Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Password guessing with Medusa 2.0 - Medusa was created by the fine folks at foofus.net, in fact the much awaited Medusa 2.0 update was released in February of 2010. For a complete change log please visit

Password guessing as an attack vector - Using password guessing as an attack vector. Over the years we've been taught a strong password must be long and complex to be considered secure. Some of us have taken that notion to heart and always ensure our passwords are strong. But some don't give a second thought to the complexity or length of our password.


How to devise passwords that drive hackers away (Nov 12)

Not long after I began writing about cybersecurity, I became a paranoid caricature of my former self. It's hard to maintain peace of mind when hackers remind me every day, all day, just how easy it is to steal my personal data.

Encryption, not restriction, is the key to safe cloud computing (Nov 12)

It's 11 p.m. Do you know where your data is? If your enterprise has transitioned to the cloud for data storage the answer almost certainly is "no." Portions of it might be in Malaysia; other bits in Antigua.

(Nov 14)

Two developers from Germany have releasedGerman language link Scotty, a lightweight open source web proxy that allows users to bypass content filtering by establishing a secure connection to the internet. The application is named after the fictional engineer from Star Trek because, according to the developers, it "beams data to your computer, no matter where you are".

(Nov 12)

Numbers are the language of business. Fortunately, security metrics are growing ever more sophisticated. Knowing what to measure, how to measure it and how to communicate those metrics can help improve security's efficiency, effectiveness and standing in the business world.

Origin Hacked, EA's Own Security Measures Used (Nov 14)

Are you one of the millions using EA's Origin digital platform service? If so, you might want to read what happened to these people so it doesn't happen to you/