Server Security - Page 9
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Nearly twelve weeks after the release of Linux 2.6.35, Linus Torvalds has released Linux 2.6.36. The new version of the Linux kernel includes various performance enhancements and updates, the AppArmor security extension and support for the KDB-KMS-Debug-Shell. Other changes include a new Out-of-Memory (OOM) killer and kernel thread improvements.
The open-source Linux operating system contains a serious security flaw that can be exploited to gain superuser rights on a target system.
Phishing attacks have risen sharply even though spam has declined to its lowest level since 2008, a new report reveals.
The Domain Name System (DNS) plays a critical part in Internet communications, as it's used to translate a human-readable computer hostname into an IP address -- such as searchsecurity.co.uk to 65.214.43.49 -- so that it can be understood and used by networking equipment, computers and software programs.
After some days with the latest Ubuntu Linux desktop release, I was planning to devote a few graphs to extolling its many virtues.
As Oracle prepares to dump a passel of 81 security fixes on its user base -- including seven critical patch updates (CPUs) for its database product -- many database administrators are preparing to patch their Oracle database platforms accordingly.
Were it not for Windows' long-standing installed base and overwhelming market dominance, it seems unlikely that anyone would argue seriously for the merit of the operating system, plagued as it is by high prices, security problems and vendor lock-in.
Though database security best practices have circulated the conference circuit for years now and existing database security tools are now mature, today's typical enterprise is still far behind in shoring up its most sensitive stores of data.
The more apps companies deploy, the more complicated vulnerability management becomes. In the rush to find every security hole and seal it off from potential hackers, it's easy to let something important slip through. That's especially true if you're an IT administrator juggling several tasks of which security is one.
Your website may not be as secure as you once thought... Most people take the Internet for granted. When it comes to the Internet as we know it
Thanks to Phil Van Treuren for sending this one. I
A number of Linux distributors have issued patches for fixing a widely used program that fetches Web pages, called Wget, so it can not be misused by attackers.
Rapid growth in the market for x86 servers over the past year brought good news for both Linux and Windows, as research firm IDC reported last week.
A critical vulnerability in the Linux kernel that gives attackers access to root via X server has been patched by Linus Torvalds. Meanwhile, kernel developer James Morris reports on the first-annual Linux Security Summit (LSS), which covered topics including usability, hardening the kernel, and API standardization.
Afilias, which operates .info and more than a dozen other Web site extensions, will announce on Monday plans to deploy an emerging standard known as DNSSEC that adds a layer of encryption to the Internet's Domain Name System. Will security worries propel DNS into the cloud?
"Security through obscurity" may be a catchy phrase, but it's not the only thing that's catching among Windows users. The expression is intended to suggest that proprietary software is more secure by virtue of its closed nature. If hackers can't see the code, then it's harder for them to create exploits for it--or so the thinking goes.
Tired of having to memorise several usernames and passwords for every secure website you visit? Don't fret. A recent study confirms what IT security experts have been saying all along--it is wiser to have different usernames and passwords to protect identities and information not meant to be public.
Softwink announces the release of Sagan, the ultimate in Syslog monitoring. Sagan can alert you when events are occurring in your syslogs that need your attention right away, in real time!
Mozilla is increasing the amount it pays security researchers for bugs from $500 up to $3,000. I personally think that's a very good thing. There has long been a debate about whether or not vendors should pay for security flaws. In my view, the flaws are going to be discovered whether or not a vendor is paying for them. The question is how they will be disclosed and whether or not those flaws will end up putting millions of users at risk - or not. By paying for flaws, what Mozilla is doing is providing an economic model for both security researchers and for itself. For security researchers, a $3,000 payment is not an unreasonable sum in my view and it's more than the $1,337 that Google pays. HP's TippingPoint also pays for security flaws as well though they seem to have a floating scale on payments as far as I can tell.