Monthly Archives: October 2006

Book: The Security Development Lifecycle

After very good and successful book “Writing Secure Code”, written by Michael Howard and David LeBlanc, book “The Security Development Lifecycle” by Michael Howard and Steve Lipner came out. I’ve liked these books. Details at: http://www.microsoft.com/mspress/books/8753.asp for The Security Development … Continue reading

Share
Posted in Books, Magazines and Journals | Leave a comment

Is It Possible To Steal An Election By Hacking The Vote?

It seems yes according ArsTechnica. Interesting article can be found here.

Share
Posted in Operating Systems and Application Security, Security | Leave a comment

Google and Your Privacy

Google already knows more about you than the National Security Agency ever will. But if you try to find more about Larry Page and Sergey Brin, the two former Stanford geeks who founded the company that has become synonymous with … Continue reading

Share
Posted in General, Privacy | Leave a comment

At 30, Crypto Still Lacks Usability, Experts Say

Government controls held back cryptography in the past, but today, it’s usability that blocks adoption, a panel of experts said Thursday. Read full article here.

Share
Posted in Cryptography | Leave a comment

Anti-Virus Software Is Ineffective!?

Stealth malware researcher Joanna Rutkowska recently demonstrated a way to infect Windows Vista with a rootkit and introduced Blue Pill, a new concept that uses AMD’s SVM/Pacifica virtualization technology to create “100 percent undetectable malware.” Hardware virtualization, in her opinion, … Continue reading

Share
Posted in Operating Systems and Application Security, Security | Leave a comment

NIST to Certify Voting Machine Security, Standards

The U.S. National Institute of Standards and Technology (NIST) will aid the federal Election Assistance Commission (EAC) in its efforts to verify that electronic voting machines meet federal standards. NIST will assist the EAC in creating standards that vendors of … Continue reading

Share
Posted in Security | Leave a comment

ModSecurity 2.0

ModSecurity is an open source web application firewall that runs as an Apache module, and version 2.0 offers many new features and improvements. Federico Biancuzzi interviewed Ivan Ristic to discuss the new logging system, events tracking and correlation, filtering AJAX … Continue reading

Share
Posted in Operating Systems and Application Security, Security | Leave a comment

Biometric Passports With Embedded RFID

After four years of intensive debate and security analysis, the U.S. government began rolling out biometric passports in August that contain an embedded RFID chip holding a digital photograph and the bearer’s personal data. Read full article at internetnews.com.

Share
Posted in Security | Leave a comment

War of Words on Vista Security

The war of words continues between Microsoft and the top independent security software makers. Read interesting article written by Ed Sutherland at internetnews.com.

Share
Posted in Security | Leave a comment

Oracle Details Over 100 New Flaws

Oracle users have been complaining for some time that they get too little information, but that changed this week with Oracle’s final quarterly Critical Patch Update (CPU) of 2006, which fixes more than 100 flaws. The October update represents the … Continue reading

Share
Posted in Operating Systems and Application Security, Security | Leave a comment