Critical OpenSSL Patch Available. Patch Now!

By

-

January 29, 2016

The OpenSSL team released a critical security update today. The update patches 6 flaws. One of the flaws (CVE-2014-0195) may lead to arbitrary code execution. [1] All versions of OpenSSL are vulnerable to CVE-2014-0195, but this vulnerability only affects DTLS clients or servers (look for SSL VPNs… not so much HTTPS).

I also rated CVE-2014-0224 critical, since it does allow for MiTM attacks, one of the reasons you use SSL. But in order to exploit this issue, both client and server have to be vulnerable, and only openssl 1.0.1 is vulnerable on servers…

How to Install Piwik with Nginx on Ubuntu 15.10

By

Falko Timme

-

January 29, 2016

Piwik is the leading open source web analytics application, it has been developed to provide an alternative to google-analytics. In this tutorial, I will show you how to install Piwik on ubuntu 15.10 with Nginx web server and PHP 5.6 in php-fpm mode. We will use MariaDB as the database system.

The State of Our Encryption Isn’t Strong, But It’s Getting Better

By

The Linux Foundation

-

January 29, 2016

Sophos recently released a report and infographic detailing encryption adoption in the enterprise. Here is how the numbers break out and what they mean.

In case you were unaware, January 28 marked national Data Privacy Day. On that day, security company Sophos released an infographic detailing some of the findings of its recent report, The State of Encryption Today. The survey collected answers from 1700 IT managers and found that 44% of organizations are using encryption extensively, while 43% were using encryption to some degree. Larger companies were more likely to use encryption, though…

What to Consider When Planning a Software-Defined WAN Deployment

By

eWeek

-

January 29, 2016

Wide-area networks using SDN achieve greater agility and flexibility. Read what network administrators should consider as they plan to deploy SD-WAN.

One of the biggest upheavals inside enterprise systems now involves networking. Old-school hardwiring is quickly being overtaken by new-generation, software-defined networks. For the vast number of enterprises of all sizes, this new world of software-defined networking (SDN) is attractive for a number of reasons—manageability and cost containment being chief among them. Software-defined wide-area networks (WANs) have roots in SDN, the underlying principle of which is to abstract the network hardware and transport characteristics from the applications that use the network.

Linux Mint Is Getting Its Own Apps Starting with the 18.x Branch

By

Softpedia

-

January 29, 2016

linux-mint-apps The Linux Mint project is about to get a lot more interesting because, with the 18.x branch, the developers are going to introduce the so-called X-Apps, which are designed to work across Cinnamon, MATE and Xfce.

The Linux Mint developers didn’t want to make their own apps, and they used different techniques to avoid this method, but the changes brought on by GNOME 3.18 and the Ubuntu base have modified the perspective. A lot of projects are doing their apps when they don’t find what they want. Distros like Manjaro, Solus, or elementary OS have their own…

Linux Hardware/Software Enthusiast Trends Over The Past Year

By

Phoronix

-

January 29, 2016

With the new OpenBenchmarking.org that’s coming soon, besides the UI refresh, restored search functionality, and other improvements, the statistics access has also been re-enabled.

Here’s a look at these trends for over the past 12 months. Keep in mind those running the Phoronix Test Suite aren’t your typical users but more along the lines of enthusiasts / power users or in the enterprise space by server administrators and other professionals.

Open Source Plugin Aims to Defeat Link Rot

By

The Register

-

January 29, 2016

A new open source plugin designed to prevent the creation of dead content links online â€“ so called “link rot” â€“ has launched. Amber has been designed by Harvard’s Berkman Center for Internet and Society and it provides what it calls a “persistent route” to information on the internet by automatically taking and retaining a snapshot of every page on a website and storing it on the same website’s server.

In other words, it’s a Wayback Machine for your own website. Or perhaps think of it as a mirror of your website with minimal fuss.

NSA’s Top Hacking Boss Explains How to Protect your Network

By

The Register

-

January 29, 2016

Usenix Enigma — The United States National Security Agency (NSA) is a notoriously secretive organization, but the head of its elite Tailored Access Operations (TAO) hacking team has appeared at Usenixâ€™s Enigma conference to tell the assembled security experts how to make his life difficult.

Rob Joyce has spent over a quarter of a century at No Such Agency and in 2013 he became head of TAO, with responsibility for breaking into non-US computer networks run by overseas companies and governments. Joyce’s presentation on network security at the event boiled down to one piece of advice.

â€œIf you really want to protect your network you have to know your network,…”

Containers Become a First Class Citizen in Ubuntu 16.04, Says Mark Shuttleworth

By

Softpedia

-

January 29, 2016

It seems like a whole lot of Mark Shuttleworth interviews are starting to pile up these days, and today we would like to inform our readers about a recent one where the Ubuntu founder talks about the latest cloud technologies coming from Canonical.

The interview was recorded for a WIRED event hosted by IBM LinuxONE, and Mark Shuttleworth talks with Jim Daly, WIRED Brand Lab Contributing Editor, about how Ubuntu Linux took the cloud by storm, as well as what the Ubuntu community is preparing for the upcoming Ubuntu 16.04 LTS (Xenial Xerus) operating system.

The three-minute-long interview starts with Mark Shuttleworth praising…

BSD Release: OPNsense 16.1

By

DistroWatch

-

January 29, 2016

OPNsense is a FreeBSD-based operating system for firewalls and routers that was originally forked from pfSense. The OPNsense project has released a new version, OPNsense 16.1 “Crafty Coyote”, which is based on FreeBSD 10.2. The new release features several improvements to the firewall, dashboard and translations. The project has also rolled out new documentation. “16.1 is nicknamed `Crafty Coyote’…