Report: Net users picking safer passwords
31746
Average MySpace password has eight characters, expert says. But no password is secure if you fall for a phishing scam.
195481
DomainKeys Identified Mail, a proposed standard for e-mail authentication, would help fight spam and phishing attacks.
711995
It's no secret that Microsoft employs individuals that attempt to bypass the security restrictions built into its software products in order to make them safer, but the company has rarely publicized this fact. That's changing with a new Web log called hackers @ microsoft.
204875
Left online for 24 days to see how hackers would attack them, four Linux computers with weak passwords were hit by some 270,000 intrusion attempts-- about one attempt every 39 seconds, according to a study conducted by a researcher at the University of Maryland.
590481
In Tunisia, Iran's password is "Tunisia" Underscoring a major susceptibility threating thousands of high-profile computer users across the world, a Swedish security consultant has published login credentials belonging to some 100 embassies.â¦
50604
New PC indexing tools such as Google Desktop Search pose security risks to businesses that useÂ SSL remote access because the tools copy material accessed during SSL sessions and make it available to unauthorized people who later use the same PC.
455195
Downside is having to learn to use html code. Internet Explorer&#39;s AutoComplete function remembers passwords, but experts say it creates a security risk.
150897
The United Nations last week became the latest organization to warn computer users about the dangers of relying on just passwords to protect online bank accounts and e-commerce shopping carts, according to Reuters
160331
Password Safe is a password database utility. Users can keep their passwords securely encrypted on their computers. A single Safe Combination unlocks them all.      Version 3.06 is a minor release - some annoying bugs have been fixed, some features have been improved upon. Thanks to DK and Arjun for their work on this release, as well as to the brave U3 beta testers: Jan, Juergen, Larry and Sid (apologies if I left anyone out).  The U3 version will be available soon from http://software.u3.com.    The release may be downloaded from  https://sourceforge.net/project/showfiles.php?group_id=41019&package_id=3316 9&release_id=486669 http://preview.tinyurl.com/2ee5qb  SHA-1 checksums:   b003a0801d247794beb17960799ba90b2ea71163 pwsafe-3.06.exe f39450e1d85fee453f208f4fd1312074c2862e40 pwsafe-3.06-bin.zip 6c8ed71c28d518d615507e16a4124e09a101f15f pwsafe-3.06-src.zip    Note that this release also includes PGP/GPG signature files of the respective packages. These were signed with my SourceForge account key,   keyid FA175557, key fingerprint = FF77 379D D46D DAA6 6182 B452 1D79 5A91   FA17 5557, available from a PGP keyserver near you (such as   http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xFA175557).     Enjoy,     Rony
542168
This article shows how to improve SSH security using public key authentication instead of, or in addition to, password authentication.
227898
By Anonymous  Computer Security PEOPLE who use their home computers to access Thrift Savings Plan accounts can be vulnerable to having their personal information stolen.
669084
By Ryan Blitstein, San Jose Mercury News, Calif.  Feb. 7--Computer security is often about keeping the bad guys out. On Tuesday, Microsoft unveiled a series of technologies that make it easier to let the right people in.
185711
Also: High security built right into $100 laptop's OS. Read these stories and more from around the Web at News.com Extra.
150840
Backdoor drafts, security moms and up-armoring
358340
(InfoWorld) - The United Nations last week became the latest organization to warn computer users about the dangers of relying on just passwords to protect online bank accounts and e-commerce shopping carts, according to Reuters The warning from the UNâs International Telecommunications Union came a little more than a year after the United Statesâ Federal Financial Institutions Examination Council (FFIEC) released similar guidance calling for stronger user authentication for online banking customers.                                                     Those kinds of warnings are music to the ears of Jon Fisher, CEO of Santa Clara, Calif.-based Bharosa, which sells anti-fraud and multifactor authentication technology to banks, health care companies, and the government. Just three years old and with 50 employees, Bharosaâs been taking on security industry behemoths such as VeriSign and EMC/RSA on their own turf and, in some cases, winning. In the past year, Fisherâs company signed deals with Wells Fargo, National City, and the U.S. Air Force. A serial entrepreneur who sold his first company at age 23, Fisher spoke with InfoWorld Senior News Editor Paul F. Roberts about how the changing regulatory environment has been good for his company. InfoWorld: What is the core intellectual property that Bharosa has? Jon Fisher: We have a proprietary, gated methodology to screen for fraud in real time. The first gate manifests itself pre-log-in via an analysis of a host of data about the user and transaction. The second gate is at the first point of authentication: the user name and password. The third gate is manifest in session where transaction and document requests occur. The fourth gate is a score of third-party data, whether thatâs enterprise, legacy, or other data thatâs fed into our fraud detection engine. IW: What should enterprises know about software like Bharosaâs? JF: Fraud detection has a place not just in achieving FFIEC compliance, but also truly bringing together disparate legacy systems [that] enterprises have had in place for some time. IW: Are you talking about single sign-on, or something else? JF: Single sign-on is an application of that. But fraud detection [can make] a decision about what advanced forms of authentication to use based on the conditions, or what kinds of transactions will manifest in certain ways, like a document request or [bill payment].Â  IW: Arenât authentication and fraud detection ultimately just parts of a bigger architectural change that will tip the scales in favor of vendors who can take care of data security in addition to authentication and storage and the networking piece? JF: Iâve been an entrepreneur for a number of years. I know that if you want to start a company and run a good company, youâve got to do something well. Weâve selected a few things to focus on and do well. Theyâre things that, in aggregate, constitute more than just a point solution. But, yes, certainly less than the array of products in unrelated areas offered by competitors. In terms of how the competition in the space breaks out in the next few years, because of the importance of fraud detection â especially in the enterprise â some very large companies are looking at the space and deciding what their strategy will be. If you have a key product like [Bharosa] fraud detection thatâs embedded deep within some of the worldâs finest enterprises, no matter how much the space matures or develops and no matter what resources competitors have, you still have to work with Bharosa. IW: In the financial services space, how much of this is being driven by FFIEC guidance around single factor authentication? Where do things stand with adoption of FFIEC? JF: There are two answers. As an objective observer, Iâd have to agree that more than 50 percent of U.S. banks will technically not comply with FFIEC-related guidance by the end of the year. However, as a principle at Bharosa, Iâm finding that FFIEC compliance has served as rocket fuel for my relatively young company. Itâs been a key driver in our growth. Weâre very much looking forward to the second phase of FFIEC guidance in 2007. Weâre also looking for the effect this guidance will have on other markets. These mandates for enterprises to update security as a function of time are great environments to work in if youâre a software company.
321146
Fornisce password e indicazioni per esaminare i computer
148612
Attackers can trick browsers into releasing password information.