Linux Today: Linux News On Internet Time.








Most Read Stories

Editor's Picks

Linux 4.0 Goes Live With Live Kernel Patching
eWEEK: Linux hits a new milestone, as live kernel patching lands in the new release... (Apr 13, 2015)

Why the Classical Desktop is Obsolete
Datamation: What might replace the Linux desktop as we know it? (Apr 17, 2015)

More on LinuxToday

Linux Today - Security

Google Provides Detailed Analysis of GitHub Attack Traffic
(Apr 26, 2015, 10:00) (0 talkbacks)

ThreatPost: The high-profile DDoS attack against GitHub that went on for several days last month was the end result of an operation that included several phases and extensive testing and optimization by the attackers

How to encrypt a partition with DM-Crypt LUKS on Linux
(Apr 24, 2015, 23:00) (0 talkbacks)

 HowToForge: TrueCrypt is no more, and the purpose of this post is to show you straightforward partition encryption with dm-crypt luks.

How to Log in to Linux Desktop with Google Authenticator
(Apr 24, 2015, 07:00) (0 talkbacks)

MakeTechEasier: Have you ever wondered how to provide additional security to your Linux desktop?

IoT 'Security Hopscotch' Is No Game: Chris Roberts
(Apr 24, 2015, 06:00) (0 talkbacks)

eSecurityPlanet: Chris Roberts, in hot water after tweeting about a hack into a plane's WiFi system, describes another theoretical attack, this one against an Internet-connected appliance.

WordPress Automatically Updates to v4.1.2 to Fix Critical Flaws
(Apr 23, 2015, 13:00) (0 talkbacks)

eWEEK: The popular open-source content management system pushes out a fix for a cross-site scripting flaw that impacted hundreds of plug-ins.

How To Setup Virtual Private Network (VPN) In Linux Ubuntu Based Distributions
(Apr 22, 2015, 08:00) (0 talkbacks)

 LinuxandUbuntu: In the following tutorial we will install and use VPN in our Linux Ubuntu based distributions.

DoS using hping3 with spoofed IP in Kali Linux
(Apr 21, 2015, 12:00) (0 talkbacks)

 blackmoreops: hping3 is a free packet generator and analyzer for the TCP/IP protocol.

Encryptr Zero-Knowledge System Based Password Manager For Linux
(Apr 20, 2015, 15:00) (0 talkbacks)

 LinuxandUbuntu: Encryptr is free and Open-Source password manager that is based on a very secure 'Zero-Knowledge Crypton Framework'.

PacketFence v5.0 released
(Apr 17, 2015, 14:00) (0 talkbacks)

This is a major release with new features, enhancements and important bug fixes.

Drupageddon: SQL Injection, Database Abstraction and Hundreds of Thousands of Web Sites
(Apr 17, 2015, 11:00) (0 talkbacks)

LinuxJournal: SQL injection is an attack methodology in which malicious SQL code is included in user input

pfsense 2.2.2-RELEASE Now Available!
(Apr 16, 2015, 14:00) (0 talkbacks)

This release includes two low-risk security updates.

How to monitor OpenVZ limits with vzwatchd on Debian and Ubuntu
(Apr 15, 2015, 05:00) (0 talkbacks)

 HowToForge: Vzwatchd is an OpenVZ monitoring daemon that informs the server administrator by email when a limit of the container is reached.

Dooble: A Web Browser, Specially Designed For Security And Privacy
(Apr 15, 2015, 04:00) (1 talkbacks)

 Unixmen: Security and privacy are the two biggest concerns in Web, right?

WordPress Plugin 'Simple Ads Manager' Exploit
(Apr 13, 2015, 13:00) (0 talkbacks)

 FOSSforce: Simple Ads Manager is a plugin that we'd evaluated about a year ago.

How to disable tracking in Firefox
(Apr 13, 2015, 10:00) (0 talkbacks)

Linuxveda: In current iterations of Firefox there is an option called do not track

Chrome Web Store Gives Bad Extensions the Boot
(Apr 13, 2015, 06:00) (0 talkbacks)

LinuxInsider: Google recently purged some 200 extensions from its Chrome Store inventory.

Website Password hacking using WireShark
(Apr 12, 2015, 06:00) (0 talkbacks)

 blackmoreops: When a website allows you to authenticate using HTTP (PlainText), it is very simple to capture that traffic and later analyze that from any machine over LAN

Configure No Password SSH Keys Authentication with PuTTY on Linux Servers
(Apr 11, 2015, 14:00) (0 talkbacks)

 tecmint:SSH (Secure SHELL) is one of the most used network protocols to connect and login to remote Linux servers

Let's Encrypt Becomes Linux Foundation Collaborative Project
(Apr 09, 2015, 15:00) (0 talkbacks)

eWEEK: The Linux Foundation has a track record in helping build open-source communities around projects like Let's Encrypt, which aims to make Internet use more secure.

SSLMate: Buy and install DV SSL certificates from the command line
(Apr 09, 2015, 13:00) (0 talkbacks)

 LinuxBSDos: While Let's Encrypt will be free when it's ready for production, SSLMate is not free

SSH Passwordless Login Using SSH Keygen in 5 Easy Steps
(Apr 09, 2015, 11:00) (0 talkbacks)

 tecmint: Using Password-less login with SSH keys will increase the trust between two Linux servers for easy file synchronization or transfer.

Getting started with commandline encryption tools on Linux
(Apr 09, 2015, 07:00) (0 talkbacks)

 HowToForge: One way to minimize the risk of data theft is to encrypt the data that is present even on our local system.

FBI Warns That WordPress Faces Terrorist Attack Risk
(Apr 08, 2015, 13:00) (0 talkbacks)

eWEEK: The Federal Bureau of Investigation issued an alert on April 7 about the potential danger of Islamic State (ISIS) terrorists abusing vulnerabilities in the open-source WordPress blog and content management system software.

Heartbleed a Year Later: How the Security Conversation Changed
(Apr 07, 2015, 23:00) (0 talkbacks)

eWEEK: In the year since Heartbleed's discovery, there is more scrutiny than ever on OpenSSL and critical infrastructure overall.

Tor 0.2.6.7 Fixes Security Issues That Could Be Used by Attackers to Crash Hidden Services and Clients
(Apr 07, 2015, 15:00) (0 talkbacks)

 softpedia: Tor 0.2.6.7 is a very important update, as it fixes two security issues that could be used by an attacker to either crash hidden services or clients visiting the respective hidden services.

How Linux Australia Handled Its Recent Data Breach
(Apr 06, 2015, 12:00) (0 talkbacks)

LifeHacker: In an email, Linux Australia revealed that its servers where compromised during the morning of 22 March.

Android Security Improved in 2014, yet Risks Remain
(Apr 06, 2015, 05:00) (0 talkbacks)

eWEEK: Google made strides in 2014 to improve Android security, but a large number of legacy users might not see the full benefit.

Google Says Android Malware Cut in Half
(Apr 03, 2015, 15:00) (0 talkbacks)

SecurityWeek: Google said Thursday that malware infections on Android devices have been cut in half in the past year following security upgrades for the mobile platform.

HTTPS Everywhere Version 5: Sixteen New Languages and Thousands of New Rules
(Apr 03, 2015, 13:00) (0 talkbacks)

EFF: HTTPS Everywhere is a browser extension that improves your privacy and security when using the web by sending you to the HTTPS-secured version of web sites listed in its rules.

Invizbox (hands-on): Another flawed Tor "privacy" router debuts
(Apr 03, 2015, 08:00) (0 talkbacks)

ZDnet: The Tor router runs on the same hardware as the failed Anonabox project, but with a more "honest" approach. The trouble is: honesty won't keep your Internet activity private.

Google Strikes Back Against Chinese Certificate Authority
(Apr 02, 2015, 19:00) (1 talkbacks)

eSecurityPlanet: Both Google and Mozilla are taking aggressive measures against Chinese certificate authority CNNIC

GitHub Under Sustained DDoS Attack
(Mar 30, 2015, 23:00) (0 talkbacks)

eWEEK: Since March 26, GitHub has been under attack, but users are likely not even noticing as the site continues to be highly available.

Misconfigured Rsync Daemon Exposes Hotel Routers to Risk
(Mar 28, 2015, 10:00) (0 talkbacks)

eWEEK: ANTlabs InnGate gateways were running an rsync service in a manner that is not secure.

Receive news via our XML/RSS feed

LinuxToday Security Archives