Monthly Archives: October 2005

How ATM Fraud Nearly Brought Down British Banking

Very interesting story about phantom ATM withdrawals could be read here. It says: This is the story of how the UK banking system could have collapsed in the early 1990s, but for the forbearance of a junior barrister who also … Continue reading

Share
Posted in Security | Leave a comment

The Story of Snort: Past, Present and Future

Martin Roesch, the creator of Snort, the de facto standard for intrusion detection/prevention, presents the story of Snort that covers seven years of development that made this tool one of the most important security software titles ever developed. During his … Continue reading

Share
Posted in Security | Leave a comment

My Newest Book: Operating Systems

My newest book just came out from printing. See more details on my web site or on publisher’s. Note: This book has been written in Serbian language.

Share
Posted in General | Leave a comment

Teaching Secure Programming

A very interesting article with this title appeared in IEEE Security & Privacy, September/October 2005 (Vol. 3, No. 5) pp. 54-56. It says: The function of academia is not to teach programming techniques, but to teach concepts, principles, and methods … Continue reading

Share
Posted in General | Leave a comment

Does Blizzard Entertainment Use Spyware to Verify EULA Compliance?

There are voices and interesting posts that claims yes, they do! If true, that is scary. Rootkit post is here. Blizzard responds here. Look also at this. Also, famous Bruce Schneier talks about it in his Security blog and number … Continue reading

Share
Posted in Security | Leave a comment

Should Developers be Accountable for Security Holes?

Security expert Howard Schmidt wants coders to be held responsible for vulnerabilities in their code, but others say their employers should be held to account. Read full story here.

Share
Posted in Security | Leave a comment

Anti-Virus Engine Malformed Archives Virus Detection Bypass

Two Secunia reports: Kaspersky Anti-Virus Engine Malformed Archives Virus Detection Bypass, read here. fRoGGz has reported a weakness in Kaspersky Anti-Virus scan engine, which can be exploited by malware to bypass certain scanning functionality. AVG Anti-Virus Engine Malformed ARJ Archive … Continue reading

Share
Posted in Security | Leave a comment

Small World Phenomenon and Computer Viruses Spreading

The small world phenomenon (also known as the small world effect) is the hypothesis that everyone in the world can be reached through a short chain of social acquaintances. The concept gave rise to the famous phrase six degrees of … Continue reading

Share
Posted in General | Leave a comment

BEA WebLogic 24 Vulnerabilities and Security Issues

This is really huge number of security issues reported: 24 vulnerabilities and security issues have been reported in WebLogic Server and WebLogic Express, where the most critical ones potentially can be exploited by malicious users to gain escalated privileges and … Continue reading

Share
Posted in Security | Leave a comment

New Worm Naming Scheme Aims To Cut Confusion

This is probably good idea: The US Computer Emergency Response Team and major security vendors are looking to simplify a system which now has infections going by multiple names, each given by a different vendor. Read more here.

Share
Posted in Security | Leave a comment