Language Selection

English French German Italian Portuguese Spanish

Security Leftovers

Filed under
Security
  • Leopard Flower firewall – Protect your bytes

    Several months ago, I decided to explore a somewhat obscure topic of outbound per-application firewall control in Linux. A concept that Windows users are well familiar with, it’s been around for ages, providing Windows folks with a heightened sense of – if not practical factual – protection against rogues residing in their system and trying to phone home.

    In Linux, things are a little different, but with the growing flux of Windows converts arriving at the sandy shores of open-source, the notion of need for outbound control of applications has also risen, giving birth to software designed to allay fears if not resolve problems. My first attempt to play with Leopard Flower and Douane was somewhat frustrating. Now, I’m going to revisit the test, focusing only on the former.

    [...]

    Leopard Flower firewall is an interesting concept. Misplaced, though, for most parts. It caters to a Windows need that does not exist on Linux, and to be frank, has no place in the Microsoft world either. Then, it also tries to resolve a problem of control and knowledge by requiring the user to exercise the necessary control and knowledge. But if they had those to begin with, they wouldn’t need to dabble in per-application firewalls. Furthermore, the software is still fairly immature. There are at least half a dozen little things and changes that can be implemented to make lpfw more elegant, starting with installation and followed by service and GUI model, prompts, robustness, and a few others.

  • Critical bug in libotr could open users of ChatSecure, Adium, Pidgin to compromise
  • Clair 1.0 Brings Advances in Container Security

    CoreOS pushes the open-source container security project to the 1.0 milestone and production stability.
    As container use grows, there is an increasing need to understand from a security perspective what is actually running in a container. That's the goal of CoreOS' Clair container security project, which officially hits the 1.0 milestone today, in an effort to help organizations validate container application security.

More in Tux Machines

4MLinux 20.1 released.

This is a minor maintenance release in the 4MLinux STABLE channel. The release ships with the Linux kernel 4.4.34, which restores PAE support that "magically" disappeared in 4MLinux 20.0 (sorry :-). Additionally, some popular programs (Double Commander, Dropbox, Firefox, Java RE, Opera, PeaZip, Thunderbird, Wine) have been updated, too. Read more

Refracta 8.0 Is a Pint-Sized Powerhouse

Refracta is a somewhat obscure Linux distribution that offers exceptional functionality and stability. Obscurity is not always a bad thing when it comes to Linux distros. You can find some very worthwhile alternatives to your current operating system. Refracta is a big surprise in a small package. Many look-alike desktop distros are difficult to distinguish from run-of-the-mill garden varieties. Others offer new adopters something unique that makes using them fun and productive. Refracta is one of the few full-service Linux distros that makes an easy and more convenient replacement for pocket Linux options such as Puppy Linux. Not all Linux distros that install to a USB drive -- and have the ability to save files and system settings in a persistent mode -- work equally well. Read more

Clear Linux With Mesa 13 Is A Strong Match For Intel Linux Performance

When benchmarking Intel's Clear Linux distribution earlier this year we found its Intel graphics performance to be quite good and slightly faster than other Linux distributions even when Clear was using an older version of Mesa. Now with Clear Linux having switched to Mesa 13, I decided to run some fresh Intel OpenGL benchmarks on it compared to other distributions. Read more

PTS: PHP 7.1 vs. PHP 7.0 vs. HHVM Benchmarks

With today's PHP 7.1 release, performance isn't highlighted as much as language improvements to this first major update to PHP7, but I decided to run some PHP 7.1, PHP 7.0, PHP 5.6, PHP 5.5, and HHVM benchmarks of our open-source Phoronix Test Suite code-base. These self-tests of the Phoronix Test Suite aren't the conventional PHP workload of just a CMS, blog, or other web application that can be cached, etc, but effectively of a PHP CLI application. So keep this in mind when looking at the results and that your mileage may vary depending upon use-case. Read more