News (44)

Miscreants encrypt files, hold them for ransom

In a new type of online attack, extortionists remotely encrypt user files and then demand money for the key to decode the information. Read more »

Fedora reboots updates after hack

The Red Hat-supported Fedora Project has started issuing updates to its Linux distribution again, after a hiatus of several weeks caused by a hacker break-in. Read more »

Storm worm botnet upgraded, prepared for attack

The owners of the Storm botnet, whose identities are as yet unknown, could be preparing to sell off the "services" of segments of the network, according to Joe Stewart, a researcher from managed security services company SecureWorks. Read more »

Developers take Linux attacks to heart

A handful of recent online attacks on free and open-source software servers has open-source developers looking over their shoulders. Read more »

Criminals' botnet more powerful than BlueGene?

Criminals behind the Storm worm have created a botnet containing millions of PCs, which have a combined computing power greater than the most powerful supercomputer in existence. Read more »

Disk encryption is no silver bullet, researchers say

Disk encryption, which people rely on for protecting sensitive data on laptops, can fairly easily be foiled, security researchers said in presenting a paper on a so-called "cold-boot attack" at the Usenix security conference on Wednesday. Read more »

Researchers: Digital encryption standard flawed

An encryption standard widely used in digitally signing documents and programs has a flaw in it that could allow for the creation of forgeries, sources said on Wednesday. Read more »

Debian and Ubuntu OpenSSL generates useless crypto keys

For almost two years the OpenSSL library used by Linux distribution Debian has been generating useless cryptographic keys — although Debian has issued a patch, experts warn that systems may still be exposed. Read more »

The boss's iPhone: Your worst security nightmare

As employee-owned portable devices become more sophisticated they become less secure, according to one analyst -- and the more senior an employee, the less compliant they are when it comes to protecting the information on those devices. Read more »

Beware of ransomware, firm warns

Smaller companies should back up their data if they want to avoid being held to ransom by hackers, a security company has warned. Read more »

Features (24)

Encrypt any file with symmetric cryptography using GPG

Encryption lets you keep your sensitive data, banking information and conversations safely protected by code. Learn how you can use the free GPG utility to protect your data. Read more »

Hack proof your Web services

Web services promise to revolutionise your company's development practices by connecting your company seamlessly with customers and other companies worldwide. With this promise, however, come new threats from hackers and information thieves. Here are some tips for securing your Web Services. Read more »

Security Visionary: 'Clipper chick' chats about encryption

Despite her unpopular stance on encryption, Dorothy Denning's dedication to security has earned her respect. What does she think is in store for security? Read more »

50 significant moments from internet history

We take you through 50 defining moments of the internet. Read more »

Set up user accounts quickly and securely

When you need to set up a user account to give a user shell access to the system, the only logical choice of login tool is OpenSSH. With SSH keys, all you need from the user is his SSH public key, and all he needs from you is the IP address or hostname with which to log in. Usually, this is sufficient. Read more »

Passwords: The Good, the Bad and the Ugly

Even with the best security technology in place, people are still putting enormous faith in the strength of their password, many without realising what having a "strong" password entails. Builder AU's Nick Gibson runs you through the basics. Read more »

How obfuscation helps protect Java from reverse engineering

Given the ease with which decompilers extract source code from compiled code, protecting your code and the valuable secrets therein isn't easy. As Java decompilers have come into regular use so have Java obfuscators, which effectively put a smoke screen around your code. Read more »

Better way to hacker-proof your site

Think malicious users need sophisticated tools to attack a Web site? Think again. All they really need is a Web browser and basic knowledge of SQL or another scripting language. Read more »

Develop secure software at the application level

Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »

Safe browser an oxymoron?

In November 2003, the CERT Coordination Center first advised Web users to consider using a Web browser other than Microsoft Internet Explorer. Read more »

Blog (1)

5 reasons restricting hacking is not like gun control

Nick Gibson [blogs:byteclub] -- Let's get it out of the way: Guns don't kill people, people with guns kill people. People with hacking tools can steal your personal data, shut down your system and deface your web site -- but is that any reason to ban them? Read more »

Log in


Sign up | Forgot your password?

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?