OAuth Administration screen is visible to anonymous users

If anonymous user access is enabled under "Global Permission", user can access to "OAuth Administration" page without the need to log-in. Here is the URL to the page: /plugins/servlet/oauth/view-consumer-info This page display Confluence administrators menu on the sidebar and other information su...

OAuth Administration screen is visible to anonymous users

If anonymous user access is enabled under "Global Permission", user can access to "OAuth Administration" page without the need to log-in. Here is the URL to the page: /plugins/servlet/oauth/view-consumer-info This page display Confluence administrators menu on the sidebar and other information su...

OAuth Administration screen is visible to anonymous users

If anonymous user access is enabled under "Global Permission", user can access to "OAuth Administration" page without the need to log-in. Here is the URL to the page: /plugins/servlet/oauth/view-consumer-info This page display Confluence administrators menu on the sidebar and other information su...

Fedora Update for kactivities FEDORA-2013-13112

Check for the Version of kactivities OpenVAS Vulnerability Test Fedora Update for kactivities FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 17 Update: kactivities-4.10.5-1.fc17

API for using and interacting with Activities as a consumer, application adding information to them or as an activity manager...

Privacy Advocates File Complaint Over Jay-Z's 'MCHG' App,

Privacy advocates called out rapper/entrepreneur Jay-Z this week, filing a complaint with the Federal Trade Commission over an app he released earlier this month that many critics feel goes overboard in the amount of the information it requests from users. Citing “deceptive business practices,”...

Dennis Fisher Talks With Chris Soghoian on NSA, PRISM and Privacy

Dennis Fisher talks with Chris Soghoian of the ACLU about the NSA surveillance leaks, the PRISM data collection program, the lack of good privacy options for consumers and his upcoming talk at DEF CON on government hacking operations. Download: digitalunderground118...

Android Vulnerability Bypasses App's Digital Signature

A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the app’s cryptographic signature—an action that would normally set off a red flag that something is amiss. Researchers at startup...

Fedora Update for kactivities FEDORA-2013-10130

Check for the Version of kactivities OpenVAS Vulnerability Test Fedora Update for kactivities FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 18 Update: kactivities-4.10.4-1.fc18

API for using and interacting with Activities as a consumer, application adding information to them or as an activity manager...

[SECURITY] Fedora 19 Update: kactivities-4.10.4-1.fc19

API for using and interacting with Activities as a consumer, application adding information to them or as an activity manager...

Java: A Fix it for when you cannot let go

There is much to say about the use of Java in both consumer and enterprise environments. Like any other platforms, it has both devoted supporters and fervent critics. But for most, Java is a requirement, a means to an end. In the past few years, Java as a platform has been the target of numerous...

Donald Trump is Suing a Brooklyn man for Cyber squatting

J. Taikwok Yung is 33, lives with his mom in Brooklyn, and bought domain names that criticize billionaire Donald Trump and cybersquatting him. Cybersquatting is a legitimate crime that's defined by the Anticybersquatting Consumer Protection Act. "Cybersquatting also known as domain squatting,...

California Considers Pushing Data Disclosure Envelope Again

California, which set the standard for data breach notifications nationwide, is again seeking to set a precedent by becoming the first state in the nation to require companies upon request disclose to California consumers the data they’ve collected and to whom it was shared during the past year...

Donald Trump is Suing a Brooklyn man for Cyber squatting

J. Taikwok Yung is 33, lives with his mom in Brooklyn, and bought domain names that criticize billionaire Donald Trump and cybersquatting him. Cybersquatting is a legitimate crime that’s defined by the Anticybersquatting Consumer Protection Act. "Cybersquatting also known as domain squatting,...

Twitter OAuth API Keys Leaked

The OAuth keys and secrets that official Twitter applications use to access users’ Twitter accounts have been leaked in a post to Github this morning. The consumer keys and secrets, which function similarly to a username and password, were posted for Twitter for iPhone, Android, iPad, Mac, Window...

Important: Red Hat Security Advisory: Subscription Asset Manager 1.2 update

Red Hat Subscription Asset Manager 1.2, which fixes several security issues, multiple bugs, and adds various enhancements, is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

Katello: lack of authorization in proxies_controller.rb

proxiescontroller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system...

California Attorney General Fighting for Mobile Privacy Rights

UPDATE – In an attempt to reign in the tendency of indifference toward consumer privacy among mobile application developers, California Attorney General Kamala D. Harris today made public a list of guidelines regulating the ways in which mobile application developers and technology companies hand...

Design/Logic Flaw

proxiescontroller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system...