Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 11 articles for you...
77
data protectionpassword managementauthentication methodsEffective Hashing Techniques For User Password Protection
News about intrusions into the servers of online stores, games vendors and other internet services can now be read on an almost daily basis. Often, the intruders obtain customers' login data including their passwords. As many people use the same password in multiple places, criminals can use the passwords to obtain unauthorised access to further services.. To prevent passwords from being extracted, web site operators usually protect their users' passwords through such cryptographic techniques as one-way hashing. For this purpose, a character string that doesn't allow any conclusions to be drawn about the actual password is derived from the password. The only way of finding out whether a password matches a hash is to rehash the password and compare the results. This method is used by the authentication systems of operating systems and web applications The link for this article located at H Security is no longer available. . Discover methods to protect user credentials through robust encryption strategies, preventing unauthorized entry.. Password Management, Secure Hashing, Data Security. . LinuxSecurity.com Team
Jun 21, 2011
•
Server Security
67
authentication methodsperformance optimizationpassword crackingMaximize Password Cracking Speed Using SSD with Athlon 64 X2
The security specialist Objectif S. Oechslin has fitted an elderly Athlon 64 X2 4400+ with an SSD and the optimised tables. This system can, with only a 75% CPU utilisation, crack a 14 digit password with special characters, in an average of 5.3 seconds. Oechslin says that, worst case, it should be able to search arithmetically through 300 billion passwords per second, a speed that is a factor of 500 faster than an Elcomsoft cracker supported by a modern Tesla GPU from NVIDIA. The link for this article located at H Security is no longer available. . Oechslin has fitted an elderly Athlon 64 X2 4400+ with an SSD and the optimised tables. This system . security, specialist, objectif, oechslin, fitted, elderly, athlon, 4400+. . LinuxSecurity.com Team
Mar 11, 2010
•
Cryptography
81
security practicespassword securityauthentication methodsChoose Safe Passwords to Enhance Your Cybersecurity Measures
Classic article on choosing a secure password from Bruce Schneier on Wired. It's great reading, even for those of us who have been around a while. Ever since I wrote about the 34,000 MySpace passwords I analyzed, people have been asking how to choose secure passwords. My piece aside, there's been a lot written on this topic over the years -- both serious and humorous -- but most of it seems to be based on anecdotal suggestions rather than actual analytic evidence. What follows is some serious advice. . The attack I'm evaluating against is an offline password-guessing attack. This attack assumes that the attacker either has a copy of your encrypted document, or a server's encrypted password file, and can try passwords as fast as he can. There are instances where this attack doesn't make sense. ATM cards, for example, are secure even though they only have a four-digit PIN, because you can't do offline password guessing. And the police are more likely to get a warrant for your Hotmail account than to bother trying to crack your e-mail password. Your encryption program's key-escrow system is almost certainly more vulnerable than your password, as is any "secret question" you've set up in case you forget your password. The link for this article located at Wired is no longer available. . Create a robust, unique password of at least 12 characters, mixing letters, numbers, and symbols. Use a memorable passphrase and update regularly.. Secure Passwords, Cybersecurity Tips, Authenticator Recommendations. . LinuxSecurity.com Team
Aug 10, 2009
•
Privacy
77
security best practicesauthentication methodssecure configurationFive Essential Steps for Securing SSH Access on Linux Systems
Since it. The link for this article located at Think Hole is no longer available. . Implement crucial measures to bolster the security of your SSH connections and safeguard your Linux servers against unauthorized intrusion.. SSH Security Best Practices, Enhanced SSH Access Control, Secure Linux Servers. . LinuxSecurity.com Team
Nov 01, 2006
•
Server Security
67
security insightspassword managementpassword securityExploring Password Length: Insights from Roger Grimes on Protection
Does size matter? The question has arisen lately on Security-Basics, a computer security mailing list hosted by SecurityFocus.com. As usual, the question comes down to physical size or mental prowess. . Roger A. Grimes, a security columnist at InfoWorld, has posted a $100 challenge -- extra goodies as well -- both on the mailing list and at his blog at InfoWorld, to anyone who can crack one of three password challenges. Grimes' assertion is that password length alone can provide more than adequate password protection. The link for this article located at NewsForge is no longer available. . Insights on password length and protection from expert Roger A. Grimes at InfoWorld, including challenges to test security.. Password Security, Length Insights, Cybersecurity Tips. . LinuxSecurity.com Team
Jul 24, 2006
•
Cryptography
74
security practicespassword managementorganizational securityTen Proven Strategies For Effective Password Management In Organizations
Passwords are fatally flawed, it's true, but for now they are the best option for many companies. But almost everybody could be managing them more effectively. In all likelihood passwords will remain a problem until the very day they are replaced by technologies such as biometrics, which is the direction the industry appears to be heading. However, until that day comes, below are some tips for fostering a culture of secure and more effective password management. . 1. Passwords must not be written down If it seems incredible that we are still talking about password management at all, then it is unimaginable that we have to make this first point. If staff are writing down their passwords, having been told why they must not do so, then the system is too complex and too much is being asked of them. Companies must strike a balance between security and usability because a failure to understand the latter can easily undermine the former. So consider whether employees have been properly educated about the need to keep passwords secure and then consult the measures below if you need to update your password policy. The link for this article located at https://www.zdnet.com/ is no longer available. . Strengthen your security framework through practical password stewardship strategies for your business.. Password Management,Sensitive Authentication,User Education,Security Policies. . Brittany Day
May 20, 2006
•
Network Security
67
email securityencryption techniquesauthentication methodsUnlocking Email Security: Challenges of Public Key Cryptography
With its ability to authenticate, digitally sign, and encrypt messages, public key cryptography seems like a natural fit for protecting e-mail: With one solution, you can ensure the integrity of the content and prove the identity of the sender. But public key cryptography is akin to peace in the Middle East--everyone agrees it's a good idea, but the associated complexities can derail implementation. . . .. With its ability to authenticate, digitally sign, and encrypt messages, public key cryptography seems like a natural fit for protecting e-mail: With one solution, you can ensure the integrity of the content and prove the identity of the sender. But public key cryptography is akin to peace in the Middle East--everyone agrees it's a good idea, but the associated complexities can derail implementation. Traditional public key encryption schemes involve complicated processes such as issuing and managing keys and digital certificates, integrating cryptographic functions into existing applications, and locating a recipient's certificate. The difficulty of performing these functions often overrides any value that an enterprise might get from public key-based mail security. The link for this article located at Andrew Conry-Murray is no longer available. . With its ability to authenticate, digitally sign, and encrypt messages, public key cryptography seem. ability, authenticate, digitally, encrypt, messages, public, cryptography. . LinuxSecurity.com Team
Oct 06, 2004
•
Cryptography
81
email securityauthentication methodssecure communicationWeb Mail Security: Understanding Threats And Management Practices
There used to be a time when secure e-mail management was simple. "Managing" meant sorting through your e-mail messages and putting them into appropriate folders. Secure e-mail back then meant using a simple password for e-mail access. However, today, with e-mail being a business-critical application, more threats against e-mail than ever before, and government regulatory concerns, secure e-mail management takes on a whole different meaning. Viruses, spam, worms, and other malicious attacks and non-malicious events can bring e-mail infrastructures to their knees. With recent government legislation in countries such as the U.S., e-mail confidentiality has become a growing concern. One of the more common accesses to e-mail today is via Web browser and Web-based e-mail access. What security issues should be kept in mind when developing or designing Web mail systems? . . .. There used to be a time when secure e-mail management was simple. "Managing" meant sorting through your e-mail messages and putting them into appropriate folders. Secure e-mail back then meant using a simple password for e-mail access. However, today, with e-mail being a business-critical application, more threats against e-mail than ever before, and government regulatory concerns, secure e-mail management takes on a whole different meaning. Viruses, spam, worms, and other malicious attacks and non-malicious events can bring e-mail infrastructures to their knees. With recent government legislation in countries such as the U.S., e-mail confidentiality has become a growing concern. One of the more common accesses to e-mail today is via Web browser and Web-based e-mail access. What security issues should be kept in mind when developing or designing Web mail systems? The Basics of Web Mail Most Web mail systems are designed using a multi-tiered architecture. Usually, a Web server serves as a reverse proxy to a backend e-mail server that actually services the user's mail requests. Most Web mail systems use a separate database to store the mail, versusthe user authentication information. User Authentication can be done by using authentication protocols native to the mail server O/S or 3rd party authentication methods such RADIUS or SecureID. By using a set of stored procedures and scripts, the Web server formats the user HTML requests so that the back end e-mail server can serve up mail. The usual backend mail server includes Microsoft Exchange, Netware Mail, or Lotus Notes. Each of these systems includes a Web mail service that uses default the ports of 80 for HTTP and 443 for HTTP/SSL. Most Web mail policies require the use of HTTP over an encrypted channel such as Secure Sockets Layer (SSL) or Secure Shell protocol (SSH). In rare cases, the IP security (IPSec) is used as the secure communication channel for Web mail systems. The link for this article located at ebcvg.com is no longer available. . There used to be a time when secure e-mail management was simple. 'Managing' meant sorting through y. there, secure, e-mail, management, simple, 'managing', meant, sorting, through. . LinuxSecurity.com Team
Jun 23, 2004
•
Privacy
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!