Chipset and graphics GRAPHICS firm Nvidia said today it has introduced its 415-D chipset.
This is the latest move in the SNAP (Strategic Nvidia-AMD Partnership) alliance first mooted 18 months back and which, of course exists - although AMD has to tread carefully because it's chummy with all the chipset makers...
The chipset includes the Nforce media and comms processor with a system platform processor (SPP) to improve audio, networking and memory performance, the firm said. The Nforce 415-D will be paired with separate graphics processor chips like the Geforce Ti 500.
Citibank spokesperson Maria Mendler wouldn’t comment on the details of Devitry’s accusations, and instead offered a written statement: “While it is not our policy to comment on information security matters, we have taken and are continuing to take all necessary steps to ensure our c2it site is effectively protected from cross-scripting vulnerabilities.”
The alleged flaw in C2it.com revolves around a two-year-old security vulnerability called “cross-site scripting.” Effectively, it lets a current c2it.com customer sneak requests for customer information through a normal form on a Web page.
Until two years ago, many Web page designers never considered the possibility that an intruder might attempt to load malicious code onto a Web server “through the front door” — by typing it right into a Web page form requesting information like name or address or account number. As a result, few Web designers bothered checking data typed in by site visitors for suspicious characters.
In February, 2000, the federally funded CERT/CC Coordination Center, charged with calling attention to major computer risks, published an urgent bulletin on the issue.
Devitry, who publishes a site designed to expose firms that still have not protected against cross site scripting, said the c2it.com issue was particularly worrisome because it exposed customer account information. According to Citibank’s Mendler, c2it.com, a PayPal competitor, currently has 250,000 customer accounts.
“In September I talked to their e-crimes person, it sounded like someone pretty high up who would take care of things,” Devitry said. “But nothing happened. Then I kept sending them e-mail and having gotten much since then. I use the site and I like it, but I like the sites I use to be secure.”
Devitry said he published the flaw in order to convince Citibank to fix the problem.
This is the latest move in the SNAP (Strategic Nvidia-AMD Partnership) alliance first mooted 18 months back and which, of course exists - although AMD has to tread carefully because it's chummy with all the chipset makers...
The chipset includes the Nforce media and comms processor with a system platform processor (SPP) to improve audio, networking and memory performance, the firm said. The Nforce 415-D will be paired with separate graphics processor chips like the Geforce Ti 500.
Citibank spokesperson Maria Mendler wouldn’t comment on the details of Devitry’s accusations, and instead offered a written statement: “While it is not our policy to comment on information security matters, we have taken and are continuing to take all necessary steps to ensure our c2it site is effectively protected from cross-scripting vulnerabilities.”
The alleged flaw in C2it.com revolves around a two-year-old security vulnerability called “cross-site scripting.” Effectively, it lets a current c2it.com customer sneak requests for customer information through a normal form on a Web page.
Until two years ago, many Web page designers never considered the possibility that an intruder might attempt to load malicious code onto a Web server “through the front door” — by typing it right into a Web page form requesting information like name or address or account number. As a result, few Web designers bothered checking data typed in by site visitors for suspicious characters.
In February, 2000, the federally funded CERT/CC Coordination Center, charged with calling attention to major computer risks, published an urgent bulletin on the issue.
Devitry, who publishes a site designed to expose firms that still have not protected against cross site scripting, said the c2it.com issue was particularly worrisome because it exposed customer account information. According to Citibank’s Mendler, c2it.com, a PayPal competitor, currently has 250,000 customer accounts.
“In September I talked to their e-crimes person, it sounded like someone pretty high up who would take care of things,” Devitry said. “But nothing happened. Then I kept sending them e-mail and having gotten much since then. I use the site and I like it, but I like the sites I use to be secure.”
Devitry said he published the flaw in order to convince Citibank to fix the problem.