Security News

Intel 'hacker' sentence expunged 04 Mar 2007 00:00 GMT
Randall Schwartz, a former Intel contractor, has been cleared of a conviction for hacking into Intel systems.
Source: ZDNet

Researcher launches Month of PHP Bugs project 02 Mar 2007 17:15 GMT
Initiative focuses on popular scripting language with the aim to improve security.
Source: ZDNet

Disk drive failures 13 times what vendors say, study says 02 Mar 2007 05:16 GMT
The study showed annual replacement rates of disk drives are as high as 13% annually compared to vendor estimates of under 1%. The study also showed there is no correlation between heat and drive failure. In another revelation, researchers found that Serial ATA drives are just as reliable as Fibre Channel drives that cost up to four times as much per gigabyte.

Source: Computerworld

Your Wi-Fi can tell people a lot about you 02 Mar 2007 02:40 GMT
People sniffing wireless network traffic have many tools at their disposal to intercept sensitive data from PCs.
Source: ZDNet

New hacker trick may expose Oracle databases 01 Mar 2007 20:34 GMT
Technique lets intruders exploit flaws previously thought to be insignificant, security researcher says at Black Hat DC.
Source: ZDNet

Homeland Security offers details on Real ID 01 Mar 2007 19:05 GMT
States have until 2013 to federalize licenses; rules don't require encryption on new IDs to protect drivers' privacy.
Source: ZDNet

Dictionary for software bugs to cut confusion? 01 Mar 2007 17:00 GMT
Mitre initiative, backed by Homeland Security, is designed to replace many variations in use today with standard flaw terms.
Source: ZDNet

WGA changes don't mean a shift by Microsoft on piracy, analyst says 01 Mar 2007 14:00 GMT
Although Microsoft officials have been talking a lot about piracy in recent days -- including discussion of changes to Windows Genuine Advantage -- the company isn't softening its antipiracy resolve, says analyst Michael Cherry.

Source: Computerworld

Black Hat: Software Vulnerability Index making progress 01 Mar 2007 14:00 GMT
Representatives of the CWE (Common Weakness Enumeration) project, which launched in December 2005, reported to Black Hat DC attendees that progress continues on the project. The DHS-sponsored effort is currently sifting through "mountains" of vuln data, and they're in touch with the affected companies.