Новости за 03.10.2016

There is a huge problem with the ugly Internet of Things (IoT). Many IoT thingies have the security of wet tissue paper, and they’re being used in large swarms and masses to wreak havoc.

Dell EMC has fixed six flaws in its management interfaces for VMAX enterprise storage systems, including three vulnerabilities that are rated critical and could lead to the exposure of sensitive files or a complete system compromise.

The hackers who are auctioning off cyberweapons allegedly stolen from the National Security Agency are growing annoyed and want cash.

Millions more deserted Microsoft's browsers last month, adding to what can only be described as a collapse of the company's place in the browser world.

Apple CEO Tim Cook has a hunch about the future of augmented reality, and whether it will ever become mainstream.

There's a lot to like in Microsoft's Windows 10 Mobile for smartphones, but it has one glaring weakness: It still is a 32-bit OS.

Network World started its Wider Net stories in 2003 in an effort to lighten up our news pages, acknowledging that there is a lot more to the world of enterprise networking and IT other than speeds and feeds of switches and routers and WAN links.

Microsoft is adding to its European cloud infrastructure, with plans to open new data centers in France next year, CEO Satya Nadella said Monday.

The Elite Tactical Pro 300 Series Tactical Flashlight is constructed from heavy-duty, military grade material, and claims to be the best and brightest flashlight on the market with a powerful 1200 lumen intensity. It's built with Cree LED technology and is complete with a zoomable feature that allows you to concentrate light into specific areas, something they've indicated could be useful in situations requiring self-defense. The design is waterproof and shockproof making it ideal for rainy nights... Читать дальше...

If you think your mobile phone bill is too damn high, you’re absolutely right. Like many people, I’ve always felt I was overpaying for mobile service. (Talk to IT departments at companies large and small, and many will tell you that despite significant corporate discounts, they also feel they pay too much. )

The U.S. government needs to be ready to use its offensive cyberweapons in response to attacks from other nations, Republican presidential candidate Donald Trump said Monday.

I’ve long been a proponent of organizations that have an API-driven strategy. API (Application Programming Interface) is a term used to describe the technical integration points between applications, between devices and between services. It is, for want of a better analogy, the small piece of code that acts as the universal socket into which other tools, products or devices can plug. In a time where legendary venture capitalist and entrepreneur Marc Andreessen famously quipped that software is eating the world... Читать дальше...

When shopping online and paying with a credit or debit card, you have to enter the three-digit CVV (card verification value) from the back. These are card-not-present transactions and entering the security code is supposed to help verify that you physically have the card. But cyber thugs have plenty of ways to get hold of your CVV and burn through your money until you happen to notice the purchases and cancel your card. In fact, card-not-present transactions made up 65 percent of all card fraud.

Most of the recent data breaches involve customer information such as user names and passwords, credit card numbers, and medical histories. The companies hacked are hurt -- they have to contact victims, pay for credit monitoring services and fines, and may lose customers, brand reputation, and market value -- but that is collateral damage.

The Internet Corporation for Assigned Names and Numbers, the long-time coordinator of the internet's Domain Name System, is independent of U.S. government oversight, at least for now.

No man is an island.

Neither are enterprise IoT projects. 

Enterprise technology is meant to enhance customer service and improve business efficiency. Internet of Things (IoT) projects have to integrate with other business applications to make this happen. How do you bridge IoT islands to mainland business applications?

A recent project by Ephlux with Oracle IoT Cloud Service shows the way.

The need

The project involved a commercial HVAC contracting service that... Читать дальше...

“If you ever happen to find yourself in Indonesia, there are two important things you need to know about the way the internet operates there. The first thing is before anyone can look at anything online all of the content first has to pass through this tiny, disorganized, chaotic server room in Jakarta. The second thing you need to know is that there’s a man in charge of that room” — and he can take anything offline at any time.

Attackers have a time advantage over static computer networks because the bad guys can simply hover around the network for long periods, study it and look for an advantage. The computer network is usually just sitting there, dawdling like unfortunate prey silhouetted in a hunter’s rifle scope.

The source code for a trojan program that infected hundreds of thousands of internet-of-things devices and used them to launch distributed denial-of-service attacks has been published online, paving the way for more such botnets.

So, I’ve decided I need to improve the privacy and security of my life (especially as it relates to computing). And I’ve come to the conclusion that in order to effectively do this, I need to focus on utilizing open source software as much as possible. 

AMD's new 7th Generation Pro chips have hooks to let PC users easily upgrade to next-generation Zen chips that could come out next year.

Data center power management vendor Eaton’s newest product has sensors that that the company says will proactively warn customers of when equipment component failures are likely to occur.

Waratek is introducing a feature to its Java-protection platform that enables upgrading to the current version of Java without having to install Java updates or touch the apps running within the Java virtual machine.

The European Commission is preparing to fine Google for paying smartphone makers to exclusively use its search engine on their mobile devices, according to Reuters.

Rotating cryptographic keys is a security best practice, so it's good news that ICANN has begun the process to change the root key pair underpinning the security of the DNS. While the chances of a misstep is small, the fact remains that changing the root key pair has never been done before. A mistake can potentially -- temporarily -- break the Internet.