Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×
Security

Submission + - Should Auditors Be Liable for Certifications? (channelinsider.com)

dasButcher writes: "Enterprises and mid-size business rely on auditors and service providers to certify their systems as compliant with such security regs and standards as PCI-DSS or SOX. But, as Larry Walsh speculates, a lawsuit filed by a bank against an auditor/managed service provider could change that (http://blogs.channelinsider.com/secure_channel/content/data_security/breach_lawsuit_could_reset_security_liabilities_to_service_providers.html). The bank wants to hold the auditor liable for a breach at its credit card processor because the auditor certified the processor as PCI compliant. If the bank wins, it could change the standards and liabilities of auditors and service providers in the delivery of security services."
Cellphones

Submission + - No source for Docomo phones without purchase 4

An anonymous reader writes: For several years now, Panasonic and NEC have released Linux-based feature phones on the Japanese cellular carrier NTT Docomo network. However it seems that they may be violating Section 3 of the GPL by requiring a valid IMEI number to receive the source code. Panasonic's download site. NEC's download site. The GPL requires that the source either accompany the product or that it be made available to any third party upon request. Have these manufacturers broken the license agreement by demanding additional requirements?

Slashdot Top Deals

All life evolves by the differential survival of replicating entities. -- Dawkins

Working...