News (16)
BusinessWeek site hacked
Hackers have broken into BusinessWeek's online site and set up an attack scenario in which visitors to a section of the site could have their own computers compromised and their data stolen, a security researcher said on Monday in the US. Read more »
Software should defend itself: Oracle CSO
Applications will have to defend themselves from attack in the future, according to Oracle's chief security officer Mary Ann Davidson. Read more »
Security guru wants access to bug databases
Security expert Ross Anderson has called for empirical research to be conducted into whether open source or closed source software is more secure, and into the impact that development practices such as extreme programming (XP) have on code quality. Read more »
Study: Few bugs in MySQL database
A source-code analysis of the MySQL database, a popular open-source program at the heart of many Web sites, revealed few bugs compared with the number found in commercial code, testing company Coverity said Friday. Read more »
New hacker trick may expose Oracle databases
A new attack technique increases the risk of commonly found bugs in Oracle's database software, a security researcher has warned. Read more »
IDC Web site defaced by 'eco-terrorists'
The Web site of Global IT research firm IDC has been hacked by a group purporting to be Brazilian environmental terrorists to serve a message urging people to take action over global warming. Read more »
Oracle aims to tone security muscle with Fusion
Billions of dollars worth of acquisitions have bought Oracle a perhaps unexpected bonus: security lessons. Read more »
JavaScript bug hunting tool demonstrated
A security researcher at ShmooCon on Saturday demonstrated, but did not release, a tool that turns the PCs of unknowing Web surfers into hacker help. Read more »
Flaw hunters pick holes in Oracle patches
Oracle, the business software maker that has marketed its products as "unbreakable," faces mounting criticism over its security practices. Read more »
Developers take Linux attacks to heart
A handful of recent online attacks on free and open-source software servers has open-source developers looking over their shoulders. Read more »
Features (19)
Should you hire an ex-hacker?
Hiring a hacker as a chief security officer may sound crazy, but it has paid off for one company. See why an ex-hacker might be your smartest hire ever. Read more »
CGI wrappers for Apache-based apps can boost security
CGI scripts represent a big potential security risk in Web development, but using CGI wrappers can help insulate your servers from attack. Here's an outline of how to create CGI wrappers to protect an Apache Web server. Read more »
Develop applications that prevent intrusion
Designing secure applications requires developers to look beyond their own code. Accessing APIs or COM objects or establishing system privileges can result in security vulnerabilities that can be prevented. Read more »
Develop secure software at the application level
Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »
Security in the Web 2.0 Era
At the Gartner Symposium ITxpo 2008 in Sydney this week, Andrew Walls, the research director and security analyst at Gartner presented "Security in the Age of E-Commerce and Web 2.0". Read more »
Avoid security vulnerabilities in your CGI programs
CGI makes creating Web-executable programs quick and easy--both for you and for hackers. Learn about some of the explicit security vulnerabilities of CGI and how to avoid them. Read more »
Ten commandments for the security-conscious programmer
Here are the steps from Builder AU that you should take to keep hackers and other security threats at bay. Read more »
Secure your ASP.NET applications
Despite improvements over previous standards, ASP.NET still has its fair share of vulnerabilities. Use these tips from Builder.com to help secure your ASP.NET applications Read more »
How CGI programs make your server vulnerable
CGI is the popular standard for generating content dynamically on the server side. But running CGI apps on your server can result in a signficant security risk. Read more »
The LAMP development toolkit
Need to dust up your Linux, Apache, PHP, Perl, Python, and MySQL (LAMP) software stack skills? Our LAMP development toolkit is just what you need. Read more »
Blog (1)
Google destroys Security Through Obscurity
-- Google Labs' new Code Search makes it easier for hackers to find database
username and password details by entering strings that are commonly used
within configuration files. Read more »
Filter Tags
News and features
- Latest
- Popular
- Features
- Most Discussed
-
A first look at Windows 7 betaIn this week's Roundup we show you a preview of Windows 7 beta, cover news from the annual Macworld and more. Read more »
-
Opera's new SDK: Better browsing on the Wii?Opera has thrown a little more love at device developers by announcing an updated version of its software development kit on Wednesday at CES. Read more »
-
It's another year down but some things never change. That was shown this week as Internet Explorer remained under fire from yet another zero-day exploit. In other news, we set a hard drive on fire and Apple cans its involvement with MacWorld. Read more »
-
Ratbags burn, smash and 'nuke' hard drives
2008/12/16 14:49:30
-
2008/12/11 10:40:47
-
Five services you can turn off in Windows Server 2003
2008/10/01 13:58:07
What's on?
-
Space pr0n, patent karma and Yang out -- Club Builder
On Club Builder this week: how NASA plans to get the Internet into space, Jerry Yang is out the door at Yahoo and Brendan Eich discusses javascript engine competition.
