secure coding

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

secure coding: the invisible elephant

Secure coding: the invisible elephantA huge topicA great wide ranging post on a huge topic Dennis. My focus is very much around the processes of what lives where in the enterprise. There's no such thing as secure code but there is a lot to be said for defining what information...

Tags: security, Secure Coding

Discussion threads 2008-04-08

Additional Resources

Facebook bans Google's Friend Connect

A few days ago, Google launched a new service called Friend Connect to help website owners make their stuff social without needing to do much work. This basically involves being able to host certain gadgets that use OpenSocial on a webpage by simply copy and pasting some code from...

Tags: Google Inc., Facebook, Web Site, Web Site Development, Web Technology, Internet, Garett Rogers

Blog posts 2008-05-16

RIM's Lazaridis on why Qwerty's still working

RIM's co-CEO tells Silicon.com why he believes smartphones are the future, why Qwerty is so exciting, and why the Bold has nothing to do with the iPhone. BlackBerry maker RIM has been very busy this week hosting the Wireless Enterprise Symposium in Orlando, Fla. One of the announcements...

Tags: Touch Screen, Apple iPhone, Research In Motion Ltd., Phone, Smart Phone, RIM BlackBerry, Qwerty, Keyboards, Smart Phones, Monitors & Displays, Handhelds, Cellular Phones, Hardware, Peripherals, Personal Technology, Components, Silicon.com, Consumer electronics

News items 2008-05-16

McAfee's HackerSafe: "Um... we go in like a super hacker"

Updated 05/16/2008 2:00 p.m. CST: I officially have my first customer for the "Nate McFeters Safe" certification and Jeremiah Grossman and I have signed up another member for Scanless PCI, as noted security researcher Russ McRee has purchased our certifications, see http://holisticinfosec.blogspot.com.  God is good and created YouTube for laughs...

Tags: Nathan McFeters

Blog posts 2008-05-16

Stonesoft Security in Virtual Environments

As I mentioned in the post, Virtualization and security, quite a number of suppliers focused on security in virtualized environments have come forward to speak with me in the past month. Stonesoft is one of those companies. Mark Boltz, Senior Solutions Architect, and Greg Mead, Solutions Architect, both of Stonesoft,...

Tags: Network, Environment, Stonesoft, Stonegate Management Center, Security, Networking, Dan Kusnetzky

Blog posts 2008-05-16

Mashups turn into an industry as offerings mature

There were a great many product announcements at Web 2.0 Expo in San Francisco last month, but it was the number of announcements around Web-based mashups in particular that received a large share of attendee and media attention. By my count there were at least nine significant announcements in...

Tags: Web, Industry, Mashup, JackBe, Lotus Mashups, MashupHub, Mindtouch, Itasca, Serena, Mashup Exchange, SnapLogic, Dion Hinchcliffe

Blog posts 2008-05-15

A stick and personal care for those who can afford it

Lorne Stitsky has a dream. It's the comfortable life internists enjoyed generations ago. A small number of patients, whom he can know intimately and who will depend on him as families did way back when. You can almost hear Randy Newman's Dayton Ohio 1903 playing in the...

Tags: Patient, Dr., Lorne Stitsky, Dana Blankenhorn

Blog posts 2008-05-15

Virtualization and security

It's easy to spot market trends when many vendors call to schedule meetings and all of them want to speak about the same topic. The topic du mois is security in virtualized environments. Some of the suppliers are taking a very broad view of both security and virtualized environments. Others...

Tags: Network, Environment, Virtual Machine, Virtual Machine Software, Virtualization, Security, Hardware, Dan Kusnetzky

Blog posts 2008-05-15

With the Quickness: HD Moore sets new land speed record with exploitation of Debian/Ubuntu OpenSSL flaw

So, for those who haven't heard, a Debian packager modified the source used for OpenSSL on Debian based systems Debian and the whole of the Ubuntu family to remove the seed used for PRNG Pseudo Random Number Generator used when creating SSL keys.  Well, HD Moore set a new record...

Tags: OpenSSL, SSH, Debian, Key, Flaw, HD, ID, Ssl/Tls, Operating Systems, Open Source, Security, Software, Nathan McFeters

Blog posts 2008-05-14

Linux's biggest victory so far - Splashtop to ship on ASUS motherboards

In what I think is the biggest victory for Linux so far, DeviceVM's Splashtop Linux desktop will ship across the entire P5Q range of motherboards, with more to follow by the end of the year. DeviceVM, the award-winning developer of Splashtop™, today announced the proliferation of their innovative software...

Tags: ASUS, Motherboard, Model, Linux, UNIX, Operating Systems, Open Source, Software, Adrian Kingsley-Hughes

Blog posts 2008-05-14

News to know: Zoho; HP; Windows 7; Patch day

Notable headlines: Dennis Howlett: Zoho's Googley login raises interesting questions Ed Bott: The key to Windows success? It's all about the drivers News.com: Facebook pulls ‘stalker list' tool after Gawker exposes it Mary Jo Foley: Gates emphasizes PC-phone...

Tags: Google Inc., Hewlett-Packard Co., Microsoft Windows 7, Microsoft Corp., Electronic Data Systems Corp., Microsoft Windows, Operating Systems, Software, Larry Dignan

Blog posts 2008-05-14

Veil (exe)

Have you ever thought that you can hide a file or a folder behind another file? If you have thought about it before but you don't know how to work that up, Veil will do the job for you. Veil not just only hide your file or folder, it also...

Tags: File, HideIT, Recruitment & Selection, Security, Human Resources, Workforce Management

Software downloads 2008-05-14

ReachPlus Alerts Premium (exe)

ReachPlus Alerts Premium is secure instant messaging product that has been designed and developed with the specific goal of enabling administrators and security personnel to effortlessly deliver critical and/or emergency alert messages across an organization. Furthermore, with the help of ReachPlus Alerts Premium, you can send inter-office and cross-office messages...

Tags: Secure Instant Messaging, tekAlign

Software downloads 2008-05-14

McAfee isn't "McAfee Secure" or "Hacker Safe"

McAfee isn't "McAfee Secure" or "Hacker Safe"McAfee not a security companyI've been saying this for a while, albeit mostly regarding Symantec. This still applies to McAfee, though: An antivirus company, does not a security company make.Though still an unpopular idea, the concept of antivirus does not comply with standard, universal...

Tags: McAfee Inc., security company, security

Discussion threads 2008-05-13

Microsoft plugs Office leaks; Delivers 4 critical patches

Microsoft plugs Office leaks; Delivers 4 critical patchesAnd... conspicuously absent from the list?Windows Vista - again. More secure? definitely. Runs well? Absolutely? Trouble-free? Not nearly. Better value? Absolutely.Windows Vista - it just works.Good news for Mac users of MS Officehttp://biz.yahoo.com/prnews/080513/aqtu077.html?.v=48VBA is back!LameThat privilege escalation...

Tags: Microsoft Windows Vista (Longhorn), Patches, Operating systems, Microsoft Windows Vista, Microsoft Office, Microsoft Windows, patch management, Microsoft Corp.

Discussion threads 2008-05-13

McAfee isn't "McAfee Secure" or "Hacker Safe"

In my most recent discussion on McAfee, I posted a talkback to Russ McRee stating, tongue in cheek mind you, that it'd be interesting to see an XSS or SQL Injection on McAfee's site, see if they are indeed "McAfee Secure". Well, I guess you get what you ask for......

Tags: McAfee Inc., XSS, Hacker, Tool, Productivity, Nathan McFeters

Blog posts 2008-05-13

Gates emphasizes PC-phone connectivity in Windows 7

Gates emphasizes PC-phone connectivity in Windows 7It is standard MS modus operandiAnd it isn't working anymore. 2010?!? Who's going to wait that long? By 2010, there won't be any Windows Mobile devices anymore. It will be all Blackberry and iPhone.phone-pc communication--a step backwardsI admit that windows synchronization between phone (or...

Tags: Operating systems, Handhelds, RE:It, Microsoft Windows, Microsoft Windows 7, PC-phone connectivity, PC-phone, phone, PC, Microsoft Corp.

Discussion threads 2008-05-13

Google launches Friend Connect with mixed reviews

Google announced last night that it will be launching Friend Connect -- a tool that website owners can use to give their site a more social feel. Don't worry if you have a website but you are not comfortable integrating with advanced APIs, integrating couldn't be easier. ...

Tags: Google Inc., API, Web Site, Web Site Development, Web Technology, Internet, Garett Rogers

Blog posts 2008-05-13

Microsoft's plan to block Linux on laptops

Microsoft's plan to block Linux on laptopsHow in the heck did you reach that conclusion?Somehow I missed how MS will "block" Linux on laptops from the writeup. I assume you're implying that XP is so desirable over Linux that charging less than $30 is a slam dunk. ...

Tags: UNIX, Operating systems, OPEN SOURCE, Notebooks, Microsoft Corp., Linux, laptop computer, Microsoft Windows XP

Discussion threads 2008-05-13

Apani and Cross-Platform Server Isolation

A while ago, I spoke with the folks of Apani about security in virtualized environments. Although this isn't a topic that is getting as much media attention as virtual machine software, virtual access software or virtual application environment software, it is a very important topic. Security risks still exist even...

Tags: Software, Environment, Apani, EpiForce, Server Virtualization, Servers, Security, Hardware, Dan Kusnetzky

Blog posts 2008-05-13