 |
Do I need to rethink accepting credit cards through PayPal?
 PayPal's Verification Wait Irks a Business Owner - Haggler
The owner of a new business tells the Haggler he's irked by PayPal's payment verification policy.
Google+ makes sharing on the web more like sharing in real life. Learn more.
Join Google+ |
 |
|
Good tips on setting up a studio. Comes up short on finding and paying for one.
 Finding and Setting Up a Studio Space
The ability to control the amount, color, and quality of light can turn an ordinary scene into a masterpiece. That's why some of the best lighting is often done in a controlled environment like a ...
Google+ makes sharing on the web more like sharing in real life. Learn more.
Join Google+ |
|
|
A quick look at some of the new features in AfterEffects CS6.
 Learn By Video | Peachpit
Learn by Video, from Adobe Press and video2brain, offers exceptional video training in the fundamentals of Adobe ...
Google+ makes sharing on the web more like sharing in real life. Learn more.
Join Google+ |
|
 |
Well worth a peek
View or comment on Alfred Ingram's post » |
|
+Matt Kloskowski is a natural treasure of Photoshop tips and techniques.
 Graphics.com >> Sections >> Photoshop >> Creating a Single-photo Composite in Photoshop
The shared resource for creative design.
 |
|
|
First, I fell in love with paper: the way its surface feels, its weight, how it folds. I fell in love with type sometime around the age of fourteen. I was fascinated by colophons in the backs of books. There was Clarendon, Garamond, Palatino. I had a part time job in a letterpress shop.
You know what, the infatuation never went away. 
youtube.com - http://www.pbs.org/a
|
|
"The conflicts we need to worry about are the ones not disclosed. They’re far more prevalent and they do actually deceive readers because they’re far more subtle. But that’s an impossible task. AOL can’t fix that — no one can. So instead they’ll slaughter the lamb everyone can see to gain puffery amongst the old media peers who also live to die another day.
It has almost been exactly one year since AOL acquired us. At the time, they promised not to interfere with the way we do things. For 11+ months, they’ve kept their word, and things have run beautifully from our end. Our business is one of the few sterling ornaments on their mantel. Now they may break their promise to us. And if that promise is broken, it will break TechCrunch."
"The former U.S. counter-terrorism official who raised the alarm that a major terrorist attack was coming before 9/11 is now warning that cyber-war is an imminent threat."
Many of the top decision makers, Cofer said, are still ignorant of the threats that are out there and how they target major corporations, government agencies and the defense industry.
Cofer Black, former director of the Central Intelligence Agency’s Counterterrorist Center, said in his keynote speech Aug. 3 at the Black Hat conference. Cofer was the U.S. Department of State’s coordinator for counter-terrorism with the rank of ambassador at large from December 2002 to November 2004.
The ability of Stuxnet to physically damage equipment has made cyber-security significantly more important, Black said. The fact that cyber-attacks can impact the physical world means cyber-techniques must be considered as a tool that terrorists can utilize, Black said.
Stuxnet damaged centrifuges used to enrich uranium in Iran's nuclear facility setting back the country's nuclear development program. The latest reports indicate Iran is replacing the centrifuges outright because of the damage.
“I can’t say I understand how it was executed, but the important point is, this is expensive to pull off, which means a nation-state was involved,” Black said, adding that cyber-attacks will be “key component” of future conflict against “a nation-state, a rogue state or terrorist groups.”
http://www.websense.com/content/threat-report-2010-web-security.aspx
- Websense Security Labs identified a 111.4% increase in the number of malicious websites from 2009 to 2010.
- 79.9% of websites with malicious code were legitimate sites that have been compromised— an increase of 3% from the last previous period.
- Searching for breaking trends and current news represented a higher risk (22.4%) than searching for objectionable content (21.8%).
- The United States was the top country hosting phishing sites in 2010.
"A study by free anti-virus firm Avast found 99 infected legitimate domains for every infected adult web site."
If you're not vigilant there's a good chance your computer is not your computer anymore, kudos to Deb Shinder and Win7News http://www.win7news.net/archives
"Four researchers from Stanford and Carnegie Mellon outlined how frame busting, a protection meant to defeat clickjacking, can be circumvented on Twitter and other popular sites.
New research has found a common defense used by Websites to prevent clickjacking attacks can be broken.
Clickjacking uses malicious iframes to take control of a Web surfer’s clicks and hijack their Web session. The term clickjacking was first used in 2008 by WhiteHat Security CTO Jeremiah Grossman and Robert "RSnake" Hansen, CEO of SecTheory. In order to combat the attack, Websites instituted techniques known as frame busting, which prevent a site from running when it is loaded inside a frame.
According to researchers (PDF) from Stanford University and Carnegie Mellon University, frame-busting isn’t as effective at preventing clickjacking as hoped. An analysis of the Top 500 Websites ranked by Alexa found all of the frame busting implementations could be circumvented. Some of the circumventions were browser-specific, while others worked across all browsers, the researchers found."
It's clear there's a problem. Recent legal action in Spain and in Virginia against the Mariposa botnet andthe Waledac botnet, two of the ten largest botnets that controlled tens of millions of hijacked computers, offers a reminder of just how many compromised computers are out there. These aren't just personal computers either; many of the infected machines have been found in major corporations and banks.
The problem with patching, unfortunately, is that it's too much trouble for the average user. A research paper by Stefan Frei, research analyst director at Secunia, and Thomas Kristensen, CSO at Secunia, released earlier this week at the RSA Conference, finds that the complexity and frequency of patching software vulnerabilities tends to exceed what users are able and willing to invest.
According to Frei and Kristensen, 50% of users have software from more than 22 different vendors that are affected by at least 75 security advisories issued by Secunia every year.
Daunting as the task may be, if you don't do the work your computer is a lot more likely to belong to a hacker than belong to you.
Of course, there's a good chance you'll never know it. Until your email account is cancelled for spamming or they arrest you for possessing kiddie porn. Even worse, your bank account might be zeroed, though it's more likely you'll be billed for things you never ordered. So go the work or you will be assimilated. You'll also wish they were the Borg.
![Reblog this post [with Zemanta]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sjPN5NxNNReDid00c8qa5qM1yD6WW3YoVffLU5Ttjm8iLBNYukNShrJ10mqBMF22OkjWb9X9nJet_7Bzb9tlHmP-mtcD5yMFJqSM4XHd_Q5ETZ2ckPTN294yR2EfCiqyflLtKNt39JSPM1gp-R2hU=s0-d)
Assess vulnerabilities and strengthen security with these tools and technologies.
“Security Update Management
Security Update Detection
Lockdown, Auditing, and Intrusion Detection and Remediation
Virus and Malware Protection and Removal”
"Wolfgang Kandek, CTO of Qualys, explained how the service works. After signing up at www.qualys.com/forms/trials/stopmalware a user can protect up to ten web sites. Every day Qualys's scanners will check each web site, crawl all of its pages, and report on any malware problems. 'We scan in two ways,' said Kandek. 'First we look at the page to see if any malware is present; that's static analysis. Then for dynamic analysis we actually load the page in a virtual machine running Internet Explorer 6 and monitor it to see what happens... We know what is normal behavior and what is abnormal. When we detect abnormal behavior that clearly represents malware we alert the owner'.
At present alerts come via e-mail, but Kandek indicated that Qualys would consider text, IM, voice, or other alert modes if there seemed to be strong interest among users. He also pointed out that this is a research activity for Qualys. The more web sites they monitor the more malware they'll detect and the more information they can share with other companies.
Users who outgrow QualysGuard can move up to the full non-free Qualys Go SECURE service. This service checks for malware, of course, but also scans for network vulnerabilities, verifies all web applications, verifies site certificates and more. Qualys hopes, naturally, that widespread use of the free service will feed satisfied users into the paid service."
http://blogs.pcmag.com/securitywatch/2010/03/free_service_keeps_your_web_si.php
Posts
All Comments
