News (88)

Disk encryption is no silver bullet, researchers say

Disk encryption, which people rely on for protecting sensitive data on laptops, can fairly easily be foiled, security researchers said in presenting a paper on a so-called "cold-boot attack" at the Usenix security conference on Wednesday. Read more »

The boss's iPhone: Your worst security nightmare

As employee-owned portable devices become more sophisticated they become less secure, according to one analyst -- and the more senior an employee, the less compliant they are when it comes to protecting the information on those devices. Read more »

Sun to unveil security offerings

Sun Microsystems is expected to announce two security initiatives Monday in the United States, one introducing a form of encryption for its next-generation Sun Java System Web Server and another that re-slices the way it delivers security features for Solaris. Read more »

'Horrifying' security lapses are far too common

The UK's privacy watchdog has slammed bosses of large companies for not taking security seriously. Read more »

IBM goes on mainframe offensive

IBM has plans in place to spend tens of millions of dollars to coax new customers to buy the company's mainframes. Read more »

Security bosses want encryption bans overturned

An international security consortium is set to lobby governments around the world to withdraw restrictions on encryption standards. Read more »

Is Microsoft outsmarting Symbian with mobile security?

Microsoft's operating system for 'smart phones', the Windows Mobile Phone Edition, is more secure and more efficient than the Symbian platform, which could help the Redmond giant take control of the enterprise smart phone market. Read more »

PGP creator takes on VoIP security

Phil Zimmermann, who gave free e-mail encryption to the world more than a decade ago in the form of a software called Pretty Good Privacy, is now trying to secure Internet phone calls. Read more »

Debian and Ubuntu OpenSSL generates useless crypto keys

For almost two years the OpenSSL library used by Linux distribution Debian has been generating useless cryptographic keys — although Debian has issued a patch, experts warn that systems may still be exposed. Read more »

MySQL plug-ins to be closed-source

MySQL's move to begin offering parts of its namesake database as closed source only will apply only to plug-ins — such as encryption and compression — according to co-founder David Axmark. Read more »

Features (104)

Create encrypted loopback filesystems on Linux

Using the loopback filesystem interface, you can create encrypted filesystems very easily. These filesystems are great for storing sensitive documents be it SSH or GnuPG keys, financial documents, etc. Read more »

Learn to use the openssl command-line program

OpenSSL can be used to create, request, sign, and revoke certificates and can also be used to perform other cryptographic operations such as creating hashes for files, testing SSL connections, and more. Read more »

.NET demystifies encryption

.NET makes cryptography a little simpler by putting everything into one SDK. Find out how to encrypt and decrypt a text file with the System.Security.Cryptography namespace. Read more »

Protect your network traffic using Java's encryption features

The Java Development Kit has strong encryption and security support. One of the nicer features is its built-in support for socket communication. Builder.com shows here it's easy to write a client and a server that talk to each other securely with encrypted streams. Read more »

Tools for securing your XML documents

The W3C offers two specifications for securing your XML documents, XML Signature and XML Encryption. Find out which tools can help create secure XML documents that adhere to these standards. Read more »

Secure collaboration requires document control

An employee who receives confidential information can easily forward the decrypted document to anyone. Collaborative software can help close this security hole. Read more »

Security Visionary: 'Clipper chick' chats about encryption

Despite her unpopular stance on encryption, Dorothy Denning's dedication to security has earned her respect. What does she think is in store for security? Read more »

Encrypting .NET configuration files through code

Encryption support for configuration files was added to the .NET Framework beginning with version 2.0. We'll show you examples of controlling encryption and decryption in both VB.NET and C# code. Read more »

Encrypt any file with symmetric cryptography using GPG

Encryption lets you keep your sensitive data, banking information and conversations safely protected by code. Learn how you can use the free GPG utility to protect your data. Read more »

Hack proof your Web services

Web services promise to revolutionise your company's development practices by connecting your company seamlessly with customers and other companies worldwide. With this promise, however, come new threats from hackers and information thieves. Here are some tips for securing your Web Services. Read more »

Blog (3)

Assumption-based Hacking 101

Chris Duckett [blogs:betaliving] -- High-level thinking leads to assumptions, and assumptions are the mother of all mistakes -- consequently the best place to find a security hole is in a place where the programmer has made an incorrect assumption. Read more »

5 reasons restricting hacking is not like gun control

Nick Gibson [blogs:byteclub] -- Let's get it out of the way: Guns don't kill people, people with guns kill people. People with hacking tools can steal your personal data, shut down your system and deface your web site -- but is that any reason to ban them? Read more »

BitLocker experiences

[blogs:] -- With Windows Vista on the eventual Horizon, I've been working with the Betas and having a look at the security features. One of the ones I'm anticipating with great enthusiasm is Bitlocker. Bitlocker is a drive encryption system that actually encrypts the entire contents of a drive. Being the paranoid sort I am, I figured it would be a great thing to set up and use. Read more »

Log in


Sign up | Forgot your password?

  • Staff Microsoft prescribes more REST

    Details have begun to emerge about the next versions of Visual Studio and Windows Server this week -- and the message from Redmond is to REST up Read more »

    -- posted by Staff

  • Chris Duckett .NET looks to REST

    With news that REST will play a big part in the next version of the .NET Framework, it is timely to take a look at ADO.NET. Read more »

    -- posted by Chris Duckett

  • Renai LeMay Spellr.us needs a new dictionary

    One of the only Australian start-ups to present at the recent round of conferences in the US was Sydney-based spellr.us, which has launched a Web-based tool to check and monitor websites for spelling mistakes. Read more »

    -- posted by Renai LeMay

What's on?