Verisign, McAfee and Symantec sites can be used for phishing due to XSS

Monday, June 9th, 2008

Should they all be trusted at first sight by unsuspecting online users? Yes, unfortunately this is the case with the websites of renowned and respected IT security companies. However, now that are all vulnerable to cross-site scripting, the possibilities to get phished and infected with malware and crimeware are dramatically ...

Google Reader’s Easter Egg

Monday, June 9th, 2008

up up down down left right left right b a   :) via: Google Blogoscoped

New Security Tools

Monday, June 9th, 2008

Here is a list of new security tools that were released in the past week. SQL Ninja 0.2.3 - SQL server injection and takeover tool fgdump 2.1.0 - Tool for mass password auditing of windows systems AxBan 1.0.0.4 - ActiveX killbit program Nmap 4.65 - Network port scanner Nessus 3.2.1 - Vulnerability assessment tool Immunity Debugger ...

Pandora Desktop Beta

Wednesday, June 4th, 2008

We've always wanted to find a simple way to deliver Pandora as a desktop application -- it's probably been on our to do list longer than any single feature. Today we're dipping our toe into those waters for the first time with the release of a Beta version of Pandora ...

Making The Move To Multiple Browsers

Tuesday, June 3rd, 2008

For a while now I’ve been using different web browsers to compartmentalize my risk. Most of my primary browsing is in one browser, but I use another for potentially risky activities I want to isolate more. Running different browsers for different sessions isolates certain types of attacks. For example, unless ...