Home Blog Page 9706

Local root exploit really wasn’t fixed

Author: JT Smith

From LWN: ” Some time ago, a vulnerability was discovered that allowed for root
access through ptrace call in the linux kernel. This was
originally considered fixed in a previous patch, but as it turns
out, it wasn’t. This is fixed in kernel version 2.2.19.”

Category:

  • Linux

Wasabi Systems welcomes Wind River

Author: JT Smith

At BSDtoday.com: “Wind River’s purchase of BSDi’s software assets is a major endorsement of embedded BSD, and we are excited that BSD now has such a well-funded spokesman … we see Wind River’s open source offerings as complementary, rather than competitive in nature.”

NetBSD security advisory: “ntp” buffer overflow

Author: JT Smith

LinuxSecurity: “The NTP time synchronisation service shipped with NetBSD and many
other systems is vulnerable to a buffer-overflow attack. This
vulnerability may lead to arbitrary code execution as the user running
the NTP daemon, usually root.”

Category:

  • Unix

Millions of computer-savvy could ‘wreak havoc’ on USA

Author: JT Smith

Salon: “Are you under 30? If so, jokes former National
Security Advisor Anthony Lake in his book “Six Nightmares,”
chances are you have enough technical know-how to be a
cyber-threat. And if you don’t, says Lake, you can find everything
you need, including cyber-attack tools and their instruction
manuals, on the Internet. Armed with these tools, “millions of
computer-savvy individuals could wreak havoc against the United
States.”

Category:

  • Linux

The spam-haters club

Author: JT Smith

From Network Magazine: “Some people out there aren’t just
annoyed by spam, they’re enraged by it.
Some, in fact, take it upon themselves to
thwart junk e-mail and those who
propagate it (whether willingly or
inadvertently). These spam-busters are
willing to endure the loss of innocent
lives-that is, legitimate e-mail that
gets blocked along with the spam-to shut
down as many spamming operations as they
can.”

Category:

  • Programming

CollabNet’s SourceXChange dies

Author: JT Smith

“It’s been coming in through the proverbial grapevine that SourceXChange has been closed by its’
parent Collab.net. In the closed doors page they’ve got, Collab notes that they are focusing on a
code development environment they’ve been working on – it’s a lot like what SourceXChange was
doing, but installing for people looking for collabrative development tools.” Read the discussion at Slashdot.

Category:

  • Open Source

Apache not more secure than IIS, says magazine

Author: JT Smith

Information Security Magazine: “When it comes to Web-server security, many systems
admins automatically assume Microsoft’s Internet
Information Server (IIS) is the devil, while the
open-source Apache is God. Diehard Unix admins
swear up and down that they’ll never go with IIS
because it’s a breach waiting to happen and Apache
is so secure. Well, guess again.”

Category:

  • Open Source

Xbox: Bad business for Mirosoft, good for Linux?

Author: JT Smith

A column at osOpinion argues that Microsoft’s Xbox strategy might actually be good for Linux. “If Microsoft keeps screwing around with this post-PC nonsense, it is going to become a self-fulfilling prophecy …

If Microsoft takes its eye off the PC ball and the post-PC world happens, then Microsoft will become so overwhelmed trying to dominate
all the various platforms, that the whole creaking heap will slide down the hill into Lake Sammamish.

So all you Linux advocates, I know this may be hard. But for the sake of your preferred platform, grit your teeth, paste on a big smile, and
get out there and support the Xbox.”

Category:

  • Linux

EnGarde Linux now available

Author: JT Smith

LinuxSecurity: “Guardian Digital, the Open Source security company, has today announced immediate availability of EnGarde Secure Linux, a comprehensive suite of Open
Source tools that provide a secure and stable foundation for building a secure Internet presence.”

Slashdot’s take on Linux at spring Comdex

Author: JT Smith

Slashdotters have their own laundry list of Linux appearances at the sparsely (some say) attended Spring Comdex.

Category:

  • Linux