• On CBS MoneyWatch: 6 things NOT to do on Twitter, Facebook

Security

Read all 'novell' posts in Security
November 13, 2008 4:23 PM PST

Equifax offers its first I-card

by Robert Vamosi
  • 7 comments

Online information cards or I-cards such as this one from Equifax may one day be used instead of passwords to access Web sites.

Equifax on Thursday introduced it's first information card or I-card, Equifax Over 18 card. I-cards are envisioned to be the online equivalent of a driver's license, passport, or similar ID. The basic idea is that customers would have an electronic wallet with various information cards that would allow customers to bypass typing in user names and passwords.

In this case, the Equifax card proves--via a trusted third party--that you are over 18 when accessing specially marked Web sites. "With fraud and identity theft on the rise, companies need better, more secure ways to conduct transactions online and take their identity management practices to the next level," said Steve Ely, president of Equifax Personal Information Solutions, in a statement.

In June Equifax was among a handful of companies behind the new Information Card Foundation. Other companies include Google, Microsoft, Novell, Oracle, and PayPal. For example, Microsoft's new Geneva project relies upon ICF standards. The Equifax card is one of the first I-cards based on the ICF standard that users can sign up and use.

In the near future, the foundation hopes that I-cards will contain personal data such as profile, purchase preference, payment, or verified identity information, as well as password information. Kim Cameron, an identity and access architect for Microsoft, told CNET News in June that the cards really do improve online security. "There's this endless digital baptism of filling in forms and logging in everywhere, and it creates a wonderful environment for the criminal element through phishing attacks and what have you because on the Internet no one does know you are a dog."

To produce the card, Equifax worked with Parity, an information management company that last month announced an online card site based on open ID card standards.

Those interested in trying out the I-card can sign up with Equifax or use Parity's Azigo I-card management software to enable one-click sign-in and identity verification. One demo site for the service requires an Equifax Over 18 I-card just to watch the video (alas, no nudity here, just an explanation of the card's uses).

August 26, 2008 9:42 AM PDT

Ubuntu issues security patch for kernel flaw

by Renai LeMay
  • Post a comment

Ubuntu on Tuesday became the latest Linux vendor to patch a vulnerability in the open-source operating system's kernel that could have left the door open for hackers to find their way into users' machines.

In an e-mail sent overnight, the Linux vendor warned users to update all machines running recent versions of Ubuntu, ranging from 6.06, which was released back in mid-2006, to version 8.04, which came out earlier this year. The problem also applied to other versions of Ubuntu such as Kubuntu, Edubuntu, and Xubuntu.

"It was discovered that there were multiple NULL-pointed function de-references in the Linux kernel terminal handling code," wrote Ubuntu administrators in the e-mail. "A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service."

The e-mail also detailed a number of other bugs that could be exploited by an attacker who already had some level of access to a computer running Ubuntu.

A number of other Linux vendors including Novell have recently released similar patches to address the problems.

Renai LeMay of ZDNet Australia reported from Sydney.

  • prev
  • 1
  • next
advertisement

Google's mobile hopes go beyond Nexus One

The world may have thrilled to the potential for a Google Phone, but what Google actually unveiled is its plan for a new smartphone world order.
• Photos: Unboxing Nexus One

Using your smartphone safely

faq Worms, Trojans, and SMS attacks are risks for mobile phones, but the biggest practical threat to users is losing the device.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

Most Discussed



advertisement

Inside CNET News

Scroll Left Scroll Right