Sunday, March 4, 2007

Month of PHP Bugs Has Begun. Month of PHP Bugs Has Begun. An anonymous reader writes  "The previously announced Month of PHP Bugs started three days ago, and already lists 8 security vulnerabilities in PHP and PHP related software. From the site: 'This initiative is an effort to improve the security of PHP. However we will not concentrate on problems in the PHP language that might result in insecure PHP applications, but on security vulnerabilities in the PHP core. During March 2007 old and new security vulnerabilities in the Zend Engine, the PHP core and the PHP extensions will be disclosed on a day by day basis. We will also point out necessary changes in the current vulnerability management process used by the PHP Security Response Team.'"  [Slashdot] 10:01:57 PM

Open Source Conversations:The openLiberty Project - Jason Rouault The openLiberty Project, announced in January 2007, is a global open source initiative formed to provide open source developers with tools for integrating the privacy and security services of multivendor Liberty Federation and Liberty Web Services into many new identity-based services. In this episode, Jason Rouault discusses openLiberty, and how it could accelerate rollout of Web services, such as presence, contact book, geolocation and calendaring. Rouault also talks about openLiberty's choice of the Apache open source license, how openLiberty could lead to stronger integration between Liberty and Eclipse. why the Liberty form of geolocation is preferable to mobile carriers' typical methods. He also touches on the Liberty People Service, why Liberty's standards work is superior to work at OASIS, and answers Scott's obligatory Microsoft question. 9:10:45 PM

IT Conversations: Open Telephony and Open Identity - Bill Weinberg, Brad Templeton, Johannes Ernst Many developers, especially small start-ups, are being out-competed by the big name players in financial terms. Regulations, including the Communications Assistance for Law Enforcement Act, or CALEA, are major challenges for start-ups, because they lack armies of lawyers. In a humorous and sarcastic presentation, Brad Templeton of EFF considers the implications of government-mandated wiretapping. While consumers are concerned about their privacy, they also struggle to keep their digital identities organized. Johannes Ernst of NetMesh explains projects that have sprung up to provide unified identification and authentication for all of our digital communication. LID, OpenID, and i-names are providing consumers with interoperable digital identities in a world where new methods of communication and collaboration are invented daily. 9:08:51 PM

© Copyright 2007 Paul Hardwick. Last update: 3/18/07; 8:27:32 PM.