Nominet solves rogue domain seller problem
452908
Transfer price reduction removes incentive. Nominet has gone a long way toward solving the problem of rogue domain sellers in the UK by reducing transfer fees.â¦
26726
The company fixes a huge security vulnerability that made it possible for attackers to steal users' personal data. By the Associated Press.
424439
10.3.7 fixes bugs, fills security holes
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
413787
The site that helps people evade registration roadblocks on websites couldn't evade trouble itself. Its server host, perhaps bowing to pressure, pulled the plug last week. But a new host is found and BugMeNot is back up. By Rachel Metz.
271223
Security experts have identified a development kit that can set up a scam site in as little as two seconds on a compromised server.
474476
Arbitration is part of the next wave of security measures, and can be effective against spammers who illegally harvest email addresses from a honeypot on your website.
347238
Hole allows attackers to create fake Web sites that look genuine.
710855
(InfoWorld) - A security researcher has found a serious vulnerability in an aging yet widely used software program used for the Internet's addressing system, prompting the software's maintainers to retire the affected version. The flaw within Berkeley Internet Name Domain 8 (Bind 8) software could misdirect users to a fraudulent Web site even if a user typed in the correct URL (uniform resource locator), wrote Amit Klein, chief technology officer for security vendor Trusteer. Klein discovered the problem. Users are being advised to upgrade to Bind 9.4, the latest version of the software, which underwent an architectureÂ rewrite to improve security. The software, looked after by the Internet Software Consortium (ISC), is free to download. ISC issued an interim patch, but due to other weaknesses in the software, ISC is also ending support for Bind 8. "It's never easy to retire a product," wrote the organization in an advisory. "The security issues of Bind 8 are many, and seven years after the release of Bind 9, ISC must devote our efforts to maintaining and enhancing the current version." About 14 percent of the DNS servers on the Internet in 2006 were still using Bind 8, according to Infoblox, which conducts an annual survey of DNS servers. "Bind 8 is still a very popular DNS server nowadays, thus this attack applies to a big part of Internet users," Klein wrote. In a research paper, Klein described a weakness in the algorithm Bind 8 uses to generate transaction IDs, apparently random serial numbers that allow it to spot whether someone is trying to supply it with false information in respose to queries. The weakness makes it possible to observe a few queries and then predict the transaction ID in the sequence, Klein wrote. Using that information, an attacker can then send erroneous information to the DNS server, "poisoning" the address stored against a particular domain name in its memory cache. Thus, traffic intended for a certain Web site from users of that DNS server can be diverted to another server containing a fraudulent site, a deception known as "pharming." Although Bind 9 has a better transaction ID algorithm, it could also be vulnerable, Klein wrote. Â
723078
Security company says it has seen an attack using a cross-site scripting flaw in 2Wire DNS routers.
418704
Who should run the UK internet registry? Podcast Two spaces on the board of UK registry owner Nominet will be decided at the company's annual general meeting this Wednesday.â¦
664604
Your e-mail gets spammed, your instant messaging client gets spammed, your blog comments get spammed... and now your printer doesn't have to feel left out, because researcher Aaron Weaver has discovered how the sellers of pump-and-dump stocks and dubious chemical concoctions can get you there, too.
15644
'DNS-liars' Researchers have uncovered a large network of rogue servers that threatens end users by silently feeding them counterfeit versions of trusted websites.â¦
49498
THE PROBLEM with phpBB software, which we reported on this time yesterday is over. And it&#39;s thanks to Google, it appears. F-Secure said that the Santy worm, which defaced web sites and used a Google search
542850
A directory reversal within "flat" extensions could lead to system profile attacks.
284802
Fast, intelligent, automatic spam detector using Paul Graham style Bayesian analysis of word counts in spam and non-spam emails. Filtering adapts to personal tastes automatically. No manual rule creation required. This release adds the final missing pieces to the new parser code.  MBX files and Content-Length headers are now supported.  Database cleanup when signals are caught has also been improved.  I would like to move 1.1 into the stable branch fairly soon so if folks would test out this release and report any problems it would be a big help!   The latest release can be found here: https://sourceforge.net/project/showfiles.php?group_id=61201&package_id=73566
647793
(InfoWorld) - If hijacked sites and hosting companies that fail to police malware distribution sources represent two of the most serious threats to Internet security, there may be hope for improvement, according to researchers working with Harvard Law School's StopBadware.org. After publishing a list of rogue Web site hosting companies and launching a campaign to label every malicious site they can find on the Internet, an effort that has filtered out over 600,000 nefarious applications thus far, the StopBadware team says that people are responding.Â  The project currently counts less than 250,000 Web sites that it classifies as distributors of programs that qualify as badware -- any application that either tries to hide itself or any of its intentions, based on the parameters of the effort. StopBadware also announced that Internet mainstays Paypal and VeriSign have joined its influential cast of sponsors, which includes Google. By inserting warnings into Google's search results that steer end-users away from malware and adware sources, while communicating with those responsible for creating or handing out the suspicious programs, progress is being made, according to StopBadware's lead researchers. "The interstitials delivered with Google search results are working, and we've been able to communicate with a lot of Webmasters. It's having a neighborhood effect," said Prof. John Palfrey, executive director of Harvard Law School's Berkman Center for the Internet and Society. "We're reaching out to hosting companies and Webmasters and filtering the complaints where it seems useful, and we've seen many people change their behavior." In addition to all the people who have no idea that their sites are being used to pass out malicious programs and those who misunderstand the nature of the applications they're distributing, StopBadware researchers say that even those who create many of the programs are engaging in the give and take. For those who can be reached, the debate over whether or not a particular program qualifies as badware typically can be resolved, with very few of those who agree to modify their applications going on to repeat their behavior, said Jason Callina, one of the StopBadware researchers. "We're seeing a low recurrence of people coming back on the lists once we've gone through the testing and communications process. People are actually helping each other move off the lists," Callina said. "When there's ever any serious disagreement, it's always an argument of our definition of spyware versus theirs." Most Webmasters complain about the interstitials on Google -- which they are notified of 24 hours in advance and given the opportunity to appeal. But the immediate drop in search-driven traffic that the warnings produce quickly convinces people to either take any questionable applications offline or kill their sites altogether, Callina said. Meanwhile, StopBadware's list of hosting companies responsible for supporting the largest number of malware sites resulted in at least one leading culprit -- iPower Technologies --Â  changing its ways, while two others have disappeared completely. Others have also begun to modify their behavior, Palfrey said. "The best measure of our success is when any of these companies change their business process and we're seeing them adjusting," said Palfrey. "At the same time, we're trying to enable [end users] to make better choices with their using habits." So many of the people who end up on StopBadware's list need help understanding what it is that they're doing wrong that the team feels its ability to mete out advice is being overwhelmed, he said. At the same time, StopBadware admits that sophisticated hackers are still advancing their efforts at an alarming pace and the organization can't keep up with the ever-growing volume of online malware programs. In addition to tracking down the programs, StopBadware is also charting regional trends, and the researchers contend that a growing number of suspicious applications are originating in China. The level of interaction between malware authors in the region and their Western counterparts is also becoming more prevalent, with a fair share of distribution still emanating from former Soviet-bloc regions as well, the team said. The key for legitimate businesses to steer clear of the entire problem is to be careful with the companies they partner with, said Palfrey, who served as host of an Anti-Spyware Coalition conference held at Harvard in June. The security consortium is backed by influential industry players including AOL, Dell, Google, McAfee, Microsoft, and Yahoo. "The biggest concern for legitimate businesses at this point is related primarily to software bundling," said Palfrey. "There's often a complicated chain between the original purveyor of a program and the consumer, so companies need to be explicit about what they would qualify for badware-type behavior themselves and hold their partners to that."