SEARCH RESULTS
 
Showing 1-10 of 430 records
 
Expand article

Boston Court's Meddling With 'Full Disclosure' Is Unwelcome

2008-08-21 04:00:00 by Bruce Schneier in Wired Security
 
In eerily similar cases in the Netherlands and the United States, courts have recently grappled with the computer-security norm of "full disclosure," asking whether researchers should be permitted to disclose details of a fare-card vulnerability that allows people to ride the subway for free The "Oyster card" used on the London Tube was at issue...
 
Tags: computer security improves, security improves, computer security, security, mit security researchers, security devices, security holes, disclosure, security properly
 
 
 
 
Expand article

Full Disclosure and the Boston Farecard Hack

2008-08-26 06:04:49 by schneier in Schneier on Security
 
In eerily similar cases in the Netherlands and the United States, courts have recently grappled with the computer-security norm of "full disclosure," asking whether researchers should be permitted to disclose details of a fare-card vulnerability that allows people to ride the subway for free The "Oyster card" used on the London Tube was at issue...
 
Tags: computer security improves, security improves, computer security, security, mit security researchers, security devices, security holes, disclosure, security properly
 
 
 
 
Expand article

Air Force Aims for 'Full Control' of 'Any and All' Computers

2008-05-13 20:00:00 by Danger Room in Wired Security
 
The Air Force wants a suite of hacker tools, to give it "access" to -- and "full control" of -- any kind of computer there is. And once the info warriors are in, the Air Force wants them to keep tabs on their "adversaries' information infrastructure completely undetected
 
Tags: air force, information infrastructure completely, info warriors, hacker tools, control, tabs, adversaries, access, suite
 
 
 
 
Expand article

Air Force Aims for 'Full Control' of 'Any and All' Computers

2008-05-14 20:10:50 by Editor in Digg / Security
 
The Air Force wants a suite of hacker tools, to give it "access" to--and "full control" of--any kind of computer there is. And once the info warriors are in, the Air Force wants them to keep tabs on their "adversaries' information infrastructure completely undetected." The government is growing increasingly interested in waging war online
 
Tags: air force, information infrastructure completely, info warriors, hacker tools, war online, control, government, tabs, adversaries
 
 
 
 
Expand article

Russia's 'Full Scale Invasion' of Georgia

2008-08-09 22:30:00 by Noah Shachtman in Wired Security
 
Georgian President Mikheil Saakashvili says "Russia has launched a full scale military invasion." He's calling for "an immediate ceasefire" in a conflict that Russian officials claim has killed 2,000 and left 30,000 homeless
 
Tags: russian officials claim, scale military invasion, russia, homeless, ceasefire, conflict
 
 
 
 
Expand article

Adobe web portal exposes educational software users

The Article has images
2008-05-07 16:31:31 by Evan Francen in The Breach Blog
Technorati Tag: Security Breach Date Reported 5/1/08 Organization Adobe Systems Incorporated Contractor/Consultant/Branch None Victims Customers Number Affected Unknown Types of Data Name, address, home and/or cellular phone number, email address, date of birth, school name, partial or full credit card number, credit card expiration data,...
 
Tags: adobe, information, personal information, information security crew, adobe website portal, adobe systems, upload information, security, adobe iswas
 
 
 
 
Expand article

"Crawling" Toward SDL

2008-03-06 22:13:00 by sdl in The Security Development Lifecycle
 
Hey everyone, Jeremy Dallman here One of the phrases I often hear during vision and strategy planning meetings at Microsoft is "What is the crawl, walk, run?" We use this phrase to differentiate the initial activities that will get us quickly moving toward our larger goals and then supplement them with other activities that may require longer...
 
Tags: sdl, security, perform security analysis, application security, application, applications security, security issues, issues, non-microsoft sdl engagements
 
 
 
 
Expand article

A sneak peek at a Black Hat presentation

2008-07-30 18:08:27 by HASH0x8c270c8 in StillSecure, After All These Years
 
No, it is not the Dan K DNS presentation, sorry. Patrick McGregor, CEO of BitArmor Systems is presenting at Black Hat as well. As part of our promotion with the SBN and Black Hat I have made my blog available to Patrick to give us a sneak peek at his presentation. Patrick was nice enough to prepare the following: Braving the Cold (Boot) A Sneak...
 
Tags: boot, bios boot process, cold boot attacks, attacks, cold, black hat, disk encryption, keys, wipe keys immediately
 
 
 
 
Expand article

Protect your data: everything else is just plumbing

The Article has images
2007-07-02 20:46:32 by Steve Riley in Steve Riley on Security
Take a few moments and indulge in a thought exercise with me. Consider your companys complete collection of information processing assetsall the computers, the networks theyre connected to, the applications you use, and the data and information you manipulate. Which of those is the most valuable? Whichif it suddenly and tragically disappeared...
 
Tags: data security, comrms data security, data, security, confidential information, information, information security, temporary data, data vanishes