Security World: Security Report: DHS privacy committee joins Real ID opposition

Monday, May 14, 2007

Security Report: DHS privacy committee joins Real ID opposition

========================================================================
SECURITY REPORT

http://www.infoworld.com/
========================================================================
Monday, May 14, 2007

* DHS privacy committee joins Real ID opposition
* Fix for Microsoft Automatic Updates not working
* Social Security, spyware bills go to House vote
* IBM criticizes TippingPoint over hacking contest
* Should vendors close all security holes?
* Building trust in downloads no simple feat
* Hackers hijack Windows Update's downloader
* Visa tries new tack with payment app security

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -
ADVERTISEMENT

THE IRONPORT(R) INTERNET SECURITY TRENDS REPORT IS IN

Spam is back. Viruses are more dangerous than ever. Spyware
nightmares have only just begun. Solutions will have to become more
robust to keep up with the latest threats. IronPort offers new
security perspectives. Get a head start on protecting your network by
downloading a copy of this insightful report.

http://newsletter.infoworld.com/t?ctl=1777895:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -
INFOWORLD ZERO DAY PODCAST

Covering business and IT strategies for securing the enterprise,
InfoWorld's Bob Garza covers anti-spam, anti-spyware, application layer
security, biometrics, digital identity, intrusion detection, malware and
more Sponsored by IronPort.

http://newsletter.infoworld.com/t?ctl=1777890:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

========================================================================

DHS PRIVACY COMMITTEE JOINS REAL ID OPPOSITION

A privacy committee of the U.S. Department of Homeland Security (DHS) has
joined a growing chorus of voices opposed to the controversial Real ID
bill, which proposes to create a national standard for state driver's
licenses and other forms of state-issued identification.

http://newsletter.infoworld.com/t?ctl=177788A:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

========================================================================

FIX FOR MICROSOFT AUTOMATIC UPDATES NOT WORKING

Windows XP systems are still locking up during patch update attempts --
even after users deployed the fix suggested by Microsoft.

http://newsletter.infoworld.com/t?ctl=177788C:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

========================================================================

SOCIAL SECURITY, SPYWARE BILLS GO TO HOUSE VOTE

The House Energy and Commerce Committee unanimously approved a pair of
bills on May 10 that aim to bolster consumers' protection against misuse
of their social security numbers and computer-borne spyware.

http://newsletter.infoworld.com/t?ctl=1777887:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -
ADVERTISEMENT

THE IRONPORT(R) INTERNET SECURITY TRENDS REPORT IS IN

http://newsletter.infoworld.com/t?ctl=1777895:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -
========================================================================

IBM CRITICIZES TIPPINGPOINT OVER HACKING CONTEST

IBM's ISS division has torn into rival TippingPoint for sponsoring
the hacking contest that led to the disclosure of a QuickTime
vulnerability in Apple's Safari browser.

http://newsletter.infoworld.com/t?ctl=177788D:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

========================================================================

SHOULD VENDORS CLOSE ALL SECURITY HOLES?

In last week's column, I argued that vendors should close all known
security holes. A reader wrote me with a somewhat interesting argument
that I'm still slightly debating, although my overall conclusion
stands: Vendors should close all known security holes, whether publicly
discussed or not. The idea behind this is that any existing security
vulnerability should be closed to strengthen the product and protect
consumers. Sounds great, right?

http://newsletter.infoworld.com/t?ctl=177788E:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

========================================================================

BUILDING TRUST IN DOWNLOADS NO SIMPLE FEAT

The Truste group's goal of creating an online ecosystem through which
software makers are held accountable for the functions of their programs
and end users are given the power to keep unwanted applications off
their devices won't be achieved easily, according to security
researchers and participants in the nonprofit's Trusted Downloads
project.

http://newsletter.infoworld.com/t?ctl=1777888:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

========================================================================

HACKERS HIJACK WINDOWS UPDATE'S DOWNLOADER

Hackers are using Windows Updates' file transfer component to sneak
malicious code downloads past firewalls, Symantec researchers said
Thursday.

http://newsletter.infoworld.com/t?ctl=1777889:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

========================================================================

VISA TRIES NEW TACK WITH PAYMENT APP SECURITY

Visa USA is quietly ratcheting up the pressure on vendors of payment
applications and the businesses that use them to make their software
compliant with a set of security best practices being pushed by the
company.

http://newsletter.infoworld.com/t?ctl=177788B:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

======================================================================

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -
ADVERTISEMENT

THE IRONPORT(R) INTERNET SECURITY TRENDS REPORT IS IN

http://newsletter.infoworld.com/t?ctl=1777895:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -

DAILY NEWS, DELIVERED TO YOUR COMPUTER, MP3 PLAYER OR CELL PHONE

The InfoWorld Daily podcast provides readers with
up-to-the-minute news and features that shape the world
of enterprise IT. Tom Sullivan reports on the leading news
and events that shape the today's IT community.

http://newsletter.infoworld.com/t?ctl=1777891:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

======================================================================

ADVERTISE

To advertise, contact Kate_Hobbie@infoworld.com.

======================================================================

UNSUBSCRIBE/MANAGE NEWSLETTERS

To subscribe, unsubscribe or change your e-mail address for any of
InfoWorld's e-mail newsletters, go to:
http://newsletter.infoworld.com/t?ctl=1777892:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

Contact Customer Service at: customerservice@infoworld.com

To view InfoWorld's privacy policy, visit:
http://newsletter.infoworld.com/t?ctl=1777893:20920CD98AAF82DD0D8FD70D2C2D298CEFF29049075316B4

This message was sent to: security.world@gmail.com