Search

Copyright of PC Welt Plus is the property of IDG Communications, Inc. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

The article offers information on the launch of digital, Wi-Fi enabled doorbell called iDoorCam. It mentions that iDoorCam will enable its users to see, hear and talk to visitors at their front door using an application on a compatible smartphone or tablet. It discusses the constituents of device which includes a doorbell button, a video camera, a built-in microphone and a speaker to a small housing.

While the Zigbee wireless standard has traditionally ruled the roost when it comes to wireless smart bulb protocols, Bluetooth appears to be gaining momentum. [ABSTRACT FROM AUTHOR]

The article discusses the launch of Wireless Protected Access, or WPA encryption service and security protocols announced by Wi-Fi non-profit organization Wi-Fi Alliance.

The article offers information on the Key Reinstallation Attack (KRACK) Wi-Fi vulnerability. It states that it targets third step in four-way authentication handshake when Wi-Fi client device attempts to connect to protected Wi-Fi network. It cites that devices using Wi-Fi will be vulnerable to KRACK. It mentions that updated devices are protected against KRACK.

The article reports on the move of the information technology company Microsoft Corp. to release security updates on the Windows Update service. It states that the update protects customers against the Wi-Fi Protected Access (WPA2) protocol vulnerability called KRACK. It mentions that several devices including iPhones, Android phones, and routers require patches to be protected against KRACK.

The article offers brief information on the Cisco Smart Install (SMI) protocol from networking hardware company Cisco Systems Inc.

The article reports on Mellanox Technologies' plan to launch HDR Infiniband computer-networking communications standard in 2017. Topics covered include the expected 100 increase in the speed of Infiniband to 200 billions bits per second (GbpS), speed that is twice the top speed of Ethernet and comments from Dell'Oro Group analyst Sameh Boujelbene.

The article reports on web site security and performance solutions provider CloudFlare Inc.'s early adoption of the Transport Layer Security (TLS) 1.3 secure communications protocol. Topics discussed include the availability of TLS 1.3 in beta versions, the protocol's removal of some vulnerable cryptographic algorithms in TLS 1.2, and the Internet security benefits of the adoption of TLS 1.3.

The article focuses on the suggestions offered by the Cloud Security Alliance for keeping big data secure. Topics discussed include using Kerberos authentication, computer network authentication protocol, for establishing trust against data leakage, using strong encryption methods like Advanced Encryption Standard (AES) and Secure Hash Algorithm 2 (SHA-256) for data; and prediction by market researcher Gartner, related to the improper use of big data analytics.

The article focuses on the success of technology firm Microsoft and the Samba project in fixing a vulnerability in the implementation of the Server Message Block/Common Internet File System (SMB/CIFS) protocol after the flaw was announced under the name Badlock. Topics covered include the announcement of Badlock's existence by Samba consulting firm SerNet, the rating given by Microsoft on the impact of the vulnerability and the response of Trustwave's Karl Sigler to Badlock.

The article reports that Stefan Metzmacher, a core developer of the Samba software, has discovered a critical vulnerability on April 12, 2016 that will affect the Windows and Samba implementations of the Server Message Block (SMB) protocol. SerNet, the company where Metzmacher works, announced on Twitter that on April 12, 2016, SerNet, the Samba Team and Microsoft Corp. will disclose a severe bug that affects almost all versions of Microsoft Windows and Samba.

The article focuses on the Encryption Everywhere program of software firm Symantec. Topics covered include the goal of providing free basic Secure Sockets Layer/ Transport Layer Security (SSL/TLS) certificates to domain owners through Web hosting companies, the partnerships signed by the firm with hosting providers and the opportunity for customers to opt for paid premium packages. Also mentioned is the adoption of the freemium pricing model.

The article reports on the dangers of intentionally weakening encryption based on studies of attacks against Transport Layer Security (TLS) connections. Topics covered include the launch by researchers of the attacks FREAK, Logjam and DROWN, the efforts by the U.S. government to keep cryptography under control, and the emergence of export-grade encryption algorithms. Also mentioned is the impact of intentional encryption weakening on the security of the Internet.

The article reports that the ZigBee Alliance, a group of companies that maintain and publish the ZigBee standard, will start certifying devices that use the Thread network protocol for networking in 2016.

The article reports that researchers from security firm SEC Consult have found that thousands of routers, modems, Internet Protocol (IP) cameras, voice over IP (VoIP) phones and other embedded devices share the same hard-coded Secure Shell (SSH) host keys or HTTP Secure (HTTPS) server certificates. SSH host keys are used to verify the identity of a device, which runs an SSH server.

The article reports on the vulnerability to errors of computers that use the Network Time Protocol (NTP) in keeping the time. Topics discussed include a 2012 incident wherein two servers operated by the U.S. Navy reset their clocks to year 2000, rate-limiting mechanism of NTP, and the attack on the Kiss O'Death packet. The expiration of the Secure Socket Layer/Transport Layer Security (SSL/TLS) is also mentioned.

The article offers brief information on the network protocol Weave application layer from Nest along with Nest Cam API for connected home devices.

The article reports on the warning of Level 3 Communications to make preventive steps in addressing the sudden increase in Distributed Denial of Service (DDoS) attacks on hosting and gaming companies through the use of portmap. Topics covered include the open-source utility RPCbind for Unix systems as well as for Windows for mapping port numbers of networks. Also mentioned are DDoS amplification attacks through network time protocol (NTP) remote code vulnerabilities.

The article reports on possible Disitributed Denial of Service (DDoS) attacks on computers that run BitTorrent programs. Topics covered include the DDoS reflection technique used in attacking User Datagram Protocol (UDP)-based protocols such as the Network Time Protocol (NTP) and Domain Name System (DNS). Also mentioned are attacks on the BitTorrent Sync (BTSync) through the Message Stream Encryption (MSE) and countermeasures such as limiting Micro Transport Protocol (uTP) messages.

The article discusses on the progress of Thread Group's networking protocol which could be the main language for connected home devices and is designed to form, secure, low-power mesh networks out of short-range links among devices like thermostats, light bulbs and security cameras. The Thread group has a membership of more than 160 companies and the wireless technology powerhouse Qualcomm on its board of directors. It also refers to Thread Group and the ZigBee Alliance.

The article reports that wireless technology company Qualcomm has joined as board of directors member of the organization Thread Group. Topics discussed include the Internet of Things (IoT) network protocol, AllJoyn software framework, and team work of Thread Group and ZigBee Alliance for ZigBee Cluster Library (ZCL).

The article reports that the defect in the widely used OpenSSL library is allowing man-in-the-middle attackers to impersonate Hyper Text Transfer Protocol Secure (HTTPS) servers and snoop on encrypted traffic. It mentions that the OpenSSL 1.0.1p and 1.0.2d versions can be used to avoid certain checks and trick OpenSSL to treat any valid certificates as belonging to certificate authorities. According to security engineering manager Tod Beardsley, the vulnerability is used to an active attacker.

The article focuses on the warning given to the server administrators and developers concerning the plan of the computer software company OpenSSL to release security updates for its cryptographic library with the capability of fixing a high severity vulnerability. The cryptographic protocols implemented by OpenSSL include Transport Layer Security (TLS), HTTP Secure (HTTPS), and Internet Message Access Protocol Secure (IMAPS). It adds that a large number of applications were used by OpenSSL.

The article focuses on Distributed Denial of Service Attack (DDoS) which is a malicious attempt to make a server or a network resource unavailable to users, by temporarily interrupting the services of a host connected to the Internet. It mentions that DDoS Attacks was determined in May 2015 at a small office/home office (SOHO) routers that support Routing Information Protocol version 1 (RIPv1) which is designed to allow routers on small networks to exchange information about routes.

The article reports on the plan of technology company Apple, Inc. to release the source code of its Swift programming language. Topics mentioned include possible increase in its user base, a brief history of Swift which was developed by the company to replace the Objective C language used by developers to write applications for Mac and iOS devices, and features of the updated version 2 of the language such as improved error handling, additional protocol extensions, and modular optimization.

The article discusses the availability of the Internet Protocol version 6 (IPv6) which provides an identification and location system for computers on networks and routes traffic in Internet. It stresses the shift of all smartphones with IPv6 capability to improve communication services. It cites the use of Network Address Translation by the users of IPv6.

The article focuses on the use of the Internet Protocol Version 6 (IPv6) used by big companies which makes service providers' networks run better and speeds up connection. According to the organizer of World IPv6 Launch, Mat Ford, more than 66 percent of connections from Verizon Wireless customers to big Internet companies went over IPv6. It adds that IPv6 traffic exceeded 53 percent at T-Mobile USA.

The article offers information on a report from the Electronic Frontier Foundation revealing that an attack method used in disrupting the code-sharing site GitHub could have been prevented if more websites enabled encryption. Software engineer Bill Budington stresses the importance of using HTTP in preventing any cyber attacks. Information about the Baidu Analytics script is provided.

The article focuses on a research conducted by security researcher Chad Seaman, which shows that some of multicast Domain Name System (mDNS) protocol do not follow the recommendation of official specification and will respond to mDNS queries received from the Internet. It states that mDNS responses can leak sensitive details about the device and its services. It mentions that 100,000 devices respond to mDNS queries and can be used by attackers for distributed denial-of-service (DDoS) attacks.

Several photographs are presented depicting true stories of failures in following security protocol.

The article reports that according to computer security experts, there is a serious security flaw called FREAK that can weaken encrypted connections between computers and Websites. The experts says that the flaw has apparently gone undetected for years and can undermining security across the Internet. It mentions that the flaw affects the widely used Secure Sockets Layer protocol and its successor, Transport Layer Security.

The article offers information regarding the challenges featured in computer systems when tracking accurate time. It mentions software engineer George Neville-Neil who works on the IEEE standard Precision Time Protocol (PTP) to provide financial institutions and time-sensitive organizations with ultra-precise time measurements.

The article discusses the addition of the Hypertext Transfer Protocol (HTTP) Strict Transport Security (HSTS) computer network protocol in Internet explorer from Microsoft Corp.

The article offers information on the financial performance of networking equipment manufacturer Cisco Systems in 2015. Topics discussed include the growth in the sales of its software-defined networking products which surpasses its rival VMware, the increase in the company revenue in the fiscal quarter of January by seven percent, and the growth of Cisco's profit from $1.4 billion to $2.4 billion.

The article reports on the delayed shipment of a component module by Intel Corp., a multinational corporation based in Santa Clara, California for its silicon photonics technology. It mentions that the technology uses pulses of light to move data between servers at extremely high speed. It notes the development of O-PCI (Optical PCI-Express) protocols by Intel which support data transfers.

The article reports on the release of security updates by American multinational computer technology corporation Oracle Corp. for Java to fix 19 vulnerabilities and disable default support for SSL 3.0. It mentions that the said updates were part of the firm's quarterly Critical Patch Update, fixing 169 security issues across hundreds of products. It also notes the deactivation of the SSL 3.0 protocol by default as one of security-related changes in the new Java updates.

The article reports that Tod Beardsley, engineering manager at vulnerability intelligence firm Rapid7, has advised server administrators to upgrade again their OpenSSL open source software to fix new vulnerabilities that include denial-of-service (DoS) vulnerabilities. It states that the flaws are of low and moderate severity. It says that the DoS vulnerabilities only affect the software's implementation of the Datagram Transport Layer Security (DTLS) protocol.

The article reports that trade body Network Time Foundation has released version 4.2.8 of the network time protocol (NTP) to address the remote code execution flaws in the existing version. It states that the remote code execution vulnerabilities can be hacked, compromising servers, infrastructure systems, and embedded devices. It notes that system administrators are urged to install the patches immediately.

The article reports on the removal of protocol Secure Sockets Layer (SSL) version 3.0 by internet services provider Google from Google Chrome 40 due to design flaw in SSL 3.0. Topics include brief description of SSL version 3 along with its features, role of Padding Oracle On Downgraded Legacy (POODLE) security vulnerability in compatibility-driven situation, and views of Google security engineer Adam Langley on the removal of SSLv3.

The article reports that new authentication protocol called Universal 2nd Factor added by Google Inc. that let users protect their accounts against password compromises. Nishit Shah, a Google Security product manager, states that Security Key is a physical USB second factor that only works after verifying the login site is truly a Google website, not a fake site pretending to be Google.

The article reports that new authentication protocol called Universal 2nd Factor added by Google Inc. that let users protect their accounts against password compromises. Nishit Shah, a Google Security product manager, states that Security Key is a physical USB second factor that only works after verifying the login site is truly a Google website, not a fake site pretending to be Google.

The article features the Multipath Transmission Control Protocol (MPTCP) technology for improving performance that can weaken security. Topics covered include the Siri feature of Apple using MPTCP, data stream decoupling from one Internet Protocol (IP) address and difficulty in surveillance when combining MPTCP with anonymity services. Also mentioned are MPTCP implementations for other operating systems (OS), blocking MPTCP packets and blunt-force defense.

The article focuses on vulnerabilities of the Open Mobile Alliance (OMA)-Device Management (OMA-DM) installed in up to 90% of mobile phones sold by carriers across the globe. Topics covered include attackers acquiring the International Mobile Station Equipment Identity (IMEI) used in the Red Bend OMA-DM authentication. Also mentioned are the use of Wireless Application Protocol (WAP) interface, open source SyncML Reference Toolkit code base and measures for mitigating OMA-DM vulnerabilities.

The article evaluates second version of Hypertext Transport Protocol HTTP/2 protocol.

The article reports on the disclosure of Israeli security firm Aorato Ltd. concerning the design issue of software company Microsoft Corp.'s NTLM authentication protocol. According to Aorato corporate vice-president of research Tal Be'ery, the NTLM is susceptible to the pass-the-hash attack wherein hackers can obtain login information of a computer network and access sensitive systems. Microsoft argues that the said problem has been long-known and defenses are already implemented to address it.

The article offers information on the approval of funds for improving Wi-Fi networks at schools and libraries, despite questions from Republican commissioners by the U.S. Federal Communications Commission (FCC). Topics include updates to 17-year-old E-Rate program, advantages of E-Rate program as it offers phaseout of obsolete telecom services and views of Jon Wilkins, managing director of FCC.

The article reports that California cities San Jose and San Francisco are planning to provide free public Wi-Fi networks to users using the Hotspot 2.0 standard as of July 2014. It informs that the organization Wi-Fi Alliance will certify Hotspot 2.0 infrastructure and devices under the label Passpoint. The two cities have activated the Wi-Fi Alliance standard, the Wi-Fi Protected Access (WPA) 2 Enterprise.

The article reports that the old version of the Internet Protocol (IP) is about to run out of allocated addresses. Topics included are the sense of urgency by Asia Pacific Network Information Center (APNIC) director Paul Wilson for upgrading to the new IPv6 protocol, the utilization of Microsoft's reserve IPv4 addresses, and the critical role of Regional Internet Registries (RIR) in supporting the switch.