tibidy.com

Cross-read the freshest news on politics, techology and culture.

Articles tagged with securityoxo weboxo

oxo Remove a tag from the tag selection

Twelephone Is A Telephone That Connects To Your Twitter Feed And Your Customers

Twelephone is a new service for making calls right from your Twitter account. The service is one of the first to use the new WebRTC standard, which allows for real-time communication in the Chrome browser via JavaScript APIs. The enterprise will serve as Twelephone’s business model. The idea: a customer with a problem with a product or service gets reached through Twitter. The consumer gets a voice or video call by clicking on a link in a tweet. WebRTC will soon be available on Firefox and Opera. Microsoft says it is on their roadmap. Apple has not said if WebRTC will be supported in Safari. With WebRTC, Twelephone Founder Chris Matthieu says his service can capture the microphone and camera on a user’s computer — all on high-definition audio and video without the middleman. No Flash is needed. Instead, the P2P network offers the capability to create data channels, such as audio and video, instant messaging, and file transfers. It provides a secure, encrypted connection. Twelephone ...

api apis appfog apple applications authorities business capabilities chris chrome extension collaboration communications connection firefox flash javascript matthieu microsoft node opera paas question safari security service technology telecommunications teleku trillion twelephone twitter twitter-connected version viability voxeo web webrtc

Found more than 1 month ago on channel TechCrunch

Web served, part 3: Bolting on PHP with PHP-FPM

After setting up server and security, we get to deliver some active content.

php php-fpm security web

Found more than 1 month ago on channel ArsTechnica

HTTP Strict Transport Security Becomes Internet Standard

angry tapir writes "A Web security policy mechanism that promises to make HTTPS-enabled websites more resilient to various types of attacks has been approved and released as an Internet standard — but despite support from some high-profile websites, adoption elsewhere is still low. HTTP Strict Transport Security (HSTS) allows websites to declare themselves accessible only over HTTPS (HTTP Secure) and was designed to prevent hackers from forcing user connections over HTTP or abusing mistakes in HTTPS implementations to compromise content integrity."

adoption connection hsts https https-enabled implementation integrity internet mechanism policy security web

Found more than 1 month ago on channel Slashdot

Hacker Grabs 150k Adobe User Accounts Via SQL Injection

CowboyRobot writes "Adobe today confirmed that one of its databases has been breached by a hacker and that it had temporarily taken offline the affected Connectusers.com website. The hacker, who also goes by Adam Hima, told Dark Reading that the server he attacked was the Connectusers.com Web server, and that he exploited a SQL injection flaw to execute the attack. 'It was an SQL Injection vulnerability, somehow I was able to dump the database in less requests than normal people do,' he says. Users passwords for the Adobe Connectusers site were stored and hashed with MD5, he says, which made them 'easy to crack' with freely available tools. And Adobe wasn't using WAFs on the servers, he notes. Tal Beery, a security researcher at Imperva, analyzed the data dump in the Connectusers Pastebin post and found that the list appears to be valid and that the hacked database was relatively old."

adam adobe beery connectusers cowboyrobot grabs hima imperva pastebin security sql injection tal vulnerabilities wafs web

Found more than 1 month ago on channel Slashdot

With 50M Users In Tow, OpenDNS Looks To Bring Enterprise Security Into The Mobile Era

Bring up the topic of "enterprise security platforms" around polite company, and you may be quickly shown the door. The subject can be boring, but the truth is that enterprise security writ large are critical, ideally making the Web a safer place for both businesses and consumers by policing malware, botnets, phishing and other malicious software. Of course, today businesses big and small are moving to the cloud, adopting services like Dropbox, Box and Google Apps in droves. In turn, employees are increasingly going mobile, both in where they work and how they work, as they now carry multiple phones, view documents on their iPads, and collaborate on projects hosted on these services outside of the office. Yet, while workforces (enterprise included) are increasingly remote, mobile and nomadic, security services haven't adapted to this change in user behavior. When employees go out on the road, for example, their network's security doesn't follow them.

business documents dropbox google ipads office opendns security service web

Found more than 1 month ago on channel TechCrunch