В предыдущей статье было продемонстрировано, как тривиальная инъекция может привести к гибели сервера, а точнее, к получению контроля над ним злоумышленником. Тогда мне в значительной степени повезло, так как доступ к БД через скуль открывал завесу к паролям от FTP

MacOS по праву считается одной из самых красивых и самых удобных операционных систем. Это основано, прежде всего, на удобном интерфейсе и "фишках", которые этот интерфейс содержит. Одной из таких "фишек" являются виджеты — удобные мини-приложения, каждое из которых выполняет свою, строго определенную функцию

A call for intercepted data to be destroyed "as soon as it is no longer required" has been described as shortsighted by the director of one of the country's leading forensic computer labs.

Microsoft has been issuing takedown notices for publicly hosting its leaked Computer Online Forensic Evidence Extractor (COFEE) tool. The company sent off "Demand for Immediate Take-Down: Notice of Infringing Activity" to companies hosting websites that offered the tool. The e-mails all start with the following standard statement: "Microsoft has received information that the domain listed above, which appears to be on servers under your control, is offering unlicensed copies of, or is engaged in other unauthorized activities relating to copyrighted works published by Microsoft."

Google has defended its free Analytics web traffic service against arguments that it conflicts with web users' privacy.

The blaze of publicity that accompanied the release of the first iPhone worms this month has sparked interest in selling anti-malware products for the device. However no such security products currently exist and Apple shows little inclination in licensing any that do get developed.

25 августа 2009-го года был выпущен релиз очередной версии Embarcadero RAD Studio. Как и предыдущая, новая RAD Studio 2010 включила в себя три полноценных продукта, предназначенных для разработки программного обеспечения - Delphi 2010, C++ Builder 2010 и Delphi Prism 2010

As you remember - a Symantec-run website was vulnerable to Blind SQL Injection problems that reportedly exposes a wealth of potentially sensitive information. Now we have a full story...

Malware and financial fraud were among the chief "growth threats" posed to businesses in 2009, according to a new study from the Computer Security Institute that will be published next week.

A survey of 104 enterprise mobility professionals showed that more than two thirds of European organizations surveyed are not fully aware what sensitive data is stored within employees' mobile devices.

Microsoft has issued a security advisory for a zero-day Internet Explorer vulnerability that emerged yesterday.

So-called Spam King Alan Rasky has been sentenced to over four years in prison for his involvement in a ‘pump and dump’ stock fraud.

Facebook administrators have blocked a clickjacking exploit that displayed images of a scantily clad woman on profile pages without first prompting the user for permission.