Welcome | Sign In
LinuxInsider.com
Exploits & Vulnerabilities
Let's Give the iPhone Hackers a Big Round of Applause
November 06, 2009
I'm the kind of guy who rarely bothers to hack my devices. By "hack," I mean use the hacks and instructions of those who are much more intrepid than I. Tinkering with a device that I shelled out hundreds of dollars for, if not more, isn't something I take lightly. If I break it, I've not only lost usage of the device, I'm out of the money, too. If I had a bigger bank account, I might be more cavalier about it all.
ISF Panelists Spar Over Security vs. Anonymity
November 03, 2009
Can the Web's big-time masters of malware really be tracked down? How risky is cloud computing to network security? And what challenges await the Obama administration's plans to lock down the nation's electronic infrastructure -- while at the same time creating a "smart grid?"

Is AES Encryption Crackable?
November 03, 2009
In the field of computer technology, some topics are so frequently and fiercely disputed that they almost resemble religious feuds -- Mac vs. PC, for instance, or open source vs. proprietary software. Other topics, though, don't see nearly the same level of high-profile debate. Take the invulnerability of AES encryption, for example.
Tech Futurist Sees Rosy Prospects for Net Security
November 02, 2009
Sometime between now and the year 2019, Comcast will start going after botnets and will stop sending malicious Web traffic to its customers. Google will send up more alarms if your search results include possibly infectious links. Microsoft and Apple will get better at plugging holes in their software.

Firefox Locks Out Microsoft's App Dev Tech
October 19, 2009
Microsoft technology used to program applications that can be accessed through a browser continued to be blocked for Firefox users Monday. Mozilla had been blocking two Microsoft plug-ins after the discovery that Microsoft's .Net 3.5 SP1 install silently adds a plug-in to Firefox allowing the surreptitious launch of a malicious AML browser application that could take over infected machines.
Ridding the Web of the XSS Scourge
October 19, 2009
Cross-site scripting/SQL injection attacks have been blamed for numerous data breaches, perhaps most notably the nightmare of the Heartland Payment Systems data breach. This type of attack has been around for at least a decade. However, the tendency for programmers to continue with old, insecure code writing techniques make XSS one of the most deadly methods for hackers.

Apple Tweaks iPhone 3GS to Lock Out Jailbreakers
October 14, 2009
Apple has begun shipping new units of the iPhone 3GS that reportedly cannot be jailbroken using common methods. These new units have a new boot ROM that apparently can't be touched by the exploit, 24kpwn, from the iPhone Dev Team. The news comes just days after jailbreaking icon George Hotz released his blackra1n jailbreak.
Microsoft Preps for Ginormous Patch Tuesday
October 09, 2009
Microsoft on Friday announced that it will issue a record 13 security bulletins on its next scheduled Patch Tuesday, which will arrive Oct. 13. It rates eight of these as critical and the rest as important. The bulletins address 34 vulnerabilities across a variety of Microsoft products, ranging from Windows to its Forefront security app to Internet Explorer.

Certified Ethical Hacker: Not Your Everyday Job
October 07, 2009
Computer infrastructure has become the foundation of businesses, governments, and militaries across the globe. Unfortunately, the onset of computer dependence has only opened a myriad of opportunities for cybercrime and potentially devastating consequences.
The Webification of App Security
September 03, 2009
Web applications are growing in popularity, and with this increasing ubiquity of Web apps, security is more than ever becoming the No. 1 challenge for enterprises. Traditional network component vendors are under pressure to solve security challenges. However, developing this capability on their own is complex, expensive and requires new skills.

Geolocation Data Could Lead Twitter to Treasure or Trouble
August 21, 2009
In a move that might finally open a moneymaking channel for the company, Twitter announced on Thursday that it will launch a geolocation feature as part of its microblogging service. It will also offer a new API so developers can add latitude and longitude data to any tweet. Developers will be given early access to the API.
Is There a Dark Cloud Over SSL's Green Glow?
August 19, 2009
The security of any given computer system is no better than the skills researchers bring to finding the next potential program flaw. Network security workers concentrate on updating patches and making sure only validated users can access the corporate LAN. Meanwhile, security researchers hunt for existing but unidentified infrastructure flaws that could let in the bad guys.

Can Microsoft Keep Its Word?
August 14, 2009
A Toronto company aptly named "i4i" is getting its revenge on Microsoft by kicking it square in the monkeymaker. i4i has sued Redmond, claiming that Microsoft Word infringes on its patents. Judge Leonard Davis of the U.S. District Court for Eastern Texas -- where else? -- has given Microsoft two months to halt sales of the offending software.
Another Day, Another DDoS Blitz for Twitter
August 13, 2009
For the second time in less than a week, Twitter has been hit by a distributed denial of service attack. Unlike the first attack last week, the latest cyberassault, which started on Tuesday, has been confined to Twitter so far -- Facebook has apparently not been affected.

IE6: Dead Browser Walking
August 12, 2009
Google's social network Orkut reportedly plans to phase out support for Internet Explorer 6, igniting a long-simmering debate over continued use of the 8-year-old version of the browser. The current version is IE8. Microsoft intends to maintain support for IE6 in conjunction with its support for Windows XP -- the OS that originally delivered it.
Taking FOSS Security Seriously
August 07, 2009
Code hunters are spotting with greater frequency defective coding that could open security holes in open source software. The Open Source Report 2008 and the Architecture Library Report, conducted by Coverity for the U.S. Department Homeland Security Cybersecurity Open Source Hardening Project, shows more than 10,000 defects fixed since project launch in March 2006.

See More Articles in Exploits & Vulnerabilities Section >>
Shortcuts
ECT News Network Information
Reader Services
Corporate
ECT News Network