add a comment
15I like it!

Vulnerability Disclosure: Is it Blackmail, Whitemail or Bluemail

Hackers (or security researchers) come with a range of rainbow colored hats. Some guys'n'gals are nice (the White Hats). They find and disclose problems in communication products using approved responsible disclosure models. Others are in the business for money, and are not satisfied by the fame they get for disclosing problems. The process can easily get close to what some would consider unethical, or even direct blackmailing.



add a comment
I like it!

The Kilo-Day threat and mundane security

In the security business we spend a lot of time worrying about the "zero-day" threat that appears out of nowhere and immediately starts attacking a hereto unknown vulnerability. We worry so much that we overlook the vulnerabilities we already know about. The ones that have been hanging around on our systems, known but unaddressed, unpatched and wide open.

| Opinion | Security | 04/29/09 at 3:19 pm |


add a comment
1I like it!

Windows bugs never really die

Hackers can successfully attack Windows PCs months -- even years -- after Microsoft Corp. fixes a flaw, a security expert said Thursday, because there's always a pool of unpatched systems.

| Analysis | Security | Windows | 04/24/09 at 9:06 am |


add a comment
9I like it!

Black Hat 'supertalk' halted due to vendor concerns

The Black Hat security conference is full of drama again in Amsterdam with the last-minute cancellation of a presentation.

| News | Security | 04/16/09 at 12:33 pm |


add a comment
2I like it!

Firefox fix due next week after attack is published

Mozilla developers are scrambling to fix a critical bug in the Firefox browser after attack code was released Wednesday.

| News | Security | 03/26/09 at 8:24 am |


sort by

The Kilo-Day threat and mundane security

| Opinion | Security | 04/29/2009 - 15:19 | I like it!

Windows bugs never really die

| Analysis | Security | Windows | 04/24/2009 - 09:06 | 1I like it!

Black Hat 'supertalk' halted due to vendor concerns

| News | Security | 04/16/2009 - 12:33 | 9I like it!

Firefox fix due next week after attack is published

| News | Security | 03/26/2009 - 08:24 | 2I like it!

Power grid is found susceptible to cyberattack

| News | Security | 03/21/2009 - 20:22 | 23I like it!

Popular Apps with Critical Security Vulnerabilities

| Opinion | Security | 01/26/2009 - 11:00 | 2I like it!

Apple patches months-old Java bugs

| News | Operating systems | 09/26/2008 - 10:33 | 9I like it!

Reason Behind Vulnerabilities

| Opinion | Security | Software | 09/08/2008 - 14:54 | 5I like it!

Developer fixes 33-year-old Unix bug

| News | Open Source | Operating systems | 07/10/2008 - 13:37 | 6 comments | 35I like it!

$1B market for meddling with DNS poses security problem

| News | Internet | 06/24/2008 - 13:41 | 1I like it!

Firewall vendors scramble to fix DNS problem

| News | Networking | 08/03/2008 - 19:12 | 2I like it!

Microsoft warns of new Access attack

| News | Security | 07/07/2008 - 14:22 | 1I like it!

Symantec: IE 6 more vulnerable to unpatched Microsoft flaw

| News | Security | 08/04/2008 - 09:04 | I like it!

Microsoft patches security bugs in products

| News | Security | Windows | 07/08/2008 - 15:40 | 3I like it!

Microsoft to predict exploitability of its own bugs

| News | Security | 08/05/2008 - 14:52 | 3I like it!

Internet bug fix spawns backlash from hackers

| News | Networking | Security | 07/10/2008 - 09:19 | 4I like it!
peer-to-peer

Esther Schindler
If the comments are ugly, the code is ugly

claird
SVG a graphics format for 21st century

pasmith
Take Chrome OS for a test spin

Sandra Henry-Stocker
Solaris Tip: Have Your Files Changed Since Installation?

sjvn
64-bits of protection?

jfruh
Android fragments vs. the iPhone monolith

mikelgan
What Gizmodo missed about the Pro WX Wireless USB disk drive

 

Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Featured Sponsor

AISO founders envisioned a Web hosting company that was environmentally friendly. While the company employed energy-efficient innovations like solar panels, its infrastructure produced unacceptable power and cooling requirements. Find out how AISO leveraged AMD technology to overcome their challenge in this case study white paper.

In this whitepaper, Scalar explores the opportunity to change the landscape with respect to mission critical databases built around Oracle. Leveraging technologies such as Linux, high-end commodity processing power and Oracle RAC technology to architect, design, build and maintain database infrastructure that delivers maximum availability, reliability and performance at a fraction of traditional cost.

On a typical day, weather.com, the Web site for The Weather Channel in Atlanta, serves up between 15 million and 20 million page views. But in September 2004, when back-to-back hurricanes ransacked Florida, the peak traffic on one day more than tripled: over 70 million page views by more than 7 million unique visitors. Read the full success story now.

Marketplace