Category
Digital security firm Sophos today released their Security Threat Report for 2011, which reviews all the ways that the bad guys are out to get you. It's a glossy 52 page report and is worth a quick read to understand the threats that are out there, especially in areas that you might not be familiar with. The report covers the
A very good article on Wordpress Theme and the danger of what lies within the code of the theme, that you find by searching for free Wordpress themes on Google. The testing results are not encouraging and shows why thousands of Wordpress users are having issues with their sites as they are loading themes onto their web servers that can
This week the Department of Commerce issued a proposal to create an on line trusted identity system. According to the Commerce Department it would encourage a greater trust in providing information online to individuals by businesses and visa versa. There would be multiple partners in this program, they are as follows:The Individual--to be issued digital identities to complete transactions. The Non-Person Entity (NPE)‚such as organizations and services who would require authentication. The Identity Provider‚who is responsible for the processes involved in enrolling subjects (individuals and NPEs) in the system. The Attribute Provider‚who oversees the processes involved in creating, validating, and keeping up the attributes associated with identities, such as age. The Relying Party‚who makes transaction decisions based on the receipt of a subject's credentials. The Trustmark‚ some kind of image, logo, badge, or seal that authenticates participation in the Identity Ecosystem. And finally, the Governance Authority, which oversees and maintains the Ecosystem Framework.
If you're the kind of person who wants to use really strong passwords but you've a memory like a sieve, then PasswordCard might be for you. It's a credit card-sized set of random characters with symbols along the top and coloured bars which you keep handy in your wallet (or phone). So how does it work? First of all, set
The Mitre Corp has produced the 2010 CWE / SANS Top 25 Most Dangerous Programming Errors which identifies the most commonly encountered coding errors that can potentially lead to web sites being hacked or PCs being compromised. Some of the errors are well-publicised in the technical press, e.g. "cross-site scripting"; some are downright stupid, e.g. "use of hard-coded credentials" and others
"Security center has detected malware on your computer." Have you ever seen that message pop up on your computer? Have you ever seen it happen over Skype? Well, I've received that message three times in the last month as a Skype message. It tells me that my Windows software is infected and I need to install a patch. It even
Time and time again I'm totally amazed at how much personal information people will hand-out to complete and utter strangers. A study by Sophos showed that on Facebook around 45% of people will accept invites from totally unknown people with rubber ducks as their profile pictures. And what stuns me is that a whopping 89% of twenty-somethings willingly handed over