AusCERT2008 to push security and privacy: related news

Understanding Privacy

privacyprof writes "Slashdot readers familiar with Professor Daniel J. Solove's essay, 'I've Got Nothing to Hide and Other Misunderstandings of Privacy,' might be interested in his new book, Understanding Privacy, which develops many of the ideas in that essay. As rapidly changing technology makes information increasingly available, there has been a great struggle to define privacy, with many conceding that the task is virtually impossible. The book argues there are multiple forms of privacy, related to one another by 'family resemblances'. It explains the framework for understanding privacy which was briefly discussed in the 'Nothing to Hide' essay. The book covers the framework in greater depth and explores how it applies to a wide array of privacy issues, such as data mining, surveillance, data security, and consumer privacy.

How IT security could go green?

Analysis: SP3 strengthens XP security Asprox botnet malware morphs PCI standard version 1.2 expected out in October Shape-shifting malware hits the web NATO builds cyber-security bunker Aussie bank account passwords stolen and sold for $900 Hackers take down Zimbabwean state-owned newspaper Brute-force SSH attacks surge OpenSSL bug found in Debian Linux MySpace spammers fined US$230m AusCERT2008 to push security and privacy Counterfeit networking gear: A security threat?

What Examples of Security Theater Have You Encountered?

swillden writes "Everyone who pays any attention at all to security, both computer security and 'meatspace' security, has heard the phrase Security Theater. For years I've paid close attention to security setups that I come in contact with, and tried to evaluate their real effectiveness vs their theatrical aspects. In the process I've found many examples of pure theater, but even more cases where the security was really a cover for another motive." swillden would like to know what you've encountered along these lines; read on for the rest of his question below.

Alternative Technology Adds McAfee Security

ENGLEWOOD, Colo. -- Alternative Technology, Inc., an Arrow Electronics, Inc. company and leading specialty distributor of thin-client/server-based computing, edge infrastructure, virtualization, and security solutions, continues to expand its security solutions by announcing it will distribute the full line of McAfee security software, appliances and managed security services for small to medium businesses and enterprises. Those offerings include: system/endpoint security, network security, data protection, and risk and compliance management.

Book Review: Little Black Book of Computer Security - 2nd Ed

If you go to a Borders or Barnes and Noble and check out the computer book section, you will most likely find an entire wall (or two) filled with various information security titles. There are 1000 page tomes dedicated to single topics like cryptography, or VoIP security, or how to secure some version of Microsoft's Windows operating system, and it is important to understand the information and concepts contained in those books. What Joel Dubin delivers in The Little Black Book of Computer Security - 2nd edition, is a compact, concise checklist in outline form that helps remind you of all of the key points you need to remember when implementing information security. The book is compact and portable. Not only can administrators use it to act as a reminder when developing information security policies and practices, but information security

AusCERT2008 to push security and privacy

Counterfeit networking gear: A security threat? Poorly implemented sites blamed for latest malware infection Microsoft shoots back on Vista claim Microsoft fixes six flaws, three critical in its May Patch Tuesday UK's DWP admits pension details leak Spammers fill up on petrol scam Hacker exposes six million Chilean's data to make a point US soldiers pick up viruses from pirated porn Anti-Phishing Working Group calls out for papers

PCI Security Standards Council to Host Webinar on New Payment Application Data Security Standard

WAKEFIELD, Mass. - The PCI Security Standards Council, a global, open industry standards body providing management of the Payment Card Industry Data Security Standard (DSS), PCI PIN Entry Device (PED) Security Requirements and the Payment Application Data Security Standard (PA-DSS), today an

Italian Privacy Advocates and Jurists Launch New Privacy Institute

PRNewswire-USNewswire/ -- A group of prominent Italian privacy advocates and jurists have launched the Italian Institute for Privacy (www.istitutoitalianoprivacy.it/en/), a public policy think tank focused on improving privacy protection in the digital age. This broad-based coalition of prominent Italians will focus its efforts on the protection of personal privacy online for citizens in

Italian Privacy Advocates and Jurists Launch New Privacy Institute

PRNewswire-USNewswire/ -- A group of prominent Italian privacy advocates and jurists have launched the Italian Institute for Privacy (www.istitutoitalianoprivacy.it/en/), a public policy think tank focused on improving privacy protection in the digital age. This broad-based coalition of prominent Italians will focus its efforts on the protection of personal privacy online for citizens in

5/22: Privacy-A Trojan Reduces Internet Privacy Level

I.T. Vertical Markets, Interactive Media Industry Overview, Internet, I.T., I.T. in Security, Security, Software, Security Software, I.T. in Business, Internet Security

More Patent Battles Making Your Computer Less Secure

Last year, we pointed to some patent battles among security software companies, noting how the end result would undoubtedly be less secure computers. As these security firms argued over who thought up an idea "first" and who owed who what amounts of money, you can rest assured that those exploiting the security holes couldn't care any less about who came up with what exploit first. In the constant battle between security firms and malicious hackers, distracting the security firms and having resources devoted to arguing over patents (and paying each other royalties) seems designed to just make it that much easier for malicious hackers to stay that much further ahead, while making it more and more difficult for any security firm to actually provide anything close to comprehensive security.

Computer Security

Computer Security is a branch of technology known as information security as applied to computers. Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. The objective of computer security varies and can include protection of information from theft or corruption, or the preservation of availability, as defined in the security policy.

PCI Security Standards Council to host webinar on new PA DSS

Wakefield, Mass., May 7, 2008 -- The PCI Security Standards Council, a global, open industry standards body providing management of the Payment Card Industry Data Security Standard (DSS), PCI PIN Entry Device (PED) Security Requirements and the Payment Application Data Security Standard (PA-DSS), today announces it is offering a complimentary and educational webinar, “Understanding the Payment Application Data Security Standard,” to be held on Thursday May 22, 2008 at 11:30 a.m. EDT and a second session the same day at 7:30 p.m. EDT.

Privacy Policies Only as Good as the People Enforcing Them

Techdirt is reporting that while we all know privacy policies may not matter much in the grand scheme of things, a recent study shows that it may be even worse than originally surmised. It seems that the real issue is with who has access to personal data and what they are able to do with it. "of course, it's not just the people reading the policies that don't seem to understand them -- it's those in charge of living up to and enforcing the policies. A new study surveyed a bunch of executives, including both marketing execs and those in charge of enforcing the privacy policy, and quickly discovered that marketers have a very different concept of 'privacy' than privacy officers. Not surprisingly, they don't see anything wrong with sharing all sorts of data that seems to horrify privacy officers.

[RHSA-2008:0537-01] Important: openoffice.org security update

Red Hat Security Advisory Synopsis: Â Â Â Â Â Important: openoffice.org security update Advisory ID: Â Â Â RHSA-2008:0537-01 Product: Â Â Â Â Â Red Hat Enterprise Linux Advisory URL: Â Â Â https://rhn.redhat.com/errata/RHSA-2008-0537.html Issue date: Â Â Â Â 2008-06-12 CVE Names: Â Â Â Â CVE-2008-2152 ===================================================================== 1. Summary: Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ppc, x86_64 Red Hat Enterprise Linux Desktop versi

[RHSA-2008:0538-01] Important: openoffice.org security update

Red Hat Security Advisory Synopsis: Â Â Â Â Â Important: openoffice.org security update Advisory ID: Â Â Â RHSA-2008:0538-01 Product: Â Â Â Â Â Red Hat Enterprise Linux Advisory URL: Â Â Â https://rhn.redhat.com/errata/RHSA-2008-0538.html Issue date: Â Â Â Â 2008-06-12 CVE Names: Â Â Â Â CVE-2008-2152 CVE-2008-2366 ===================================================================== 1. Summary: Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - i386, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat En

[RHSA-2008:0267-01] Critical: java-1.6.0-ibm security update

Red Hat Security Advisory Synopsis: Critical: java-1.6.0-ibm security update Advisory ID: RHSA-2008:0267-01 Product: Red Hat Enterprise Linux Extras Advisory URL: https://rhn.redhat.com/errata/RHSA-2008-0267.html Issue date: 2008-05-19 CVE Names: CVE-2008-1187 CVE-2008-1188 CVE-2008-1189 CVE-2008-1190 CVE-2008-1191 CVE-2008-1192 CVE-2008-1193 CVE-2008-1194 CVE-2008-1195 CVE-2008-1196 ===================================================================== 1. Summary: Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team.

NATO builds cyber-security bunker

Aussie bank account passwords stolen and sold for $900 Hackers take down Zimbabwean state-owned newspaper Brute-force SSH attacks surge OpenSSL bug found in Debian Linux MySpace spammers fined US$230m AusCERT2008 to push security and privacy Counterfeit networking gear: A security threat?

IBM Introduces Optim Data Privacy Solutions

IBM announced open client and partner testing of the new IBM Optim Data Privacy Solution for use with SAP solutions, which provides enterprise data management and data privacy capabilities in support of SAP applications. The IBM Optim Data Privacy Solution offers data masking techniques to protect privacy in development, testing and training environments. IBM Optim Data Privacy Solutions are also available for use with Oracle E-Business Suite, PeopleSoft Enterprise, JD Edwards EnterpriseOne, Siebel, and Amdocs CRM.

More customers are shopping for security software online

A recent report from The NPD Group revealed some interesting statistics about consumers' perceptions and awareness of security software products. Among the findings: the majority of security software purchases occur on the Internet, free security software downloads are competing directly with paid security software, and the biggest perceived household security threat is viruses.

Does Anyone Really Care Where Google Places Its Privacy Policy?

In the past, we've discovered that most people don't read a website's privacy policy, and many (incorrectly) assume that as long as a site has a privacy policy, then it means that the site will keep their info private -- even if the policy is to say the exact opposite. Basically, what this means is privacy policies are almost entirely meaningless. Yet, some still think they're important for show. Even more than that, they think that where you put the privacy policy matters. And that's put Google into a bit of a bind, as it tries to join the Network Advertising Initiative, a trade group that sets standards relating to how companies collect data for advertising purposes. The problem is that one of the NAI's principles is that the proper thing to do is put a link to your privacy policy on the homepage -- something that Google refuses to do.

Search took 0.43 seconds.