Software Freedom Law Center Addresses Erroneous Interpretation of Sarbanes-Oxley as Applied to the General Public License Tuesday the 7th, March 2006 at 05:01 PM (EST) Sharon Smith - 0 Talkback(s) with 712 Reads NEW YORK, March 7, 2006 – The Software Freedom Law Center (SFLC), provider of pro-bono legal services to protect and advance Free and Open Source Software (FOSS), today announced it has published a white paper on its position regarding alleged General Public License (GPL) violations in relation to the Sarbanes-Oxley Act (SOX). The paper is titled “Sarbanes-Oxley and the GPL: No Special Risk”
|
MailArchiva - Open Source Email Archiving Server Released Wednesday the 25th, January 2006 at 02:26 PM (EST) Anonymous Reader - 0 Talkback(s) with 1250 Reads There was much hype around the growth of the email archiving market last year. For example, the IDC predicted that 2005’s email archiving application revenue reached US$310 million worldwide. Good news! The open source community has just released MailArchiva, a competitive email archiving product that integrates directly with Microsoft Exchange.
|
Squirrelmail Remote and Local File Inclusion and XSS Vulnerabilities Sunday the 6th, February 2005 at 11:14 AM (EST) Accidutzu - 0 Talkback(s) with 1406 Reads SquirrelMail 1.4.4 has been released to resolve a number of security issues. It is strongly recommended that all running
SquirrelMail prior to 1.4.4 upgrade to the latest release.
|
Installing Nessus 2.0 on SuSE 9.0 Pro with KDE 3.1 Monday the 19th, April 2004 at 05:00 AM (EDT) Lew Newlin - 0 Talkback(s) with 3464 Reads Simple how-to guide for installing the Nessus vulnerability scanner, server daemon, and client on SuSE Linux.
|
Multiple Cross-Site Scripting Vulnerabilities In cPanel Wednesday the 7th, April 2004 at 07:07 AM (EDT) Accidutzu - 0 Talkback(s) with 1318 Reads cPanel suffers from an extensive amount of XSS vulnerabilities in almost every variable returned to the user's browser.
|
Multiple Vulnerabilities in XMB Board Thursday the 26th, February 2004 at 05:24 AM (EST) Accidutzu - 0 Talkback(s) with 1040 Reads Multiple vulnerabilities in XMB have been found, allowing attackers to exploit SQL injection vulnerabilities and cross site scripting issues.
|
Yabb SE SQL Injection Vulnerability Monday the 26th, January 2004 at 04:42 PM (EST) Accidutzu - 0 Talkback(s) with 1438 Reads YaBB SE is a PHP/MySQL port of a older forum software based on Perl. An SQL injection vulnerability allows a remote attacker to execute malicious SQL statements on the database remotely.
|
Flaws in arguments leave the uninformed? well, uninformed. Thursday the 15th, January 2004 at 03:39 AM (EST) Agent Orange - 0 Talkback(s) with 1089 Reads Normally, I respect the news coming from The Inquirer, because Mike Magee tends to have very good access to a lot of people. I have to take issue with the report Software Vulnerabilities Still Dog Operating Systems though, because the report makes inappropriate conclusions based on a flawed measurement methodology. It does not take a rocket scientist to understand what I am about to say, so I hope the message is clear to all.
The article, which appears to have good intentions, is nonetheless based upon a false premise. That premise is that the number of vulnerabilities reported to an organization is equivalent to the concept of being trustworthy. The fact is that the author has made an extrapolation to a conclusion that simply is not possible in the light of logic. While I applaud the effort to expose vulnerabilities in any system so that they are corrected, I would say that the author is incorrect in assuming that the sheer number of reported vulnerabilities has any direct correlation to the inherent security of the underlying Operating System itself. This is known as assuming causality where no direct correlation can be proven.
|
Vexira Antivirus On Linux Protects Tel Aviv University From Viruses Thursday the 15th, January 2004 at 03:36 AM (EST) Anonymous Reader - 0 Talkback(s) with 1233 Reads Vexira Antivirus for Linux Protects Tel Aviv University From Email Borne Viruses
The largest Jewish university in the world selects Vexira Antivirus as best of breed in enterprise-class email virus scanning on Linux
|
IT Security E-Business and State LANs Tuesday the 30th, September 2003 at 10:09 AM (EDT) zeekpaks - 1 Talkback(s) with 1298 Reads Are Mono culture operating systems the source for recent worms and viruses, or should blame be cast upon the ignorant or lazy end users who don't secure their home desktops? It was recently reported that an on-line automobile dealership left its patron's personal information -- including completed credit applications -- exposed on the site to whomever felt inclined to see it. And now, several US states are attempting to pass a law that would require all Internet purchases to incur sales tax, where before there was none.
|