Archive for the 'Security' Category

I stumbled upon the concept of “Local Shared Objects” for the first time today after reading about the Objection extension for Firefox.
For those who have also not heard of “Local Shared Objects” or LSOs for short, Wikipedia define them as:
A Local Shared Object (LSO) is a collection of cookie-like data stored as a file on [...]

With all the news of big companies like Yahoo!, IBM, Google, Verisign and Microsoft throwing their weight behind OpenID, I thought I’d investigate this avenue and ultimately ended up jumping on the bandwagon.
The whole point of OpenID is you could use one identity to gain access to a multitude of websites. This is a [...]

Our VPN solution at work, like many places is the Cisco VPN 3000 solution. Whilst it works, it has a very very ugly Mac frontend in the form of Cisco’s own VPNClient:

As you can see, it’s quite horrid. It’s also a pain the arse to have to open this everytime I want to [...]

Following the most recent data loss by HMRC, they and other companies should seriously start considering dumping laptops in favour of Sun’s Sunray technology for their “Work from home” users, and maybe even all of their normal desktop users.
For those who don’t know, Sunray is a secure, truly stateless device that effectively presents a working [...]

I’ll admit now, none of this work is mine: all credit needs to go to Borgan Chu and Shawn Ferry. All this post is doing is making it easier to find all the relevant information as it’s scattered around a bit.
Many people implement firewalls for security reasons, and many people encounter the one nightmare with [...]

ZDNET and CNET (Just paraphrasing the ZDNET article) are both reporting that apparently Google’s security team have discovered some very critical flaws in the Java Run Time Environment (JRE) that threatens security on pretty much anything that runs Java.
Hmmm, I have my reservations about this claim. Several things just don’t sit right with me. [...]

As I mentioned earlier when this whole AACS key issue kicked off, the DMCA effectively allows any individual to “own” a number or word. It didn’t take long, but now you too can abuse the DMCA by staking your claim on your own 128-bit number. It’s a bit pointless, but it does highlight the stupidity of the DMCA.

The Sun Security Blog has been running for some time, however it didn’t really have much content other than regular updates of new security alerts. Well, not anymore.
Following a lot of internal discussion following the infamous telnetd issue that occurred a couple of months ago, it has been decided to actually use this blog for [...]

Glenn Faden has authored an excellent comparison of Solaris Trusted Extensions to the still-unreleased Red Hat Enterprise Linux 5 and it’s LSPP policy. This is pretty technical reading but gives a good set of reasons as to why Trusted Extensions really are superior in many ways.
Check out the full document on Big [...]

One of the comments on Slashdot for the Solaris Telnet vulnerability: “The Network is Everyone’s Computer.” How appropriate.


Longer entries are truncated. Click the headline of an entry to read it in its entirety.
I shmaak SA Blogs, sorted with Amatomu.com Solaris security Sendmail configuration OpenSolaris DNS Sun network