Open Systems Journal

A reader wrote in to inform us that OSSEC version 2.0 has been released. I haven’t had a chance to play around with it yet, but I am looking forward to it. It appears there is a bunch of new functionality.
From the OSSEC website…
* Compiled Rules - Per popular demand, we are introducing the capability [...]

Security company Tiversa says the country has obtained engineering and communications information about Marine One, likely via a compromised file swap on a peer-to-peer service.
Go to Source

If you thought Blu-ray is the way to go for data storage these days,
think again. Sony Optiarc Europe just announced a new 24x DVD burner,
which writes DVDs at a 50% faster speed than what manufacturers thought
would be possible just three years ago. From that view, the latest crop
of DVD players isn’t outdated technology, but could [...]

This past week saw Microsoft mention that it was working hard to get as many features of SQL Server into it’s Azure cloud service as it could before they release the product. We don’t know when Azure will be released (A CTP was released late last year), but apparently SQL Server will be a part [...]

British people have been “careless” with their civil liberties, but that is beginning to change, the former shadow home affairs minister says.
Go to Source

Editor’s Note: This is all in humor and not intended to promote any political belief
President Obama was inaugurated in the US this week as the 44th President of the United States. Elected on a platform of hope, it’s now his job to lead the US for the next four years, hopefully solving some of the [...]

Cisco has released a Security Advisory to address multiple vulnerabilities in the ACE Application Control Engine Module, ACE 4710 Application Control Engine. These vulnerabilities may allow an attacker to obtain administrative level access, operate with escalated privileges, or cause a denial-of-service condition.
US-CERT encourages users and administrators to review Cisco Security Advisory cisco-sa-20090225-ace and apply [...]

Birthday Paradox stumps djbdns
For years, cryptographer Daniel J. Bernstein has touted his djbdns as so secure he promised a $1,000 bounty to anyone who can poke holes in the domain name resolution software.…
Go to Source

adeelarshad82 writes to point out that details have been provided for President Obama’s proposed $18.7 billion in funding for NASA in 2010 (up from $17.2 billion in 2008). Quoting: “The budget calls on NASA to complete International Space Station construction, as well as continue its Earth science missions and aviation research. Yet it also remains [...]

Google is challenging hackers to rip apart their ActiveX alternative called Google Native Client. Native Client allows users to run native x86 code on the web — something that has been deemed as extremely dangerous, especially from untrusted sources. Google says this challenge is to make…
Go to Source