Linux Security Week: July 16th, 2012
Source: LinuxSecurity Contributors - Posted by Benjamin D. Thomas   
Linux Security Week Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

Password guessing with Medusa 2.0 - Medusa was created by the fine folks at foofus.net, in fact the much awaited Medusa 2.0 update was released in February of 2010. For a complete change log please visit http://www.foofus.net/jmk/medusa/changelog

Password guessing as an attack vector - Using password guessing as an attack vector. Over the years we've been taught a strong password must be long and complex to be considered secure. Some of us have taken that notion to heart and always ensure our passwords are strong. But some don't give a second thought to the complexity or length of our password.


  Over 1 million user credentials compromised in Android Forums hack (Jul 13)
 

Phandroid, a popular Android news site, has confirmed that its Android Forums web site was compromised and that private user data has been accessed. According to Phandroid's notice about the security breach, the user table of Android Forum's database was accessed by unknown intruders using a known exploit, which has since been fixed.

  Shuttleworth: Why Windows 8 made us ditch GPL Linux loader (Jul 9)
 

Ubuntu daddy Mark Shuttleworth has defended Canonical's decision to play ball with Microsoft's Windows 8 security policy that could stop "unauthorised" Linux builds from booting on new PCs and tablets.

  Free Software Foundation: Ubuntu's Secure Boot Plan Won't Fly (Jul 9)
 

There's still no end in sight to the ongoing Secure Boot saga arising from Microsoft's Windows 8 plans, and just recently we've seen both Fedora Linux and Ubuntu Linux respond with two very different approaches to working around the problem.

  F-Secure Warns of New Multi-Platform Web Exploit (Jul 11)
 

A Java applet determines whether the victim's machine is running Windows, Mac or Linux, then downloads the appropriate malware for the platform. Researchers at F-Secure have uncovered a new Web-based attack that installs backdoors on Windows, Linux and Mac OS X computers.

  Yahoo's password hack shows that it failed security 101 (Jul 12)
 

As 450,000 passwords exposed, Yahoo fails security 101 -- If it wasn't clear before, it certainly is now: Your username and password are almost impossible to keep safe.

  "God particle" hackers train Indian officials (Jul 11)
 

Two cyber security experts, who claimed to have cracked the security code of IT systems involved in the discovery of 'God Particle', Monday conducted training sessions for Indian government officials.

  Hack Yourself First: Interview Jeremiah Grossman (Jul 11)
 

Hacker and Internet security guru Jeremiah Grossman thinks everyone should learn how to hack. Why? Because "every day, our country's innovation is being stolen, our national security jeopardized, and your most personal information is being robbed by computer hackers malicious hackers." Grossman said it's "because hacking is easy. Because hacking works."

  Black Hat hacker con promises to "ruffle some feathers" (Jul 13)
 

The annual Black Hat security conference, which kicks off in Las Vegas later this month, is full of sessions showcasing the latest research on vulnerabilities and defenses.

  Hack and Spend: Who's Using Your Credit Card? (Jul 12)
 

Data breaches have become the new normal with big-name companies like Global Payments -- which services Visa and MasterCard -- and online retailer Zappos disclosing hackers stole consumer credit card information in 2012. The breaches build on an equally active 2011, a year in which security software company Symantec estimates 232 million identities were exposed.

  Millions Will Flow to Privacy Groups Supporting Weak Facebook Settlement (Jul 16)
 

Privacy and consumer groups are urging a federal judge to sign off on a controversial Facebook settlement over its "Sponsored Stories" advertising program which will net them a combined payout of $10 million, despite indifference to or confusion over the terms of the vaguely written settlement, according to interviews, e-mail and court records.

  WikiLeaks Wins Icelandic Court Battle Against Visa for Blocking Donations (Jul 16)
 

The Icelandic partner of Visa and MasterCard violated contract laws when it imposed a block against credit card donations to the secret-spilling site WikiLeaks, a district court there has ruled.

Only registered users can write comments.
Please login or register.

Powered by AkoComment!