

Tuesday, 17:23 EST



|
|
Featured article
Is authenticated XSS a problem? Obviously, see cross-site scripting (XSS) is a big problem on the public Web. But there’s another angle to XSS that no one seems to be talking about – at least I couldn’t find anything on it. It’s the issue of XSS on Web pages that are only accessible when the user is logged in. I see XSS in this context all the time which begs the question: is XSS indeed a “problem” if the user has to login to be on the receiving end of the exploit? Many developers I’ve worked with don’t seem to think so, but as of late, I’m forming a different opinion on the issue. |
![]()
Last 10 added articles
| A closer look at USB Secure 1.3.0 (Security Products) USB Secure helps you password protect USB drives, thumb drives, memory cards, external drives and flash drives. It supports plug and play and runs automatically once a USB drive is plugged in, asking you the password for it. It doesn't require Administrator rights to run and therefore there is no need to install it at the other end to retrieve the protected data. |
| Is authenticated XSS a problem? (Opinions) Obviously, see cross-site scripting (XSS) is a big problem on the public Web. But there’s another angle to XSS that no one seems to be talking about – at least I couldn’t find anything on it. It’s the issue of XSS on Web pages that are only accessible when the user is logged in. I see XSS in this context all the time which begs the question: is XSS indeed a “problem” if the user has to login to be on the receiving end of the exploit? Many developers I’ve worked with don’t seem to think so, but as of late, I’m forming a different opinion on the issue. |
| A closer look at File Encryption XP 1.5 (Security Products) File Encryption XP is a file and folder encryption program that uses the Blowfish algorithm with a 384-bit key. The files are completely self-contained which means that, if you have the correct password, you can view your encrypted files on any Windows PC and you do not need to install any other encryption software. |
| Corporations should follow the goverment's lead on attribution of cyberattacks (Opinions) Many would argue, and understandably so, that government does not often provide models for corporations to follow to improve their bottom line. However, federal agencies have long taken the leadership position in cyber security on this one key point; recognizing that it’s not enough to know how networks were hacked, but also to know by whom. |
| IDS legacy is institutionalized failure (Opinions) The news is rife with discussions about systemic failures in the intelligence community. It is a good thing we do not judge information security on the same scale of success. I know of not a SINGLE enterprise network that is not being repeatedly compromised with a deluge of malicious code. Can you imagine a world where we expected our anti-virus to actually protect us? |
| A closer look at Gili USB Stick Encryption 2.0 (Security Products) USB flash drives are the most popular way to move data from one PC to another. They are easy to use, convenient, affordable, but at the same time they pose a security risk and can be easily lost, stolen or misplaced. Gili USB Stick Encryption allows you to password protect USB drives, thumb drives, memory sticks, pen drives, jump drives and flash drives, so that the data contained in them doesn't fall into the wrong hands. |
Q&A: Hackers and experimental artists (Interviews) The “Noise vs. Subversive Computing” project is a collaborative release split between noise/experimental artists and subversive technologists/computer hackers. Ten representatives from each camp were asked to contribute a piece of work which could be anything at all: an audio track, a drawing, a written passage, software, video, combination of all that, or anything else that can be converted to binary. The Noisicians had “Subversive Computing” as their central theme, and the Technologists worked with “Noise”. We've spoken with the main voice behind the project, Pascal Cretain. |
| Identity theft in focus (General Security) The stories are all too familiar: Money siphoned from a checking account. Unfamiliar charges racked up on a credit card bill. Discovering a loan has been taken out under false pretenses. You may know someone forced to deal with one of these situations, or it may have even happened to you. Identity theft, when a thief uses your personal information for their personal gain, comes in all shapes and sizes, as criminals are able to steal information in a variety of ways – online and offline, included – and then use that information to commit a range of crimes. |
| What you need to know about backing up virtual machines (General Security) The benefits of using virtualization to consolidate data center infrastructure and provide a more flexible platform for moving, provisioning and backing up workloads are proving alluring to companies of all sizes. However, while virtualization can bring considerable value to organizations in terms of improved server resource utilization it is important to understand the implications of moving to a virtual environment when it comes to protecting the infrastructure. |
| Online fraud: Avoiding the seven deadly sins (Web Security) By using the points below, companies transacting online can reduce the threat of fraudulent purchases or unauthorized account access and ensure a safer experience for their legitimate customers. |
![]()