Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Password guessing with Medusa 2.0 - Medusa was created by the fine folks at foofus.net, in fact the much awaited Medusa 2.0 update was released in February of 2010. For a complete change log please visit

Password guessing as an attack vector - Using password guessing as an attack vector. Over the years we've been taught a strong password must be long and complex to be considered secure. Some of us have taken that notion to heart and always ensure our passwords are strong. But some don't give a second thought to the complexity or length of our password.

Over 1 million user credentials compromised in Android Forums hack (Jul 13)

Phandroid, a popular Android news site, has confirmed that its Android Forums web site was compromised and that private user data has been accessed. According to Phandroid's notice about the security breach, the user table of Android Forum's database was accessed by unknown intruders using a known exploit, which has since been fixed.
(Jul 9)

Ubuntu daddy Mark Shuttleworth has defended Canonical's decision to play ball with Microsoft's Windows 8 security policy that could stop "unauthorised" Linux builds from booting on new PCs and tablets.
(Jul 9)

There's still no end in sight to the ongoing Secure Boot saga arising from Microsoft's Windows 8 plans, and just recently we've seen both Fedora Linux and Ubuntu Linux respond with two very different approaches to working around the problem.
F-Secure Warns of New Multi-Platform Web Exploit (Jul 11)

A Java applet determines whether the victim's machine is running Windows, Mac or Linux, then downloads the appropriate malware for the platform. Researchers at F-Secure have uncovered a new Web-based attack that installs backdoors on Windows, Linux and Mac OS X computers.
Yahoo's password hack shows that it failed security 101 (Jul 12)

As 450,000 passwords exposed, Yahoo fails security 101 -- If it wasn't clear before, it certainly is now: Your username and password are almost impossible to keep safe.
"God particle" hackers train Indian officials (Jul 11)

Two cyber security experts, who claimed to have cracked the security code of IT systems involved in the discovery of 'God Particle', Monday conducted training sessions for Indian government officials.
(Jul 11)

Hacker and Internet security guru Jeremiah Grossman thinks everyone should learn how to hack. Why? Because "every day, our country's innovation is being stolen, our national security jeopardized, and your most personal information is being robbed