关于伪造RedHat安全团队的黑客邮件！

Linux安全性问题又一次被提上水面！一直以来关于Linux的推荐初衷很多人的一个观点就是比Windows安全，但是最近接连不断的安全问题暴露出很多问题，先是libtiff，JPEG处理漏洞，直接影响了Gtk+等基础平台的安全性，这次又是黑客伪造RedHat安全团队的Email事件，告诉我们Linux并不会安全到哪里，Linux同样会存在安全性问题，其实不存在安全问题的系统可能是不存在的，这也进一步证明安全问题是一个过程化的问题，而不是一个定性，定量可以衡量的问题，过程化的实施企业和个人的信息化安全才是抓住安全问题的本质，这和使用系统和使用什么软件没有必然的联系。

关于这次伪造RedHat安全更新Email事件的详细剖析：http://www.k-otik.com/news/FakeRedhatPatchAnalysis.txt

Comments

Post a Comment

Popular posts from this blog

Freeware Software Top 300 from winAddons.Com!

来自winAddons.Com的推荐，最好的300款免费软件，其中当然不乏Open Source的品牌产品，如OpenOffice，Firefox等，也包含了Windows平台下常用的不花钱的玩意儿，如Adobe Acrobat Reader等。 全文摘录如下， 对我个人经常使用和熟悉的一些产品进行了评价！！ Office 办公软件 OpenOffice - 最著名的免费的办公套件 PC Suite 602 - office suite AbiWord - text editor Atlantis Nova - text editor Microsoft PowerPoint Viewer - power point files viewer Adobe Reader - pdf reader Foxit PDF Reader - pdf reader PDFCreator - 优秀的PDF制作引擎，用于直接打印到PDF文件 Doc Convertor - document convertor Convert - unit convertor Converber - unit convertor Sunbird - calendar/organizer EssentialPIM Free - calendar/organizer PhraseExpress - speed up your writing ATnotes - create notes on the desktop Archive managers 压缩文件管理器 7-Zip - 最流行的免费压缩工具 IZArc - compression program TugZIP - compression program CabPack - compression program Universal Extractor - extract files from any type of archive Internet 因特网 Firefox - 火狐，火狐 Internet Explorer - web browser Maxthon - web browser Opera - web browser Avant Browser - web browser Thu...
Read more

What is DevOPS?

Image
What is DevOPS? As be a DevOPS engineer more than five years in the past, I was always asked what is DevOPS or what is a DevOPS role or what should a DevOPS Engineer do? Or even question like how to be a good DevOPS? What? How? should be the most two frequently questions from almost all organizations. As I am working with  Amazon Web Service  for a long time with my DevOPS career, I tried to get answers from AWS guys frist as they have a special section about AWS DevOPS, also they have AWS DevOPS certificate cources, even though I never try such cources. This is the first page said about DevOPS on AWS DevOPS to answer "What is DevOPS?", DevOps is the combination of cultural philosophies, practices, and tools that increases an organization’s ability to deliver applications and services at high velocity: evolving and improving products at a faster pace than organizations using traditional software development and infrastructure management processes. This speed enable...
Read more

RPM Build Tips!

Now, I am trying to build a Linux system based on the Fedora Core Release! Working with the RPM system in deep.The unpackaged file terminate the build process under RPM 4.x! Unpackaged files message in RPM-4.1 and following RPM version 4.1 and following demonstrate a new behaviour in the rpmbuild process. Previously, a build process might place any number of files, say in the %install stanza, when running the make install part of a Makefile , in the customary /var/tmp/%{name}-root/ BuildRoot (the RPM_BUILD_ROOT ). Once through that part of the Makefile , it can then completely ignore these files in the %files binary packaging stanza. This often happens when an upstream maintainer adds, or deletes items from new directory spurs in the make install , and the change might be missed during an unattended or automated rebuild. This option permits careful packagers to cross check the quality of their packaging. So as a cross check, /usr/lib/rpm/check-files is now enabled during ...
Read more