Security company launches eBay for bugs
688541
InfoWorld - Psst. Want to buy a zero-day? A Swiss startup called WabiSabiLabi has some for sale, but to qualified buyers only.
335478
An anonymous group of malicious hackers reopened an online store that sells the stolen source code of prominent software products and is offering the code for Ciscoâs PIX firewall software to interested parties for US$24,000, according to messages
389304
Bounty program paying off Adobe and Symantec have unleashed legal attack dogs on nine individuals accused of selling pirated software on eBay.â¦
459314
Online giant teams up with RSA Security to keep users' account info safe.
262152
NetSuite has updated the e-commerce piece of its NetSuite hosted application suite, allowing users to manage sales efforts on eBay Inc.'s action site
52703
New service offers spam, virus filtering for small and mid-sized businesses.
638081
Every type of hacking software, including Trojans and step-by-step tutorials on how to effectively hack Web sites are now entered auction house eBay, and they are getting more difficult ot police.
613516
NEW YORK - EBay Inc., the world's largest online auctioneer and payments company, launched a website yesterday that allows ordinary investors to buy securities aimed at improving conditions in the world's poorest countries.
448921
(InfoWorld) - Psst. Want to buy a zero-day? A Swiss startup called WabiSabiLabi has some for sale, but to qualified buyers only. On Tuesday, the company launched a security vulnerability marketplace, where details on unpatched software flaws can be bought and sold. By Thursday, the site was offering details on four bugs in products such as the Linux kernel and Yahoo Messenger. No bids had yet been registered, and asking prices for the research ranged between â¬500 ($681) and â¬2,000 A zero-day vulnerability is a previously undisclosed bug that has not been fixed by the vendor. WabiSabiLabi argues that the computer industry's ethical disclosure policies have led to a raw deal for security researchers, who typically are not paid for disclosing vulnerabilities. "Nobody in the pharmaceutical industry is blackmailing researchers (or the companies that are financing the research), to force them to release the results for free under an ethical disclosure policy," the WabiSabiLabi Web site states. Representatives from WabiSabiLabi could not immediately be reached for comment. The company bills its marketplace as a way for "security researchers to get a fair price for their findings and ensure that they will no longer be forced to give them away for free or sell them to cyber-criminals." But to David Perry at Trend Micro, it looks like something else. "It's going to be eBay for vulnerabilities," he said. Although WabiSabiLabi says it will sell details only to legitimate buyers, Perry is concerned that the site could be used to put dangerous information into the hands of criminals. "We're looking at the potential of cyber warfare coming up," said Perry, who is Trend Micro's global director of education. "Now we're going to peddle vulnerabilities in a winner-takes-all auction. How do we know who's good and who's bad when we do this?" Security researcher Cesar Cerrudo said that while it's uncommon for researchers to go underground to sell their vulnerabilities, it does happen. "Researchers will try to get money in the easier and faster way, and sometimes that can only be done in the black market," said Cerrudo, CEO of Argeniss Information Security. WabiSabiLabi is run by Herman Zampariolo, formerly CEO of Italian networking vendor iLight SpA. It lists Roberto Preatoni, founder of the Zone-h.org cyber-defacement Web site, as its strategic director. Like eBay, WabiSabiLabi offers sellers a variety of options. Research can be offered at a fixed price, sold at auction, or sold to a number of different buyers in what is known as a Dutch auction. WabiSabiLabi will test the research to make sure the vulnerabilities operate as advertised, and the company will also vouch for the sellers and buyers, who can remain anonymous and trade under nicknames. Companies such as 3Com's Tipping Point division and VeriSign's iDefense Labs have offered cash for this type of research before, but this is the first time that such an open marketplace has been created, Perry said. Argeniss's Cerrudo doesn't share Perry's fear of the vulnerabilities being misused. "This is already happening in the underground," he said, "but with a public service like this, I think things are a little clearer."
308257
Online auction giant eBay has been slow to respond to concerns about pirated software being sold there, prompting the Software &amp; Information Industry Association (SIIA)&#160;to file nine lawsuits against eBay-based software sellers, an SIIA official said.The SIIA believes it is necessary to file the lawsuits because eBay has been largely uncooperative in cracking down on software piracy, said Keith Kupferschmid, senior vice president of the trade group&#39;s antipiracy division.&quot;We haven&#39;t had very much success in getting [eBay] to work with us,&quot; he said.SIIA has asked eBay to stop &quot;buy it now&quot; and one-day auctions for software, but eBay has not complied, Kupferschmid said. In many cases, sellers offering pirated software are looking to sell it quickly, he said. SIIA also asked eBay if the trade group could buy banner advertisements warning about piracy when a user is looking at software, but the auction site declined, Kupferschmid added. &quot;We shouldn&#39;t have to do that,&quot; he said. &quot;eBay should do that themselves.&quot;Two eBay spokespeople didn&#39;t immediately respond to a request for comments on SIIA&#39;s position.The lawsuits, filed in U.S. District Court for the Northern District of California, are the largest round the SIIA has filed since launching its auction-site antipiracy program two years ago, the trade group said in a news release. Seven of the lawsuits were filed Wednesday, the SIIA said. Two others were filed two weeks ago. Most of the lawsuits target eBay sellers of Abobe PhotoShop CS3; one of the lawsuits targets a seller of several Symantec software packages.The defendants are from Texas, California, Washington state, Illinois, and New Jersey.&quot;SIIA has declared war against those who continue to sell pirated software on auction sites such as eBay,&quot; Kupferschmid said. &quot;Our goal is to give illegal software sellers a rude awakening so that unsuspecting software buyers and legitimate sellers are protected. For too long, auction sellers have been able to sell pirated software while risking only the removal of their auction.&quot;Since launching its Auction Litigation Program about two years ago, SIIA has filed about 20 lawsuits, not including the nine from the last two weeks, Kupferschmid said. The SIIA has won about six of those lawsuits in court, but in every case, the lawsuits have resulted in the seller stopping unauthorized sales of software, he said.&quot;Ultimately, they have stopped selling the illegal software, and that&#39;s what we&#39;re trying to do here,&quot; he said.
668417
Web-services security company releases appliance designed to authenticate access into business networks.
604138
Company founder says eBay-like site WabiSabiLabi will improve security by ensuring researchers get a fair price for their work.
570924
The companies plan to share security features to help customers protect their networks from worms and viruses.
497821
Alternative browser features protection against online scams.
330983
Will dirty dealers scare eBay users off?
50784
Company will use technology from Digital Resolve that builds lists of Web sites and their legitimate IP address.
107131
Soon on sale: hardware and software from a start-up whose software with a new approach for protecting data by dispersing it across several servers--and maybe even continents.