We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
MandrakeSoft is pleased to announce the beta version of Mandrake Security, based on Linux-Mandrake 7.2, released in alpha version on 28 december 2000. Its significant improvements are: functional web interface, possibility of configurating the firewall part via the web,correction of bugs. . . .
In response to the revelation of several holes in its BIND domain name server software this week, the Internet Software Consortium is starting a fee-based, members-only forum, a move that many observers feel will only worsen the software's security problems. The . . .
Recently on a posting forwarded to bugtraq by Theo de Raadt, Paul Vixie, Chairman of the ISC, describes the need for a fee-based program to notify BIND vendor's, TLD operators, and others under a non-disclosure plan to publish security and bug information to priority members. Theo thinks this is detrimental to the development of BIND. . .
Computer users face an increased risk from the transmission of viruses in encrypted form, following the launch of a security initiative today. The Trusted Computing Platform Alliance, which is backed by major companies such as Microsoft, Hewlett-Packard and Compaq, has . . .
UUNet has a special place in our heart after our most recent service interruption. "UUNet last week became the first internet service provider (ISP) to fall foul of tough new laws on intercepting emails. Network News understands that the breach of the controversial Regulation of Investigatory Powers (RIP) Act happened when UUNet, the UK's second largest UK ISP and one of the biggest suppliers of leased lines, dealt with a spam attack. Engineers clearing more than two million emails called up all the messages and examined the headers to delete the spam. Examining the subject line of the header, however, contravenes the data interception rules specified by the RIP Act which were designed to give users a guarantee of privacy. . . .
The CORE SDI team has recently found a vulnerability in AT&T's VNC software package. VNC uses weak authentication mechanisms which makes it subject to a classical man-in-the-middle attack. Below is their advisory describing the problem.. . .
If there is one question I hate, it's "Which Linux distribution is the most secure?" followed by "Which firewall is best?" People ask these questions in all innocence, and very few realize the complexity behind them. If I'm in a bad . . .
Software engineers at NASA's Goddard Space Flight Center are starting to evaluate biometric log-in products for securing remote mission operations. Testing will start around Jan. 15 on a product that scans faces and fingerprints, said John Donohue, associate head of Goddard's . . .
The Securities and Exchange Commission, intensifying its investigation into questionable IPO practices, is examining the activities of two little-known investment funds that obtained relatively large chunks of VA Linux Systems' initial public stock offering. . . .
On December 30, 2000 Sendmail, Inc. released sendmail version 8.11.2. This is mostly a bug fix release. As of version 8.11.0 sendmail included support for the SMTP Authentication Security Layer. The release notes and changelog is displayed below. . . .
Demand for Internet-based security products is exploding, as sales reached $243 million last quarter and are expected to more than double next year, a new study shows. With Check Point Software Technologies and Cisco Systems leading the way, sales of . . .
Here I am, on the road again with my notebook computer. It took me about three attempts to sign into my computer here in the hotel room. Because I change my passwords several times a year, as we all should, . . .
"The NSA folks just recently got permission to make their stuff available on the Web. It's just a proof of concept, and no doubt a lot of changes will need to made before people will accept integrating it into . . .
RSA Security Inc., today announced that it is accepting nominations for its fourth annual RSA Security Awards. Designed to honor outstanding contributions in the field of cryptography, RSA Security Awards will be made to an individual or an organization in each . . .
Today, Sendmail, Inc. acquired Nascent Technologies, a developer of the Mailspinner webmail server product. This acquisition enables Sendmail, Inc.'s customer's to access their email via any wireless device. Sendmail, Inc., a leading provider of Internet messaging solutions, today announced the . . .
Over the course of 2000, SC Magazine has covered many topics in our Test Centers and Market Surveys. We have also tested many products, which have featured as standalone reviews. In this issue we bring you the Pick . . .
Microsoft has told Security Focus, the US security company that manages the Bugtraq moderated security email list, that it can no longer publish the software giant's security alerts. The issue centres round Microsoft's recently redesigned security email alerts, which it distributes . . .
The best way to find out if your house is secure is to hand over some cash to a thief and let him or her try to break in. Of course, you have to trust the thief. But that's what many . . .
A new collaborative security organization is preparing to release the first in a wave of security benchmarks for commercial products widely used in government, industry and academia. The Center for Internet Security is a nonprofit organization composed of more than . . .
Computer giant International Business Machines Corp. [NYSE:IBM] reportedly will announce today the appointment of Harriet Pearson as its first chief privacy officer, a move meant to strengthen the company's role in online consumer privacy protection. A Reuters report said Pearson will . . .
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
