Hackers and suits: Tips for bridging the gap
80208
A senior developer surveys the cultural chasm between suits and geeks, and says that communication is possible -- but that managers need to keep a few things about the hacker's worldview in mind.
218085
Security researchers at South Korea's first international hacker conference rip holes in Linux and VOIP. But where are the drinking games? Quinn Norton reports from Seoul.
528632
Criminal organizations have organized their hacking efforts; it is no longer just "script kiddies" trying to break into your network. In the past several years, it has become apparent that there is real money to be made from criminal hacking. Although there are many ways to secure systems and applications, the only way to truly know how secure you are is to test yourself. By performing penetration tests against your environment, you can actually replicate the types of actions that a malicious attacker would take, giving you a more accurate representation of your security posture at any given time.
607068
As per suggestions contained in the FAQ: Herein lies a report of two identified and as-of-yet uncorrected security flaws in Scoop. &nbsp;Enough detail will be provided to assist admins in investigating and correcting the flaws, but it is the author's hope that the details of the flaws will be sufficiently obscured to prevent abuse by the undesirables. Executive summary: Through the exploitation of various unchecked privileged operations, attackers may be able to perform admin-level actions leading to data loss. &nbsp;Additionally, well-intentioned security measures combined with XSS vulnerabilities can be exercised to simulate admin-level action, resulting in data loss.
223591
Security researcher demonstrates a way to use cross-site scripting to remotely spam an internal network printer.
200333
Kevin Mitnick's name is synonymous with hacking. And for good reason. Compiled by Tony Long.
252917
Techniques designed to make suspects incriminate themselves through calls or texts
295255
Also: Tightening the Net on cybercrime. Read these stories and more from around the Web on News.com Extra.
186929
Cyber criminals are cashing in on their expertise by offering tool kits that let anyone craft attacks.
154393
A firm run by a notorious Norwegian hacker offers software to make sharing music and films easier.
665260
For some security researchers who uncover flaws in leading computer programs, a nod of appreciation from software companies is no longer enough. Now they want money.
644327
How do you protect a home network against a hackerÂs attack?
319877
From disguising applets to look like part of Windows to co-opting security tools, Web crooks use a variety of methods to bypass your system's safeguards.
690719
Web 2.0 applications such as wikis, blogs and online document editing offer nice functionality for users, but the bad guys are paying close attention as well -- and some of their tricks may be all but undetectable.
740094
In his travels as a PHP developer, Jamie Wong has gathered some helpful debugging tips that are shared in this latest post to his blog.   Here are some bugfixing rules and tips Iâve learned working all these years with PHP. I emphasize mostly on fixing bugs than preventing them, which is another subject worth of its own article. Iâve moved to Rails, but I wanted to finish this post as a farewell and thanks to every article and documentation that was useful to me. Hope this is useful to you too.   Topics covered include:  Assume nothing Turn Error Reporting to show all errors Read the error message Understand the bug "Scooby-Bug, where are you?" Get as much information as possible  Each has some explanation below it and, in some places, a bit of code to clarify the point.
675185
In a new entry on his blog today, Marco Tabini introduces us to 5 PHP Performance Tips that we "probably don't want to hear".   I thought it might be interesting to write an article about the performance-enhancing tips you probably don't want to hear about - that is, those that are most likely to produce measurable (and durable) results but do require some effort on your part.   His list consists of:  You Don't Need To Plan Ahead In Order To Have A Plan Combat Database Abuse Do You Really Need A Database Anyway? Scale Horizontally Refactor To Scale Vertically  For each, he explains the title and gives a bit of validation to the point. There's some great mentions of tools that you can use to help accomplish them too - a profiler, the Lucene and Xapian full-text databases, and Lustre.
763821
Companies that have spent billions on cyberdefenses to thwart intruders are now addressing an even bigger threat: employees. Many are investing in software that monitors sensitive content inside corporate networks, say security analysts and venture capitalists.