security

In a stunning turn of events, hackers have broken into vice-presidential candidate Sarah Palin's Yahoo email account, brazenly publishing several critical messages. The chaos isn't just limited to the Republican party, however; according to reports, ... the son of a prominent Democrat is under suspicion following an FBI raid. Serious questions are being raised this morning about the security of Palin's account, and whether the Alaskan senator should admit some responsibility for using Yahoo Mail for official business. The hacker, from a group calling itself Anonymous, published some of the stolen ... (view more)

The world's most popular Internet browser, its nearest challenger, and the 'new kid on the block' have all launched recently, or are in the process of launching new editions. Here's our guide to the latest offerings from Microsoft, Mozilla, and ... Google. Microsoft Internet Explorer 8 Internet Explorer 8, the latest edition of Microsoft's browser, is currently in its second test edition, with the final version expected later this year. New features include improved security scanning, smarter search suggestions and a built-in function for viewing pages designed for earlier browsers that aren't ... (view more)

U.S. residents living in a state bordering Canada or Mexico may reportedly be given a remotely readable driver's license designed by the Department of Homeland Security (DHS) to identify U.S. citizens as they approach the nation's borders as a way ... to save time and simplify border crossings. The DHS was created after the attacks of 9/11/01 . Residents may want to think twice before signing up for the department's new program. The licenses come equipped with radio-frequency identification (RFID) tags that are readable through wallets, pockets or purses from as far away as 30 feet. Tiny ... (view more)

The US government has changed its rules on carrying laptops through airport security checkpoints. Whereas passengers previously had to keep their laptops in clear display, they can now keep them packed away in approved bags. While there's no ... official register of which bags are suitable, most existing laptop bags will not make the grade. That's because the guiding principle now is that security agents should be able to lay the bag flat on the X-ray belt and get a clear view of the contents when they scan it. The guidelines follow tests of 40 manufacturer prototype bags for Transport Security ... (view more)

Three French journalists have been booted from a major security conference amid claims they were able to hack the laptops being used by fellow reporters. It's particularly embarrassing for those reporters, many of whom write for Global Security Mag, ... an official sponsor of the Black Hat Las Vegas event. Only one of the hackers, Mark Brami, has spoken out; though he blamed colleague Mauro Israel for the 'attack', he said it was meant as a prank. The men involved reportedly told organisers they were attempting to raise the issue of privacy risks among people using public Internet connections. ... (view more)

A new technique has reportedly been developed by two security researchers that bypasses all of the memory protection safeguards in Windows Vista. The tactic is expected to have far-reaching implications for Microsoft the rest of the tech industry. ... Mark Dowd of IBM Internet Security Systems (ISS) and Alexander Sotirov of VMWare Inc. will discuss the new methods they've found to get around Vista's Address Space Layout Randomizations (ASLR), Date Execution Prevention (DEP) and other functions built into Windows Vista by using Java, ActiveX controls and .NET objects to load arbitrary content into ... (view more)

A recently-discovered security flaw in fundamental operation of the Internet could be much more serious than first believed. Every form of network, including email services, could be vulnerable. Dan Kaminsky, the security expert heading efforts to ... solve the problem, told a Las Vegas convention that the central problem can be exploited in at least 15 different ways. As we recently reported , the heart of the problem is the Domain Name System (DNS), which translates website addresses into the identifying number of the particular computer where the content of site is physically stored. A key ... (view more)

Apple has finally caught up with its rivals by issued a Mac-based fix for a major flaw in the Internet's workings. However, experts say it may not have fixed the problem. The patch is for a recently discovered issue with the Domain Name System ... (DNS). In short, DNS translates website addresses into the numbers which identify the computer where a website is physically stored. When you visit a popular website, Internet providers usually keep a copy of the relevant DNS data to make the site quicker to load for the next visitor. The problem is that hackers found a way to exploit the way the DNS ... (view more)

A security firm has warned businesses that using open-source software could put them at risk. A new study carried out by security consultant Larry Suto for Fortify claims people developing open-source software simply don't meet the security ... standards that would be expected of commercial software companies. Open-source software involves the source code behind the software being publicly available. In most cases there is no charge to use, distribute or modify the software. Indeed, many developers and enthusiasts will share ways to improve the software or adapt it for different tasks. The best ... (view more)

Security experts are warning that a major Domain Name Service (DNS) hole could have catastrophic results for the web in the near future. DNS, which is responsible for converting readable names into IP addresses for individuals and major firms alike, ... is nothing less than the Internet's phonebook. Without it, imagine the Information Superhighway littered with the overturned, flaming vehicles of visitors. What's wrong? So that names indexed by DNS are not repeated with every network connection, systems store the results in a cache for a temporary period. If a hacker could slip false addresses ... (view more)