Wednesday, February 8, 2012
Linux, Security, Rants and Raves

Categories


 

January 2007
S M T W T F S
    Feb »
 123456
78910111213
14151617181920
21222324252627
28293031  

Archives


Is It Illegal To Disclose a Web Vulnerability?

January 17th, 2007 by Baldy

Scott writes “I’m submitting my own story on an important topic: Is it illegal to discover a vulnerability on a Web site? No one knows yet, but Eric McCarty’s pleading guilty to hacking USC’s web site was ‘terrible and detrimental,’ according to tech lawyer Jennifer Granick. She believes the law needs at least to be clarified, and preferably changed to protect those who find flaws in production Web sites as opposed to those who ‘exploit’ such flaws. Of course, the owners of sites often don’t see the distinction between the two. Regardless of whether or not it’s illegal to disclose Web vulnerabilities, it’s certainly problematic, and perhaps a fool’s errand. After all, have you seen how easy it is to find XSS flaws in Web sites? In fact, the Web is challenging the very definition of ‘vulnerability,’ and some researchers are scared. As one researcher in the story says: ‘I’m intimidated by the possible consequences to my career, bank account, and sanity. I agree with [noted security researcher] H.D. Moore, as far as production websites are concerned: “There is no way to report a vulnerability safely.”‘”

Posted in Security | No Comments »

Easy discussions with Simple Machines Forums

January 17th, 2007 by Baldy

Many Web sites host discussion boards to bring together people with common interests, to help diagnose problems, or to gain a following for a project. Popular discussion board software includes phpBB, Invision Power Board, and, on the low end, PunBB. One system that is growing in popularity is Simple Machines Forum (SMF), which offers extended features while keeping to a minimalistic approach.

(Okay this is one that I have not tried as of yet but I am looking into installing it over on The Barrel later this week I will keep you posted on the results., Baldy!

Read More

Posted in Software | No Comments »

A Beginner’s Guide To LVM

January 17th, 2007 by Baldy

This guide shows how to work with LVM (Logical Volume Management) on Linux. It also describes how to use LVM together with RAID1 in an extra chapter. As LVM is a rather abstract topic, this article comes with a Debian Etch VMware image that you can download and start, and on that Debian Etch system you can run all the commands I execute here and compare your results with mine. Through this practical approach you should get used to LVM very fast.

Learn More

Posted in Linux | No Comments »

Samba share permissions simplified

January 17th, 2007 by Baldy

Samba software, is a free, open source implementation of networking protocols to share files between UNIX/Linux and Windows computers. There are many ways to set permissions to your Samba shares and improve security. This article will cover some of the basic permissions and permission precedence with examples.

Learn More

Posted in Software | No Comments »

Save time with text editing one-liners

January 17th, 2007 by Baldy

Text-editing operations are normally done interactively, inside a text editor application. Some tasks, however, can be accomplished quickly and easily, right from the UNIX command line. What’s more, these one-liners can be used in scripts to automate various editing procedures.

Learn More

Posted in Linux | No Comments »

Founders of Skype, Kazaa unveil details of project to stream TV over Internet

January 17th, 2007 by LinuxChick

AMSTERDAM (AP) – The co-founders of the Internet telephone service Skype unveiled the brand name and details of their latest project Tuesday: an Internet-based television service called Joost.

Read More

Posted in News | No Comments »

Zenwalk 4.2 — There isn’t anything mini about this distro anymore

January 17th, 2007 by LinuxChick

There are so many distros today, one really has a hard time determining which they should try and which should they just kind of ignore. I guess for me, that is when I fell in love with Distrowatch and its tracker of the most popular distros.

Read More

Posted in Linux | No Comments »