Facebook Open to Comments on Proposed Privacy Policy Changes

Facebook today announced proposed changes to its privacy policy that may better explain how it uses cookies and how long it retains your data, which is: “as long as necessary.” In addition, it wants the option to use your data for advertising on third-party Web sites. In a message called “Enhanci...

Online Dating Sites Getting Around With Customers Data

Just in time for Valentine’s Day, the privacy watchdogs over at the Electronic Frontier Foundation have put together a guide for those tempted to dance the algorithm electric. Their findings: online dating services may be getting around with your personal data. Leading online dating sites hold on...

Hawaii Bill Would Require Internet Data Retention For Two Years

A Hawaiian legislator has introduced a broadly worded data-retention bill that require ISPs and other service providers to retain their customers’ Internet activity records for at least two years. The bill, introduced by state Rep. John Mizuno, does not have any provisions for exclusions or priva...

[SECURITY] [DSA 2389-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2389-1 [email protected] http://www.debian.org/security/ Dann Frazier January 15, 2012 http://www.debian.org/security/faq -...

Barracuda Backup v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Backup v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201109-650 Release Date: ============= 2011-10-03 Vulnerability Laboratory ID VL-ID:...

bugzilla -- multiple vulnerabilities

A Bugzilla Security Advisory reports: The following security issues have been discovered in Bugzilla: Internet Explorer 8 and older, and Safari before 5.0.6 do content sniffing when viewing a patch in "Raw Unified" mode, which could trigger a cross-site scripting attack due to the execution of...

House Committee Passes Bill to Force ISPs to Retain User Data For 12 Months

A controversial bill that would force ISPs to retain records for up to 12 months that would allow them to identify users by IP address has cleared a key hurdle and passed the House Judiciary Committee by a wide margin, setting it up for passage by the full House. The bill was introduced with the...

Secret iPhone Feature Tracks Owners' Whereabouts

Security researchers have discovered a hidden iPhone feature that secretly tracks and saves the meanderings of the phone – and presumably its owner. The tracking feature was described in a presentation at the Where 2.0 Conference in San Francisco on Wednesday. According to the researchers, Pete...

Taiwan Struggles To Combat Attacks From China

Cyber crime, online fraud and copyright infringement are growing rapidly in Taiwan as law enforcement officials, law makers and the courts struggle to stay abreast of the problem, according to a local prosecutor says. In a Webcast presented to students and faculty at Harvard’s Berkman Center for...

Sightseeing Firm Overlooks Security, 110k Credit Card Numbers Stolen

CitySights owner Twin America says the credit card details of 110,000 customers were stolen in a Web based attack and suggests it wasn’t following Payment Card Industry guidelines for storing card data. The parent company of the CitySights sightseeing tours company, Twin America LLC, said in a...

Dutch Teens Arrested for Cyberattacks on Mastercard and Visa

A Dutch hacker collective called Revspace aims to "re-educate" Dutch teens suspected of cyberattacks against Mastercard, Visa, and the Dutch National Prosecutors Office, transforming them into "ethical hackers." Last week, Dutch police arrested a 16-year-old boy for participating in web attacks...

Hacking Tool Used By Anonymous Could Reveal Users Identity

A new study finds that a tool used to carry out distributed denial of service DDoS attacks on behalf of whistle blower Web site Wikileaks may, itself, leak the identity of those running the software. Researchers from the University of Twente, Netherlands, looked at the Low Orbit Ion Cannon LOIC, ...

Google Overhauls Privacy Policy

Google is planning to overhaul its main privacy policy in an effort to make the document more readable and usable for normal people. In addition, Google also is eliminating privacy policies for some of its individual products and services, which it deemed redundant. The shift by Google is a prett...

Arbitrary file deletion

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...

CVE-2010-1207

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...

В Швеции появится первый в мире пиратский провайдер

Пиратская партия Швеции станет первым в мире "пиратским" интернет-провайдером, пишет TorentFreak. Партнером Пиратской партии по организации доступа пользователей в Сеть станет провайдер ViaEuropa. Предполагается, что новая компания PirateISP, во главе которой находится член Пиратской партии Густа...

Google Cloud Print: Thinking Through the Security, Privacy Implications

Google’s plans to introduce a Cloud Print service that’s already being hailed as “printer voodoo” because it lets users print to any printer anywhere in the world, even from mobile phones. However, there are some privacy and security implications that need to be fleshed out before end users rush ...

Oracle Siebel Loyalty 8.1 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ============================================================ Oracle Siebel Loyalty 8.1 Cross Site Scripting Vulnerability ============================================================...

Oracle Siebel Loyalty 8.1 Cross Site Scripting

-------------------------------------------------------------------- Exploit Title: Oracle Siebel Loyalty 8.1 XSS Vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://bit.ly/bZ7JdV Version: 8.1 CVE : NA --------------------------------------------------- "Oracle Siebel...

CVE-2009-0518

CVE-2009-0518 describes a vulnerability where the VirtualCenter Server password may be retained in the memory of VI Client on VMware products. Affected: VI Client, VirtualCenter Server in VMware VirtualCenter prior to 2.5 Update 4, ESXi 3.5 prior to Update 4, and ESX 3.5 prior to Update 4. Impact...