Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 6 articles for you...
82
security techniquecryptographic methodsoftware obfuscationExploring Software Obfuscation Techniques For Stronger Security
Given enough computer power, desire, brains and some luck, the security of most systems can be broken. But there are cryptographic and algorithmic security techniques, ideas and concepts out there that add a level of algorithmic mystification that could be built into programs that would make them close to unbreakable. . That. That. given, enough, computer, power, desire, brains, security, systems, broke. . Dave Wreski
Oct 07, 2014
•
Government
79
security techniquelock pickingDIY toolCreate Your Own Lock Picking Tools Easily Using Paperclips and Creativity
Lockpicking has become a trademark skill of hackers all across the world, and is regularly taught at hackerspaces and maker faires. But a lot of the time, the sets have already been made or bought online somewhere. However, [Sean] has demonstrated how to create a lock picking set with ordinary paperclips in the video embedded at the end of this post. . Wikihow also has these awesome instructions on how to build them. What The link for this article located at Hack A Day is no longer available. . Wikihow also has these awesome instructions on how to build them. WhatThe link for this article loca. lockpicking, become, trademark, skill, hackers, across, world, regularly, taught. . LinuxSecurity.com Team
Aug 18, 2014
•
Security Projects
83
cookie theftsecurity techniquehttpOnly cookieUnderstanding HttpOnly Cookies and XST Attack Security Techniques
Update: Jordan and Wladimir Palant noticed it right away! (Wladimir) "Wait, last time I checked Java wasn. Back in late 2002 Microsoft implemented the httpOnly cookie flag in Internet Explorer as a way to prevent XSS cookie theft by denying JavaScript from reading document.cookie. A couple of months later I authored a paper describing an attack I called Cross-Site Tracing (XST), or XSS++ if you prefer, as a bypass httpOnly (plus added some other good stuff). XST works by taking control of a victims web browser and forcing it to send an HTTP TRACE (method) to the target web server, typically via XmlHTTPRequest (XHR). Web servers supporting TRACE respond by placing the all data received in the HTTP request (request line, headers, post data) into the response body. Here The link for this article located at Jeremiah Grossman is no longer available. . The evolution of the httpOnly cookie flag marked a key development in web security, designed to protect sensitive cookie data from client-side scripts. HttpOnly Cookie,XST Attack,Cross-Site Tracing,Cookie Theft Attack,Web Security Techniques. . LinuxSecurity.com Team
May 01, 2007
•
Hacks/Cracks
67
data integritycryptographysecurity techniqueExploring Modern Security for Hash Algorithm Weaknesses
Hashing has long been used as a means to verify data elements. Parity bits were originally used to confirm that a data transmission was received correctly and helped to detect any single-bit errors. However, parity didn. In comes hashing as we know it today. The modern hashing algorithms are designed to help verify the integrity of a data element. Yet, as our needs to verify file contents and data transmissions evolve, we continually realize that better solutions and algorithms are needed. Better hashing algorithms are constantly in the works. However, as the past would indicate, cryptographers and hackers alike continue to find issues with each successive algorithm that is released. As one algorithm is broken, another is developed The link for this article located at Info Sec Writers is no longer available. . In comes hashing as we know it today. The modern hashing algorithms are designed to help verify the . hashing, means, verify, elements, parity, originally. . LinuxSecurity.com Team
Aug 07, 2006
•
Cryptography
74
VoIPdata encryptionnet neutralityDan Kaminsky Unveils Net Neutrality Technique for VoIP Communication
A Seattle-based security researcher has devised a way to test for Net neutrality. . Dan Kaminsky will share details of this technique, which will eventually be rolled into a free software tool, on Wednesday at the Black Hat USA security conference in Las Vegas. The software can tell if computers are treating some types of TCP/IP traffic better than others -- dropping data that is being used in VoIP (Voice over Internet Protocol) calls, for example, or treating encrypted data as second class. The link for this article located at ComputerWorld is no longer available. . Maria Gonzalez unveils an innovative security assessment method at DEF CON, influencing cloud computing and secure communications protocols.. Net Neutrality Testing, VoIP Traffic, TCP/IP Analysis. . Brittany Day
Aug 02, 2006
•
Network Security
67
digital securitysecurity techniquepublic key cryptographyExploring RSA Encryption: Techniques for Secure Communication
In contrast to the cooperative preparations required for setting up private key encryption, such as secret-sharing and close coordination between sender and receiver, you can act entirely on your own to create and publish two numbers that enable anyone, using the . . . . In contrast to the cooperative preparations required for setting up private key encryption, such as secret-sharing and close coordination between sender and receiver, you can act entirely on your own to create and publish two numbers that enable anyone, using the RSA encryption formula, to send a private message to you through a public channel. The message becomes "First Class" e-mail, so to speak, as if sealed in an envelope. Using the two numbers you have published, anyone can scramble a message and send it to you. You are the only one who can unscramble it--not even the sender of the message can decrypt the ciphertext. To set up RSA encryption, the main thing you need is a table of prime numbers. Begin by selecting two prime numbers at random. When the rsakeys.bc program asks for p and q, give it the two primes you selected. Of course, any numbers can be used for practice. Primes, especially large primes, make it more difficult for an eavesdropper to decrypt your message. The link for this article located at LinuxJournal is no longer available. . In contrast to the cooperative preparations required for setting up private key encryption, such as . contrast, cooperative, preparations, required, setting, private, encryption. . LinuxSecurity.com Team
Mar 06, 2003
•
Cryptography
67
cryptographysecurity techniquepower analysisInnovative Security Techniques by Paul Kocher on Crypto Bypass Methods
In 1998 cryptographer Paul Kocher developed a method for deducing the secret key embedded in a cryptographic smart card by monitoring tiny fluctuations in power consumption. Three years earlier, at the tender age of 22, he made headlines with a technique to compromise implementations of the RSA algorithm -. . .. In 1998 cryptographer Paul Kocher developed a method for deducing the secret key embedded in a cryptographic smart card by monitoring tiny fluctuations in power consumption. Three years earlier, at the tender age of 22, he made headlines with a technique to compromise implementations of the RSA algorithm - - not with a direct frontal assault, but by watching the amount of time a system took to perform certain functions. Speaking at the Usenix security conference in San Francisco Thursday, Kocher, now president of Cryptography Research, Inc., said creative attacks like these are only becoming more successful as hardware and software solutions grow increasingly complex and difficult to debug. "Nobody breaks the crypto, they all bypass the crypto," says Kocher. "They are putting bigger crypto keys in there and it doesn't give you bigger security." The link for this article located at SecurityFocus is no longer available. . In 1998 cryptographer Paul Kocher developed a method for deducing the secret key embedded in a crypt. cryptographer, kocher, developed, method, deducing, secret, embedded, crypt. . LinuxSecurity.com Team
Aug 09, 2002
•
Cryptography
83
intrusion detectioncyber threatsecurity techniqueCloaked Code Technique Emerges as New Threat to Corporate Networks
A new technique for disguising programs aimed at cracking corporate networks could raise the stakes in the heated battle between hackers and security experts. During a seminar last week at the CanSecWest conference in Vancouver, British Columbia, a hacker named "K2" . . . . A new technique for disguising programs aimed at cracking corporate networks could raise the stakes in the heated battle between hackers and security experts. During a seminar last week at the CanSecWest conference in Vancouver, British Columbia, a hacker named "K2" revealed a program he created that can camouflage the tiny programs that hackers generally use to crack through system security. The cloaking technique is aimed at foiling the pattern-recognition intelligence used by many intrusion detection systems, or IDSes, known as the burglar alarms of the Internet. "Trust me, this will blow away any pattern matching," said K2, who would not reveal his real name because he also works as a security consultant. When a security hole is found on a corporate network, hackers usually will find several ways to exploit it. To manage the onslaught, the makers of intrusion-detection systems continually update their own software to keep track of new variants of an already familiar theme. The link for this article located at ZDNet is no longer available. . Unveil a novel strategy for camouflaging applications designed to infiltrate business systems and its potential ramifications.. Cloaking Techniques, Corporate Cybersecurity, Cyber Threats. . LinuxSecurity.com Team
Apr 02, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!