SEARCH RESULTS
 
Showing 1-10 of 62 records
 
Expand article

Giving SQL Injection the Respect it Deserves

2008-05-15 18:45:00 by sdl in The Security Development Lifecycle
 
...Permission Use SQL Parameterized Queries From the SDL documentation Applications accessing a database must do so only using parameterized queries Creating dynamic queries using string concatenation potentially allows an attacker to execute an arbitrary query through the application. This vulnerability allows for unauthorized, interactive,...
 
Tags: sql, sql injection bug, sql injection requirements, sql injection attack, sql server, sql execute-only permission, malicious sql payload, sql injection, sql injection vulnerability
 
 
 
 
Expand article

Mashup of the Titans

2008-06-25 17:29:25 by Gunnar Peterson in 1 Raindrop
 
...permission rather than exclusion. This principle, suggested by E. Glaser in 1965,8 means that the default situation is lack of access, and the protection scheme identifies conditions under which access is permitted. The alternative, in which mechanisms attempt to identify conditions under which access should be refused, presents the wrong...
 
Tags: protection mechanisms, protection mechanisms correctly, information security, information, implements protection mechanisms, information travels, information security people, protection, potential information path
 
 
 
 
Expand article

Be careful what you ask for.

2007-12-08 21:43:00 by John Sexton in The Bullet Proof Blog
 
...permission when it is done in a "one party" State A "one party" State is exactly as it sounds. It means that as long as one person gives their permission (the person making the recording), it is perfectly legal to record that conversation. Be advised that the person making the recording must be the other party. In a "two party" state, both...
 
Tags: professional investigators association, investigators, professional investigators, law, law firms alike, person, ethical, ethical companies, illegal
 
 
 
 
Expand article

Bill criminalizing WiFi leeching shot down, and rightly so

2008-03-24 16:20:03 by Editor in Digg / Security
 
A bill that would have made using an open wireless access point without permission punishable by up to 10 years in the clink was given an unfavorable reading by a Maryland House committee. Here's an idea: if you don't want people to access your WAP without permission, secure it
 
Tags: wireless access, access, permission, permission punishable, maryland house committee, bill, unfavorable, secure, clink
 
 
 
 
Expand article

A thin line between blog theft and promotion - another opinion

2008-07-03 22:24:36 by HASH0x8b68da8 in StillSecure, After All These Years
 
...permission, ads nothing to the conversation or commentary at all and actually hosts the content rather than just linking to it. Now for those who don't know, SecurityRatty is a site allegedly owned and operated by some Russian CISSP dude. Basically, they claim they are an RSS aggregator and they just republish blog posts in their entirety. A...
 
Tags: posts, ratty plainly posts, rich distinguishes, rich, rich mogull, cost rich, plainly, ratty, securityratty
 
 
 
 
Expand article

Microsoft Supplies Script to Apply SQL Bug Workaround

2008-12-24 07:33:03 by Editor in Cheap Hack
 
...permission to the Public role on the sp replwritetovarbin extended stored procedure in those copies. You need sufficient permissions to run the script, specifically the sysadmin role for each instance of SQL Server. If you don't have one account that runs as sysadmin, then you may have to run the script under multiple accounts. On Vista and...
 
Tags: script, script runs, runs, workaround, microsoft, denies execute permission, permission, permissions, sysadmin role
 
 
 
 
Expand article

PrincipalPermissionAttribute and Static ctor Leads to DoS

2007-12-03 09:03:00 by Keith Brown in Security Briefs
 
...PermissionAttribute at the class level in a certain scenario under WCF. I recommended caution in my guidebook , because of the nasty type load exception that you can run into if the first request to the class is denied by the attribute Be careful about using this attribute at the class level. If the class to which you apply it happens to have...
 
Tags: class sensitive, sensitive, class, class level, static constructor, inside static constructor, class program, static constructor leads, static void
 
 
 
 
Expand article

When Will the Media Industry Embrace the BORA Principle?

2007-03-22 10:06:00 by Eric Marvets in The Security Samurai
 
...permission, yet you cant post a short clip of the Daily Show on YouTube). The one issue I had with his article was referring to Apples FairPlay as a DRM system for music that has worked (its not the DRM, but rather the void in the marketplace that made Apple successful While I would love for Congress to fix our copyright laws, I regard the...
 
Tags: credit card, credit, credit card industry, credit card fraud, industry, media industry, cut fraud, fraud, credit cards
 
 
 
 
Expand article

The ethics of Stealing Wifi

2008-01-04 17:30:12 by Editor in Digg / Security
 
A recently released study by a security firm says that using an open WiFi network without permission is stealing. Ars looks at the ethics of open WiFi
 
Tags: wifi, wifi network, security firm, ethics, recently, ars, permission, study
 
 
 
 
Expand article

FaxBox: the latest in password scams

2008-01-07 18:09:34 by Steve Riley in Steve Riley on Security