Wednesday, March 28, 2012

Study finds major flaws in single sign-on systems

Computerworld Security: March 28, 2012
===============================================================

The single sign-on protocols that allow users to sign in to a range of websites
with their Google or Facebook accounts suffer from security flaws that could
allow scammers to log in as somebody else, security researchers have reported.
http://cwonline.computerworld.com/t/7929378/823929835/557485/0/

~~~~~~~~~~~~~~~~~~~RESOURCE COMPLIMENTS OF: Hosting.com~~~~~~~~~~~~~~~~~~~~~

100% Application Availability in the Cloud

Optimize your infrastructure for mission-critical applications while minimizing
costs. Powered by Microsoft SQL Server and Hosting.com.
Availability--Performance--Scalability--Security. Guaranteed.

http://cwonline.computerworld.com/t/7929378/823929835/557171/0/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

IN THIS ISSUE

1. Avira unveils Mac antivirus software
http://cwonline.computerworld.com/t/7929378/823929835/557486/0/

2. Microsoft co-founder Paul Allen victim of ID theft
http://cwonline.computerworld.com/t/7929378/823929835/557487/0/

3. IT supply chain security is weak at major U.S. agencies, says GAO
http://cwonline.computerworld.com/t/7929378/823929835/557488/0/

4. RockYou settles FTC charges related to 2009 breach
http://cwonline.computerworld.com/t/7929378/823929835/557489/0/

5. Richi Jennings: That's a TERRIBLE way to fix spam
http://cwonline.computerworld.com/t/7929378/823929835/557490/0/

6. Threat intelligence: Why it's about sharing more data
http://cwonline.computerworld.com/t/7929378/823929835/557491/0/

~~~~~~~~~~~~~~~~~~~RESOURCE COMPLIMENTS OF: EMC~~~~~~~~~~~~~~~~~~~~~

Intelligence-Driven Information Security

New SBIC Report sponsored by RSA: Getting Ahead of Advanced Threats – Achieving
Intelligence-Driven Information Security. Get insights on developing real-time
knowledge on threats in order to prevent, detect, &predict attacks, make risk
decisions, optimize defensive strategies & enable action.

http://cwonline.computerworld.com/t/7929378/823929835/557492/0/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Avira unveils Mac antivirus software

German security company Avira has released free antivirus software for Apple
Macs, joining a host of security software providers offering protection for OS
X.
http://cwonline.computerworld.com/t/7929378/823929835/557486/0/

Microsoft co-founder Paul Allen victim of ID theft

An AWOL U.S. Army soldier based in Pittsburgh is accused of stealing Microsoft
co-founder Paul Allen's identity and using it attempt to steal money from
Allen's Citibank account.
http://cwonline.computerworld.com/t/7929378/823929835/557487/0/

IT supply chain security is weak at major U.S. agencies, says GAO

U.S. lawmakers called on three large U.S. government agencies, including the
Department of Energy, to start monitoring their IT purchases for possible
malware, counterfeits or other security flaws, after a watchdog agency pointed
out potential vulnerabilities in their IT supply-chain procedures.
http://cwonline.computerworld.com/t/7929378/823929835/557488/0/

~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade Communications~~~~~~~~~~~~~~~~~~~~~

Is Cloud the Answer to Federal IT Savings?

In this eGuide, Computerworld and its sister publications CIO and Network World
have collected interviews and articles that cover some of the biggest issues
faced by federal agency IT departments today. Read on to learn about the
technology challenges the U.S. government is facing, and how some agencies are
dealing with them.

http://cwonline.computerworld.com/t/7929378/823929835/557493/0/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RockYou settles FTC charges related to 2009 breach

RockYou will submit to third-party security audits for the next 20 years as part
of a settlement of charges filed by the U.S. Federal Trade Commission in
connection with a Dec. 2009 data breach that exposed email addresses and
passwords belonging to over 30 million individuals.
http://cwonline.computerworld.com/t/7929378/823929835/557489/0/

Richi Jennings: That's a TERRIBLE way to fix spam

A respected email technologist has been quoted in the mainstream media as saying
he has a plan to solve spam. Oh really? Sadly, it seems he's just repeating a
failed idea... INSIDER (free registration requested)

http://cwonline.computerworld.com/t/7929378/823929835/557490/0/

Threat intelligence: Why it's about sharing more data

IT is a fast-moving field--ideas arise, reach prototype, and go to market
quicker than it takes for the average clinical trial to be cleared; yet this one
concept within information security--defense requires greater visibility than
can be obtained from any single network and to have a fighting chance we should
reciprocally distribute data on the attacks and attackers we identify, remains
an unresolved debate. I've heard the same thing in information security for
quite some time: "We need to share more data."
http://cwonline.computerworld.com/t/7929378/823929835/557491/0/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

SHARK TANK OF THE DAY
______________________

QUIET PLEASE!

This pilot fish is working at a level 2 network help desk when a request comes
in from a client -- and one of fish's co-workers quickly volunteers to handle
it.

http://cwonline.computerworld.com/t/7929378/823929835/557321/0/

CAST YOUR VOTE IN THIS WEEK'S QUICKPOLL

Apple's new iPad features a Retina display, LTE connectivity, and more -- but is
it advanced enough to stay ahead of rivals?

http://cwonline.computerworld.com/t/7929378/823929835/555583/0/

NEW COMPUTERWORLD JOB BOARD
______________________________

Search multiple listings now and get new job alerts as they are posted.

http://cwonline.computerworld.com/t/7929378/823929835/156832/0/

Get more IT peer perspective online:

LinkedIn Group: http://cwonline.computerworld.com/t/7929378/823929835/311619/0/

Facebook: http://cwonline.computerworld.com/t/7929378/823929835/311620/0/

Twitter: http://cwonline.computerworld.com/t/7929378/823929835/311621/0/

===============================================================

CONTACTS/SUBSCRIPTIONS

You are currently subscribed to computerworld_security as: jonsan98@gmail.com.