buzzardsbay - Slashdot User

Submission + - New Hack Exploits Common Programming Error (techtarget.com)

Submitted by

buzzardsbay

on Monday July 23, 2007 @09:37AM

buzzardsbay writes: "TechTarget's security editor, Dennis Fisher is reporting that researchers at Watchfire Inc. have discovered a reliable method for exploiting a common programming error, which until now had been considered simply a quality problem and not a security vulnerability. According to the article, the researchers stumbled upon the method for remotely exploiting dangling pointers by chance while they were running the company's AppScan software against a Web server. The good folks at Watchfire will detail the technique in a presentation at the Black Hat Briefings in Las Vegas in August, Fisher writes."

Submission + - Time to spike Microsoft's Patch Tuesday

Submitted by

buzzardsbay

on Thursday May 10, 2007 @11:13AM

buzzardsbay writes: "Techtarget's resident security curmudgeon, Dennis Fisher, is calling for an end to Microsoft's monthly security patching cycle. Fisher points out that 'a hacker only needs one unpatched system, one little crack in the fence in order to launch a major attack on a given network. The sheer volume of the patches Microsoft releases each month makes it quite difficult for even the most conscientious IT department to get every patch out to all of the affected systems in a reasonable amount of time.'"

Slashdot Top Deals