x2 advisory council

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

A break from the Classmate to talk SIS

I decided to take a short break from my ongoing series on Intel's Classmate PC to give a little insight into the state of the art in student information systems. I recently attended a meeting of the X2 Advisory Council (a standing "focus group" assembled by our SIS developer)...

Tags: Aspen Technology Inc., Web, SiS, X2 Advisory Council, AJAX, Channel Management, Internet, Software/Web Development, Web Development, Web 2.0, Marketing, Christopher Dawson

Blog posts 2007-10-29

Additional Resources

Gaping holes in RealPlayer patched

Digital media delivery firm RealNetworks has shipped a high-prority patch to cover four gaping holes in its flagship RealPlayer software, warning that the vulnerabilities could put users at risk of code execution attacks. The patch comes a few hours after Secunia released an advisory warning for one...

Tags: Vulnerability, RealNetworks Inc., RealNetworks RealPlayer, Digital Music, Digital Media, Security, Personal Technology, Consumer Electronics, Ryan Naraine

Blog posts 2008-07-25

Microsoft joins 'patch DNS now' chant; Apple patch missing

On the heels of the release of weaponized exploit code for the DNS cache poisoning vulnerability, Microsoft has joined the chorus of security pros pleading with DNS server providers to immediately apply patches to protect users from malicious attacks. The Redmond, Wash. security...

Tags: Apple Macintosh, DNS, Vulnerability, Apple Inc., Exploit Code, Microsoft Corp., Attack, Dan Kaminsky, Domain Names, Apple Mac OS X, Networking, Security, Internet, Operating Systems, Software, Apple Mac OS, Ryan Naraine

Blog posts 2008-07-25

Heap-based buffer overflow reported in RealNetworks RealPlayer

Update 07/25/2008: Aaron Portnoy of TippingPoint's security research group was kind enough to point out that I'm actually not affected by this, since I've installed the newest version of RealPlayer.  From Aaron's email: Notice the Secunia advisory states it affects RealPlayer 10.5... the latest is 11.x, which now uses...

Tags: Vulnerability, RealNetworks Inc., Buffer-overflow, RealNetworks RealPlayer, Secunia Research, Vendor, Digital Music, Digital Media, Personal Technology, Consumer Electronics, Nathan McFeters

Blog posts 2008-07-25

Managing growth - a followup to yesterday's guest blog

Yesterday, Dean Cycon of Dean's Beans wrote a guest blog for this column on "Starbucks' Dirty Little Secret". The blog is worthy of some followup, as well as some additional information that Dean shared with me about their corporate philosophy. Growth is good for a company,...

Tags: Trader, Blog, Dean Cycon, X2 Development Corp., Strategy, Management, Christopher Dawson

Blog posts 2008-07-23

iPhone vulnerable to phishing, spamming flaws

Security researcher Aviv Raff left has discovered a pair of basic design flaws that could turn your iPhone into easy bait for malicious phishing and spamming attacks. According to an advisory from Raff, the iPhone's Mail and Safari applications are susceptible to a URL Spoofing vulnerability which...

Tags: Apple iPhone, Apple Safari, Vulnerability, Spamming, Flaw, Aviv Raff, Phishing, Spam, Security, Spam And Phishing, Ryan Naraine

Blog posts 2008-07-23

NY gov signs game bill into law

New York State legislation that will have made it illegal to sell or rent some violent games to minors was signed was signed into law. A bill that will have made it illegal to sell or rent some violent games to minors was signed into law Tuesday by New...

Tags: Law, Minor, Games, Personal Technology, video games, video game violence, Nintendo DS, New York, Brendan Sinclair, GameSpot

News items 2008-07-23

McAfee debunks recent vulnerabilities in AV software research, n.runs restates its position

Several days after blogging about a research conduced by n.runs AG that managed to discover approximately 800 vulnerabilities in antivirus products, McAfee issued a statement basically debunking the number of vulnerabilities found, and providing its own account into the number of vulnerabilities affecting its own products : "A recent...

Tags: Software, McAfee Inc., Antivirus, Vulnerability, Vendor, Flaw, N.Runs, Dancho, Security, Viruses And Worms, Dancho Danchev

Blog posts 2008-07-23

A look at the recent Firefox 3 vulnerability

True to form, Billy Rios promised a more in depth look at the MSFA2008-35 vulnerability which is another protocol handler flaw in Firefox 3.  As previously reported here, this was another protocol handler flaw that led to arbitrary remote command execution, and is especially dangerous since it can be deployed...

Tags: Mozilla Firefox 3.0, Mozilla Firefox, Apple Safari, Vulnerability, Protocol Handler, Firefox3, Security Decision, Web Browsers, Security, Internet, Nathan McFeters

Blog posts 2008-07-22

HP Compaq CQ50-115NR

Note: This review is part of our Back-to-School 2008 roundup, covering specific configurations of popular laptops that can be found in retail stores.We were excited when HP announced the revival of the Compaq Presario brand earlier this year. Here was the promise of a family of basic, entertainment-oriented laptops at...

Tags: Desktops, Compaq Presario, Compaq Computer Corp., Hewlett-Packard Co.

Product reviews 2008-07-21

eMachines T5274

The eMachines T5274 is eMachines' higher-end budget desktop for the back to school season. While it seems like a good deal for $400, the fact is that the low-end PC market has become increasingly competitive this year, which makes it hard for systems such as this one that straddle two...

Tags: DVD, Consumer electronics, eMachines Inc., eMachines T5274

Product reviews 2008-07-21

2008 Pwnie Award nominees announced

Well, after getting 134 nominations, and spending countless hours pulling out nominees, the judges for the 2008 Pwnie Awards have announced the final nominees to be voted on.  From the site: The final list of nominees for the nine Pwnie Award categories is ...

Tags: Nominee, Vulnerability, XSS, Attack, Flaw, Dan, XSS Flaw, Lifelock, Security, Nathan McFeters

Blog posts 2008-07-21

AMD on road to recovery, says research firm

AMD on road to recovery, says research firmWhile this may sound too simple...all AMD needs is a processor that would outperform what Intel is offering. The CPU market is a lot less sophisticated than analysts would have you believe. But then what would they have to write about.When AMD had...

Tags: PRODUCTIVITY, Processors, Advanced Micro Devices Inc., Intel Corp.

Discussion threads 2008-07-21

Bookmark this: Three Web sites to aid the green cause

"EcoSearch this" doesn't have quite the same ring as "Google this," but the non-profit is hoping to harness the power of the Google search engine to help raise money for environmental non-profits including the Sierra Club, TreePeople, RainForest Alliance, National Resource Defense Council, Heal the Bay, Healthy Child, Healthy World...

Tags: Google Inc., Web, Web Site, Web Site Development, Web Technology, Channel Management, Internet, Marketing, Heather Clancy

Blog posts 2008-07-19

Toshiba Satellite L355D-S7815

Note: This review is part of our Back-to-School 2008 roundup, covering specific configurations of popular laptops that can be found in retail stores.By virtue of its broad, 17.1-inch display, the $699 Toshiba Satellite L355D-S7815 stands out among budget back-to-school laptops (most of which feature 15.4-inch displays). But that feature is...

Tags: Notebooks, Network technology, Toshiba Corp., Satellite L355D-S7815, satellite, laptop computer, Toshiba Satellite

Product reviews 2008-07-18

Unpatched code execution bug haunts BlackBerry

Security alerts aggregator Secunia has raised an alarm for a "highly critical" vulnerability that puts users of the BlackBerry Enterprise Server at risk of code execution attacks. Technical details of bug are not available but Secunia says it is caused by an unspecified error in the BlackBerry...

Tags: Adobe PDF, Smart Phone, RIM BlackBerry, Handhelds, Smart Phones, Hardware, Consumer Electronics, Personal Technology, Ryan Naraine

Blog posts 2008-07-17

The Techie Hall of Shame

A SFGate story began this week with the all-too-familiar line--"A disgruntled computer engineer..." before going on to list the disgrace of the day, in this case virtually commandeering San Francisco's new multimillion-dollar computer network and hacking it to deny access to top administrators. He's now locked up with a $5...

Tags: Network, Computer, Productivity, Networking, Security, Deb Perelman

Blog posts 2008-07-16

Ounce Labs finds 2 security vulnerabilities in Spring framework

Code inspector Ounce Labs has identified two vulnerabilities in the open source Spring framework that exposes their enterprise applications to would-be hackers and hijackers. The two issues, ModelView Injection and Data Submission to Non-Editable Fields, affect only the MVC module of the Spring framework, which is used to...

Tags: Vulnerability, XSS, Framework, Ounce Labs, Spring, Security, Operational Planning, Databases, Business Operations, Enterprise Software, Software, Data Management, Paula Rooney

Blog posts 2008-07-16

David Litchfield on details of one of the critical vulnerabilities from the latest Oracle patch

More details coming out on the Oracle patches that were released last week, see Ryan Naraine's write up here.  David Litchfield, noted security researcher from NGSSoftware, released details of one of the vulnerabilities on the Full-Disclosure email list today, and the details are staggering.  The flaw allows potential unauthenticated remote...

Tags: Oracle Application Server, Oracle Corp., Database Server, Critical Vulnerability, Application Servers, Middleware, Databases, Enterprise Software, Security, Software, Data Management, Nathan McFeters

Blog posts 2008-07-15

Symantec says Microsoft Access ActiveX attacks to increase

Symantec says Microsoft Access ActiveX attacks to increaseVista is not vulnerableVista is not vulnerableRE: Symantec says Microsoft Access ActiveX attacks to increaseJust a lame attempt by Symantec to muster up some business.A better solutionJust use Firefox.How about some references to back...that statement.There is some justification for the statementIE7 with protected...

Tags: Microsoft Windows Vista (Longhorn), SECURITY, Web browsers, Microsoft Access ActiveX attack, Microsoft Access ActiveX, Symantec Corp., Microsoft Corp., Microsoft Access, attack

Discussion threads 2008-07-15