SecurityFocus

Blaming the Good Samaritan
by Houston Carr, 2008-09-26
A student at Carleton University faces charges for finding flaws in the school's e-mail system. In a guest column this week, Auburn University Professor Houston Carr argues that intentions should count when dealing with a network intruder.
http://www.securityfocus.com/columnists/481

The Boston Trio and the MBTA
by Mark Rasch, 2008-09-23
Three MIT students found themselves under legal attack last month for exposing flaws in the Boston subway system. Despite the attempt to silence the trio, the law continue to support vulnerability disclosure, says SecurityFocus contributor and attorney Mark Rasch.
http://www.securityfocus.com/columnists/480

From Physics to Security
by Federico Biancuzzi, 2008-09-16
Contributor Federico Biancuzzi chatted up Wietse Venema, the co-creator of the Security Administrator Tool for Analyzing Networks, to talk about the current state of security, anti-spam technology and how to reduce the number of vulnerabilities in software.
http://www.securityfocus.com/columnists/479

Get Off My Cloud
by Mark Rasch, 2008-08-19
A recent decision by a federal appeals court in Cincinnati leaves U.S. citizens up in the air, if they hoped that nebulous privacy rules would apply to cloud-computing services.
http://www.securityfocus.com/columnists/478

An Astonishing Collaboration
by Dan Kaminsky, 2008-07-09
On Tuesday, software developers and network-hardware providers released a patch for a significant flaw in the domain-name service (DNS) system. The researcher who found the bug, Dan Kaminsky, talks about the issue and the history of DNS problems in the column, reprinted with permission from his site.
http://www.securityfocus.com/columnists/477

Bad-Code Blues
by Don Parker, 2008-07-08
Despite advances in secure-coding practice, most developers continue to let serious security bugs slip into their programs. SecurityFocus contributor Don Parker argues that until customers hold their software providers responsible, bad code will keep coming.
http://www.securityfocus.com/columnists/476

Firing Up Browser Security
by Federico Biancuzzi, 2008-06-20
Mozilla released its latest browser, Firefox 3.0, this week. SecurityFocus contributor Federico Biancuzzi tracks down two key members of Mozilla's security team to learn more about the security features included in this major release.
http://www.securityfocus.com/columnists/475

Racing Against Reversers
by Federico Biancuzzi, 2008-06-05
Each time a new digital rights management (DRM) system is released, reverse engineers are not far behind in cracking it. SecurityFocus contributor Federico Biancuzzi interviews Nate Lawson, the co-designer of the Blu-ray content protection system, on the challenges of defending digital content.
http://www.securityfocus.com/columnists/474

Anti-Social Networking
by Mark Rasch, 2008-05-22
The strategy of U.S. prosecutors in the MySpace-hoax suicide case could leave the nation with an unpalatable precedent, says SecurityFocus columnist Mark Rasch.
http://www.securityfocus.com/columnists/473

Thinking Beyond the Ivory Towers
by Dave Aitel, 2008-05-15
A recent paper on automatically generating exploits from patches underscores the differences in the way academics and security researchers think, argues Dave Aitel, chief technology officer for security firm Immunity.
http://www.securityfocus.com/columnists/472