logo

source

Category: news | Posted by Avatar Staff 232 days ago
Via: http://feeds.ziffdavisenterprise.com | Tags: security pros launch open source cert comments Discuss  
Backed by Google, a group of respected computer security pros launched oCERT, an effort to be the go-to place for security incident response for open-source projects....SOLVE MORE ISSUES on the first call. Try WebEx FREE ZAP REMOTE SUPPORT ISSUES! Crush Support Log Jams! BLAST THROUGH FIREWALLS! Try WebEx REMOTE SUPPORT read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 219 days ago
Via: http://go.theregister.com | Tags: security gumshoes locate source mystery web compromise comments Discuss  
How dunnit plot gets scriptedThe source of the mystery infection of more than 10,000 websites back in January has been uncovered.… read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 218 days ago
Via: http://lists.jammed.com | Tags: isn security gumshoes locate source mystery web compromise comments Discuss  
http://www.theregister.co.uk/2008/04/16/mystery_web_compromise_unpicked/By John LeydenThe Register16th April 2008The source of the mystery infection of more than 10,000 websites back in January has been uncovered.Thousands of legitimate websites were compromised at the start of the year to serve up malware, as we reported [1] at the time.It seemed [2] that the exploitation of SQL Injection vulnerabilities was involved in the automated attacks. The precise mechanism was unclear until earlier this week when read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 200 days ago
Via: http://www.infoworld.com | Tags: google takes open source project dmca complaint comments Discuss  
Google has removed an open source project that enables the proprietary CoreAVC high-definition video decoder to run in Linux following a complaint from the codec's developer -- but the project could soon return. read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 199 days ago
Via: http://go.theregister.com | Tags: google launches security group open source comments Discuss  
oCERT to make the world safe for GPLGoogle is spearheading a volunteer workforce it hopes will become the centralized authority for responding to security issues in open source software.… read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 184 days ago
Via: http://go.theregister.com | Tags: open source code crawling bugs comments Discuss  
Audit gives thumbs upThe quality of open source code has improved over the last two years, according to an audit sponsored by the US Department of Homeland Security.… read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 178 days ago
Via: http://lists.jammed.com | Tags: isn open source proprietary codes include similar mistakes comments Discuss  
http://www.gcn.com/online/vol1_no1/46342-1.htmlBy Wilson P. Dizard IIIGCN.com05/23/08 A two-year study of more than 55 million lines of code showed that open-source systems include a variety of errors that closely track those found in software written for proprietary systems.The incidence of those errors in open-source code is declining, according to a study that the Homeland Security Department funded. The department hired Coverity to analyze more than 55 million lines of code in two years as part of the read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 178 days ago
Via: http://www.infoworld.com | Tags: open source wire comments Discuss  
Once upon a time, using open-source servers and applications for business was frowned upon in many circles. Today, you?d be hard pressed to find any sizeable infrastructure that doesn?t leverage open-source code in some form or another, be it a few MySQL databases, Apache on the Web servers, or a pile of Perl, PHP, Ruby, or Python applications holding things together. read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 154 days ago
Via: http://go.theregister.com | Tags: third brigade annexes open source intrusion detection tech comments Discuss  
GPL security project goes under commercial managementOSSEC, the open source host-based intrusion detection project, has been snapped up by Third Brigade, a commercial firm in the same information security sub-market. Terms of the deal, announced on Tuesday, were undisclosed.… read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 149 days ago
Via: http://www.infoworld.com | Tags: group google source badware comments Discuss  
Internet consumer advocacy group Stopbadware.org released data on "badware" Web sites on Tuesday, saying that Google was one of the top five networks responsible for hosting these dangerous Web sites. read more »
addto Add this link to... report Bury 
Category: news | Posted by Avatar Staff 128 days ago
Via: http://lists.jammed.com | Tags: isn open security foundation maintain attritionorgs data loss database open source comments Discuss  
From: InfoSec News <alerts_at_private>Date: Tue, 15 Jul 2008 05:09:28 -0500 (CDT)http://attrition.org/news/content/08-07-15.001.htmlRICHMOND, VA, July 14, 2008 - The Open Security Foundation (OSF) is pleased to announce that the DataLossDB (also known as the Data Loss Database - Open Source (DLDOS) currently run by Attrition.org) will be formally maintained as an ongoing project under the OSF umbrella organization as of July 15, 2008.Attrition.org's Data Loss project, which was originally conceptuali read more »
addto Add this link to... report Bury