- It's the applications, stupid
- Will a whitelist save personal computing?
- Thousands of Web sites under attack
- To solve the unsolvable problem
- Re-thinking the security of virtual machines
- Security Development Lifecycle trumps code complexity
- Is your Web site FIPS compliant?
- Computer security: Why have least privilege?
- Strategic security: Get a handle on authentication
- Control user installs of software
February 16, 2007 | Comments: (0)
Update: Third party Treo bug fix
Someone has coded a third party fix for the recent Treo bug.
He posted his email to Bugtraq.
------------------beginning of message
I have produced a temporary fix for this security vulnerability. The fix can be found at:
http://discussion.treocentral.com/showthread.php?p=1199445&posted=1#post1199445
I will be providing an alternate URL in the following week.
------------------end of message
On a related note, two days ago I emailed the CEO's of Verizon Wireless (my carrier) and Palm with my concerns about Palm not patching this bug. Today, I rec'd an email from a Palm VP inviting me to a phone conference on Monday or Tuesday of next week. I'll let readers know if anything useful comes out of the phone conference.
Roger
Posted by Roger Grimes on February 16, 2007 10:35 AM
RATE THIS ARTICLE:
-

- COMMENTS
TOP STORIES
Sun to clarify JavaFX planMS's dev tool service packs
HP in talks to buy EDS
Developers' role shifting
MS: XP SP3 reboots OEMs' fault
Apple: iPhone out of stock
Can Sun rejuvenate Java?
Powerset unveils Google-killer
FBI worried about Cisco gear
AMD updates quad-core Opterons
ADDITIONAL RESOURCES

- Application Security: Threats and How to Counter Them
- Why Linux Threats Mean Business
- Minding the Machines: PC Disaster Recovery for the Enterprise

- Protect Your Data with SSL
- Prevent Your Next Microsoft Exchange Outage
- 11 Myths About Microsoft Exchange Backup & Recovery





