Results tagged "TLS"
Total Search Results : 5
Protecting Yourself From NSA Web Surveillance
September 11, 2013 07:01 PM
After new reports of NSA digital snooping, security expert Bruce Schneier advises Internet users to use public-domain encryption. Meanwhile, Google steps up its encryption efforts.F5 Networks 'Fixes' Data Center Security
January 24, 2012 11:00 AM
Arguing that multiple point appliances intended to secure a network only add to complexity without providing the intended protection, F5 Networks is introducing what it calls a Data Center Firewall to combine multiple security solutions into one appliance. The appliance, called BIG-IP model 11050 and carrying a starting price of $129,995, delivers such security features as dynamic threat defense, DDoS protection, protocol security, SSL termination and a network firewall.Certificate Authority Compromises Are Global In Reach
September 09, 2011 01:48 PM
There has already been a lot written about the compromise at DigiNotar, GlobalSign and Comodo. One day we will look at the summer of 2011 as the time when the PKI collapsed. That's not hyperbole. The problems with certificate authorities and the inherent weakness they present have been known for years--a fact we alluded to as far back as 1997. Browsers accept certificates as trusted in that they have the signing CA certificate in their local browser store. Browsers do not check that a particular CA is authorized to actually issue a particular server certificate. The trust is universal. That is why the attacks on DigiNotar, GlobalSign and Comodo are so serious and have global impact.Releasing Firesheep: Right Intention, Wrong Action
October 25, 2010 04:57 PM
Eric Butler released Firesheep, a Firefox extension that makes stealing others' Web sessions trivial. Firesheep steals the cookies associated with a user session and then uses the cookie to let you, the attacker, start a new HTTP session impersonating the victim. It's trivial. All you need is to be able to sniff the traffic over the air or off the wire. I spent all of 3 minutes downloading and installing Firesheep before I hijacked my wife's Facebook session. It also works on other common social media sites such as Twitter and Yelp. You can also add new sites that use session cookies. Butler said he released Firesheep to shine a light on a prevalent problem. I agree that session stealing, aka sidejacking, should be addressed. But releasing a tool my grandmother could use is irresponsible.Does 802.11i Solve Your WLAN Security Problems?
July 12, 2004 12:00 PM
The new security standard provides momentum for what could be a major ramp up of WLAN implementation in the enterprise.
