News (514)

Old code in Windows is security threat

Microsoft will more quickly retire old code in its Windows operating system and other software as a result of the company's four-month-old "trustworthy computing" initiative, the company's lead bug basher said in an interview. Read more »

Linux guru argues against security liability

Alan Cox, one of the leading Linux kernel developers, has told a House of Lords hearing that neither open- nor closed-source developers should be liable for the security of the code they write. Read more »

Microsoft fixes faulty security patch

Microsoft on Thursday in the United States issued a "hotfix" for a fault in a security patch designed to correct a flaw already being targeted by worms. Read more »

Microsoft's leaner approach to Vista security

Microsoft is talking up support for hardware-based security in Windows Vista, though only a sliver of the company's original plan will make it into the operating system. Read more »

Image flaw pierces PC security

Six vulnerabilities in a common code that handles an open-source image format could allow intruders to compromise computers running Linux and may allow attacks against Windows PCs as well as Macs running OS X. Read more »

Microsoft bug-checking tools promise fewer crashes

Microsoft is readying two tools to help hardware makers create more stable and secure Windows drivers, which should help reduce the number of crashes. Read more »

Linux keeps dodging hackers and viruses

Survey: Fewer than one in four Linux developers say they have been hacked and even fewer have been infected by viruses. Read more »

Microsoft releases 'critical' patches

Microsoft released a higher-than-usual number of monthly updates, more than half of which were given the software company's highest rating of "critical." Read more »

Microsoft finds more 'critical' flaws

Microsoft on Tuesday announced seven new security updates for Windows, including two that address "critical" vulnerabilities. Read more »

Aust open source body lets fly at SCO

A newly formed Australian free- and open-source software industry group is urging companies and individuals to ignore SCO's push to secure licence revenues from Linux users. Read more »

More Code, Secure News Results

Features (388)

Develop secure software at the application level

Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »

Develop applications that prevent intrusion

Designing secure applications requires developers to look beyond their own code. Accessing APIs or COM objects or establishing system privileges can result in security vulnerabilities that can be prevented. Read more »

CGI wrappers for Apache-based apps can boost security

CGI scripts represent a big potential security risk in Web development, but using CGI wrappers can help insulate your servers from attack. Here's an outline of how to create CGI wrappers to protect an Apache Web server. Read more »

Security through obscurity won't secure your code

Most applications use some form of security through obscurity, but you should avoid it when writing your apps. ZDNet Australia offers these tips on how to tighten up your code. Read more »

Follow these steps to secure your data layer

A secure data layer is essential for a truly secure application. Learn how to nurture a secure environment for the pivotal Data tier of your application with the correct tools. Read more »

Ten commandments for the security-conscious programmer

Here are the steps from Builder AU that you should take to keep hackers and other security threats at bay. Read more »

Tools for securing your XML documents

The W3C offers two specifications for securing your XML documents, XML Signature and XML Encryption. Find out which tools can help create secure XML documents that adhere to these standards. Read more »

How to build secure ASP.NET applications

ASP.NET provides several ways to protect your Web-based app from attack. Here's an overview of authentication, authorisation, and role-based security. Read more »

Secure SQL Server: Installing for security

Securing SQL Server is vital to the design of any database system. Learn how to install SQL securely, protect data, and ensure its validity. Read more »

Ask Chuck: ASP.NET best security practices

What best practices should you follow for an ASP.NET application? Our resident .NET expert Charles Sterling offers this quick tip. Read more »

More Code, Secure Features Results

Video (1)

Play!
It's not lovely code, it's an ugly monkey

At the AusCERT 2008 conference in the Gold Coast, ex-NSA staffer Brian Snow, told ZDNet.com.au that software can be secure -- but only if vendors overhaul their development processes. Read more »

Blog (23)

Google destroys Security Through Obscurity

Chris Duckett [blogs:betaliving] -- Google Labs' new Code Search makes it easier for hackers to find database username and password details by entering strings that are commonly used within configuration files. Read more »

The 2008 Trends and Threats to Internet security

Lana Kovacevic [blogs:webanatomy] -- I recently came across the IBM Internet Security Systems X-Force 2008 Mid-Year Trend Statistics report, which outlines issues affecting internet security, including application vulnerabilities, phishing, malware and spam. Read more »

Google to allow third party code in Gmail?

Brendon Chase [blogs:codemonkeybusiness] -- According to executives from the company, Google are preparing to open Gmail to developers outside the Googleplex labs. Read more »

We don't need an eBay for security holes

Nick Gibson [blogs:byteclub] -- It's been likened to an eBay for hackers -- new security site WabiSabiLabi is a market place for auctioning security vulnerabilities. Read more »

The future remains yesterday

Staff [blogs:syslog] -- Remember when MySQL was blazingly fast and cared little for SQL standards? When MySQL regarded a view as something nice from your window and a trigger was treated as a weaponry component? Those days are set to return with a MySQL fork called Drizzle. Read more »

The Portal of the Future

Lana Kovacevic [blogs:webanatomy] -- At this year's Gartner Application Development, Integration and Web Services Summit, I attended Gene Phifer talk: "Portal of the Future: What's Beyond Web 2.0?". Read more »

Firefox 3 add-ons to make you a better Web developer

Brendon Chase [blogs:codemonkeybusiness] -- Firefox might be a fast browser but it's extensions can transform it into a powerful development tool for Web developers and designers. Here are 10 of the best to get you started. Read more »

A new coat of varnish

Staff [blogs:syslog] -- This week featured plenty of coverage from the various conferences occurring around the country. All the while Builder's design gnomes were busy give the site a touch-up. Read more »

Lets Shindig!

Lana Kovacevic [blogs:webanatomy] -- At this year's Google Developer Day in Sydney, Dan Peterson and John Hjelmstad talked about Apache Shindig, an open source implementation of OpenSocial and gadgets. Read more »

Are your Web apps ready for the next-gen browser war?

Brendon Chase [blogs:codemonkeybusiness] -- Webkit, Firefox, and Internet Explorer are all scheduled to update their browsers in 2008. Are you ready for Web dev test fest 08? Read more »

More Code, Secure Blog Results

Log in


Sign up | Forgot your password?

Blogs

RSS feed

  • Staff Shadow chasing in browsers

    The punching and counterpunching continued in the ongoing web browser development bout. Each time one browser closes a feature gap, a new feature appears in one of the others -- how we ever put up with the years of browser stagnation, I'll never know. Read more »

    -- posted by Staff

  • Chris Duckett Safari gets Gears

    Since its release in May last year, Gears has supported only Internet Explorer and Firefox browsers. With the addition of Safari into the Gears fold, it closes the loop of major browsers to support Gears Read more »

    -- posted by Chris Duckett

  • Renai LeMay MyPerfect.com.au has potential

    Victorian Web start-up My Perfect has a strong story and rationale for why it will succeed. But it has to overcome some challenges and design flaws first. Read more »

    -- posted by Renai LeMay

What's on?