Domain name system in danger from speculators, cybersquatters, says U.N. agency
104214
The Internet's domain name system is in danger of being swamped by speculators who harvest expired site names and re-register them, a practice that could make it harder to fight cybersquatters, according to the World Intellectual Property Organization.
406027
Microsoft ISA and Proxy Server are prone to an Internet domain name spoofing vulnerability that could allow an attacker to spoof Internet sites.
421420
Website head said he expects contributors claiming certain credentials will soon have to prove their identity.
732235
InfoWorld - The United Nations last week became the latest organization to warn computer users about the dangers of relying on just passwords to protect online bank accounts and e-commerce shopping carts, according to Reuters
316177
An attack combining malicious codes on Web sites and end-user laziness could compromise millions of routers still configured with their out-of-the-box defaults.
631754
Careless security measures invite cybercrooks and scammers, researchers say.
3437
A company that sells Internet domain names is facing criticisms for holding some in reserve as a consumer-protection measure, a move that also prevents interested parties from shopping around for better prices.
726299
Globalization and increased reliance on the Internet continue to raise the risk of cyberattacks, a U.S. security official warns.
358340
(InfoWorld) - The United Nations last week became the latest organization to warn computer users about the dangers of relying on just passwords to protect online bank accounts and e-commerce shopping carts, according to Reuters The warning from the UNâs International Telecommunications Union came a little more than a year after the United Statesâ Federal Financial Institutions Examination Council (FFIEC) released similar guidance calling for stronger user authentication for online banking customers.                                                     Those kinds of warnings are music to the ears of Jon Fisher, CEO of Santa Clara, Calif.-based Bharosa, which sells anti-fraud and multifactor authentication technology to banks, health care companies, and the government. Just three years old and with 50 employees, Bharosaâs been taking on security industry behemoths such as VeriSign and EMC/RSA on their own turf and, in some cases, winning. In the past year, Fisherâs company signed deals with Wells Fargo, National City, and the U.S. Air Force. A serial entrepreneur who sold his first company at age 23, Fisher spoke with InfoWorld Senior News Editor Paul F. Roberts about how the changing regulatory environment has been good for his company. InfoWorld: What is the core intellectual property that Bharosa has? Jon Fisher: We have a proprietary, gated methodology to screen for fraud in real time. The first gate manifests itself pre-log-in via an analysis of a host of data about the user and transaction. The second gate is at the first point of authentication: the user name and password. The third gate is manifest in session where transaction and document requests occur. The fourth gate is a score of third-party data, whether thatâs enterprise, legacy, or other data thatâs fed into our fraud detection engine. IW: What should enterprises know about software like Bharosaâs? JF: Fraud detection has a place not just in achieving FFIEC compliance, but also truly bringing together disparate legacy systems [that] enterprises have had in place for some time. IW: Are you talking about single sign-on, or something else? JF: Single sign-on is an application of that. But fraud detection [can make] a decision about what advanced forms of authentication to use based on the conditions, or what kinds of transactions will manifest in certain ways, like a document request or [bill payment].Â  IW: Arenât authentication and fraud detection ultimately just parts of a bigger architectural change that will tip the scales in favor of vendors who can take care of data security in addition to authentication and storage and the networking piece? JF: Iâve been an entrepreneur for a number of years. I know that if you want to start a company and run a good company, youâve got to do something well. Weâve selected a few things to focus on and do well. Theyâre things that, in aggregate, constitute more than just a point solution. But, yes, certainly less than the array of products in unrelated areas offered by competitors. In terms of how the competition in the space breaks out in the next few years, because of the importance of fraud detection â especially in the enterprise â some very large companies are looking at the space and deciding what their strategy will be. If you have a key product like [Bharosa] fraud detection thatâs embedded deep within some of the worldâs finest enterprises, no matter how much the space matures or develops and no matter what resources competitors have, you still have to work with Bharosa. IW: In the financial services space, how much of this is being driven by FFIEC guidance around single factor authentication? Where do things stand with adoption of FFIEC? JF: There are two answers. As an objective observer, Iâd have to agree that more than 50 percent of U.S. banks will technically not comply with FFIEC-related guidance by the end of the year. However, as a principle at Bharosa, Iâm finding that FFIEC compliance has served as rocket fuel for my relatively young company. Itâs been a key driver in our growth. Weâre very much looking forward to the second phase of FFIEC guidance in 2007. Weâre also looking for the effect this guidance will have on other markets. These mandates for enterprises to update security as a function of time are great environments to work in if youâre a software company.
584063
Network Solutions is standing by its controversial policy of automatically registering some domain names that are the subject of searches on the company's Web site.
531362
InfoWorld - Network Solutions is standing by its controversial policy of automatically registering some domain names that are the subject of searches on the company's Web site.
288158
A practice used by scammers to siphon off hits from users who misspell URLs in their browsers could be rendered impossible this year, as the organization responsible for the Internet's domain name system may end the program that makes the practice possible.
329315
Insider dealing probe launched Internet oversight agency ICANN has launched an investigation into the possibility that insider information is being used to snap up desirable domain names before the person or organisation likely to be interested in them has had a chance to buy.â¦
723078
Security company says it has seen an attack using a cross-site scripting flaw in 2Wire DNS routers.
240773
The nonprofit organization that manages the Internet's domain-name system is set to vote Wednesday on changes to the Web site registration process that would make it easier for people to shield their identities online and, indirectly, cut spammers off from an easy-to-mine database of legitimate e...
459659
More than half of all Web sites serving up attack code are legitimate domains that have been hacked by criminals, according to a Websense study.
22009
Computer users who type in the same  username and password for multiple sites -- such as online  banks, travel agencies and booksellers -- are at serious risk  from identity thieves, a United Nations agency said on Sunday.