Linux Network Security - Page 86

Discover Network Security News

The Death of Unencrypted Connections?

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Over the last few years "hacker" tools have become much more widespread and available to malicious attackers. Combine this with the ease of getting operating systems - almost anything a corporation has short of a mainframe OS you can download . . .

Anthony Pell
Jun 14, 2000

Estrin Startup to Address Infrastructure Concerns

Judy Estrin thinks it would be easier to battle chonic Internet problems like traffic congestion and virus attacks if the companies working to solve them were free of such pressing concerns as quarterly profits or initial stock offerings. Issues such . . .

Anthony Pell
Jun 14, 2000

Bleak Picture For Internet Security

When it comes to security in the Internet age, the picture is not too pretty. That was the message Bruce Schneier, founder and chief technology officer of Counterpane Internet Security Inc., gave during a session Monday at NetSec2000 conference, held . . .

Anthony Pell
Jun 13, 2000

An Overview of TCP and IP Spoofing

To understand the spoofing process, I will begin by explaining the TCP and IP authentication process. Then I will discuss how an attacker can spoof your network.

Anthony Pell
Jun 12, 2000

Linux 101: Basic network security

Here is a nice little that can help you get started in security. "Linux security can be as simple or as advanced as you want. A Linux system can be locked down (relatively speaking) with a simple one-two punch of . . .

Anthony Pell
Jun 08, 2000

NSI's Webjacking Epidemic

Last weekend, a thief armed with nothing more than a fax machine and a piece of paper made off with the whole enterprise. "It appears some forged documents were sent via fax to Network Solutions indicating that the domains should be transferred to someone in Canada," Meckler said.

Anthony Pell
Jun 08, 2000

Is Linux a net security risk?

A SANS Institute of America report has named Linux and Unix operated sites as more vulnerable to internet attacks than Windows and Mac powered sites. Compiled by US industry, government, and academics, the June 1 paper, titled How to Eliminate the Ten Most Critical Internet Security Threats: The Experts' Consensus, names versions of Unix and Linux systems in nine out of a "top ten" list of security vulnerabilities for operating systems that engineers "need to eliminate". Dean Stockwell, director of sales and support, Network Associates Asia-Pacific, dismissed SANS's report as "skewed".

Anthony Pell
Jun 07, 2000

Security Firm to List Additional Threats

The threats listed in the document are just the "tip on the iceberg," Nowland said, warning network administrators not to feel safe simply because they address the 10 concerns outlined by SANS. NETSEC intends next week to release its . . .

Anthony Pell
Jun 06, 2000

Crackers use search engines to exploit weak sites

"... With a bit of ingenuity, anyone can skirt basic password authentication and go straight to the goodies on those sites where administrators are foolish enough to post them. If the desired information is contained in a Web page, anyone . . .

Anthony Pell
Jun 05, 2000

Hacking Away at Government

"In the race to get online, network security has been something of an afterthought. But even the most obscure agency can be a target for Internet intruders. .. According to records on Web site defacements kept by attrition.org, a hacking . . .

Anthony Pell
Jun 05, 2000

IT, Company Execs Add To Security Holes

The SANS threat list has become the focus this week. "The majority of successful attacks on computer systems via the Internet can be traced to exploitation of one of a small number of security flaws, SANS said. Most . . .

Anthony Pell
Jun 02, 2000

Hackers' favorite security holes revealed

More on the recent SANS report. ""Many of the vulnerabilities on that list are well-known vulnerabilities that everyone knows about," said Sean Hernan, team leader for vulnerability handling at the Computer Emergency Response Team (CERT) Coordination Center at Carnegie . . .

Anthony Pell
Jun 02, 2000

Allegro-Software-RomPager 2.10 vulnerable to Dos Attack

Here is a pretty serious DoS advisory released on Bugtraq. I am not aware of any fixes, yet. We'll keep you posted! "Allegro-Software-RomPager is an http server which is used in network hardware like switches to provide a . . .

Anthony Pell
Jun 02, 2000

TACACS+ Analysis

TACACS+ is a protocol used to provide access control for routers and network devices created by Cisco. Solar found a buffer overflow and reported it and supplied a patch in the report below. Cisco later responded to . . .

Anthony Pell
Jun 01, 2000

Nmap 2.53 Released

The latest version of nmap, a utility for port scanning networks, has been released. This tool should be in everyone's security arsenal. "The main addition is IP Protocol scan mode (-sO) which tells you what protocols the host . . .

Anthony Pell
May 31, 2000

The Shell Game

This article explains the need and rationale for Secure SHell, an encrypted communications channel which functions as a telnet replacement, and also guides you through the process of installing and using SSH on your own system. . . .

Anthony Pell
May 31, 2000

Access denied: Government taking information off the web

When it emerged less than a decade ago, the World Wide Web was quickly embraced as a bright new medium that could help reinvent government and revitalize democracy. But gradually government policy-makers have also seen that the Web has a . . .

Anthony Pell
May 31, 2000

Spring cleaning tips for managers

If your agency deals in classified or sensitive information, you probably wage an ongoing war against Internet hackers. The danger isn’t so much from hackers’ creativity as much as it’s due to managers’ failures to seal security holes, establish policies . . .

Anthony Pell
May 30, 2000

popa3d v0.4 contributed Kerberos v4 and APOP authentication patches

Dug Song has contributed Kerberos v4 (KPOP) and APOP authentication patches for popa3d v0.4. I've mirrored them into popa3d/contrib on the FTP and added links to the popa3d page at the usual location: . . .

Anthony Pell
May 30, 2000

IPv6 wins support as third-generation multimedia protocol

"... The proposal, which paves the way to make IPv6 the standard protocol in third-generation mobile multimedia networks, was accepted this week in a plenary session of the system architecture group of the 3GPP (Third-Generation Partnership Project), Nokia said in . . .

Anthony Pell
May 29, 2000

Linux Network Security - Page 86

Harnessing Proxies for Enhanced Threat Intelligence: A Guide with Open Source Tools

Understanding HTTP Proxy Servers: A Vital Linux Network Security Tool

Exploring Vulnerability Scanners: Tools & Strategies for a Secure Network