McAfee sideshow eclipses Defcon's real security breakthroughsThe security pioneer's appearance at Defcon highlighted the best and worst impulses of the hacker community John McAfee's decision to speak at last weekend's Defcon hacking conference on Friday was one of the worst-kept secrets in Las Vegas. Earlier… Aug 11 14August 11, 2014Article at InfoWorld Magazine
5 big security mistakes coders makeSecurity errors are rife in application development. Here are five of the most egregious -- and common -- missteps Many fixes are available to mitigate these threats. Organizations like Mitre recommend that developers take the position that "all… Jul 18 14July 18, 2014Article at InfoWorld Magazine
5 big security mistakes coders makeSecurity errors are rife in application development. Here are five of the most egregious -- and common -- missteps Hacks make headlines. But usually, the focus is on who did it -- notorious cyber criminals, hacktivists, or state-sponsored actors.… Jul 18 14July 18, 2014Article at InfoWorld Magazine
9 rules to follow after you've suffered a data breachData breaches have become so common that an etiquette has grown up around them. Any company that observes these nine rules has a good shot at coming through the fire intact Upmarket Chinese restaurant chain PF Chang's became the latest prominent… Jun 13 14June 13, 2014Article at InfoWorld Magazine
Beware the next circle of hell: Unpatchable systemsInsecure by design and trusted by default, embedded systems present security concerns that could prove crippling A green light for attacks Beyond traditional IT, the problems are even worse. Embedded systems are proliferating in nearly every corner… Jun 02 14June 02, 2014Article at InfoWorld Magazine
Beware the next circle of hell: Unpatchable systemsInsecure by design and trusted by default, embedded systems present security concerns that could prove crippling Microsoft's decision to end support for Windows XP in April was met with a collective gulp by the IT community. For good reason:… Jun 02 14June 02, 2014Article at InfoWorld Magazine
How to build stronger password hashes? Hold a contestA new contest proposes to spur innovation in hashing methods used to secure passwords and other sensitive data In the password security arms race, the bad guys are winning. Once-sturdy cryptographic "hashing" algorithms -- pillars of online data… Mar 28 14March 28, 2014Article at InfoWorld Magazine
Stealing corporate secrets proves to be all too easyHackers in a Defcon contest had no trouble persuading corporate workers to cough up private company data Organizers of a contest to highlight the dangers of social engineering said that employees of some of the top U.S. corporations were eager to… Aug 02 10August 02, 2010Article at InfoWorld Magazine
Google, Bing: A hacker's best friendsHackers still use search engines like Google and Microsoft Bing to accelerate and automate attacks against vulnerable websites Security experts long ago noticed that powerful search engines like Google could be used as effective tools for ferreting… Aug 02 10August 02, 2010Article at InfoWorld Magazine
Defcon hackers target cell phone securityDefcon hacking conference will feature eye-popping demo revealing the lack of security around cell phone networks Attendees at the annual Defcon hacking conference in Las Vegas might be advised to keep their cell phones powered off at the show, where… Jul 27 10July 27, 2010Article at InfoWorld Magazine
Microsoft calls for 'coordinated disclosure' of bugs Google called for a rethink of 'responsible disclosure' and Microsoft responded quickly with a shift in policy -- but can we expect much real change? It wasn't long ago that we were reading about the air war between Microsoft and Google over a… Jul 23 10July 23, 2010Article at InfoWorld Magazine
Network forensics gets a 'Minority Report'-style UIA network security traffic analysis tool, sporting a wicked UI, heralds a new era of easy cyber forensics Has dummy-proof network forensics arrived? A recent YouTube video from network security software vendor NetWitness, which shows off one of the… Jul 21 10July 21, 2010Article at InfoWorld Magazine
Network forensics gets a 'Minority Report'-style UIA network security traffic analysis tool, sporting a wicked UI, heralds a new era of easy cyber forensics This isn't about tooting NetWitness's horn. The gee-whiz stuff in the company's promo video disguises an awful lot of customization and… Jul 21 10July 21, 2010Article at InfoWorld Magazine
DARPA chief: U.S. must return to manufacturingDARPA's director warns the decline in U.S. manufacturing threatens the country's ability to innovate -- and defend itself Cautionary testimony about the future of American innovation from the head of DARPA, the Pentagon research division that… Jul 16 10July 16, 2010Article at InfoWorld Magazine
Finally -- a hacking conference just for kids!A new conference will teach kids the true skills of the (legal) hacker: curiosity, experimentation, tech fluency, and fun Technology enthusiasts and the ranks of the curious have been trying for years to rescue the term "hacker" from its pejorative… Jul 12 10July 12, 2010Article at InfoWorld Magazine
Apple pulls a 'BP' in responding to App Store hackIn the wake of the iTunes security breach, Apple takes a page out of BP's "emergency response" manual Apple has responded to press inquiries about the hacking of iTunes user accounts and fraudulent purchases made through its App Store, but the… Jul 07 10July 07, 2010Article at InfoWorld Magazine
iPad hack not so harmlessConventional wisdom says the hack of an AT&T service for the new iPad wasn't that bad. Not so fast, says security researcher Chris Paget... The hack of iPad user info on the AT&T site may be much worse than an embarassment, according to a security… Jun 17 10June 17, 2010Article at InfoWorld Magazine
Location services: The security risks of oversharingThe vulnerability of Web applications and the sensitive nature of personal location information will prove a disasterous combination As soon as a new technology gets traction, smart criminals figure out a way to misapply it. And one of the hottest… Jun 17 10June 17, 2010Article at InfoWorld Magazine
AT&T's iPad security fumble is just the tip of the icebergThe flaw that exposed the email addresses of 100,000 iPad owners is depressingly familiar -- and completely avoidable The vulnerability of AT&T's servers suggests that five years after Paris Hilton gave T-Mobile a black eye for a loosely spec'd… Jun 11 10June 11, 2010Article at InfoWorld Magazine
New Defcon contest tests hackers' social-engineering skillsKooky capture-the-flag-style contest gives participants 20 minutes to cajole information from target companies' employees Social engineering has evidently earned a new level of respect from hacker community: For the first time, this year's Defcon… Jun 04 10June 04, 2010Article at InfoWorld Magazine
