Security Projects - Page 44.5

We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.

CoCo VMs Will Now Panic If RdRand Is Broken in Linux 6.9

A significant change has been merged into the x86 fixes for Linux 6.9, requiring the seeding of RNG (Random Number Generation) with RdRand for CoCo (Confidential Computing) environments. The change focuses on CoCo virtual machines, designed to be as ...
Apr 08, 2024
  0

New GitHub Actions Enhancements Boost Security & Power

Recent enhancements have been made to GitHub Actions, a...
Apr 03, 2024
  0
31.Lock DigitalRoom Esm H115

Tails 6.1 Released with Security, User Experience Enhancements

Tails 6.1 has been released as the latest version of th...
Mar 27, 2024
  0
10.FingerPrint Locks Esm H115

Discover Security Projects News

LS Hmepg 337x500 34 Esm H200

Summer Webinars look at embedded Linux security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Free Webinars will be offered separately by Wind River; by TimeSys; and by Mocana and its partners MontaVista and Wind River this summer. The events explore getting started with embedded Linux development, graphical embedded Linux development tools, and embedded device security, respectively. . . .

LS Hmepg 337x500 34 Esm H200

More flaws foul security of open-source repository

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Security researchers have found at least six more flaws in the open-software world's most popular program for maintaining code under development. According to a representative of the project that oversees the program, known as the Concurrent Versions System, the vulnerabilities include a flaw that could let an attacker take control of a CVS server from the Internet, putting the code repository's contents at risk. . . .

LS Hmepg 337x500 34 Esm H200

Secure Development: A Polarised Response

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Through fuller integration of security and development activities, the effectiveness and efficiency of security assessment will be increased and streamlined, the associated costs greatly reduced and organisations will enjoy the return on security investments (ROSI) at a greater rate. Until then, however, those organisations that are already using secure development implementation early in their development cycles will be able to continue to reap greater advantages over their competition. . . .

LS Hmepg 337x500 34 Esm H200

OpenBSD revisited

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

One of the goals for the OpenBSD project is to try being the most secure operating system. The OpenBSD developers say the open software development model allows them to take a "more uncompromising view towards security than other vendors are able to". To this end the developers have been auditing OpenBSD components on a file-by-file basis since 1996, and continue the process to this day. . . .

LS Hmepg 337x500 34 Esm H200

Microsoft's Charney Talks Up Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This article is mostly about Microsoft and their security woes. Unexpectedly, however, Linux security tools make a significant cameo. Check out this money-quote:Two IT administrators of Windows-centric shops said they're using Snort, a Linux-based intrusion technology, to secure their infrastructures. Sourcefire, a commercial security offering, also makes use of Snort technology in its offerings. "There are better tools in the Linux world for this stuff, not just for intrusion detection but also for antivirus," said Vernon Butler, an IT manager at CWCapital, Needham, Mass. . . .

LS Hmepg 337x500 34 Esm H200

Hardened-PHP

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The Hardened-PHP project team is pleased to announce the release of version 0.1.1 of our PHP security hardening patch. This new Hardened-PHPrelease is the first one that is publicly announced and is consideredstable on atleast linux systems. . . .

LS Hmepg 337x500 34 Esm H200

Prelude IDS Framework: "Open Source Security's Best Kept Secret"

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Everyone both involved in information security and many that are not have heard of Snort NIDS (Network Intrusion Detection System). But not many have heard of a little jewel by the name of Prelude. Prelude is an open source framework for building distributed Hybrid Intrusion Detection Systems (HIDS). The reason it is called 'Hybrid' is that it utilizes sensors which are network based (NIDS). But also allows for hosts logs to be transmitted to a central 'Manager' for correlation and storage in a database (mySQL, Postgres, Oracle). . . .

LS Hmepg 337x500 34 Esm H200

What is gpgdir?

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This is a very interesting new open-source tool, which encrypts and decrypts entire directories using the CPAN GnuPG module. We heartily encourage anyone who wishes to give it a whirl and tell us about it! We are especially interested to know about the user experience, and about any issues that involve speed and scalability. Is it very limiting in these respects that the code is in Perl? . . .

LS Hmepg 337x500 34 Esm H200

Linux: unfit for national security?

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Days after an embedded-industry CEO stirred up a firestorm by charging that Linux poses a threat to U.S. security, two prominent computing-security experts said last week that some developers are already inappropriately using Linux in critical security applications where it isn't suitable. . . .

LS Hmepg 337x500 34 Esm H200

Security Flaws Database Goes Live

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

In the interest of spreading the security message to as wide an audience as possible, a group of volunteer security professionals has compiled one of the largest, most complete and most freely accessible databases of vulnerabilities on the Internet. . . .

LS Hmepg 337x500 34 Esm H200

Joint Statement about GNU/Linux Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

GNU/Linux vendors Debian, Mandrake, Red Hat, and SUSE have joined together to give a common statement about the Forrester report entitled "Is Linux more Secure than Windows?". Despite the report's claim to incorporate a qualitative assessment of vendor reactions to serious vulnerabilities, it treats all vulnerabilities as equal, regardless of their risk to users. . . .

LS Hmepg 337x500 34 Esm H200

Linux Netwosix 1.1 Released

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Vincenzo Ciaglia writes:Linux Netwosix 1.1 is released and assures a high security to your system and your net. The system has been completely rebuilt and this version fix all the bugs of last release.Link points to full announcement. . . .

LS Hmepg 337x500 34 Esm H200

New HoneyNet Challenge!

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Honeynet Project Scan of the Month Challenges are BACK with a vengeance! Today we announce a new type of challenge: an Analysis Challenge. Scan of the Month #30 offers you an opportunity to draw your conclusions from a massive pool of honeynet firewall log data. Questions to guide your creativity in the analysis process are provided. . . .

LS Hmepg 337x500 34 Esm H200

FreeS/WAN Development Halted

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

After more than five years of active development, the FreeS/WAN project will be coming to an end. Nine months after the release of FreeS/WAN 2.00, Opportunistic Encryption (OE) has not caught on as we'd hoped. The Linux user community demands feature-rich VPNs for corporate clients, and while folks genuinely enjoy FreeS/WAN and its derivatives, the ways they use FreeS/WAN don't seem to be getting us any closer to the project's goal: widespread deployment of OE. For its part, OE requires more testing and community feedback before it is ready to be used without second thought. The project's funders have therefore chosen to withdraw their funding. . . .

LS Hmepg 337x500 34 Esm H200

Gentoo Linux gets update, more security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Gentoo Linux has announced the release of Gentoo Linux 2004.0 for x86, AMD64, PowerPC, Sun SPARC, and SGI MIPS architectures. The 'Gentoo Hardened team' has also unveiled the inaugural release of a security-enhanced Gentoo platform for the x86 architecture. . . .

Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved