Refers to reporting security flaws to vendors and the general public. Normally, vulnerabilities are first reported to the software vendor and then revealed to the public after the vendor has published a patch to fix the problem. If the vendor does not develop a remedy after 30 to 60 days, the discovering party often makes the flaw public. See vulnerability and CERT.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2008 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Sprint unveils location-based 'geobrowsing' on eve of WiMax launch
- With the launch of its long-hyped WiMax service XOHM scheduled to debut in September in Baltimore, on Thursday Sprint announced a set of location-based personalization features that will enhance the user experience of WiMax subscribers by allowing them to, for example, quickly look up restaurants, check traffic and weather, and...
- Blog posts 2008-08-28
- Intel ships BIOS fix for Rutkowska's Black Hat flaw
- Intel has shipped a BIOS update with a fix for a privilege escalation vulnerability that was used by rootkit researcher Joanna Rutkowska to bluepill the Xen hypervisor. The vulnerability was discussed by Rutkowska at the Black Hat briefings earlier this month but details on the exploit were...
- Blog posts 2008-08-27
- Major security hole found in iPhone
- Major security hole found in iPhonewhose fault?Seems to me you're blaming Apple for bad coverage when you should be blaming O2. Didn't they give you some sort of trial period when you sign up to see how the coverage was in your area?The risk Me-Firsters takeEr, I mean early...
- Discussion threads 2008-08-27
- Who's Dumber: Bad Guys … Or Good Guys?
- Who's Dumber: Bad Guys … Or Good Guys?Bad guys don't need applauseJust money. So they'll modestly attempt to avoid receiving their due when they compromise systems. I wouldn't assume that not hearing about a success means the success has not occurred.Also, this statement is confusing:Now, we have the...
- Discussion threads 2008-08-27
- Major security hole found in iPhone
- Gizmodo has unearthed a security flaw in the iPhone OS and boy is it a doozy. According to the post it's simple to access a locked iPhone's address book, Mail, SMS, Contacts, and Safari. The vulnerability works like this on a password protected and locked iPhone: ...
- Blog posts 2008-08-27
- iPhone passcode lock rendered useless
- Do not trust that passcode lock on Apple's iPhone. The feature, which lets users set a four-digit pincode to limit access to the device, can be easily bypassed with a few finger taps on the iPhone to give an intruder access to sensitive information. ...
- Blog posts 2008-08-27
- Linux under attack: Compromised SSH keys lead to rootkit
- Linux under attack: Compromised SSH keys lead to rootkitLinux under attack: Compromised SSH keys lead to rootkitLOL! And the hits to linux just keep coming! So thats 4 different incidents within a week's time of how badly linux sucks. Poor linus must be hiding under his bed trying...
- Discussion threads 2008-08-26
- Linux under attack: Compromised SSH keys lead to rootkit
- The U.S. Computer Emergency Readiness Team CERT has issued a warning for what it calls "active attacks" against Linux-based computing infrastructures using compromised SSH keys. The attack appears to initially use stolen SSH keys to gain access to a system, and then uses local kernel exploits to...
- Blog posts 2008-08-26
- Apple's biggest rumor: iPod or Jobs?
- The Apple rumor mill is back in action - and this time the bloggers are calling the date: Sept. 9. That's the day the company is expected to announce a new look for the iPod Nano, a new version of iTunes, an OS X update and more. Apple, of course,...
- Blog posts 2008-08-26
- Microsoft, eat your own dog food
- Microsoft, eat your own dog foodReally?"Using hidden aspects of Windows to advantage Microsoft's own applications has been disallowed and behavioral remedies including disclosure demanded."I can't find these in the DOJ settlement, please help: http://www.usdoj.gov/atr/cases/f9400/9495.htmWe can of course look to the EU which did demand documentation of a small subset of...
- Discussion threads 2008-08-26
- Patch issued for Ubuntu security flaw
- Patch issued for Ubuntu security flawGood thing[i]A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service.[/i]Good thing I'd stopped letting malicious users into my house and giving them access to my desktop.RE: Patch issued for Ubuntu security flawLOL!!...
- Discussion threads 2008-08-26
- Patch issued for Ubuntu security flaw
- Canonical has warned users of all machines running recent versions of Ubuntu to patch their systems and shut an open door for hackers. Canonical is the latest Linux vendor to patch a vulnerability in the open-source operating system's kernel that could have left the door open for hackers to...
- News items 2008-08-26
- Facebook refuses to fix obvious security flaw
- Facebook refuses to fix obvious security flawFixed.Looks like Facebook has fixed the bug. I just clicked the link and saw this text: The bug is fixed :)RE: Facebook refuses to fix obvious security flawSuch as the fact that applications completely ignore any user privacy options and have the ability to...
- Discussion threads 2008-08-26
- Carbon Control Software Home Edition (exe)
- Every year inactive computers make a contribution to climate change in the form of millions of tones of CO2. Play your part in preventing global warming by using Carbon Control Software Home Edition. It works by switching off your computer when its not being used and can help reduce your...
- Software downloads 2008-08-26
- Facebook refuses to fix obvious security flaw
- [ UPDATE:Â Facebook has reversed itself and fixed this vulnerability ]Â The Register's Dan Goodin has the scoop on an obvious security vulnerability that's being ignored by the powers at Facebook. The issue, as demonstrated by this proof-of-concept, shows...
- Blog posts 2008-08-25
- New StopBadware guidelines take aim at software update bundling
- If the StopBadware coalition has its way, software updaters from Sun Microsystems see screenshot above and Apple will carry the embarrassing "badware" label. According to a draft of revamped guidelines (.pdf) from the Google-backed computer security consortium, the badware label will expand to...
- Blog posts 2008-08-25
- Democratic National Convention site requires Silverlight and Move
- Democratic National Convention site requires Silverlight and MoveWow, just wowSo, a party supposed to govern USA can be bought out by Microsoft to support a flash wannabe plugin.I am speechless. Will they make Windows only policy in Govt. agencies too? Perhaps they should use "OOXML" instead of PDF too?What???The liberals...
- Discussion threads 2008-08-25
- The ugly truth: Satan, social networks and security
- The ugly truth: Satan, social networks and securityLovely Satan !It was around 90's when I 1st used Satan, those days were so much fun to me.Social Networks - Know your poisonI'm afraid that social networks won't do too much to fix their code - They want it as open as...
- Discussion threads 2008-08-25
- Intuit: software and services. Are you kidding me?
- I must admit to have been befuddled by Larry Dignan's interpretation of Intuit's current go to market strategy as analogous to Microsoft's software plus services mantra. This is the salient quote from Intuit's Q4 earnings call my emphasis added: We've talked about the fact that our growth for the...
- Blog posts 2008-08-25
- Tech policy and presidential politics: Is it a vote getter?
- Welcome to the week that is the Democratic National Convention followed by another one with the Republican National Convention. We'll get coverage out the wazoo with a heavy dose of the technology implications from our sister site and parent, News.com and CBS News, respectively. While the technology policies of Barack...
- Blog posts 2008-08-25
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Which solar technology will survive?
-
At the Cleantech Forum in San Francisco, Todd Glass of Heller Ehrman moderates a discussion, among tech execs, on the various solar technologies making a difference in the green movement.
- Watch the video >>
- Demo: Virtualization with the Intel® Xeon® Processor
-
In this Flash demo, you'll learn about virtualization performance and features ideal for consolidation, load balancing, and disaster recovery with leading enterprise reliability.
- Watch how the Intel Xeon processor can increase performance and reliability of your servers >>
