Keep OSNews alive by becoming a Patreon, by donating through Ko-Fi, or by buying merch!

Local Area Security Linux 0.4b MAIN Released

L.A.S. Linux is a 'live CD' distribution of Linux (based on Knoppix) with a CD-bootable toolkit for information security professionals and systems administrators. Its small footprint maks it able to fit on a 185MB mini-CD. Despite its small size, L.A.S. contains over 100 security tools including basic desktop applications, an array or forensic, penetration testing, intrusion detection, sniffers, and administrative utilities. Changes in this latest version include the addition of Ettercap-GTK, Clam Anti-Virus, MiniCOM, SpikeProxy, MRTG, and many of the Cisco-centric Open Source Exchange tools.

Longhorn Will Be Delayed

It's semi-official: the next major update to Windows, which has already had its release slip from 2004 to 2005, will likely be even later. Microsoft executives are now reluctant to even discuss a release date. "We do not yet know the time frame for Longhorn, but it will involve a lot of innovative and exciting work," said Bill Gates at a recent financial analyst meeting.

You Can Compete With Microsoft

An editorial from Intenet Week's Mitch Wagner responds to several reader emails he's received lately from people convinced that Microsoft's dominance of the software industry is evermore. He disagrees, citing many examples of upstart products and protocols challenging and displacing the established player, even Microsoft itself.

Don’t Rely on Microsoft, Homeland Security

A trade group has urged the US Department of Homeland Security to reconsider its recent decision to use Microsoft as its preferred supplier of desktop and server software, citing recent security problems. Quote from the Computer & Communications Industry Association (CCIA) report: "Because of these recent developments, historical experience, and the inherent risks associated with lack of diversity, we ask that you reconsider your heavy reliance on a single, flawed software platform to protect our national security."

Time for Linux Users to Leave the Moral High Ground?

The BBC has a great editorial on the current situation with SCO and Linux. In it, the author suggests that Linux isn't immune from copyright violations simply because free software is morally superior; that without IP laws there would be nothing stopping anyone from ripping Linux off and therefore its users should show it more respect, and that there is no evidence that SCO's claims are invalid. He also notes that there is no evidence that their claims are valid either.

IBM Squashes Worms

IBM researchers in Zurich, Switzerland, have developed novel worm-squashing software the company says it wants to turn into a product to help guard against computer-network attacks such as those that slowed Internet traffic earlier this month . . . The system uses a unique approach to detecting malicious software by looking at traffic flowing to Internet addresses that aren't assigned to specific computers, trying to isolate computers on a network that attempt to infect others

Japan, China, Korea May Develop Windows Replacement

Citing the recent havoc caused by worms and security holes, three Asian powers are considering jointly developing an alternative to the Microsoft platform, probably using an open source OS as the foundation. From the Reuters story: The plan is to be proposed by Japanese Trade Minister Takeo Hiranuma at a meeting of economic ministers from the three nations in Phnom Penh on Wednesday, it said, adding that agreement was seen as likely.

Lindows: A Real Linux Desktop Alternative to Windows

As a system administrator, I have used Windows on the desktop since 2.0 and used to run Windows XP at home for my family. I use Linux and Windows servers at work and prefer (Red Hat) Linux for its security, stability and usefulness in a company with a diminishing IT budget. More than a year ago I started experimenting with Linux as a desktop solution and after installing and using more than 7 different distros along with many various versions of those distros, I found a distro that is doing everything its suppose to do, right out of the box. I'm talking about the pleasantly suprising Lindows 4.0.

OpenBSD: improper kernel bounds check; OS Fingerprinting in Firewall

OpenBSD's Todd Miller reports that an improper bounds check in the semget(2) system call can allow a local user to cause a kernel panic. No privilege escalation is possible, the attack simply runs the kernel out of memory. The bug was introduced in OpenBSD 3.3, previous versions of OpenBSD are unaffected. Earlier, Mike Frantzen has committed "Passive operating system fingerprinting" to PF which exposes the source host's OS to the filter language.