Lisa Vaas

The eBay villagers are whispering that he can creep through eBays internal databases and suck the lifeblood of customer accounts—log-ins and passwords—right out of their pulsing, 222 million-plus customer heart. Hes putting up bogus listings as fast as eBay can take them down, and that proves hes walked through a security hole as big as […]

I had to laugh at this comment left on the Keznews.com post, which was about KezNews.com users’ claims to have hacked Vista product activation: “After having bought and installed Vista Ultimate 64 bit, I doubt the sanity of anyone who makes the change. I wouldn’t do it again for free, especially illegally. —Gregory Steffey“ Well, […]

The Web site of the National Oceanic & Atmospheric Administration (NOAA) has been infiltrated by either an authorized insider or a hacker who has littered its “hot items” section with more than 70 pages advertising the prescription drug Soma, a muscle relaxer. The apparent hack was first noticed and reported to NOAA by Thor Schrock, […]

In the wake of incidents such as TJXs potentially massive loss of data to theft, reported in January, it shouldnt come as a surprise to find that 90 percent of companies plan to plug in new technology to secure electronic copies of intellectual property in the coming year. That was one finding of a report […]

Users who have downloaded the 2.1.1 version of the open-source blogging platform WordPress should upgrade all files to 2.1.2 immediately, since they could include a security bug injected by a cracker who gained user-level access to one of the servers that powers wordpress.org, according to a release posted on WordPress’ site on Friday. WordPress received […]

ARLINGTON, Va.—Unless you were at Black Hat on Feb. 28, you probably woke up safe in the assumption that if a rootkit hit your system, reimaging would remove it. You probably also thought that the best way to search a PCs volatile memory, or RAM, was by grabbing it with a PCI card or a […]

After receiving a letter threatening possible patent litigation that caused IOActive to cancel his Feb. 28 Black Hat briefing, IOActive R&D director Chris Paget did give his Hacking RFID talk after all. Sort of. With the ACLU on hand. In a briefing with all references to radio-frequency identification card maker HID expunged, and with attendees […]

Symantec Security Response has spent months throwing every hack but the kitchen sink at Microsofts Vista operating system, and on Feb. 28 it released a series of papers that showed just how bloodied or victorious Vista remained. The result: “There are existing codes that can survive Vista without being modified— [certain] keyloggers, worms, Trojans, and […]

A Storm worm variant using both e-mail and Web sites to infect Windows-based PCs is injecting itself into the responses people are leaving on blogs. Dmitri Alperovitch, principal research scientist at Secure Computing, told eWEEK that the worm is injecting itself into the operating system as a rootkit and is capable of intercepting Web traffic. […]

Rohm and Haas makes things stick. The glue that holds the first sheet of tissue paper to the roll, the stuff that keeps your candy bar wrapper snug on your chocolate, the chemicals in paint that keep it stuck to the wall. There are good sticky things, and then there are the stickies stuck onto […]

After a flurry of “yes it’s fixed” and “oh no it’s not” between bug researchers over the weekend, the verdict is that Firefox 2.0.0.2 did indeed fix the memory corruption flaw found by Polish hacker Michal Zalewski on Feb. 23. Zalewski posted his version of the story that took place behind the fix—a story that […]

Microsofts UAC in its Vista operating system release was meant to signify that finally, the company has gotten serious about securing Windows by limiting a users rights during day-to-day computer usage. Its come to signify something much less than security or trust in the minds of some security experts, though. Security expert Joanna Rutkowska kicked […]