Microsoft: CardSpace attack works but was too rigged

Microsoft is disputing that its CardSpace authentication management technology can be hacked despite a research paper that outlines a proof-of-concept attack. ...continue reading 'Microsoft: CardSpace attack works but was too rigged'

Microsoft signs on to MIT Kerberos Consortium

Microsoft has joined the MIT Kerberos Consortium, an organization that develops the widely-used network authentication standard. It joins Apple, Google and Sun on the consortium's executive board. ...continue reading 'Microsoft signs on to MIT Kerberos Consortium'

Bugs found in Kerberos

The MIT developers of the Kerberos authentication system have released patches for several serious security holes, which could allow remote attackers to obtain sensitive information, shut down a system or execute malicious code. ...continue reading 'Bugs found in Kerberos'

Red Hat open-sources security framework

Red Hat has open-sourced its identity-management and security system to promote its assertion that open-source software provides the most secure infrastructure. ...continue reading 'Red Hat open-sources security framework'

Arcot brings two-factor authentication to Google Apps

Arcot Systems on Wednesday announced that it was making its A-OK On-Demand authentication service available to Google Apps Premier Edition users to add another layer of security to the logon process. ...continue reading 'Arcot brings two-factor authentication to Google Apps'

Major vendors join OpenID board

IBM, Google, Microsoft, Verisign and Yahoo have joined the corporate board of the OpenID Foundation, giving a boost to the group's efforts to simplify the process of signing into Web sites. ...continue reading 'Major vendors join OpenID board'

Forgotten IT chores may have led to bank meltdown

The huge losses reported by French bank Société Générale, apparently caused by a rogue trader with inside knowledge of the bank's procedures, don't necessarily point to an IT systems failure but rather to poor management of those systems, analysts say. ...continue reading 'Forgotten IT chores may have led to bank meltdown'

Yahoo tests support for OpenID

Yahoo appears close to implementing OpenID, a Web authentication standard that relieves people of the need to remember multiple passwords to log into different Web sites. ...continue reading 'Yahoo tests support for OpenID'