contributed by root66
After promising customers that their identities would "never" be shared with third parties, bankrupt e-tailers such as Boo and Toysmart are reneging on their pledge and seeking to sell their customer lists. The FTC is suing Toysmart in hopes of preventing such a violation of consumer privacy. If the precedent is set that it is "OK" to liquidate private data in a fire sale, it would be a significant setback to online privacy efforts.

USA Today

contributed by Weld Pond
With an increasing diversity of traffic sent via port 80, it's getting progressively harder to distinguish the permissible traffic from the malicious attack. Instead of coming up with up with easier to control and administrate network security the industry seems to be bypassing network security. Content filtering seems like it will be the only way to distinguish valid traffic when all applications, valid or malicious, are running over the http port using protocols like Microsoft's SOAP.

BusinessWeek

contributed by Ted
The FBI is using an advanced internet wire-tapping system in recent criminal investigations. Dubbed "Carnivore," the program requires the direct connection of an FBI computer to an ISP's network and is capable of scanning millions of e-mails per second. The privacy of innocent web users appears to be in question during such scans. Furthermore, the legality of such far-reaching scans has not yet been challenged in court.

Wall Street Journal - via MSNBC

contributed by Weld Pond
The electronic storefront for E-Week's Openhack challenge has been successfully defaced. The two successful attacks exploited Mini-Vend application vulnerabilities. Application security will get you every time (audit your code before an attacker does).

Excite

contributed by Apocalypse Dow
A recent UK study of 2000 computer users found that passwords were remarkably predictable across regional lines. Users in some areas prefer to use names of sports teams as passwords while those in other areas prefer vacation spots. Even with heightening public awareness, people still tend to opt for convenience over security.

vnunet

contributed by root66
This Friday, July 14, ITWorld.com will host a discussion on "fighting back" against network attackers. While tools and techniques exist for striking back at those who launch attacks against you, the question of collateral damage to innocent bystanders brings into question the ethicality of such vigilantism.

ITWorld.com

contributed by Weld Pond
For an important announcement on a change of editorial leadership at HNN, please see the 07/10/00 issue.

HNN, 07/10/00