Sponsored White Papers, Webcasts, and Downloads
ZDNet Dictionary Definition
- Privilege
- A permission or right. In information security, it refers to the modes of operation that a user or a process is granted. Examples include user-level privilege, operator privilege...
- Full Privilege Definition >>
ZDNet Resources
- Delegate privileges to users with sudo
- Vincent Danen offers a quick primer about the popular sudo program and shows you how to use it to delegate different privileges to users.
- Tags: Privilege, Vincent Danen
- Download resources 2008-06-02
- BatChmod (dmg)
- BatChmod is a Cocoa utility for manipulating file and folder privileges in Mac OS X. It allows the manipulation of ownership as well as the privileges associated to the Owner, Group or others. Here are some of the characteristics of BatChmod: Its simple and elegant. It allows one to change...
- Tags: Privilege, BatChmod, Apple Mac OS, Desktops, Operating Systems, Software, Hardware
- Software downloads 2007-11-23
- StripMyRights (zip)
- Utility for Windows XP and Windows Server 2003 that runs applications with reduced rights. If you for instance are logged on as Administrator or another user with administrative privileges on your Windows computer, you can use StripMyRights to run for instance Internet Explorer, Outlook or other programs with the rights...
- Tags: Utility, Privilege, Microsoft Windows, Microsoft Windows Server 2003, Operating Systems, Productivity, Servers, Software, Hardware
- Software downloads 2006-01-18
- The Services and Service Accounts Security Planning Guide
- This paper is an important resource to plan strategies to run services securely under the Microsoft Windows Server 2003 and Windows XP operating systems. It addresses the common problem of Windows services that are set to run with highest possible privileges, which an attacker could compromise to gain full and...
- Tags: Security, Microsoft Corp., Service, Privilege, Microsoft Windows, Microsoft Windows XP, Microsoft Windows Server 2003, Operating Systems, Servers, Software, Hardware
- White papers 2005-06-17
- TechNet Webcast: Securing Services and Critical Accounts (Level 200)
- Does the organization implement network services or applications that require the use of a service account? Service accounts are often configured to run with the highest possible privileges, resulting in membership in the domain administrators group. This kind of setup can enable an attacker to gain full and unrestricted access...
- Tags: Webcast, Microsoft TechNet, Privilege, Digital Media, Consumer Electronics, Personal Technology
- Webcasts
- A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities
- Most Windows users run all the time with Administrator privileges, equivalent to root privileges on a UNIX system. The possession of Administrator privileges by every user significantly increases the vulnerability of Windows systems. For example, simply compromising a user network service, such as an instant messaging client, provides an attacker...
- Tags: Technique, Privilege, Administrator, Microsoft Windows, Productivity, Instant Messaging, Operating Systems, Software, Internet, Online Communications
- White papers
- Teach Your Apps to Play Nicely With Windows Vista User Account Control
- The primary goal of User Account Control UAC is to make the default user token that applications are run with mimic that of a member of the Users group. This starts with creating a restricted, or filtered, token during interactive logon for users with elevated privileges. When more privileges are...
- Tags: Microsoft Windows Vista, Privilege, Token, Microsoft Windows, Microsoft Windows Vista (Longhorn), Operating Systems, Software
- White papers
Additional Resources
- Chrome's new EULA drops wide-ranging claims to user content
- Chrome's new EULA drops wide-ranging claims to user contentChrome's new EULA drops wide-ranging claims to user contentIt was no mistake. This was very intentional. Does Google really think the public is that stupid? They wanted to retain all rights to YOUR property! And you wouldn't get anything...
- Tags: legalese, Chrome, EULA, wide-ranging claim, Google Inc., new EULA, Microsoft Corp.
- Discussion threads 2008-09-04
- DoS vulnerability hits Google's Chrome, crashes with all tabs
- DoS vulnerability hits Google's Chrome, crashes with all tabsChrome will have security problems, and they will NOT all of a sudden gainshare. That said, the Google brand is very powerful, and people use it every day to search, and there will be lest resistance to trying Chrome than there was...
- Tags: Web browsers, SECURITY, Google Chrome, Chrome, DoS vulnerability, Google Inc., DOS, vulnerability
- Discussion threads 2008-09-03
- VMware ships patches for 'highly critical' server flaws
- Virtualization specialist VMware has shipped a mega-patch to cover several "highly critical" vulnerabilities affecting its server and workstation product lines. In all, the patch batch addresses at least 16 documented vulnerabilities affecting the VMware Workstation, VMware Player, VMware ACE, VMware Server and VMware ESX server. ...
- Tags: Vulnerability, Patch Management, VMware Inc., Flaw, Ip storage, Security, Servers, Hardware, Ryan Naraine
- Blog posts 2008-09-02
- Intel ships BIOS fix for Rutkowska's Black Hat flaw
- Intel has shipped a BIOS update with a fix for a privilege escalation vulnerability that was used by rootkit researcher Joanna Rutkowska to bluepill the Xen hypervisor. The vulnerability was discussed by Rutkowska at the Black Hat briefings earlier this month but details on the exploit were...
- Tags: Black Hat, Hypervisor, Motherboard, BIOS Update, Intel Corp., Flaw, System Management Mode, Level Privilege, BIOS, Virtualization, Hardware, Components, Ryan Naraine
- Blog posts 2008-08-27
- Linux under attack: Compromised SSH keys lead to rootkit
- Linux under attack: Compromised SSH keys lead to rootkitLinux under attack: Compromised SSH keys lead to rootkitLOL! And the hits to linux just keep coming! So thats 4 different incidents within a week's time of how badly linux sucks. Poor linus must be hiding under his bed trying...
- Tags: Operating systems, UNIX, Rootkits, OPEN SOURCE, Linux, SSH, attack, Compromised SSH, Compromised, Microsoft Windows, rootkit, security
- Discussion threads 2008-08-26
- Windows security rendered useless? Uh, not exactly
- Windows security rendered useless? Uh, not exactlyOh no!!Another Bott post!!!! I glad there is no more nonsense comparison between two different things.Um, Ed ...... I know you read the paper because I sent you the PDF, but it seems you failed to notice a few things.You accuse me of "alarming...
- Tags: Web browsers, Defense-in-Depth, exploitation, Microsoft Windows, memory corruption vulnerability, Web browser, security
- Discussion threads 2008-08-11
- A look at risk-reward: Apple may nuke apps on your iPhone remotely
- A look at risk-reward: Apple may nuke apps on your iPhone remotelyMicrosoft already canAll MS has to do is flip a bit on their WGA servers and the next time your Vista logs in, you get a "not validated" message and can't do jack squat with your entire machine.The ONLY...
- Tags: Microsoft Windows, Tools & Techniques, Apple Inc., Microsoft Corp., Apple iPhone
- Discussion threads 2008-08-07
- Apple finally ships DNS flaw fix, patches 16 other Mac OS X holes
- Apple finally ships DNS flaw fix, patches 16 other Mac OS X holesScary combination of arbitrary code execution and privilege escalation!!!Very, very scary. Makes me glad I use more secure OSs.RE: Apple finally ships DNS flaw fixHi NZ, We are all grateful your unstinting efforts to point out the failings...
- Tags: Microsoft Windows Vista (Longhorn), Domain names, Operating systems, DNS flaw, Microsoft Windows Vista, Apple Inc., DNS, Apple Mac OS X, flaw, patch management, Apple Macintosh, Apple Mac OS
- Discussion threads 2008-07-31
- Apple finally ships DNS flaw fix, patches 16 other Mac OS X holes
- [ UPDATE: nCircle Andrew Storms reports that the DNS client on the OSX 10.4.11 distribution still has not been patched. ] Apple has shipped a Mac OS X security update with patches for at least 17 documented vulnerabilities, including a fix for the serious DNS...
- Tags: Apple Macintosh, DNS, Patch Management, Apple Inc., Issue, Arbitrary Code Execution, Flaw, Application Termination, Apple Mac OS X, Apple Mac OS, Domain Names, Operating Systems, Software, Internet, Ryan Naraine
- Blog posts 2008-07-31
- The more things change
- The more things changeBe productive with a touch only computer ?"The potential is amazing - you can imagine was well as I can, I think, what a 12″ iPhone replacement for the traditional laptop could do for user productivity"You are talking of home user or of business user ?Because i...
- Tags: Processors, Linux, Operating systems, Intel x86, PPC, GPU, Microsoft Windows XP, security
- Discussion threads 2008-07-30
- Childs rigged crazyquilt private network
- Childs rigged crazyquilt private networkBut who is monitoring the monitor?Gartner's statement not worth quoting. They are the most worthless thing to hit IT.Was Childs the only IT person on staff that knew anything about computers? That's what it sounds like. But this isn't that hard to believe. Most IT...
- Tags: NETWORKING, Most IT department, private network, network, information technology
- Discussion threads 2008-07-24
- 2008 Pwnie Award nominees announced
- 2008 Pwnie Award nominees announcedNot bad butI have to give Lamest Vendor Response to Apple for the Safari carpet bomb flaw.Ok, Nate, so here's a solution to your QuickTime problemDon't run your browser with administrative credentials... yeah, yeah you're going to counter with something that is probably mostly FUD based....
- Tags: Digital music, SECURITY, Operating systems, Nate, Pwnie Award
- Discussion threads 2008-07-21
- DIRECTV: Well HERE's Your Problem, Ma'am...
- Shortly after I posted my diatribe on my problems with my DIRECTV HD receivers and the company's horrible customer service, I was contacted by Stuart Sweet, a moderator on a popular Satellite TV forums site, DBSTalk. Apparently, my post had created quite a stir and I was asked to register...
- Tags: Digital Video Recorder, DirecTV, Satellite, TVs, Tv & Home Theater, Personal Technology, Home Entertainment, Jason Perlow
- Blog posts 2008-07-20
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts