/dev/random

This frozen picture comes from a reportage broadcasted today by TF1, a major French television channel. On the white board behind the women, we can clearly read an URL and the associated credentials. This a excellent example of “don’t do this” to be used during security awareness trainings! Source: zataz.com

A new tool has been released (version 0.1) today on code.google.com: OpenDLP. “DLP”, “Data Loss Protection” or “Data Leak Protection”, a buzz-word! Even if the problem is real and critical for some organizations, my opinion is the following: Instead of spending money in expensive solutions (and DLP solutions ARE expensive!), spend some money to deploy [...]

Data leakage is a major risk for many organizations today. As more and more data are used in a digital format, it’s easy to copy them or send them outside the security perimeter. Leaked data can have a major impact on the business (loss of revenue, loss of confidentiality or loss of credibility – customers, [...]

A few months ago, I posted an article about how to add extra logging facilities to the Bash shell. For specific users, it can be useful to have a complete history of their activity on your server (for audit purposes). The first release candidate of Bash 4.1 is available for a few days. Good surprise, [...]

Internet is a infinite source of free software! If you are looking for a small tool to automate tasks, convert files or make your life easier, there are chances that somebody around the world already wrote some code and distributed it for free on the Net. But, on a security point of view, can you [...]