Computer Internet network security News

Google’s GMail has one of the most robust spam filtering processes in the world. By using Gmail one can put a very strong spam filter check on receiving email.

How to configure 

You must have two email accounts to start with. If you dont have two email accounts then ask your ISP or arrange one more to start.

Suppose you have email name@domain.com. Now, set up gMail , if you don’t have , You’ll need an invitiation to join GMail – to get one, ask a friend who is using GMail to send you an invite. If you dont have friend too then browse around on the web to get one through other website. Once you have it then login to your account and Click on the Settings link, then the Forwarding and POP section.

Check the option for Forward a copy of incoming mail to and type in the second email address.

. Click Save Changes, and logout of GMail.Above is a magic how to get free services from gmail to protect your non gmail email accounts. a very simple trick to save bucks for getting separate antispam software.  I hope you like the trick.

Email security antispam, Email security, email-security, gmail, spam-filter

The MSXML parser is intended for installation in “side-by-side” mode, which allows you to install the specific versions of the MSXML parser that you want without one installation of the MSXML parser affecting another. Thus, all separate versions of the MSXML parser can coexist. In addition, the new and previous DLLs for the parser can reside “side-by-side” on your computer.

An alternate method for the installation of the parser is to as the Replace Mode. In Replace Mode, all the references to any version references of the MSXML parser are updated so that only the latest version of the MSXML parser is used.

Therefore, when you run Xmlinst.exe, Xmlinst.exe may cause programs to fail that were written and tested with specific versions.

Note that if you run Xmlinst.exe, Xmlinst.exe may cause system instability and can cause programs to fail. After you run Xmlinst.exe, the computer is in an unsupported state. Furthermore, the changes made by Xmlinst.exe are global to the computer on which Xmlinst.exe was run, and thus affect all the programs that use the MSXML parser.

Read full story at

http://support.microsoft.com/kb/278636/

Microsoft security, xml security Microsoft security, microsoft-xml, msxml, xml security, xml-errors, xml-fix

Windows defender is a useful tool to detect and remove the spyware from your computer and give you an ease in an online environment.  It also have capability of updating with latest updates available by microsoft.

The benefits which you can avail from this tool is as follow

1- It detects spyware.

2- Eliminates spyware easily.

3- Improves browser safety.

4- Recognize and stop the new threats.

5- It works at backwnd without disturbing your work.

6- It can also do the schedule scanning.

It have multiple language support. For your copy you may refer to microsoft site at www.microsoft.com

Microsoft security Computer threats, Microsoft security, Microsoft-security, Spyware, windows_defender

Microsoft provides several different XML parsers. The System.xml parser and the System.XML.XmlReader XML parser are included with the Microsoft .NET Framework 2.0. The MSXML parser is included in the Msxml.dll file, the Msxml2.dll file, the Msxml3.dll file, the Msxml4.dll file, the Msxml5.dll file, the Msxml6.dll file, and one or more resource files. Notice that Windows HTTP Services (Winhttp*.dll) is also included with some versions of MSXML.

The Microsoft XML parser is a Component Object Model (COM) implementation of the W3C DOM model. Two versions are associated with each parser: the release version of the MSXML parser and the actual file version of the DLL that contains the parser. The release version of the MSXML parser (for example, versions 2.5, 2.6, 3.0, 4.0, 5.0, and 6.0) identifies the milestone of development.

The following are the versions which Microsoft has released till now.

xml security Microsoft security, msxml, xml security

There will be conference on xml in December 2007. The full detail is as follow.

There are two ways to register for the conference:

1. You can register online by visiting the IDEAlliance Conference Registration site
2. You can download and print out the PDF registration form and mail or FAX it with payment information.

Either way, we look forward to seeing you in Boston this December!

Registration Information

Advanced Registration Deadline

Register early to avoid long lines. Advanced registration closes on Friday November 23, 2007 – 5:00pm EST. Registration will reopen onsite December 3 at 7:30am EST. A $100 onsite fee will be added to all onsite conference registrations. (This fee excludes those registering for the exposition only.)

Registration Hours

Monday December 3rd: 7:30am to 6:00pm EST
Tuesday December 4th: 8:00am to 5:00pm EST
Wednesday December 5th: 8:00am to Noon EST

Payment Policy

All valid registrations MUST be accompanied by full payment or government purchase order. Acceptable forms of payment are via credit card (VISA, MasterCard or American Express), government purchase, and wire transfer (upon request).

Confirmation Policy

Confirmations will not be sent until complete payment is received. Completed on line registrations will receive an email confirmation immediately while faxed registrations will receive a confirmation via fax or email within 7-10 business days after registration is processed.

Academic Policy

To receive the Academic Rate, registrations MUST be accompanied by a copy of you faculty ID from an accredited college or university.

To receive the Student Rate, registrations MUST be accompanied by a copy of your full time student ID from an accredited college or university.

Please send copies of your ID and registration form to IDEAlliance at the address below.

Cancellation Policy

Cancellations must be received in writing. If received before October 19, 2007, only a $100 processing fee will be incurred. No portion of the registration fee will be refunded after October 19. Substitutions are welcome.

Questions

Contact IDEAlliance Registrar

1421 Prince Street, Suite 230
Alexandria, VA 22314
T: +1 703-837-1070
F: +1 703-837-1072
Email: registrar@idealliance.org

Business security Business security, xml security, xml-2007, xml-conference

ModSecurity installation consists of the following steps:

1. ModSecurity 2.x works with Apache 2.0.x or better.
2. Make sure you have mod_unique_id installed.
3. (Optional) Install the latest version of libxml2, if it isn’t already installed on the server.
4. Unpack the ModSecurity archive
5. Edit Makefile to configure the path to the Apache ServerRoot directory. You can check this by identifying the ServerRoot directive setting in your httpd.conf file. This is the path that was specified with the “–install-path=” configuration flag during compilation (for example, in Fedora Core4: top_dir = /etc/httpd).
6. (Optional) Edit Makefile to enable ModSecurity to use libxml2 (uncomment line DEFS = -DWITH_LIBXML2) and configure the include path (for example: INCLUDES=-I/usr/include/libxml2)
7. Compile with make
8. Stop Apache
9. Install with make install
10. (Optional) Add one line to your configuration to load libxml2: LoadFile /usr/lib/libxml2.so
11. Add one line to your configuration to load ModSecurity: LoadModule security2_module modules/mod_security2.so
12. Configure ModSecurity
13. Start Apache
14. You now have ModSecurity 2.x up and running.

For any kind of mod security details you can refer to

http://www.modsecurity.org/

ModSecurity Data Security, installation-modsecurity, installing-modsecurity, mod-security, ModSecurity

With respect to the International Standards
Organization’s (ISO) seven layer Open Systems
Interconnection (OSI) model, the 802.11 standard directs
only layer one (Physical) and layer two (Data Link or
Medium Access Control (MAC)) specifications. The
encapsulation of data within each successive layer enables
all lower layers to function without regard for their
higher layer payloads. This chapter is included in order
to provide the reader with an understanding of the 802.11
layer one and two functions as they relate to location
authentication

Networking security IEEE, Networking security, wep, Wireless network security

• Participate in the discussion forum.
• Read Benoît Marchal’s tip “Implement XMLReader ” (developerWorks, November 2003), which explains how to use a transformer to write syntactically correct documents.
• Check out “SAX, the power API” (developerWorks, August 2001), which explains how to use a SAX parser and compares event-based APIs (like SAX) to object-based ones (such as DOM).
• Avoid the pitfalls of XML namespaces — read Uche Ogbuji’s article “Use XML namespaces with care” (developerWorks, April 2004), part of his “Principles of XML design” series.
• Review the other installments of Benoît Marchal’s Working XML column.
• Find hundreds more XML resources on the developerWorks XML zone.
• Browse for books on these and other technical topics.
• Learn how you can become an IBM Certified Developer in XML and related technologies.

About author of above information.

Benoît Marchal is a Belgian consultant. He is the author of XML by Example, Second Edition and other XML books. You can contact him at bmarchal@pineapplesoft.com or through his personal site at marchal.com.

xml security xml security, xml-resources, xml-security

Since the rss technology the duplication of data is at the peak. Many websites are showing the same data over and over. If not atleast one post excerpt one can see on the different places.

Is there any check for this?

Copyright is the only solution for this evil but one cannot claim copyrights of his or her hundreds or thousands of articles or posting. There should be a technology or measures to stop this.

Google has introduced the penalty corner for those who duplicate the data but the issue is how it knows that who is the original author. If some one have no copyrights on material and being syndicated by others.  This issue may take time to resolve.

I think the content theft can be stopped from being growing if all the search engines and directories act together. There must be a data or content submission form to the  search engines and the person who submit it first will be the original author. If the same data is found on other sites must be penalise. But in real world it is very difficult to be deployed.

Another possible issue can be through crawling, the content found first on crawling becomes its genuine author but there is also a drawback. The sites which are not listed on serach engines or are being crawled less frequently may suffer.

The only option of DMCA left behind. But every body cannot follow the lengthy and expensive process of DMCA.

Rss security content-syndication, content-theft, DMCA, rss, Rss security, rss-copyright

The 802.11 standard describes the communication that occurs in wireless local area networks (LANs). The Wired Equivalent Privacy (WEP) algorithm is used to protect wireless communication from eavesdropping. A secondary function of WEP is to prevent unauthorized access to a wireless network; this function is not an explicit goal in the 802.11 standard, but it is frequently considered to be a feature of WEP.

WEP relies on a secret key that is shared between a mobile station (eg. a laptop with a wireless ethernet card) and an access point (ie. a base station). The secret key is used to encrypt packets before they are transmitted, and an integrity check is used to ensure that packets are not modified in transit. The standard does not discuss how the shared key is established. In practice, most installations use a single key that is shared between all mobile stations and access points. More sophisticated key management techniques can be used to help defend from the attacks we describe; however, no commercial system we are aware of has mechanisms to support such techniques.

The following two sections describe the problems in the algorithm and the technical details of our attacks; they assume some background understanding of cryptographic protocols. You may wish to skip to the following section, which discusses the practicality of the attacks.

Wireless network security alogrithm, Encryption, network, wep, Wireless network security

More serious problems can arise from the use of encodings. Developers often overlook the fact that encodings do not limit the set of characters that XML supports. Every XML document supports the full Unicode character set (16-bit or 32-bit characters in XML 1.1).

Encoding XML documents can reduce their size, but it does not limit the document to a subset of Unicode — thanks to the magic of character entities. Indeed, through character entities, it is possible to insert any character from the Unicode table, even if the document uses the most restrictive encoding (US-ASCII, which is only good for four languages: English, Hawaiian, Latin, and Swahili).

This is a problem because while a Java application or a recent version of DB2® might support Unicode, few legacy applications do. So if the XML stream feeds a legacy application, you must deal with Unicode. To avoid misunderstanding, let me state again that imposing an encoding is not a solution because, as explained above, it is always possible to escape special characters to character entities.

Because rewriting a legacy application is seldom an option, you need a conversion routine that will convert Unicode characters into a set that is acceptable to the application — for example converting “î” into a straight “i” (removing the circumflex). Most XML parsers provide routines for manipulating Unicode characters.

xml security encoding, xml security, xml-persers, xml-security

 A passive eavesdropper can intercept all wireless traffic, until an IV collision occurs. By XORing two packets that use the same IV, the attacker obtains the XOR of the two plaintext messages. The resulting XOR can be used to infer data about the contents of the two messages. IP traffic is often very predictable and includes a lot of redundancy. This redundancy can be used to eliminate many possibilities for the contents of messages. Further educated guesses about the contents of one or both of the messages can be used to statistically reduce the space of possible messages, and in some cases it is possible to determine the exact contents.

When such statistical analysis is inconclusive based on only two messages, the attacker can look for more collisions of the same IV. With only a small factor in the amount of time necessary, it is possible to recover a modest number of messages encrypted with the same key stream, and the success rate of statistical analysis grows quickly. Once it is possible to recover the entire plaintext for one of the messages, the plaintext for all other messages with the same IV follows directly, since all the pairwise XORs are known.

An extension to this attack uses a host somewhere on the Internet to send traffic from the outside to a host on the wireless network installation. The contents of such traffic will be known to the attacker, yielding known plaintext. When the attacker intercepts the encrypted version of his message sent over 802.11, he will be able to decrypt all packets that use the same initialization vector.

Wireless network security networking-security, wep, Wireless network security, xor