Opinion: A spring cleaning for security   21 Apr 2008 13:00 GMT
The column undertakes spring cleaning as the writer checks in on issues raised by "In Security" over the past year. He's got good news and bad news...

Source: Computerworld

Obama site hacked, redirects clicks to Clinton's site   21 Apr 2008 13:00 GMT
A cross-site scripting flaw in the social networking section of Sen. Barack Obama's campaign site was exploited over the weekend to redirect users to the URL of his rival, Sen. Hillary Clinton.

Source: Computerworld

ToorCon Seattle 2008: Nuke plants, non-existent sub domain attacks, muffin diving, and Guitar Hero   21 Apr 2008 07:52 GMT
*** Updated: ToorCon images uploaded.  Click here!  Alright, that title probably sounds pretty random... well, welcome to ToorCon!  ToorCon has long been one of my favorite conferences for the easy atmosphere, laid-back presentations, and parties.  This year's Seattle-based ToorCon was the best I've been to. ...
Source: ZDNet

Enough of Being the Bad Guy   21 Apr 2008 05:15 GMT
Projects have gotten security reviews at the last minute once too often. Time for a new process.

Source: Computerworld

EarthLink redirect service poses security risk, expert says   19 Apr 2008 13:00 GMT
A redirect service deployed by EarthLink and other ISPs to handle mistyped Web-page requests may have given attackers an opening with which to launch undetectable phishing attacks.

Source: Computerworld

Microsoft admits it sent Office nag to all WSUS servers   19 Apr 2008 13:00 GMT
System administrators are angry at Microsoft Corp. for pushing a trial anti-piracy program designed for limited distribution to all enterprise update servers, triggering incorrect warnings about counterfeit installations of Office.

Source: Computerworld

Apple should call PayPal's bluff   18 Apr 2008 15:02 GMT
PayPal is in another stand-off with Apple over EV SSL (Extended Validation Secure Sockets Layer) certificates, but Steve Jobs & Co. may call the transaction service's bluff. According to Ryan Naraine, PayPal is about to launch a whitepaper that advocates blocking transactions from browsers that don't have...
Source: ZDNet

PayPal may ban Safari for being unsafe   18 Apr 2008 14:55 GMT
Online payment giant PayPal said yesterday that they're going to block Web browsers they deem unsafe from accessing their Web site. At issue are browsers that don't have strong anti-phishing protection. We are in the process of reimplementing controls which will first warn our customers when logging in to...
Source: ZDNet

Bull crams crypto chips into bootable USB hard disk drive   18 Apr 2008 13:00 GMT
French IT company Bull has fitted a portable hard drive with a cryptographic processor capable of scrambling data on the fly at 100Mbit/sec. using AES-256 encryption.

Source: Computerworld

Microsoft rings alarm on Windows rights bug   18 Apr 2008 13:00 GMT
Microsoft is warning users of an "elevation of privilege" flaw in most versions of Windows, but did not say whether it would release a patch for the problem, or when it would do so if it does come up with a fix.

Source: Computerworld