News (67)

Malware on 'trusted' websites has quadrupled

The amount of web-based malware hosted by trusted websites has increased by over 400 percent since last year, according to security vendor ScanSafe. Read more »

Virus encyclopaedia infects visitors with malware

Security vendor Trend Micro's UK and Japanese Web sites were hacked last week; attackers managed to inject malicious iFrames into their "virus encyclopaedia" pages. Read more »

Microsoft: Vista UAC designed to 'annoy users'

A Microsoft manager has said one of the security features in Vista was deliberately designed to "annoy users" in order to put pressure on third-party software makers to make their applications more secure. Read more »

Salesforce staff speared by phishers

Salesforce.com has revealed few details about a security breach caused by a phishing attack against an employee that surrended internal customer database details. Read more »

Developers take Linux attacks to heart

A handful of recent online attacks on free and open-source software servers has open-source developers looking over their shoulders. Read more »

Gmail cookie vulnerability exposes user's privacy

Petko Petkov of ethical hacking group GNUCitizen, has developed a proof-of-concept program to steal contacts and incoming e-mails from Google Gmail users. Read more »

Berners-Lee: Web security still a fight

Sir Tim Berners-Lee, credited as the inventor of the Web, has described online security as a "never-ending battle". Read more »

Malicious software disguised as Skype Defender

Skype is sounding the security alert, and users should take note before using the Internet calling service. Read more »

Debian locks out developers after server hack

The Debian GNU/Linux project has locked a number of its developers out of their system accounts following a security scare in which the hack of a key internal server was discovered this week. Read more »

Web banking: It's time to write down your password

Banks should stop forcing customers to create long, alphanumeric passwords because they can't protect against today's threats, according to AT&T computing researcher William Cheswick Read more »

Features (34)

Passwords: The Good, the Bad and the Ugly

Even with the best security technology in place, people are still putting enormous faith in the strength of their password, many without realising what having a "strong" password entails. Builder AU's Nick Gibson runs you through the basics. Read more »

Don't underestimate passwords in Web apps

Password security for a Web application is a no-brainer for seasoned Web developers. But should you force users to enter strong passwords? Read more »

Expert: User passwords getting stronger

A sample of login information from 34,000 MySpace.com members seems to indicate that internet users are getting better at picking more secure passwords, according to a prominent security expert. Read more »

Generate stronger random passwords with Perl

This article will show you how to generate random passwords automatically using specialised Perl modules. Read more »

Realise the flexibility of OpenSSH

OpenSSH is one of the most useful tools available. With it, you can access systems remotely and securely, transfer files securely, execute single commands on remote systems, secure normally insecure services, and much more. Read more »

Specify who can log in via OpenSSH

The OpenSSH suite of tools, developed by the OpenBSD Project, includes popular programs that serve many uses. This popularity combined with ssh availability as both server and client on just about every OS makes it no wonder that ssh has been the target of common attacks. Read more »

Set up user accounts quickly and securely

When you need to set up a user account to give a user shell access to the system, the only logical choice of login tool is OpenSSH. With SSH keys, all you need from the user is his SSH public key, and all he needs from you is the IP address or hostname with which to log in. Usually, this is sufficient. Read more »

Encrypt any file with symmetric cryptography using GPG

Encryption lets you keep your sensitive data, banking information and conversations safely protected by code. Learn how you can use the free GPG utility to protect your data. Read more »

10 tech skills you should develop during the next five years

If you want a job where you can train in a particular skill set and then never have to learn anything new, IT isn't the field for you. But if you like to be constantly learning new things and developing new skills, you're in the right business. In the late 80s, NetWare and IPX/SPX administration were the skills to have. Today, it's all about TCP/IP and the Internet. Read more »

Windows Vista RC1 reviewed

Windows Vista RC1 (build 5564) should mark the final stretch for Microsoft's new operating system, but don't be surprised if Microsoft issues one more public release candidate before making Windows Vista final. Read more »

Blog (4)

One ID to rule them all

Lana Kovacevic [blogs:webanatomy] -- OpenID is an open-source mechanism enabling you to use a single online identity to log-in to different websites that support OpenID. Read more »

Hack attack week

Staff [blogs:syslog] -- It wasn't a good week to be an Alaskan vice-presidential candidate, an online publication or even a multinational science project -- as all were compromised by hackers this week. Read more »

5 reasons restricting hacking is not like gun control

Nick Gibson [blogs:byteclub] -- Let's get it out of the way: Guns don't kill people, people with guns kill people. People with hacking tools can steal your personal data, shut down your system and deface your web site -- but is that any reason to ban them? Read more »

Introduction to Infocard

[blogs:] -- Identity provisioning is a hot topic in the Internet right now. Microsoft is behind a new version called Infocard. Here is a brief introduction to what Infocard is. Read more »

Log in


Sign up | Forgot your password?

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?