Senators Propose Bill Of Rights To Protect Personal Information Online

Senators John Kerry D-Mass. and John McCain R-Ariz. don’t agree on much in the policy arena, except when it comes to protecting online privacy. The incongruous couple are political bedfellows on a piece of legislation introduced yesterday called The Commercial Privacy Bill of Rights Act of 2011...

Indian Revolution : Lets know about Anna Hazare !

Indian Revolution : Lets know about Anna Hazare ! "The dream of India as a strong nation will not be realised without self-reliant, self-sufficient villages, this can be achieved only through social commitment & involvement of the common man." - Anna Hazare 1. Who is Anna Hazare? Started his...

Lolz ! I've won three million Euros from Bill Gates !

Excuse me for typing breathlessly, faithful Naked Security reader, but I have some incredible news to share. I have just been informed that I have won three million Euros from none other than the Bill Gates Foundation! I had no idea that the Bill and Melinda Gates Foundation, which normally fight...

Canada Introduces Bill C-28 to Combat Spam with Hefty Fines

Spam is arguably the most irritating aspect of the internet and email for people globally. However, there is hope in Canada for those who have been targeted by spammers. A new law, Bill C-28, aims to facilitate government efforts in prosecuting and fining individuals and companies guilty of sendi...

Indian Cyber Army Hacks 375 Pakistani Websites Amid Cyber War

The cyber war between Pakistani and Indian hackers is intensifying. A group called the Indian Cyber Army ICA has claimed access to scripts from more than 375 Pakistani websites, including those belonging to the government, high-level organizations, and notable individuals. Hackers from both...

California Bill Ups the Ante on Breach Notifications

The new bill requires that the company include the type of personal information exposed in the breach; the date or estimated date of the breach; a general description of the incident itself; and toll-free numbers and addresses for credit reporting agencies if the breach included social security...

This Week in Security: Patchapalooza, iOS 4 and the Irrelevance of Full Disclosure

This week was one of the ones that my colleague Ryan Naraine often refers to as a Patchapalooza, with each day bringing a new set of fixes for Firefox, Opera, the iPhone or some other device or application. And it didn’t even include Microsoft or Adobe. Go figure. The week also included the...

TitanFtp Server 8.10.1125 Arbitrary File Download / Delete

Accensus Security Advisory L-01 TitanFtp Server Arbitrary File Download/Delete Details ============= Product: TitanFTPd Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...

TitanFtp Server File Disclosure

Accensus Security Advisory L-02 TitanFtp Server Arbitrary File Disclosure Details ============= Product: TitanFTP Server Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...

Consumer Groups Say Proposed Privacy Bill is Flawed

A long-awaited draft of a Congressional bill would extend privacy protections both on the Internet and off line, but privacy advocates said the bill did not go far enough in protecting consumers. Read the full article New York Times...

House Passes Cybersecurity Bill

The House today overwhelmingly passed a bill aimed at building up the United States’ cybersecurity army and expertise, amid growing alarm over the country’s vulnerability online. Read the full story New York Times...

Alex Howard on Compliance, Breach Notification and the Rockefeller Bill

Dennis Fisher talks with Alex Howard, associate editor of Searchcompliance.com, about the burden compliance places on security staffs, the growing tide of breach notification laws and the misunderstandings surrounding the Rockefeller bill and the Internet kill switch. Download Subscribe to the...

My Mini Bill (orderid) Remote SQL Injection Vulnerability

No description provided by source. My MiniBill myorders.php Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://cupidsystems.com ------ More info:http://cupidsystems.com/products/myminibill/index.php -------- Note: First You must register in the site...

My Mini Bill (orderid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= My Mini Bill orderid Remote SQL Injection Vulnerability ========================================================= My MiniBill myorders.php Remote SQL Injection Founder: ThE g0bL!N...

New ICE bill would overhaul federal cybersecurity

A bill set to be introduced in the Senate on Tuesday would make wholesale changes to the way that the federal government handles information security, including the establishment of a Nation Officer for Cyberspace, which would sit right below the president. According to a story on...

SA-CONTRIB-2009-004 - Notify - Privilege escalation

A user triggering the cron processing of the Notify module may end up getting logged in as another user when the Notify operations do not complete succesfully. Versions Affected Versions of Notify for Drupal 5.x prior to 5.x-1.2 Drupal core is not affected. If you do not use the Notify module,...

Unfixed XSS vulnerability at www.billgatesisdead.com

Security researcher Fugitif, has submitted on 18/10/2007 a cross-site-scripting XSS vulnerability affecting www.billgatesisdead.com, which at the time of submission ranked 851113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

CVE-2006-6023

Affected software: Bloo 1.0, in phoo.base.php. Vulnerability: PHP remote file inclusion via a URL provided to the descriptorFileList parameter, allowing remote code execution; root cause noted as descriptorFileList being used in a function definition. Impact: remote arbitrary PHP code execution (...

CentOS 3 / 4 : sysreport (CESA-2005:598)

An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a system's hardware and configuration. The information ca...

sysreport security update

CentOS Errata and Security Advisory CESA-2005:598 An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a...