SEARCH RESULTS
 
Showing 1-10 of 92 records
 
Expand article

Viewpoint Two: The recession wont affect security folks

2008-02-13 12:51:37 by Paul Stamp in Security & Risk Management
 
...affect the majority of us? I would say not. Yes, were going to have to show more business justification for our technology. Yes, were going to have to consolidate. Yes, were going to have to streamline process. But werent we doing that anyway Weve come to learn that security is a necessary cost of doing business not a luxury item where we...
 
Tags: security, security folks, majority, business, vast majority, business justification, streamline process, contractual requirements, affect
 
 
 
 
Expand article

Overcoming Bias: The Affect Heuristic

2008-01-03 21:32:58 by Chris Wysopal in Zero in a bit
 
...affect heuristic was posted to the Security Metrics mailing list (highly recommended). I think it is important for people who are reporting on the potential risks of a system to understand this psychological phenomenon. It shouldnt be dismissed as simply people are irrational and dont understand statistics People believe that benefit and risk...
 
Tags: simply people, low risk, people, risk, affect heuristic, highly beneficial, highly, security measurement, security metrics
 
 
 
 
Expand article

New J2ME Security Vulnerabilities Affect Nokia S40 Phones

2008-08-12 15:01:20 by CyberInsecure in CyberInsecure.com
 
An independent security research firm has announced several new mobile Java(J2ME) security vulnerabilities. Two of the vulnerabilities affect the Java virtual machine(JVM) on mobile phones and the other 14 are specific to Nokia Series 40 phones. Series 40 mobiles are not Symbian smartphones and only run J2ME MIDlets. The security research...
 
Tags: phones, j2me, vulnerabilities affect, security vulnerabilities, mobile phones, j2me midlets, security research company, series, java virtual machine
 
 
 
 
Expand article

Recent Symantec and IBM vulnerabilities, giblets, banned APIs and the SDL

2008-01-04 23:37:00 by sdl in The Security Development Lifecycle
 
...affected module One of the hallmarks of a giblet is that they often affect more than one product, and sure enough, the same is true of these bugs; the same bugs affect IBM's Lotus Notes 7.0.2 and some other products too Now to the bugs themselves. I looked at four of the parser bugs as they affected IBM's Lotus Notes WordPerfect (.WPD) files...
 
Tags: linker sdl requirements, sdl requirements, ibm, sdl, requirements, symantec, bugs affect ibm, bugs, sdl refers
 
 
 
 
Expand article

Some Massachusetts seniors are at risk

The Article has images
2007-12-04 16:17:26 by Evan Francen in The Breach Blog
...Affected 150,000 Types of Data personal information Breach Description Authorities arrested an identity thief in August, 2007 who had been using information obtained from the Massachusetts Presrciption Advantage program in an attempted identity theft scheme. It is not yet clear how the thief obtained the information Reference URL PC World...
 
Tags: breach, computer security breach, breach description, prescription advantage, security breach, prescription advantage program, data-breach laws, lone identity thief, thief
 
 
 
 
Expand article

Fear Is Unhealthy

2008-01-17 07:35:09 by schneier in Schneier on Security
 
...affect heart disease -- but if it were merely 0.0003 percent, that would be higher than the 9/11 death toll Of course, statistics of any sort, even when the numbers are rock solid, dont mean much to people when theyre assessing threats. Risk researchers have found that even when people know the numbers, theyre less worried about death tolls...
 
Tags: people terrorists kill, terrorists, terrorism, actual terrorism, kill, people, fear, million people, fearful people
 
 
 
 
Expand article

PCI Co and ASVs

2008-03-21 23:53:00 by Random InfoSec Guy in Security Coin
 
...affect the end-user or the client. But the customer data protected with the server, in the database, isn't going to be compromised by a cross-site scripting attack, not directly Pierini dismisses the suggestion that certifying a site as "Hacker Safe" when it remains vulnerable to XSS attacks could be confusing to consumers. He insists that...
 
Tags: xss, xss flaws, xss vulnerabilities, pci, site, cross-site, pci ssc, site-specific, xss attacks
 
 
 
 
Expand article

File containing Interbank FX customer information exposed for almost a year

The Article has images
2008-04-15 23:57:04 by Evan Francen in The Breach Blog
...Affected Unknown Types of Data social security number, driver's license, and passport information, and may also include your Interbank FX account information Breach Description In April, 2007 an employee posted a file to an insecure server that was accessible via the Internet. The file contained personal information belonging to certain...
 
Tags: information, sensitive personal information, personal information, application information, handle sensitive information, information security, interbank, file, confidential information
 
 
 
 
Expand article

How to Sell Security

2008-05-26 05:57:29 by schneier in Schneier on Security
 
...affect the mathematics and therefore shouldn't affect the results. This is traditional economics, and it's called Utility Theory But Kahneman's and Tversky's experiments contradicted Utility Theory. When faced with a gain, about 85 percent of people chose the sure smaller gain over the risky larger gain. But when faced with a loss, about 70...
 
Tags: security, loss, risky loss, risky larger loss, gain, risky larger gain, security purchase, directly, security directly
 
 
 
 
Expand article

ICANN's Announcement Of Anti-Domain Tasting Measures To Registrars

2008-07-08 15:42:32 by Editor in Cheap Hack
 
...affect your registrar. Specifically, the Board adopted GNSO recommendations on domain tasting that included both budget and non-budget provisions designed to restrict the applicability of the Add Grace Period (AGP). Please note that this message is a summary of changes that affect registrars. You should refer to the adopted budget document...
 
Tags: icann, directly, fees directly, fees, registrar fees effective, effective, registrar-level fees, fee, per-transaction fee