The recent release of I2P 2.5.0, an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew of improvements and new features that will certainly intrigue security practitioners. This release aim...
If your agency deals in classified or sensitive information, you probably wage an ongoing war against Internet hackers. The danger isn’t so much from hackers’ creativity as much as it’s due to managers’ failures to seal security holes, establish policies . . .
Dug Song has contributed Kerberos v4 (KPOP) and APOP authentication patches for popa3d v0.4. I've mirrored them into popa3d/contrib on the FTP and added links to the popa3d page at the usual location: . . .
"... The proposal, which paves the way to make IPv6 the standard protocol in third-generation mobile multimedia networks, was accepted this week in a plenary session of the system architecture group of the 3GPP (Third-Generation Partnership Project), Nokia said in . . .
Reto Haeni has written this paper that gives a brief overview of the features of IPv6 and discuss its security specifications. In the later sections of the paper, he compares the security specifications of IPv6 to one of today's available . . .
Accessing the Web using WAP (Wireless Application Protocol)-enabled mobile phones may be all the rage, but what about the security issues? While it is possible to encrypt selected sections of the Web using a desktop PC with conventional browser and . . .
The spectrum used by the LANs' signals is expected to become crowded so quickly that companies could find themselves replacing all of their wireless equipment in just two to three years, as wireless technology is forced to move to less . . .
The two best things about those fast Internet connections you get from cable, DSL, and ISDN are that you don't have to dial a number to connect to the Internet, and they are also easy to share over a network. . . .
This article focuses on several host-based intrusion detection systems that are available on Linux. In particular, I will cover some of the basics of installing setting up these packages, how they are useful, and in what circumstances they can be . . .
Slashdot.org, the "news for nerds" Web site popular among Linux fans, fell victim to a series of hacker attacks for three days last week. The site was taken down intermittently by a series of distributed denial-of-service (DDoS) attacks Thursday, . . .
The implications of Microsoft's propreitary "extensions" to Kerberos could be pretty far-reaching. "As a legal wrangle develops over whether the Linux/open-source news Web site Slashdot.org can post messages containing what Microsoft calls a "trade secret," key members of the . . .
The Computer Emergency Response Team has updated their advisory on the recent Kerberos buffer overflow vulnerabilities. Most vendors have updated their packages already to fix this vulnerability. "The most severe vulnerability allows remote intruders to gain root privileges . . .
This article discusses the recent turmoil over the Slashdot postings regarding Kerberos, and the modifications that Microsoft has made to the Kerberos security protocol. "On Thursday, lawyers for Andover.Net, the parent company of the Linux enthusiast site Slashdot, posted . . .
Former CIA director R. James Woolsey, speaking on a panel here Wednesday, warned that international spies and terrorists would soon wield a more purposeful and dangerous breed of computer virus than ever seen before. Unlike Melissa, CIH or the recent . . .
During Thursday and Saturday of last week, the slashdot.org site experienced a Distributed Denial of Service attack. The follow article recounts what happened. "What follows is more-or-less Pat "BSD-Pat" Lynch's account of the DDoS... Pat is our super 31337 . . .
America's Most Wanted host John Walsh urged his viewers on Saturday night to help "take down" those responsible for the distributed denial of service (DDoS) attacks which briefly crippled numerous high-profile Web sites back in February. . . .
This paper discusses the differnt types of security scanners available for Linux. "A scanner is a program that automatically detects security weaknesses in a remote or localhost.". Scanners are important to Internet security because they reveal weaknesses in the . . .
More information on the "mstream" DDoS attack tool. "A new distributed denial-of-service (DDoS) tool found recently in computers at several universities may be able to avoid defenses put up by Web sites after a rash of DDoS attacks in February . . .
Although some readers credited the shutdown to an ironic reverse "slashdot effect" caused by the crush of a linking news article, Wired News reporter Declan McCullagh quoted sources at the website blaming a distributed denial of service attack for the . . .
Slashdot has fallen victim of a distributed denial of service attack. "Thursday just wasn't a good day for geek-culture destination Slashdot. First came the news that Microsoft ordered Slashdot to delete discussions of one of the company's security products. . . .
Mazu Networks, a start-up that was a runner-up in the prestigious Massachusetts Institute of Technology entrepreneurship competition, aims to put an end to the hacker attacks that resulted in highly publicized outages earlier this year for Internet high-flyers Yahoo Inc. . . .
