based access makes sense to counter an outsider threat such as a terrorist if it is real but what is the actual likelihood of this outsider threat?

The evidence actually points to insider threats (e.g. chemists trying to maximize shelf-life with non-food additives, industrialized and catered meat) as the far greater and more immediate threat to health and safety.

Identity and the Gefilte Fish Test

I love old black and white spy movies where a subtle etiquette or taste mistake foils a plan. They highlight the importance of privacy and identity as related to culture. One example is the American spy in German-occupied France of WWII who switched his fork and knife during a meal in a cafe.

It is news to me that the flavor of Gefilte fish can be one such identifier. Today few of us probably are familiar with variations of home-made Gefilte, but many years ago

The “gefilte fish line” ran though eastern Poland.

Jews living to the west — most of Poland, as well as Germany and the rest of Western Europe — ate the sweet gefilte fish. Those to the east — Lithuania, Latvia and Russia — ate the peppery version.

The real story is how fish flavor represents a major geographic divide in customs, culture and even language. In other words, choose the peppery version and you could reveal far more information than you might realize.

Can you tell where this recipe is from?

Balls
—————————-
Grind together

1 lb whitefish
1 lb pickle
1 small onion
1 stalk celery
1 egg

Mix in

1 heaping Tablespoon matzo meal
1 teaspoon salt

Broth
—————————-
Fish heads and bodies that were carefully boned
1 sliced onion
1 whole carrot
1 stalk celery
1 teaspoon salt
1 teaspoon sugar
2 inches water
Bring to boil then simmer

Together
—————————-
Form fish balls in palm of hand
Put on top of broth
Poach for about 1 hour with pot covered
Strain broth after removing fish balls
Add gelatin dissolved in 1/4 cup cold water to broth
Mix well and chill

Other recipes, such as the three day one used by Firefly, call for just 1/2 teaspoon black peppercorns.

Insects Flee From Breath

Researchers have found that insects sense the breath of approaching herbivores and flee plants to survive. A process of elimination isolated the characteristics of their detection system

The team suspected that several cues might have motivated the mass dropping, including the sudden shadow cast by the goat, plant-shaking triggered by the munching marauder, and/or the herbivore’s exhalations. The researchers tested the effects of each cue individually and found that simply casting a shadow on the plants had no effect on the aphids. Vibrations caused by leaf picking caused only one quarter of the insects to flee the plant. By contrast, when the researchers placed a lamb within five centimeters of the foliage (close enough to breathe on it, but not nibble on it), nearly 60 percent of the bugs dropped to the floor, suggesting that breath was the key danger signal.

Temperature and humidity turned out the be the most important factors

Altering either parameter alone produced only modest increases in aphid dropping, but the combination of increased warmth (to 35 degrees Celsius) and humidity (at 90-100 percent) caused nearly 40 percent of the aphids to plummet.

The next question should be whether they vacate completely or come back shortly after.

Hacking passwords to Hell

Hell is actually a pizza chain that started in 1996 that now has 64 stores in New Zealand, England, Australia and Ireland:

Clever marketing strategy but a website they used to manage customer information is said to have been breached. A police report revealed more than 230,000 “entries” at risk with names, phone numbers, email addresses and passwords. Risky Business claims an exclusive on this story called I know what you ate last summer

One source Risky.Biz spoke to says they looked into the security of the website when rumours of the breach started doing the rounds:

Immediately I spotted the SQL Queries being made by the Flash SWF as part of the query string to the server-side. The Flash client makes queries which are hard-coded in the .swf (this is dumb as it means SQL Injection is effectively a ‘feature’ of the store).

You could easily alter the query string to show the hashes stored in the MySQL users table. I figured out the version of MySQL was 4.0 (Debian Sarge) – and the hashes in this version are very weak, cracking them would take less than a couple of hours.

MySQL was listening on a remote port, so one could simply log in remotely and run queries or dump the database slowly so as to not be noticed.

Security researcher and Metasploit creator H D Moore described the security arrangements of the online ordering portal, as described above, as “about 50 steps of fail”.

HD could have gone for the 9 levels of Infernal fail, or called it divinely comical, but 50 steps is still pretty good.