level privilege

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Intel ships BIOS fix for Rutkowska's Black Hat flaw

Intel has shipped a BIOS update with a fix for a privilege escalation vulnerability that was used by rootkit researcher Joanna Rutkowska to bluepill the Xen hypervisor. The vulnerability was discussed by Rutkowska at the Black Hat briefings earlier this month but details on the exploit were...

Tags: Black Hat, Hypervisor, Motherboard, BIOS Update, Intel Corp., Flaw, System Management Mode, Level Privilege, BIOS, Virtualization, Hardware, Components, Ryan Naraine

Blog posts 2008-08-27

Additional Resources

Windows 7 UAC flaw: "Pandora's box of all vulnerabilities"

Windows 7 UAC flaw: "Pandora's box of all vulnerabilities"Not that big an issue....Not that big an issue since the defalt in Windows 7 RC is to allways notify... so as long as you don't tamper with the default you should be ok. And hopefully 90% of users will leave it...

Tags: SECURITY, Operating systems, Adrian, UAC, Microsoft Windows 7, flaw, Microsoft Windows

Discussion threads 2009-06-12

WinMend System Doctor 1.3 (Windows)

WinMend System Doctor is a Windows-based security application. With its innovative, intelligent detection engine, WinMend System Doctor can effectively detect and fix security vulnerabilities in the system, fix software vulnerabilities in third-party applications, and prevent the running of malicious startup programs, Trojans, BHOs, processes and system services to significantly improve...

Tags: Security Risk, Microsoft Windows, WinMend, WinMend System Doctor, Security

Software downloads 2009-05-20

The plaintiffs' problem with no software liability

The plaintiffs' problem with no software liabilityThe problem with your exampleis that [i]if I put software on a chip and someone puts that chip in a product[/i], in regaurds to the chip, the issue is obvious: that chip is still the same chip through out it's life: You cannot modify...

Tags: Tools & Techniques, Semiconductors, chip, software

Discussion threads 2009-05-19

Windows 7 still allows unsafe files to be disguised as safe files

Windows 7 still allows unsafe files to be disguised as safe filesThey should....Default to show all extensions and give people the ability to hide them if they prefer, not sure why they would, but the option would be there. This is a good point to make and I hope...

Tags: Operating systems, Microsoft Windows 7, Microsoft Windows, UAC, security

Discussion threads 2009-05-05

Sony KDL-40ZX1M

Photo gallery: Sony KDL-40ZX1MAmong all of the technologies that enable LCD to attempt to rival the picture quality of the best plasmas, LED backlighting is the most effective we've seen. LED-equipped models we've reviewed in the last couple of years have demonstrated superb black-level performance, mostly thanks to...

Tags: Engineering, light-emitting diode, speaker, KLV-40ZX1M, Sony Corp.

Product reviews 2009-02-27

Symark PowerBroker: Root Access Risk Control for the Enterprise

Without putting more effective controls on high-privilege access such as Unix or Linux root account, enterprises not only expose the most business-critical IT assets to the most fundamental level of risk, they also expose trustworthy administrators to the consequences of privilege abuse by others. Commodity tools such as sudo often...

Tags: Symark Software, Microsoft Access, Linux, Asset Management, UNIX, Productivity, Operating Systems, Microsoft Office, Software, Operational Planning, Business Operations, Office Suites

White papers 2009-02-20

Report: 92% of critical Microsoft vulnerabilities mitigated by Least Privilege accounts

Report: 92% of critical Microsoft vulnerabilities mitigated by Least Privilege accountsRe:using pirated windowsThere is no reason that pirated versions of windows should be more vulnerable than genuine ones, this statistic only shows the lack of knowledge and common sense that the people using pirated windows have, since they don't seem...

Tags: Least Privilege account, standard user, Least Privilege, UAC, critical Microsoft vulnerability, Microsoft Vulnerabilities, standard User Account, Microsoft Corp., Microsoft Windows

Discussion threads 2009-02-10

Microsoft: UAC security setting not changing (for now)

Microsoft: UAC security setting not changing for nowWhy is this so confusing?I'm not understanding Microsoft's position here. Didn't they get lambasted for the default everyone NT security model? Now their efforst come down to a "well, it's mostly secure now" default method? Seriously. They must be idiots.How about a simple,...

Tags: Microsoft Corp., UAC, security

Discussion threads 2009-02-05

Really for sure, no Apple netbooks

Really for sure, no Apple netbooksWe've been over this. Overpriced = Luxury, Apple is luxury. ntntSome people are dependent on benevolence of a corporationOpen source system, where different companies compete on price and features and where products are extensible, is so much better than Apple system where you depend on...

Tags: Netbooks, nettops & MIDs, MSI, Apple Inc., netbook

Discussion threads 2009-01-23

Balancing utility with responsibility on student laptops

Balancing utility with responsibility on student laptopsFear FactorIt seems I refer to lots of books when I post here. This time it is "A Course In Miracles" The two people responsible for getting this into print were psychiatrists in a teaching hospital and used the principles to improve their...

Tags: PRODUCTIVITY, Edison, Balancing Utility

Discussion threads 2008-12-19

University music tax: sharing and caring?

University music tax: sharing and caring?Would a"blanket speeding ticket fine" be okay?Just a couple hundred dollars you have to pay your local municipality every year to cover any actual speeding you did but at which you weren't caught. I mean, essentially everyone breaks speed limits, at least once in...

Tags: Taxes, music tax

Discussion threads 2008-12-09

Apple dodges antitrust bullet

Apple dodges antitrust bulletApple = $$$ = Better lawyers. Pystar is right.The only reasonThe only reason it is not yet anti-competitive is because of Apple's pathetic marketshare.Let's flip this around: Imagine MS starts making computers and stops OEMs from selling Windows on the computers. You know, just...

Tags: PRODUCTIVITY, Microsoft Windows, Corporate law, Operating systems, antitrust, Pystar, tendancy, Apple Inc., Psystar

Discussion threads 2008-11-18

Why did Microsoft wait 7 years to fix SMBRelay attack flaw?

One of the code execution vulnerabilities fixed in this month's Microsoft Patch Tuesday release dates back to 2001 when it was first disclosed by Cult of the Dead Cow hacker Sir Dystic pictured left. If that wasn't cause for worry, get this:  An exploit for the bug...

Tags: Flaw, Issue, Microsoft Corp., Security Administration, Patches, Security, Ryan Naraine

Blog posts 2008-11-12

From Trust to Process: Closing the Risk Gap in Privileged Access Control

High-privilege administrative accounts hold the keys to gain access to the most sensitive IT processes and proprietary data--yet this level of access is far too often based on little more than trust alone. In this whitepaper, Enterprise Management Associates EMA examines this critical issue in IT security administration to...

Tags: Symark Software, Information Technology, Access Control, Strategy, Security, Management

White papers 2008-11-01

Women and leadership

Last week, my dead tree copy of McKinsey Quarterly arrived bearing the above title. This section caught my eye (p.45 and written by Joanne Barsch, Susie Cranston and Rebecca A. Craske): One surprising thing we learned as a result of talking with female leaders was that they often fail...

Tags: McKinsey & Co., Leadership, Men, Women, Leader, Personal Development, Gender And Diversity, Human Resources, Dennis Howlett

Blog posts 2008-10-27

"Joe the Plumber"'s data compromised by government insider

"Joe the Plumber"'s data compromised by government insiderIllegal activity no big deal...because the security breach benefits the Dems, who are overwhelmingly supported by the media and government workers. Hey, slap on the wrist, don't do that again.Now, if the breach had gone the other way, it'd be front-page news...

Tags: SECURITY, Obama, devilcrat, Joe, Plumber

Discussion threads 2008-10-25

Samsung Omnia

Photo gallery:Samsung OmniaAlong with the RIM BlackBerry Bold and Sony Ericsson Xperia X1, the Samsung Omnia is one of the most requested and sought after smartphones of 2008. Why all the buzz? It's not so much the Omnia's touch screen that's drawing attention (after all, we've seen it in the...

Tags: Smart phones, Keyboards, Monitors & displays, Cellular phones, Handhelds, Samsung Electronics Co. Ltd., Samsung OMNIA, OMNIA, touch screen

Product reviews 2008-09-30

SMM Rootkits: A New Breed of OS Independent Malware

The emergence of hardware virtualization technology has led to the development of OS independent malware such as the Virtual Machine Based Rootkits VMBRs. This paper draws attention to a different but related threat that exists on many commodity systems in operation today: The System Management Mode Based Rootkit SMBR. System...

Tags: Operating System, Malware, Association For Computing Machinery, System Management Mode, Spyware, Adware & Malware, Cyberthreats, Rootkits, Virtualization, Cloud Computing, Storage Management, Operating Systems, Security, Hardware, Storage, Software

White papers 2008-09-25

Spreadsys Ticker 1.3 (Windows)

Spreadsys Ticker smart system has simple approach to help broadcasting news, managing links, and getting users attention with moving text, blinking appearance, or pop-up dialog. Features of this smart system include: multi priority with customized background color and font color and breaking news pop-up message. News messages are distributed via...

Tags: Message, Broadcasting, SpreadSys, News Message, Microsoft Windows, Monitors & Displays, TVs, Operating Systems, Software, Hardware, Components, Personal Technology, Home Entertainment

Software downloads 2008-09-12