100 Million Member LinkedIn Drives Into Privacy Ditch, Hits Reverse

LinkedIn is responding to user complaints about its new social advertising model, which asked its 100 million users to ‘opt-out’ if they didn’t want advertisers to pair their message with content – including photographs – from users’ profiles. In a blog post on Thursday, Ryan Roslansky, the...

Report: Facebook To Offer Bounties For Bugs

Social networking giant Facebook will soon begin paying security researchers for information on vulnerabilities in its platform, according to a report from the Hack in the Box security conference in Amsterdam. Facebook’s Chief Security Officer Joe Sullivan told Softpedia that the company would so...

Hacking Demo On Facebook Photos Leads To Arrest and Privacy Questions

A public demonstration of a weakness in Facebook’s account security has attracted the attention of law enforcement in Australia and raised questions about the ability of social networks to protect user data. Security researcher Christian Heinrich conducted a brute force attack against the Faceboo...

Apple, Google to Testify at Smart Phone Tracking Hearing

After a bruising series of revelations about location tracking features on mobile devices running their operating systems, Apple and Google will send executives to Capitol Hill to talk to the Senate Judiciary Subcommittee on Privacy, Technology and the Law about cell phone privacy. Guy L. “Bud”...

Bin Laden's Hideout On Google The Whole Time?

UPDATED: Osama bin Laden may have been the U.S.’s most wanted fugitive for the last decade, but his comfortable mansion on the outskirts of Islamabad, Pakistan was there for all to see – providing they had Google Earth and knew where to look. In the wake of U.S. President Barack Obama’s surprise...

Progress Crawls in Securing Critical Infrastructure

The US government is progressing at a snail’s pace in securing critical American infrastructure according to a Center for Strategic and International Studies CSIS commission on cybersecurity examining the first two years of the 44th presidency. Two years ago the CSIS published Securing Cyberspace...

Obama wants Internet ID for Every American !!

Everyone in the UK will already be familiar with this story with the New Labour's plan for biometric identity cards. That plan, which costs billions of pounds and was later shelved by the new coalition government, will now probably never happen in the UK. Now US President Barak Obama wants to...

Experts Warn of Growing Data Theft as Government Lags in Cybersecurity

It will take several more years for the government to fully install high-tech systems to block computer intrusions. This prolonged timeline enables criminals to become more adept at stealing sensitive data, experts say. As the Department of Homeland Security DHS methodically works to secure the...

Google Cloud Print: Thinking Through the Security, Privacy Implications

Google’s plans to introduce a Cloud Print service that’s already being hailed as “printer voodoo” because it lets users print to any printer anywhere in the world, even from mobile phones. However, there are some privacy and security implications that need to be fleshed out before end users rush ...

Debian DSA-2022-1 : mediawiki - several vulnerabilities

Several vulnerabilities have been discovered in mediawiki, a web-based wiki engine. The following issues have been identified : - Insufficient input sanitization in the CSS validation code allows editors to display external images in wiki pages. This can be a privacy concern on public wikis as it...

Why Privacy Concerns Are Ruining Facebook

Facebook was built as a powerful social connector, allowing users to befriend others with similar interests, locations, schools, and more. But as privacy concerns mount and users demand more protection, the social networking site’s philosophy has started to go down the toilet. Now that Facebook i...

Privacy Concerns Raised About Smart Grids

Technologists already are worried about the security implications of linking nearly all elements of the U.S. power grid to the public Internet. Now, privacy experts are warning that the so-called “smart grid” efforts could usher in a new class of concerns, as utilities begin collecting more...

VB 2009: Stefan Tanase on Web 2.0 Threats and Anti-Social Networking

Digital Underground podcast with Dennis Fisher Dennis Fisher talks with Stefan Tanase, senior security researcher at Kaspersky Lab, live from Virus Bulletin 2009 about the threats on social networking sites and the privacy and security concerns presented by Web 2.0 technologies. Here are the slid...

The Importance of Internet Identity and Anonymity

Last year, Craig Mundie issued a call to arms for a more “trustworthy Internet” — not that Microsoft has been entirely successful at implementing its arguably more humble Trustworthy Computing initiative. But let’s not let the computing industry’s failure to bring forward operating systems, web...

Charney plugs Microsoft end-to-end trust at RSA Conference

Scott Charney used his keynote speech at the RSA Conference on Tuesday to talk up a variety of hardware and software-based technologies meant to infuse the Internet with more trust. Charney, the head of Microsoft’s Trustworthy Computing team, talked about the need for greater adoption of TPMs, co...

WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible

SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...

libspf2-parsing.txt

Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...

H4-CREW-000003.txt

H4-CREW-000003 Advirosy: Superclick XSS via popup.php Software: Superclick servers on the internet Discovered by: h4 Crew severety: moderates investigations by the H4-Crew Impacts. 1cookie theif 2 hijacking XSS proxy xssproxy.sourceforge.net Discussion ========= H4-CREW-000003 Superclick Cross-Si...

[Full-Disclosure] unzoo 4.4 directory travels

ddaa sseeccuurriittyy ccoonnssuullttaannttee ''''ddoouubblleess'''' aauuddiitttteedd mmaannyy mmoorree aarrcchhiivveess ssiinnssee llaasstt ttiimmee!! uunnzzoooo 44..44 hhaavvee ddiirreeccttoorryy ttrraavveerrssaall bbuugg ttoo!! bbwwaahhaahhaahhaahh!! ggiivvee mmee mmaannyy sseeccuurriittyy jjoo...

SMTP settings

This plugin sets various SMTP parameters because several checks need to use a third-party host/domain name in order to work properly. The checks that rely on this are SMTP or DNS relay checks. By default, 'example.edu' is being used for this purpose. However, under some circumstances, this may le...