Targetting the OS is old hat….



The Register sums up the Black Hat briefings pretty well. The Operating System level has received a lot of scrutiny in recent years for security flaws and as a result there has been a good deal of improvement there and so now, researchers are heading to the low hanging fruit of the REST of the software stack, be it the drivers, or browsers, or office software. Another area of software were those class of programs that run checking for updates for OTHER software. It’s time to realize that most ANY piece of software could compromise system security and updates need to be expected for most any part of the “software stack”.


What’s troubling though is reports that many of these software vendors are unprepared for security disclosures from researchers. Many do not have an easy way to be contacted with security related issues. What this mean is that we may be in for somewhat of a rocky ride as malware writers would seem to gain an upper hand by software developers lack of preparedness. Hopefully though, it will force most all shops (large and small) to adopt standard was of dealing with security related issues and announcements.

BTW, the original article showed up at Security Focus and was redistributed by the Register.

Related Posts

Blog Traffic Exchange Related Posts
  • Antivirus update response times We know that for Windows systems especially antivirus is a must. Up to date antivirus is the MOST important though. So how do the different vendors do in responsiveness and quick antivirus definition updates...? The SecurityFix has an article on just that today. The comparison is courtesy of av-test.org. Some......
  • How to Remove Internet Security 2010 | Internet Security 2010 Removal Guide Internet Security 2010 is the name of a rogue antivirus application that is one of the more recent to be making the rounds. It will typically install itself on your system through the use of other malware. These rogue antivirus applications typically will pop up warnings and alerts about the......
  • How to Remove System Adware Scanner 2010 | System Adware Scanner 2010 Removal Guide System Adware Scanner 2010 is a new and aggressive rogue antivirus application. Once installed on a system it creates a program that acts as a guard of sorts for it's main process. This guard process is called noterminate and will pop up warnings and encourage users to purchase the rogue......
Blog Traffic Exchange Related Websites
  • Lending Club Update: Earning 15.6% NAR on P2P Lending Investments ~ ~ ~ April 2011 Update: Shutting Down My Lending Club Investments over Q&A Change ~ ~ ~   My Lending Club investment portfolio is┬ácontinuing┬áto look fairly impressive as we close the books on 2010. Summary Net Annual Return is up to 15.64% NAR. My highest observed NAR was 15.69%,......
  • Coming Up with a Blog Niche Are you beginning a brand new blog? One of the first decisions that you are going to want to make is where you want to put your blog, and then you are going to need to choose a blog niche. One of the best ways to get your blog started......
  • Adoption Corruption 2) Research the adoption related laws and regulations of a few sending countries 2) Research the adoption related laws and regulations of a few sending countries --No one knows everything about every country, so try to understand a couple of countries well. --If you know the rules, you will be able to recognize when they are being followed or broken --Start with the......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site