Evangelist hit-man Jerry Falwell’s career as a racist propagandist was excised from the record, following his death last week, and the media has ignored threats from his followers — Christians who are willing to commit terrorist acts and die for their faith.

continue reading.....

Recent findings shed new light on the increasingly unequal terrain of American society. The new "top" involves pay in the hundreds of millions, a private jet and a few acres of Nantucket. The new bottom is slavery.

continue reading.....

The Bush administration’s point man for conservative — and often morality-driven — social policy, such as abstinence-only sex education, has resigned. But only time will tell whether his programs remain federal policy.

continue reading.....

Encrypting your data is the key to mobile security. PolishLinux.org has a couple of tutorials comparing DM_Crypt with TrueCrypt — two programs that can save your life when your computer gets lost or stolen. Find the differences between these two and encrypt your disk now! Tip: DM_Crypt better integrates with Linux kernel, but TrueCrypt works on Windows as well.

continue reading.....

By: Anže Vidmar
Recently I wrote about locking down the GNOME desktop environment with Pessulus. In this article, I’ll show you how to do the same for KDE, using Kiosktool, a front end for changing the KDE configuration files in users’ home folders and the /etc/kde* folders.
Read more at Linux.com.

continue reading.....

You can customize the UNIX shell to save time, to save typing, and to adapt to your style of work. Shell startup files capture your preferences and recreate your shell environment session after session, even machine to machine.

continue reading.....

This article shows how you can install Ruby on Rails (RoR) and integrate it in Apache2 on a Debian Etch system. Ruby on Rails is a web application framework which is rapidly gaining popularity among web programmers. It aims to increase the speed and ease with which database-driven web sites can be created and offers skeleton code frameworks (scaffolding) from the outset. Applications using the RoR framework are developed using the Model-View-Controller design pattern.

continue reading.....

A remotely exploitable vulnerability has been found in the file parsing engine of ALWIL avast! antivirus software versions prior to 4.7.700 when parsing .SIS files.

continue reading.....

iDefense Security Advisory 05.25.07 – Remote exploitation of multiple stack-based buffer overflows in Sun Microsystems Inc’s Java System Web Proxy allows unauthenticated attackers to execute arbitrary code with superuser privileges. The problem specifically exists within the sockd daemon. This daemon implements SOCKS proxy support for the Web Proxy product. Attackers can cause a buffer overflow by manipulating certain bytes during protocol negotiation. iDefense has confirmed the existence of this vulnerability using version 4.0.3 of Sun Java Web Proxy Server. Lab tests were performed on an x86 RedHat enterprise Linux machine. Previous versions, including products released under the Sun ONE product line, are suspected to be vulnerable.

continue reading.....

OpenPKG Security Advisory – Multiple vulnerabilities in PHP versions 5.2.2 and below have been addressed.

continue reading.....

Gentoo Linux Security Advisory GLSA 200705-19 – Several vulnerabilities were found in PHP, most of them during the Month Of PHP Bugs (MOPB) by Stefan Esser. The most severe of these vulnerabilities are integer overflows in wbmp.c from the GD library and in the substr_compare() PHP 5 function. Ilia Alshanetsky also reported a buffer overflow in the make_http_soap_request() and in the user_filter_factory_create() functions, and Stanislav Malyshev discovered another buffer overflow in the bundled XMLRPC library. Additionally, the session_regenerate_id() and the array_user_key_compare() functions contain a double-free vulnerability. Finally, there exist implementation errors in the Zend engine, in the mb_parse_str(), the unserialize() and the mail() functions and other elements. Versions less than 5.2.2 are affected.

continue reading.....

Ubuntu Security Notice 465-1 – Luigi Auriemma discovered multiple flaws in pulseaudio’s network processing code. If an unauthenticated attacker sent specially crafted requests to the pulseaudio daemon, it would crash, resulting in a denial of service.

continue reading.....

Gentoo Linux Security Advisory GLSA 200705-20 – Chris Evans has discovered multiple buffer overflows in the Sun JDK and the Sun JRE possibly related to various AWT and font layout functions. Tom Hawtin has discovered an unspecified vulnerability in the Sun JDK and the Sun JRE relating to unintended applet data access. He has also discovered multiple other unspecified vulnerabilities in the Sun JDK and the Sun JRE allowing unintended Java applet or application resource acquisition. Additionally, a memory corruption error has been found in the handling of GIF images with zero width field blocks. Versions less than 1.4.2.03-r14 are affected.

continue reading.....

MSN Shadow is a forensics tool to analyze the MSN protocol. It has features such as: text sniffing, video sniffing, spoofing messages, hijacking sessions, shutdown users, save text sniffed in HTML format, save video sniffed in AVI format.

continue reading.....

rtpBreak detects, reconstructs and analyzes any RTP [rfc1889] session through heuristics over the UDP network traffic. It works well with SIP, H.323, SCCP and any other signaling protocol. In particular, it does not require the presence of RTCP packets (voipong needs them) that are not always transmitted from the recent VoIP clients.

continue reading.....

Internet Explorer 6 / Ademco, co., ltd. ATNBaseLoad100 module remote buffer overflow exploit.

continue reading.....

webCMS version 1.00 suffers from a direct database download vulnerability.

continue reading.....

Pligg version 9.5 is susceptible to a guessable confirmation code for password reset.

continue reading.....

Zenturi ProgramChecker ActiveX arbitrary file download/overwrite exploit.

continue reading.....

Apache version 2.0.58 mod_rewrite remote overflow exploit for win32. Binds a shell to port 4445.

continue reading.....

Zindizayn Okul Web Sistemi version 1.0 suffers from a SQL injection vulnerability allowing for login bypass.

continue reading.....

Eudora version 7.1.0.9 (IMAP FLAGS) remote SEH overwrite exploit that executes calc.exe.

continue reading.....

EDraw Office Viewer component unsafe method exploit that wipes system.ini.

continue reading.....

phpPgAdmin versions 3.5 through 4.1.1 suffer from a cross site scripting vulnerability.

continue reading.....

RMForum suffers from a direct database download vulnerability.

continue reading.....

OllyDbg version 1.10 suffers from a denial of service condition when seeing certain special bytes.

continue reading.....

Behold!

On my desk in front of me is a hard drive given to me by an associate of mine.

It’s a drive from an IBM laptop running Ubuntu Linux.

The note attached to the hard drive said (and I quote):

“We tracked the bittorent movie downloads to John Doe’s laptop. Here’s the hard drive. We couldn’t find squat on it.”

Believe it or not, I’ve gotten less helpful instructions in the past.

What do we know so far?

Linux. Check. Looking for movie files. Check. Looking for a bittorent c

continue reading.....

Behold!

On my desk in front of me is a hard drive given to me by an associate of mine.

It’s a drive from an IBM laptop running Ubuntu Linux.

The note attached to the hard drive said (and I quote):

“We tracked the bittorent movie downloads to John Doe’s laptop. Here’s the hard drive. We couldn’t find squat on it.”

Believe it or not, I’ve gotten less helpful instructions in the past.

What do we know so far?

Linux. Check. Looking for movie files. Check. Looking for a bittorent c

continue reading.....

Behold!

On my desk in front of me is a hard drive given to me by an associate of mine.

It’s a drive from an IBM laptop running Ubuntu Linux.

The note attached to the hard drive said (and I quote):

“We tracked the bittorent movie downloads to John Doe’s laptop. Here’s the hard drive. We couldn’t find squat on it.”

Believe it or not, I’ve gotten less helpful instructions in the past.

What do we know so far?

Linux. Check. Looking for movie files. Check. Looking for a bittorent c

continue reading.....

Behold!

On my desk in front of me is a hard drive given to me by an associate of mine.

It’s a drive from an IBM laptop running Ubuntu Linux.

The note attached to the hard drive said (and I quote):

“We tracked the bittorent movie downloads to John Doe’s laptop. Here’s the hard drive. We couldn’t find squat on it.”

Believe it or not, I’ve gotten less helpful instructions in the past.

What do we know so far?

Linux. Check. Looking for movie files. Check. Looking for a bittorent c

continue reading.....