Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Have you heard that two years after promising to report all HTTP-based web pages as insecure, Mozilla is finally about to deliver? Soon, whenever you visit one of the shrinking number of sites that doesn’t use a security certificate, the Firefox browser will warn you. . Firefox 70 will ship in October. The change is an attempt to crack down on sites that don’t secure their communications. Insecure browsers use the hypertext transfer protocol (HTTP), which sends data in clear text. HTTPS sites are more secure because they use Transport Layer Security (TLS), which establishes an encrypted link between the browser and the Web server before any HTTP requests are sent. The link for this article located at Naked Security is no longer available. . Chrome 80 will implement stricter cookie policies, bolstering user privacy across the web.. Firefox Update, HTTPS Enforcement, Secure Communications, TLS Implementation. . Brittany Day
The Tor Project has launched the beta version of Tor Messenger, an easy-to-use encrypted message client for those concerned about their privacy and potential surveillance. . The Tor Project is a non-profit which runs the Tor network, a system of routes and servers designed to make online users more difficult to track online and disguise Internet activity, as well as access hidden areas of the Web hosted on .onion websites. One of the non-profit's projects is Tor Messenger. The client, now released to the general public, is based on Instantbird, a messaging app which allows users to connect to separate messenger systems. . The Tor Project is a non-profit which runs the Tor network, a system of routes and servers designed . project, launched, version, messenger, easy-to-use, encrypted, message. . LinuxSecurity.com Team
An open-source hardware project aimed at making the internet "a little bit safer" needs an influx of cash to continue its work.. The Cryptech effort was created following revelations from NSA whistleblower Edward Snowden that the US government and its pals are exploiting standards and weak crypto algorithms to gain access to citizens' private correspondence and documents. In response, a group of engineers decided there needed to be an open-source hardware engine that could provide strong and reliable encryption and decryption for email, plus public-private key cryptography for all sorts of things from digitally signing messages and files to DNSSEC. The link for this article located at The Register UK is no longer available. . The Cryptech effort was created following revelations from NSA whistleblower Edward Snowden that the. open-source, hardware, project, aimed, making, internet, little, safer', needs, influx. . LinuxSecurity.com Team
Privacy has been a red hot topic for the past couple of months -- ever since the whole PRISM story hit the news, or shall I say slammed into the news. Nobody likely denies the government the right to attempt to keep citizens safe. In fact, we expect this from it. . However the revelations made many uncomfortable thanks to the extremes that were being taken, and resulted in the conversation over whether Edward Snowden was a hero or enemy of the state. Since the news broke, speculation about the form of communication used between Snowden and writer Glenn Greenwald of The Guardian has been running around the internet, but today those rumors came to an end when Greenwald tweeted this: "Amazing: Lavabit -- the email service used by Snowden -- shuts down rather than comply with US orders". The link for this article located at Beta News is no longer available. . The closure of Lavabit's email platform ignites debate over state directives and individual privacy following Snowden's revelations.. Edward Snowden, Lavabit, Secure Email Services, Government Surveillance. . LinuxSecurity.com Team
DNS service provider OpenDNS has announced a preview release of a new open source tool to improve internet security: DNSCrypt encrypts all DNS traffic between a user's system and a DNS server. The tool is currently only available for the Mac, with a Windows version promised, and only works with OpenDNS's own DNS service.. Normally, DNS information is exchanged between client and server as plain text which makes it vulnerable to snooping or modification and man-in-the-middle attacks. By encrypting the exchange, OpenDNS hopes to make the "last mile" of DNS requests more secure. DNS Security Extensions (DNSSEC) makes the process more secure by adding authentication to DNS communications, but does not encrypt the actual exchanges. David Ulevitch, the CEO of OpenDNS, says that DNSCrypt is designed to address that shortcoming, noting that it's an implementation of the DNSCurve forwarder concept. The link for this article located at H Security is no longer available. . DNSCrypt secures DNS queries, fortifying defenses against prying eyes and threats, boosting online confidentiality.. DNSCrypt, DNS encryption, OpenDNS Security Tool, Internet Privacy Protection. . LinuxSecurity.com Team
gnoMint is a desktop application that lets you easily manage your own certificate authority (CA). Many secure communications technologies use digital certificates to ensure that the party or service they are connecting with is not an impostor. For many people, the main exposure to digital certificates comes when they visit an HTTPS Web site and see a certificate to validate that they have contacted the right Web server. Have you ever used gnMint? This program tries to help make managing your own certificates easier. Test it out and let use know what you think.. The link for this article located at LInux.com is no longer available. . Setting up a certificate authority (CA) with gnoMint can greatly improve communication security. Here’s a step-by-step guide for your CA establishment. GnoMint, Certificate Authority, Secure Communication, Digital Certificates. . Bill Locke
With security on the Internet, there's always some nagging doubt. Can you ever be absolutely certain, for example, that the e-mail you're sending with some confidential business information attached isn't going to be intercepted and read as it travels the digital highways and byways? Using the Internet for anything sensitive requires some faith that everything in place to ensure the security of the information you're working with. But uncertainty can be useful. For years, security researchers have been experimenting with harnessing one of the underlying rules of quantum physics, known as the Uncertainty Principle, which states that at the quantum level, where objects are infinitely small, it's impossible to measure electrons and photons and other similarly tiny particles without affecting them. How does quantum physics apply to the world of security? The idea is to harness this inherent uncertainty to create a data-encryption scheme that's essentially unbreakable. It's called quantum cryptography, and already some governments and private companies are using it to build absolutely secure lines for data and voice communications. The link for this article located at Business Week is no longer available. . But uncertainty can be useful. For years, security researchers have been experimenting with harnessi. security, internet, there's, always, nagging, doubt, absolutely, certain. . LinuxSecurity.com Team
Cryptography has been employed for keeping secrets since the time of Caesar. From the simplest ciphers of shifting letters, to mathematically provably secure ciphers of today, cryptography has progressed a long way. . It also has widened to a number of uses and capabilities to fit an ever growing number of applications. Cryptography makes it possible to keep data secure over an insecure network. It also makes it possible to keep private data on your computer safe from prying eyes. Even car thieves can be foiled by crypto systems in your remote unlock system. The link for this article located at Security Docs is no longer available. . Explore the extensive history of cryptography from ancient ciphers to modern encryption methods, ensuring secure communication in today's digital world. Data Security, Encryption Methods, Cryptography Evolution, Secure Communications. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.