CESG (UK Government): GNU/Linux the Most Secure Operating System; New Backdoors Released for WindowsSubmitted by Roy Schestowitz on Thursday 16th of January 2014 01:01:01 PM Filed under
Revelations about how insecure our communications are have been a daily fixture of the news cycle recently, and it's in this climate that a pair of companies are combining to launch a new smartphone focused on privacy. The Blackphone will run a "security-oriented" version of Android named PrivatOS, which the companies say will allow users to securely place and receive phone calls, text messages, video chat, transfer and store files, and "anonymize your activity" through a VPN.
The OpenSSL Project confirmed that weak passwords used on the hosting infrastructure led to the compromise of its website, dispelling concerns...
My colleague, Silviu Stahie, wrote an interesting article earlier today, regarding the “ability” of the Ubuntu Linux operating system to store Wi-Fi passwords in plain text, “thanks” to the default design of the NetworkManager application, initially developed by Red Hat.
Somehow a PHP issue gets described as a "Linux worm" (usually in headlines, too) for many other writers to repeat without researching any further. If there is any issue associated with embedded devices (which cannot be patched easily, if at all), then don't blame Linux; embedded systems just happen to be an area reined by Linux and GNU. Windows would not have coped any better.
If Europe is serious about cyber security, then it should dump all proprietary software (back doors-friendly software) as soon as possible. Given everything we now know about the NSA, ignorance and uncertainty are no longer an excuse. A Dutch source has just revealed that the NSA cracked 50,000 computer networks. The evidence is overwhelming
The NSA had cracked Internet encryption.
The NSA was listening in to everything.
European customers were especially concerned, he says.
Fortunately, many of the headlines had been unnecessarily alarmist.
“The earlier types of encryption, with 64 bits or less, the NSA has figured out how to brute force decrypt at least some of that traffic,” he says. “But the more modern, strong encryption, with 128 or 256 encryption units, they can't decrypt that. And it bothers them no end.”
Security researchers of well-known security firm 'Symantec' have identified a cyber-criminal operation which relies on a new-fangled Linux backdoor, nicknamed Linux.Fokirtor, to embezzle data without being discovered.
There is little doubt that the NSA’s activities will have a negative effect on the U.S. tech sector. Some countries are already considering mandating that business servers be located in-country in an attempt to thwart intrusions by the agency. The Swiss are taking a further step and have hopes of profiting from their strong privacy laws with “Swiss Cloud,” a cloud service being developed with security in mind by Swisscom, in which the Swiss government has a majority stake.
Even as Linux advocates we should recognise that there is a diversity of interests and the agenda of the NSA is to spy on everything and everyone, not to protect our privacy and security.