Dennis Fisher

A new timing attack against the AES algorithm can be used to extract entire Advanced Encryption Standard keys from remote servers. Daniel Bernstein, an associate professor at the University of Illinois at Chicago, recently released a paper showing how an attack against a server running the OpenSSL AES implementation could recover the entire encryption key. […]

PalmOne announced on Tuesday that Ed Colligan will permanently assume the role of CEO. Colligan has served as interim CEO since early this year, when former CEO Todd Bradley stepped down. Colligan joined PalmOnes predecessor, Palm Computing, in 1993 as vice president of marketing and was part of the team that helped launch the original […]

The Federal Trade Commission, perhaps having run out of things to do, suggested that Americans forgo giving jewelry and flowers on Mothers Day and instead give mothers an FTC e-card, which includes tips on safeguarding their personal data. The FTCs e-card message is set to cloying piano music and starts with a Hallmark-esque poem thanking […]

Internet Security Systems Inc. this week will unveil its Proventia Desktop intrusion prevention system offering and introduce a virus-fighting technology that does not rely on digital audiotape files or signatures to detect malware. Known as the Virus Prevention System, the feature employs virtual-machine technology to prevent viruses from executing on PCs. When the Proventia software […]

Officials at Intel last week posted a notice on eBay offering $10,000 for a mint copy of the magazine in which company co-founder Gordon Moore laid out his theory on whether the exponential increases in the number of transistors per integrated circuit would continue unabated. In a paper printed in the April 19, 1965, issue […]

Qualys this week is releasing Version 4.0 of its QualysGuard security service, which adds a feature that allows security administrators to audit and enforce corporate policies. The new functionality is meant to help enterprises track their compliance with the myriad regulations, such as Sarbanes-Oxley and HIPAA, that have information security or privacy components. QualysGuard now […]

In response to the continued escalation of security threats, Juniper Networks announced last week that it has begun producing daily signature updates for its intrusion detection system and intrusion prevention system products. Currently, Juniper customers get weekly updates that are an accumulation of whatever signatures were produced during the week. Now, customers will have the […]

After some strong words from both sides, Sybase and Next Generation Security Software last week ended their dispute over how much information NGS should be able to release regarding flaws the company found in a Sybase product last year. Sybase had threatened legal action against NGS last month to prevent the security research company from […]

Permeo Technologies last week introduced its Base5 solution, a hybrid security offering that combines the capabilities of a clientless SSL VPN with advanced endpoint security controls. Base5 connects users to corporate networks via the session layer and enables them to use any application available on the network, not just Web-enabled applications. Users download an applet […]

Daily life in most big-city hospitals is nothing like what you see on “ER,” with doctors rushing around continually, dashing from patient to patient, dealing with seemingly endless crises. In fact, most staff doctors and nurses work long, tiring shifts that are often filled with mundane diagnoses and treatments, along with a lot of downtime. […]

Security experts are expressing outrage over legal threats from Sybase Inc. aimed at preventing a British research company from publishing details of serious flaws in one of the companys products. The legal maneuvering would hurt users and vendors by thwarting dissemination of critical security information or by forcing researchers to publish advisories and code anonymously […]

As large security vendors try to squeeze more speed out of high-end intrusion prevention systems, a few smaller vendors are poised to introduce IPS solutions that can adjust protection levels dynamically and lock down vulnerable assets before attacks commence. NFR Security Inc., of Rockville, Md., and V-Secure Technologies Inc., of Saddle Brook, N.J., are each […]