Skip to main content

Software-Programming

Mono and Samba: smell the difference, says Allison

posted onOctober 19, 2009
by hitbsecnews

Samba and Mono differ in the ways the two projects have chosen to deal with software patents in the implementation, according to renowned Samba developer Jeremy Allison.

In a long blog post, Allison also said that the Samba project had a differing view of software freedom, taking the view that all should have the same rights.

phpMyAdmin Plugs SQL Injection, XSS Flaws

posted onOctober 19, 2009
by hitbsecnews

A new version of phpMyAdmin has been released to plug two serious security holes that could lead to SQL injection and cross-site scripting attacks.

According to an advisory from the maintainers of the open-source tool, one of the vulnerabilities allow remote hackers to inject arbitrary web script or HTML via a crafted MySQL table name.

Mozilla blocks Microsoft's sneaky Firefox plug-in

posted onOctober 19, 2009
by hitbsecnews

Mozilla late Friday blocked the Microsoft-made software that had put Firefox users at risk from attack.

The two-part Microsoft component -- an add-on dubbed ".NET Framework Assistant" and a plug-in named "Windows Presentation Foundation" -- have been blocked by Mozilla as a precautionary measure, said Mike Shaver, the company's head of engineering.

Deep packet inspection engine goes open source

posted onOctober 15, 2009
by hitbsecnews

Deep packet inspection (DPI) hardware can identify an astonishing array of protocols passing across the Internet—up to and including protocols that are rare even to us in the Orbiting HQ (Gadu-Gadu? Manolito? Feidian?). But if you've ever wondered just how this can be done, and done at wire speed, wonder no more: Europe's leading DPI vendor has open-sourced a version of its traffic detection engine.

BitTorrent Client Shootout

posted onOctober 15, 2009
by hitbsecnews

or transferring large files over the Internet, nothing beats BitTorrent. And BitTorrent clients remain hugely popular—despite years of litigation by copyright holders.

Adobe Matches Microsoft with Massive Patch Update

posted onOctober 15, 2009
by hitbsecnews

On the same day Microsoft unloaded a record-breaking 34 fixes, eight of which were listed as critical, Adobe has made a similar gargantuan patch offering. The company, best known for its Reader and Acrobat software, yesterday fixed a total of 29 vulnerabilities, including one labeled critical.

Google release two Android bug patches

posted onOctober 13, 2009
by hitbsecnews

Apparently Google has now released patches that fix 2 security flaws in the Android platform that enables hackers to launch a denial of service attack on Android smartphones reports crn.

The Open Source Computer Emergency Response Team made the flaws, which affect the Android 1.5 operating system, public and one of the most serious vulnerabilities happened in the way Android handles SMS whereby hackers could create malformed SMS messages from badly formatted WAP Push messages which could cause the mobile phone to disconnect from the network.

Who needs a key? IPhone app unlocks and starts car

posted onOctober 13, 2009
by hitbsecnews

A California company Tuesday will announce an iPhone application and car receiver that will enable users to lock, unlock and remotely start their car with the phone rather than the car's key fob.

The Viper SmartStart is the latest example of automotive electronics functions migrating into Apple iPhone and other smartphones, including turn-by-turn directions or locating the closest gas station. Such ideas are a challenge for automakers and aftermarket suppliers for whom advanced auto electronics have been highly profitable.

New Wii update may be bricking innocent consoles

posted onOctober 1, 2009
by hitbsecnews

Remember the new firmware update which Nintendo just sent out to do away with all those nasty people who have been running the Homebrew Channel? You know, another one of those feeble attempts to lock something down which the hacking community will have found a workaround to with in a couple of days?

Well, it's already been worked around for those of you who don't mind voiding your warranty, but we all knew that was going to happen. Where the actual news comes in is that there have been reports of the update rendering perfectly normal, unmodified Wii consoles inert.

Mozilla Tests More Secure Firefox

posted onOctober 1, 2009
by hitbsecnews

Mozilla on Wednesday posted preview builds of its Firefox browser with security enhancements designed to mitigate the risk of certain Web attacks.

In a blog post, Brandon Sterne, security program manager for Mozilla, asks security researchers and server administrators to help test the changes by downloading a build appropriate for their operating system. The preview versions of Firefox implement a specification called Content Security Policy (CSP), which is designed to protect against cross site scripting (XSS) attacks.