Users Online Now:
2,062
(
Who's On?
)
Visitors Today:
1,601,224
Pageviews Today:
2,335,374
Threads Today:
631
Posts Today:
13,099
07:00 PM
Directory
Adv. Search
Topics
Forum
Back to Forum
Back to Thread
REPLY TO THREAD
Subject
Linux flaw allows hackers to hijack your internet communications - unpatched since 2012!
User Name
Font color:
Default
Dark Red
Red
Orange
Brown
Yellow
Green
Olive
Cyan
Blue
Dark Blue
Indigo
Violet
Black
Font:
Default
Verdana
Tahoma
Ms Sans Serif
In accordance with industry accepted best practices we ask that users limit their copy / paste of copyrighted material to the relevant portions of the article you wish to discuss and no more than 50% of the source material, provide a link back to the original article and provide your original comments / criticism in your post with the article.
[quote:FuegoMagnifico:MV8zMjYzMTA2XzU4MzI2OTY1XzYzNzQ3NDM4] [quote:Holy cow 72796598:MV8zMjYzMTA2XzdBRDYwRTk4] Linux is safe, don't worry about security, they said! [/quote] Thanks for the post, but I don't think a real computer security expert would claim any OS is "safe". The only safe computer is one with no power cord, no hard drive, and buried in an underground faraday cage. Linux has benefits over closed-source, proprietary OS's like Windows because its source code can be reviewed and inspected by anyone to improve it and find bugs. That makes it somewhat more challenging for someone to deliberately put in back doors like Windows. Also, even if a TCP channel is compromised it's relatively easy in Linux to build a fence around it by running the process as a non-privileged user. [/quote]
Original Message
[
link to ucrtoday.ucr.edu (secure)
]
Researchers at the University of California, Riverside have identified a weakness in the Transmission Control Protocol (TCP) of all Linux operating systems since late 2012 that enables attackers to hijack users' internet communications remotely.
Such a weakness could be used to launch targeted attacks that track users' online activity, forcibly terminate a communication, hijack a conversation between hosts or degrade the privacy guarantee by anonymity networks such as Tor.
The UCR researchers ... identified a subtle flaw (in the form of 'side channels') in the Linux software that enables attackers to infer the TCP sequence numbers associated with a particular connection with no more information than the IP address of the communicating parties.
Affects Android too! Unpatched since 2012! Linux is safe, don't worry about security, they said!
The researchers have a short video demonstrating the attack :
[
link to www.youtube.com (secure)
]
Pictures (click to insert)
General
Politics
Bananas
People
Potentially Offensive
Emotions
Big Round Smilies
Aliens and Space
Friendship & Love
Textual
Doom
Misc Small Smilies
Religion
Love
Random
View All Categories
|
Next Page >>