Archive for the Information Security Category

Lieberman Bill Gives Feds ‘Emergency’ Powers to Secure Civilian Nets | Danger Room | Wired.com.

I wonder if this is going to effect his already abysmal approval rating?

Lieberman’s approval rating in a poll taken January 4–5, 2010, was 25% approve versus 67% who disapprove, making him one of the least popular Senators currently in office.[8]

http://en.wikipedia.org/wiki/Joe_Lieberman

Really, this isn’t new, it’s just another reach into the civil world.   The government doesn’t pay for the critical infrastructure, it just wants to control it.  Something here stinks…

  • Share/Bookmark

After the recent Pwn2Own contest, the Microsoft product manager Peter LePage spoke out about the two “features” that were completely sidestepped to hack a Windows 7 system. He stated, ”

Just days after a pair of researchers outwitted major Windows 7 defenses to exploit Internet Explorer (IE) and Firefox, Microsoft said the measures AREN’T MEANT to “prevent every attack forever.”

Pete LePage, a product manager with IE’s developer division, stood up for DEP (data execution) and ASLR (address space layout randomization), the security features that two hackers sidestepped to win $10,000 each at the high-profile Pwn2Own hacking contest last Wednesday

via Microsoft defends Windows 7 security after Pwn2Own hacks.

I find these comments from Mr. LePage a bit misguided, and very suspect.  How can a security “feature” so easily be sidestepped?  Two minutes?  I can’t wait until we get the details of the attack/exploit so that we can really see how this was done.

  • Share/Bookmark

© 2008-2010 dc0de\'s notes... & dc0de.com All Rights Reserved -- Copyright notice by Blog Copyright