This week, perhaps the most interesting articles include "PHP encryption for the common man," "," and "After An Exploit: Mitigation and Remediation."


CRYPTOCard Two-Factor Authentication Are you a Linux consultant with expertise in network security? Join CRYPTOCard's Linux Consultants program and learn about how you can help your clients implement secure authentication solutions. Click here for more information


LinuxSecurity.com Feature Extras:

EnGarde Secure Linux v3.0.7 Now Available - Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.7 (Version 3.0, Release 7). This release includes several bug fixes and feature enhancements to the Guardian Digital WebTool and the SELinux policy, several updated packages, and several new packages available for installation.

pgp Key Signing Observations: Overlooked Social and Technical Considerations - While there are several sources of technical information on using pgp in general, and key signing in particular, this article emphasizes social aspects of key signing that are too often ignored, misleading or incorrect in the technical literature. There are also technical issues pointed out where I believe other documentation to be lacking. It is important to acknowledge and address social aspects in a system such as pgp, because the weakest link in the system is the human that is using it. The algorithms, protocols and applications used as part of a pgp system are relatively difficult to compromise or 'break', but the human user can often be easily fooled. Since the human is the weak link in this chain, attention must be paid to actions and decisions of that human; users must be aware of the pitfalls and know how to avoid them.

Bulletproof Virus Protection - Protect your network from costly security breaches with Guardian Digital’s multi-faceted security applications. More then just an email firewall, on demand and scheduled scanning detects and disinfects viruses found on the network. Click to find out more!

Take advantage of our Linux Security discussion list! This mailing list is for general security-related questions and comments. To subscribe send an e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it. with "subscribe" as the subject.

Earn an NSA recognized IA Masters Online - The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

Security on your mind?

Protect your home and business networks with the free, community version of EnGarde Secure Linux. Don't rely only on a firewall to protect your network, because firewalls can be bypassed. EnGarde Secure Linux is a security-focused Linux distribution made to protect your users and their data.

Guardian Digital Makes Email Safe For Business - Microsoft 365, Goo....

Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headline.


Domain Name Kiting
25th, July, 2006

"Domain Kiting", a fairly new term coined by GoDaddy.com CEO, Bob Parsons, refers to an outrageous practice, whereby few Registrars take advantage of AGP (Add Grace Period) provision in ICANN (Internet Corporation For Assigned Names and Numbers) rules, to monetize from and block thousands of domain names, without actually paying for them in long run.

75% of all phishing emails target PayPal and eBay users
27th, July, 2006

IT security firm Sophos has revealed that over 75 percent of all phishing emails are targeting users of PayPal or eBay. Typically these phishing emails point recipients to a bogus website which looks like the real PayPal or eBay site, but is actually designed to steal usernames and passwords.

Does (password) size matter?
24th, July, 2006

Does size matter? The question has arisen lately on Security-Basics, a computer security mailing list hosted by SecurityFocus.com. As usual, the question comes down to physical size or mental prowess.

news/cryptography/does-password-size-matter
PHP encryption for the common man
25th, July, 2006

In this increasingly virtual online world, you have to be careful to protect your data. Learn the basics of encoding and encrypting important bits of information, such as passwords, credit card numbers, and even entire messages. Get an overview of what it means to encrypt and decrypt information, as well as some practical examples involving passwords and other data, using PHP's built-in functionality.

news/cryptography/php-encryption-for-the-common-man
The insecure pleasures of wi-fi
22nd, July, 2006

Today I was travelling in the Netherlands by train. One of the great things is that major stations have their own wi-fi access. When we stopped at a station, as usual I wanted to check my emails while waiting for the train to move on. Once I established a connection with the access point and opened my web browser to log on I immediately noticed something suspicious. Instead of getting an HTTPS site I was being directed to an HTTP site.

Fake Version of Google hides Trojan horse
25th, July, 2006

Bot-herders have set up an exact copy of the download page for Google