"Access control and authentication" news, interviews, and features

News about Access control and authentication

Dropbox adds U2F support for better security

It's a better option for high-security environments, one analyst says
Oracle CSO to customers: we don't need your (false positive) bug reports

Oracle's CSO thinks customers who reverse-engineer its code in attempts to find bugs should cut it out because they're not finding much worth acting on ...
Researchers find way to steal Windows Active Directory credentials from the Internet

The technique could enable attackers to attack Windows servers hosted in the cloud
File sync services provide covert way to control hacked computers

Researchers highlight the potential use of file synchronization services for stealthy and persistent remote control
No building access card? No problem if you have new Def Con tools

A slew of new RFID hacking tools will be released at the Def Con conference next month
FinalCode keeps files safe wherever they go

Startup FinalCode secures files so permissions that protect them follow them around even when they are accessed outside secured networks.

Are your smartphone apps selling you out?

Just because you're paranoid doesn't mean your mobile apps aren't out to get you
The true root causes of software security failures

Developers being overly trusting is one of them
12 hybrid security products to watch

Increasingly security vendors are offering a hybrid approach to their product portfolios
Unseen, all-out cyber war on the US has begun

Security pros and government officials warn of a possible cyber 9/11 involving banks, utilities, other companies, or the Internet
Security Manager's Journal: A reality check for the department's maturity

An assessment of the information security department shows that it still has a lot of growing up to do.
Kenneth van Wyk: The good and bad of Android and iOS

The good and bad of iOS and Android