Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Commentary

Content posted in May 2007
Why Catching The 'Spam King' Won't Save Your In-Box
Commentary  |  5/31/2007  | 
Even if a judge and jury lock up Robert Alan Soloway for the rest of his natural born life, your in-box will still be inundated with tons of offers for HGH, porn, and penny stocks.
Data Security: You're Not Learning From Others' Mistakes
Commentary  |  5/29/2007  | 
As I was catching up on some e-mail last night, I came across a message that's become all too familiar to me. It was textbook: A company was apologizing that one of its laptops had been stolen and that the laptop contained customer account and credit card information. A real yawner, until I considered that this e-mail was delivered to my personal e-mail account and that it was my customer account and credit card info that may have been compromised. Companies just aren't getting the messag
Vegas BBQ -- Burn, PC, Burn
Commentary  |  5/24/2007  | 
Picture a beautiful sunset over the desert, the glow of the Vegas skyline in the distance. Then a towering wave of flames leap into the air that crackles with the heat -- a man just set his computer on fire.
At Interop, Security Talk Is Largely About Network Access Control
Commentary  |  5/23/2007  | 
Here at Interop, there's a lot of focus on security and a lot of that security attention is aimed right at network access control. It's a hot-button topic here. The question plaguing many IT and security managers, though, might be where to get started.
(Missing) Without A Trace: The IBM Tapes
Commentary  |  5/18/2007  | 
Did you read about the missing IBM Tapes? It's almost like another undecipherable episode from "Lost," except it's a car that may have crashed in this case, apparently, and it's tapes that got lost in the aftermath.
The Top 10 Most Influential Security Visionaries Of All Time
Commentary  |  5/17/2007  | 
AT&T chief security officer Ed Amoroso, speaking before a packed auditorium Thursday at his company's cybersecurity conference, wanted to test the collective knowledge of those in the room. How well-studied were they in the visionaries who've had the greatest impact on IT security? Not very well, it turns out, as few could put
Lost Your Data? What's It Worth To You?
Commentary  |  5/16/2007  | 
Should virtue be its own reward when it comes to returning lost data these days? Sharon Gaudin's story about IBM's plea to find lost tapes with sensitive employee data really got me into one of those Stephen Colbert finger-wagging moments.
If An FBI Analyst Can Steal National Secrets, What Are Your Workers Lifting?
Commentary  |  5/15/2007  | 
Looking back on the story about the former Marine and FBI analyst who stole classified information from both the White House and the FBI's own database, I think there are some important lessons to be learned from this one.
A Day In The Life Of Cigna's CISO: 7 Things You Didn't Know
Commentary  |  5/11/2007  | 
I recently visited Cigna chief information security officer Craig Shumard at his company's offices in suburban Connecticut. On a clear, sunny day that slowly melted away the last vestiges of winter -- mostly scattered mounds of snow encrusted with rock and dirt -- across the rolling hills of the employee benefits provider's campus, I got to see firsthand how the security chief at a big-time company operates and interacts with his staff. It was impressive, to say the least.
Why Do Workers Steal Data?
Commentary  |  5/10/2007  | 
I was fascinated by Sharon Gaudin's recent article reporting that 45% of professionals steal data when they leave their jobs. I couldn't help wondering why they do it. A desire to suck up to their new supervisors? A sense of grievance against the company that they're leaving? Or just because they can?
Besieged E-Gold Founder Claims (Not Unconvincingly) To Be Victim Of A Fed Vendetta
Commentary  |  5/2/2007  | 
Bloggers live for feedback to their controversial postings and in this regard, my entry earlier this week about a federal grand jury's decision late last week to indict E Gold Ltd, Gold & Silver Reserve Inc., and the owners of these digital currency businesses on charges of money laundering, conspiracy, and operating an unlicensed money transmitting business did not disappoint. The following day, I recei


Manchester United Suffers Cyberattack
Dark Reading Staff 11/23/2020
As 'Anywhere Work' Evolves, Security Will Be Key Challenge
Robert Lemos, Contributing Writer,  11/23/2020
Cloud Security Startup Lightspin Emerges From Stealth
Kelly Sheridan, Staff Editor, Dark Reading,  11/24/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-29378
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) by using the password [email protected]#y$z%x6x7q8c9z) for the e...
CVE-2020-29379
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. During the process of updating the firmware, the update script starts a telnetd -l /bin/sh process that does not require authentication for TELNET access.
CVE-2020-29380
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-...
CVE-2020-29381
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename...
CVE-2020-29382
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key (specific to V1600D, V1600G1, and V1600G2) is contained in the firmware images.