Microsoft advancing Security and Forefront: related news

Mozilla Foundation developing a model for a security metric

The Mozilla Foundation plans to develop a better model for gauging the security of its Firefox web browser. In contrast to Microsoft, the number of officially provided security updates is not to be the sole parameter used. According to the method in which Microsoft measures security, an absence of patches would equate to a high degree of security. The Microsoft approach is further illustrated by its claim that Vista is still more secure than other operating systems. In contrast to this approach, the Mozilla Foundation wants its evaluation to include a variety of factors involved in the development process and the techniques and tools used in it. The sequence of the process from the time a security vulnerability is reported until a patch is distributed is also to be analysed.

Microsoft's Annual Report Reveals OSS Mistakes

mjasay writes "Microsoft's most recent annual report suggests that the company is increasingly coming to grips with open source, yet also seems determined to perpetuate myths about open source that poorly serve it and its shareholders. Microsoft CEO Steve Ballmer has suggested before that 'free software means no free soda' for Microsoft employees; but this is perhaps the first time that Microsoft has managed to enshrine its ignorance in a public document. In the annual report, Microsoft makes two primary false claims about open source: 1) Open source companies don't invest in research and development and instead largely free-ride on Microsoft's patents and copyrights; and 2) Open source projects don't innovate and instead mimic Microsoft's products.

Microsoft and Apache - What's the Angle?

A week ago, we discussed Microsoft's contribution to the Apache Foundation. Now, Bruce Perens has written an analysis "exploring the new relationship of Microsoft and the Apache project, how it works as an anti-Linux move on Microsoft's part, and what some of the Open Sourcers are going to do about having Microsoft as a rather untrustworthy partner." In particular, he notes: "...Microsoft can still influence how things go from here on. If they have to live with open source, the Apache project is Microsoft's preferred direction. Apache doesn't use the dreaded GPL and its enforced sharing of source-code. Instead, the Apache license is practically a no-strings gift, with a weak provision against patent lawsuits as its most relevant term. Microsoft can take Apache software and embrace and enhance, providing their own versions of the project's

Microsoft advancing Security and Forefront

Microsoft moves to the next generation of Forefront, codenamed Stirling, offering big opportunities for partners.

Procter and Gamble Selects IBM Internet Security Systems to Help Amplify Its Threat Protection, Simplify Its Security

ARMONK, NY, Aug 29 (MARKET WIRE) -- IBM (NYSE: IBM) today announced that Procter and Gamble (NYSE: PG) has selected products and services from IBM's Internet Security Systems (ISS) division to expand its global cyber-security initiative. The agreement will strengthen Procter and Gamble's (P&G) threat protection arsenal by streamlining the management of its layered security tools and ultimately can help deliver substantial savings in administrative costs. This simplified security approach will streamline the management and help increase the efficiency of P&G's cyber-security project. First developed in 2005, P&G pioneered a layered, preventative network protection and vulnerability assessment project to mitigate and eliminate major costly internal vulnerabilities.

Some Developers Leaving Google For Microsoft

recoiledsnake writes "We have heard about lots of talented developers jumping ship from Microsoft to Google, but is the trend beginning to turn? Dare Obasanjo (a Microsoft employee) writes about a few high-profile people picking Microsoft over Google — either making the jump directly, or choosing Microsoft after receiving offers at both. Sergey Solyanik is back to Microsoft and he primarily gripes about the culture and lack of career development at Google. He writes, 'Everything is pretty much run by [engineering] — PMs and testers are conspicuously absent from the process. Google as an organization is not geared — culturally — to delivering enterprise class reliability to its user applications.' Danny Thorpe, who was the key architect of Google Gears, is back at Microsoft for his second stint working on developer technologies rel

Oracle Label Security for Privacy and Compliance

Oracle Label Security helps organizations address security and compliance requirements using sensitivity labels such as confidential and sensitive. Sensitivity labels can be assigned to users in the form of label authorizations and associated with operations and objects inside the database using data labels. Label authorizations provide tremendous flexibility in making access control decisions and enforcing separation of duty. Oracle Label Security can be used to address numerous operational issues related to security, compliance and privacy. Used with Oracle Database Vault, Oracle Label Security label authorizations are factors that control access to applications, databases and data. Label authorizations can be used in conjunction with virtual private database to mask out PII data.

Oracle Label Security for Privacy and Compliance

Oracle Label Security helps organizations address security and compliance requirements using sensitivity labels such as confidential and sensitive. Sensitivity labels can be assigned to users in the form of label authorizations and associated with operations and objects inside the database using data labels. Label authorizations provide tremendous flexibility in making access control decisions and enforcing separation of duty. Oracle Label Security can be used to address numerous operational issues related to security, compliance and privacy. Used with Oracle Database Vault, Oracle Label Security label authorizations are factors that control access to applications, databases and data. Label authorizations can be used in conjunction with virtual private database to mask out PII data.

Oracle Label Security for Privacy and Compliance

Oracle Label Security helps organizations address security and compliance requirements using sensitivity labels such as confidential and sensitive. Sensitivity labels can be assigned to users in the form of label authorizations and associated with operations and objects inside the database using data labels. Label authorizations provide tremendous flexibility in making access control decisions and enforcing separation of duty. Oracle Label Security can be used to address numerous operational issues related to security, compliance and privacy. Used with Oracle Database Vault, Oracle Label Security label authorizations are factors that control access to applications, databases and data. Label authorizations can be used in conjunction with virtual private database to mask out PII data.

Senior Microsoft developer dumps Redmond to embrace open source

Mike Gunderloy spent over a decade consulting for Microsoft, helping to build the Access and Excel versions of Microsoft Office 97 and 2000, as well as SQL Server, C#, and ASP.Net. A series of Microsoft moves, most particularly its "patent land-grab," has pushed Gunderloy away from Microsoft to the point that he's now "100 percent Microsoft-free" and has embraced a variety of open-source projects and programming languages.

YAHOO SPURNS JOINT MICROSOFT-ICAHN BID TO REVAMP FIRM, ACQUIRE SEARCH BUSINESS

TEL AVIV (MarketWatch) -- Yahoo Inc. said late on Saturday that it rejected a restructuring proposal from Microsoft Corp. and the investor Carl Icahn, and the Sunnyvale, Calif., Internet-services giant called on Microsoft to bid for the whole company. Yahoo said the Microsoft-Icahn plan, which it said would turn Yahoo's search business over to the Redmond, Wash., software giant and the rest over to the New York investor, was presented as a take-it-or-leave it proposition. "This odd and opportunistic alliance of Microsoft and Carl Icahn has anything but the interests of Yahoo's stockholders in mind," Yahoo Chairman Roy Bostock said in a statement. Yahoo said that while it rejected the restructuring, it offered two alternatives: "It repeated its offer to sell the entire company to Microsoft for at least" $33 a share, and it "offered to nego

Two Black Hat Talks On Apple Security Cancelled

An anonymous reader writes "Two separate Apple security talks have been nixed at the last minute from next week's Black Hat security conference in Las Vegas. The Washington Post's Security Fix blog reports that Apple researcher Charles Edge was to present on flaws in Apple's FileVault encryption plan, but asked Black Hat to cancel the talk, citing confidentiality agreements with Apple. Then on Friday, Apple pulled its security engineering team out of a planned public discussion on the company's security practices — which would have been a first for Apple. 'Marketing got wind of it, and nobody at Apple is ever allowed to speak publicly about anything without marketing approval,' a Black Hat spokesman said."

More customers are shopping for security software online

A recent report from The NPD Group revealed some interesting statistics about consumers' perceptions and awareness of security software products. Among the findings: the majority of security software purchases occur on the Internet, free security software downloads are competing directly with paid security software, and the biggest perceived household security threat is viruses.

RatePoint Names Former eBay Security Chief to Advisory Board

RatePoint a provider of customer feedback and online reputation management services, has named Howard A. Schmidt to its new Advisory Board. Schmidt is President & CEO of R & H Security Consulting LLC, and he was formerly Chief Security Officer of Microsoft, Chief Information Security Officer for eBay and Cyber Security Advisor for the White House. Bill Kerrigan, former Executive Vice President at McAfee, and Bob Marshall, President and CEO of WeatherBug, were also named to the advisory board.

McAfee, Inc. Delivers Stronger Security and Simplified Compliance ... - CNNMoney.com (press release)

SANTA CLARA, Calif., July 14 /PRNewswire-FirstCall/ -- McAfee, Inc. (NYSE: MFE) announced enhancements to McAfee(R) Total Protection (ToPS) for Endpoint, McAfee’s flagship endpoint security solution. This release provides new and updated compliance and security functions, including powerful policy auditing, flexible network access control, rogue system detection, enhanced Web security and improved anti-malware technology. The integration of management capabilities between endpoint security and compliance management enables customers to reduce costs, improve visibility and comply with industry & security policy across their entire infrastructure.

McAfee, Inc. Delivers Stronger Security and Simplified Compliance in a Single Solution

SANTA CLARA, Calif., July 14 /PRNewswire-FirstCall/ -- McAfee, Inc. (NYSE: MFE) announced enhancements to McAfee(R) Total Protection (ToPS) for Endpoint, McAfee's flagship endpoint security solution. This release provides new and updated compliance and security functions, including powerful policy auditing, flexible network access control, rogue system detection, enhanced Web security and improved anti-malware technology. The integration of management capabilities between endpoint security and compliance management enables customers to reduce costs, improve visibility and comply with industry & security policy across their entire infrastructure.

Microsoft to tip off partners on security flaws

Microsoft will be giving companies that sell security software and services to its customers a sneak peek at the technical details of the vulnerabilities in Microsoft software before the company releases its monthly 'Patch Tuesday' updates.

Security Hole in Citibank ATMs Underscores Larger Security Flaws in Banking Networks According to TraceSecurity

PRNewswire/ -- TraceSecurity, a leading provider of SaaS security compliance and risk management solutions, disclosed today that the case of Citibank customers whose funds were hacked via the connection between ATMs and third parties processing their PIN codes, are just the tip of the iceberg when it comes to the overall security and compliance of the networks that process ATM transactions. Over the past five years, TraceSecurity personnel have uncovered thousands of un-patched ATM processing servers while performing routine security compliance inspections. TraceSecurity is responsible for performing annual audits and inspections for firms in the financial services space to ensure they are complying with industry and government regulations that help protect consumers' sensitive data as well as the funds in their accounts.

Security Hole in Citibank ATMs Underscores Larger Security Flaws in Banking Networks According to TraceSecurity

PRNewswire/ -- TraceSecurity, a leading provider of SaaS security compliance and risk management solutions, disclosed today that the case of Citibank customers whose funds were hacked via the connection between ATMs and third parties processing their PIN codes, are just the tip of the iceberg when it comes to the overall security and compliance of the networks that process ATM transactions. Over the past five years, TraceSecurity personnel have uncovered thousands of un-patched ATM processing servers while performing routine security compliance inspections. TraceSecurity is responsible for performing annual audits and inspections for firms in the financial services space to ensure they are complying with industry and government regulations that help protect consumers' sensitive data as well as the funds in their accounts.

Security Hole in Citibank ATMs Underscores Larger Security Flaws in Banking Networks According to TraceSecurity

BATON ROUGE, La., July 2 /PRNewswire/ -- TraceSecurity, a leading provider of SaaS security compliance and risk management solutions, disclosed today that the case of Citibank customers whose funds were hacked via the connection between ATMs and third parties processing their PIN codes, are just the tip of the iceberg when it comes to the overall security and compliance of the networks that process ATM transactions. Over the past five years, TraceSecurity personnel have uncovered thousands of un-patched ATM processing servers while performing routine security compliance inspections. TraceSecurity is responsible for performing annual audits and inspections for firms in the financial services space to ensure they are complying with industry and government regulations that help protect consumers' sensitive data as well as the funds in their

Security Hole in Citibank ATMs Underscores Larger Security Flaws in Banking Networks According to TraceSecurity

BATON ROUGE, La., July 2 /PRNewswire/ -- TraceSecurity, a leading provider of SaaS security compliance and risk management solutions, disclosed today that the case of Citibank customers whose funds were hacked via the connection between ATMs and third parties processing their PIN codes, are just the tip of the iceberg when it comes to the overall security and compliance of the networks that process ATM transactions. Over the past five years, TraceSecurity personnel have uncovered thousands of un-patched ATM processing servers while performing routine security compliance inspections. TraceSecurity is responsible for performing annual audits and inspections for firms in the financial services space to ensure they are complying with industry and government regulations that help protect consumers' sensitive data as well as the funds in their

Ed Bott: Microsoft to ratchet IE8 security another notch in Beta 2

Tags: Microsoft Internet Explorer 7, ActiveX Control, Microsoft Corp., Beta, Site, IE8, Microsoft Windows, ActiveX/COM/COM+/DCOM, Phishing, Web Browsers

Encrypting Your Hard Disk is not Safe Anymore: Indian Security Startup iViZ Discovers New Vulnerability Affecting Microsoft, Intel, HP, Lenovo and Others

iViZ, an Indian information security startup offering on-demand Penetration Testing, announced its discovery of a new class of vulnerability earlier this month at Defcon 16, the world's leading security conference. This vulnerability allows attackers to steal computer boot passwords and bypass the security of pre-boot authentication software like hard disk encryption tools. It affects general computer users, enterprises, governments and can result in unauthorized access or theft of confidential data. Incidentally, in 2007 the global loss due to data theft is estimated to be USD 40 Billion.

Microsoft To Put Office Online as Equipt for Consumers

Microsoft will put its Microsoft Office suite online as Microsoft Equipt, joining Windows Live Mail, Messenger, OneCare and Photo Gallery. A one-year subscription for three home computers will cost $69.99. The Microsoft Equipt license bars business use and the Equipt suite does not include Outlook, which is popular among small businesses.

Optus announces iPhone plan pricing

Dell to sell enterprise-wide Microsoft agreements in Australia US government sued over tracking mobile phones Victory predicted for Microsoft's Hyper-V Mozilla claims Guinness download record Flying cars will happen says British inventor Google open sources RatProxy security tool Canadian fiddler looks for quick payday via eBay Microsoft, Yahoo mull media partner options UN says money grows on trees Microsoft outlines Office subscription plan Boffins promise flexible laptops Microsoft seeks allies for new Yahoo move - reports More regulation for online retail arrives Intel gaining ground in 2008

Search took 0.35 seconds.