Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
A research paper posted online warns of holes in the latest WiFi (or 802.11) wireless cryptography protocol and outlines how WiFi Protected Access (WPA) can be compromised using a traditional network assault known as a dictionary attack. The paper, written . . . . A research paper posted online warns of holes in the latest WiFi (or 802.11) wireless cryptography protocol and outlines how WiFi Protected Access (WPA) can be compromised using a traditional network assault known as a dictionary attack. The paper, written by TruSecure's ICSA Labs senior technical director Bob Moskowitz, who indicates WPA can be compromised by intruders using network sniffers, cautions against use of weak passwords that could allow attackers to gain unauthorized access. Moskowitz, who has worked extensively with standards-setting bodies on WiFi technology, told TechNewsWorld that the passphrase issue is an old one that had been discussed during development of the WPA standard. The link for this article located at TechNewsWorld is no longer available. . A research paper posted online warns of holes in the latest WiFi (or 802.11) wireless cryptography p. research, paper, posted, online, warns, holes, latest, wireless, cryptography. . Anthony Pell
With all the talk about zero day exploits and sometimes esoteric vulnerabilities its easy to lose sight of the role of older, less sophisticated techniques as a mainstay of cracker activity. . . .. With all the talk about zero day exploits and sometimes esoteric vulnerabilities its easy to lose sight of the role of older, less sophisticated techniques as a mainstay of cracker activity. During a hacking debate at InfoSecurity Europe yesterday, black hat hacker KP said that when he broke into a network he did so 90 per cent of the time through an unprotected modem, often through war dialling. War dialling involves systematically trying to locate the numbers associated with corporate modems through testing each extension of a corporate phone system in turn. "Intrusion detection systems are no real deterrent for me because I get in through the back door," he said. "Many networks are constructed like Baked Alaska - crunchy on the outside and soft in the middle." . With all the talk about zero day exploits and sometimes esoteric vulnerabilities its easy to lose si. about, exploits, sometimes, esoteric, vulnerabilities. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.