External News

Browse by Tags

• Fun
• Incidents
• Law Enforcement
• Microsoft
• Microsoft Products
• Processes
• trends
• Trustworthy Computing

• Network Access Protection Design Guide

  I you are looking into deploying Network Access Protection, have a look at the recently published Network Access Protection Design Guide Roger Share this post: Read More... Posted Oct 10 2008, 01:02 PM by TechNet Blogs Filed under: Security, Technology, Microsoft Products

• Some Thoughts on UAC

  I blogged several times already on UAC as this has been (and partly still is) a very disputed security feature in Windows Vista (which I still support!). I just found today a not really new blog post on UAC, which I think is worth reading. It is from... Posted Oct 06 2008, 04:27 AM by TechNet Blogs Filed under: Security, Technology, trends, Microsoft Products, Trustworthy Computing

• Why I do not like e-voting (part 3)

  It goes on and on and on: Read this one Judge Suppresses Report on Voting Machine Security Roger Share this post: Read More... Posted Oct 05 2008, 06:24 AM by TechNet Blogs Filed under: Security, Technology, Law Enforcement

• The “successful” attack on Cardspace

  I guess you read it as it was pretty wide-spread in the press in the last few days: On the Insecurity of Microsoft's Identity Metasystem CardSpace . Well, is there any official Microsoft reaction to it? No, not yet and if you look a little bit more... Posted Jun 02 2008, 02:38 AM by TechNet Blogs Filed under: Security, Technology, Microsoft Products, Incidents

• The latest SQL Injection Attacks

  Well, there was quite some chatter over the last few weeks with regards to the massive defacements we saw based on SQL Injection Attacks. So, what was really new? Close to nothing. Well, this is not completely true. The new thing we have seen with these... Posted May 30 2008, 02:39 AM by TechNet Blogs Filed under: Security, Technology, Processes, Incidents

• Why Apple has to fix the Safari flaw

  Remember me talking about Is Security Research Ethical? I made a statement in there when it comes to responsible disclosure of vulnerabilities: And then, what does the vendor do with it? Does the company act on it? Now, we can debate on what a vulnerability... Posted May 30 2008, 02:19 AM by TechNet Blogs Filed under: Security, Technology, Incidents

• Security Risks of Virtualization

  One fact strikes me pretty often: Companies have the problem that they have legacy software running on legacy operating systems (e.g. NT4) running on legacy hardware. This is a severe problem as you all know. Now, these companies look into virtualization... Posted May 20 2008, 10:51 PM by TechNet Blogs Filed under: Security, Technology

• 8 Dirty Secrets Of The Security Industry

  I just read this article called 8 Dirty Secrets Of The Security Industry , which seems pretty nasty. Let's briefly have a look at them: Vendors do not need to be ahead of the hackers; they only need to be ahead of the buyer : Wow, this is a bad statement... Posted May 03 2008, 03:17 PM by TechNet Blogs Filed under: Security, Technology, trends

• Best Practices for Microsoft PKI & Certificate Management

  You might know Brian Komar. He wrote numerous books on PKI and Certificate Management and he is a well-known speaker at quite some events like TechEd and IT Forum. Now, nCipher organized a Webimar on Best Practices for Microsoft PKI & Certificate... Posted Apr 29 2008, 02:19 PM by TechNet Blogs Filed under: Security, Technology, Microsoft Products, Processes

• Security Risks of VoIP

  Internet Telephony Has Security Problems : This was an interesting read this morning for different reasons: First of all, it is not surprising (even if we would not have known the problems it would have to be expected). I liked the statement: The goal... Posted Apr 03 2008, 02:42 AM by TechNet Blogs Filed under: Security, Technology

• How to do security in Development

  Michael Howard just pointed us to a resource that could be interesting for you as well – it was new to me at least J We have a set of short videos (3-10 min.) on how to address some security challenges in development: "How Do I?" Videos for Security And... Posted Apr 02 2008, 10:09 AM by TechNet Blogs Filed under: Security, Technology

• Analysis of recent vulnerabilities

  Michael Howard just wrote a post about recent vulnerabilities of third-party applications he looked into. This is pretty interesting as it shows certain challenges of current processes (e.g. what do you do with third-party software you rely on?): Recent... Posted Jan 05 2008, 02:21 PM by TechNet Blogs Filed under: Security, Technology, Processes

• IPSec Interop

  Based on my post about IPSec, Steve Lamb posted about IPSec Interoperability and has an interesting follow-up link: How to implement IPSec between LINUX and Windows Vista: Why use IPSec network security? Roger Share this post: Read More... Posted Jan 01 2008, 10:51 AM by TechNet Blogs Filed under: Security, Technology

• You are hacked – by your toaster :-)

  I just read this this morning Man Uses Toaster to Hack Computer . Is this now funny or scary? Roger Share this post: Read More... Posted Dec 15 2007, 05:19 AM by TechNet Blogs Filed under: Security, Fun, Technology

• Have a look at Server and Domain Isolation

  I am often talking about different zones in the network and how you can create them. There is no a demo kit available for you to download and "play" with it: Server and Domain Isolation Demo Roger Share this post: Read More... Posted Dec 13 2007, 03:25 PM by TechNet Blogs Filed under: Security, Microsoft, Technology, Microsoft Products