cgisecurity.com Author: Zenomorph - Fingerprinting Port 80 Attacks: A look into web server, and web application attack signatures.
Part One
Port 80 is the standard port for websites, and it can have a lot of different security issues. These holes can allow an attacker to gain either administrative access to the website, or even the web server itself. This paper looks at some of the signatures that are used in these attacks, and what to look for in your logs.
cgisecurity.com Author: Zenomorph - Fingerprinting Port 80 Attacks: A look into web server, and web application attack signatures: Part Two..
Port 80 is the standard port for websites, and it can have a lot of different security issues. These holes can allow an attacker to gain either administrative access to the website, or even the web server itself. This second paper was written to help the average administrator and developer to have a better understanding of the types of threats that exist, along with how to detect them.
Slashdot | Developers - Fingerprinting Port80 Attacks Part 2 Relased.
DMNews.com | Ontario Privacy Law Would Affect US Companies in Province.
A March 31 deadline looms for the Canadian Marketing Association and its members to file opposition against privacy legislation that would shut down most uses of consumer information for marketing purposes in Ontario. What's more, the legislation would affect U.S. companies with data processing or fulfillment facilities in the province.
The legislation, drafted by the Ontario Ministry of Consumer and Business Services last month, would require express consent before any personal information could be used for marketing.
[ ... ]
However, the legislation is not limited to the personal information of Ontario residents. Any information transferred into Ontario for data processing or for fulfillment also would fall under it even if the information were not about Ontario citizens, Gustavson said.
The legislation would apply not only to information disclosed for third-party purposes but also to marketing to existing customers. And since it has no grandfather clause, marketers would have to opt-in their entire house files before sending customers more marketing materials.
New York Times - Editorial Op-Ed: by Anthony Lewis free registration required Taking Our Liberties.
The war against terrorism will go on indefinitely, President Bush has warned, seeking the enemy around the world. Already American forces are committed to the Philippines, Georgia and Yemen. Iraq may be next. Heavy fighting continues in Afghanistan.
War without end is likely to have -- indeed is already having -- profound consequences for the American constitutional system. It tends to produce the very thing that the framers of the Constitution most feared: concentrated, unaccountable political power.
The framers sought in three ways to prevent that concentration. They divided power in the federal government, so that one branch could check another if it grew too mighty. They made government accountable to the people, who, in James Madison's words, had "the censorial power . . . over the government." And, in the first 10 amendments to the Constitution, they guaranteed specific rights like freedom of speech and due process of law.
All three of those constitutional bulwarks against concentrated power are now threatened.
[ ... ]
Civil liberties have often been overridden in times of crisis and war -- as in the removal of Japanese-Americans from the West Coast in World War II. Those occasions were followed by regrets and apologies.
But how will we protect civil liberties in a war without end? The attorney general, John Ashcroft, has given his answer. He told Congress in December that "those who scare peace- loving people with phantoms of lost liberty . . . only aid terrorists."
AP Wire | 03/08/2002 | via BatArea.com - Companies Settle Over Privacy Claim.
WASHINGTON - Three Internet companies have settled federal charges that they illegally gathered and sold personal financial information, agreeing to return the money they made off their operation and pay fines.
Under the settlement, Information Search Inc., Smart Data Systems and Discreet Data Systems are barred from using deceptive practices to gain such data, the Federal Trade Commission said Friday. The companies must also pay $2,000 each in fines to the government.
The information brokers advertised on the Internet that they could obtain private records for a price.
New York Times - free registration required Officials Say Figures Show That Profiling Is Decreasing.
New Jersey state troopers made more than 36,000 traffic stops on the New Jersey Turnpike in the six-month period that ended Oct. 31, but asked to conduct searches only 11 times, according to statistic s released today by the state attorney general's office.
|