The latest Kabuntu laptop marries security-first hardware with its Linux-based operating system. Here are three features in particular that stand out. . Kubuntu Focus focuses on laptops that run the Kubuntu operating system. For those that aren't aware, Kubuntu is an official spin of Ubuntu that uses the KDE Plasma desktop in place of GNOME. KDE Plasma offers many of the same elements most users are accustomed to (panel, system tray, desktop menu, clickable desktop icons, etc). It's similar to the Windows desktop UI, only with more flexibility and customization. And given how elegant KDE Plasma is, one would expect a laptop to power that desktop to be equally so. What Kubuntu Focus is set to offer is exactly that. . The Pop!_OS Ultra highlights a machine tailored for GNOME, prioritizing stability and exceptional efficiency as its foundation.. Kubuntu Laptop, KDE Plasma, Linux Hardware, Security Features. . Brittany Day
If he has his way, Meinrath. He and a team of software engineers are developing open-source software to turn cheap wireless access points and Android smartphones into nodes on the network, which could then be used by dissidents to evade censorship and to spread low-cost connections everywhere around the world. Proponents of the plan include the U.S. State Department, which has given Meinrath a $2 million grant to develop the code. The link for this article located at Wired is no longer available. . Creating collaborative software solutions that leverage affordable technology to enhance worldwide connectivity, empowering activists to fight against suppression.. Open Source Technology, Global Connectivity, Censorship Evading Software. . LinuxSecurity.com Team
Has anyone used this yet, or have a review of how well it performs in the real world? Satisfied that its security underpinnings are solid, Google has promoted its open-source Native Client technology to accelerate Web applications out of its research phase and is taking steps to build it into the Chrome Web browser. "Based on our experience to date, we believe that the basic architecture of our system is sound and the implementation is supportable. So now we are undertaking a number of tasks to transition Native Client from a research technology to a development platform," said Brad Chen, Google's Native Client engineering manager, in a mailing list announcement Wednesday. . Native Client, called NaCl for short, is a mechanism to run software downloaded over the Web directly on x86 processors such as Intel's Core line. The key motivation is to attain the speed of regular "native" software installed on a computer rather than the much slower JavaScript environment that sophisticated Web sites use today. It's one part of Google's broad effort to evolve the Web from a collection of relatively static sites into foundation for more powerful applications. Executing native code from the Web is easy--until you start trying to worry about security risks. To this end, Native Client examines software before it runs to block software that takes a variety of prohibited actions, an idea called static analysis, and it runs the software in a protected sandbox. The link for this article located at CNET / Webware is no longer available. . Native Client, often referred to as NaCl, enables execution of web applications natively, boosting efficiency without compromising safety.. Native Client, Open Source Technology, Web Application Performance, Software Security, NaCl Performance. . LinuxSecurity.com Team
It's catching on slower than expected, but more companies are signing up In February, 2003, electronics giant Motorola Inc. (MOT ) stunned the mobile-phone business with a bold change of course. During the industry's annual shindig in Cannes, the Schaumberg (Ill.) company announced the world's first handset built around the Linux operating system and unveiled plans to use the populist software in consumer phones from then on. . . .. It's catching on slower than expected, but more companies are signing up In February, 2003, electronics giant Motorola Inc. (MOT ) stunned the mobile-phone business with a bold change of course. During the industry's annual shindig in Cannes, the Schaumberg (Ill.) company announced the world's first handset built around the Linux operating system and unveiled plans to use the populist software in consumer phones from then on. Pundits saw this as a slap at Symbian Ltd., the London software consortium Motorola co-founded five years earlier with Nokia Corp. (NOK ) and Ericsson to develop software for feature-rich smart phones. It was also a major lift for Linux, the grassroots operating system that until then was used mainly on servers. The link for this article located at BusinessWeek is no longer available. . It's catching on slower than expected, but more companies are signing upIn February, 2003, electroni. catching, slower, expected, companies, signing, february, electroni. . LinuxSecurity.com Team
What happens when journalists find themselves reporting the legal and personal risks associated with Microsoft's Passport can be easily avoided by adopting better technology from the open-source world? The normal legal standard for judging the adequacy of professional services -- such . . . . What happens when journalists find themselves reporting the legal and personal risks associated with Microsoft's Passport can be easily avoided by adopting better technology from the open-source world? The normal legal standard for judging the adequacy of professional services -- such as those involved in setting up an e-commerce site -- is consistency with the "best" or industry-wide practices. What does the mainstream press do when that standard is largely set by the 66 percent of Web administrators who use Apache and open source? I don't know, but I think we're about to find out courtesy of Plan 9's pending victory over the X-files in the matter of single sign-ons and network authentication. These keys are related via a hypothetical mathematical construct known as a one-way function. In these, the computational cost of creating two keys is trivial but the computational cost of finding the second key from knowledge of the first is thought to be very high. Thus a PKI user can publish one key while keeping the other secret, thereby creating a situation in which the ability to decrypt something with the public key asserts that it was encrypted with the private key and, by extension, can only be the work of the only holder of that private key. This therefore ensures that the sender cannot repudiate the encrypted data and so amounts to a digital signature. One of the most interesting things about this specification is its use of SAML (Security Assertion Markup language) to define and control the messaging structures used in an actual implementation of the specification. Full details, including protocols and the SAML schemas needed, are available at https://www.projectliberty.org/ but, basically, the liberty specificationhandles authorization in a three-stage process with all communications structured via SAML and flowing through the user's browser or other software agent. The link for this article located at LinuxWorld is no longer available. . Investigating strategies for reporters to reduce vulnerabilities when using Apache and Plan 9 in contrast to the security frameworks of Microsoft’s Passport system.. Open Source Technology, Digital Signature, Single Sign-On, Apache, Network Risks. . LinuxSecurity.com Team
A Columbia company that invented what it calls the world's most widely deployed technology to detect computer hackers announced yesterday that it received $7.6 million in venture capital to develop and market a commercial version of its product. Sourcefire, a 30-employee, privately held company, uses Snort, a detection technology developed by the company's founder, Martin Roesch.. . .. A Columbia company that invented what it calls the world's most widely deployed technology to detect computer hackers announced yesterday that it received $7.6 million in venture capital to develop and market a commercial version of its product. Sourcefire, a 30-employee, privately held company, uses Snort, a detection technology developed by the company's founder, Martin Roesch. Even before the Sept. 11 terrorist attacks, network security was a major concern, exacerbated by outbreaks of computer viruses. Microsoft Corp.'s biggest software launch last year, that of its Internet-based XP product, was undercut by accounts that it allowed intruders into computer files through the Web. Unlike data security systems developed by a corporate team of engineers, Snort is an open system, available for free via the Internet. Its Web site continually receives feedback on patterns of abuse or peculiarities in network traffic. Tens of thousands of technicians use the system and offer input. The link for this article located at Sunspot is no longer available. . CyberGuard secures $8.2 million funding to advance its Intrusion Prevention System against cyber threats.. Sourcefire, Snort, Hacker Detection, Network Security, Start-Up Funding. . LinuxSecurity.com Team
DivX has been touted by some as the technology that could do for video online what MP3 did for music. The technology itself doesn't allow hackers to break through the anti-copying protections on DVDs. But used in conjunction with technologies that . . . . DivX has been touted by some as the technology that could do for video online what MP3 did for music. The technology itself doesn't allow hackers to break through the anti-copying protections on DVDs. But used in conjunction with technologies that do facilitate this, DivX allows full movies to be transmitted relatively quickly online and stored on a single CD. The compressed files retain the quality of a good VCR picture or better. The DivX code is based on the MPEG-4 video standard, a successor to the technology that gave the world the popular MP3 audio format. Several companies, including Microsoft, have created their own versions of MPEG-4 technologies. The link for this article located at ZDNet is no longer available. . DivX intends to transform digital video distribution, much like MP3 changed the music landscape, providing rapid and seamless streaming capabilities.. DivX Technology, Streaming Solutions, Open Source Video, MPEG-4 Improvements. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.