[Further updated to include advance word of Jay Rosen/Dave Winer "Rebooting the Media" podcast - #75 coming Monday Dec 6] [Updated to include PayPal announcement of the closure of WikiLeaks' PayPal account.] Is Web 3.0 maybe going to be less the utopia we've been envisaging and more like the real, physical world, with all the real-world limitations that follow along with it...? The latest WikiLeaks ("Cablegate") affair, coming as it does at the very end of the first decade of the 21st Century, comes at an appropriate moment. An undoubted political and diplomatic hornet's nest, the swirling discussions surrounding the organization's drip-drip release of (so far) 612 of the quarter of a million or so diplomatic cables in its possession are all grist to the mill of an "awakening" that in my view is likely going to mark the difference between the Web of 2000-1010 and that... (more)

Viewpoint: Seven Technical Security Benefits of Cloud Computing

Craig Balding's Cloud Security Blog In my view, there are some strong technical security arguments in favour of Cloud Computing - assuming we can find ways to manage the risks. With this new paradigm come challenges and opportunities. The challenges are getting plenty of attention - I'm regularly afforded the opportunity to comment on them. However, let's not lose sight of the potential upside. In this post, I walk through seven technical security benefits. Some are immediate, others may arise over time and have conditions attached (some unstated for the sake of brevity). However, I’m including the longer-range benefits now to raise awareness. Some of the outcomes listed are available today without the Cloud, but they are either complex and slow to implement (and thus less likely to happen) or prohibitive for capital cost reasons. I don’t claim this is a definitive l... (more)

PCGAUX Aids Typhoon Ondoy (Ketsana) Victims in the Philippines

The Philippines on Ulitzer There's been an outpouring of concern and aid from many people in the US and elsewhere to help victims of the flooding caused by Typhoon Ondoy in the Philippines. One place to send aid--an organization that's not as well-known as it should be--is the Philippine Coast Guard Auxiliary. http://www.pcgaux.org/ The Auxiliary is not part of the Philippine government. Rather, it is a group of seaworthy, dedicated volunteers who assist the Philippine Coast Guard in many areas: search and rescue, public education, environmental protection, and several other civic-minded functions. I spent several years with the U.S. Coast Guard Auxiliary and got to know many people around the world who volunteer for similar organizations in their countries. One of the great people I met along the way is Commodore Harold Wolf of the Philippine auxiliary. I've just been... (more)

New Encryption Solution From Sun Microsystems Sets Bar for Online Application and Transaction Security

SAN FRANCISCO, Feb. 14 /PRNewswire-FirstCall/ -- At the RSA Security Conference, Sun Microsystems today announced the latest in hardware security: the new Sun Crypto Accelerator 6000 (SCA6000) designed as a high-performance Hardware Security Module (HSM) for Sun Fire(TM) servers with a tamper-resistant secure crypto key store. Priced lower than competing HSM products on the market, the SCA6000 offers industry leading performance and internal-to-server HSM capabilities. The Sun Crypto Accelerator 6000 exceeds FIPS 140-2 Level 3 requirements and enables a new vision for hardware-based cryptographic security by offering an industry-focused solution for Web Services, e-Commerce, Finance and Banking, Government, Retail, Healthcare, ISPs, and Telecommunications. Together with the leading Solaris(TM) Cryptographic Framework, Java(TM) and Sun's latest SPARC- and AMD Optero... (more)

InfoSecurity Products Guide Names NetContinuum Application Security Gateway 2000 Winner of the 2006 Global Excellence in Gateways Award

SANTA CLARA, Calif., June 6 /PRNewswire/ -- NetContinuum, the leader in Web Application Firewalls and Secure Application Gateways, today announced that the NC-2000 Application Gateway has been awarded the Customer Trust 2006 Global Excellence award by Info Security Products Guide, a Silicon Valley Communications publication and leading publication on security-related products and technologies. More than 18,000 end-users and prospective customers worldwide were invited to vote for the products they trust the most when it comes to protecting their digital resources. The NC-2000 Application Gateway combines NetContinuum's powerful web application firewall with a complete suite of traffic management capabilities into a single rack-mount appliance. With the NC-2000 AG, application layer security, load balancing, and application acceleration are all delivered from a sing... (more)

Vormetric Announces the Addition of AOmega to Its Payment Card Industry (PCI) Partner Program

SANTA CLARA, CA -- (MARKET WIRE) -- 07/24/06 -- Vormetric, a leading provider of security solutions for protecting sensitive data from unauthorized access, today announced that AOmega, an information security consulting firm, joined its PCI partner program. AOmega performs quarterly PCI network security scans for Level 1, 2 and 3 merchants and service providers, Annual Self Assessments for Level 2 and 3 merchants and service providers and detailed PCI remediation services ranging from firewalls to mitigating insider threats. The PCI DSS (Payment Card Industry Data Security Standard) is a compliance initiative agreed upon by the payment card industry (Visa USA, MasterCard International, Amex and Discover) that requires best-practice security standards for merchants and service providers that handle payment card information. The standards require on-site audits, self-a... (more)

Leading Thai Telecommunications Provider CAT Telecom Selects Proofpoint to Power New MSP Email Security Services

CUPERTINO, Calif., Dec. 6 /PRNewswire/ -- Proofpoint, Inc., the leader in large-enterprise messaging security solutions, today announced that CAT Telecom Public Company Limited (CAT Telecom), one of the largest telecommunications providers in the Thai market, has partnered with Proofpoint to provide hosted email security services as part of its expanding services portfolio. CAT Telecom's MSP email security solutions are powered by the Proofpoint Messaging Security Gateway(TM) appliance and offer both inbound (anti-spam, anti-virus and zero-day threat protection) and outbound (data privacy, confidential information protection) security features. CAT Telecom's Proofpoint-powered offerings are available to Thai enterprises immediately. Proofpoint channel partner Raydant International, based in Bangkok, provided pre-sales support during CAT Telecom's evaluation process ... (more)

Video: SPI Dynamics Announces the Addison-Wesley Professional Digital Short Cut Secure ASP.NET AJAX Development Written by Jason Schmitt, the Company's Group Product Manager and AJAX Development Expert

ATLANTA, March 19 /PRNewswire/ -- S.P.I. Dynamics, Inc. (http://www.spidynamics.com/), the leading provider of web application security testing software and services, today announced the new release of the digital Short Cut titled, Secure ASP.NET AJAX Development authored by the company's Group Product Manager, Jason Schmitt, who oversees strategy for SPI Dynamics' developer and quality assurance security testing solutions. The digital Short Cut PDF published by Addison-Wesley Professional, an imprint of Pearson Technology Group, highlights the security challenges of AJAX web applications and best practices for secure web application development with AJAX technologies. Short Cuts are concise PDF documents about a cutting-edge technology that shows great promise, or an existing technology that has reached the "tipping point" and is about to take off. To view the Mul... (more)

One of World's Largest Rental Car Companies to Deploy Aladdin eToken to Meet Payment Card Industry (PCI) Data Security Standard Compliance Requirements

CHICAGO, July 2 /PRNewswire-FirstCall/ -- Aladdin Knowledge Systems , the leader in Software DRM, USB-based authentication, and secure Web gateways, today announced that one of the world's largest rental car companies will be deploying thousands of Aladdin eToken USB authentication keys across many of its U.S. facilities next month. The selection of Aladdin eToken follows a lengthy evaluation process by the company, directly competing against numerous other solutions to meet Payment Card Industry (PCI) Data Security Standard compliance requirements. (Logo: http://www.newscom.com/cgi-bin/prnh/20040416/CGALADDINLOGO ) The company will also be deploying Aladdin's industry-leading Token Management System (TMS) in order to efficiently and easily manage its rental car company employee credentials, as well as the complete token life cycle and its associated security applic... (more)

Clearswift Survey: ''When It Comes to Data Security Breaches, the General Public Doesn't Need to Know''

When it comes to data security breaches, 78 percent of US IT decision-makers feel that companies do not need to inform the general public; this according to a recent survey by content security specialists Clearswift. While respondents felt the general public did not need to know (78%), they did indicate that affected customers and partners should be informed (95%) while less than half of them felt that industry regulators (42%) or even the police (35%) should be notified. Of the U.S. organizations polled, 19 percent had suffered a data loss in the last 12-18 months, and of those, 50 percent had experienced more than one. Despite the fact that more than 89 percent of those surveyed said that data loss/data breach was a very important or critical issue to their organizations, the research indicated that they are still not locking down the transfer of sensitive inform... (more)

Trusteer Named Rookie Security Company of the Year Finalist in 2009 SC Awards Program

Trusteer, the customer protection company for online businesses, today announced that it has been named a finalist for the ‘Rookie Security Company of the Year’ in the 2009 SC Awards program. The SC Awards recognize outstanding achievement in information technology (IT) security. Trusteer was selected from hundreds of entries, and is one of only five finalists in this highly coveted category. A panel of 18 leading chief security officers from major corporations and large public sector organizations will select the winner. “Being named a finalist for ‘Rookie Security Company of the Year’ is a tremendous achievement and honor for Trusteer,” said Mickey Boodaei, CEO of Trusteer. “Our unique approach to securing consumer data during online sessions with financial institutions and other web businesses assumes the desktop is infected with malware. The Rapport product is ... (more)