Exploit code loose for six-month-old Windows bug
Microsoft Thursday acknowledged that exploit code is circulating for a vulnerability it acknowledged six months ago, but has yet to patch
SEARCH RESULTS
 |  |
 |  |
 |  |
 |
Showing 1-10 of 521 records
| |
| |
| |
|
The cost of a code signing certificate
...code signing certificates aren't cheap. If you look at the major vendors like VeriSign and Thawte , you'll find they charge between $500 and $300 for a cert that's valid for a year
Scott commented that you can get cheap code-signing certs, as Jon Robbins points out . 80 bucks sounds like quite a deal, but a quick look at Jon's post reveals...
| |
| |
| |
|
New Banking Code shifts more liability to customers
...Code , the voluntary consumer-protection standard for UK banks, was released last week . The new code claims to give customers the most up to date information on how to protect their accounts from fraud. This sounds like a worthy cause, but closer inspection shows customers could be worse off than they were before
Clause 12.11 of the code...
| |
| |
| |
|
Can I just comment out these lines of code?
...code, which was generating error messages in a certain software quality assurance tool , happened to be a critical part of the random number generator in a cryptographic library package . By removing this code, the strength of the cryptographic key material was reduced to a point where cracking the key would take minutes instead of decades....
| |
| |
| |
|
Advisory: CiscoWorks Arbitrary Code Execution Vulnerability
...Code Execution Vulnerability
Release Date: 28 May 2008
Reference: LSD003-2008
Discover: Dave Lewis
CVE Number: CVE-2008-2054
Vendor: Cisco Systems
Systems Affected: CiscoWorks Common Services (various versions): Cisco Unified Operations Manager (CUOM), Cisco Unified Service Monitor (CUSM), CiscoWorks QoS Policy Manager (QPM), CiscoWorks LAN...
| |
| |
| |
|
Can I just comment out these lines of code?
...code, which was generating error messages in a certain software quality assurance tool , happened to be a critical part of the random number generator in a cryptographic library package . By removing this code, the strength of the cryptographic key material was reduced to a point where cracking the key would take minutes instead of decades....
| |
| |
| |
|
We can't write secure code
...code or developing better testing tools. We need to get things right much earlier in the development process." It's a subject I've been harping on about for some time, with many references to excellent resources such as OWASP , and great leaders on the subject such as Mark Curphey . Over the last few years I've heard many solutions proposed...
| |
| |
| |
|
Safari & IE Attack Code Released
...code for the latest Safari problem was released on Sunday
From Network World
A hacker has posted attack code that exploits critical flaws in the Safari and Internet Explorer Web browsers
The source code, along with a demo of the attack, was posted Sunday on a computer security blog. It can be used to run unauthorized software on a victims...
| |
| |
| |
|
Feature Request #1: Stable Code
...code and properly functioning features. Unfortunately, I cannot always choose the hardware my customers are using in their infrastructure. However, if you would like for me to recommend they continue purchasing and using it, then the product must demonstrate to me that it is: capable, reliable, predictable and well-documented. If your product...
| |
| |
| |
|