Federal Judges Backing Retailers In Credit Card Receipt Cases

July 2nd, 2007

Making it unanimous thus far, two federal judges have denied key motions in the lawsuits against retailers accused of violating federal law by printing prohibited information on credit card receipts. This is on top of a third federal judge making a similar ruling earlier this month.
Unless the U.S, Court of Appeals for the Ninth Circuit […]

Should Security be optional?

March 29th, 2007

Last week 37Signals launched another product as part of their online productivity suite. It’s called Highrise and it is a CRM that complements their well known project management application Basecamp. They have a whole portfolio of Ruby on Rails based apps. Take a look at their Ta-da Lists if you have problems keeping up with […]

Solaris Trusted Extensions vs. SELinux

February 28th, 2007

Glenn Faden, Distinguished Engineer at Sun Microsystems has published this very insightful article about the differences between the Trusted Solaris successor - Solaris Trusted Extensions and Red Hat Enterprise Linux which contains SELinux functionality.

Excerpt:
Overview of the Trusted Extensions and RHEL5 LSPP Systems
The Solaris 10 Operating System provides new frameworks for containment (zones), user rights management […]

Gone Phising - Financial Service Organizations Under Siege

November 7th, 2006

Phishtank (powered by OpenDNS) a free repository for phishing sites, released some interesting stats that show phishing activity for the month of October 2006.
The Top 10 identified phishing targets are all within the financial services industry and a quarter of all phishing sites originate within the US.

Top 10 Identified Phishing Targets
1. Paypal
2. […]

Oracle Label Security - Case Study

October 23rd, 2006

Here’s an interesting case study on how a television broadcaster is using Oracle Database Vault and Oracle Label Security (OLS) to secure their critical data.
I’ve known Oracle Label Security (it used to be called “Trusted Oracle”) for quite some time and I’m not surprised that it is getting adopted in traditional enterprise environments. Sure, […]

Tresys launches new SE Linux tools

October 18th, 2006

Tresys, a company that has built expertise around SELinux (Security Enhanced Linux) just announced that they are now offering a new version of their SETools product suite.
While SELinux was never for the faint of heart, one of the main issues around the configuration of SELinux have always been policy management and configuration. It seems that […]

 
-->