Following Windows XP Service Pack 2 released in August 2004, Microsoft finallz releases the long waited Windows XP SP3 which includes all previously released Windows XP updates, including security updates and hotfixes, and select out-of-band releases.

Microsoft is not adding significant Windows Vista functionality to Windows XP through SP3. However, SP3 does include Network Access Protection (NAP) to help organizations that use Windows XP to take advantage of new features in the Windows Server® 2008 operating system. Further, Windows XP SP3 does not include Windows Internet Explorer 7

Previously Released Functionality

• MMC 3.0
• MSXML6
• Microsoft Windows Installer 3.1
• Background Intelligent Transfer Service (BITS) 2.5
• IPsec Simple Policy Update for Windows Server 2003 and Windows XP
• Digital Identity Management Service (DIMS) DIMS makes it possible for users who log on to any domain-joined computer to silently access all of their certificates and private keys for applications and services. Peer Name
• Peer Name Resolution Protocol (PNRP) 2.1
• Wi-Fi Protected Access 2 (WPA2)

New and Enhanced Functionality

• “Black Hole” Router Detection
• Network Access Protection (NAP)
• Descriptive Security Options User Interface
• Enhanced security for Administrator and Service policy entries
• Microsoft Kernel Mode Cryptographic Module
• Windows Product Activation

All details on Windows SP3 page

The 320 MB Windows XP SP3 is available for download here

The Register published the result of a survey, among office worker in London, which reveals that women are 4 (four) times more likely than men to give out "passwords" in exchange for chocolate bars.

The survey by of 576 office workers in London found that women are by far more likely to give  their computer login credentials to total strangers than their male colleagues in a ratio above 4/1 (45% vs. 10%).

The bogus researchers also asked for workers' names and telephone numbers, ostensibly so they could be entered into a draw to go to Paris.

The complete article is on Register website 

InfoWorld published the 10 most common security land mines that experts say you need to avoid.

Many companies spend a small fortune and deploy a small army to secure themselves from the many security threats lurking these days. But all those efforts can come to naught when making any of these common mistakes. The results can range from embarrassing to devastating, but security experts say that all are easily avoidable.

And almost all can be done without spending one more dime.

1. A slip of the finger reveals the company secret

2. People give away passwords and other secrets without thinking

3. A trusted partner ends up not being so trustworthy with your data

4. Web-based apps can be portals to leaks and thieves

5. Hoping the worse doesn’t happen only makes it worse

6. Avoiding or diluting response leadership makes breaches worse

7. Handling breach details sloppily tips off the perp

8. Trusting "silver bullet" technology hides real threats

9. Spending unthinkingly wastes resources you might need for important threats

10. Don't save the wrong data

In short, weakest point in ICT technologies is always the same one… guess who ?

The full article is available here on InfoWorld