Multisite protection bows for mainframes
26060
EMC says its parameter-driven software can automate fail-over operations during planned outages such as maintenance operations and upgrades, and can test disaster-restart operations without needing to write, verify and maintain custom scripts.
761635
There's a tutorial over on mpwebwizard.com that's been updated and talks about using a mirror to handle hits from a popular website (like digg or slashdot).   caching services such as coral content distribution network provide an alternative for when your site goes down, but why wait until it gets to that stage? why not just send all your hits from high-end websites to the coral cache version? well, there isn't a good reason not to, so i'll show you how to do it automatically.   He provides the simple script that looks for certain sites in the "HTTP_REFERER" value of incoming calls and pushes them off to the cached location with a header() redirect. The whole thing is only 12 lines, not counting the $sites array.
378317
You don't have to buy big, bloated software from a well-known security company to get solid protection from a firewall -- in fact, many of the biggest names offer less protection than simpler, lesser-known security products.
395680
What's the difference between "Leap.A" and "Leap.B"? A look at naming of variants. Part of a series on hot security topics.
46795
HypervisorShield, a new service of Catbirdâs V-Security suite, extends security protections to the hypervisor layer in a virtual environment.
261062
Latest PHPClasses.org Releases:SPL and IteratorsBWT & MTF encodercPanel Sub-domains CreatorObserverableHTTP SpySimple and Attachment Send MailWindows RegistryClean OutputCryptPHP RARRTF Generation ClassBar ChartPclTemplateICQ Protocol
254380
As Chris Shiflett mentions today, there's a new web development security aggregation site that's been launched - Planet-Websecurity.org [feed]. Christian Matthies has headed up the project:   Those of you who have spoken to me recently may already be aware of this project, but for those who don't, I am pleased to announce the launch of Planet Websecurity, founded with the intention to bring together similarly themed news and rants related to Web security and to display them in one place.   Included in the list of blogs/sites aggregated are the blogs of: Chris Shiflett, Robert Hansen, Sid Karunaratne and Christian himself.
674304
Mike Wallner has thrown together some stats for the latest edition of the pecl/http package to test its response performance.   The results surprised me, because it clearly shows that the performance drop for starting the PHP engine and doing the neccessary negotiation to provide caching is not that bad.   There's a chart of the results as well as a full PDF with all of the stats the graph maps out. He includes the legend to make the graph easier to understand.
736098
Patrick Reilly has a new post today encouraging developers out there looking for an opportunity to volunteer in the community to check out the Zend Framework project's many needs.   Most components and subprojects need volunteers to help with documentation, unit test coverage, code reviews, improving integration with other ZF components, and enhancing architecture and design for the purpose of improving extensibility and ease of use with new components. If you see a subject area or component that interests you, please contact any project members currently associated with the component.   The project is starting several wiki "websites" dedicated to each of the components/efforts inside of the main framework project. Areas for these include:  Auth Team Documentation Team MVC Team Web Services Team
49129
Over on the SecurityFocus website, there's an interview posted with Stefan Esser of the Hardened-PHP Project (as interviewed by Federico Biancuzzi.   Federico Biancuzzi discussed with him how the PHP Security Response Team works, why he resigned from it, what features he plans to add to his own hardening patch, the interaction between Apache and PHP, the upcoming "Month of PHP bugs" initiative, and common mistakes in the design of well-known applications such as WordPress.   Some of the topics discussed include  the Hardened-PHP Project Suhosin the PHP Security Response Team (his role in it and why he left) PHP5's security focus versus PHP4's and more...  Check out the full interview to have all of your questions answered.
19207
As Greg Beaver mentions in his latest blog entry, the main website for PEAR, pear.php.net has been mirrored as part of an effort to restructure and "revamp" the PEAR wesbite.   I'm excited to announce the first two mirrors of pear.php.net are now actively mirroring the installer REST files and actual .tgz files of package releases.  They are http://us.pear.php.net (provided by Joshua Eichorn and bluga.net) and http://de.pear.php.net (provided by Christian Weiske).  The option exists at a future date of mirroring the entire website, but this will not be possible without further changes to the infrastructure.   Using these servers is only slightly different than the main site, setting the preferred_mirror setting in your configuration to use one of the above.
357182
In a new post to his blog, Chris Hartjes, spurred on by an article in the latest edition of php|architect magazine (covering protecting your code), has shared a few opinions starting with a certain paragraph near the end.   To start, I will focus on the paragraph above. What I get out of that is that if only your source was closed and hidden from prying eyes, it would not have bugs in it. Which is, of course, total nonsense. Code has bugs because it's open and they feel safer? There are two kinds of bugs: application bugs (which is the code I would write) and system bugs (in this case, bugs that that appear from PHP itself). I'm sorry, but there is nothing I can do if there is a bug in PHP that causes my application to crash except to point this bug out to the people who have the ability to fix it.   He goes on to talk more about how protection like this (the article talks about using the IonCube Encoder) will not stop someone if they're really determine to get at the code underneath the encryption. His only suggestion is to make an application good enough that people wouldn't want to try to steal it as much and would rather pay for their version.   Encode your stuff if you want, but be aware that the minute you choose to do that you are telling your customers "I don't trust you" and I have a hard time understanding a business model that assumes people are going to want to steal the stuff you sell.
635884
Alchemi is a software framework that allows you to painlessly aggregate the computing power of networked machines into a virtual supercomputer (computational grid) and to develop applications to run on enterprise grids.      We are pleased to announce the release of version 1.0.6. The major changes since 1.0.5 are a LUA (Least Privileged User Account) operation for both Manager, Executor in normal and service mode and an option for executing user's GThreads in a secure sandbox (experimental)  Please note that this is a developer release intended for enthusiasts and early adopters as documentation is not up to date.     Go here for downloading the files in this release:     http://sourceforge.net/project/showfiles.php?group_id=66729&package_id=186776&release_id=456163
328112
The ground rules of the tests of Cisco and Avaya systems.
705643
The Hardened-PHP Project has released another vulnerability today, this time it's an issue with one of PHP's own internal functions - open_basedir.    The design of the open_basedir feature of PHP that is meant to disallow access to files outside a set of configured directories is vulnerable to race conditions.   It was discovered that this design flaw can be exploited with the usage of PHP's symlink() function in a very easy way. We believe that the only solution to this problem is disabling the function symlink() while open_basedir is used (this feature was therefore added to our Suhosin PHP Security Extension).    They also note, unfortunately, that the problem may not be fixable due to how it can be implemented. They provide a more detailed explaination and some PHP psuedo-code to help illustrate the point.
684966
Product will allow a server to run multiple operating systems, or multiple copies of the same operating system at a single time
387344
On 20 November 2004, a major malicious-code attack emerged targeting European Web sites via banner ads. This two-step attack exploits two previously identified security vulnerabilities: the Bofra (or IFRAME