open source

Year-old crypto flaw in Socat created a potentially intentional backdoor

February 4, 2016

A backdoor has been discovered in Socat, a popular open-source network administration tool similar to Netcat, and its unclear how it hasn’t been spotted earlier or at …

Tails 2.0 fixes many security issues

February 1, 2016

Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity. Tails 2.0 is …

OpenSSL bug that could allow traffic decryption has been fixed

January 29, 2016

The OpenSSL Project has pushed out new versions of the widely used OpenSSL cryptographic library, which incorporate patches for two distinct security bugs, and an update of …

Review: Automating Open Source Intelligence

January 26, 2016

Editors: Robert Layton and Paul Watters Pages: 222 Publisher: Syngress ISBN: 0128029161 Introduction You can discover a lot – too much, some believe – by digging …

0-day in Linux kernel endangers Linux servers, Android devices

January 20, 2016

A serious and pretty longstanding flaw in the Linux kernel has been recently discovered by researchers from infosec outfit Perception Point. The vulnerability (CVE-2016-0728) …

OpenWPM: An automated, open source framework for measuring web privacy

January 19, 2016

Among the speakers at the first ever Privacy Con, organized by the US Federal Trade Commission (FTC) and held last Thursday in Washington, DC, was Steven Englehard, a Ph.D. …

Flaw allows malicious OpenSSH servers to steal users’ private SSH keys

January 15, 2016

Qualys researchers have discovered two vulnerabilities in the popular OpenSSH implementation of the secure shell protocol, one of which (CVE-2016-0777) could be exploited by …

Linux machines can be “owned” by hitting backspace 28 times

December 17, 2015

Taking over a Linux machine that has been locked with a password can be as easy as pressing the backspace key 28 times, two researchers from the Cyber Security Research Group …

GCHQ open sources Gaffer, a data collection and mining framework

December 15, 2015

GCHQ, the UK equivalent of the US National Security Agency (NSA), has released on Monday the source code of Gaffer, a graph database that optimised for “retrieving data …

End-to-end encrypted database ZeroDB is now open source

December 10, 2015

ZeroDB, an end-to-end encrypted database whose release was announced earlier this year, is now open source. Developers MacLane Wilkison and Michael Egorov changed the license …

Signal secure messaging app now available on the desktop

December 4, 2015

The Open Whisper Systems nonprofit has released the beta version of their Signal secure messaging app for desktop computers.Signal is often recommended by privacy-minded …

Apple’s Swift programming language is now open source