software development, security, opinion
Exiscan v2.01
Exiscan is an email virus scanner which works together with the Exim MTA
(http://www.exim.org). It is written in Perl and designed to be very easy
to implement. Exiscan supports multithreaded unpacking and scanning of mail,
with a configurable number of processes. Exiscan has generic support for
available command line virus scanners. Exiscan can scan inside of MS-TNEF
and SMIME (signed) wrapped messages. [Security Focus]
Chronicle of Higher Education: Libraries Criticize Federal Report on Digital-Copyright Law. Advocates for libraries are criticizing a U.S. Copyright Office report, released late Wednesday, that recommends against revising copyright law to assure that libraries and consumers can lend and archive software and other electronic material they purchase. [Tomalak’s Realm]
The SOAP Opera Progresses – Helping XML to Rule the World
-by Michael F. Reed
An important emerging standard in the web arena, known as SOAP (Simple
Object Access Protocol), originally developed by Microsoft, has achieved
a new milestone. Since IBM joined in support for the SOAP standard with
increased security, SOAP may replace DCOM, and possibly even CORBA
eventually. The W3C consortium has just released a new version, 1.2,
which will be widely accepted and adopted by vendors.
New worm encrypts .exe files. CW360.com Aug 31 2001 11:49AM ET [via Moreover Computer security news]
Aaron Sullivan, Security Focus:
An Audit of Active Directory Security:
Part One: An Overview of Active Directory and Security [August 1, 2001]
Part Two: Understanding the Security Implications of Active Directory Default Settings [August 29, 2001]
Security software: blind lead blind. Commentary by Elias Levy
It’s incredible that in this day and age some of the most popular security products, products that are marketed as protecting you from the evils of computers, are so badly designed.
Case in point: The many antivirus products that failed to detect and stop the highly effective SirCam worm, even when updated with the latest signatures and when configured correctly.
Symantec’s Norton Antivirus for Gateways v2.x, Norton Antivirus POP email scanner, and TrendMicro’s InterScan VirusWall Standard and CVP editions version 3.51 build 1321 for Windows NT all failed to block SirCam. Why? Because all products “failed open,” i.e., when they encountered email messages they couldn’t handle properly, they sent them through by default.
…
[via The Register]
Web Application Security:
White Hat Defcon9 presentation: Web Application Security
MIT (Fu, Sit, Smith, Feamster): Dos and Don’ts of Client Authentication on the Web
