SecurityFocus

MD5 Hack Interesting, But Not Threatening
by Tim Callan, 2009-01-05
When an international team of researchers unveiled the first practical attack on MD5-based digital certificates, they had decided not disclose to the issue to company most affected, VeriSign. Tim Callan, vice president of product marketing for the company, explains how, four hours later, VeriSign had eliminated any threat.
http://www.securityfocus.com/columnists/488

Time to Exclude Bad ISPs
by Oliver Day, 2008-12-09
The takedowns of Atrivo, EstDomains, and McColo show that the system for policing hosting providers is weak. It's time to form a group, including security researchers, to set standards, says SecurityFocus contributor Oliver Day.
http://www.securityfocus.com/columnists/487

Standing on Other's Shoulders
by Chris Wysopal, 2008-11-28
While security researchers like to highlight their differences with academic investigators, they should start emulating their more staid colleagues in one important way: crediting others, says SecurityFocus contributor Chris Wysopal.
http://www.securityfocus.com/columnists/486

Just EnCase It's Not a Search
by Mark Rasch, 2008-11-21
The U.S. government attempts to exclude a scan of a computer's file system from the definition of a search. They failed, but the issue will rise again, argues attorney and SecurityFocus contributor Mark Rasch.
http://www.securityfocus.com/columnists/485

Microsoft's Stance on Piracy Affects Us All
by Oliver Day, 2008-11-14
Operating-system piracy hurts Microsoft's bottom line, but in its fight against software pirates, the company maybe hurting the rest of the Internet to help itself.
http://www.securityfocus.com/columnists/484

Clicking to the Past
by Chris Wysopal, 2008-10-21
“Clickjacking” may be new, but attacks on the user interface are not. Security professional Chris Wysopal argues that browsers will have to be more restrictive to defend against this type of attack.
http://www.securityfocus.com/columnists/483

The Vice of Vice Presidential E-Mail
by Mark Rasch, 2008-10-06
The recent investigation of the "hack" into U.S. vice presidential candidate Sarah Palin’s Yahoo e-mail account demonstrates that the law is not a clearly defined thing.
http://www.securityfocus.com/columnists/482

Blaming the Good Samaritan
by Houston Carr, 2008-09-26
A student at Carleton University faces charges for finding flaws in the school's e-mail system. In a guest column this week, Auburn University Professor Houston Carr argues that intentions should count when dealing with a network intruder.
http://www.securityfocus.com/columnists/481

The Boston Trio and the MBTA
by Mark Rasch, 2008-09-23
Three MIT students found themselves under legal attack last month for exposing flaws in the Boston subway system. Despite the attempt to silence the trio, the law continue to support vulnerability disclosure, says SecurityFocus contributor and attorney Mark Rasch.
http://www.securityfocus.com/columnists/480

From Physics to Security
by Federico Biancuzzi, 2008-09-16
Contributor Federico Biancuzzi chatted up Wietse Venema, the co-creator of the Security Administrator Tool for Analyzing Networks, to talk about the current state of security, anti-spam technology and how to reduce the number of vulnerabilities in software.
http://www.securityfocus.com/columnists/479