Security is ImpossibleSecurity is Impossible
The Scope of the Problem Security is inherently complex because of the large number of ways of circumventing it. For example Internet facing servers have been successfully attacked based on[...]
Category: Security
SE Linux Things To DoSE Linux Things To Do
At the end of my talk on Monday about the status of SE Linux [1] I described some of the things that I want to do with SE Linux in[...]
My SE Linux Status Report – LCA 2013My SE Linux Status Report – LCA 2013
This morning I gave a status report on SE Linux. The talk initially didn’t go too well, I wasn’t in the right mental state for it and I moved through[...]
Finding an ATM SkimmerFinding an ATM Skimmer
A member of SAGE-AU [1] found two ATM skimmers [2] and gave me permission to publish his description and analysis of the situation. I’ve lightly edited this from a mailing[...]
New SE Linux Policy for WheezyNew SE Linux Policy for Wheezy
I’ve just uploaded a new SE Linux policy for Debian/Wheezy. It now works correctly with systemd and Chromium, two significant features that I wanted for Wheezy. Now it turns out[...]
Debian SE Linux Status June 2012Debian SE Linux Status June 2012
It’s almost the Wheezy freeze time and I’ve been working frantically to get things working properly. Policy Status At the moment I’m preparing an upload of the policy which will[...]
Neighborhood WatchNeighborhood Watch
While writing my previous post I heard a huge noise at the front of my house. I found one man being restrained in a seated position on the ground at[...]
The Security Benefits of AutomationThe Security Benefits of Automation
Some Random WTFs The Daily WTF is an educational and amusing site that recounts anecdotes about failed computer projects. One of their stories titled “Remotely Incompetent” concerns someone who breaks[...]
SE Linux Status in Debian 2012-03SE Linux Status in Debian 2012-03
I have just finished updating the user-space SE Linux code in Debian/Unstable to the version released on 2012-02-16. There were some changes to the build system from upstream which combined[...]
SE Linux Status in Debian 2012-01SE Linux Status in Debian 2012-01
Since my last SE Linux in Debian status report [1] there have been some significant changes. Policy Last year I reported that the policy wasn’t very usable, on the 18th[...]