By Kurt Seifried (kurt@seifried.org)

Services such as web sites, email and online e-commerce literally cannot exist without DNS infrastructure. As such most companies have invested in a domain name or names, often through large and reputable domain name sellers such as Network Solutions or Neustar Ultra Services. What you may not realize is that by purchasing domain name services and registration from a company in a foreign country you may become liable for any actions that are in contravention of that countries laws.

(more…)

By Kurt Seifried (kurt@seifried.org)

This was originally written in July of 2000, it still applies.

July 19, 2000 - The Council of Europe recently released a draft of a document called the “Draft Convention on Cybercrime.” This document is meant as an international treaty governing “cybercrime” and an attempt to standardize law for easier prosecution of attackers (some countries have no laws specifically governing computer attacks).

(more…)

By Kurt Seifried (kurt@seifried.org)

The MITRE Corporation has released a draft report on “Vulnerability Type Distributions in CVE” which is a fancy way of saying it’s a large table of the types of vulnerabilities (buffer overflows, cross site scripting, permissions issues, etc.), with several pages of explanations as to what it all means. The report is available at:

http://cwe.mitre.org/documents/vuln-trends.html