Gizmodo: Heroes of the Day: Microsoft's Legal Team for Fighting to Kill Malvertising [Malvertising]

Posted by on under heroes of the day, macbook, internet ads, compas, malicious code, crap, microsoft |

Right-clickas or a MacBook flippas, I think we can all agree to hate malvertising, Internet ads filled with malicious code. Someone needs to take down the companies who are putting that crap online....
Tagi: heroes of the day, macbook, internet ads, compas, malicious code, crap, microsoft

Security a Concern As HTML5 Advances

Posted by on under google inc, security enhancements, google, mdash, web standard, html4, security firm, security experts, grossman, web security, malicious code, high impact, jeremiah, breadth, vulnerabilities, avenues, coming out party, balls, debut |

Trailrunner7 writes "Every technology innovation has its coming out party, and Google Inc.'s recent 'dancing balls' logo experiment was widely interpreted as a high-impact debut for HTML5. But web security experts are warning that the sprawling new web standard may favor functionality over security, enabling a new generation of powerful web-based attacks. They agree that there are security enhancements in HTML5, but all expressed the same concern: that the new specification will greatly increase the 'attack surface' of HTML — providing more avenues by which malicious code can be delivered through the web. 'HTML5 has an enormous amount of functionality. The (specification) is just huge,' said Jeremiah Grossman of security firm WhiteHat. The breadth of the new specification gives him concern. 'I know that we're still finding vulnerabilities in HTML4,' Grossman said."

Read more of this story at Slashdot.





Tagi: google inc, security enhancements, google, mdash, web standard, html4, security firm, security experts, grossman, web security, malicious code, high impact, jeremiah, breadth, vulnerabilities, avenues, coming out party, balls, debut