Scott Granneman: Security Analogies
35894
Security Analogies &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
716663
Networked multifunction devices share PC vulnerabilities to worms, hackers.
336252
Issue #8 of the (IN)Secure Magazine has been posted today and includes articles like:  Payment Card Industry demystified Computer forensics vs. electronic evidence SSH port forwarding - security from two perspectives, part two Airscanner vulnerability summary: Windows Mobile security software fails the test Introducing the MySQL Sandbox   Check out insecuremag.com for more or just download the issue directly.
65344
The director of national intelligence wants to monitor all internet communications to guard against cyberattack. His aide says "privacy and security are a zero-sum game." Our nation's spy masters may want to check their math. Commentary by Bruce Schneier.
267638
Malware, carelessness, data leaks--whether internal or external threats, there's too many to count.
391310
Internet Security Systems' intrusion prevention software on Crossbeam Systems security switches.
163563
The always provocative Brad Templeton, who hung out with a large cadre of geeks at the Internet Identity Workshop (IIW, or IIW2007) last week, has some cautions about new identity systems, even if they are all &quot;user-centric&quot;. These cautions lie in a paradox: &quot;The easier it is to give somebody ID information, the more often it will be done. And the easier it is to give ID information, the more palatable it is to ask for, or demand it.&quot; The italics are his.  Here he hits on the problem of market power asymmetries (vendors strong, customers weak) that have been with us for the whole Industrial Age, and are with us still. I think we have a way to overcome those, and that Brad's Paradox may provide exactly the conceptual hurdle we need to see before we can make progress. \
66343
But 'Gi-Fi' pointless without robust security
710136
This paper looks at the evolution of firewall technology towards Deep Packet Inspection, and then discusses some of the security issues with this evolving technology.
699435
A researcher has posted proof-of-concept code for a zero-day flaw within Mac OS X dealing with its handling of disk image (.dmg) files. The issue causes a memory corruption vulnerability that could allow attackers to execute arbitrary code.
164552
Blog: Although rare, a sophisticated attacker could perform a man-in-the-middle attack using Google Desktop.
588378
By BRIAN BERGSTEIN MINNEAPOLIS - It must say something about our times that Bruce Schneier, a geeky computer encryption expert turned all-purpose security guru, occasionally gets recognized in public. &quot;My life is just plain surreal,&quot; he says.
660394
What is it, one might reasonably ask, that separates a SIM (security information manager) from a basic log-file aggregator? Both will, of course, aggregate log files, but a SIM must go further, gathering incident alerts and status conditions from a variety of network security and infrastructure sources. A good SIM will then add some intelligence to the mix, helping the security engineer figure out which information is worth his or her immediate attention and which can be ignored until time to pass a compliance audit.
674712
Sometimes security isn't just an afterthought -- it makes evil actions more effective. Jon Espenschied thinks there's a better way.
56532
People have long been the weakest link when it comes to protecting computers. The same applies to mobile phones, a security expert says.
277528
Ancora scarse le informazioni e la diffusione dei depliant
605168
Security researcher Christopher Soghoian reflects on the hard work that comes after finding a vulnerability.