Sponsored White Papers, Webcasts, and Downloads
ZDNet Resources
- EFF wants to saddle you with metered Internet service
- EFF wants to saddle you with metered Internet serviceIndeed. Translation is not forgery.It's just... translation. Using NAT as an example of forgery is like using a French Translation of "The Old Man and The Sea" as a forgery of Hemingway's works.AbsolutelyMy issue with Comcast has nothing to do with the...
- Tags: NETWORKING, Telecom & Utilities, Internet service, Electronic Frontier Foundation, Internet, Comcast Corp., forgery
- Discussion threads 2007-12-03
- How to disable WGA notification
- How to disable WGA notificationWOW ..... That was quick.Another new blog entry already. Hmmmm.Folks you may wish to read the comments on the subject immediately preceding this one.You said it[i]"I like this method because you, the user, are in complete control.[/i]That kind of thinking is good and why many choose...
- Tags: Tools & Techniques, PRODUCTIVITY, Microsoft Corp., software, Microsoft Windows Genuine Advantage, Microsoft Windows, forgery, Suzi Turner
- Discussion threads 2006-06-21
Additional Resources
- PCI-DSS 1.1 points to outdated OWASP Top 10
- OK, I'm not going to freak out about this too bad... I've already pointed out enough problems with PCI, but I did find it morbidly entertaining. My good friend Jeremiah Grossman pictured at right blogged today about the PCI-DSS 1.1 section 6.5, which covers "prevention of common coding vulnerabilities in...
- Tags: XSS, PCI, Security, Storage, Hardware, Nathan McFeters
- Blog posts 2008-07-02
- Google ships open-source Web security assessment tool
- The Google security team has released a free, open-source Web app security assessment tool capable of flagging vulnerabilities and potential security threats in Internet-facing applications. The tool, called Ratproxy, is described as a passive Web application security audit tool designed to analyze legitimate, browser-driven interactions with tested Web...
- Tags: Google Inc., Web, Web Application, Web Security, Tool, Google Security Team, Productivity, Open Source, Security, Ryan Naraine
- Blog posts 2008-07-01
- ICANN and IANA's domains hijacked by Turkish hacking group
- What happens when the official domain names of the organizations that issue the domain names in general, and provide all the practical guidance on how the prevent DNS hijacking, end up having their own domain names hijacked? A wake up call for the Internet community. The official...
- Tags: Hacking, DNS, ICANN, Domain, Domain Name, Internet Assigned Numbers Authority, Domain Names, Internet, Networking, Dancho Danchev
- Blog posts 2008-06-26
- ServerDefender AI (exe)
- Prevent common, dangerous Web hacker attacks (like SQL injection, buffer overflows, cross-site scripting and request forgery, directory traversal, zero-day, brute force, and denial of service attacks) with this low-cost Microsoft IIS Web application firewall. Go beyond signatures with neural learning to white list good traffic and block new or unknown...
- Tags: Port80 Software, Security, Hacking, Firewalls, Networking
- Software downloads 2008-06-20
- SunSpider JavaScript benchmark and ACID 3 compatibility charts - Firefox 3.0 RC 3 and Opera 9.50 added
- SunSpider JavaScript benchmark and ACID 3 compatibility charts - Firefox 3.0 RC 3 and Opera 9.50 addedMy sentiments exactly... ntntToughts? Yeah...IE 7 sucks.My Java 6 in Advanced is pulling off three other java proteges.It seems to be broke-in an in stalled correctly.RE: SunSpider JavaScript benchmark and ACID 3 compatibility...
- Tags: Web browsers, Main Thing, Opera Software, Mozilla Firefox, ACID 3 compatibility chart, compatibility chart, ACID 3, SunSpider JavaScript Benchmark, Firefox 3.0 RC 3, Mozilla Firefox 3.0, Opera 9.50, Web browser
- Discussion threads 2008-06-16
- The Lost Cases of Sherlock Holmes (zip)
- The Lost Cases of Sherlock Holmes is a lavish mystery adventure game, featuring 16 unique cases of forgery, espionage, theft, murder and more. Investigate hundreds of potentially relevant clues and lively characters in each mysterious story. Explore 40 historically accurate locations around London, as you track down suspects and evidence.This...
- Tags: Legacy Interactive, Games, Personal Technology
- Software downloads 2008-06-09
- More URI handler issues to come
- Rob Carter, Billy Rios, and I have been blogging about and speaking at conferences like Black Hat and ToorCon all year on the subject of URI handler abuse. One might think these types of flaws are soon to go away, but one look at SecurityFocus and FullDisclosure today and you can see...
- Tags: Flaw, Security, Nathan McFeters
- Blog posts 2008-04-25
- PCI Compliance gets clarified and neutered (further)
- At one point, I thought that PCI certification was a great thing. Now I realize that it's not really about security at all... it's about money and responsibility and transferring ownership of risk. The PCI certification just got a clarification: "6.6 Ensure that all web-facing applications...
- Tags: Web, XSS, PCI, Web Application, TV, Attack, PCI Compliance, Web Application Firewalls, WAF, Security, Nathan McFeters
- Blog posts 2008-04-17
- Security expert discusses a possible future for PCI-DSS... it's grim
- Jeremiah Grossman discussed some recent comments about section 6.6 of the PCI standard made by Standards Council General Manager Bob Russo in a recent Information Security magazine article. I found a lot of thoughts I share with Grossman. Grossman says: I have a love-hate relationship with PCI-DSS. Love it...
- Tags: Security, PCI, Web Application, Application Firewall, Security Expert, Jeremiah Grossman, Ruso, Firewalls, Networking, Nathan McFeters
- Blog posts 2008-04-14
- "How do I?" videos for security
- While checking out Billy Rios's XS-Sniper blog today, I noted that he had included an interesting link to some videos produced by Microsoft. I haven't had a chance to check them all out yet, but they are quite interesting. These "How do I?" videos provide video tutorials to address certain...
- Tags: Security, Video, Corporate Communications, Marketing, Nathan McFeters
- Blog posts 2008-04-03
- News to know: Windows 7; FCC; Census IT; HDMI; MacBook mystery; Fave Windows programs
- Notable headlines: Ed Bott: Your turn: Readers choose their 10 favorite Windows programs Gallery right Mary Jo Foley: Why Windows 7 might go to pieces Michael Krigsman: Billion-dollar IT failure at Census Bureau George Ou: HDMI survival guide...
- Tags: FCC, Google Inc., HDMI, Microsoft Windows 7, Information Technology, Apple MacBook, Apple Inc., Microsoft Windows, Rootkits, Federal Government, Operating Systems, Software, Security, Spyware, Adware & Malware, Government, Larry Dignan
- Blog posts 2008-03-21
- Not scared about Cross-Site Request Forgery? You should be... you're scared of jail aren't you?
- Not scared about Cross-Site Request Forgery? You should be... you're scared of jail aren't you?You are right.I see it updating a few times per month so there are more and more problems found. I will never tell anyone they are absolutely secure (ok, not networked, you are...
- Tags: PRODUCTIVITY, SECURITY, NoScript, Cross-Site Request Forgery, CSRF
- Discussion threads 2008-03-20
- Not scared about Cross-Site Request Forgery? You should be... you're scared of jail aren't you?
- Robert Hansen aka R-Snake has posted a very interesting article today over at his blog. As R-Snake states: Whelp, we've talked about it, but now it's finally possible. CSRF can now cause jail time. The FBI has begun arresting people who click on links to supposed child pornography. Now,...
- Tags: Child Pornography, Law, Government, Nathan McFeters
- Blog posts 2008-03-20
- Comcast%3A+BitTorrent+blocking+is+a+good+thing
- Comcast%3A+BitTorrent+blocking+is+a+good+thingYep. Enjoy your COMCASTIC experience at ...DOCSIS 1.1 levels, a technology that has been around since 1999. Where were the upgrades to 2.0 (around since 2001) and the latest 3.0 (around since 2006). Comcast as NOT used "good faith and judgement" by their network engineers. They need to be FIRED...
- Tags: INTERNET, Peer to peer (P2P), Connection Speed, Comcast Corp., network
- Discussion threads 2008-02-13
- Comcast traffic management issue before FCC
- Today is the deadline for the FCC call for comments on the Comcast traffic management case brought about by a formal complaint from the Free Press and Public Knowledge. As a former network engineer who designed networks and servers and as someone who has written extensively on these matters, I...
- Tags: FCC, Bandwidth, Packet, Electronic Frontier Foundation, BitTorrent, Network, Comcast Corp., P2P, Problem, Verizon Communications Inc., Broadband, DOCSIS, Network Management, BitTorrent Seeder, Networking, Cable, Broadband Internet, Telecommunications, Personal Technology, George Ou
- Blog posts 2008-02-13
- Mozilla delivers patches for Firefox; Plugs flat file vulnerability
- Mozilla on Friday delivered its Firefox 2.0.0.12 update including patches that fix a Web forgery flaw, browsing history and forward navigation stealing and the directory traversal via chrome, which has been the most visible vulnerability of late. According to the Firefox security advisory, Mozilla filed the following...
- Tags: Mozilla Firefox, Vulnerability, Patch Management, Web Browser, Mozilla Corp., MFSA, Web Browsers, Security, Internet, Larry Dignan
- Blog posts 2008-02-07
- Microsoft Windows Live Mail's CAPTCHA defense falls to spam bots
- Microsoft Windows Live Mail's CAPTCHA defense falls to spam botsI'll second that...They, or someone, has also figured how to do the same with Yahoo accounts. One of my email accounts, not Hotmail or Yahoo, gets 5 - 10 spams a day from Hotmail, Yahoo US, Yahoo UK, Yahoo Taiwan,...
- Tags: Operating systems, CAPTCHA, CAPTCHA defense, Microsoft Windows Live Mail, spam bot, Microsoft Corp., Microsoft Windows Live, WLM, Yahoo! Inc., Microsoft Windows
- Discussion threads 2008-02-07
- Security lessons from the SoGen debacle
- Jerome Kerviel, the Societe Generale trader that managed to lose more than $7 billion without the bank noticing, is facing charges of fraud and forgery. Security lessons of this debacle abound. As background Societe Generale, the French banking giant, last week said that Kerviel, a 31 year...
- Tags: Bank, Control, SoGen, Stiennon, Financial Services, Security, Larry Dignan
- Blog posts 2008-01-28
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts