What we do and don't know about Microsoft's Morro

Ars does a little digging to find out more about Microsoft's new security-related product, codenamed Morro. We tell you what we found out and where we met roadblocks erected by Microsoft.

November 21, 2008 - 03:34PM CT - by Emil Protalinski

Microsoft to aid in war on terror, builds software for DHS

Microsoft has joined forces with GIS vendor ESRI to build a suite of collaboration tools for intelligence gathering and processing. This software will be used by the Department of Homeland Security's fusion centers.

November 21, 2008 - 09:19AM CT - by Ryan Paul

Symantec and Kaspersky on OneCare's death: good riddance

Symantec and Kaspersky have given us statements on Microsoft's announcement to axe OneCare and offer a free anti-malware solution instead. Neither answer is very pro-Microsoft.

November 20, 2008 - 03:37PM CT - by Emil Protalinski

McColo reconnect highlights network security gap

The ongoing battle against malware-friendly, child pornography-distributing ISP McColo hit a snag over the weekend when the ISP activated an emergency connection agreement and hopped back online. McColo's access was cut once again within hours of the reconnect, but the event raises security concerns over how such emergency contracts are negotiated.

November 19, 2008 - 01:30PM CT - by Joel Hruska

EU launches public consultation on Internet security

The European Union has launched a public consultation on Internet security and is requesting feedback from the public about how to address network infrastructure security challenges.

November 19, 2008 - 10:30AM CT - by Ryan Paul

US court orders keylogger CyberSpy to halt software sales

The Federal Trade Commission (FTC) won an injunction today against software vendor and keylogger developer CyberSpy. The US district court ruling prohibits CyberSpy from selling or operating its RemoteSpy software package.

November 18, 2008 - 07:37PM CT - by Joel Hruska

Microsoft to kill off Windows Live OneCare next year (Updated)

Microsoft is phasing out Windows Live OneCare and will be replacing it with a free, yet-to-be-announced, solution.

November 18, 2008 - 04:35PM CT - by Emil Protalinski

Quick Take: Eikon fingerprint reader

For $50, you can add a fingerprint security reader to any computer with a USB connection, provided it's running Windows or the MacOS.

November 18, 2008 - 02:50PM CT - by John Timmer

DDoS attacks, DNS cache poisoning keeping ISPs up at night

New data on the state of ISP security through 2008 suggests that companies are better equipped to deal with many common threats than they were in years past. DNS cache poisoning, and BGP hijacking, however, are both considered to be significant threats.

November 17, 2008 - 02:24PM CT - by Joel Hruska

Equifax's new age-verification tool cumbersome, limited

Equifax has launched a new service that lets you securely prove that you're over 18 online. It's a good idea in theory, but there are major problems in how Equifax is going about it.

November 13, 2008 - 08:55PM CT - by Jacqui Cheng

Analysis: iPhone "exploit" much ado about nothing

Ars investigates the recent iPhone "Default.png" controversy and concludes that there's little to worry about.

November 13, 2008 - 11:43AM CT - by Erica Sadun

Spam sees big nosedive as rogue ISP McColo knocked offline

Another swing, another hit, and another rogue ISP responsible for spam and child porn goes offline. The bloggers behind the Washington Post's Security Fix have helped to take down a major contributor to the spam deluge.

November 12, 2008 - 04:35PM CT - by Joel Hruska

AVG incorrectly flags user32.dll in Windows XP SP2/SP3

This weekend, AVG 7.5 and 8.0 users found that their antivirus software was incorrectly detecting a critical Windows file as a trojan. AVG has moved to fixe the problem and offer support to users who still need it.

November 11, 2008 - 07:37PM CT - by Emil Protalinski

Apple releases iLife Support 8.3.1 with security fixes

Apple has released the iLife Support 8.3.1 update for Mac OS X Tiger users, which includes stability and other minor fixes, and also repairs three security holes related to image files.

November 11, 2008 - 08:42AM CT - by Justin Berka

Study: Storm botnet brought in daily profits of up to $9,500

It's common knowledge that spam response rates are low, but new research, conducted from within the Storm botnet, suggests it's downright minuscule. If true, it explains why spam botnets have to be the size they are, and suggests the malware industry could be targeted economically.

November 10, 2008 - 01:45PM CT - by Joel Hruska

Microsoft Patch Tuesday for November 2008: two bulletins

Microsoft will patch two vulnerabilities on Tuesday. One of the vulnerabilities are marked "Critical," and the other is "Important." Details on both are inside.

November 07, 2008 - 12:21PM CT - by Emil Protalinski

Battered, but not broken: understanding the WPA crack

WiFi security takes a hit with the disclosure of an effective exploit for small packets encrypted with the TKIP flavor of WiFi Protected Access. The technique is fiendishly clever; the security solution, simple: switch to AES-only in WPA2.

November 06, 2008 - 07:25PM CT - by Glenn Fleishman

NIST crowdsources crypto with SHA-3 algorithm competition

A contest launched by the National Institute of Standards to determine the successor of SHA-2 will end on Friday. NIST expects to receive 40 submissions to choose from, including one authored by security expert Bruce Schneier and his colleagues.

November 06, 2008 - 06:15AM CT - by Ryan Paul

Microsoft puts Windows 3.11 for Workgroups out to pasture

After fifteen years and God knows how many copies sold, Windows 3.11 has finally shuffled off this mortal coil for good. As of November 1, it's no longer possible to acquire an embedded license for the now-fully deprecated operating system.

November 05, 2008 - 11:43AM CT - by Joel Hruska

IBM looks to beat identity thieves with a USB ZTIC

IBM has announced a new USB device that's aimed at making online banking transactions more secure. The new ZTIC ("stick") device allows a user to detect man-in-the-middle attacks by doing a little man-in-the-middle work of its own.

November 05, 2008 - 07:00AM CT - by Jon Stokes