rc3.org

Looks like the misreporting of the mass SQL injection attack continues. The exploit is associated with MS SQL Server, not IIS or ASP. It’s confusing because most people run the full Microsoft stack, but the exploit will work against any site that does not prevent SQL injection and uses MS SQL as its database. [...]

[Read more →]

I’ve been reading up on the mass SQL injection attack launched against servers running IIS and MS SQL Server last week. That article is a bit out of date, as the problem turned out not to be a security hole in IIS but rather security holes in the Web applications themselves. The script that compromised [...]

[Read more →]

Datawocky: The story behind Google’s crawler upgrade. How Google is crawling data accessible only through forms. Ars Technica: Red light camera monkey business may be a national trend. More on short yellow lights designed to result in red light camera tickets. Wide Awake Developers: Amazon Blows Away Objections. How Amazon is expanding the capabilities of its [...]

[Read more →]

Stephen O’Grady: Clouds Rolling In: The Google App Engine Q&A. Great rundown. Bruce Schneier: The Feeling and Reality of Security. Understanding the differences and how to manage them is the key to successful security policy. FP Passport: The Olympic torch’s mysterious companions. The torch escorts are members of a paramilitary group sponsored by the Chinese government. Their [...]

[Read more →]

gourmet.com: Betting the Farm. Great article on agriculture policy and how one family farm in South Dakota is bucking the trend of cashing in on ethanol money and government subsidies. Rogers Cadenhead: Washington Post Wins Another Phony Pulitzer. I loved the Washington Post article about the violinist planted in the DC subway, but Rogers argues that [...]

[Read more →]

Scott Horton: Worst. President. Ever. What interests me most about the list is that every President other than Bush (43) who could be described as the worst ever was a single termer. Bush’s main competition, Millard Fillmore, was not elected in the first place (he took over for Zachary Taylor, who died after 16 months [...]

[Read more →]

Los Angeles Times: The Kareem Abdul-Jabbar Blog. One of your more erudite former athletes. Bruce Schneier: The Security Mindset. I envy it, but it’s not how my mind works. The American Prospect: The Obama Doctrine. An attempt to discern Barack Obama’s general philosophy on foreign policy. Jim Henley: Henley Everywhere 2008alt. When you were as right as he [...]

[Read more →]

Jon Udell interviews Ward Cunningham about how the Eclipse portal exposes its innter workings by way of reports on test results, and the advantages the resulting transparency provides. Really, really interesting stuff. Bruce Schneier discusses a report on the lack of security in implantable medical devices that provide [...]

[Read more →]

Bruce Schneier explains why he runs an open wireless network. I leave mine open as well, so it’s nice to know I’m in good company.

[Read more →]