Sun offers OpenSSO support

Sun said it would offer support to corporate users of OpenSSO open source identity technology and introduced a new version that also protects companies against patent infringement suits, reports NetworkWorld.

Sun said the newly minted Sun OpenSSO Express will be updated every three months with new features that will keep users on the cutting edge without sacrificing critical support.

OpenSSO is a set of Java-based technologies that include single sign-on, access management, federation and secure Web services.

The security practices of open source IT developers should lead enterprises to think twice before using open source software, according to a new study sponsored by security tools vendor Fortify, says ZDNet.co.uk.

The study examined software for developing and serving Java applications, including Geronimo, JBoss, Struts and Tomcat.

It found that all or nearly all of the projects examined failed to provide access to an internal security expert, reduce the number of security flaws in successive releases, or make use of bug-catching tools such as FindBugs or Fortify's own Java Open Review.

The latest mobile phone spyware doing the rounds can be installed on a Java phone by just sending an MMS, followed by an SMS containing a string of Java commands that will activate the spyware, The Economic Times.

Once the spyware is installed, whenever the person gets a call, your phone will beep and you can listen to the conversation. And every time an SMS is sent, a copy of it comes to you too.

What more, the victim does not even know somebody is tapping on to his or her phone as the Java commands sent via SMS are configured in a way that they don't appear anywhere on the phone.