News (17)

Microsoft joins Kerberos single ID consortium

The MIT Kerberos Consortium, a security authentication and authorisation group, announced on Monday that Microsoft has joined its shindig. Read more »

Cyota gives RSA token-less authentication

RSA Security's proposed acquisition of privately held Cyota will allow the company to offer a relatively cheap two factor, non token-based authentication system for its banking customers. Read more »

RSA to test new Web authentication service

Looking for a way to get its security gadgets into the hands of average consumers, RSA Security plans to test a new Web authentication service. Read more »

Microsoft to embed Live services in Windows

Microsoft's Live-branded online services don't end at the Web browser. They extend deep into Windows. Read more »

Microsoft launches biometric access peripherals

Microsoft has reacted to concerns over passwords with the launch of a keyboard which uses biometrics to log on users to Web sites but the software giant has admitted the products are for convenience and not security. Read more »

Has Windows Vista's UAC feature failed Microsoft?

Experts agree that Microsoft's Windows Vista is relatively well-protected but its security features — such as User Account Control (UAC) — have been highlighted by security experts as one reason why the operating system is far less popular than its predecessor, Windows XP. Read more »

Web banking: It's time to write down your password

Banks should stop forcing customers to create long, alphanumeric passwords because they can't protect against today's threats, according to AT&T computing researcher William Cheswick Read more »

Security spend triples, breaches fall 30 percent

A UK government-sponsored security survey reports that security breaches have fallen by a third in the past two years but spending on security has increased significantly. Read more »

Cyberattacks outstripping defences

Cyberattacks today have become so complex that there may be no real way to completely protect against them, internet security researchers have warned. Read more »

Australia Post tests online identification service

Read more »

Features (54)

Authentication caching with nscd

Distributed authentication is increasingly popular as home networks add more computers and business networks continue to expand. Using a central authentication system such as LDAP or NIS with other technologies like Kerberos has become somewhat of a standard in large networks. Read more »

Implement Web form tracking with ASP.NET

IIS can log a huge amount of Web usage data, but keeping robust logs without dragging down performance requires a skilled developer's help. Use ASP.NET to generate rich Web form tracking logs without unacceptably impeding performance. Read more »

Integrate Passport into ASP.NET apps

If you are looking for a secure means to transfer sensitive information in an ASP.NET application, try integrating Microsoft's Passport service. Read more »

Passwords: poor excuse for security

Cut costs. Save money. Maintain the status quo. With that mantra in mind, many network managers figure they've got authentication covered. As long as there's a password policy in place, who needs to spend money on authentication tools? Read more »

Cookieless data persistence is possible

Cookies are a common way to store retrievable user information, such as authentication data. But what if you need a non-cookie solution? Read more »

Configure authentication in your ASP.NET app

ASP.NET offers developers plenty of options when it comes to authentication. Here's a look at how to make ASP.NET's authentication settings work with IIS. Read more »

Specify who can log in via OpenSSH

The OpenSSH suite of tools, developed by the OpenBSD Project, includes popular programs that serve many uses. This popularity combined with ssh availability as both server and client on just about every OS makes it no wonder that ssh has been the target of common attacks. Read more »

Maximising IIS logging

Multiple options for logging user access activity are available when you manage Microsoft IIS Web servers. Here are several logging options. Read more »

JConsole: remoting, notifications and log control

In real applications, instrumentation is usually monitored across the network. Following on from our tutorial on JConsole, here's how to network-enable your managed Java applications. Read more »

Handle log file analysis with AWStats

Site monitoring tools can be pricey, but not AWStats: It's free. This article introduces the AWStats log analysis tool and examines its pros and cons. Read more »

Blog (2)

Assumption-based Hacking 101

Chris Duckett [blogs:betaliving] -- High-level thinking leads to assumptions, and assumptions are the mother of all mistakes -- consequently the best place to find a security hole is in a place where the programmer has made an incorrect assumption. Read more »

One ID to rule them all

Lana Kovacevic [blogs:webanatomy] -- OpenID is an open-source mechanism enabling you to use a single online identity to log-in to different websites that support OpenID. Read more »

Log in


Sign up | Forgot your password?

  • Staff Crying, mooning and leaving

    In this week's roundup we see that continuous whining can get results, Linux users get 64-bit Flash and Moonlight previews, the latest in the Yahoo/Microsoft relationship and Senator Conroy ducks and weave in Senate Question Time. Read more »

    -- posted by Staff

  • Brendon Chase Sun eye Web developers with Netbeans 6.5

    Despite the recent employment axe hitting Sun the company has pushed out a new release of its Netbeans open source IDE with an eye to appeal more to Web developers. Read more »

    -- posted by Brendon Chase

  • Renai LeMay BarCamp buzz: Let the hacking continue

    Attending last weekend's BarCamp in Sydney, it was hard to escape the conclusion that a certain "dot-com bust" flavour had seeped into the kool aid previously being drunk by Australia's web 2.0 and early stage start-up sector. Read more »

    -- posted by Renai LeMay

What's on?