SEARCH RESULTS
 
Showing 1-6 of 6 records
1
 
Expand article

IPs Now Private Info?

2008-01-22 13:49:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...implication to logging and log management : " IP addresses , string of numbers that identify computers on the Internet, should generally be regarded as personal information , the head of the European Union's group of data privacy regulators said Monday." (the quote is related to EU fight with Google, also described there Wow! If accepted,...
 
Tags: privacy, privacy chasm, dumb privacy, data privacy regulators, heavy privacy price, org outline, implication, org, pretty dramatic implication
 
 
 
 
Expand article

More trustworthy election systems via SDL?

2008-02-04 23:34:00 by sdl in The Security Development Lifecycle
 
...implication being (as stated in the report): If such a stick is used in a HAAT that has been compromised by an attacker, or an attacker can provide a maliciously modified USB stick in place of a legitimate one, the attacker could surreptitiously take complete control over the WinEDS client . Basically, this is a potential rootkit for election...
 
Tags: machine security concerns, security concerns, election systems, election, security, security researchers, election systems margin, margin, election management system
 
 
 
 
Expand article

Unauthorized access to the Stryker Corporation VPN

The Article has images
2008-04-17 12:45:57 by Evan Francen in The Breach Blog
...implication that a domain (Windows) administrator level account was used by the "unauthorized user". This could be very bad It then promptly began investigating the incident and engaged an independent computer forensics investigator to determine the scope of the breach and the identity of the unauthorized user Evan] The identity of the...
 
Tags: stryker, stryker corporation, stryker suspects, stryker immediately, immediately, stryker intends, stryker servers, servers, evan user
 
 
 
 
Expand article

SSO Summit Day One Morning Session

2008-07-24 13:35:02 by Gunnar Peterson in 1 Raindrop
 
...implication he drew from this last step are well worth repeating: "Time to rethink everything." Problem is - of course, people don't rethink, they put MQ Series in front of the mainframe and hook a web app in front of that and go Finally, he connected some interesting dots to SAML and SOA security issues SSO without strong auth is and...
 
Tags: sso, sso history talk, sso summit, mainframe sso, sso options, sso protocols, real world, real world lessons, authorization internal
 
 
 
 
Expand article

The Impact of Dans DNS Debacle on Internet Risk

2008-07-30 08:11:30 by Burton Group in Security and Risk Management Strategies Blog
 
...implication was that the entire web could be taken down. The nature of the attack requires the following An attacker must convince/trick a user into making a DNS request for a domain that doesnt already exist in their DNS servers cache. The expectation here is that s/he can be easily tricked into doing this Then, the attacker must...
 
Tags: dns servers, servers, impact, dns, dns servers cache, risk impact revolves, major dns vendors, risk, major dns vulnerability
 
 
 
 
Expand article

The Impact of Dan???s DNS Debacle on Internet Risk

2008-07-30 08:11:30 by Burton Group in Security and Risk Management Strategies Blog
 
...implication was that the ???entire web??? could be taken down. The nature of the attack requires the following An attacker must convince/trick a user into making a DNS request for a domain that doesn???t already exist in their DNS server???s cache. The expectation here is that s/he can be easily tricked into doing this Then, the attacker must...
 
Tags: dns, impact, major dns vendors, risk impact revolves, dns servers, servers, risk, dns server implementations, major dns
 
 
 
 
 
Showing 1-6 of 6 records
1
 
TOP SEARCH
Expand / MinimizeClose Widget
  •  
RECENT SEARCH
Expand / Minimize
  •  
RELATED VIDEO
Expand / Minimize
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia