The recent release of I2P 2.5.0, an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew of improvements and new features that will certainly intrigue security practitioners. This release aim...
Another Distributed Denial of Service (DDoS) attack tool has been released. David Dittrich heads up an analysis of the tool, in much the same way as his previous six DDoS analyses. "mstream is more primitive than any of . . .
Lance Spitzner tells us about IDing remote hosts, without them knowing using Passive Fingerprinting. "One of the challenges of network security is learning about the bad guys. To understand your threats and better protect against them, you have to . . .
Nmap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), and TCP/IP fingerprinting (remote host operating system identification). More than . . .
MSNBC seems to have a comment on the "back door" recently found in a Red Hat package. "It makes a change to see a story about a gaping security hole in a Linux package for a change, rather than . . .
Internet service provider AboveNet Communications Inc. and law enforcement officials are on the hunt for the cyberattackers who halted traffic on Tuesday to almost 1,000 businesses that contract Internet services and Web-page hosting through the company. At 9:45 a.m. Pacific . . .
Back-door in Red Hat Linux? "Internet Security Systems is warning Linux users of a back-door security flaw that carries ISS's highest danger rating." The story explains, "a back-door vulnerability exists for any user running a full version of Red Hat . . .
A team of Internet security researchers say they’ve found a serious security hole in the most popular distribution of the Linux operating system. According to Internet Security Systems Inc., there’s a backdoor account in Red Hat’s Linux that would let . . .
In a short span of years (since 1992, in fact), the Web has exploded from nonexistence to the gazillions of Web sites found today. As the Web has grown, so too have the capabilities of Web technologies. This article focuses . . .
A group of South American computer security researchers earlier today released a program, called realdie.exe, that can knock virtually any RealNetworks video server offline. . . .
More details are emerging about last February's massive denial-of-service attack, and they continue to paint a dramatic picture of how helpless the Net's biggest Web sites really were. . . .
This past weekend, a Canadian teen who calls himself "Mafiaboy" was arrested in the Montreal area and charged with at least one of the February denial-of-service (DoS) hacker attacks that blocked access to such popular Web sites as Yahoo!, Amazon . . .
Canadian police today said an arrest has been made in connection with a number of debilitating attacks on some of the Internet's most popular Web sites earlier this year. A 15-year-old boy known online as "Mafiaboy" has been accused of . . .
Canadian police on Wednesday are expected to announce details of an arrest made in connection with February's blocking of access to some of the Internet's most popular sites, and U.S. television said the suspect is a 15-year-old known online as . . .
Here's a pretty good guide on the basics of Internet security. Free reg required, but worth it. "It simply is not possible, therefore, to render a network system completely secure, and any reader who wishes to understand and . . .
One of the great rallying cries from the Open Source community is the assertion that Open Source Software (OSS) is, by its very nature, less likely to contain security vulnerabilities, including back doors, than closed source software. The reality is . . .
"Microsoft programmers had inserted a security-compromising back door in their FrontPage web server software. Thousands of websites worldwide may be affected." ... "Anybody who trusts their security to closed-source software is begging to have a back door slipped on to . . .
"The government's ability to differentiate between cyberattacks waged by hostile foreign nations and those perpetrated by teenage hackers has been severely restricted by the emergence of identity-concealing technologies and a raft of legal and constitutional issues, the director of the . . .
Intel said it plans to announce Tuesday at the RSA Conference in Europe that it is open sourcing its Common Data Security Architecture (CDSA) reference software. Intel Architecture Labs developed CDSA, which provides an open, cross-platform, interoperable software framework . . .
As part of its multifaceted network security strategy, the Army is studying the ethical and legal implications of replacing personal passwords with devices that can read fingerprints, recognize voices and faces, and capture a host of other personal biometric information. . . .
This isn't a Linux advisory, but it may be useful for many administrators. " A vulnerability has been identified in Aserver. HP9000 Series 7/800 running HP-UX releases 10.X and 11.X. An exploit to gain Root access has been . . .