Doug Feith's Web Counterattack
338343
The former Pentagon policy chief launches a website to rebut critics who say he pushed the U.S. into war
408174
Firth and degredation Hackers turned the Forth Road Bridge website into a filth jamboree after breaking into its systems to plant script designed to redirect surfers to a Turkish site hosting malware.â¦Learn &amp; Contribute, Live &amp; Online - The Register Debates Green Computing
506696
On the Zend Developer Zone, Cal Evans has posted a quick look at one of the new offerings from the Manning Publishing group - "PHP in Action".   My buddy Olivia over at Manning Publications sent us a present recently. They are working on the title PHP in Action and they sent us a chapter to share with you. PHP in Action is scheduled to release in April of this year but it's available now in "Manning Early Release Program", or MEAP. MEAP is a cool program that allows you to buy the book long before it is released and have access to the chapters as they are released. Then, when the final dead-tree edition ships, they will send you one. The great thing is, there is no additional cost for MEAP.   He links to the book's description on the Manning site and gives some credit to the authors, Dagfinn Reiersol with Marcus Baker and Chris Shiflett. And, of course, the link to the sample chapter from the book - a look at Design Patterns.
706547
Letters: On the need for a code of behavior for the Internet.
44261
An obscure government website that became an Internet conflagration
79963
Web gateway filtering specialist Finjan is reporting a new toolkit that uses randomized JavaScript to stay hidden from virus crawlers and deliver its payload via compromised Web sites.Dubbed by Finjan's Malicious Code Research Center (MCRC) as the "Random JS Toolkit," the malware development package is allowing attackers to create threats that only attempt to victimize an individual computer in the same manner a single time to protect against discovery by anti-virus systems and researchers' automated "crawlers."By dynamically changing the JavaScript employed to deliver each variant of attack being created, and by using random file names that are only delivered to the same machine or IP address once, Finjan researchers said the malware authoring package is meant to avoid the programs used by AV researchers to find new threats emerging on the Web.Typically when automated crawler programs come across new attack samples, they return to the threats' source URLs to verify their names and characteristics and to create signature files that allow their products to block the programs -- or they enter the sites onto so-called blacklists of compromised domains.However, once a machine has been infected with an attack made using the Random JS Toolkit, the threat will recognize that the machine has already been targeted and won't attempt to download it again, thereby thwarting efforts to identify or track the exploits, Finjan experts contend.During the month of December 2007, Finjan estimates that more than 10,000 individual sites were compromised with attacks built using the Random JS Toolkit. Most of the URLs serving as distribution points for the attacks were legitimate sites that had been hijacked, the company said.Among the infected sites were some that would qualify as well-known, highly trusted domains, said Yuval Ben-Itzhak, chief technology officer of Finjan.Ben-Itzhak said the toolkit serves as a prime example of the types of tactics he expects leading-edge malware authors to utilize more frequently in the coming year."We've found the initial 10,000 sites, but we're sure that there are many more that have already been infected. When we can find this number of exploits, it is clear that this must be a very significant attack that has affected a lot of people," he said. "Using the combination of techniques available in this toolkit, the threats that are being created can become very powerful and stay alive to infect people for longer periods of time."Among the types of malware infections being served up using the toolkit, Finjan has observed everything from Trojan viruses and keystroke loggers to botnet recruiting programs, he said.For its part, Finjan's real-time code inspection technology can defend against such threats because it eschews the use of traditional virus signatures or blacklists in favor of constant monitoring for any malware activity coming across a network armed with one of its devices, Ben-Itzhak maintains.Rival AV vendors, including Symantec, contend that features such as the market leader's recently developed "generic exploit prevention," based on behavioral cues, should also be able to isolate and defend against such emerging attacks.Unlike the widespread iFrame attacks that proliferated across the Web during 2007, threats created using the Random JS Toolkit will also be much harder for security researchers to track down because they do not lead back to central sites where the actual malware code itself is hosted, Finjan maintains.Since the involved malware code is loaded directly on a site, and it won't attempt infect the same computer or IP address twice, traditional URL blacklisting and signature-based techniques will likely prove futile against the attack, the company said.However, from what the security appliance vendor can deduce, Ben-Itzhak said the firm believes there is only one malware group currently using the toolkit."From what we can tell, all the information flowing back from the compromised sites is heading to the same server," he said. "This indicates that there is probably only one group controlling this malware code thus far, and that they are probably being very successful; this is just another step forward for the criminals involved to continue to improve their attack methods and remain undetected."Ben-Itzhak said that the involved server is not one that matches any of the company's lists of machines controlled by well-known malware authoring groups such as the Russian Business Network. The server the company is tracking was originally located in Europe, but has recently been moved to China -- and likely will continue to be moved around to avoid detection, according to the expert.Most of the data the security company has seen being sent to the server has been related to online banking username and password data, he said.As part of its investigation, Finjan discovered that one of the Web properties infected with the randomized JavaScript attacks was an online advertising network that serves up as many as 14 million online banner ads per week. The security device maker reported that unnamed company was informed and is currently working to clean out its systems.
53307
Itâsa safe bet that smiles are showing up on Netscape devoteesâ faces as Internet Browser War II broke out this week. They were a forgotten bunch, these loyalists, nursing their aging, once-dominant Netscape
708492
Links to this week's topics from search engine forums across the web: Having Trouble Believing In Crosslinking Penalties - Directory Wars - Local Search is just Hype - 20 Guidelines To Create Successful Landing Pages - Google as Web King, For Now... - Robots.txt Issue With Duplicate Content
211501
The web as your auld grannie might have wished it
11723
Also: Pentagon's UAV use hits new high. See what people are saying on News.com Extra.
105550
Plus: Geek squad comes to the rescue. [News.com Extra]
123159
It seems  PubSub.com is offering a bounty  on an HTTP Delta implementation of RFC 3229.  This seems in response to the current meme  of RSS and Atom syndication bloat.   First off this is certainly *very* generous of them.  I'd like to see this happen more.  Good for you guys!  I myself  have thought that HTTP Deltas were a viable solution but I was wrong.  Of course most people aren't familiar with HTTP deltas.  Eseentially what an HTTP delta enables is a client/server differential protocol that can exchange a patch from the server to the client.  The client is then patched and it will then have the updated version without having to transfer the *entire* document again.  For example say you ...
44637
By Tom Angleberger   tomangleberger@yahoo.com
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
635724
In a new post on his blog, Christian Wenz mentions the latest results of the SANS Institute's Top 20 Internet Security Attack Targets list which both includes a new entry ("Users") and several mentions of PHP and PHP-related applications.   Of course you can debate how such a Top list came together and what the real value behind that is, but there are two specific points in this year's list that I found quite interesting.   There's two targets for the PHP community to worry about - sysadmin/hosting and things developers need to keep in mind. Items on these lists include:  Always test and deploy patches and new versions of PHP as they are released Use Intrusion Prevention/Detection Systems to block/alert on malicious HTTP requests. Consider using Apache's mod_security to block known PHP attacks If you use PHP, migrate your application to PHP 5.2 as a matter of urgency. Encode all output using htmlentities() or a similar mechanism to avoid XSS attacks  You can check out the full information over on the SANS Institute website.
433186
Spyware problems continue to rise. Congress is stepping up to the plate--but will its efforts be more effective than CAN-SPAM?
646982
The software works its way into a computer, hijacking the Web browser and causing the CD-ROM tray to slide open mysteriously. WASHINGTON: The US government has sued a New Hampshire man in its first attempt