Category: news & announcements

Patched Bash still vulnerable to Shellshock

Patched Bash still vulnerable to Shellshock

The bug that was discovered and patched in the Bash shell is still vulnerable to code injection attacks. And the latest is that the bug, now officially known as Shellshock, is being exploited by a computer worm. But nobody seems to know the extent to which the attacks have been successful. The problem with Shellshock, is that many of the […]

Mozilla is phasing out SHA-1 based signature algorithms

Mozilla’s Security Engineering Team has announced that they are proactively phasing out the SHA-1 based signature algorithms for digital certificates, stemming from a concern that it too, like the MD5 hash algorithm, could be susceptible to collision attacks. Here’s an excerpt from the official announcement: SHA-1 is nearly twenty years old, and is beginning to show its age. In the […]

How to install Oracle JRE and make it the default JRE on Ubuntu 14.04

How to install Oracle JRE and make it the default JRE on Ubuntu 14.04

A few hours ago I had to install DataStax OpsCenter from the DataStax (community) repository on a new installation of Ubuntu 14.04. DataStax OpsCenter is a browser-based management application for DataStax Enterprise, DataStax Community and Apache Cassandra, a distributed NoSQL database. Cassandra/OpsCenter requires Oracle JRE, but applications installed using Ubuntu’s package manager are hard-wired to use OpenJDK JRE. So if […]

Toshi, an MIT-licensed bitcoin node for developers released

Toshi, an MIT-licensed bitcoin node for developers released

Coinbase has announced the released of Toshi, a bitcoin node for developers. Toshi is strictly a developers-only solution that’s written in Ruby, uses a PostgreSQL backend and comes with a very powerful API, though it is still a beta application. It is released under the MIT License. Toshi just makes it easy to build “bitcoin applications by querying blockchain data.” […]

Installing, troubleshooting MongoDB 2.6.4 startup failure on Fedora 20

I’ve been running MongoDB on Debian-based distribution and haven’t had any issue installing or managing it. However, when I tried to set it up on my main desktop, which is running Fedora 20 KDE, I ran into an annoying problem. This post documents what that problem was and a solution that worked for me. The latest stable edition of MongoDB […]

Is systemd as bad as boycott systemd is trying to make it?

From just a purely end-user perspective, systemd is an application that I’ve come to like a lot. And I think that its adoption by all Linux distributions will make it easier to manage Linux systems. But it has come under heavy criticism from some quarters – for trying to be a Swiss-army-knife-type application. One that does practically anything and everything, […]

Project Denver SoC will be the first 64-bit ARM processor for Android

Project Denver SoC will be the first 64-bit ARM processor for Android

NVIDIA has revealed architectural details of the 64-bit version of the Tegra K1 System-on-Chip (SoC). Being developed under the Project Denver code name, it will be the first 64-bit ARM SoC for Android. The 32-bit version of Tegra K1 already powers several notable mobile devices, including the NVIDIA Shield tablet and the just announced Acer Chromebook 13. From the official […]

Security risks posed by smart meters

Security risks posed by smart meters

In a world of always-on connectivity, Internet of Everything and Internet of Things, where most devices now have an embedded computer, the risk posed by hackers tampering with them cannot be overlooked. I don’t have a smart meter at home, but in the near-future, most homes, including mine, will have one. That’s why I like to read and learn as […]

Privacy Badger beta released. Install it on Firefox and Chrome

Privacy Badger beta released. Install it on Firefox and Chrome

The Electronic Frontier Foundation has announced the release of Privacy Badger beta. This comes roughly three months after the alpha version was released. Privacy Badger is a browser add-on for Firefox and Chrome that’s designed to stop “advertisers and other third-party trackers from secretly tracking where you go and what pages you look at on the web.” And it’s designed […]

From Akregator and Liferea to Inoreader

From Akregator and Liferea to Inoreader

Over the years I’ve used a variety of local, 3-party and self-hosted RSS Feed readers. My preference has always been self-hosted RSS readers, chiefly because the local clients available (Akregator and Liferea) were not that good and I was never a fan of Google Cloud services (Google Reader when it was still active). At one point I got tired of […]

EFF releases experimental open wireless router firmware

EFF releases experimental open wireless router firmware

The Electronic Frontier Foundation (EFF) has announced the release of the alpha version of an Open Wireless Router firmware. It was officially announced at the HOPE X (Hackers on Planet Earth) conference in New York City. Open Wireless Router is an EFF project that aims to make sharing wireless networks for public use a breeze. And the open wireless router […]

Tor, trust and the NSA

Tor, trust and the NSA

Tor is an anonymizing network that’s designed to protect you by “bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location.” That’s cool, but does Tor really guarantee you […]

ProtonMail and Subrosa: Encrypted communication for the privacy-conscious

ProtonMail and Subrosa: Encrypted communication for the privacy-conscious

ProtonMail and Subrosa are two separate communications services that’s attempting to offer users a platform for secure, encrypted communication. They are trying to offer what’s come to be known as zero knowledge (also zero access) Cloud data service, that is, the service provider cannot read your data. And at a time of all-out government snoopy, you cannot be too careful […]

Snowden on Dropbox: It’s hostile to privacy

Dropbox is a very popular Cloud storage services, but is it good for the privacy-conscious? According to Edward Snowden, it’s not. In an interviewed published on GuardianNews, Snowden described Dropbox as “hostile to privacy.” So what are the better alternatives. Snowden recommended Cloud storage services with zero-knowledge as a key feature. SpiderOak is an example of such a service, and […]

ProtonMail and Paypal: Do we need government approval to encrypt email?

ProtonMail and Paypal: Do we need government approval to encrypt email?

There’s something brewing between Paypal and ProtonMail, a company based in Switzerland that provides secure email services, much like what Lavabit used to do before it was forced out of business by US government policies. ProtonMail’s end-to-end encrypted email service comes with zero metadata storage and self-destructing messages and is protected by the Swiss Federal Data Protection Act (DPA) and […]

Learn how to encrypt email communications with an email self-defense guide from the FSF

Learn how to encrypt email communications with an email self-defense guide from the FSF

The Free Software Foundation (FSF) has released an email self-defense guide that shows how anybody can encrypt their email communications. It requires some effort on your end, so be prepared to spend some time setting it up. But if privacy means anything to you, then the little effort that you’re required to make to ensure that all your email communications […]

OSSEC 2.8 has been released

OSSEC 2.8 has been released

OSSEC 2.8 has been released. OSSEC is a cross-platform host intrusion detection system. Hence it’s also known as OSSEC HIDS. It is Free software released under the GNU General Public License, and features log analysis, file integrity monitoring, rootkit detection and real-time active responses. If you intend to run a server anywhere, this is one of the first applications you […]

WebRTC voice and video now available on Firefox Nightly, but…

WebRTC voice and video now available on Firefox Nightly, but…

WebRTC voice and video is now available on Firefox Nightly. That’s the latest news from the Mozilla Foundation and TokBox, the Web communications company that Mozilla Foundation is working with to bring us WebRTC voice and video in my favorite Web browser. To see how this actually works, I decided to download Firefox Nightly and install or run it on […]

Boot managers and boot devices on a PC with UEFI firmware

Boot managers and boot devices on a PC with UEFI firmware

UEFI firmware technology may have its positive aspects, but it also comes, like everything else, with its not-so positive aspects. It is not-so positive because it was a pain to figure out exactly how it works with OS boot managers and boot devices, especially when attempting to dual-boot multiple OSs on one hard drive, or even on multiple hard drives. […]

Is TrueCrypt dead?

Is TrueCrypt dead?

Based on the wording of its license, there was always a question mark surrounding the open source-ness of Truecrypt. But that’s not the topic of this brief article. What prompted me to write this is an article that appeared in the Washington Post suggesting that TrueCrypt may have seen its last days as an (“open source”) software project. TrueCrypt was […]