Chris Shiflett's Blog: Security Corners Published
122012
In a new posting on Chris Shiflett's weblog today, he shares with the world a little bit of what he's written for php|architect - a free version of one of his columns: Security Corner: Session Fixation.
508385
I need to expand my idea of a secure computing ecosystem into the real world. Let me explain.
461322
There is a security alert floating around (PHP Magazine, php|architect) about a new hole found in the code of PostNuke.
416654
Your (semi-) daily defense-industry news roundup.
620094
roundup Free-roaming source code breeds new Netsky pest. Also: From IE to Opera, browsers are a likely prey.
722594
My column from the Mar 2004 issue of php|architect is now available for free: Security Corner: Shared Hosting
267638
Malware, carelessness, data leaks--whether internal or external threats, there's too many to count.
607068
As per suggestions contained in the FAQ: Herein lies a report of two identified and as-of-yet uncorrected security flaws in Scoop. &nbsp;Enough detail will be provided to assist admins in investigating and correcting the flaws, but it is the author's hope that the details of the flaws will be sufficiently obscured to prevent abuse by the undesirables. Executive summary: Through the exploitation of various unchecked privileged operations, attackers may be able to perform admin-level actions leading to data loss. &nbsp;Additionally, well-intentioned security measures combined with XSS vulnerabilities can be exercised to simulate admin-level action, resulting in data loss.
162423
By Steve Bonser, Santa Barbara News-Press, Calif.  Feb. 13--Jim Wooster, a retired investor, brings up a Web page on his  laptop in his New York high-rise condo. After a few mouse clicks, he's viewing  the activity log of the security system that's protecting his upper Riviera  home.
16242
Readers remark on computer security, the right to privacy and the iPhone lockdown. Plus: Links to our most popular blog posts.
587711
Hackers could bypass security warnings and download malicious content.
250864
A trio of new and unpatched vulnerabilities in Microsoft Windows were made public on security mailing lists over the weekend. By Gregg Keizer.
3099
Also: Vigilante hackers target the wrong guy. See what people are saying on News.com Extra.
118934
By Anonymous  WAN lessons learned  Plus: How to hide your online footprints.
108829
Recently , Google has released a new service for their search engine, the Google Code Search. It allows for developers to look through and locate items in public source code through the simple Google interface we're all used to. Fortunately, there's also a few security problems the site can help with as well, and Chris Shiflett shares some of these in his latest post.   Stephen de Vries sent an email to SecurityFocus's web application security mailing list earlier today to comment on the new Google Code Search: "Google's code search provides an easy way to find obvious software flaws in open source and example applications."   Chris talks about cross-site scripting problems, issues with the superglobals, SQL injection problems, and even a misplaced trust of the $_SERVER superglobal. Each of the items is linked to is search terms on the Code Search to make it easy to locate.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
299911
From Paul Jones' weblog today, there's a posting that more and more developers should live by - Document Your Project Already!