We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Jeremy Allison goes against a Microsoft security specialist in this open source vs proprietary debate. "I believe that the open source development model does create software with significantly fewer exploitable holes than proprietary software. ... I know that programmers of proprietary . . .
A new way to attack wireless networks underscores the lack of security for PC owners using the airwaves to connect their computers, said security experts speaking at the Black Hat Briefings conference. On Thursday, Tim Newsham, a researcher for security . . .
A major vulnerability affects IOS software, enabling a hacker to bypass the authentication function. Cisco has issued an advisory document that tells IT managers how to eliminate several security flaws in its IOS software. The most serious vulnerability affects all versions . . .
"Have you got an old 486 lying around somewhere?" That's a question I've asked on a number of occasions when offering to set up an inexpensive Internet gateway, mail server and firewall solution. Sometimes, the server also serves up web pages. . . .
ZeroKnowledge, producers of the Freedom Internet Privacy Suite, a package of software that provided a personal firewall, blocked cookies and banner ads, locally stored and encrypted website login information, and scanned outgoing data to ensure personal information wasn't being sent out . . .
Are you overpaying for networking equipment? Gartner Inc. reports that many Fortune 500 companies are overpaying an average of $500,000 per year by failing to take active steps to cut their costs. The key, Gartner says, is using negotiating best . . .
NetSaint, the network monitoring tool, is apparently having legal problems over the use of the name netsaint. Ethan will be halting development for the time being, while he reorganizes. "Most of you are probably aware of the recent legal mess I'm found myself in over the use of the name "NetSaint".. . .
The open source software from former e-commerce poster child Zelerate will live on, despite the company's demise in March, former boss Rob Ferber has promised. The All Commerce software was issued under the GNU General Public License, and boasted customers such . . .
The EnGarde Linux distribution is probably the most secure Linux distribution I've seen. EnGarde enforces physical, host, and network security to protect your machine from attacks inside and out. In addition to tightening security policies and adding features like a LILO password to prevent someone with physical access getting root, EnGarde also includes intrusion detection to alert you to break-in attempts. Some distributions I've looked at seem to concentrate too heavily on one aspect of security or another, but EnGarde seems pretty well rounded.. . .
In a much awaited move, MandrakeSoft today outlines its Linux Security stategy aimed at individual, small office home office (SoHo) and small and medium enterprise (SME) users, and announces the availability of the 'Single Network Firewall'. In line with its continuing . . .
Here is an EnGarde Secure Linux product review provided by the SouthWest (UK) Linux User Group. "I tested EnGarde on the following machine: - An Intel Pentium 233mhz, 64 meg RAM, 6.4 gb Hard Disk, a Realtek . . .
WireX is pleased to announce the broad release of FormatGuard 1.0, the latest member of the Immunix security tool suite. Similar to StackGuard , FormatGuard provides run-time protection against printf format string vulnerabilities.. . .
... Eleven years later, the Israeli whiz kid who never finished college is co-founder and chief executive of Check Point Software Technologies, one of the most profitable software companies around. How profitable? Well, in the first quarter ending March 31, Check . . .
This announcement describes a change in the security support status of the FreeBSD 3.x branch, as well as the introduction of two new methods for tracking security fixes to FreeBSD 4.3-RELEASE: a FreeBSD CVS branch based on 4.3-RELEASE which will contain security fixes only, and the intention to trial binary security update packages for users of FreeBSD 4.3-RELEASE on the i386 platform.. . .
Earlier versions of LONE-TAR, prior to 11/4/98, had a date math problem which caused the program to stop working on April 19, 2001. We have a patch available on our web site that will permanently fix this problem. However, the version of LONE-TAR running is out of support and still has other problems associated with Y2K compliancy.. . .
A security firm that claimed it couldn't be hacked can't make brash statements anymore. Argus admitted that a group from Poland has won the fifth Argus Hacking Challenge, but the security company said it screwed up in choosing an operating system. . . .
Cylant Technology has developed a new security technology that enables a fundamentally new approach to intrusion detection; one that protects against both known and previously unknown attacks in a way that no other IDS on the market does. The company just . . .
This document covers secure processes and services for NetBSD Operating Systems and Networks. Most of the information in this document can easily be translated to other BSD systems, however.The documentation for setting up NetBSD firewalls, IP network address translation (IPNAT) and . . .
Several industry groups joined forces Thursday to form a new consortium dedicated to improving the security of the Internet. The Internet Security Alliance -- a collaborative effort of the CERT Coordination Center, the Software Engineering Institute and the Electronic Industries Alliance . . .
One of the U.S. government's front-line defenses against cyber-sabotage will begin selling its early warnings about the latest Internet threats, something it used to share only with federal agencies. THE SHIFT COMES as the taxpayer-funded CERT Coordination Center, formerly known as . . .
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
