quoted

Quoted in Oracle Journal about the Java zero day exploit

Source: http://oracle.sys-con.com/node/2510668 Avira Security Software Detects Java 7 Exploits   “Whenever a vulnerability like this is discovered – especially when it is in a widely distributed software like Java – the bad guys are quick to write exploits that take advantage of the flaw,” said Sorin Mustaca, IT security expert at Avira. “While Oracle ultimately needs […]

(isc)2 CSSLP

The PC is dead, long live the PC

If you have read news lately, you couldn’t have missed hearing how well the tablets, smart phones and smart TVs are selling, and how badly the PC market (excluding laptops) is doing. Many so called “futurists” have predicted the passing of the PC era. But is it really gone? Is the Personal Computer really dead, […]

General

How to enable two-factor authentication for Facebook

Facebook has introduced some time ago two-factor authentication for Login. This means that if someone or  something tries to login using your account, there will be two steps needed: authentication using username and password (something that you know) and a mobile phone (something that you have).   Step 1 Set up the two-step authentication   […]

News quoted Security

Articles about Java zero-day exploit

http://www.technewsworld.com/story/77079.html Oracle rushed out a patch for a Java flaw that was so serious the U.S. government advised users to uninstall the software. The fix might have come too quickly, however. “Developing critical software under pressure has only one consequence — even more bugs,” said Avira data security expert Sorin Mustaca. “I expect to soon […]

General

How to disable the Java web plug-in in all browsers

We have written about Java and its regular vulnerabilities, two (here and here) of which were zero-day vulnerabilities. Java is a very strong tool because it is cross platform and if a vulnerability is being found on one platform, it can easily be found on all others. If used used properly, Java can provide an […]

General

Oracle has fixed the Java zero-day exploit

After the huge media impact that followed up the full disclosure of the vulnerability in Java 7 Update 10, many national and international organizations have started to recommend to their readers to uninstall Java (Germany’s BSI, US-Cert). Oracle couldn’t just stand and see how their market share is disappearing and has started over the weekend […]

General

YAJZE: Yet another Java Zero-Day Exploit

Unfortunately, it is really the case to say that Java has “yet another zero-day exploit”. The latest version of Java, v7 Update 10 is affected and currently there is no plan for a patch. The vulnerability which is already used in online attacks is a code injection onto a fully patched Windows system running the […]

General

How to set up Dropbox’s two-factor authentication

We introduced the two-factor authentication, or two-step authentication how Dropbox calls it, and why it is necessary. Here is how you do this for Dropbox:   Step 1: 1. Go to Settings -> Security 2. Click on “(change)” on the “Two-Step verification” IMPORTANT: There seems to be a bug in the web application of Dropbox because as […]

News Security

How to create secure passwords

I started a cooperation with Kafka communication which publishes my articles in German to various publications. Here is the first one (3 pages):   Wie erstelle ich sichere Passwörter?                     PS: The translation in German doesn’t belong to me.