Twitter
RSS

Archive for July 29th, 2010


U.S. should seek world cooperation on cyber conflict, says ex-CIA director

Computerworld - LAS VEGAS — The U.S. needs to consider working with other leading nations to develop rules of engagement in cyberspace, retired general and former director of the CIA Michael Hayden said during a keynote address at the Black Hat conference here on Thursday.

As the country with the largest stakes on the Internet, the U.S. has been somewhat reluctant to engage in such discourse because of concerns that any international negotiations will force it to reveal or limit its cyber capabilities, Hayden said.

However, the complexities involved in defining cyber conflict, and in developing an effective deterrence and response strategy, are driving the need for at least some high-level engagement with other nations, he said.

“We have been really late to any international debate on arms limitation in cyberspace,” Hayden said. “Our voice in this is going to get weaker as

Read the rest

Read More...

Twenty-Four More Reasons Not To Trust Your Browser’s "Padlock"

For anyone who still feels comforted when they see a padlock appear in the corner of their browser for “secure” sites, Robert Hansen and Josh Sokol are ready to bombard you with reasons you shouldn’t–two dozen of them.

On stage at the Black Hat security conference Wednesday, Hansen and Sokol revealed 24 new security issues with SSL and TLS, the digital handshakes that browsers use to assure users they’re at a trusted site and that their communication is encrypted against snoops.

All of those vulnerabilities come with a big caveat: Like any SSL or TLS vulnerability, exploiting them requires a hacker to first install man-in-the-middle software on the user’s network. But browsing the Web from an insecure wireless connection–say, in a coffee shop, hotel, or a conference full of hackers like this one–has always been the time when users depend on secure browsing to avoid

Read the rest

Read More...

Former NSA Director: Countries Spewing Cyber Attacks Should Be Held Responsible

LAS VEGAS — Attribution is one of the biggest problems on the internet when it comes to cyberwarfare. How do you hold a nation responsible for malicious attacks if you can’t determine whether or not the activity was state-sponsored?

Retired General Michael Hayden, former director of the National Security Agency, said on Thursday that one solution being discussed in government is to simply forget about trying to determine if the source of an attack is state-sponsored or not and hold nations responsible for malicious activity coming from their cyberspace. His words were greeted with applause from the audience of computer security professionals.

“Since the price of entry is so low, and . . . it’s difficult to prove state sponsorship, one of the thoughts . . . is to just be uninterested in that distinction and to actually hold states responsible for that activity emanating from their… Read the rest

Read More...

Microsoft slates IE9 beta for September

Computerworld - MIcrosoft will ship a beta of Internet Explorer 9 (IE9) in September, a company executive said today.

If the timeline is accurate, the IE9 beta release will come a month later than earlier speculation, which had settled on August, a pick based in large part on PowerPoint slides purportedly from a Microsoft presentation that focused on Windows 8, the next iteration of the company’s OS.

Today, Kevin Turner, Microsoft’s chief operating officer, said that IE9 would reach beta this fall. “We’re really excited about IE9, which will be beta and coming out in September,” said Turner during the company’s annual day-long presentation to Wall Street analysts.

Turner also boasted of Internet Explorer’s recent turnaround, claiming that it had gained usage share the last two months.

According to Web analytics company Net Applications, IE did increase its global share by

Read the rest

Read More...

Former U.S. General: "On The Internet, We Are All Poland"

The Internet’s lack of fundamental security isn’t a new problem. But as the specter of cyberwar rises and the Pentagon’s Cyber Command gets in gear, Former General Michael Hayden’s keynote address at the Black Hat security conference offered a darkly funny reminder of the frustrations that digital conflict poses for a military that historically has sought to dominate land, air, sea and space.

“There’s a distinction between the other four domains and cyber. God made four, you made the last one,” he said to the crowd of cybersecurity researchers and hackers at the Las Vegas conference. “God did a better job.”

“You guys made the cyber domain look like the north German plain. Then you bitch and moan when you get invaded,” he continued. “On the Internet, we are all Poland. We all get invaded on the Web. The inherent geography of this

Read the rest

Read More...