We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Multitudes of bug fixes and feedback on Red Hat Inc.'s inclusion of Security-Enhanced Linux in the Fedora Project have been submitted from the Linux community since the test2 beta was released in late March. Suffice it to say that the returns have been far more beneficial to Red Hat than any controlled beta release could hope for. . . .
Swedish security software vendor TFS Technology AB has added support for Linux to its identity and access management software, enabling migration to the open source operating system, it said. . . .
The four major Linux distributors have dismissed claims by Forrester Research that Microsoft outperforms them on responding to and fixing security flaws. In its report, Is Linux More Secure than Windows?, the analyst firm looked at how Microsoft, Debian, MandrakeSoft, Red Hat and SuSE Linux responded to reports of security flaws during a 12-month period. . . .
AMD has announced its membership in the Open Source Development Labs (OSDL), demonstrating a continued and strengthening commitment between the development community and AMD. AMD recognizes the support from leading Linux distributors Red Hat, SUSE LINUX, Mandrakesoft and Turbolinux . . .
The meeting comes after a rash of phishing scams which have targeted the four big banks and also some of the smaller institutions. Westpac recently ran an advertisement aimed at creating public awareness about phishing. . . .
Sophos also offers a custom application called Mail Monitor, which can be used with Microsoft Exchange (2000 and 2003), Lotus Notes/Domino and generic SMTP mail servers on a variety of Windows and Linux/Unix host platforms. Pure Message checks SMTP mail for viruses and to screen out spam. . . .
Szulik of Red Hat says the growth in Linux is a testament to its security: "It was the inferiority of (Windows) technology that created the need for open source and Linux. If the technology was as secure as the competitor made it out to be, why is Linux the fastest growing operating system in history?" . . .
The concept of an enterprise linux offering is that you have a fairly long time between releases (12-24 months) and a product that remains supported for an even longer period of time than the release cycle. This allows for stable server deployments with guaranteed bug fixes and security updates for an extend period of time (up to 5 years). Before the enterprise offerings, when the security updates stopped for a product, it was time to upgrade ... and that could be as frequently as every 12 months. Now that same business can expect bug fixes and updates for 5 years, meaning now normal application upgrades can drive the process, and not the need to upgrade your operating system. . . .
Linux vendors Debian, Mandrake, Red Hat, and SuSE have hit back at research which claims that Linux and Microsoft products are both secure. In a report released late last month entitled Is Linux more Secure than Windows?, analyst Forrester said: "Microsoft gets a bad rap for security, while many believe that Linux is relatively secure. . . .
Red Hat Linux 9 distribution will reach its end-of-life for errata maintenance on April 30, 2004. This means that from May 1, 2004 we will not be producing new security, bugfix, or enhancement updates for this product. . . .
Debian is a solid Linux distribution tended with much care and dedication by a global network of developers. Because of its relatively slow development cycle, it isn't the most cutting-edge in terms of the software available in the Linux world, but it is studiously maintained in terms of patches and security fixes. Consequently, Debian is a rock-solid and stable platform on which to run many infrastructure mainstays, such as DNS, file/print services, and Web servers. Its suitability for these purposes is limited only by the amount of in-house Unix/Linux expertise available in a given organization. . . .
The Linux-based devices, which will cost $995 to $9,995 depending upon the number of users licensed, will compete most directly with virtual-private networks (VPNs) and hosted applications, such Citrix's GoToMyPC. . . .
This can be considered closure to an issue that could have affected the entire open-source community. The idea of making Java the basis of a secure, open-source development platform is simply not viable right now. . . .
Novell's bet that Linux will break Microsoft's global grip on network servers and computer desktops arguably is a gamble of make-or-break proportions. But Montreal, Canada-based e-security company Gwava is backing the play, convinced Novell holds the ace in the hole. . . .
In the big bad world of worms and viruses, the virtually unbreakable Linux Operating System - which gained cult status because of its legendary core stability - is quickly donning the mandatory `Antivirus helmet' to become infallible. The alarming frequency of security attacks has prompted many Antivirus companies to dish out Linux specials, with MicroWorld and F-Secure recently joining the list. . . .
In essence, Trustix is issuing a new Enterprise version, which will contain memory-stack protection. The freely-available standard product will actually have support for memory-stack protection removed. . . .
For those who like to tinker, Gentoo has a now has a hardened 2.6 + SELinux kernel to play with. Of course, kernel 2.4.x is still recommended for production environments. . . .
According to Immunix COO Frank Rego, his company's decision to stop selling Immunix Linux wasn't a sudden shift but "more of a gradual change. We started in the appliance business with Trend Micro and Websense in the middle of last year." There was a layoff this week, but not a huge one. Rego says the company is now down to 20 employees from a high of about 25. He also says he hopes the company can start turning a profit by the end of 2004 -- but admits that he is an optimist. . . .
According to Immunix COO Frank Rego, his company's decision to stop selling Immunix Linux wasn't a sudden shift but "more of a gradual change. We started in the appliance business with Trend Micro and Websense in the middle of last year." . . .
New features in the 3.0 version include Sender Permitted From (SPF) filtering, which verifies that email received from a user domain was really sent from that domain. If not, the email will never get to the user. . . .
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
