protocol

A promising new key management standards effort

At ESG, we have this concept called ubiquitous encryption. As more and more encryption technologies are baked into products and enter the enterprise, data will likely be encrypted everywhere--on hard drives, networks, database columns, file systems, tape drives, portable media, etc.

Good news for data confidentiality and integrity but all of this encryption means tons of new encryption keys to create, protect, and manage. This situation has scared me for a while. If encryption keys are stolen, they can easily unlock secret data. If encryption keys are lost, critical data can turn into useless 1s and 0s.

Of course, what'… Read more

Microsoft expands licensing program for mobile Exchange

Microsoft announced Thursday it expanded its Exchange ActiveSync IP licensing program and posted technical documents to spur development of prototype applications that link to its Exchange Server and Exchange ActiveSync-enabled mobile phones.

The Exchange ActiveSync software is designed to allow mobile phones to receive wireless push e-mail, as well as synchronize calendar, contacts and tasks. It also aims to allow companies to manage wireless devices and enact security policies.

The software giant also posted the protocols on the Microsoft Developer Network and expanded the licensing program to establish greater clarity on the steps and licensing terms that are needed when … Read more

WPA wireless encryption cracked

Researchers have found a method of cracking a key encryption feature used in securing wireless systems that doesn't require trying a large number of possibilities. Details will be discussed at the sixth annual PacSec conference in Tokyo next week.

According to PCWorld, researchers Erik Tews and Martin Beck have found a way to crack the Temporal Key Integrity Protocol (TKIP) key, used by Wi-Fi Protected Access (WPA). Moreover, they can do so in about 15 minutes. The crack apparently only works for data aimed at a Wi-Fi adapter; they have not cracked the encryption keys used to secure data … Read more

Internet-scale 'man in the middle' attack disclosed

Correction at 3:15 p.m. PDT: This post initially misstated the meaning in this context of ASN. It stands for Autonomous System Notation.

In Black Hat's October Webinar on Thursday, Anton Kapela, datacenter manager at 5Nines Data, spoke about Internet-scale "man in the middle" attacks.

The talk reprised a last-minute substitution presentation he gave along with Alexander Pilosov at this year's Defcon conference in August. During the conference, the two researchers intercepted all conference Internet traffic at the Riviera Hotel in Las Vegas and ran it through their servers. According to Black Hat founder and … Read more

Buzz Out Loud 774: The feel-good episode of the year

That's sarcasm, I'm afraid. Lots of bad news today, including the tragic end to the Spam King escape story, the cell-phones-and-cancer debate makes a resurgence with some serious recommendations for careful use, and AOL starts up a fire sale. In good news, though, a new iPhone firmware upgrade is on deck, and it may bring turn-by-turn GPS AND copy and paste. But you know, don't get your hopes up. Have a great weekend! Listen now: Download today's podcast EPISODE 774

Escaped ’spam king’ allegedly kills self, family http://news.cnet.com/8301-1009_3-9999451-83.html

Cancer doc urges … Read more

Google open-sources XML-alternative Protocol Buffers

XML, it seems, has run out of steam for Google.

Google said Monday that it has created an open-source project for a data interchange format called Protocol Buffers.

The software is meant to solve the problem of sharing information in a wide range of formats between servers at high speed. It's also designed to let companies like Google upgrade software on a network of connected servers without causing hiccups.

Google thought of using XML as a lingua franca to send messages between its different servers. But XML can be complicated to work with and, more significantly, creates large files … Read more

Featured Freeware: Adium

Formerly one of the most popular and customizable third-party clients for AOL Instant Messager, Adium faded from the public eye during development. The supercharged new version emerges from hibernation as Adium X. It supports multiple services, including AIM, Yahoo, MSN, and Napster. Part of what made the original Adium so attractive was its multitude of options, which still forms the core of this revision.

Adium allows for an incredible level of customization, with near-infinite tailoring of the user interface to make the buddy dock and chat windows look and behave as you wish. Adium supports group chats, displays your status … Read more

Microsoft, DOJ issue status report on interoperability compliance

Federal antitrust regulators and Microsoft issued a joint status report Tuesday on the software giant's compliance with the 2003 final judgment on interoperability with third parties.

In the interim report, the parties focus on efforts by the U.S. Department of Justice to enforce the final judgments of the 2003 order and Microsoft's work on complying with those judgments.

The final settlement stems from a 2002 consent decree, which the court, in a ruling earlier this year, extended by two years. Under the settlement, Microsoft agreed to be subject to antitrust review for compliance of the consent decree, … Read more

First Look video: SmartFTP

Do you maintain a Web site or blog? If so, you've probably experimented with several FTP clients to keep your site up to date. While there are a lot of good File Transfer Protocol apps available, SmartFTP continues to stay high on our Most Popular list for good reason: It has the features you need and it's incredibly easy to use.

Whether you're a pro Web designer or are looking to start your own site, check out this First Look at SmartFTP, the affordable shareware FTP client with pro-level features.

Featured Freeware: Pidgin

Your mother uses AOL Instant Messenger. Your spouse prefers MSN. Your office insists on Yahoo. Your ex is on MySpaceIM (shudder). What are you going to do? You could run all those chat clients at once, or you could use the multichat protocol app formerly known as Gaim: Pidgin, available for Windows, Linux, and in a portable Windows version. Like Trillian, Fire, and other third-party IM clients, this open-source messaging application lets you access multiple IM networks from one window, including Google Talk and ICQ as well as lesser-known protocols such as Jabber and Gadu-Gadu.

Pidgin's IM features are … Read more