[Fwd: Your Secure Software Advisory Has Arrived]

--===============1060314702==
Content-type: text/plain; charset=Windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

Qualche spunto (forse) per l'e-voting.

-------- Original Message --------
Subject: 	Your Secure Software Advisory Has Arrived
Date: 	Tue, 30 Sep 2008 19:30:00 +0200
From: 	Fortify <fortify-tyPp0lav6YpsC5M9URf5z5dJ/[email protected]>
Reply-To: 	fortify-tyPp0lav6YpsC5M9URf5z5dJ/[email protected] <fortify-tyPp0lav6YpsC5M9URf5z5dJ/[email protected]=
>
To: 	Lombardo Dario <dario.lombardo-hVUuyuLkUUT++UuDkfx/[email protected]>



=09

*September 2008 - Issue 3*

=09

*View Online <http://email.tailorednews.com/r/O74xGjPr8ORKULf.htm>*

=09

*Tell a Friend=20
<http://email.tailorednews.com/iv/Fortify/FastFwd.ASP?i=3D105375,105440,1=
05420,105377,105378,103588,103589,103590,>*

=09
Top Banner <http://email.tailorednews.com/r/RerGjKOWxRX7mf0.com>

How Safe Is Our Democracy with E-voting?=20
<http://email.tailorednews.com/r/ex4xGnqQIuPRhiHSDv.htm>

*How Safe Is Our Democracy with E-voting?*

No hanging chads, but many security issues=20
<http://email.tailorednews.com/r/MGrGjl3IHhOXiyUJv1.htm>

Jack Scharff, Editor, /Secure Software Advisory/

The presidential election is almost here. It's time to make your choice=20
and vote.=20

But what if your vote is lost or changed? Is that possible?=20
Unfortunately, yes!=20

In a high-tech age, e-voting should eliminate all the difficulties of=20
cumbersome paper-ballot or punch-card voting methods. After the 2000=20
election debacle in Florida and the funding provided by the Help America=20
Vote Act, many states scrambled to improve their voting methods and=20
opted for e-voting machines with very mixed results.=20

E-voting has fixable problems in software coding and audit=20
capabilities. Read more=20
<http://email.tailorednews.com/r/pjWjKaFHUiRQyEmN1s.htm>



Brian Chess <http://email.tailorednews.com/r/eK8K7yWf0JmtNwzYFk.jsp>

*E-voting can be fixed =85 Real office politics =85 Security "bad guy"*

Hello. I'm Brian Chess, co-founder and chief scientist at Fortify=20
Software. Getting ready to vote? Don't miss our feature article=20
<http://email.tailorednews.com/r/M7x7eE80zNBLwDnVkA.htm> /How Safe Is=20
Our Democracy with E-voting/? Yes, there are problems, but the computers=20
are here to stay, so we need to think about how to make electronic=20
voting a reliable process.

Last issue, some of our readers were ready to vote another reader off=20
the island. See what they have to say=20
<http://email.tailorednews.com/r/peGeM6xznwtfDvlqAb.htm> in /Real=20
politics in the office gets out of hand/. This time around there's a=20
different kind of bad guy: one of our readers is tired of being the one=20
to delay projects because he insists that other developers pay more=20
attention to security. He asks for your advice=20
<http://email.tailorednews.com/r/dMjMpcGnlDL0v1a3b4.aspx> in /Bad guy or=20
security guy?/

Take in our archived Webinar=20
<http://email.tailorednews.com/r/5pKpdSjlavfz1soF4r.jsp>, /A CISO's=20
Guide to Securing Open Source Software/.

Please let us know=20
<http://email.tailorednews.com/r/9d7d5JKao10nsYukrW.aspx> how successful=20
we are at including articles relevant to you by taking a one-minute=20
reader survey. You could win a complimentary copy of /Secure Programming=20
with Static Analysis/.

*If you would like to unsubscribe from this newsletter, please click on=20
link at the bottom of the page.*


*Complimentary On-Demand Webinar*

A CISO's Guide to Securing Open Source Software

Attend Now <http://email.tailorednews.com/r/5PZORXaTPouQ6Nw.jsp>

Fortify Software Offers Universities Free Security Software for Teaching=20
and Research

Read More ... <http://email.tailorednews.com/r/S0IBtLcHmSJf1q3.jsp>

Reader Survey <http://email.tailorednews.com/r/PjAW8xTbrCPGIBt.aspx>

Complete <http://email.tailorednews.com/r/OKb8xGC4WPOjHtL.aspx> our=20
one-minute reader survey, and you could win=20
<http://email.tailorednews.com/r/R74xGjPr8ORKULf.aspx> the book, /Secure=20
Programming with Static Analysis./

=09

*Passing PCI Compliance Section 6.6 White Paper=20
<http://email.tailorednews.com/r/tZe592BMdtLglhi.jsp>*

Organizations that store or process credit card information must secure=20
all Web applications.

Learn pros and cons using two different approaches.

Download Whitepaper <http://email.tailorednews.com/r/LTM92gtp5LfZaiy.jsp>

=09

Outsmart a Hacker <http://email.tailorednews.com/r/VyzouhYnaVqib8x.jsp>

=09

Dig Your Own Hole <http://email.tailorednews.com/r/qEnuhiVloq3y4xG.jsp>

*Subscribe <http://email.tailorednews.com/r/XerGjKOWxRX7mf0.htm>* here=20
or manage <http://email.tailorednews.com/r/pOTRXQoCOuhIcwD.htm> your=20
subscription.

=20

=09

ISE Northeast Executive Forum and Awards Gala=20
<http://email.tailorednews.com/r/kSoyE6FuikAc8K7.htm>

October 16, 2008

Marriott Marquis Times Square

New York City, NY

=09

*OWASP* <http://email.tailorednews.com/r/hUCXQIuPRhiHSDv.org>

=09

*CERT <http://email.tailorednews.com/r/imPQIHhOXiyUJv1.org>*

=09

*More ... <http://email.tailorednews.com/r/yBOIHUiRQyEmN1s.htm>*

=09

*Security & Privacy* <http://email.tailorednews.com/r/EtRHUmyXIE6BwsY.htm=
>

=09

*darkREADING* <http://email.tailorednews.com/r/6LXUmBEQH6ctDYV.htm>

=09

/More ... <http://email.tailorednews.com/r/cfQmBt6IUcSLvVq.htm>/

Issue 2=20
<http://email.tailorednews.com/TMSubscribe/viewbcast.asp?B=3DMQmB&N=3DkeM=
>
[More...=20
<http://email.tailorednews.com/TMSubscribe/ArchivePage.ASP?i=3DaTPou5IHpL=
nl&p=3D5559>]=20


=09

*
Fortify <http://email.tailorednews.com/r/9OTRXakUmyXIE6BwsY.jsp>

The Case for Business Software Assurance*

Hackers now concentrate more on the application layer. This helpful=20
white paper provides an overview of the current hacking landscape and=20
the people, processes and technology to develop Business Software=20
Assurance in your organization.

Learn about the 12 "Maturity Areas" and much more.

Download <http://email.tailorednews.com/r/2RCXQoAmBEQH6ctDYV.jsp> this=20
complimentary white paper.


*This Issue's Dilemma=20
<http://email.tailorednews.com/r/C9M92Jjlavfz1soF4r.aspx>*

*This Issue's Dilemma:** *

*Bad guy or security guy?*=20

On our development team, I=92m "the security guy" in our small=20
organization. Most of the time, I have to clean up security holes others=20
have produced. How do I best motivate my colleagues to have security on=20
their mind during development? Should I point out their code problems=20
and work with them to fix them? Or should I continue to be the Bad Guy=20
and delay the project until they code it right?=20
<http://email.tailorednews.com/r/P2p2gNKao10nsYukrW.aspx>

-- John B. (company name withheld)

*This Issue's Dilemma=20
<http://email.tailorednews.com/r/OgdgZw7ouszlYVhAW8.aspx>* 	*Can You=20
Help? *Share your experience or your best advice=20
<http://email.tailorednews.com/r/RZ5ZTDeuhYnaVqib8x.aspx>, You could win=20
a copy of /Secure Programming with Static Analysis/, by Brian Chess &=20
Jacob West, a $49.95 value.

Got a business problem or question for our readers to tackle?=20
<http://email.tailorednews.com/r/XT9TCvMhiVloq3y4xG.aspx>=20


------------------------------------------------------------------------

*Previous Issue's Dilemma*

Last Issue's Dilemma=20
<http://email.tailorednews.com/r/IOZORV96ckhyAbSx7e.htm>

*Real politics in the office gets out of hand*

During the primary, I liked one candidate; my boss preferred another.=20
That should be fine, but it=92s not. My boss continually chided and=20
ridiculed me in front of others for my preference.

Finally, got tired of it and used an XSS vulnerability on Obama's site=20
to redirect people to Clinton's site.

Now the Secret Service is interviewing all the people in my office. I=20
think this will affect my future at the company. Should I tell my boss=20
what happened and keep his opinion to himself, or should I wait and make=20
a statement to the press after I'm arrested? What do your readers=20
suggest I do?

 -- Paul (company withheld)       __Read what our readers have to say_=20
<http://email.tailorednews.com/r/HRTRXq2cSAiEb4JGeM.htm>._


*Reach Your Potential*

How do you define success?=20
<http://email.tailorednews.com/r/UXCXQlUq3e1YMpFgPO.html>

by Robert S. Kaplan - Excerpt from Harvard Business Review at BNet.com

*10 Tips to Negotiate Better*

Assertive not aggressive=20
<http://email.tailorednews.com/r/mQPQIam3FMsVpdkZOR.html>

by Ed Brodow - Brodow.com


*Missing Votes Spark Lawsuit*

Touch-screen machines defective, company should pay=20
<http://email.tailorednews.com/r/BIOIHutkAdV359bCXQ.html>

by Mark Niquette - /The Columbus Dispatch/

*76 Percent of Bank Web Sites Have Security Flaws*

Risk of ID theft for their customers=20
<http://email.tailorednews.com/r/tHRHUhLAb5qF924PQI.jhtml;jsessionid=3DCG=
VUTMKZWOLJAQSNDLPCKHSCJUNN2JVN>

by Orla O'Sullivan - /Bank Systems and Technology/


*Four Questions to a Better To-Do List*

Make one work for you=20
<http://email.tailorednews.com/r/LUXUmy04r2FAgZWRHU.html>

by Ali Hale - DumbLittleMan.com

*Handle Interruptions *

The saying "No" fallacy=20
<http://email.tailorednews.com/r/fmQmBEzrWgkbZT8XUm.html>

by Dr. Larry Baker - Linkroll.com


fortifylogo.gif <http://email.tailorednews.com/r/pA1q3FMsVpdkZOR.htm>

productsandservices.gif=20
<http://email.tailorednews.com/r/dbs3FkpYqd5ATRX.htm> 	solutions.gif=20
<http://email.tailorednews.com/r/54YFkAdV359bCXQ.htm>=20
resourcecenter.gif=20
<http://email.tailorednews.com/r/9rVkAb5qF924PQI.htm> 	customers.gif=20
<http://email.tailorednews.com/r/2WqAb493k2grOIH.htm> 	partners.gif=20
<http://email.tailorednews.com/r/g83b4r2FAgZWRHU.htm> 	newsandevents.gif=20
<http://email.tailorednews.com/r/ZxF4rWgkbZT8XUm.htm> 	aboutfortify.gif=20
<http://email.tailorednews.com/r/TGkrW8ZA4TCxQmB.htm>

"ConnectedIn Media <http://email.tailorednews.com/r/CjAW8xTbrCPGIBt.htm>=20
consulted in the development of our e-newsletter and
made the process easier than we ever expected."

-- Sherry Ramm, Director of Global Marketing

Fortify is concerned about your privacy. We do not rent, sell or=20
exchange email addresses. Copyright 2008, InternetVIZ. All rights=20
reserved. You can write to us at 2215 Bridgepointe Pkwy, Suite 400, San=20
Mateo, CA 94404.

You are subscribed using the following email address:=20
dario.lombardo-hVUuyuLkUUT++UuDkfx/2uG/[email protected] If you wish to change your selections=20
or unsubscribe altogether, click below.

:: Subscribe to this newsletter ...=20
<http://email.tailorednews.com/iv/Fortify/ViewOnline.asp?u=3DaTPou5IHpLnl=
&l=3D87014>
:: Unsubscribe=20
<http://email.tailorednews.com/iv/Fortify/TMUnSub.ASP?i=3DaTPou5IHpLnl&e=3D=
>
:: Forward
<http://email.tailorednews.com/iv/Fortify/FastFwd.ASP?i=3D105375,105440,1=
05420,105377,105378,103588,103589,103590,>::=20
Manage=20
<http://email.tailorednews.com/iv/Fortify/TMSubsChg.ASP?i=3DaTPou5IHpLnl>

Powered by TailoredMail=20
<http://email.tailorednews.com/r/puGeMpIj7HUdfla.htm>

	=20


--=20
Dario Lombardo
Security Innovation
Telecom Italia S.p.a.
V. Reiss Romoli 274, Torino
Tel:    +39-011-2286455
Mobile: +39-331-6001292
Fax:    +39-06-41862101


--===============1060314702==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List
--===============1060314702==--