Archive for the Category: Security

Exits and WMQ installed in a non-default location

April 11, 2013 Roger Lacroix

I have been testing Capitalware products (various exits) on different platforms with WebSphere MQ v7.1 & v7.5 and life was going along very well. I had a customer (who uses our security exit) just contacted me saying that they have a Linux server with 3 different releases of MQ installed (v7.0.1.9, v7.1.0.0 and v7.5.0.1) where […]

Also posted in C, Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Auditor, MQ Authenticate User Security Exit, MQ Enterprise Security Suite, MQ Standard Security Exit, Programming, Unix, Windows Comments Off on Exits and WMQ installed in a non-default location

Security and the Development Process

April 11, 2013 Roger Lacroix

From the article: Developers aren’t security experts, and most security experts aren’t developers. That’s so true. John Jacott has posted an arcticle at Venture Beat that every developer and security expert should read: http://venturebeat.com/2013/04/06/developer-first-security/ Regards, Roger Lacroix Capitalware Inc.

Also posted in Education, Programming Comments Off on Security and the Development Process

Emergency Broadcast System Hacked

February 15, 2013 Roger Lacroix

I’m sorry but I can’t stop laughing when I read this article. I especially like the police’s response. http://www.informationweek.com/security/attacks/zombie-alert-hoax-emergency-broadcast-sy/240148355?cid=nl_IW_daily_2013-02-12_html&elq=f2fe05f4fed74f9eac66c2cababa620e Regards, Roger Lacroix Capitalware Inc.

Also posted in General Comments Off on Emergency Broadcast System Hacked

New: MQ Message Encryption v2.0.0

January 10, 2013 Roger Lacroix

Capitalware Inc. would like to announce the official release of MQ Message Encryption v2.0.0. MQ Message Encryption (MQME) provides encryption for MQ message data while it resides in a queue and in the MQ logs (i.e. all data at rest). In cryptography, encryption is the process of transforming information into an unreadable form (encrypted data). […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Message Encryption, Unix, Windows Comments Off on New: MQ Message Encryption v2.0.0

End-To-End Encryption with Universal File Mover (How To #4)

December 28, 2012 Roger Lacroix

In the Universal File Mover (UFM) How To #2 blog posting, UFM ran in “client mode” when it connected to the queue managers. In this blog posting, I will show how to implement a simple file transfer using End-To-End encryption when connecting to the queue manager in “client mode”. UFM’s MQSend Action uses Advanced Encryption […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Java, Linux, macOS (Mac OS X), Open Source, Universal File Mover, Unix, Windows Comments Off on End-To-End Encryption with Universal File Mover (How To #4)

Web Browsers, Scripts and Cookies – Where’s the Security?

October 10, 2012 Roger Lacroix

With all this noise over Internet Explorer 10’s Do Not Track option being set to on by default, can someone give their head a shake and start coding web browsers with security and privacy in mind. Cookies in a web browser were not designed for the exploitation that is going on today. Like many older […]

Also posted in Programming Comments Off on Web Browsers, Scripts and Cookies – Where’s the Security?

amqrmppa on AIX Leaks Memory When using a Security Exit

July 4, 2012 Roger Lacroix

If you use a security exit with WMQ v7 on AIX, the amqrmppa process has a bug that causes it to leak memory. When the security exit accepts/allows a connection, about 0.24KB of memory per connection is leaked. When the security exit rejects a connection, about 0.61KB of memory per connection is leaked. IBM has […]

Also posted in Capitalware, IBM MQ, Unix Comments Off on amqrmppa on AIX Leaks Memory When using a Security Exit

Stupid Security Mistakes

June 28, 2012 Roger Lacroix

Josh Fruhlinger writes about stupid security mistakes: http://www.itbusiness.ca/it/client/en/cdn/News.asp?id=67860 Food for thought. 🙂 Regards, Roger Lacroix Capitalware Inc.

Comments Off on Stupid Security Mistakes

C11: A New C Standard Aiming at Safer Programming

June 26, 2012 Roger Lacroix

Interesting. Danny Kalev explains the new C standard aimed at safer programming: http://blog.smartbear.com/software-quality/bid/173187/C11-A-New-C-Standard-Aiming-at-Safer-Programming Regards, Roger Lacroix Capitalware Inc.

Also posted in C, Programming Comments Off on C11: A New C Standard Aiming at Safer Programming

Android App Steals Contactless Credit Card Data

June 21, 2012 Roger Lacroix

Well, I guess it was only a matter of time before this type of app was released: http://www.scmagazine.com.au/News/305881,android-app-steals-contactless-credit-card-data.aspx All I can say is, you better buy and put your cards in a wallet/container that blocks NFC (near field communications) signals. Regards, Roger Lacroix Capitalware Inc.

Also posted in Open Source Comments Off on Android App Steals Contactless Credit Card Data