open source

Open source risk management tool for Android application packages

March 2, 2016

Are there any security vulnerabilities in the open source you use? At RSA Conference, WhiteSource announced the release of the industry’s first Android Application Package …

PacketFence: Free and open source network access control

February 22, 2016

PacketFence is a fully supported, free and open source network access control (NAC) solution. Its feature set includes a captive-portal for registration and remediation, …

E-commerce web apps vulnerable to hijacking, database compromise

February 18, 2016

High-Tech Bridge researchers have published details and PoC exploit code for several serious vulnerabilities in Osclass, osCmax, and osCommerce, three popular open source …

Critical Glibc flaw opens Linux distros, other software and devices to compromise

February 17, 2016

A critical bug has been found to open an unimaginable number of computers, networking and other connected devices to attacks that can result in complete system compromise. …

Intercept, inspect and modify traffic flow with mitmproxy

February 17, 2016

mitmproxy is an interactive console program that allows traffic flows to be intercepted, inspected, modified and replayed. All flows are kept in memory, which means that it’s …

Kotlin programming language for JVM and Android reaches version 1.0

February 16, 2016

Kotlin is an open source programming language for JVM and Android that combines OO and functional features and is focused on interoperability, safety, clarity and tooling …

Year-old crypto flaw in Socat created a potentially intentional backdoor

February 4, 2016

A backdoor has been discovered in Socat, a popular open-source network administration tool similar to Netcat, and its unclear how it hasn’t been spotted earlier or at …

Tails 2.0 fixes many security issues

February 1, 2016

Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity. Tails 2.0 is …

OpenSSL bug that could allow traffic decryption has been fixed

January 29, 2016

The OpenSSL Project has pushed out new versions of the widely used OpenSSL cryptographic library, which incorporate patches for two distinct security bugs, and an update of …

Review: Automating Open Source Intelligence

January 26, 2016

Editors: Robert Layton and Paul Watters Pages: 222 Publisher: Syngress ISBN: 0128029161 Introduction You can discover a lot – too much, some believe – by digging …

0-day in Linux kernel endangers Linux servers, Android devices

January 20, 2016

A serious and pretty longstanding flaw in the Linux kernel has been recently discovered by researchers from infosec outfit Perception Point. The vulnerability (CVE-2016-0728) …

OpenWPM: An automated, open source framework for measuring web privacy

January 19, 2016

Among the speakers at the first ever Privacy Con, organized by the US Federal Trade Commission (FTC) and held last Thursday in Washington, DC, was Steven Englehard, a Ph.D. …