News (31)

Australians want what's bad for them: Biometrics

Australians would prefer to use voice biometrics rather than PIN and password verification to prove their identity — but security experts warn biometrics exposes consumers to even greater risk. Read more »

Web 2.0 potential unmet?

Despite the explosion of new Web services, a number of hurdles stand in the way of consumer- and business-oriented social-networking applications, experts at the Web 2.0 Summit said Tuesday in the US. Read more »

Microsoft tries to stop Vista piracy monster

Microsoft has issued an update to Windows Vista that's intended to stop a piracy monster. Read more »

Microsoft to embed Live services in Windows

Microsoft's Live-branded online services don't end at the Web browser. They extend deep into Windows. Read more »

Oracle pitches safe-data plan

Oracle has proposed new technology standards to safeguard sensitive data as it flows through corporate software applications. But is that where leaks happen? Read more »

Facebook botnet risk revealed

Researchers have created a proof-of-concept application for Facebook that turned the machines of people who added the app to their Facebook page into elements of a botnet that in a demonstration launched denial-of-service attacks on a victim server. Read more »

Flaw in BGP net protocol

Security researchers have warned of an underlying security issue concerning the Border Gateway Protocol, the core internet routing protocol. Read more »

Security spend triples, breaches fall 30 percent

A UK government-sponsored security survey reports that security breaches have fallen by a third in the past two years but spending on security has increased significantly. Read more »

Web banking: It's time to write down your password

Banks should stop forcing customers to create long, alphanumeric passwords because they can't protect against today's threats, according to AT&T computing researcher William Cheswick Read more »

US Homeland Security still infected with Trojans?

The man in charge of IT security for the US Homeland Security department may lose his job after the revelations that his department's IT systems have misconfigured firewalls, suspicious botnet activity, trojans and virus infections. Read more »

Features (83)

Passwords: poor excuse for security

Cut costs. Save money. Maintain the status quo. With that mantra in mind, many network managers figure they've got authentication covered. As long as there's a password policy in place, who needs to spend money on authentication tools? Read more »

Keeping the door open...and shut

A Web server opens up your business to the outside world, so how do you keep out those parts of the world you don't like? Read more »

Cookieless data persistence is possible

Cookies are a common way to store retrievable user information, such as authentication data. But what if you need a non-cookie solution? Read more »

Secure connections to PostgreSQL

The PostgreSQL database server is arguably one of the best SQL servers available, but it's not as easy for beginners to get a handle on it as with other SQL databases, such as MySQL. Read more »

Why AOL wants developers to put passion over profit

Edwin Aoki, technology fellow at AOL, speaks about the impact web applications have had in the enterprise and what trends are emerging. Read more »

Integrate Passport into ASP.NET apps

If you are looking for a secure means to transfer sensitive information in an ASP.NET application, try integrating Microsoft's Passport service. Read more »

Secure SQL Server: Installing for security

Securing SQL Server is vital to the design of any database system. Learn how to install SQL securely, protect data, and ensure its validity. Read more »

Authenticate clients and e-transactions with SSL certificate authority

Secure Sockets Layer technology ensures that transactions are encrypted and safe from outside influences. Get the basics of setting up SSL Certificates of Authentication. Read more »

Clickjacking: Potentially harmful web browser exploit

Clickjacking has the potential to redirect unknowing users to malicious websites or even spy on them. We all need to be aware of clickjacking and how to avoid its trappings. Read more »

Secure ASP.NET 2.0 sites with Membership API

Beginning with ASP.NET 2.0, the Membership API was added to simplify adding security to a Web application. This article explains how to use the Membership API with a SQL Server back-end. Read more »

Video (1)

RSA 2008: Microsoft outlines Internet security strategy

At the RSA 2008 conference in San Francisco, Microsoft Research and Strategy Officer Craig Mundie describes a new plan for Internet security that includes the creation of a trusted stack. Each element can be authenticated, from the operating system to applications, people, and data. Read more »

Blog (1)

Assumption-based Hacking 101

Chris Duckett [blogs:betaliving] -- High-level thinking leads to assumptions, and assumptions are the mother of all mistakes -- consequently the best place to find a security hole is in a place where the programmer has made an incorrect assumption. Read more »

Log in


Sign up | Forgot your password?

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?