Linux Events - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

What is the most important Linux security technology?

	SELinux
	grsecurity
	CIS Benchmark
	Bastille Linux
	iptables
	LIDS

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

All About Linux

DanWalsh LiveJournal

Securitydistro

Latest Newsletters

Linux Security Week: May 20th, 2013

Linux Advisory Watch: May 17th, 2013

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

Linux Events

New phishing attack exploits tabbed browsing

25 May 2010

User Rating:

How can I rate this item?

Source: H Security - Posted by Alex
Aza Raskin, Creative Lead for Mozilla's Firefox, has demonstrated a new phishing attack which exploits tabbed browsing. In the attack, a normal page, with the attack script embedded, is loaded and displays as expected.
Read more...

UPDATE - New attack bypasses EVERY Windows security product

11 May 2010

User Rating:

How can I rate this item?

Source: ZDNet Blogs - Posted by Anthony Pell
Okay, Windows content, but good to convince your boss that even the best efforts of the various security Windows vendors can't protect your desktop users. Are you a Windows user? Do you make sure that your antivirus program is updated regularly? Do you feel safe? You shouldn’t! Read on to find out why.
Read more...

Setting the record straight on sudo

06 April 2010

User Rating:

How can I rate this item?

Source: TechRepublic - Posted by Anthony Pell

I recently read a blog posting that denounced the use of sudo as insecure because of the following (briefly summed up and paraphrased) reasons:

The idea that not using the root account is wrong, using root for everything is fine.
That using sudo for everything provides a false sense of security over performing an action as root directly
That using a user account password to get a root shell is a bad idea
That using a root shell is not dangerous, and that this “grave misunderstanding” came from the idea that running X as root is dangerous
That sudo has very little place in the Enterprise
That relying on sudo is foolish, because it has bugs
That everything should be done from a root shell, and that you should have to know the “uber-secret root password” to get that access

System security? What about your DATA!

05 April 2010

User Rating:

How can I rate this item?

Source: fewt blog - Posted by Anthony Pell
What makes this problem worse? Well what about your DATA? Let me start with the statement that there is nothing installed on your Desktop Linux system by default to protect your data from theft or destruction, and there is nothing to protect your computer from harming other computers when you are using Desktop Linux.
Read more...

German Government Warns Internet Users On Firefox Security Flaw

23 March 2010

User Rating:

How can I rate this item?

Source: All Headline News - Posted by Anthony Pell
The German government warned its citizens not to use Internet web browser Firefox because of serious security problems. There is reportedly a security flaw in Mozilla Firefox Version 3.6 that could allow a hacker to take control of someone's computer by launching malicious code.
Read more...