Timothy Dyck

Last month, the free software foundation released GNU compiler collection 3.1. Release Coordinator Mark Mitchell describes GCC 3.1 as focused on fixing bugs introduced in GCC 3.0. GCC is a set of compilers for C, C++, Objective-C, Java, Fortran and Ada. Support for Ada is new in this release; Ada Core Technologies GNAT (GNU Ada […]

Weve been waiting for software like this for more than two years. Instead of the rubbing-two-sticks-together method of adding security code to each Web service or manually configuring Web server layer security, Systinet Corp.s WASP (Web Applications and Services Platform) 4.0 provides a Web administration tool to set access control rights per Web service or […]

On Saturday, Gobbles Security posted a second exploit for Apache HTTP Server chunked encoding vulnerability. As in the first exploit, the source code for apache-nosejob states that over a two-month research period, Gobbles Security discovered how to use the attack against not just BSD operating systems, but also against Solaris 6 through Solaris 8 on […]

The addition of Sun One Directory Server 5.1 and future inclusion of Sun Open Net Environment Application Server 7 Platform Edition deliver significant value to Solaris shops and are important competitive catch-up steps for the operating system. Sun Microsystems Inc.s Solaris 8 bundled an iPlanet LDAP server but didnt actually use it. In contrast, Solaris […]

Doing its part to benefit from Linuxs surging market share, Solaris 9 has gained some significant Linux-oriented features. Release 9, by default, includes Solaris versions of a number of common libraries found on Linux (Glib, GTK+, libxml2 and Tcl/Tk, as well as JPEG, PNG and TIFF image libraries). Linux software that uses APIs exported by […]

I love books. I have thousands of them stuffed into bookshelves, boxes and any flat surface in my house. I also love technology, willing to suffer the pains of half-baked gear to try out new ideas, and have three PDAs—two I own and one I have for testing. Given this combination, I have been eager […]

Mobile application developers face tough choices deciding which mobile hardware is the best strategic platform and how to deal with the network connectivity problems that plague mobile workers. iConverse Inc.s Adaptivity 3.1, which started shipping last month, is built on iConverses Mobile Studio thin-client development tool. Adaptivity enables iConverses thin-client applications—which, ordinarily, must have a […]

OpenSSH, the secure shell server (and one of the worlds most important pieces of security software), has been redesigned to add privilege separation for increased resistance to attacks. Niels Provos, an OpenSSH developer, has pulled out all the code that performs user authentication and put it into a much simpler (and easier-to-secure) separate process. “The […]

Security researcher David Litchfields announcement that he will give vendors only one week to release security patches before he publicly announces new vulnerabilities highlights the difficult debate over how to best protect IT assets. Software vendors are often slow to fix problems in their products, and outside pressure (through disclosure and media publicity) is often […]

While web services security standardization gets hammered out, IBM and Systinet Corp. are allowing organizations to experiment on Java-based Web services with next-generation security systems. IBMs Web Services Toolkit 3.1, released last month, is the first implementation of the WS-Security (Web Services-Security) specification that IBM co-authored with Microsoft Corp. and VeriSign Inc. Posted on the […]

With an executable only 196KB IN size, Marius Milners Network Stumbler wireless sniffer packs a lot of punch into a tiny package. “Its really helpful for administrators trying to lock down their sites,” Milner told me at NetWorld+Interop in Las Vegas earlier this month, when he was attending eWeek and PC Magazines i3 (Innovation In […]

Two specifications propose to fill the security gaps in SOAP: SAML, from OASIS, and WS-Security, from IBM, Microsoft Corp. and VeriSign Inc. Neither of these standards has been widely adopted, but they are leading contenders for modeling how Web services security will eventually happen, and Web services adopters should be investigating them now. Security Assertion […]