LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Advisory Watch: May 17th, 2013
Linux Security Week: May 13th, 2013
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Host Security
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.



Malicious PDFs: How to Protect Yourself  04 January 2010 
Source: Security Bits - Posted by Alex   
Thanks to themindgames for submitting this article. Malicious documents were the most commonly encountered exploit via the Web in 2008 and continued to be the most prominently encountered exploit in 2009. This is due to a large number of exploits for programs like Adobe Acrobat and the Microsoft Office suite, the ubiquitous use of documents via the Web and the built-in support into the browser.
 
Learn to use extended file attributes in Linux to boost security  15 December 2009 
Source: Tech Republic - Posted by Alex   
ACLs and extended attributes for files are simple and easy to use in Linux, and can go a long way in securing files. Vincent Danen goes over some of the basic file protection enhancements provided by the Linux kernel.
 
Malicious Linux screensaver proves any OS's biggest vulnerability is sitting in the chair  10 December 2009 
Source: Download Squad - Posted by Alex   
Dig up a post on just about any blog about antivirus programs for Windows, and you'll probably come across at least one comment from a Linux or Mac flexing about how impervious his or her OS is. Which is true, to a point, but your defenses are only as good as the people using them.
 
Remotely Viewing A User’s Web History With CSS  07 December 2009 
Source: The Coffee Desk - Posted by Alex   
Throughout the years, there have been several JavaScript/CSS/VBScript exploits in various browsers (and by “various”, I mean mostly Internet Explorer) that allow a remote site to view a user’s complete web history.
 
Linux and the sheer utter misery of viruses  03 December 2009 
Source: ComputerWorld UK - Posted by Anthony Pell   
In our cosy *nix world we don't suffer from viruses, or rather we didn't. But thanks to an amazing piece of reverse engineering we have SAMBA, and SAMBA allows Windows machines to talk to Linux (and Solaris) networks and store files on them.
 
Web VPN solutions circumvent browser security model  02 December 2009 
Source: H Security - Posted by Alex   
US-CERT has stated that clientless SSL VPN products from various vendors' tear a hole in browser security mechanisms, allowing theft of cookies and access data. Clientless SSL VPNs rely on a secure internet connection between a user's web browser and a company web server serving various applications for out-of-office staff and providing access to additional intranet services. The solutions are known as 'clientless' because they do not require a dedicated VPN client.
 
Heap Spraying: Attackers' Latest Weapon Of Choice  01 December 2009 
Source: Dark Reading - Posted by Alex   
Difficult to detect reliably, heap spraying was behind an exploit of IE and Adobe Reader. Computer security has been described as a game of one-upmanship, an ongoing escalation of techniques as both sides attempt to find new ways to assault and protect system vulnerabilities. The most prevalent forms of incursion over the last decade have been aimed at computer memory -- and of these, the newest, most popular weapon of choice for attackers is a technique known as "heap spraying."
 
Rootkit Hunter v1.3.6 Available  30 November 2009 
Source: rkh Project - Posted by Dave Wreski   
The Rootkit Hunter project team is pleased to announce the release of version 1.3.6. This release offers more ease of use and improved rootkit and malware checks.
 
Chrome OS Security Overview  25 November 2009 
Source: OS News - Posted by Alex   
Google has put up a very interesting document explaining the security features underlying its Chrome OS. The document also details the underlying guiding principles of Chrome OS' security features. In short, it comes down to process isolation, secure auto-update, verified boot, encryption, and more.
 
Where Google Chrome security fails: the password  24 November 2009 
Source: IT World - Posted by Anthony Pell   
A lot of people, including me, are excited about Chrome OS, Google's forthcoming desktop operating system. One of the things that has people worked up is Chrome OS' improved security over Windows. That's true. It should be better, and I'll talk more about that tomorrow, but before you get too excited about that you should know that Chrome has its elephant sized security problem.
 
<< Start < Prev 4 5 6 Next > End >>

Results 41 - 50 of 809
    
Partner

 

Latest Features
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Using the sec-wall Security Proxy
Yesterday's Edition
LulzSec Hackers Sentenced In London
How to hack an electric car-charging station
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2013 Guardian Digital, Inc. All rights reserved.