Spiga

Internet Security and Acceleration Server 2000 Service Pack


How to obtain the latest Internet Security and Acceleration Server 2000 service pack


Microsoft Internet Security and Acceleration (ISA) Server 2000 updates are distributed through service packs. By installing the latest service pack, you keep your installation of ISA Server 2000 current. Service packs include updates and fixes that are conveniently bundled for easy downloading. Service packs are cumulative; each new service pack contains all the fixes that are included in previous service packs and any new fixes. You do not have to install a previous service pack before you install the latest one. ISA Server 2000 Service Pack 2 (SP2)
loadTOCNode(2, 'moreinformation');Release Date: May 20, 2004.Note You can install Service Pack 2 for ISA Server 2000 with or without ISA Server 2000 Service Pack 1 (SP1) already installed on your system.

To download Service Pack 2 for ISA Server 2000, visit the following Microsoft Web site:
http://www.microsoft.com/downloads/details.aspx?FamilyId=C8D3D98B-1CD4-406A-A04A-2AA2547D09A3&displaylang=en (http://www.microsoft.com/downloads/details.aspx?FamilyId=C8D3D98B-1CD4-406A-A04A-2AA2547D09A3&displaylang=en)

Naked Paris Hilton used By Hackers


Hackers found hole in Vista

Even the vista is not safe.A hole has been discovered in it.Internet and computer security firms are warning Window’s Vista users to stay away from spam emails offering a peak at a naked Paris Hilton! Hacker’s have found a hole in Vista and are exploiting it by luring users with subject lines promising “Hot pictures of Paris Hilton nude” with a link to a website that inserts Trojan Horse type code into the system.This Trojen Horse get installed on computer as it is clicked and make the computer data available to the hackers.Honestly, who would click on these emails? Is there anyone left in the world outside of Amish country that hasn’t seen Paris Hilton in some sort of undress? These hackers would be better off luring us with someone not so over exposed like britney spears or other.
So,beware of this kind of fake e-mails,and if you get this kind of e-mails,don't click on this e-mails.It would be better to delete them without clicking or use some antivirus to detect them.

China Cracks Down On Online Porn


A state news agency said on Friday,the Chinese Government is launching a new crackdown on online pornography, complaining it has "perverted China's young minds,"The Ministry of Public Security says the six-month campaign will target cyber strip shows and sexually explicit images, stories and audio and video clips, according to the Xinhua News Agency.Zhang Xinfeng, a deputy public security minister, quoted as saying on Thursday "The boom of pornographic content on the Internet has contaminated cyberspace and perverted China's young minds,".Also Friday, police announced that two Web site operators were sentenced to four years in prison and a third got one year for distributing pornographic movies and other materials in separate cases last year, the Xinhua agency reported.One of the Web sites had signed up 260,000 users when its operator was arrested last year, Xinhua reported. In another case, it said, four people were arrested for distributing material online and 400 computers were seized.Police also have broken up crime rings that used the Internet to organize prostitution, Xinhua said.The latest campaign also will target illegal online lotteries and contraband trade, fraud and "content that spreads rumors and is of a slanderous nature," Zhang said at a news conference.In China's biggest online porn case to date, Web site operator Chen Hui was sentenced in November to life in prison. The government said his Web site had more than 9 million pornographic images and more than 600,000 registered users.China has the world's second-biggest population of Internet users after the United States, with 137 million people online.The communist government encourages Internet use for education and business but tries to block access to material considered obscene or subversive."The inflow of pornographic materials from abroad and lax domestic control are to blame for the existing problems in China's cyberspace," Zhang said.According to Xinhua, the Beijing Reformatory for Juvenile Delinquents said 33.5 percent of its detainees were influenced by violent online games or erotic Web sites when they committed crimes such as robbery and rape.

U.S. Agencies Get 'C-' For Computer Security


According to an annual report card required by federal legislation, the majority of twenty-four U.S. government agencies continued to score sub-par grades in computer security for 2006.While the overall grade of the agencies averaged to a 'C-' — a slight improvement over the 'D+' received in 2005 — the individual grades ranged across the spectrum. Some of the U.S. government's largest agencies — including the Departments of Commerce, Defense, Education, State, and Treasury — scored failing grades.Other agencies dramatically improved their grades from last year. The Department of Health and Human Services improved last year's 'F' to a 'B' in 2006, while the Department of Housing and Urban Development jumped from a 'D+' to an 'A+', according to the score card .
The grades are based on numerical scores ranking the agencies' compliance with the Federal Information Security Management Act (FISMA) of 2002, which requires that the agencies secure their information systems according to guidelines developed by the National Institute of Standards and Technology and file annual reports about their compliance.
"FISMA is to some extent a paper exercise," said Jeremy Nazarian, vice president of marketing at network security firm Lumeta. "And, although it's not a complete representation of how an agency is doing, the score is ultimately a decent measure of how well aligned an organization is with security policies as defined by NIST."The FISMA grades are based on the security reviews performed by the agencies, including progress in correcting previously identified weaknesses and the results of system hardening. Each agency is required to submit a report on their findings by October to the Office of Management and Budget.

Oracle 11i: Encrypted Password String Disclosure


Oracle 11i: Encrypted Password String Disclosure
Integrigy has release an advisory regarding an undisclose security vulnerability in Oracle Applications 11i that may allow an unauthenticated, internal attacker to obtain Oracle Applications' user account encrypted password strings, which in turn can be decrypted using previously published information. An attacker can potentially obtain either any user's password or the Oracle Applications' main database account password (APPS). The attacker must have direct SQL*Net access to the database (e.g., SQL*Plus) and to exploit the vulnerability neither of the Oracle Applications security features "Managed SQL*Net Access" and "Server Security" can be enabled.In a majority of Oracle Applications implementations, neither "Managed SQL*Net Access" nor "Server Security" are enabled. "Managed SQL*Net Access" is enabled by default beginning with 11.5.10, although, it is commonly disabled due to the complexity of managing permitted hosts and the limitations in only allowing a small number of hosts direct access to the database. "Sever Security" is not enabled by default in any version of Oracle Applications and seldom is enabled as the purpose and security benefits of this feature are poorly understood. All Oracle Applications implementations should enable at least "Server Security" and preferably also enable "Managed SQL*Net Access". The underlying issue is that Oracle Applications passwords can be easily decrypted using methods previously published. There are a number of ways an attacker (most likely an insider) may obtain encrypted password strings, including through ad-hoc query access, from cloned instances like development, or through SQL injection vulnerabilities in the application or standard database packages. The advisory relates to an additional method of obtaining encrypted passwords strings through exploitation of a specific undisclosed security vulnerability.For more information see the Integrigy Security Advisory Oracle Applications 11i Encrypted Password Disclosure

Norton Security: New Design with More Content, Multilingual Worldwide Presence


Norton Security Store has made a thorough update in order to bring the latest product in Internet security field. With its new design, user friendly navigation -- and new Symantec and Norton products offered in countries all over the world -- Norton Security Store has made another big step in its online offer of downloadable Symantec software. Vancouver, BC, Canada (PRWEB) April 12, 2007 -- GoClickGo Marketing Inc., the founder and creator of Norton Security Store, is proud to announce the official launch of its redesigned online community, a comprehensive, centralized repository of valuable information and tools to help PC users increase security and keep their computers safer, more secure and available 24/7. Visitors entering the site will be in a position to immediately identify themselves by geographic region - U.S. & Canada, U.K. & Ireland, Australia, Austria, Denmark, Finland, France, Germany, Italy, Netherlands, Norway, Spain, Sweden, and Switzerland. From there, they can choose to explore a range of PC security related sections for information and recommendations, including:
- -Internet Security - This section includes reviews, features/benefits and special offers available on the latest versions of Symantec's industry-leading Internet Security solutions: Norton 360, Norton Internet Security 2007, Norton AntiVirus 2007 and Norton Confidential.
- -Virus Protection - Visitors can learn more about reviews, features/benefits and special offers available on Symantec's famous Virus Protection solutions: Norton 360, Norton AntiVirus 2007 and Norton Internet Security 2007.
- -PC Performance - Users can check out reviews, features/benefits and special offers available on Symantec's famous PC Performance and problem solving solutions: Norton 360, Norton SystemWorks Premier and Norton SystemWorks Standard.
-- Data Protection - In this section, PC users can learn more about reviews, features/benefits and special offers available on Symantec's famous Data Protection products: Norton 360, Norton Save & Restore and Norton Ghost 10.0.
-- Macintosh. Although Macs are generally regarded as safer from PC security threats, this section includes important information about solutions to Mac-related anti-virus and other issues: Norton Internet Security 3.0 Macintosh, Norton AntiVirus 10.0 for Macintosh and Norton Personal Firewall for Macintosh. Products descriptions, reviews and comparison tables are available as an additional help, all in order to have visitors educated before they make their final purchase decision. The site also features Symantec's line of products for Small & Mid-Sized Business, to fulfill the needs of those that require more than what family of Norton products can offer. Knowledge Center offers compilations of valuable information available on PCs viruses, Trojan horses, worms and other serious computer threats for users of all types. The site also provides current information on price and direct purchase links, "completing the cycle" for PC users wanting a front-to-back resource for all security issues and needs.
For more information on Norton Security Store, contact visit web site at Norton-security-store.com