Why Does Microsoft Always Get A Free Pass? Why Does Big Business Reek So Badly?
(Dec 4, 2008, 07:03 UTC) (1322 reads) (2 talkbacks) (feedback)
LinuxPlanet: "John Gilmore, one of the founders of Electronic Frontier Foundation and all-around awesome geek and activist, is often quoted as saying "The Net interprets censorship as damage and routes around it." But does it? The Internet is under the control of the companies who own the wires, which ain't us peons out here in the world."

Public Key Crypto for Enterprise Users
(Dec 4, 2008, 02:33 UTC) (649 reads) (0 talkbacks) (feedback)
Enterprise Networking Planet: "Its strength lies in the fact that it can be used to exchange encrypted information between two parties that have never communicated together before and have therefore never agreed on a secure way of exchanging messages."

The Big Ol' Ubuntu Security Resource
(Dec 3, 2008, 20:33 UTC) (1173 reads) (1 talkbacks) (feedback)
IT Security: "But although Ubuntu is billed as the ultra-secure solution, you should know that even though Ubuntu's default install has its flaws, like every other operating system. To combat these weaknesses, IT Security has prepared a guide to help you close your system's backdoors and protect you from some of the common Ubuntu exploits."

Shred and Secure-Delete: Tools for Wiping Files, Partitions and Disks in GNU/Lin
(Dec 3, 2008, 08:33 UTC) (1117 reads) (1 talkbacks) (feedback)
Free Software Magazine: "I carry a small, laminated card indicating my subscription to the IUSP (International Union of the Super Paranoid, tin hat division). Well, you can’t be too careful. After all, we live in a dangerous world and computers are just an extension of that."

40 Open Source Tools for Protecting Your Privacy
(Dec 3, 2008, 07:03 UTC) (2025 reads) (0 talkbacks) (feedback)
eSecurityPlanet: "You don't need to fork over big bucks – or even any bucks – to keep your online activities and identity secret. The open source community has dozens of privacy-related projects in development, and some of them have already proven themselves to be among the best privacy protection tools available."

Trumpet Windows Loudly--- Except When It's Malware Outbreaks
(Dec 3, 2008, 00:01 UTC) (1921 reads) (6 talkbacks) (feedback)
Linux Today Blog: "Ever notice how Microsoft plasters the Windows name on everything it can reach? Splash screens, stickers on computers, and advertising everywhere. There is no escaping it. Except when it's yet another malware outbreak-- then all the news organization go inexplicably deaf, dumb, and blind, as this latest story demonstrates:
Virus hits nearly 75% of systems on Afghanistan military base."

Security: A Low Intensity, Distributed Bruteforce Attempt
(Dec 2, 2008, 23:31 UTC) (1044 reads) (2 talkbacks) (feedback)
That Grumpy BSD Guy: "A low intensity, distributed bruteforce attempt... We have seen the future of botnets, and it is a distributed, low-key affair. Are sites running free software finally becoming malware targets?"

Virus Hits Nearly 75% of Systems on Afghanistan Military Base
(Dec 2, 2008, 19:17 UTC) (1963 reads) (7 talkbacks) (feedback)
Zero Day: "Earlier this month we saw the military ban the use of USB drives and other removable media. Apparently the virus outbreak that lead to this measure affected 75% of all systems at the largest U.S. military base in Afghanistan."

EFF to Fight Against Telecom Immunity in Tuesday Hearing
(Dec 1, 2008, 23:34 UTC) (655 reads) (0 talkbacks) (feedback)
Electronic Frontier Foundation: "On Tuesday, December 2, at 10 a.m., the Electronic Frontier Foundation (EFF) will challenge the constitutionality of a federal law aimed at granting immunity to telecommunications companies participating in illegal domestic surveillance."

Data Encryption and Ubuntu, Part III
(Dec 1, 2008, 19:34 UTC) (936 reads) (0 talkbacks) (feedback)
IT Wire: "In the previous article we looked at the basics of using PGP, creating and backing up PGP keys and using them to encrypt files locally. Now we'll look at how to send someone an encrypted email."

Protecting Your LAMP Site with a Robots.txt Honeypot
(Nov 27, 2008, 12:03 UTC) (2689 reads) (0 talkbacks) (feedback)
Mad Irish: "Knowing that malicious attackers might look into your robots.txt file and explore the listings there allows you to employ a few defensive techniques, or at least provide some early warning measures. One possibility is to simply waste an attackers time."

Hardening the Linux Desktop
(Nov 26, 2008, 07:33 UTC) (2899 reads) (4 talkbacks) (feedback)
IBM Developerworks: "This tutorial takes you through the steps of installing and configuring antivirus software, creating a backup-restore plan, and making practical use of a firewall. When you finish, you'll have the knowledge and tools you need to harden your Linux desktop against most attacks and prevent illegitimate access to your computer."
link fixed--ed.

Anonymous Proxy Using Squid 3 On CentOS 5.x
(Nov 23, 2008, 00:16 UTC) (1753 reads) (0 talkbacks) (feedback)
HowtoForge: "This howto describes step by step a method to install a SQUID 3 server as an Anonymous Proxy. An anonymous proxy is a tool that attempts to make activity on the Internet untraceable. It accesses the Internet on the user's behalf, protecting personal information by hiding the source computer's identifying information. Simply say to hide your IP."

Make Your BIOS Love Security
(Nov 22, 2008, 10:03 UTC) (2300 reads) (4 talkbacks) (feedback)
Codeblog: "There's this great CPU feature called "nx" - it protects your computer from intrusion by blocking execution of memory regions that weren't expected to be executable (i.e. stack/heap data). You really want this enabled."

Data encryption and Ubuntu, Part I
(Nov 21, 2008, 19:03 UTC) (1527 reads) (0 talkbacks) (feedback)
IT Wire: "I am a strong believer that in certain circumstances you should have mechanism available to you to protect your own data and be avle to share that data only with people and organisations that you trust. I want to outline several ways of keeping your data private."

IETF: Should We Ignore the Kaminsky Bug?
(Nov 21, 2008, 17:33 UTC) (1131 reads) (0 talkbacks) (feedback)
Network World: "The Internet engineering community is grappling with what to do about a serious flaw in the DNS discovered this summer, and the ongoing debate brings to mind a famous quotation from Voltaire: "The perfect is the enemy of the good.""

Building an OpenBSD Gateway - Part 1
(Nov 21, 2008, 01:03 UTC) (1267 reads) (0 talkbacks) (feedback)
Raiden's Realm: "If you're happy with the level of functionality you receive from your current router, then you can stop reading now if you like. However, if you want to crank up your gateway's functionality and security by astronomic proportions, then this tutorial is for you."

Window Kit: Investigating Windows Systems With Linux
(Nov 20, 2008, 18:03 UTC) (1674 reads) (0 talkbacks) (feedback)
Linux Magazine: "Criminals, intruders, and corporate saboteurs leave data behind on the hard disks of any computers they visit. Many of these computers are Windows systems, but you don’t need Windows to extract valuable forensic information from a Windows hard disk. In this article, I will describe some simple techniques for getting forensic data from a Windows disk using Linux."

Hardening The Linux Kernel With Grsecurity (Debian)
(Nov 20, 2008, 10:03 UTC) (1574 reads) (1 talkbacks) (feedback)
HowtoForge: "Security is based on three characteristics: prevention, protection and detection. Grsecurity is a patch for Linux kernel that allows you to increase each of these points."

Answers Trickle Out as Spammer Networks Remain Compromised
(Nov 19, 2008, 19:16 UTC) (1582 reads) (0 talkbacks) (feedback)
Washington Post: "At about 4:30 p.m. Eastern time last Tuesday, the volume of junk e-mail arriving at inboxes around the world suddenly plummeted by about 65 percent...But when McColo was taken offline by its Internet providers, so too were all of the botnet control servers located there, security experts said."

Unplugging The World's Biggest Spam Host-- Temporarily
(Nov 19, 2008, 18:16 UTC) (1827 reads) (1 talkbacks) (feedback)
A number of stories have been published in the past few days about McColo getting shut down. Reportedly, worldwide spam volumes dropped significantly. McColo then got back online briefly, but was again disconnected due to public pressure.

cRAZY mAD wITH spam
(Nov 16, 2008, 04:01 UTC) (2095 reads) (1 talkbacks) (feedback)
BeginLinux: "I am involved in a very personal war .. a war on Spam not because I must, everybody else lives with it, but just because it makes me mad! Spam has made me so mad I have gone on a personal goal to cut the Spam on my servers to 0%...realistic, probably not. Die trying...yep that's me."

Enhance PC Security with Open Source Apps
(Nov 14, 2008, 07:33 UTC) (1599 reads) (0 talkbacks) (feedback)
Intranet Journal: "For Windows users, this has often felt like a fact of life. Even while there are some great freeware options for PC security like AVG anti-virus or Zone Alarm firewall, wouldn't it be great if there were some open source options as well? As luck would have it, there are. In this article, I will highlight open source applications that will not only save you some money, but potentially put you back into the driver's seat with regard to your PC's security."

Bruce Schneier: Securing Your PC and Your Privacy
(Nov 13, 2008, 04:34 UTC) (2065 reads) (0 talkbacks) (feedback)
Datamation: "He might be called the international rock star of computer security. Having testified before Congress and given well-regarded speeches the world over, when Bruce Schneier talks about security, experts listen."

Worst-ever Software Security Blooper?
(Nov 12, 2008, 20:04 UTC) (2002 reads) (1 talkbacks) (feedback)
LinuxDevices: "T-Mobile has issued an over-the-air fix for a laughable Android security bug that caused anything typed into its G1 phone to be interpreted by a root shell process."

WPA Vulnerability Discovered
(Nov 11, 2008, 21:19 UTC) (1456 reads) (0 talkbacks) (feedback)
Wi-Fi Planet: "Our own security expert, Lisa Phifer, who has been following the news, called the flaw "more of a pinhole, than a crack.""

Problems with Penetration Testing
(Nov 10, 2008, 23:33 UTC) (1529 reads) (1 talkbacks) (feedback)
Security Watch: "Penetration testing is as popular as ever, yet it continues to miss the mark. As a means of validating the security of an application system, it fails miserably on several counts."

50 Must-Have Open Source Tools for Security
(Nov 10, 2008, 21:33 UTC) (2926 reads) (1 talkbacks) (feedback)
Datamation: "The area of open source security software is growing rapidly, with a cornucopia of apps for every use: anti-spam, firewalls, forensics, encryption, log monitoring, passwords – the list is growing even as you read this."

Researchers Hijack Storm Worm to Track Profits
(Nov 10, 2008, 16:33 UTC) (1236 reads) (0 talkbacks) (feedback)
Washington Post: "A single response from 12 million e-mails is all it takes for spammers to turn annual profits of millions of dollars promoting knockoff pharmaceuticals, according to an unprecedented new study on the economics of spam."

Android: Not So Open After All?
(Nov 9, 2008, 02:02 UTC) (3952 reads) (10 talkbacks) (feedback)
InformationWeek: "Google caught wind of it, and pulled a move eerily similar to what Apple has done in the past with the iPhone. Google issued an over-the-air firmware update that buttoned Android back up."

Script To Blind Test Local Ports On Linux And Unix
(Nov 8, 2008, 03:02 UTC) (1890 reads) (0 talkbacks) (feedback)
The Linux and Unix Menagerie: "Today, we're going to take a look at simply and quickly getting as much dirty information about open ports on your own localhost as possible (By localhost, we mean, the server you're currently logged into and by dirty, we mean "not necessarily useful, but, probably, interesting and, maybe, useful" ;)"

DRM Firmware Adopted by Mobile Linux Stack
(Nov 7, 2008, 17:05 UTC) (1314 reads) (0 talkbacks) (feedback)
LinuxDevices: "A Tokyo-based vendor of embedded security technology says its DRM product will be ported to Access's Linux stack for mobile devices. Discretix says its Content Protection for Recordable Media Client offers software-based protection for music, video, and other premium content on SD cards and mobile handsets."

Once Thought Safe, WPA Wi-Fi Encryption is Cracked
(Nov 6, 2008, 20:52 UTC) (2041 reads) (0 talkbacks) (feedback)
IT World: "Security researchers say they've developed a way to partially crack the Wi-Fi Protected Access (WPA) encryption standard used to protect data on many wireless networks."

Video: Mastering IPTables, Final Installment
(Nov 5, 2008, 17:34 UTC) (1397 reads) (0 talkbacks) (feedback)
Linux Journal: "Hello and welcome to the third and final installment of the IPTables tutorial. Now that you have all the tools necessary to create basic firewall scripts, I am going to give a better overview of the entire IPTables system and how it works."

ICANN Almost Cracks Down on Spammy Domain Registrar
(Nov 1, 2008, 04:32 UTC) (1999 reads) (2 talkbacks) (feedback)
LinuxInsider: "An Estonian domain name registrar received a late stay of execution from the international body that regulates the domain name system. The Internet Corporation for Assigned Names and Numbers was threatening to pull EstDomains' registrar status because EstDomains' president was convicted of fraud."

Graphical Remote Control Desktops for Linux
(Oct 31, 2008, 10:01 UTC) (2767 reads) (2 talkbacks) (feedback)
LinuxPlanet: "A. Lizard takes us on a tour of secure remote graphical Linux administration over the Internet; through firewalls, routers, dynamic home IP addresses, Wake-on-LAN, and other perils. We will learn how to securely administer both Linux and Windows remotely. The journey begins with today's part 1 of three parts."

Solving Privacy Issues in Ubuntu 8.10 Intrepid Ibex
(Oct 30, 2008, 19:36 UTC) (2248 reads) (3 talkbacks) (feedback)
Begin Linux: "One of the new features in Ubuntu 8.10 is the ability to create an encrypted directory for content you do not want others to access. Oh, by the way, did you know that anyone can read your files that are in your home directory? Here is an example of sue logged in and able to open files in mike's home directory. However, note that they are opened read-only so they cannot be changed. Still, who is looking at your stuff?"

More Results from Realeyes
(Oct 30, 2008, 18:06 UTC) (998 reads) (0 talkbacks) (feedback)
Realeyes Technology: "For the past few weeks, I have been learning a lot about the site where the Realeyes pilot project is being run. After seeing several reports of incidents from Europe and Asia, it occurred to me that I could create a rule to monitor non-US IP addresses."

Ultimate Security Proxy With Tor
(Oct 28, 2008, 01:32 UTC) (2107 reads) (0 talkbacks) (feedback)
HowtoForge: "Nowadays, within the growing web 2.0 environment you may want to have some anonymity, and use other IP addresses than your own IP. Or, for some special purposes - a few IPs or more, frequently changed. So no one will be able to track you. A solution exists, and it is called Tor Project, or simply tor."

Virtual Linux Desktops, Real Security
(Oct 27, 2008, 19:03 UTC) (2368 reads) (0 talkbacks) (feedback)
ZDNet: "Deep inside a nameless government department — you will probably guess its identity, but nobody can say it officially — a Linux desktop revolution has taken hold. For this particular organisation, however, the big deal is not the fact that Linux is involved, but the way in which it is being used."

( UTC) ( reads) ( talkbacks) (feedback)

Receive news via our XML/RSS feed