Security
Security issues, software and reports.

 


















Subscribe to "Security" in Radio UserLand.

Click to see the XML version of this web page.

Click here to send an email to the editor of this weblog.

 

 

  Sunday, March 4, 2007


Reuters yesterday reported on a recently issued study on future technologies written by the Pentagon's Defense Science Board. More than anything, it seems these outside advisers want a surveillance system that would put Big Brother to shame, and they're looking at the commercial sector to provide it:
10:34:51 PM    

Microsoft's Windows Live OneCare came in dead last out of a group of 17 antivirus programs tested against hundreds of thousands of worms, viruses, Trojan horses and other malware, an Austrian antivirus researcher reported Wednesday.

The AV Comparatives Web site, which is maintained by Andreas Cleminti from Innsbruck, Austria, posts quarterly results of tests that pit the top antivirus products against a dynamic list of nearly half a million individual pieces of malware.


10:27:26 PM    

Microsoft OneCare Last in Antivirus Tests. Juha-Matti Laurio writes  "PC World has a story reporting that Microsoft's Windows Live OneCare came in dead last out of a group of 17 antivirus programs tested against hundreds of thousands of pieces of malware. The report of an Austrian antivirus researcher was released at the AV Comparatives Web site this week. Several free AV products were included in the test as well." ---  While the top dog was able to find 99.5% of the malicious code, OneCare clocked in at 82.4%. Of course, there's no metric for the severity of the malware in the 17% gap. [Slashdot]
10:23:42 PM    

Hacker Defeats Hardware-based Rootkit Detection. Manequintet writes "Joanna Rutkowska's latest bit of rootkit-related research shatters the myth that hardware-based (PCI cards or FireWire bus) RAM acquisition is the most reliable and secure way to do forensics. At this year's Black Hat Federal conference, she demonstrated three different attacks against AMD64 based systems, showing how the image of volatile memory (RAM) can be made different from the real contents of the physical memory as seen by the CPU. The overall problem, Rutkowska explained, is the design of the system that makes it impossible to reliably read memory from computers. "Maybe we should rethink the design of our computer systems so they they are somehow verifiable," she said." [Slashdot]
9:52:23 PM    

The openLiberty Project, announced in January 2007, is a global open source initiative formed to provide open source developers with tools for integrating the privacy and security services of multivendor Liberty Federation and Liberty Web Services into many new identity-based services. In this episode, Jason Rouault discusses openLiberty, and how it could accelerate rollout of Web services, such as presence, contact book, geolocation and calendaring. Rouault also talks about openLiberty's choice of the Apache open source license, how openLiberty could lead to stronger integration between Liberty and Eclipse. why the Liberty form of geolocation is preferable to mobile carriers' typical methods. He also touches on the Liberty People Service, why Liberty's standards work is superior to work at OASIS, and answers Scott's obligatory Microsoft question.
9:10:45 PM    

Many developers, especially small start-ups, are being out-competed by the big name players in financial terms. Regulations, including the Communications Assistance for Law Enforcement Act, or CALEA, are major challenges for start-ups, because they lack armies of lawyers. In a humorous and sarcastic presentation, Brad Templeton of EFF considers the implications of government-mandated wiretapping.

While consumers are concerned about their privacy, they also struggle to keep their digital identities organized. Johannes Ernst of NetMesh explains projects that have sprung up to provide unified identification and authentication for all of our digital communication. LID, OpenID, and i-names are providing consumers with interoperable digital identities in a world where new methods of communication and collaboration are invented daily.


9:08:51 PM    


Click here to visit the Radio UserLand website. © Copyright 2007 Paul Hardwick.
Last update: 3/18/07; 10:43:08 PM.

March 2007
Sun Mon Tue Wed Thu Fri Sat
        1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30 31
Feb   Apr