Researcher's hypothesis may expose uber-secret DNS flaw Responsible disclosure debate rages on Two weeks ago, when security researcher Dan Kaminsky announced a devastating flaw in the internet's address lookup system, he took the unusual step of admonishin

20 views read more 2008-07-21 14:28:36

Researchers release 'cold boot' attack utilities A way around disk encryption The security researcher who demonstrated the 'cold boot' attack has released the source code for the hack. The attack, first demonstrated in February, uses a set of utilit

21 views read more 2008-07-21 11:56:27

US cyberspying fears hang over Beijing Olympics Dithers over threat level US paranoia about Chinese computer hackers has created a diplomatic dilemma about whether or not to warn visitors and business people traveling to next month's Beijing Olympi

21 views read more 2008-07-21 02:02:04

Researchers show up deniable file system crypto leaks Deny deny denied Crytography researchers have demonstrated weaknesses in encryption technology used to create so-called deniable file systems (DFS).…

24 views read more 2008-07-18 08:39:41

Firefox sweeps away carpet bombing bug Updates fix several vulns Mozilla has plugged two critical security holes in versions 2 and 3 of Firefox.…

19 views read more 2008-07-17 05:28:27

Unpatched Windows PCs own3d in less than four minutes Gone in 240 seconds An unpatched PC is likely to last just four minutes on the internet before been attacked and compromised.…

24 views read more 2008-07-15 06:45:44

Enough With Default Allow in Web Applications! The title of this blog post is also the title of a research paper we are currently working on. Although the paper is still in draft form, we've decided to circulate it widely  (download here) bec

26 views read more 2008-07-15 03:40:00

Relay server attack tactic dupes auto-reporting Nap-of-the-earth strikes on the horizon Sysadmins have begun noticing a coordinated attack on servers with open SSH ports that tries to stay under the radar by only attempting to guess a password thre

26 views read more 2008-07-14 01:02:03

Thales swoops on nCipher for hardware encryption goodness Scrambling for safety Thales, the French defence electronics firm, is buying hardware-based encryption specialist nCipher for around £50.7m ($100.3m). This works out at 300p a share, a 15 per cent pr

28 views read more 2008-07-11 06:18:46

Web Application Firewall Use Cases Update My list of web application firewall use cases continues to involve. I've decided to shuffle things somewhat: I am going to remove the "Network building blocks" use case because that is real

27 views read more 2008-07-10 04:13:00