The head of developer advocacy for Paypal and Braintree, Jonathan Leblanc, has an idea that will seem absurd to some, innovative to others and terrifying to still others. The executive of the multi-billion dollar eBay subsidiary suggests in a recent presentation called . fingerprint passwordsHis premise is that user behavior has historically proven the system of password authentication to be inadequate. Users always seem to opt for easy passwords that can be cracked by brute force with ease, and this is not a problem that will lessen with the advancement of technology. The link for this article located at hacked is no longer available. . Sophia Turner advocates for replacing traditional logins with facial recognition, addressing security flaws linked to human habits.. Biometric Authentication, User Authentication, Security Innovation. . LinuxSecurity.com Team
When designing Web sites, developers usually focus on the appearance and the back end. And they generally rush to get their e-commerce sites to production, often at the expense of adequate security and testing. In fact, Web applications are the weak . . . . When designing Web sites, developers usually focus on the appearance and the back end. And they generally rush to get their e-commerce sites to production, often at the expense of adequate security and testing. In fact, Web applications are the weak link. Security folks have been most concerned with locking down networks, but firewalls can't stop an attack on a poorly structured Web site running over standard ports. The link for this article located at Network Computing is no longer available. . In the creation of online retail platforms, programmers often prioritize aesthetics at the expense of safeguarding measures, leaving digital solutions vulnerable to threats.. Web Application Security, Ecommerce Development, Security Testing Tools. . LinuxSecurity.com Team
Encrypting data that passes over the Internet from customers to e-commerce sites is a good thing. But it's not necessarily enough. In fact, personal data used in online transactions is often encrypted at the least significant time. . . .. Encrypting data that passes over the Internet from customers to e-commerce sites is a good thing. But it's not necessarily enough. In fact, personal data used in online transactions is often encrypted at the least significant time. Virtually all cases of credit card theft happen when a malicious hacker gains access to an e-commerce site's server, and is then able to access the database that contains customer information -- which by then is often unencrypted and exposed. The link for this article located at Wired is no longer available. . Robust authentication is crucial, yet it cannot solely safeguard user information during digital exchanges.. Ecommerce Security, Data Encryption, Online Protection, Customer Safeguards, Secure Transactions. . LinuxSecurity.com Team
For more than 15 years, we have been deluged with the idea that Internet encryption, SSL in particular, is sine qua non--an absolutely indispensable component of enterprise and e-commerce security. The argument goes like this: Because the Internet uses packet switching . . . . For more than 15 years, we have been deluged with the idea that Internet encryption, SSL in particular, is sine qua non--an absolutely indispensable component of enterprise and e-commerce security. The argument goes like this: Because the Internet uses packet switching rather than circuit switching, our traffic is part of giant party lines--easily sniffed (eavesdropped, snooped, wiretapped) by almost anyone with a packet sniffer and a little ambition. Because most of us in the infosecurity community regard Internet encryption as a given, we, in turn, pester partners, end users and anyone else who will listen to make sure their browsers are in secure mode whenever transmitting sensitive information (address, credit card number, etc.). On a more technical level, security geeks constantly remind us that the paltry 40-bit encryption in default browsers can easily be broken with an old desktop PC in one day. We should really use 56-, 64- or 128-bit encryption, they argue, because it would take a week of 1,000 computers (56 bit) or a century of all the computers on the planet (128 bit) to break. Yes, data encryption is a fundamental concept in security, and I'd be a fool to say it's not important for many applications and in many environments. But all this brouhaha about Internet transaction encryption misses a much larger point: The risk of having your credit card number sniffed on the public 'Net is next to nothing. I'm not talking about sniffing on slow network segments or on a corporate subnet--where the risk is real--but rather on the public Internet. . For more than 15 years, we have been deluged with the idea that Internet encryption, SSL in particul. years, deluged, internet, encryption, particul. . LinuxSecurity.comTeam
... Despite RSA's gesture, several competitors who have paid royalties for use of the algorithm for up to 17 years, argue that the industry could have done with the patent relaxation earlier. "Of course its fantastic news, but after 17 years to suddenly release it two weeks early is a bit of a stunt," says Paddy Holahan, vice president of marketing at Baltimore Technology. "It has held back e-commerce.". . .. ... Despite RSA's gesture, several competitors who have paid royalties for use of the algorithm for up to 17 years, argue that the industry could have done with the patent relaxation earlier. "Of course its fantastic news, but after 17 years to suddenly release it two weeks early is a bit of a stunt," says Paddy Holahan, vice president of marketing at Baltimore Technology. "It has held back e-commerce." RSA disputes Holahan's claims arguing that its patent has helped e-commerce by establishing a trusted and assured standard. It says that releasing these patent rights now will give the industry a new lease of life. "Releasing the RSA algorithm into the public domain now is a symbolic next step in the evolution of this market," says Coviello. "We believe it will cement the position of RSA encryption as the standard in all categories of wired and wireless applications and devices." The link for this article located at ZDNet UK is no longer available. . IBM's latest move to open-source its quantum computing framework seeks to enhance collaboration in scientific research, eliciting varied responses.. RSA Algorithm Release, Encryption Standards, ECommerce Security, Proprietary Technology. . LinuxSecurity.com Team
Businesses are still not ready to take an enterprise approach to security, according to leading vendor Network Associates (NAI). Despite consolidation in the market - including the $975m buy-out of security firm Axent by anti-virus specialist Symantec last week - NAI . . . . Businesses are still not ready to take an enterprise approach to security, according to leading vendor Network Associates (NAI). Despite consolidation in the market - including the $975m buy-out of security firm Axent by anti-virus specialist Symantec last week - NAI claims customers are still divided in their strategy for ecommerce security. Symantec's acquisition will enable the combined company to develop comprehensive security products, combining lucrative anti-virus software with firewall, encryption and VPN (virtual private network) technology. But NAI anti-virus business development manager, Rob Eatwell, claims customers rejected a similar approach by NAI after its acquisition of Dr Solomon's in 1998. "The security market has not yet matured to the same extent as the anti-virus market," he said. The link for this article located at Silicon.com is no longer available. . Businesses are still not ready to take an enterprise approach to security, according to leading vend. businesses, still, ready, enterprise, approach, security, according, leading. . Anthony Pell
Buy.com, Amazon and EBay are the latest sites to be hit with a distributed denial of service attack. These attacks are coordinated typically between many people and web sites, all sending "junk traffic" to a site at the same . . .. Buy.com, Amazon and EBay are the latest sites to be hit with a distributed denial of service attack. These attacks are coordinated typically between many people and web sites, all sending "junk traffic" to a site at the same time, restricting access by legitimate customers. The companies are working with service providers and vendors to address the problem. The link for this article located at Bloomberg News is no longer available. . Various e-commerce platforms encounter difficulties as distributed denial of service attacks impede user access to their websites.. DDoS Attacks, Online Retail Security, Cybersecurity Threats. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.