SEARCH RESULTS
 
Showing 1-10 of 17 records
 
Expand article

The web browser is sick but wheres the cure?

2008-08-14 11:11:14 by Burton Group in Security and Risk Management Strategies Blog
 
...render the data that is sent to it. Part of this it does by itself, and other parts are taken care of by handlers and plug-ins. In doing so, it displays hypertext, images, videos, and even runs active content like Flash, JavaScript, and ActiveX But however much we love the browser, weve also come to hate the myriad of vulnerabilities that...
 
Tags: browser, web browser, browser appears, web, cure, browser security, content, runs active content, browsers cure
 
 
 
 
Expand article

The web browser is sick ??? but where???s the cure?

2008-08-14 11:11:14 by Burton Group in Security and Risk Management Strategies Blog
 
...render the data that is sent to it. Part of this it does by itself, and other parts are taken care of by handlers and plug-ins. In doing so, it displays hypertext, images, videos, and even runs active content like Flash, JavaScript, and ActiveX But however much we love the browser, we???ve also come to hate the myriad of vulnerabilities that...
 
Tags: browser, web browser, browser appears, browser security, web, content, runs active content, web page, system controls
 
 
 
 
Expand article

Information flow tracing and software testing

2007-09-17 09:32:00 by Niels Provos in Google Online Security Blog
 
...render testing with completely random input ineffective. However, the newer, more complicated fuzz testers require a considerable initial investment in the form of complete input format specifications or the selection of a large corpus of initial input samples At WOOT'07 ,I presented a paper on Flayer , a tool we developed internally to...
 
Tags: input, flayer marks, initial input samples, flayer, fuzz, fuzz testers require, checks, dynamic analysis framework, sanity checks
 
 
 
 
Expand article

The Type of Lock Needed Has Changed

2007-01-22 00:00:00 by Chris Parkerson in Speaking of Security, the RSA Blog and Podcast
 
...render perimeter-based security approaches practically useless
 
Tags: employees, customer service employees, perimeter vulnerable, perimeter, internal processes, focus, security approaches, proper precautions, breaches
 
 
 
 
Expand article

Goodbye IE6

2006-10-17 15:01:13 by Liudvikas Bukys in Liudvikas Bukys
 
...render correctly: painting its window contents at various places all over the display, rendering in the wrong font, leaving turds all over its window while scrolling. Once it starts I have to kill iexplore.exe to make it stop. I believe it is fully-patched In my mind the appearance of this problem is correlated with the appearance of two new...
 
Tags: xpsp sp2 gdr, window contents, window, aggressive javascript interfaces, microsoft internet explorer, firefox andor ie7, bloglines feed selector, memory corruption, render correctly
 
 
 
 
Expand article

The bad guys will use BitLocker, too

2007-07-13 18:03:36 by Steve Riley in Steve Riley on Security
 
...render beneficial technology useless just because there's the potential that someone might misuse it
 
Tags: bad guys, guys, law enforcement, beneficial, bitlocker, destroy beneficial utility, conduct forensic analysis, technology, bypass
 
 
 
 
Expand article

Hacking Medical Devices

2008-03-12 10:39:59 by schneier in Schneier on Security
 
...render the ICD incapable of responding to dangerous cardiac events. A malicious person could also make the ICD deliver a shock that could induce ventricular fibrillation, a potentially lethal arrhythmia Of course, we all know how this happened. It's a story we've seen a zillion times before: the designers didn't think about security, so the...
 
Tags: devices, security, malicious security attack, cardiac, security risks, dangerous cardiac events, risks, icd incapable, icd
 
 
 
 
Expand article

Prediction 3 - A major site gets hacked

2008-02-01 10:35:00 by Allen Baranov, CISSP in Security Thoughts
 
...render them dead. Their business is all about trust and a loss of trust would break their business However, the web was never designed to be so secure and application based. It is meant to be static pages delivered non sequentially (images load up when they can). This is not a very good base to have for a service I see that the hackers are...
 
Tags: malware, bob logs, malware downloads, prediction, bob, suck session keys, session keys, foreseeable future malware, online service providers
 
 
 
 
Expand article

Localized Fake Security Software

The Article has images
2008-04-14 08:04:53 by HASH0x8ae5d20 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...render current and upcoming massive IFRAME injected or embedded attacks pointless at least from the perspective of serving the rogue software
 
Tags: avsystemcare, antiworm2008, malicious, fake security applications, portfolio, malicious campaigns, sample fake brands, antivirusforall, one-to-many communication channel
 
 
 
 
Expand article

Dilbert Does Canonicalization

The Article has images
2008-05-05 12:03:32 by Chris Eng in Zero in a bit
...rendered version of the comic looks fine So clearly the preview code and the full-size render code are doing slightly different th