News (292)

Microsoft exec kicks off new browser security war

Internet Explorer is more secure than Firefox, according to a senior Microsoft executive, who compared how many vulnerabilities were found in the two browsers -- but critics say his study is flawed. Read more »

Microsoft outlines IE7 security plans

Microsoft is tightening up the way its Internet Explorer browser handles HTTPS for version 7, which is used to secure online transactions, in an attempt to give people more protection online. Read more »

IE7 gives green light to trusted websites

Microsoft has quietly flipped the switch on a new feature in Internet Explorer 7 meant to combat phishing scams. Read more »

Firefox phishing vulnerability discovered

A newly discovered flaw in Firefox could allow cybercriminals to take advantage of Web surfers. Read more »

Major browsers bitten by security bugs

What do Internet Explorer, Mozilla's browsers, and Opera all have in common? Bugs. Read more »

Firefox 3 gives browser security, Web app makeover

Mozilla has released a new beta version of Firefox 3, with the popular open source Web browser featuring significant new features that according to its makers will improve security, ease of use and the rendering of Web pages. Read more »

Image flaw pierces PC security

Six vulnerabilities in a common code that handles an open-source image format could allow intruders to compromise computers running Linux and may allow attacks against Windows PCs as well as Macs running OS X. Read more »

Firefox gets a fresh security update

Mozilla has issued a security update for its Firefox open-source browser, just weeks after it released a large fix to address several browser security flaws. Read more »

Opera 9.5 gets euro-style and Haute secure

Opera 9.5, code-named Kestrel, the latest browser by Opera, on Thursday became available for download for Windows and Mac. Read more »

Mozilla releases security updates

Mozilla has released updates to its Firefox browser and Thunderbird e-mail client for Windows, Mac and Linux users, the organisation announced on Friday. Read more »

Features (129)

Bulletproof persistent cookies to increase security

Web browser cookies can enhance the user experience by providing additional functionality and ease of use. However, from an administration point of view, cookies are a security concern. Encrypt your cookies with this simple technique. Read more »

Designing secure intranet applications

During the design phase, engineering and security teams must work together to ensure intranet applications meet the established security standards. Read more »

Web application security frameworks (WASF), Part 1: Introduction

Often you will want parts of your Web application to be exclusive to certain users. This access distinction requires the use of Web application security frameworks. This first article in the series introduces you to the three most often used methods. Read more »

Develop secure software at the application level

Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »

CGI wrappers for Apache-based apps can boost security

CGI scripts represent a big potential security risk in Web development, but using CGI wrappers can help insulate your servers from attack. Here's an outline of how to create CGI wrappers to protect an Apache Web server. Read more »

Secure Web services with IP blocking

You've created a Web service with many customers willing to pay for its use, but how can you ensure that only the paying customers access it? Read more »

Master simple forms authentication in .NET

Using forms authentication, you can quickly build a simple, secure Web app. This walk-through shows you how to apply the strategy in your apps. Read more »

Authenticate clients and e-transactions with SSL certificate authority

Secure Sockets Layer technology ensures that transactions are encrypted and safe from outside influences. Get the basics of setting up SSL Certificates of Authentication. Read more »

Improving the mobile Web user experience

Traditionally our experience with the mobile Web was pretty terrible, but the good news is that this is starting to change, at least according to Oliver Weidlich, usability specialist at Ideal Interfaces. Read more »

Safe browser an oxymoron?

In November 2003, the CERT Coordination Center first advised Web users to consider using a Web browser other than Microsoft Internet Explorer. Read more »

Video (2)

SCO's alive! -- Club Builder

SCO is back from the dead with $100 million in funding, Bruce Schneier explains how infinite number theory relates to security and Dr Dan arrives to offer some Wii tips. Read more »

See how iPhone exploit works

A vulnerability has been discovered in the Safari browser of the iPhone, and this video is a brief demonstration of how it works. More details are set to be announced at this year's Black Hat security conference. Read more »

Blog (12)

The 2008 Trends and Threats to Internet security

Lana Kovacevic [blogs:webanatomy] -- I recently came across the IBM Internet Security Systems X-Force 2008 Mid-Year Trend Statistics report, which outlines issues affecting internet security, including application vulnerabilities, phishing, malware and spam. Read more »

Get more out of Safari with Debug mode

Brendon Chase [blogs:codemonkeybusiness] -- Safari's debug mode can open up a few nice features like a JavaScript consol and mask Safari as Internet Explorer. Read more »

AJAX applications and security

Lana Kovacevic [blogs:webanatomy] -- Douglas Crockford, the creator of JSON, gave a talk entitled "AJAX Security" at the recent Web Directions South conference. In this talk, Crockford discussed some of the security concerns with AJAX applications and what can be done to address them. Read more »

Google's browser ported to Mac and Linux

Brendon Chase [blogs:codemonkeybusiness] -- While Google work on an official port of the Chrome browser another company has ported the browser for Mac and Linux users to try for free. Read more »

Are your Web apps ready for the next-gen browser war?

Brendon Chase [blogs:codemonkeybusiness] -- Webkit, Firefox, and Internet Explorer are all scheduled to update their browsers in 2008. Are you ready for Web dev test fest 08? Read more »

Firefox 3 add-ons to make you a better Web developer

Brendon Chase [blogs:codemonkeybusiness] -- Firefox might be a fast browser but it's extensions can transform it into a powerful development tool for Web developers and designers. Here are 10 of the best to get you started. Read more »

Google decides to dominate javascript libraries

Chris Duckett [blogs:betaliving] -- With each passing day Google begins to look more and more like a Trapper Keeper. The latest move for the Web behemoth is to store commonly used javascript libraries with Google AJAX Libraries API. Read more »

Salesforce's new AIR toolkit

Staff [blogs:syslog] -- Following the announcement that Salesforce will provide a free toolkit for Adobe Flex and AIR development on its Force.com platform, I spoke to the company’s Doug Farber, the Vice President of Operations, Asia Pacific about its functionality and other issues surrounding the toolkit. Read more »

Internet Exploder

David McAmis [blogs:theneteffect] -- Most developers knew this day would come-- a new version of Internet Explorer comes around and suddenly, the web application you have spent months crafting falls into a heap. No wonder people call it "Internet Exploder". Read more »

QuickTime and Firefox combine for insecurity

Nick Gibson [blogs:byteclub] -- A vulnerability in Apple Software's QuickTime media player can be exploited to execute remote javascript code, or by tapping into Firefox's chrome engine can execute remote code of any kind. Read more »

Log in


Sign up | Forgot your password?

  • Staff XP stays on life support for longer

    This week's Roundup looks at Microsoft's decision to extend the life of Windows XP, the release of Microsoft Surface SDK, Firefox's new Geode plug-in, Yahoo's new tool -- Smush It and more. Read more »

    -- posted by Staff

  • Chris Duckett The good and truly awful celluloid depictions of computers

    Ever wonder why your lawyer uncle leaves the room whenever you turn over to Boston Legal? Or why your forensic science cousin can't stand crime drama? You know the answer: it’s the horrid trivialisation and dumbing down of an occupation to make it appear entertaining. Sometimes it is so unbelievable that it actually hurts and yelling at the screen is the only outlet. Read more »

    -- posted by Chris Duckett

  • Brendon Chase Apple's iPhone engineers to tour Sydney, Melbourne

    Aussie developers will be able to get up close and personal with some of the iPhone engineers in November to learn how to build applications for the platform. Read more »

    -- posted by Brendon Chase

What's on?