2007.01.08 Daily Security Reading
by Rodney Campbell on Jan.08, 2007, under Security
There has recently been considerable alarm about the possibility of a malicious code spreading via Skype. Skype is a system that allows voice communication over established Internet connections, in an environment very similar to that of telephone calls. It even allows calls to be made to telephones from a computer, with lower tariffs than that of a normal call.
HD-DVD anti-copy encryption cracked
A programmer going on by the name muslix64 has posted a Java-based application that will free the encrypted video from its protection.
IE users at risk for 284 days in 2006
Exploits and unpatched critical vulnerabilities put the users of Internet Explorer at risk 77 percent of the time last year, according to the latest number crunching by Brian Krebs of the Washington Post’s Security Fix blog.
The Month of Apple Bugs, Apple responds by assigning an engineer to fix the problems.
Are you confused by NAC? If so, you’re not alone. Even NAC (Network Access Control) vendors can’t agree on what exactly the concept means.
Subverting Ajax (pdf)
The ability of modern browsers to use asynchronous requests introduces a new type of attack vectors. In particular, an attacker can inject client side code to totally subvert the communication flow between client and server. In fact, advanced features of Ajax framework build up a new transparent layer not controlled by the user.
A general overview of email spoofing and the problems that can result from it.
Changing Your MAC Address In Window XP/Vista, Linux And Mac OS X
We’ve now seen several phishing web sites that are using flash-based content instead of normal HTML. Probably the main to reason to do this is to try to avoid phishing toolbars that analyze page content.
Five Hackers Who Left a Mark on 2006
In the security year that was 2006, zero-day attacks and exploits dominated the headlines.