ranum

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Bruce Schneier on the 10 year security outlook (it's worrisome)

Technology will evolve as computers become 100 times more powerful in 10 years. IT systems will become so interconnected that the risk of failures will escalate. And endpoints will never be secure. Meanwhile, the same old crimes--fraud, theft, impersonation and counterfeiting--will remain old standbys as new technology leads to...

Tags: Information Technology, Bruce Schneier, Ranum, Internet, Internet Service Providers (ISPs), Strategy, Security, Management, Larry Dignan

Blog posts 2007-12-04

Additional Resources

The empty debate over open source security

Guest editorial by Roger Thornton Last week, Fortify published a study on adoption of security best-practices within the Open Source community. Given mounting risk posed by extensive use of Open Source technologies within business and government IT, we were gratified to see the passionate discussions that followed....

Tags: Software, Open Source, Security Assurance, Security, Ryan Naraine

Blog posts 2008-08-01

China's golden cyber shield? Not.

On my recent travels in China I had an opportunity to experience first hand China's so called "Golden Wall". In each hotel I would try to get to several sites. For some reason this security blog is censored throughout China. How does that make you feel...

Tags: China, Richard Stiennon

Blog posts 2007-08-03

Remote vulnerability in high-profile Firefox extensions

Remote vulnerability in high-profile Firefox extensionsShut up, fool.ntThat wasa more detailed description of a vulnerability than I have seen for anything on Zdnet in a long time. if everWhy can't a description such as that be given for the products of Apple, Microsoft, etc?I mean that was pretty specific.just M$...

Tags: Web browsers, SECURITY, Mozilla Firefox, Microsoft Corp., vulnerability, Firefox extension

Discussion threads 2007-05-30

The secret to secure code--stop repeating old mistakes

The game of leapfrog between code defenders and attackers in cyberspace will continue to be waged as long as code is written. But the majority of security holes could be eliminated. Its not a technology prowess issue. The problem is that most companies and programmers dont have the basic skills...

Tags: General, IT Management, Software Infrastructure, Security, computer science

Blog posts 2007-01-16

Check Point Acquisition of Sourcefire Checked by Feds

Check Point Acquisition of Sourcefire Checked by FedsBackdoors by design or accident?Surely you jest, Mr. Stiennon.In 2000, one year after Check Point's Firewall-1 was certified by the NSA as the only EAL-2 compliant application & traffic firewall product, a group of security researchers ripped the product to shreds in a...

Tags: Firewalls, ASICs, Network security, SECURITY, Symantec Corp., Check Point Software Technologies Ltd., firewall, Sourcefire Inc., ASIC, acquisition

Discussion threads 2006-03-05

Slew of Windows patches coming

Slew of Windows patches comingSlew of Windows patches comingGood, anything to help make Windows more secure is always helpful and wanted. And they are releasing it right on schedule.Slew?Slew? Eight?Then what do you call Apple's monthly updates, one with a whopping 44 patches?http://docs.info.apple.com/article.html?artnum=302163http://docs.info.apple.com/article.html?artnum=302413You MUST be kidding !There are...

Tags: Patches, Hacking, patch management, rep, security, Windows patch, Microsoft Corp., Microsoft Windows

Discussion threads 2005-10-06

Bug spotted in Symantec antivirus

Bug spotted in Symantec antivirusCheeseForget about your kids inserting a grilled cheese sandwich into the VCR; this is the digital age! Make sure they haven't picked up any nasty buffer overruns at school.Lemme guess...This bug that was spotted, we've probably all spotted it before.It's the label on the box and/or...

Tags: SECURITY, security software, Symantec Corp., Symantec AntiVirus, software, antivirus

Discussion threads 2005-10-05

School teaches 'ethical hacking'

School teaches 'ethical hacking'This is long term great newsThe more this information can become mainstream, the more likely it is that programmers, vendors, etc. will take it seriously and deal with it. Marcus Ranum I'm sure will hate it, and he's right in the fact that short-term it will...

Tags: ethical Hacking, hacking

Discussion threads 2004-06-30