LinuxSecurity.comThe central voice for Linux and Open Source security news.Who Is Running the Most Secure Browser- July 7, 2008 LinuxSecurity.com: Many users are undoubtedly not updating their browsers as quickly as they should, but you can't conclude any specifics about that from the recent study of Google logs. The researchers who published a large study of Web browser security this week had a great idea and excellent data to work with. Too bad they overreached with their conclusions. A lot more is being made of this paper than is warranted. What do you think is the most secure browser This article looks at a study..http://www.linuxsecurity.com/content/view/139524?rdf Google Open Sources RatProxy Security Tool- July 6, 2008 LinuxSecurity.com: Google has released the source code for its internal RatProxy security tool. The software analyses web pages for potential security risks and reports back to the site administrator. RatProxy can pick up cross-site scripting flaws and incomplete cross-site defence mechanisms, as well as potential data leak sources and risky code that retrieves data from outside domains. Have you tested out Google's RatProxy software on your Linux machines The software seems to offer a lot to.http://www.linuxsecurity.com/content/view/139393?rdf Debian: New pcre3 packages fix arbitrary code execution- July 5, 2008 LinuxSecurity.com: Tavis Ormandy discovered that PCRE, the Perl-Compatible Regular Expression library, may encounter a heap overflow condition when compiling certain regular expressions involving in-pattern options and branches, potentially leading to arbitrary code execution.http://www.linuxsecurity.com/content/view/139451?rdf Mandriva: Updated gnome-screensaver packages fix- July 4, 2008 LinuxSecurity.com: A vulnerability was found in gnome-screensaver 2.20.0 that could possibly allow a local user to read the clipboard contents and X selection data for a locked session by using CTRL-V (CVE-2007-6389). The updated packages have been patched to correct this issue.http://www.linuxsecurity.com/content/view/139450?rdf Mandriva: Updated squid packages fix DoS vulnerability- July 4, 2008 LinuxSecurity.com: An incorrect fix for CVE-2007-6239 resulted in Squid not performing proper bounds checking when processing cache update replies. Because of this, a remote authenticated user might have been able to trigger an assertion error and cause a denial of service (CVE-2008-1612). The updated packages have been patched to correct this issue.http://www.linuxsecurity.com/content/view/139449?rdf Ten Tips for Securing Linux Desktops- July 3, 2008 LinuxSecurity.com: Out of the box, a Linux desktop is far more secure than most others. However, this level of security is not necessarily attained through typical security-focused software or techniques. Sometimes, the easiest means to security are those that are the easiest to forget. You might find these suggestions to be pure common sense, but maybe you'll see a means of security you never thought of before. If you're a new Linux user, these tips are a great place to start to ensure that...http://www.linuxsecurity.com/content/view/139392?rdf Google Calendar a New Target for Phishing- July 3, 2008 LinuxSecurity.com: It seems like the Phishing crews at trying to get some new ideas on how to con people into giving away their credentials and leaking info. It seems to the same old style as normal e-mail phishing but utilising the Google Calendar interface. It comes bundled with the usual spelling and grammatical errors that plague phishing e-mails. I found this to be a interesting article about how e-mail phishing is on utilizing Google Calendar. What do you thin, is there any way that...http://www.linuxsecurity.com/content/view/139391?rdf Reference Policy 20080702 Released- July 3, 2008 LinuxSecurity.com: Chris PeBenito has announced the latest release of Reference Policy. Notable changes in this release include the ability to specify SELinux roles in loadable policy modules, improved labeled networking support, and new policy modules for virtualization packages. This release improved the functionality of SELinux loadable policy modules. With this update SELinux seems to be in the right direction, what do you thinkhttp://www.linuxsecurity.com/content/view/139390?rdf RedHat: Moderate: Red Hat Application Stack v2.1- July 2, 2008 LinuxSecurity.com: Red Hat Application Stack v2.1 is now available. This update fixes various security issues and adds several enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team.http://www.linuxsecurity.com/content/view/139336?rdf 10 Best Hacking and Security Software Tools for Linux- July 2, 2008 LinuxSecurity.com: Linux is a hacker's dream computer operating system. It supports tools and utilities for cracking passwords, scanning network vulnerabilities, and detecting possible intrusions. I have here a collection of 10 of the best hacking and security software tools for Linux. What do you think about this top 10 security tools list Most of the popular security tools are on this list but, do you have any other favoriteshttp://www.linuxsecurity.com/content/view/139330?rdf |