Issue #143 / Oct 2012

SERVICE: October 2012: DVD Inlay

Issue #143
Mageia Linux is a multi-purpose distro based on the Mandriva codebase. A group of former Mandriva engineers star......

SERVICE: Welcome

Editorial

News of Google’s employee survival benefit surfaced recently, much to the amazement of bloggers, who were all out on the prowl for some tech news. In an interview with Forbes Magazine’s Meghan Casserly, Google Chief People Officer Lazlo Bock spelled out the terms. If a Google employee dies, the company will give a surviving spouse or domestic partner half the employee’s salary for up to 10 years.

SERVICE: Table of Contents: 143

Intrusion Prevention

New vulnerabilities appear every day. To keep your network safe, you need to think like an attacker.

SERVICE: On the DVD: Mageia Linux

This months' DVD

Mageia Linux is a multi-purpose distro based on the Mandriva codebase. A group of former Mandriva engineers started the Mageia project in 2010 as a means to ensure continuing support for the Mandriva community through a non-profit organization free of corporate control.

NEWS: Linux News

• OSI accepting individual memberships.
• OpenGL 4.3 and ES 3.0.
• License Protection
• Raspberry Pi ramps up production.
• FSFE protects licences when bankruptcy strikes.
• Gaming passwords secured with My1login.
• Web Apps new to Ubuntu.
• LPI Forum
• RSA Anti Rogue App.
• US Cell Phone Right-to-Know Act.

NEWS: Tech Tools

Peppermint Three Announced

Zsh 5.0 Released

ActiveState Releases Komodo 7.1

IPFire 2.11 Released

COVER STORY: IPv6 Pen Testing

Pen testing on IPv6 networks

If you have enabled IPv6 on your network without considering basic security issues, you might have opened up a hole for attackers. In this article, we demonstrate a successful attack on a server via IPv6 and explain how the popular security tools handle IPv6.

COVER STORY: Capture File Filtering with Wireshark

Reading a packet capture file with Wireshark and tshark

Wireshark doesn’t just work in real time. If you save a history of network activity in a pcap file using a tool such as tcpdump, you can filter the data with Wireshark to search for evidence.

COVER STORY: OpenVAS

The OpenVAS vulnerability scanner

The more IT infrastructure complexity increases, the more indispensable vulnerability scanners become. If you are not interested in retaining the consulting services of a professional hacker, you might want to entrust the task of detecting vulnerabilities to a specialized software tool, such as OpenVAS.

COVER STORY: Side Channel Attacks

Some web applications send unnecessary information to attackers

Sometimes error messages or log entries are too verbose for their own good, disclosing valuable information to attackers.