Web Security


P2P Network Users Allow Access To Private Info

At SchmooCon, researchers thought it would be a hoot to take a look at some of the
information people send out over peer-to-peer (P2P) networks. They were taken aback by what they found. Read the full article. [Network World]


Michael Gough, an information security specialist and president of the Austin, Texas, chapter of ISSA, owner of the web site skypetips.com gave CSO his thoughts on Skype’s benefits and security challenges in the business environment. Read the full article. [CSO]

Credit card numbers are so passe. Today’s hackers know the real powerhouse data to steal is emission certificates. That’s exactly what hackers went after last week when they obtained
unauthorized access to online accounts where companies maintain their
carbon credits. Read the full article. [Wired]

By Jeremiah GrossmanThere are several security issues affecting all major Web browsers that
have remained unaddressed for years (probably because the bad guys
haven’t leveraged them aggressively enough, but the potential is
there). The problem is that the only known ways to fix these issues
(adequately) is to “break the Web” — i.e. negatively impact the
usability of a significant and unacceptable percentage of websites.
Doing so is a non-starter for any browser vendor looking to grow market
share. The choice is clear for most vendors: Be less secure and adopted, rather than secure and obscure. This is what the choice comes down to. This is a topic deserving of further exploration.

A hacker attack at payroll processing firm Ceridian Corp. has potentially revealed the names, Social Security
numbers, and, in some cases, the birth dates and bank accounts of
27,000 employees working at 1,900 companies nationwide. Read the full article. [StarTribune]