Tuesday, August 07, 2007

Mozilla: 10 day patch guarantee 'not our policy'; Wi-Fi network proves critical in bridge disaster

Network World

Security News Alert




Network World's Security News Alert, 08/07/07

Mozilla: 10 day patch guarantee 'not our policy', 08/06/07: Mozilla does not set security policy at late-night pajama parties. The open source browser maker was forced to issue a statement Monday, retracting a pledge attributed to the company's director of ecosystem development, Mike Schaver, to fix any critical security bugs in the browser within "Ten ****ing Days."

New Wi-Fi network proves critical in bridge disaster, 08/03/07: A new Wi-Fi network in Minneapolis -- only partially completed and just two months old -- is nonetheless giving the city critical help in responding to this week's collapse of the I-35W bridge. The network helped the city with communications, moving large mapping files to the recovery site, and is supporting wireless cameras that are being installed to help with recovery operations.

Survey: Half of compliance pros say their organizations botching identity, access control, 08/06/07: Polled about their organization’s approaches to identity and access management, audit and compliance professionals in industry and government expressed a high level of frustration with how their IT and business management units are managing IAM.

Network World Security Buyers Guide

Find the right security products for your enterprise - fast. From anti-spam to wireless LAN security, our Buyers Guides have detailed information on hundreds of products in more than 20 categories. With the side-by-side comparison tool you can evaluate product features to make the best decision for your enterprise.

Click here to go to the Security Buyers Guide now.

Mozilla says it can patch flaws in 10 days, 08/06/07: A Mozilla executive has vowed that his company can patch any critical vulnerability in its software within 10 days, a sign that Mozilla may intend to step up its efforts to improve security.

Verizon takes emergency notification to businesses, 08/03/07: The shooting tragedy at Virginia Tech on April 16 renewed interest on college campuses and businesses in finding ways to quickly notify students and employees of an emergency through voice and data over multiple devices.

Websense lures Web 2.0 attackers with HoneyJax, 08/05/07: Websense has developed a threat detection system designed to spot Web 2.0 attacks soon after they are launched.

Hacking conference infiltrated by 'media mole', 08/03/07: Trust nobody.That's what organizers of the 15th annual DefCon hacking conference are telling attendees Friday, after being tipped off that the TV news program Dateline NBC has sent a producer with a hidden camera to investigate the show.

Simple hack can unlock most any office door, 08/05/07: Cut a couple of wires, insert a small, easy-to-make device between them, and you can walk right through all those supposedly card-protected locked office doors.

Face Off: Should security companies pay for vulnerability research?: TippingPoint's Terri Forslof says yes. McAfee's Dave Marcus says no. In an elegant battle of words, the two duke it out over this contentious topic. When a recent hacking contest won a security researcher a $10,000 cash prize, it renewed the firestorm over this issue. Should security researchers be paid for their work to find vulnerabilities? Or are such payments an ethical violation? Forslof is manager of security response for TippingPoint. Marcus is security research and communications manager for McAfee. (19:11)

Top 9 things NAC systems must do and do well: Security expert and Cisco Subnet blogger Jamey Heary details the top 9 things that any NAC system must do and asks your suggestion for the 10th. Plus: Enter to win a copy of Heary's book "Cisco NAC Appliance: Enforcing Host Security with Clean Access".

TODAY'S MOST-READ STORIES:

1.Undercover TV producer booted from DefCon
2. Do Not Call Registry gets wake-up call
3. NAC alternatives hit the mark
4. Newspaper outs ‘Fake Steve Jobs’
5. Cisco founder unveils the Next Big Thing?
6. Tech-support poser gets sensitive info from IRS
7. Cisco founder brings optics to the router guys
8. The case of the great hot-site swap
9. IBM saves $250M with Linux-run mainframes
10. Researchers flag VoIP exploits at Black Hat

MOST E-MAILED STORY:
Hogwarts IT director quits


Contact the author:

Senior Editor Ellen Messmer covers security for Network World. E-mail Ellen.



BONUS FEATURE

IT PRODUCT RESEARCH AT YOUR FINGERTIPS

Get detailed information on thousands of products, conduct side-by-side comparisons and read product test and review results with Network World’s IT Buyer’s Guides. Find the best solution faster than ever with over 100 distinct categories across the security, storage, management, wireless, infrastructure and convergence markets. Click here for details.


PRINT SUBSCRIPTIONS AVAILABLE
You've got the technology snapshot of your choice delivered to your inbox each day. Extend your knowledge with a print subscription to the Network World newsweekly, Apply here today.

International subscribers, click here.


SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World newsletter, change your e-mail address or contact us, click here.

This message was sent to: security.world@gmail.com. Please use this address when modifying your subscription.


Advertising information: Write to Associate Publisher Online Susan Cardoza

Network World, Inc., 118 Turnpike Road, Southborough, MA 01772

Copyright Network World, Inc., 2007

No comments:

Post a Comment