Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
How does the NSA get the private crypto keys that allow it to bulk eavesdrop on some email providers and social networking sites? It. But we know that so-called SSL keys are prized by the NSA The link for this article located at Wired is no longer available. . But we know that so-called SSL keys are prized by the NSA The link for this article located at Wired. private, crypto, allow, eavesdrop, email, providers. . LinuxSecurity.com Team
Security is not just about strong encryption, good anti-virus software, or techniques like two-factor authentication. It. We The link for this article located at Wired is no longer available. . We The link for this article located at Wired is no longer available.. security, about, strong, encryption, anti-virus, software, techniques, two-facto. . LinuxSecurity.com Team
At the 2010 Hacker Halted Conference in Miami on October 13, 2010, SECNAP Network Security will demonstrate the ease with which cyber sniffers, eavesdroppers and hackers can intercept email messages, despite widespread user trust that email messages are private and secure.. Email encryption techniques, such as PGP, TLS and SSL, have limited effectiveness in securing email messages as they travel from point A to point B. Public-key encryption solutions have numerous weaknesses, and suffer from the absence of a universal key repository. Some symmetric encryption solutions have vulnerabilities as well. "To date, no solution on the market could guarantee complete, end-to-end encryption of email content, headers, attachments and other identifiers," said SECNAP Network Security chief Michael Scheidell. "Rule18 The link for this article located at PR Newswire is no longer available. . Email encryption techniques, such as PGP, TLS and SSL, have limited effectiveness in securing email . hacker, halted, conference, miami, october, secnap, network, security. . LinuxSecurity.com Team
Today, full-system encryption in software is feasible and practical. Here's how to get up and running using solutions from PGP, McAfee, Sophos, and open-source options TrueCrypt and DiskCryptor. There was a time, not all that long ago, when a fully-encrypted system disk was something only for people with money to burn. . You bought a special disk controller which performed hardware-based encryption, and then trusted the hardware vendor to make sure everything was implemented properly -- e.g., that they were using a good algorithm, that the key size for the encryption wasn't laughably short, and so on. Today, full-system encryption in software is both feasible and practical -- although how practical will depend on the workload involved. But it's not a security silver bullet, much as it might seem to be from the outside. It can, and does, add a layer of protection that greatly reduces the risk of data compromise in the event hardware is lost or stolen. But that protection depends entirely on how it's implemented, and whether or not the user's been educated in the way an encrypted system works. The link for this article located at Information Week is no longer available. . Explore robust strategies for complete drive encryption utilizing both commercial and community-driven applications to improve information safety.. full System Encryption, Software Encryption Options, Disk Encryption Best Practices, Open Source Encryption, Data Security. . LinuxSecurity.com Team
If you travel across national borders, it's time to customs-proof your laptop. Customs officials have been stepping up electronic searches of laptops at the border, where travelers enjoy little privacy and have no legal grounds to object. Laptops and other electronic devices can be seized without reason, their contents copied, and the hardware returned hours or even weeks later. Now that we're jumped ahead an hour and are seeing less snow (at least here out east), we can start moving about the world again with our trusty laptops - be sure to give a quick once over of the above article! This includes tips / tools for ALL operating systems to ensure you have properly secured your laptop - wireless hacks, encryption techniques, and general security apply.. The link for this article located at news.com is no longer available. . Safeguard your laptop against customs scrutiny with these crucial strategies and resources to maintain data security during international trips.. Customs Laptop Security, Traveling with Laptop, Data Protection Tips, Encryption Techniques, Privacy on Travel. . LinuxSecurity.com Team
Corporate espionage is big business these days. So it makes sense to deploy some kind of encryption system to ensure that prying eyes can. The link for this article located at eSecurityPlanet is no longer available. . In the digital era, safeguarding email content is essential. Encryption protects private messages from espionage, ensuring confidentiality and secure access.. Email Security, Encryption Techniques, Data Protection. . Bill Locke
Take two popular forensics tools (Sleuth Kit and Encase) and hammer and fuzz the hell out of them. What do you get? Read on to see a recap of a Black Hat Conference session as the writer gives you the results of the tests. I also enjoyed his few choice lines at the end concerning proper overall etiquette (hackers are human, after all ... most of us at least)... . The link for this article located at ITtoolbox is no longer available. . The link for this article located at ITtoolbox is no longer available.. popular, forensics, tools, (sleuth, encase), hammer. . LinuxSecurity.com Team
With security on the Internet, there's always some nagging doubt. Can you ever be absolutely certain, for example, that the e-mail you're sending with some confidential business information attached isn't going to be intercepted and read as it travels the digital highways and byways? Using the Internet for anything sensitive requires some faith that everything in place to ensure the security of the information you're working with. But uncertainty can be useful. For years, security researchers have been experimenting with harnessing one of the underlying rules of quantum physics, known as the Uncertainty Principle, which states that at the quantum level, where objects are infinitely small, it's impossible to measure electrons and photons and other similarly tiny particles without affecting them. How does quantum physics apply to the world of security? The idea is to harness this inherent uncertainty to create a data-encryption scheme that's essentially unbreakable. It's called quantum cryptography, and already some governments and private companies are using it to build absolutely secure lines for data and voice communications. The link for this article located at Business Week is no longer available. . But uncertainty can be useful. For years, security researchers have been experimenting with harnessi. security, internet, there's, always, nagging, doubt, absolutely, certain. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.