News (302)

Microsoft gives coders a bug finder

Web developers in need of another set of eyes to check their code for security holes should soon be able to add an application scanner to Microsoft's Visual Studio .Net. Read more »

Tool shoves 'annoying' Vista security feature aside

Software developers claim they have created a tool to bypass User Account Control — an "annoying" security feature in Windows Vista, according to Microsoft executives. Read more »

Linux guru argues against security liability

Alan Cox, one of the leading Linux kernel developers, has told a House of Lords hearing that neither open- nor closed-source developers should be liable for the security of the code they write. Read more »

Software should defend itself: Oracle CSO

Applications will have to defend themselves from attack in the future, according to Oracle's chief security officer Mary Ann Davidson. Read more »

Exploit code makes IE flaw more dangerous

The threat posed by a critical flaw in Internet Explorer has been ratcheted up by the release of a program designed to exploit the vulnerability, security researchers warned on Thursday. Read more »

Researcher denies Slammer worm accountability

Security researcher David Litchfield's 'proof of concept' code was probably used to build SQL Slammer, but that will not stop him publishing Read more »

Microsoft--forget PR, clean up the code

Have you noticed that Microsoft is on the offensive? After countless months of reading press clippings about the pathetic state of Windows security, the folks in Redmond have decided to fight back with one of their strongest weapons--public relations. Read more »

Q&A: Debian leader on not being in it for the money

The Debian GNU/Linux operating system continues to generate interest from developers around the world, keen to sign up and contribute code to the open-source project now in its 15th year. Read more »

Profile: Queensland MSDN User Group

The Queensland MSDN User Group are a commited group of developers that welcome both newbies and experienced campaigners who want to share hints and tips on Microsoft technologies. Read more »

Piggyback developers in a bind over IE

Internet Explorer's state of suspended animation has never much bothered Web entrepreneur Adam Stiles, but now he's worried. Read more »

Features (354)

Improve code confidence with these three .NET code review tools

Automated code tools can help developers locate potential problem points in their code before it ever leaves their machines. Here's a look at three tools that can help you with automated code review. Read more »

.Net develops advantages over Java

Developers have a number of reasons for favouring one programming environment over another. For those attracted by good technology, .NET is worth a look. Read more »

JavaScript security improvements

JavaScript has a reputation as an insecure language, but it may not be as bad as some developers think. Find out the issues and see how maturity has eliminated some of the earlier concerns. Read more »

Develop applications that prevent intrusion

Designing secure applications requires developers to look beyond their own code. Accessing APIs or COM objects or establishing system privileges can result in security vulnerabilities that can be prevented. Read more »

Security through obscurity won't secure your code

Most applications use some form of security through obscurity, but you should avoid it when writing your apps. ZDNet Australia offers these tips on how to tighten up your code. Read more »

Go to jail

Have you ever written buggy code or code that is not 100 percent safe? Go directly to jail, do not pass go, do not collect $200. Read more »

Make managed code work with .NET's CAS

Developers and administrators can set permission and trust levels with code access security (CAS), while allowing the code to execute effectively. Read more »

Protect your ActionScript

Protecting your Flash ActionScript can be a difficult task. Australian developer Jesse Stratford details methods than can help secure your intellectual property from code thieves. Read more »

Comprehend the SAP Authorisation concept with these code samples

Whether you're a developer, a consultant, or the user of a SAP system, you'll eventually come across issues related to authorisation. This article provides some handy code samples to help you get acquainted with authorisation in SAP. Read more »

CGI wrappers for Apache-based apps can boost security

CGI scripts represent a big potential security risk in Web development, but using CGI wrappers can help insulate your servers from attack. Here's an outline of how to create CGI wrappers to protect an Apache Web server. Read more »

Video (1)

It's not lovely code, it's an ugly monkey

At the AusCERT 2008 conference in the Gold Coast, ex-NSA staffer Brian Snow, told ZDNet.com.au that software can be secure -- but only if vendors overhaul their development processes. Read more »

Blog (16)

Google destroys Security Through Obscurity

Chris Duckett [blogs:betaliving] -- Google Labs' new Code Search makes it easier for hackers to find database username and password details by entering strings that are commonly used within configuration files. Read more »

Breaking inside out

Chris Duckett [blogs:betaliving] -- Security gets more complicated yet social engineering remains the same threat as ever. Read more »

5 reasons restricting hacking is not like gun control

Nick Gibson [blogs:byteclub] -- Let's get it out of the way: Guns don't kill people, people with guns kill people. People with hacking tools can steal your personal data, shut down your system and deface your web site -- but is that any reason to ban them? Read more »

Google to allow third party code in Gmail?

Brendon Chase [blogs:codemonkeybusiness] -- According to executives from the company, Google are preparing to open Gmail to developers outside the Googleplex labs. Read more »

Firefox 3 add-ons to make you a better Web developer

Brendon Chase [blogs:codemonkeybusiness] -- Firefox might be a fast browser but it's extensions can transform it into a powerful development tool for Web developers and designers. Here are 10 of the best to get you started. Read more »

Azure: A matter of trust

Brendon Chase [blogs:codemonkeybusiness] -- Ray Ozzie hit the nail on the head when he said Azure's success will hinge on trust. Who outside (and inside) the core circle of ISV trust Microsoft? Read more »

Google's browser ported to Mac and Linux

Brendon Chase [blogs:codemonkeybusiness] -- While Google work on an official port of the Chrome browser another company has ported the browser for Mac and Linux users to try for free. Read more »

Fennec: Firefox for Mobile reaches alpha

Staff [blogs:syslog] -- Mozilla has released Firefox for Mobile alpha code, codenamed Fennec, to users of the Nokia N810 and N800 Internet tablet. We take a look at the features of Fennec. Read more »

The future remains yesterday

Staff [blogs:syslog] -- Remember when MySQL was blazingly fast and cared little for SQL standards? When MySQL regarded a view as something nice from your window and a trigger was treated as a weaponry component? Those days are set to return with a MySQL fork called Drizzle. Read more »

Are your Web apps ready for the next-gen browser war?

Brendon Chase [blogs:codemonkeybusiness] -- Webkit, Firefox, and Internet Explorer are all scheduled to update their browsers in 2008. Are you ready for Web dev test fest 08? Read more »

Log in


Sign up | Forgot your password?

  • Staff A first look at Windows 7 beta

    In this week's Roundup we show you a preview of Windows 7 beta, cover news from the annual Macworld and more. Read more »

    -- posted by Staff

  • Staff Opera's new SDK: Better browsing on the Wii?

    Opera has thrown a little more love at device developers by announcing an updated version of its software development kit on Wednesday at CES. Read more »

    -- posted by Staff

  • Staff 2008: Time to call stumps

    It's another year down but some things never change. That was shown this week as Internet Explorer remained under fire from yet another zero-day exploit. In other news, we set a hard drive on fire and Apple cans its involvement with MacWorld. Read more »

    -- posted by Staff

What's on?