xmlhttp request Resources on ZDNet

Sponsored White Papers, Webcasts, and Downloads

ZDNet Resources

Adobe patches 7 issues, including Pwn2Own contest flaw and DNS rebinding issues: Adobe published an advisory covering issues, including a fix for the Pwn2Own flaw that we previously discussed here. Adobe's details are published here. One of the issues that was patched was discovered by myself and fellow researcher (and co-worker at Ernst & Young's Advanced Security Center) Rob Carter, see the picture to the...; Tags: Adobe Systems Inc., DNS, Domain, Lookup, Microsoft Internet Explorer, Web Browser, Domain Name, Flaw, Rob, Flash, XmlHttp Request, Kicker, Domain Names, Web Browsers, Networking, Internet, Nathan McFeters; Blog posts 2008-04-09

Additional Resources

Safari "Carpet Bomb" attack information released: Nitesh Dhanjani released information about some of his newest research on the Safari web browser this morning, and interestingly enough, Apple has decided NOT to fix some of the issues he presented. Dhanjani reported three issues, as follows below from his blog: 1. Safari Carpet Bomb.It...; Tags: HTML, Apple Safari, Apple Inc., Issue, Safari Carpet Bomb.It, Security, Nathan McFeters; Blog posts 2008-05-15
ABC called looking for an "All American" bachelor...: I got a call from one of the producers of The Bachelor looking for a new crop. Did I know any bachelors? I said I did. They said they should be tall, the women are asking for at least 6 foot tall, they should be charming, handsome, and have...; Tags: Look, ABC Inc., Women, Gender And Diversity, Web 2.0, Channel Management, Human Resources, Internet, Marketing, Tom Foremski; Blog posts 2008-05-15
Craigslist fires back at eBay; Bogus Google ads to Kijiji alleged: Craigslist has filed its response to eBay's lawsuit and the company hits back--hard. Craigslist alleges that eBay participated in everything from "unlawful and unfair competition," false advertising, business interference and even phishing attacks. The official list via Craigslist: "We filed a complaint in California today, charging...; Tags: Google Inc., Craigslist, Advertisement, eBay Inc., Phishing, Cyberthreats, Security, Spam And Phishing, Larry Dignan; Blog posts 2008-05-13
Integrate services into business processes to achieve your SOA objectives: A correctly implemented service-oriented architecture SOA is built on flexible and effective business and infrastructure services. This sample chapter from Implementing SOA: Total Architecture in Practice discusses various ways you can integrate those services into your organization's business processes. It looks at service interaction patterns, service access mechanisms, types of...; Tags: Business Process, SOA, Service, Addison-Wesley, Service-Oriented Architecture (SOA), Web Services, Operational Planning, Middleware, Enterprise Software, Software, Business Operations; Book chapters 2008-05-08

PC Fixer (exe): PC Fixer is a utility that automatically diagnose system and application problems on your computer based on our innovative Reverse Search Engine and a comprehensive database of support procedures. Then a list of detected computer problems is displayed with detailed descriptions for you to review. You may select specific problems...; Tags: PC, Problem, Utility, Computer, Digital Support Technology, PC Fixer, Productivity, Desktops, Hardware; Software downloads 2008-05-08
IT politics killed White House email project: Data archiving in the White House is a serious business mandated by the Presidential Records Act of 1978, which was passed following the Watergate scandal. The Act requires the White House to maintain an historical archive of its activities, policies, and decisions. Despite...; Tags: Information Technology, White House, Act, E-mail, Online Communications, Michael Krigsman; Blog posts 2008-05-06
Oracle developing grid management, chargeback features for Oracle VM: Oracle is integrating virtualization management into its grid control product, the company's chief corporate architect said. Oracle VM, a server virtualization product based on the Xen open source virtualization hypervisor, made its debut last November. The VM software supports Oracle and non-Oracle applications. Oracle's databases, middleware and...; Tags: Oracle Corp., Virtualization, Storage Management, Utility Computing, Hardware, Storage, Paula Rooney; Blog posts 2008-05-06
CoreAVC for Linux project coming back to Google: CoreAVC for Linux, which was removed from Google after a DMCA takedown notice from CoreCodec, will be coming back. The project provides patches enabling open source media players to use CoreAVC software under Linux. A CoreCodec worker using the screen name BetaBoy told an...; Tags: Google Inc., DMCA, CoreAVC, BetaBoy, Linux, Digital Media, UNIX, Open Source, Operating Systems, Software, Consumer Electronics, Personal Technology, Dana Blankenhorn; Blog posts 2008-05-05
Foxtrot Suite (exe): FoxtrotOne, our flagship product, is designed to interact with any desktop or browser application. By making use of intuitive drag-and-drop tools, FoxtrotOne can be trained to automate virtually any task. You can easily train FoxtrotOne just like an individual. It can be taught to type information into your business system...; Tags: Task, Web Browser, EnableSoft, FoxtrotOne, Foxtrot, Web Browsers, Web Site Development, Internet; Software downloads 2008-05-04
Apple and AT&T providing free Wi-Fi access to iPhone users and oops... to everyone else as well!: You have to love security through obscurity... A friend of mine on a private mailing list passed me a link to a story on macrumors.com, which was quite interesting. Apparently, Apple and AT&T has decided to provide free wireless access to iPhone users at places like Starbucks. ...; Tags: Apple iPhone, Wi-Fi Access, AT&T Corp., Apple Inc., Starbucks Corp., User Agent, MacRumors, Wireless LANs, Wi-Fi, Wireless, Nathan McFeters; Blog posts 2008-05-01
Using the openssl command-line program: OpenSSL can be used to create, request, sign, and revoke certificates and can also be used to perform other cryptographic operations such as creating hashes for files, testing SSL connections, and more.; Tags: OpenSSL, Vincent Danen, Ssl/Tls, Authentication/Encryption, Network Security, Security, Networking; Download resources 2008-04-30
Fixing Windows Vista, Part 2: Taming UAC: The User Account Control feature in Windows Vista has been known to drive normally level-headed people over the edge with frustration. If you find it annoying, you might be tempted to turn it off. According to Microsoft research, somewhere between 12 and 16 percent of all Windows Vista users do...; Tags: Program, Account, Microsoft Windows Vista, UAC, Dialog Box, OK, Microsoft Windows, Microsoft Windows Vista (Longhorn), Operating Systems, Software, Ed Bott; Blog posts 2008-04-29
Developers at fault? SQL Injection attacks lead to wide-spread compromise of IIS servers: There's been a lot of noise and violent thrashing over the last couple days regarding a flaw that was originally believed to be a flaw in Microsoft's IIS Internet Information Server, but has since been pointed out as simply a well thought out SQL Injection attack. For those of...; Tags: Developer, Password, Web Application, Server, SQL, Site, SQL Injection, Microsoft IIS Server, Attack, Programming Languages, Security, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management, Nathan McFeters; Blog posts 2008-04-28
HP, Lenovo join Dell in extending Windows XP: HP, Lenovo join Dell in extending Windows XPThe problem is not installing software it......is running the software. A lot of programs assume the user has administrative rights and would fail to run if they did not. Your solution doesn't appear to address that issue.Easy fix to make Xp betterThere is...; Tags: Microsoft Windows Vista (Longhorn), Operating systems, Dell Computer Corp., Microsoft Windows XP, Microsoft Windows Vista, operating system, Hewlett-Packard Co., Microsoft Windows, Lenovo Group Ltd.; Discussion threads 2008-04-26
More URI handler issues to come: Rob Carter, Billy Rios, and I have been blogging about and speaking at conferences like Black Hat and ToorCon all year on the subject of URI handler abuse. One might think these types of flaws are soon to go away, but one look at SecurityFocus and FullDisclosure today and you can see...; Tags: Flaw, Security, Nathan McFeters; Blog posts 2008-04-25
Self-healing computers for NASA spacecraft: As you can guess, hardwired computer systems are much faster than general-purpose ones because they are designed to do a single task. But when they fail, they need to be totally reconfigured. This can be just a costly problem in a lab on Earth, but it can be vital in...; Tags: NASA, Patent, Unit, Hardware, FPGA, Computer, UA, UA Engineer, Roland Piquepaille; Blog posts 2008-04-25
Microsoft Natural Ergonomic Desktop 7000 - keyboard , mouse: The Microsoft Natural Ergonomic Desktop 7000 is a mainstream solution: it's likely not going to solve the unique problems of clinically injured computer users, but it does seem like a decent entry point for the average user who wants a slightly more body-friendly desktop setup than a standard keyboard and...; Tags: Keyboards, Mice, Microsoft Natural, keyboard, Microsoft Natural Ergonomic Desktop 7000, wrist, mouse, Microsoft Corp.; Product reviews 2008-04-24
SOA makes even the US Marines nervous: Many analysts and pundits are fretting about the poor adoption of SOA within today's corporations. Maybe their concerns are well-founded, because it looks like even the US Marines are worrying that they may not be getting SOA right. A recent report in Federal Computer Week notes that...; Tags: SOA, Marines, Service-Oriented Architecture (SOA), Web Services, Middleware, Enterprise Software, Software, Joe McKendrick; Blog posts 2008-04-23
LendingTree insiders leak customer data: LendingTree, an online loan referral service owned by IAC, has informed select customers that their confidential data has been leaked to "a handful of lenders" by company insiders. An email to customers that may have been impacted by the breach refers folks to an FAQ that's basically...; Tags: LendingTree, Sales Channel, Social Security, E-mail, Financial Services, Identity Theft, Sales, Government, Online Communications, Security, Larry Dignan; Blog posts 2008-04-23