[SECURITY] Fedora 19 Update: gnutls-3.1.15-1.fc19

GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implem ents the proposed standards by the IETF's TLS working group...

NIST Publishes Preliminary Cybersecurity Framework

Following an Executive Order issued by U.S. President Barack Obama in February of this year, the National Institute of Standards and Technology NIST yesterday made public a provisional copy of the government’s cybersecurity framework and says it will accept public comment on the draft for the nex...

HTTPS, SSL Minimal Security, Privacy Standard for Email

Yahoo is being second-guessed more today than a mediocre baseball manager. Two days after announcing it would finally turn SSL on by default for its email users starting in January, the company is getting a halfhearted pat on the back from the security industry, which can’t help but ask: “What to...

Technologists Scrutinize Impact of Surveillance on Economy

If you’re looking for silver linings among the Snowden leaks and the breadth of the NSA’s surveillance activities, they could be found in two things: 1 the math upholding encryption technology is, as far as we know, solid; and 2 Tor apparently drives the U.S. spy agency batty. “I’m surprised,” sa...

Fedora Update for lightdm FEDORA-2013-16381

Check for the Version of lightdm OpenVAS Vulnerability Test Fedora Update for lightdm FEDORA-2013-16381 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for firefox FEDORA-2013-17047

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2013-17047 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

NSA Crypto Questions Resemble a 'Hall of Mirrors'

There’s been no shortage of discussion and debate in recent week about the possibility that the NSA has intentionally weakened some cryptographic algorithms and cipher suites in order to give it an advantage in its intelligence-gathering operations. If you subscribe to the worst-case scenario lin...

[SECURITY] Fedora 18 Update: firefox-24.0-1.fc18

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 18 Update: lightdm-1.4.3-1.fc18

LightDM is an X display manager that: Has a lightweight codebase Is standards compliant PAM, ConsoleKit, etc Has a well defined interface between the server and user interface Fully themeable easiest with the webkit interface Cross-desktop greeters can be written in any toolkit...

[vFeed & vFeed API] The open source cross-linked local vulnerability database

vFeed is an open source naming scheme concept that provides extra structured detailed 3rd parties references for a CVE entry. While the emergence of the Open Standards helped undeniably to shape a new way to communicate about vulnerabilities1, the new vFeed is adding an intelligent structured xml...

Fedora Update for firefox FEDORA-2013-16992

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2013-16992 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 20 Update: firefox-24.0-1.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 20 Update: lightdm-1.7.15-1.fc20

LightDM is an X display manager that: Has a lightweight codebase Is standards compliant PAM, ConsoleKit, etc Has a well defined interface between the server and user interface Fully themeable easiest with the webkit interface Cross-desktop greeters can be written in any toolkit...

The Sky is Not Falling--It's Fallen

It’s no fun being a cynic, thinking that everything is bad and getting worse. It’s easy–especially in the security community–but it’s not fun. But, in light of the latest in the interminable string of revelations about the NSA’s efforts to eat away at the foundation of the security industry, the...

Experts Worry About Long-Term Implications of NSA Revelations

With all of the disturbing revelations that have come to light in the last few weeks regarding the NSA’s collection methods and its efforts to weaken cryptographic protocols and security products, experts say that perhaps the most worrisome result of all of this is that no one knows who or what...

UK Cryptographers Call For Publication of Deliberately Weakened Protocols, Products

A group of cryptographers in the UK has published a letter that calls on authorities in that country and the United States to conduct an investigation to determine which security products, protocols and standards have been deliberately weakened by the countries’ intelligence services. The letter,...

[SECURITY] Fedora 19 Update: lightdm-1.6.2-1.fc19

LightDM is an X display manager that: Has a lightweight codebase Is standards compliant PAM, ConsoleKit, etc Has a well defined interface between the server and user interface Fully themeable easiest with the webkit interface Cross-desktop greeters can be written in any toolkit...

[SECURITY] Fedora 18 Update: asterisk-11.5.1-2.fc18

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

NIST Refutes Allegations NSA Compromised Crypto Standards

UPDATE–The revelations last week in leaked NSA documents that the intelligence agency had influenced the standards process at NIST to allegedly deliberately weaken unnamed cryptographic algorithms have spurred a huge amount of speculation and discussion in the security community about the...

Bruce Schneier on the NSA, Cryptography and Trust

Dennis Fisher talks with cryptographer Bruce Schneier about the revelations of the NSA’s capabilities to subvert and weaken cryptographic algorithms, security products and standards, and what it will take to help defeat these capabilities. Download: digitalunderground125.mp3 Subscribe to the...