Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 13 articles for you...
67

Exploring NSA Backdoors: Risks Posed to Data Privacy and Security

We already know the NSA wants to eavesdrop on the Internet. It has secret agreements with telcos to get direct access to bulk Internet traffic. It has massive systems like TUMULT, TURMOIL, and TURBULENCE to sift through it all. And it can identify ciphertext -- encrypted information -- and figure out which programs could have created it. . But what the NSA wants is to be able to read that encrypted information in as close to real-time as possible. It wants backdoors, just like the cybercriminals and less benevolent governments do. The link for this article located at Schneier on Security is no longer available. . The NSA's push for cryptographic backdoors raises serious data privacy concerns, risking individual rights and enabling unauthorized access to sensitive information. Data Encryption, Cyber Threats, Crypto Backdoors, Internet Privacy. . LinuxSecurity.com Team

Calendar%202 Oct 22, 2013 User Avatar LinuxSecurity.com Team Cryptography
81

Student Monitoring Practices In China: Hu Yingying's Experience

To her fellow students, Hu Yingying appears to be a typical undergraduate, plain of dress, quick with a smile and perhaps possessed of a little extra spring in her step, but otherwise decidedly ordinary. And for Hu, in her second year at Shanghai Normal University, coming across as ordinary is just fine, given the parallel life she leads. For several hours each week she repairs to a little-known on-campus office crammed with computers, where she logs on, unsuspected by other students, to help police her university's Internet forums. . Once online, following suggestions from professors or older students, she introduces politically correct or innocuous themes for discussion. The link for this article located at iht.com is no longer available. . Chinese students, such as Li Wei, engage in digital dialogues, promoting socially acceptable topics within university discussions.. China Education, Student Surveillance, Campus Forums, Internet Monitoring, Online Discussions. . LinuxSecurity.com Team

Calendar%202 May 10, 2006 User Avatar LinuxSecurity.com Team Privacy
82

Bush Administration's Internet Monitoring Proposal Raises Privacy Issues

The Bush administration is planning to propose requiring Internet service providers to help build a centralized system to enable broad monitoring of the Internet and, potentially, surveillance of its users. . .. The Bush administration is planning to propose requiring Internet service providers to help build a centralized system to enable broad monitoring of the Internet and, potentially, surveillance of its users . The proposal is part of a final version of a report, "The National Strategy to Secure Cyberspace," set for release early next year, according to several people who have been briefed on the report. It is a component of the effort to increase national security after the Sept. 11 attacks. The President's Critical Infrastructure Protection Board is preparing the report, and it is intended to create public and private cooperation to regulate and defend the national computer networks, not only from everyday hazards like viruses but also from terrorist attack. Ultimately the report is intended to provide an Internet strategy for the new Department of Homeland Security. Such a proposal, which would be subject to Congressional and regulatory approval, would be a technical challenge because the Internet has thousands of independent service providers, from garage operations to giant corporations like American Online, AT&T, Microsoft and Worldcom. The report does not detail specific operational requirements, locations for the centralized system or costs, people who were briefed on the document said. While the proposal is meant to gauge the overall state of the worldwide network, some officials of Internet companies who have been briefed on the proposal say they worry that such a system could be used to cross the indistinct border between broad monitoring and wiretap. Stewart Baker, a Washington lawyer who represents some of the nation's largest Internet providers, said, "Internet service providers are concerned about the privacy implications of this as well as liability," since providing access tolive feeds of network activity could be interpreted as a wiretap or as the "pen register" and "trap and trace" systems used on phones without a judicial order. Mr. Baker said the issue would need to be resolved before the proposal could move forward. Tiffany Olson, the deputy chief of staff for the President's Critical Infrastructure Protection Board, said yesterday that the proposal, which includes a national network operations center, was still in flux. She said the proposed methods did not necessarily require gathering data that would allow monitoring at an individual user level. But the need for a large-scale operations center is real, Ms. Olson said, because Internet service providers and security companies and other online companies only have a view of the part of the Internet that is under their control. "We don't have anybody that is able to look at the entire picture," she said. "When something is happening, we don't know it's happening until it's too late." The government report was first released in draft form in September, and described the monitoring center, but it suggested it would likely be controlled by industry. The current draft sets the stage for the government to have a leadership role. The new proposal is labeled in the report as an "early-warning center" that the board says is required to offer early detection of Internet-based attacks as well as defense against viruses and worms. But Internet service providers argue that its data-monitoring functions could be used to track the activities of individuals using the network. An official with a major data services company who has been briefed on several aspects of the government's plans said it was hard to see how such capabilities could be provided to government without the potential for real-time monitoring, even of individuals. "Part of monitoring the Internet and doing real-time analysis is to be able to track incidents while they are occurring," the official said. The official compared the system to Carnivore, theInternet wiretap system used by the F.B.I., saying: "Am I analogizing this to Carnivore? Absolutely. But in fact, it's 10 times worse. Carnivore was working on much smaller feeds and could not scale. This is looking at the whole Internet." One former federal Internet security official cautioned against drawing conclusions from the information that is available so far about the Securing Cyberspace report's conclusions. Michael Vatis, the founding director of the National Critical Infrastructure Protection Center and now the director of the Institute for Security Technology Studies at Dartmouth, said it was common for proposals to be cast in the worst possible light before anything is actually known about the technology that will be used or the legal framework within which it will function. "You get a firestorm created before anybody knows what, concretely, is being proposed," Mr. Vatis said. A technology that is deployed without the proper legal controls "could be used to violate privacy," he said, and should be considered carefully. But at the other end of the spectrum of reaction, Mr. Vatis warned, "You end up without technology that could be very useful to combat terrorism, information warfare or some other harmful act." . The Trump administration's plan for overseeing social media companies ignites debates surrounding data protection and user confidentiality.. Internet Monitoring,Cybersecurity Strategy,Data Privacy,National Security,Government Proposal. . Anthony Pell

Calendar%202 Dec 20, 2002 User Avatar Anthony Pell Government
81

Federal Court Ruling Grants Broad Police Surveillance Authority

A secretive federal court on Monday granted police broad authority to monitor Internet usage, record keystrokes and employ other surveillance methods against terror and espionage suspects. In an unexpected and near-complete victory for law enforcement. . .. A secretive federal court on Monday granted police broad authority to monitor Internet usage, record keystrokes and employ other surveillance methods against terror and espionage suspects. In an unexpected and near-complete victory for law enforcement , the Foreign Intelligence Surveillance Court of Review overturned a lower court's decision and said that Attorney General John Ashcroft's request for new powers was reasonable. The 56-page ruling removes procedural barriers for federal agents conducting surveillance under the 1978 Foreign Intelligence Surveillance Act (FISA). The law, enacted as part of post-Watergate reforms, permits sweeping electronic surveillance, telephone eavesdropping and surreptitious searches of residences and offices. At a press conference Monday afternoon, Ashcroft applauded the ruling, characterizing it as a "victory for liberty, safety and the security of the American people." Ashcroft said the ruling marks a new era of collaboration between police and intelligence agencies such as the CIA and the National Security Agency. "This decision allows law enforcement officials to learn from intelligence officials, and vice versa, as a means of sort of allowing the information to flow from one community to another," Ashcroft said. "This will greatly enhance our ability to put pieces together that different agencies have. I believe this is a giant step forward." The lower court, called the Foreign Intelligence Surveillance Court, had said there must be a well-defined wall separating domestic police agencies from spy agencies. It accused the FBI of submitting incorrect information under oath in more than 75 cases, including one signed by then-FBI Director Louis Freeh. The lower court's decision, written in May, went sofar as to say that changes to the Justice Department's procedures were necessary "to protect the privacy of Americans in these highly intrusive surveillances and searches." Justice Department lawyers argued that the USA Patriot Act, signed by President George W. Bush last fall, made any such wall obsolete and unnecessary. The Patriot Act also changed the requirements for FISA surveillance, saying that espionage or terrorist acts did not have to be the primary purpose of the investigation but only a "significant purpose." The review court agreed with Ashcroft, even suggesting that greater use of FISA surveillance conceivably could have thwarted the Sept. 11 terrorist attacks. It ruled that Ashcroft's proposed procedures, "if they do not meet the minimum Fourth Amendment warrant requirements, certainly come close." Civil libertarians said they were alarmed by the ruling, the public version of which was censored for security reasons. The American Civil Liberties Union and the National Association of Criminal Defense Lawyers had filed friend-of-the-court briefs urging the appeals court to uphold the lower court's decision. Robert Levy, a senior fellow at the Cato Institute said: "Because the FISA now applies to ordinary criminal matters if they are dressed up as national security inquiries, the new rules could open the door to circumvention of the Fourth Amendment's warrant requirements. The result: rubber-stamp judicial consent to phone and Internet surveillance, even in regular criminal cases, and FBI access to medical, educational and other business records that conceivably relate to foreign intelligence probes." The link for this article located at News.com is no longer available. . Federal court ruling allows police to monitor Internet usage and employ surveillance methods against suspects in espionage and terrorism cases.. police authority, surveillance powers, cybersecurity. . LinuxSecurity.com Team

Calendar%202 Nov 19, 2002 User Avatar LinuxSecurity.com Team Privacy
82

Censorship and Internet Monitoring in China: A Deep Dive

While the Great Wall no longer deters would-be invaders from entering China, experts meeting in Washington on Monday said the Chinese government continues to maintain a nearly rock-solid cyberwall. At a panel discussion held by the Congressional-Executive Commission on China, . . . . While the Great Wall no longer deters would-be invaders from entering China, experts meeting in Washington on Monday said the Chinese government continues to maintain a nearly rock-solid cyberwall. At a panel discussion held by the Congressional-Executive Commission on China, experts warned that China has recently improved its censorship technology -- much of which is provided by U.S. companies. The panel also claimed that China now employs some 30,000 "Internet police" to monitor its citizens, and that is has increased arrests of dissidents and journalists posting illegal content on the Internet. The link for this article located at Wired.com is no longer available. . While the Great Wall no longer deters would-be invaders from entering China, experts meeting in Wash. while, great, longer, deters, would-be, invaders, entering, china, experts, meeting. . Anthony Pell

Calendar%202 Nov 06, 2002 User Avatar Anthony Pell Government
82

Global Early Warning System Initiative: Cyberattack Detection Overview

The National Communications System is in the early stages of a Global Early Warning Information System (GEWIS) pilot project in which government and industry will examine the health and topology of the Internet. . .. The National Communications System is in the early stages of a Global Early Warning Information System (GEWIS) pilot project in which government and industry will examine the health and topology of the Internet . The pilot project will assess how well critical areas of the Internet are performing worldwide, and then use that data to notify government, industry or U.S. allies of an impending cyberattack or possible disturbance, said Brenton Greene, deputy manager of NCS. Those indicators will include looking at the performance of selected government and industry e-commerce sites, as well as tools to identify and detect worms or denial of service attacks, he said, adding that the pilot project (also called the Global Cyber Early Warning Information System) will not be ready for launch until next year. The link for this article located at FCW is no longer available. . The International Cyber Defense Agency is set to initiate a Worldwide Threat Detection Framework for online safety.. Global Early Warning Information System, Cyberattack Detection, Internet Monitoring. . Anthony Pell

Calendar%202 Sep 27, 2002 User Avatar Anthony Pell Government
81

Increased Surveillance Under Antiterror Law Threatens Privacy Rights

In the seven months since the passage of a sweeping law to combat terrorism, Internet and telecommunications companies have seen a surge in law enforcement requests to snoop on subscribers. Privacy advocates fear that expanded police power under the Patriot . . . . In the seven months since the passage of a sweeping law to combat terrorism, Internet and telecommunications companies have seen a surge in law enforcement requests to snoop on subscribers. Privacy advocates fear that expanded police power under the Patriot Act -- combined with lax oversight and increased cooperation between the government and private sector phone network and Internet gatekeepers -- may be stomping on civil liberties. The new laws do not apply just to terrorism but to other crimes as well. "The trend up to September 11 was for more privacy protection, greater procedural safeguards, more sunshine on the process and more notice," said Al Gidari, a Seattle privacy lawyer who represents Internet and telecoms companies. "I now see all those things tied up in a box with a little bow on them and forgotten about in the corner," he said. Law enforcers say they need stepped-up electronic surveillance to keep up with sophisticated criminals, stressing that such efforts are targeted -- they're not trolling every server for e-mails mentioning Osama bin Laden. The link for this article located at CNN is no longer available. . New legislation heightens demands for monitoring, prompting alarm about individual rights and freedoms in the context of counterterrorism initiatives.. Surveillance Requests, Privacy Rights, Antiterror Legislation, Internet Privacy, Law Enforcement Issues. . LinuxSecurity.com Team

Calendar%202 May 28, 2002 User Avatar LinuxSecurity.com Team Privacy
82

Bush Legislation Increases Telecom Powers And Raises Privacy Issues

President Bush signed legislation Friday that expands the ability to tap telephones and track Internet usage in the hunt for terrorists, new powers that drew praise from law enforcement officials and concern from civil libertarians. The bill, known as the USA . . . . President Bush signed legislation Friday that expands the ability to tap telephones and track Internet usage in the hunt for terrorists, new powers that drew praise from law enforcement officials and concern from civil libertarians. The bill, known as the USA Patriot Act, gives federal authorities much wider latitude in monitoring Internet usage and expands the way such data is shared among different agencies. "Today, we take an essential step in defeating terrorism while protecting the constitutional rights of all Americans," Bush said during a signing ceremony. The House of Representatives passed the bill by a vote of 357-66 on Wednesday, and the Senate on Thursday approved the measure 98-1. Attorney General John Ashcroft vowed Thursday to use the new powers to track down suspected terrorists relentlessly. The link for this article located at News.com is no longer available. . The administration's new policy enhances surveillance capabilities, raising alarms for privacy defenders.. Telecommunication Powers, Civil Liberties, Data Monitoring, Internet Tracking. . Anthony Pell

Calendar%202 Oct 26, 2001 User Avatar Anthony Pell Government
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200