security hole - Page 40

Demand for Networking and Security IT Pros Remains High

Last year, IT professionals with experience and skills in networking and security were in demand, and this should remain the case through 2010.

Apple Updates QuickTime for 16 Security Vulnerabilities

A big security update for QuickTime and iTunes affects both Windows and Mac users.

Don't Let Cybercrime Friend You, The New Security Vulnerabilities

Sophisticated campaign tracking and an increased use of social networking technologies were the top two security vulnerabilities last year.

Pidgin Update Tackles MSN Plugin Security Flaw

From the blogs ... Pidgin gets updated for a security vulnerability (among other things).

Symantec, HP Extend Security Deal

Extension will ensure all HP desktop, laptop and notebook PCs will ship with a free, 60-day subscription to Symantec's latest Internet security software.

Encrypt Your Laptop for Top Security

Neither personal firewalls, passwords or recovery software provide the level of security enabled by self-encrypting your laptop's drive.

Encrypt Your Laptop for Top Security

Neither personal firewalls, passwords or recovery software provide the level of security enabled by self-encrypting your laptop's drive.

Symantec Weds Backup and Security for Small Businesses

Symantec has combined its data backup and security products for small businesses.

Make Network Security Policies Successful

Three tips on how to better engage your user base in information and network security protocols.

SMBs Often a Weak Link in Cyber Security

Lax data security and a lack of resources could be exposing small and midsized businesses -- and their customers -- to risk.

Protecting Server Security from Internal Threats

Sure, hackers and network-based malware threatens your computing infrastructure, but server security faces a far more insidious threat.

Protecting Server Security from Internal Threats

Sure, hackers and network-based malware threatens your computing infrastructure, but server security faces a far more insidious threat.

PHP 5.3.1 Released, Security Beefed Up

By focusing on stability and security, the PHP team has introduced more than 100 bug fixes and tweaks to the overall framework.

QuickTime 7.6.6 Arrives with 16 Security Patches

The latest update to Apple's QuickTime software addresses 16 security vulnerabilities across both Mac and Windows platforms.

Symantec Debuts New Enterprise Security Apps

New security suites aim to better protect businesses' networks from evolving cyber threats.

Smartphones and Security Don't Mix

Smartphone security is plagued by a profusion of free apps and vulnerabilities caused by GPS, among other concerns.

Webserver Security Check

This article contains a security check script and describes how to secure Windows and Linux webservers against hackers.

Web 2.0 Privacy and Security Issues Won't Go Away

As enterprises see rising use of Facebook, Twitter and other social networks, security and privacy safeguards remain an important concern.

Symantec Invests In Cloud Security Firm Mocana

The security software giant pumps some cash into a firm that specializes in protecting connected devices, and not just PCs, either.

ProtectedData.Unprotect() after Impersonate()

The following code doesn't work: IntPtr token = Win32Dll.LogonUser(“user1”, “mydomain”, “password1”); WindowsIdentity id = new WindowsIdentity(token); WindowsImpersonationContext ic = id.Impersonate(); byte[] unprotectedBytes = ProtectedData.Unprotect(passwordBytes, null, DataProtectionScope.CurrentUser); password = Encoding.Unicode.GetString(unprotectedBytes); ic.Undo(); The password is not decrypted. MSDN said "If you use this method during impersonation, you may receive the following error: "Key not valid for use in specified state." This error can be prevented by loading the profile of the user you want to impersonate, before calling the method." I would be very grateful for the help!

Read the article

Prevent Cross-Site Request Forgery in a Spring WebFlow Application

- by Eric J.

I'm looking for a (hopefully straightforward) way to add CSRF protection to an application build on Spring WebFlow 2. An approach that migrates well to Spring WebFlow 3 (when released) is preferred.

Read the article

Request for the permission of type 'System.Data.SqlClient.SqlClientPermission, System.Data

- by joebeazelman

I created an assembly containing WCF service code and dropped into another web project. When I try to invoke a service method, I get the following inner exception: Request for the permission of type 'System.Data.SqlClient.SqlClientPermission, System.Data, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed. Why this is happening? My newly created assembly lives inside the ASP.NET /bin folder along with other assemblies. At this level, should the database not know or care whether it is being called from a web service or from a normal call? How would it know that my assembly is foreign? How do I resolve this issue?

Read the article

how to protect the ws discovery ad hoc network from man-in-the-middle attacks

- by ahmed

the ws-discovery specifications explains how to protect your network from message alteration Denial of service replay spoofing but what about man-in-the-middle attack?

Read the article

Best way for a remote web app to authenticate users in my current web app?

- by jklp

So a bit of background, I'm working on an existing web application which has a set of users, who are able to log in via a traditional login screen with a user name and password, etc. Recently we've managed to score a client (who have their own Intranet site), who are wanting to be able to have their users log into their Intranet site, and then have their users click a link on their Intranet which redirects to our application and logs them into it automatically. I've had two suggestions on how to implement this so far: Create a URL which takes 2 parameters (which are "username" and "password") and have the Intranet site pass those parameters to us (our connection is via TLS so it's all encrypted). This would work fine, but it seems a little "hacky", and also means that the logins and passwords have to be the same on both systems (and having to write some kind of web service which can update the passwords for users - which also seems a bit insecure) Provide a token to the Intranet, so when the client clicks on a link on the Intranet, it sends the token to us, along with the user name (and no password) which means they're authenticated. Again, this sounds a bit hacky as isn't that essentially the same as providing everyone with the same password to log in? So to summarise, I'm after the following things: A way for the users who are already authenticated on the Intranet to log into our system without too much messing around, and without using an external system to authenticate, i.e. LDAP / Kerberos Something which isn't too specific to this client, and can easily be implemented by other Intranets to log in

Read the article

How do you override the WCF AuthenticationService IsLoggedIn() method?

- by Ryan Riley

I have three current thoughts on how to do this: re-implement AuthenticationService, which uses lots of internal constructors and internal helpers, implement custom IIdentity and IPrincipal types and somehow hook these into FormsAuthentication. give up and roll my own. The problem is that we've got web apps and fat client apps using authentication and storing cookies. However, logging out of a web app does not log out of a fat client app, and we have now way of forcing a refreshed cookie, atm.

Search Results

Search found 13059 results on 523 pages for 'security hole'.

Page 40/523 | < Previous Page | 36 37 38 39 40 41 42 43 44 45 46 47 | Next Page >

- by Andrey

- by Eric J.

- by joebeazelman

- by ahmed

- by jklp

- by Ryan Riley

< Previous Page | 36 37 38 39 40 41 42 43 44 45 46 47 | Next Page >