JSONP Callback Attack

Overview Affected versions of this package are vulnerable to JSONP Callback Attack. JSONP JSON with padding is a method used to request data from a server residing in a different domain than the client. Any url could perform JSONP requests, allowing full access to the browser and the JavaScript...

September 2014 Yahoo Transparency Report

There was less clamor from governments and law enforcement around the world for data collected and stored by Yahoo, but nonetheless, the technology giant still fielded more than 18,000 data requests over the first six months of the year. Yahoo yesterday released its third Transparency Report, and...

Microsoft Calls for NSA Surveillance Reforms

On the anniversary of the first news reports on NSA surveillance, Microsoft general counsel Brad Smith seized the opportunity to draw a line in the sand with the U.S. government. Smith challenged the government curtail surveillance because it’s hurting business and impaling privacy and civil...

After a Turbulent Year, Still Some Optimism in the Security World

SAN FRANCISCO–Despite all of the revelations and accusations and recriminations in the security industry in the last year, Microsoft’s Scott Charney said he is still optimistic about the industry’s ability to defend users. However, that optimism is tempered by concern about the threats those user...

Verizon Releases First Transparency Report, Says Government Requests INcreasing

After months of public calls from privacy advocates and security experts, Verizon on Wednesday released its first transparency report, revealing that it received more than 164,000 subpoenas and between 1,000 and 2,000 National Security Letters in 2013. The report, which covers Verizon’s landline,...

AT&T, Verizon Announce Transparency Reports in 2014

One by one, the telecommunications giants at the heart of the NSA surveillance scandal are relenting to shareholder pressure and public demands for them to publish reports on government requests for user data. On Friday Verizon and AT&T announced their intent to begin producing transparency repor...

kernel: ansi_cprng: off by one error in non-block size request

Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the...

DEBIAN-CVE-2013-4345

Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the...

Yahoo Transparency Report Reveals More Than 12K U.S. Government Data Requests

Following the lead of Google, Twitter and other major Internet companies, Yahoo has issued its first transparency report, revealing that it received more than 12,000 requests for user data from the U.S. government in the first half of 2013. The company disclosed user content in nearly a third of...

FISA Court renews NSA surveillance programs exposed by Snowden

The secret Foreign Intelligence Surveillance Court FISA gave the green light to the Obama administration by renewing the government's authority Friday to continue the collection of millions of Americans' telephone records. The order by the Foreign Intelligence Surveillance Court has been in place...

Microsoft Asks AG to Let It Publish Detailed Data Request Information

Microsoft, responding to allegations that the company has helped the NSA circumvent encryption in Skype and Outlook.com and provided direct access to data from those and other services, says that it does none of those things and is petitioning the government for permission to publish more...

Google, Microsoft Seek Help in Lifting FISA Gag Order

Google and Microsoft have locked arms with a number of civil liberties advocates in filing a brief with the secret Foreign Intelligence Surveillance Court hoping to lift a gag order preventing the two tech giants from releasing information on their role in the NSA’s surveillance activities. To...

Apple releases new details on National Security Requests

Apple revealed on monday that it received between 4,000 and 5,000 data requests in six months from U.S. law enforcement for user information and affected accounts. Apple said the most common forms of requests involved investigating robberies and other crimes. Period between December 1, 2012 and M...

Apple Fields Data Requests for 10,000 Users Accounts

Since December, U.S. law enforcement agencies have made between 4,000 and 5,000 requests for customer data from Apple on as many 10,000 user accounts, the company said in a statement released last night. Apple said in the wake of allegations that it participates in feeding the U.S. government...

Apple releases new details on National Security Requests

Apple revealed on monday that it received between 4,000 and 5,000 data requests in six months from U.S. law enforcement for user information and affected accounts. Apple said the most common forms of requests involved investigating robberies and other crimes. Period between December 1, 2012 and M...

Twitter Transparency Report Shows Huge Interest From U.S. Law Enforcement

Privacy advocates and security experts often warn users about the consequences of handing over so much of their personal data to Web sites or social networks, saying that they never know how it’s going to be used or sold. But it’s rare that users ever see examples of that in action. Twitter is...

Google Report Shows It Complied With 93% of U.S. Law Enforcement Data Requests

Google complied with 93 percent of the requests for user data that it received from U.S. law enforcement agencies through the first six months of this year. In the latest update to its Transparency Report, Google for the first time not only disclosed the number of requests that it receives, but...

PT-2007-3717 · Unknown · Script.Aculo.Us

Name of the Vulnerable Software and Affected Versions: Script.aculo.us affected versions not specified Description: The issue allows remote attackers to obtain data through a web page that retrieves the data using JavaScript Object Notation JSON without protection. This is achieved by capturing t...