News (74)
Patched Oracle database 'still vulnerable'
The latest update for Oracle 10g Release 2 does not plug a hole that allows published attack code to run, according to a security researcher. Read more »
Oracle attack code out
Code is in the wild for one of the holes patched by the database firm on tuesday. Read more »
Software should defend itself: Oracle CSO
Applications will have to defend themselves from attack in the future, according to Oracle's chief security officer Mary Ann Davidson. Read more »
Security guru wants access to bug databases
Security expert Ross Anderson has called for empirical research to be conducted into whether open source or closed source software is more secure, and into the impact that development practices such as extreme programming (XP) have on code quality. Read more »
Study: Few bugs in MySQL database
A source-code analysis of the MySQL database, a popular open-source program at the heart of many Web sites, revealed few bugs compared with the number found in commercial code, testing company Coverity said Friday. Read more »
Oracle to be more selective in patch development
Oracle plans to stop automatically producing security patches for all systems its software runs on, instead creating fixes for uncommon combinations on request, the company said on Tuesday. Read more »
Microsoft to release more source code?
Microsoft is considering the release of source code for a popular tool used to build Windows programs. Read more »
Microsoft may offer peek at SQL Server code
Will the software industry's wave of open-source databases spill onto Microsoft's turf? Read more »
Microsoft warns of SQL Server vulnerability
Microsoft issued an advisory late Monday confirming a remote code execution vulnerability affecting its SQL Server line. Read more »
Expert: Hold developers liable for flaws
Software developers should be held personally accountable for the security of the code they write, said Howard Schmidt, a former White House cybersecurity adviser. Read more »
Features (170)
Two patterns that promote code reuse in ASP.NET
To increase code reuse possibilities in your ASP.NET applications, you can use a couple of different patterns. Learn more about the Page Controller and Front Controller patterns and how you can implement them in your apps. Read more »
Avoid bad form data with a little CGI validation code
Validating data from a Web form with a CGI script is a standard practice. Find out how to tweak your form validation code using regular expressions. Read more »
Ten commandments for the security-conscious programmer
Here are the steps from Builder AU that you should take to keep hackers and other security threats at bay. Read more »
Security through obscurity won't secure your code
Most applications use some form of security through obscurity, but you should avoid it when writing your apps. ZDNet Australia offers these tips on how to tighten up your code. Read more »
Make managed code work with .NET's CAS
Developers and administrators can set permission and trust levels with code access security (CAS), while allowing the code to execute effectively. Read more »
Comprehend the SAP Authorisation concept with these code samples
Whether you're a developer, a consultant, or the user of a SAP system, you'll eventually come across issues related to authorisation. This article provides some handy code samples to help you get acquainted with authorisation in SAP. Read more »
The Visual Studio vision
Some parts of Microsoft's .Net initiative may be floundering, but the heart of .Net--that is, the development environment--keeps beating strongly despite its many struggles. Read more »
Why migrating Java apps to .NET may not be smart
Migrating from Java to .NET is not easy, and you might be better off with your exisiting application. Here are five reasons for sticking with Java. Read more »
ASP.NET Web Matrix: Keeping it simple
Many IT pros are amazed that MS has made parts of the .NET initiative free. The ASP.NET Web Matrix tool is designed to make it easy to code simple apps. Read more »
ASP.NET offers new state management techniques
State management is a tricky aspect of Web development. Find out how ASP.NET's new features make it easier for developers to manage state information. Read more »
Blog (4)
Google destroys Security Through Obscurity
-- Google Labs' new Code Search makes it easier for hackers to find database
username and password details by entering strings that are commonly used
within configuration files. Read more »
The 2008 Trends and Threats to Internet security
-- I recently came across the IBM Internet Security Systems X-Force 2008 Mid-Year Trend Statistics report, which outlines issues affecting internet security, including application vulnerabilities, phishing, malware and spam. Read more »
Lets Shindig!
-- At this year's Google Developer Day in Sydney, Dan Peterson and John Hjelmstad talked about Apache Shindig, an open source implementation of OpenSocial and gadgets. Read more »
Is public domain software open-source?
-- When writing earlier this week about Adobe's sponsoring of the SQLite project, I ran into a complicated issue: is software released into the public domain also open-source software? Read more »
Filter Tags
News and features
- Latest
- Popular
- Features
- Most Discussed
-
A first look at Windows 7 betaIn this week's Roundup we show you a preview of Windows 7 beta, cover news from the annual Macworld and more. Read more »
-
Opera's new SDK: Better browsing on the Wii?Opera has thrown a little more love at device developers by announcing an updated version of its software development kit on Wednesday at CES. Read more »
-
It's another year down but some things never change. That was shown this week as Internet Explorer remained under fire from yet another zero-day exploit. In other news, we set a hard drive on fire and Apple cans its involvement with MacWorld. Read more »
-
Ratbags burn, smash and 'nuke' hard drives
2008/12/16 14:49:30
-
2008/12/11 10:40:47
-
Five services you can turn off in Windows Server 2003
2008/10/01 13:58:07
What's on?
-
Space pr0n, patent karma and Yang out -- Club Builder
On Club Builder this week: how NASA plans to get the Internet into space, Jerry Yang is out the door at Yahoo and Brendan Eich discusses javascript engine competition.
