News (52)

OpenID at risk due to DNS flaw, warns researcher

A fundamental issue affects the OpenID authentication system, due to its reliance on the Domain Name System, a Sun identity-technology specialist has warned. Read more »

Kaminsky details DNS flaw

Security researcher Dan Kaminsky has offered more details about a fundamental flaw in the Domain Name System and the extent of the vulnerability. Read more »

DNS disaster: first attacks reported

The first attacks that are likely to have stemmed from a serious Domain Name System flaw have been reported. Read more »

Microsoft fixes DNS flaw but warns of Word attacks

Microsoft is warning that a Word flaw is being used for targeted attacks, and has also issued four 'important' patches, including one for a potentially serious DNS flaw in the latest Patch Tuesday bulletin. Read more »

Massive, coordinated DNS patch released

A security researcher has responsibly disclosed a fundamental flaw within the Domain Name System (DNS), the addressing scheme behind the common names used on the Internet. Read more »

Google pleads with Viacom for YouTube privacy

Viacom is getting its hands on some of YouTube's sensitive user data as a result of the copyright-infringement lawsuit the conglomerate filed a year ago. Read more »

Storm worming its way through love

After a hiatus, the gang behind the Storm worm is attempting to exploit people's curiosity about a fictional love interest to tempt users into downloading the malware, according to security training organisation the Sans Institute. Read more »

20,000 Web pages help exploit 'patched' Flash flaw

A possible zero day exploit has been discovered for a flaw in Flash thought to have been patched by Adobe a month ago. Read more »

Microsoft: We're not blocking YouTube

Users of Microsoft's instant-messaging service found themselves unable to share links to YouTube videos on Friday evening and Saturday morning, sparking brief worries of a possible Microsoft-led effort to block access to the Google-owned video-sharing site Read more »

ICANN: IPv4 will run out by 2011

Big businesses need to start planning now to handle changes that will take place when a new version of the Internet's fundamental routing protocol becomes ubiquitous, or risk losing online customers, according to the Internet Corporation for Assigned Names and Numbers (ICANN). Read more »

Features (72)

Scripting out DHCP reservations in Windows Server 2008 with Netsh

Scripting out DHCP reservations can save a lot of time for large pools of reservations. See how the Windows Server 2008 Netsh tool can help out in this regard. Read more »

Remote debugging with Visual Studio 2008

If you often have to track down bugs in an application installed on another machine, you should check out Microsoft's remote debugger tool with Visual Studio 2008. This article takes a look at its set-up and usage. Read more »

Enable DNS server role on Windows Server 2008 core

The core installation allows administrators to run a limited selection of roles compared to the full installation counterparts within the same editions. One of the roles that is permitted on core edition is the DNS server. Read more »

What is cross-site scripting?

Cross-site scripting, also known as "XSS," is a class of security exploit that has gotten a fair bit of attention in the last few years. This article explains what it is and where the dangers lie. Read more »

Use OpenNTPD for time synchronisation

Traditionally, the time synchronisation application used on Linux systems has been ntpd (network time protocol daemon). However, for quite some time now, the developers behind OpenSSH have created a secure, lean, and easy to configure NTP daemon called OpenNTPD. Read more »

Specify who can log in via OpenSSH

The OpenSSH suite of tools, developed by the OpenBSD Project, includes popular programs that serve many uses. This popularity combined with ssh availability as both server and client on just about every OS makes it no wonder that ssh has been the target of common attacks. Read more »

Secure connections to PostgreSQL

The PostgreSQL database server is arguably one of the best SQL servers available, but it's not as easy for beginners to get a handle on it as with other SQL databases, such as MySQL. Read more »

Extend ASP.NET with HTTP modules

While HTTP modules have been a part of ASP.NET since its inception, I still encounter developers with no idea of their existence or usage. HTTP modules allow you to process incoming requests and outgoing responses to and from an ASP.NET application. Read more »

Set up user accounts quickly and securely

When you need to set up a user account to give a user shell access to the system, the only logical choice of login tool is OpenSSH. With SSH keys, all you need from the user is his SSH public key, and all he needs from you is the IP address or hostname with which to log in. Usually, this is sufficient. Read more »

10 tech skills you should develop during the next five years

If you want a job where you can train in a particular skill set and then never have to learn anything new, IT isn't the field for you. But if you like to be constantly learning new things and developing new skills, you're in the right business. In the late 80s, NetWare and IPX/SPX administration were the skills to have. Today, it's all about TCP/IP and the Internet. Read more »

Blog (1)

Quick Tip: Forwarding X11 to OS X

Chris Duckett [blogs:betaliving] -- Just because you are on a Mac doesn't mean you can't run your Linux applications. Here's how you can bring penguin power to your Mac. Read more »

Log in


Sign up | Forgot your password?

  • Staff Share a keyboard and mouse with Synergy

    Even in the era of virtualization, many IT pros (including myself) have a small army of computers sitting on, under, and around their desks. Read more »

    -- posted by Staff

  • Staff Android devs less than gruntled

    Yet more discouraging news on the Android front. Having hacked off its developer community by releasing updated SDKs to just a small group of chosen devs, Google has now given the brush-off to a petition that called for more to be given to the wider community. Read more »

    -- posted by Staff

  • Staff VMware shows how not to do it

    As a developer there will be a time when you ship a bug -- be it a stub that you left in, or a flaming, crashtastic segfault. The next time this happens and your bosses come baying for blood, point them in the direction of VMware, who this week gave the developer world a great example of how to ship a showstopper bug. Read more »

    -- posted by Staff

What's on?

  • Club Builder: Captain Obvious vs the Crackpots

    In the case of the bleeding obvious, IBM says open source needs good designers; a claim is made that China can activate your phone to snoop on you; and we take a look at the Defcon conference.