Security Leftovers

-
Security advisories for Wednesday
-
Your Unhashable Fingerprints Secure Nothing
Passwords are crap. Nobody picks good ones, when they do they re-use them across sites, and if you use even a trustworthy password manager, they’ll get hacked too. But you know what’s worse than a password? A fingerprint. Fingerprints have enough problems with them that they should never be used anywhere a password would be.
Passwords are supposed to be secret, like the name of your childhood pet. In contrast, you carry your fingers around with you out in the open nearly everywhere you go. Passwords also need to be revocable. In the case that your password does get revealed, it’s great to be able to simply pick another one. You don’t want to have to revoke your fingers. Finally, and this is the kicker, you want your password to be hashable, in order to protect the password database itself from theft.
-
Linux Ransomware Debut Fails on Predictable Encryption Key
-
Israel’s Cymmetria, Which Deceives Hackers, Raises $9 Million
Cymmetria Inc., an Israeli start-up whose software lures hackers into cyber traps within organizations’ networks has raised around $9 million, the latest sign that investors are flocking to one of cyber-security’s hottest trends: deceiving hackers and catching them red handed.
The Tel Aviv-based cyber-security firm makes decoy servers which simulate an organization’s real networks without jeopardizing operations or giving away real data.
-
Growing Scope of Ransomware
-
Ransomware takes evolutionary step and targets websites
-
Ransomware meets Linux - on the command line!
-
Linux web servers targeted in new ransomware scam
-
sNew ransomware targets Linux administrators
-
Decryption Tool Foils Linux Server Ransomware Attacks
-
Six WordPress Plugins Vulnerable
-
evolution of seccomp
So, yes, Linux “could match this API on seccomp”. It’d just take some extensions to libseccomp to implement pledge(), as I described at the top. With OpenBSD doing a bunch of analysis work on common programs, it’d be excellent to see this usable on Linux too. So far on Linux, only a few programs (e.g. Chrome, vsftpd) have bothered to do this using seccomp, and it could be argued that this is ultimately due to how fine grained it is.
-
- Login or register to post comments
Printer-friendly version
- 2245 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
today's howtos
| Free, Libre, and Open Source Software
|
Ole Aamoton GNOME Voice, GNOME Radio, and Gingerblue
| GUADEC 2022 Conference Takes Place July 20–25 in Guadalajara, Mexico, for GNOME 43
GUADEC 2022 is the first in-person GUADEC event in the last two years due to the COVID-19 pandemic and associated traveling restrictions and health safety measures, and it also marks GNOME’s 25th anniversary.
|
Recent comments
1 hour 13 min ago
1 day 2 hours ago
1 day 2 hours ago
1 day 2 hours ago
1 day 3 hours ago
1 day 7 hours ago
1 day 8 hours ago
1 day 9 hours ago
1 day 15 hours ago
1 day 15 hours ago