Archive for the ‘security’ Category.

Microsoft to Put Digital ID Into Its Products

New York Timesfree registration required Compressed Data: Microsoft to Put Digital ID Into Its Products.

Microsoft plans to incorporate a user-identification approach into its operating systems and software products, and the company says the change could speed up business-to- business transactions and increase the level of confidence in those online transactions.

The user-ID system, known as Identrus, employs a technology for identifying people and organizations online through the use of digital signatures — unique identifiers that can be read and used by computer networks.

Under the Identrus system, those digital certificates will be certified by banks, an extra measure of security that Microsoft says should enhance the public’s trust in online transactions.

[Privacy Digest]

Watch out for these flaws in wireless LAN security

TechRepublic:
Watch out for these flaws in wireless LAN security,
Apr 30, 2001,
John McCormick

Mobiles set to drive PKI growth

Mobiles set to drive PKI growth. Silicon.com May 1 2001 2:12AM ET [Tech latest]

Internet Security Systems checks for wireless LAN vulnerabilities

athena-2k.pl

Microsoft security fixes infected with FunLove virus

Microsoft security fixes infected with FunLove virus. Is this the worst security screw up ever? [The Register]

New ammo to fight virus attacks

FreeBSD FreeBSD-SA-01:33: globbing vulnerability in ftpd

Security Flaw with Linux 2.4 Kernel and IPTables

Tempest Security Advisory:
Security Flaw with Linux 2.4 Kernel and IPTables [via Slashdot]

Security Advisory – #01/2001

Security flaw in Linux 2.4 IPTables using FTP PORT

Author: Cristiano Lincoln Mattos, CISSP, SSCP
Systems affected: Firewalls using Linux Kernel 2.4.x with IPTables

Release date: 16 April 2001

Platforms: Linux Kernel 2.4.x

Impact: If an attacker can establish an FTP connection passing through a Linux 2.4.x IPTables firewall with the state options allowing “related” connections (almost 100% do), he can insert entries into the firewall’s connection tables…

Anti-Hacking premiums 25% higher for Win NT