News (63)

Major browsers bitten by security bugs

What do Internet Explorer, Mozilla's browsers, and Opera all have in common? Bugs. Read more »

Huge security hole in .NET: Java creator

Java creator James Gosling this week called Microsoft's decision to support C and C++ on the Common Language Runtime in .NET one of the -biggest and most offensive mistakes that they could have made". Read more »

Exploit code makes IE flaw more dangerous

The threat posed by a critical flaw in Internet Explorer has been ratcheted up by the release of a program designed to exploit the vulnerability, security researchers warned on Thursday. Read more »

Microsoft gives coders a bug finder

Web developers in need of another set of eyes to check their code for security holes should soon be able to add an application scanner to Microsoft's Visual Studio .Net. Read more »

Developers take Linux attacks to heart

A handful of recent online attacks on free and open-source software servers has open-source developers looking over their shoulders. Read more »

Microsoft claims secure development success

A program placing strict controls on developers to ensure they build secure code is showing early signs of success, according to a senior executive from the software giant. Read more »

Microsoft to release more source code?

Microsoft is considering the release of source code for a popular tool used to build Windows programs. Read more »

Microsoft may offer peek at SQL Server code

Will the software industry's wave of open-source databases spill onto Microsoft's turf? Read more »

Microsoft posts tools' source code

Microsoft published the code for one of its products on an open-source software development Web site departing from its hard-line stance against revealing code to the public. Read more »

Turn security rhetoric into action, Oracle warns

Every software developer likes to believe it is committed to application security -- but senior managers need to put their money where their mouths are to turn security rhetoric into action, a senior development manager at Oracle Corporation has told more than 200 delegates at the SECURECon security conference in Melbourne. Read more »

Features (143)

CGI wrappers for Apache-based apps can boost security

CGI scripts represent a big potential security risk in Web development, but using CGI wrappers can help insulate your servers from attack. Here's an outline of how to create CGI wrappers to protect an Apache Web server. Read more »

Secure your .NET smart client apps with CAS

.NET allows code to be downloaded onto several workstations, which increases security concerns. Fortunately, the .NET Framework offers a solution--code access security (CAS). Read more »

Understand the CLR security features

In this article John McCormick takes a close look into the Common Language Runtime (CLR) and it's security features. Read more »

Diagnose Perl CGI bugs

Capturing and replaying Web transactions with Perl is an ideal way to trap and diagnose weird data problems that occasionally happen. ZDNet Australia examines what this technique entails and introduces a small module that shows some ways to put it to work. Read more »

Develop applications that prevent intrusion

Designing secure applications requires developers to look beyond their own code. Accessing APIs or COM objects or establishing system privileges can result in security vulnerabilities that can be prevented. Read more »

Go to jail

Have you ever written buggy code or code that is not 100 percent safe? Go directly to jail, do not pass go, do not collect $200. Read more »

Comprehend the SAP Authorisation concept with these code samples

Whether you're a developer, a consultant, or the user of a SAP system, you'll eventually come across issues related to authorisation. This article provides some handy code samples to help you get acquainted with authorisation in SAP. Read more »

Make managed code work with .NET's CAS

Developers and administrators can set permission and trust levels with code access security (CAS), while allowing the code to execute effectively. Read more »

File transfers between two applets

Security restrictions can make transferring files between two applets problematic. Find out how you can employ a middleman. Read more »

Develop secure software at the application level

Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »

Blog (3)

Google destroys Security Through Obscurity

Chris Duckett [blogs:betaliving] -- Google Labs' new Code Search makes it easier for hackers to find database username and password details by entering strings that are commonly used within configuration files. Read more »

5 reasons restricting hacking is not like gun control

Nick Gibson [blogs:byteclub] -- Let's get it out of the way: Guns don't kill people, people with guns kill people. People with hacking tools can steal your personal data, shut down your system and deface your web site -- but is that any reason to ban them? Read more »

Are your Web apps ready for the next-gen browser war?

Brendon Chase [blogs:codemonkeybusiness] -- Webkit, Firefox, and Internet Explorer are all scheduled to update their browsers in 2008. Are you ready for Web dev test fest 08? Read more »

Log in


Sign up | Forgot your password?

  • Staff A first look at Windows 7 beta

    In this week's Roundup we show you a preview of Windows 7 beta, cover news from the annual Macworld and more. Read more »

    -- posted by Staff

  • Staff Opera's new SDK: Better browsing on the Wii?

    Opera has thrown a little more love at device developers by announcing an updated version of its software development kit on Wednesday at CES. Read more »

    -- posted by Staff

  • Staff 2008: Time to call stumps

    It's another year down but some things never change. That was shown this week as Internet Explorer remained under fire from yet another zero-day exploit. In other news, we set a hard drive on fire and Apple cans its involvement with MacWorld. Read more »

    -- posted by Staff

What's on?