The problem of "insecure memory" is little-known and pervasive. Read on to find out what "insecure memory" means, and how it affects you. I even intentionally changed settings on a (secured) machine to use "insecure" memory just to show you how such a message might look. See the sacrifices I make for my readers?

Read the full entry »

On Friday, I discussed Joshua Corman's contention that "there is no perimeter," and my take on the phrase. That was only one of seven "dirty secrets" of the security industry he mentioned at Interop Las Vegas. Another is, he tells us, that security has grown beyond "do-it-yourself."

Read the full entry »

At Interop Las Vegas, IBM/ISS security strategist Joshua Corman explained seven "dirty secrets" of the security industry. One of his points was the newly common refrain, "There is no perimeter." What exactly does that mean?

Read the full entry »

Always been skeptical of those astronomically high monetary figures quoted by the media in cases of information theft or unintended disclosures? Same here. The discover of by McAfee security researcher Francois Paget of an underground marketplace touting top-quality information though, could perhaps narrow the incredulity gap a little.

Read the full entry »

Outlook Express is a handy, easy-to-use e-mail client -- it just needs a little help in the security department. Mike Mullins lists five ways you can boost the security of Outlook Express.

Read the full entry »

Brion Vibber, the Wikimedia Foundation's lead developer, is the guiding hand behind the ongoing improvement of MediaWiki. MediaWiki is one of the most widely-used Web applications in the world, and is the software basis for Wikipedia. On the Wikitech mailing list, he offered some insight into how he ensures secure development of the MediaWiki software.

Read the full entry »

A TechRepublic community member, in the discussion of the article "Fighting fire with fire", suggested a "community service" component to sentencing for malicious security crackers who are caught and convicted. The idea put forward is that they should contribute to development of software specifically meant to counter the efforts of other malignant computer abusers of their ilk. Let's examine that idea in a bit more detail.

Read the full entry »

Here’s a collection of recent security vulnerabilities, alerts, and news, which covers vulnerabilities found in Foxit PDF Reader 2.2 for Windows, a privilege escalation vulnerability in the Realtek HD driver, a new Java update from Sun, and updates on attempts by the FBI to police the Internet.

Read the full entry »

Wired reported that on the eleventh of April, on Friday two weeks ago, security expert Joel Eriksson discussed the tools and techniques he uses to crack security on common security cracking software at the RSA Security Conference -- fighting fire with fire, you might say.

Read the full entry »

Chad Perrin explains some procedures for closing ports and turning off services on Unix and Linux systems for added security.

Read the full entry »