Do security images such as those presented upon logging into banks provide any tangible security benefits, or are they mostly theater?
Per my understanding, if somebody is phishing your users, it’s also trivial for them to proxy requests …
I’m trying to figure out the best practices for accessing my dev box from a public terminal.
Most sources I’ve found recommend protecting the box with some kind of two factor authentication, such as adding a command= prefix to the authoriz…
MS-CHAP is the Microsoft version of the Challenge-Handshake Authentication Protocol and is described in RFC2759. A recent presentation by Moxie Marlinspike [1] has revealed a breakthrough which reduces the security of MS-CHAPv2 to a single DES encrypti…
We released security update MS12-054 to address four privately reported issues in Windows networking components failing to properly handle malformed Remote Administration Protocol (RAP) responses. The most severe of these issues, CVE-2012-1851, is a fo…
Today we released nine security bulletins addressing 26 CVE’s (13 Microsoft and 13 Oracle CVE’s). Five of the bulletins have a maximum severity rating of Critical and the other four have a maximum severity rating of Important. We hope that the table be…
Today we released MS12-060, addressing a potential remote code execution vulnerability in MSCOMCTL.OCX, the binary included with a number of Microsoft products to provide a set of common ActiveX controls.
Limited, targeted attacks exploiting CVE-2012-1…
I just started to create a new web application. In the documentation, it is written that I have to prepare for the situation where users have disabled cookies. This is not the first time I have read this condition. Can anyone explain me wh…
Why does the password field not show the entered text?
When we enter password it shows … or ‘*’.
What are the security advantages of this?
When clicking on the any link in gmail or Facebook,it redirect to that link by some other ways.
What are the security advantage of new redirecting method used by gmail and Facebook?
It seems that they are mutually exclusive, as disabling one gives me the other, and vice versa. Two-factor auth for my SSH servers sounds really nice, so is there any way to accomplish this?
