News (29)

Oracle to be more selective in patch development

Oracle plans to stop automatically producing security patches for all systems its software runs on, instead creating fixes for uncommon combinations on request, the company said on Tuesday. Read more »

Expert: Hold developers liable for flaws

Software developers should be held personally accountable for the security of the code they write, said Howard Schmidt, a former White House cybersecurity adviser. Read more »

Oracle's oops on security flaw

Oracle accidentally let slip details last week on a security flaw it has yet to patch. Read more »

Patched Oracle database 'still vulnerable'

The latest update for Oracle 10g Release 2 does not plug a hole that allows published attack code to run, according to a security researcher. Read more »

Multiple flaws reported in Linux kernel

Multiple vulnerabilities have been reported in many iterations and distributions of Linux. Read more »

Microsoft probes report of IE flaw

A new flaw in Internet Explorer could be exploited to launch spoof-based attacks, or access and change data on vulnerable PCs, security experts have warned. Read more »

Antivirus insecurity at Black Hat confab

Experts are warning that the popularity of antivirus software could turn the defensive measure into a security risk. Read more »

Oracle attack code out

Code is in the wild for one of the holes patched by the database firm on tuesday. Read more »

Study: Few bugs in MySQL database

A source-code analysis of the MySQL database, a popular open-source program at the heart of many Web sites, revealed few bugs compared with the number found in commercial code, testing company Coverity said Friday. Read more »

Flaw hunters pick holes in Oracle patches

Oracle, the business software maker that has marketed its products as "unbreakable," faces mounting criticism over its security practices. Read more »

More Code, Database, Flaw, Security News Results

Features (8)

Develop secure software at the application level

Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »

Avoid bad form data with a little CGI validation code

Validating data from a Web form with a CGI script is a standard practice. Find out how to tweak your form validation code using regular expressions. Read more »

Ten commandments for the security-conscious programmer

Here are the steps from Builder AU that you should take to keep hackers and other security threats at bay. Read more »

Bug hunters, software firms in uneasy alliance

Although many software makers promote responsible disclosure, it isn't universally backed by the security community. Critics say it could make security companies lazy in patching. Full disclosure of flaws is better is preferred. Read more »

Gosling looks down Sun's open road

James Gosling discusses Sun's decision to release Java under the General Public License, whether open source is more secure than proprietary software, how IT departments can cut development costs, and why Microsoft still owns the desktop. Read more »

Develop a VoiceXML solution using BeVocal

VoiceXML (VXML) is a markup language like HTML. The difference is that a phone browser rather than a Web browser renders VXML. Get started with this article. Read more »

Ruby on Rails: The importance of being 1.0

We speak to David Heinemeier Hansson about the merits of open source, why Ruby on Rails should really be at 2.0 by now and how logic should keep out of the database. Read more »

James Gosling Q & A

James Gosling was in Australia this week to give two question-and-answer session to local developers. A rare opportunity for local developers, Builder AU was on hand to transcribe the event for those who couldn't make it. Read more »

Log in


Sign up | Forgot your password?

Blogs

RSS feed

  • Staff A first look at Windows 7 beta

    In this week's Roundup we show you a preview of Windows 7 beta, cover news from the annual Macworld and more. Read more »

    -- posted by Staff

  • Staff Opera's new SDK: Better browsing on the Wii?

    Opera has thrown a little more love at device developers by announcing an updated version of its software development kit on Wednesday at CES. Read more »

    -- posted by Staff

  • Staff 2008: Time to call stumps

    It's another year down but some things never change. That was shown this week as Internet Explorer remained under fire from yet another zero-day exploit. In other news, we set a hard drive on fire and Apple cans its involvement with MacWorld. Read more »

    -- posted by Staff

What's on?