Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Security news for week of 8/30/04

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Security Notices & News
View previous topic :: View next topic  
Author Message
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Mon Aug 30, 2004 7:57 am    Post subject: Security news for week of 8/30/04 Reply with quote

Security news for week of 8/30/04

HOW SECURE ARE YOUR SYNDICATION FEEDS?
The most common mistake I've seen is giving your syndication software
the wrong permission mask. For instance, if you provide only one feed
for all of your forums, then you need to make sure that any hidden
forums (such as sections for administrators and moderators) are not
added to the feed.
http://www.net-security.org/news.php?id=5886

ENCRYPTION GETS A BOOST
A new standard re-energizes industry of data protection.
http://www.net-security.org/news.php?id=5889


DO HACKERS HAVE YOUR HARDWARE SINGING THE BLUES?
Bluetooth, which is becoming common, is insecure. Attacks
demonstrated at this year's Black Hat and Defcon conferences targeted
mobile phones but also suggest that printers and other
Bluetooth-enabled devices could be next.
http://www.net-security.org/news.php?id=5890


CRYPTANALYSIS OF MD5 AND SHA: TIME FOR A NEW STANDARD
Crypto researchers report weaknesses in common hash functions.
http://www.net-security.org/news.php?id=5891

USER, BEWARE OF NEW XP PATCH
Microsoft has a massive patch for some of the many bugs and security
holes in Windows XP. If you're using Windows XP, you might want to
download the software patch and install it. But then maybe you
shouldn't.
http://www.net-security.org/news.php?id=5893


ATTRACTING ATTACKERS: WINDOWS VS. UNIX
The number of attacks of each kind doesn't reflect the relative
dominance of the targets, which leaves us free to pursue alternative
hypotheses, including my favorite: Windows gets attacked more simply
because it's easier and therefore more profitable for comparable
levels of effort.
http://www.net-security.org/news.php?id=5894

PURSUING A CAREER IN ETHICAL HACKING
Popular IT Certification signifies a skilled professional who
understands and knows how to look for the weaknesses and
vulnerabilities in IT systems and infrastructure and uses the same
knowledge and tools as a malicious hacker to protect them.
http://www.net-security.org/news.php?id=5899

HOSTING WIRELESS APPS WITHOUT COMPROMISING STABILITY & SECURITY
This article introduces a new solution that can prevent rogue
application behaviour, such as uncontrolled SMS or MMS blasts or
over-consumption of resources leading to an interruption in service.
http://www.net-security.org/news.php?id=5901

IGHTLY SHOD FOOTPRINTS TOUGHEN SECURITY
How can you make your wireless network less accessible to intruders?
http://www.net-security.org/news.php?id=5903


ENTERPRISES LOOK AT OUTSOURCING SECURITY
The need to stay ahead of the hacker curve will drive nearly 90
percent of US enterprises to outsource their security to managed
service providers by the end of the decade, a report released this
week suggested.
http://www.net-security.org/news.php?id=5904

IS SECURITY RIPE FOR OUTSOURCING?
Security demands for online applications such as e-commerce and Web
services are prompting more corporate customers to hand off security
functions - such as intrusion detection and firewalls - to outside
service providers.
http://www.net-security.org/news.php?id=5908


SITE SLAMS IE'S SECURITY
The 'Browse Happy' campaign suggests that insecurities in Microsoft's
browser should prompt people to switch.
http://www.net-security.org/news.php?id=5909

WIRETAPPING ON THE NET: WHO PAYS?
The preliminary FCC decision, announced on Aug. 4, is a major step in
the long process of deciding how Internet-based conversations could be
monitored. Regulators will now hear three months of public testimony
on the ruling. Few expect a resolution of the issue this year, but
most know who will ultimately pay for the wiretapping capability: the
consumers.
http://www.net-security.org/news.php?id=5910


NOKIA MOBILE PHONES GET ENCRYPTION
Security a concern after Cabir worm...
http://www.net-security.org/news.php?id=5911


POLICE SMASH 100-STRONG HACKING GANG
Polish authorities say suspects used hacked computers to sell pirated
goods.
http://www.net-security.org/news.php?id=5912

DEFCON 12 WIRELESS CONTEST REPORT
It is Saturday, July 31, approaching one in the afternoon. The Defcon
12 Running Man contest is about to begin...
http://www.net-security.org/news.php?id=5915


CRITICAL NETSCAPE HOLE COULD BE WIDESPREAD
Security company Internet Security Systems Inc. (ISS) is warning its
customers about a critical security hole in a commonly used
technology from the Mozilla Foundation called the Netscape Network
Security Services (NSS) library that could make Web servers
vulnerable to remote attack.
http://www.net-security.org/news.php?id=5916

INDIA TO GET TOUGH ON FOREIGN DATA SECURITY
Audits and background checks proposed.
http://www.net-security.org/news.php?id=5918

LINUX AND NATIONAL SECURITY
As the open source industry grows and becomes more widely accepted,
the use of Linux as a secure operating system is becoming a prominent
choice among corporations, educational institutions and government
sectors. With national security concerns at an all time high, the
question remains: Is Linux secure enough to successfully operate the
government and military's most critical IT applications?
http://www.net-security.org/news.php?id=5919


DIGITAL ATTACKS ON WINAMP USE 'SKINS' FOR CAMOUFLAGE
Beware of wolves in llama's clothing.
http://www.net-security.org/news.php?id=5920


THE OPEN ROAD: ETHEREAL
This article discusses Ethereal, a tool for browsing network traffic
interactively and analyzing network traffic.
http://www.net-security.org/news.php?id=5921

TRADING PRIVACY FOR CONVENIENCE
'Registered travelers' give up personal information for shorter
airport lines.
http://www.net-security.org/news.php?id=5923

DEUTSCHE BANK HIT AGAIN BY PHISHING ATTACK
Company claims it blocked access to psuedo site.
http://www.net-security.org/news.php?id=5926


FEDS WRAP UP ONLINE-CRIME DRAGNET
A summer-long effort targeting internet crime has resulted in dozens
of arrests and convictions.
http://www.net-security.org/news.php?id=5927


WILL NEW SECURITY FEARS DRAG E-COMMERCE DOWN?
Most identity-theft crimes occur when employees steal records from
employers, not when consumers type credit-card numbers on a secure
Web site. That is why this type of crime is just as likely to affect
victims who never shop online as those who do.
http://www.net-security.org/news.php?id=5928


IEEE 802.11I AND WIRELESS SECURITY
IEEE's wireless security amendment adds stronger encryption,
authentication, and key management strategies that go a long way
toward guaranteeing data and system security.
http://www.net-security.org/news.php?id=5929

FBI BUSTS ALLEGED DDOS MAFIA
A corporate executive goes on the lam after being charged with paying
hackers to virtually rub out the competition.
http://www.net-security.org/news.php?id=5931


'ELECTRONIC JIHAD' FAILS TO MATERIALISE
Rumours that the Internet would witness a sustained and devastating
cyber-attack by Islamic "cyber-terrorists" today have turned out to
be completely baseless.
http://www.net-security.org/news.php?id=5932

NSIDERS, NOT CROOKS, STILL BIGGEST SECURITY THREAT
US study shows attacks happening in working hours on company
premises.
http://www.net-security.org/news.php?id=5935
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Mon Aug 30, 2004 2:07 pm    Post subject: Reply with quote

1. WinAmp Skin Flaw Patched
The new WinAmp 5.05 modifies the way the skin installer mechanism works.
http://nl.internet.com/ct.html?rtr=on&s=1,13b3,1,zvm,j4vy,9s3s,a9gz
------------------------------------------------------------
2. Security Vendors Defend Themselves Against Blink
Which intrusion prevention system truly is the best? Executive Tech columnist
Brian
Livingston lets competing IPS vendors have their say.
http://nl.internet.com/ct.html?rtr=on&s=1,13b3,1,b3nj,2747,9s3s,a9gz
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Mon Aug 30, 2004 3:09 pm    Post subject: Reply with quote

VeriSign Loses Round Against ICANN
[August 27, 2004] Registrar said it would file another antitrust complaint
against ICANN in state courts.
Read the article:
http://nl.internet.com/ct.html?rtr=on&s=1,13az,1,812,5231,9s3s,a9gz
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Tue Aug 31, 2004 9:23 pm    Post subject: Reply with quote

ZERO-DAY EXPLOIT TARGETS WINAMP | SearchSecurity.com

Millions of Winamp users are vulnerable to a zero-day exploit that
could install spyware and Trojans on unsuspecting victims who click
on a Web site link.
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1002612,00.html?track=NL-20&ad=490157

WHEN TO RUN THE XP SP2 WINDOWS FIREWALL | SearchWin2000.com

If you aren't currently running a local firewall on your company's
computers, the new Windows Firewall is a great way to secure your
computers for free. But, if you've already deployed a third-party
firewall, Redmond's offering is not for you.
http://searchwin2000.techtarget.com/tip/0,289483,sid1_gci1000900,00.html?track=NL-20&ad=490157
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Wed Sep 01, 2004 1:51 pm    Post subject: Reply with quote

1. Ballmer Beats Security Drum
The Microsoft CEO also hits on Web Services, Linux and a little company named
Google in
Boston meeting.
http://nl.internet.com/ct.html?rtr=on&s=1,13i3,1,drh6,hb0h,9s3s,a9gz
------------------------------------------------------------
2. Oracle Patch Day: Critical Flaws Fixed
Security patches released for multiple 'high risk' flaws in Oracle's
enterprise-focused
products.
http://nl.internet.com/ct.html?rtr=on&s=1,13i3,1,gjar,9l2n,9s3s,a9gz
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Wed Sep 01, 2004 2:09 pm    Post subject: Reply with quote

Merchant group helps DOJ in fraud stings, 08/26/04

A group representing online merchants said it helped the
Department of Justice hunt down online scam artists, in an sweep
of online criminals dubbed "Operation Web Snare."
http://www.nwfusion.com/news/2004/0826merchgroup.html?nl

DOJ announces online fraud convictions, 08/26/04

Fifty-three people have been convicted and another 103 arrested
in a huge Department of Justice sweep for online fraud and other
Internet-related crimes, the Justice Department announced
Thursday.
http://www.nwfusion.com/news/2004/0826dojannou.html?nl

Nokia, Pointsec team on mobile data security, 08/26/04

Enterprises seeking higher security for their growing number of
mobile devices may be interested in new encryption technology
that Nokia is deploying in its smart phone products.
http://www.nwfusion.com/news/2004/0826nokiapoint.html?nl

Audio: Microsoft on Sender ID, 08/26/04

This week we look at Sender ID, a new framework being considered
by the IETF and pushed by AOL and Microsoft that's designed to
authenticate mail senders and help eliminate spam and phishing
attacks.
http://www.nwfusion.com/research/2004/0826radio.html?nl

Fujitsu has commercialized a biometric security system based on
vein pattern-recognition technology. The company has received
orders from two Japanese banks, one of which is already using
the technology.
http://www.nwfusion.com/news/2004/0827japanbanks.html?nl

eblog: Security and net traffic, 08/30/04

A new approach to spotting security breaches involves more than
guarding the network perimeter.
http://www.nwfusion.com/weblogs/management/006108.html?nl

Opinion: 'Net needs to take a bite out of cybercrime, 08/30/04

I'm coming to the conclusion that this business model is
breaking down and needs to be radically revamped. Here are some
sobering stats
http://www.nwfusion.com/columnists/2004/083004edit.html?nl

Network World's Security News Alert

States prepping cyberalert plan, 08/30/04

Looking to gauge the risk of attacks against their networks,
state officials this week will vote on new measures that would
assess threats and dictate specific actions to take to protect
key resources.
http://www.nwfusion.com/news/2004/083004nastd.html?nl
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Wed Sep 01, 2004 2:25 pm    Post subject: Reply with quote

This One Looks Like A No-Brainer
================================
IT security software is a grudge purchase. You buy it because you need it, but
you only need it because the software you invested so much money in that,
perhaps should have been secure, isn't.
http://www.it-analysis.com/article.php?id=12200&zz=60786a6512336
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Security Notices & News All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group