Net copes with key character test
120786
Tests are carried out to see how the net's addressing system  copes with international character sets such as Chinese and Arabic.
654308
Some years ago, I got a job doing network support for the District Attorneyâs office in a large city that shall remain nameless. When I arrived, the network was a mess! Malware was rampant, Internet and WAN connections were saturated, and users were constantly complaining about slow computers and network performance. Even so, my attempts to enforce a mindful security policy were met with fierce resistance. The attitude among the legal staff was, âThis is my computer and my network; youâre just a computer janitor.â
260577
Bot spreads using latest Windows flaw &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
644510
(InfoWorld) - Participants made good progress discussing changes to Internet governance during an ICANN meeting in Puerto Rico that closed on Friday, leaders of the organization said. One topic that leaders worked on was the future enablement of non-Latin characters in domain names. ICANN hopes to support Cyrillic, Arabic, Chinese, and other characters in the future, but that's easier said than done. In 2003, ICANN made an attempt to widen the acceptable characters but found that its rules were too permissive, said Vint Cerf, ICANN's chairman. "There could be confusion between similar registrations that might mislead users," he said during a conference call to discuss the meeting. One potential source of confusion is that some characters in different alphabets might look similar but mean different things. For example, in Cyrillic, the word for "restaurant" looks in the Latin alphabet like "pectopaht." That opens the door for users to register domains in different languages in a way that could confuse users. ICANN hopes to develop rules that will prevent such confusion. ICANN plans to be able to test the use of international domain names live on the Internet by November. The test will include a mechanism to take them out instantly if they create a problem, Cerf said. The group has already tested the process in the lab. "We are confident that none of the infrastructure is likely to encounter problems, but you never really know until it's in that live environment," he said. The meeting also included a discussion on continuing to encourage IPv6 use. That's particularly important now because ICANN has determined the current system, supported by IPv4, for allocating the numerical address space will exhaust available numbers around 2011 or 2012, Cerf said. The wide adoption of IPv6 will support the continued addition of new numerical addresses. Cerf said there was significant progress in efforts to enable digital signatures to help authenticate the match between domain names and Internet addresses. The digital signature would validate that the Internet address associated with a domain name wasn't corrupted, either maliciously or accidentally. "This is a significant change in the core architecture of DNS," he said. The group also worked on developing a more regular process for allowing the introduction of additional generic top-level domains. ICANN worked on such policies in 2000 and 2003 and will take those experiences and try to establish a more regular practice for making additional domain names available, Cerf said. ICANN is on track for the introduction of new domains by the middle of 2008.
237018
Attack uses CAST statements in its SQL injected script
674304
Mike Wallner has thrown together some stats for the latest edition of the pecl/http package to test its response performance.   The results surprised me, because it clearly shows that the performance drop for starting the PHP engine and doing the neccessary negotiation to provide caching is not that bad.   There's a chart of the results as well as a full PDF with all of the stats the graph maps out. He includes the legend to make the graph easier to understand.
181199
Interesting tidbit that was Slashdotted earlier - Netcraft has released an anti-phishing toolbar that leverages the enormous database of web sites the organization manages.
634766
Net overseer moves toward approving industry-specific .post, .travel.
107521
BO test bit whiffy Security firm Comodo, best known for its digital certificate business, has released a free diagnostic tool designed to identify buffer overflows in desktop security products. Our try-out, however, suggests that Comodo's BO Tester is principally designed to help poach users than provide a detailed breakdown of bugs.â¦
97618
Code that claims to partially exploit a weakness in Microsoft software&#39;s handling of image files has been published on the Internet.
5785
According to this posting on the SecWatch board today, there are some issues with the CJ Tag Board software that allow for code injection issues.   Multiple input validation vulnerabilities in CJ Tag Board have been reported, which can be exploited by remote users to compromise a vulnerable system.   The issue comes from improperly filtered user input for the "User-Agent" HTTP header and the "banned" parameter for the admin side. This issue effects CJ Tag Board version 3.0. No update or patch has been posted as of yet to correct this issue.
228808
Stefan Esser points out a new patch today - CORE GRASP - from the Core Security Technologies group that provides taint support surrounding the mysql_query function.   Their implementation adds a tainted or not flag for every byte so that it is possible on invocation of mysql_query() to determine any kind of injection.   Unfortunately, Stefan also mentions two big issues it might have from the get-go: the overhead for the memory needed can slow things down and an incorrect parsing in their query handler could lead to injection attacks.
24218
A tool that could help in the battle against spam and phishing attacks receives industry approval.
148612
Attackers can trick browsers into releasing password information.
292176
NBC muckraker outed at DEFCON &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
344614
Amero's defense requests judge throw out verdict &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
12942
After a screenshot on MSDN appeared to show an IE8 beta passing an accepted Web standards test, some came to the only conclusion they could: that the test had to be broken.