FILES DOWNLOAD: security

Showing posts with label security. Show all posts

Thursday, October 29, 2015

Suspicious TrueCrypt Announcement Declares The Tool Insecure, Development Stopped

TrueCrypt was an application which could be used to create virtual encrypted disks within a file or encrypt entire partitions or storage devices. I said "was" because Truecrypt's homepage started redirecting to its SourceForge page and a warning is displayed at the top of the page:

"WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

This page exists only to help migrate existing data encrypted by TrueCrypt.

The development of TrueCrypt was ended in 5/2014 after Microsoft terminated support of Windows XP. Windows 8/7/Vista and later offer integrated support for encrypted disks and virtual disk images. Such integrated support is also available on other platforms (click here for more information). You should migrate any data encrypted by TrueCrypt to encrypted disks or virtual disk images supported on your platform".

And then, the page goes on, explaining how to migrate your data from TrueCrypt to BitLocker.

On a first look, this doesn't seem legit because of the redirection (why not change its homepage?), the message (if there are security issues, why not fix them or at least try to? - also, a recent security audit didn't reveal major issues though more audits were pending) and because of the alternative the page recommends: BitLocker, a proprietary full disk encryption feature included with Windows, which poses quite a few security concerns itself.

The TrueCrypt SourceForge page now hosts a new version of TrueCrypt which contains warnings that the program isn't safe to use. Also, the application was changed so that it allows users to decrypt data but not to create new volumes.

There are various speculations as to what actually happened with TrueCrypt, including scenarios in which the NSA had pressured the developers into doing this or that they've refused to add NSA backdoors. On the other hand, Matthew Green, a professor specializing in cryptography at Johns Hopkins University and one of the people that worked on the TrueCrypt audit, says that he thinks this is legit.

Here are some interesting articles / comments on this topic:

What do you think?

ownCloud Ubuntu Package Affected By Multiple Critical Security Issues, Nobody To Fix It [Updated]

ownCloud developer Lukas Reschke has sent an email to the Ubuntu Devel mailing list, requesting that ownCloud (server) is removed from the Ubuntu repositories because the package is old and there are multiple critical security bugs for which no fixes have been backported. He adds that:

"Those security bugs allows an unauthenticated attacker to gain complete control about the web server process".

However, packages can't be removed from the Ubuntu repositories for an Ubuntu version that was already released, that's why the package was removed from Ubuntu 14.10 (2 days before its release) but it's still available in the Ubuntu 14.04 and 12.04 repositories (ownCloud 6.0.1 for Ubuntu 14.04 and ownCloud 5.0.4 for Ubuntu 12.04, while the latest ownCloud version is 7.0.2).

Furthermore, the ownCloud package is in the universe repository and software in this repository "WILL NOT receive any review or updates from the Ubuntu security team" (you should see this if you take a look at your /etc/apt/sources.list file) so it's up to someone from the Ubuntu community to step up and fix it. "If nobody does that, then it unfortunately stays the way it is", says Marc Deslauriers, Security Tech Lead at Canonical.

You can follow the discussion @ Ubuntu Devel mailing list.

So, until (if) someone fixes this, if you're using ownCloud from the Ubuntu repositories, you should either remove it or upgrade to the latest ownCloud from its official repository, hosted by the openSUSE Build Service:

For Ubuntu 14.04:

sudo sh -c "echo 'deb http://download.opensuse.org/repositories/isv:/ownCloud:/community/xUbuntu_14.04/ /' >> /etc/apt/sources.list.d/owncloud.list"
wget http://download.opensuse.org/repositories/isv:ownCloud:community/xUbuntu_14.04/Release.key
sudo apt-key add - < Release.key  
sudo apt-get update
sudo apt-get install owncloud

For Ubuntu 12.04:

sudo sh -c "echo 'deb http://download.opensuse.org/repositories/isv:/ownCloud:/community/xUbuntu_12.04/ /' >> /etc/apt/sources.list.d/owncloud.list"
wget http://download.opensuse.org/repositories/isv:ownCloud:community/xUbuntu_12.04/Release.key
sudo apt-key add - < Release.key  
sudo apt-get update
sudo apt-get install owncloud

Update 27 October: Jonathan Riddell has updated ownCloud with empty packages that point to the openSUSE Build Service and juju. The packages are currently awaiting approval (for Ubuntu 14.04 and 12.04).

Encrypt DNS Traffic In Ubuntu With DNSCrypt [Ubuntu PPA]

This article was posted a while back but I've decided to repost it because there's a new PPA that you can use to install dnscrypt-proxy in Ubuntu (14.10, 14.04 and 12.04) and also, some parts of the article needed to be updated.

DNSCrypt is a protocol for securing communications between a client and a DNS resolver, preventing spying, spoofing or man-in-the-middle attacks. To use it, you'll need a tool called dnscrypt-proxy, which "can be used directly as your local resolver or as a DNS forwarder, authenticating requests using the DNSCrypt protocol and passing them to an upstream server".

Thanks to Pascal Mons (work based on Sergey "Shnatsel" Davidoff's initial PPA, which doesn't have packages for Ubuntu 14.04 or 14.10 right now), you can easily install it Ubuntu. His packages use 127.0.0.2 as the local IP address so it doesn't interfere with Ubuntu's default setup. Also, for extra security, the packages use a dedicated system user, with no privileges - DNSCrypt will chroot to this user's home directory and drop root privileges for this user's uid as soon as possible.

The default DNSCrypt-enabled resolver used by Pascal's package is DNSCrypt.eu Resolver #1 @ The Hague, Holland, but this, along with other settings, can be changed by editing the /etc/default/dnscrypt-proxy configuration file (use "sudo service dnscrypt-proxy restart" after making changes to the configuration file). A list of public DNS resolvers supporting DNSCrypt can be found HERE (note that to get to the actual provider name, address and public key, you need to scroll to the right - annoying, I know).

According to Pascal, he didn't use the US based OpenDNS resolver, because it keeps logs of the websites you visit and it hijacks the homepage on all browsers, redirecting any URL bar search to its own servers in some cases, which does not happen with the DNSCrypt.eu servers.

If you want to add DNSCrypt support to your own public or private resolver, check out DNSCrypt-Wrapper, a server-side dnscrypt proxy that works with any name resolver.

Install DNSCrypt (dnscrypt-proxy) in Ubuntu / Linux Mint via PPA

1. To add Pascal's DNSCrypt PPA and install dnscrypt-proxy in Ubuntu, Linux Mint, elementary OS or other Ubuntu-based Linux distributions (including armhf), use the following commands:

sudo add-apt-repository ppa:anton+/dnscrypt
sudo apt-get update
sudo apt-get install dnscrypt-proxy

Note: the PPA description provides information on how to check the authenticity of the code used for building the packages.

2. After installing DNSCrypt, you need to set your network connection DNS server to 127.0.0.2.

To do this in Unity, from the Network Manager indicator select Edit Connections, then select the connection and click Edit, switch to the IPv4 Settings tab and:

- if you're using Manual (static IP) as the "Method", enter "127.0.0.2" under "DNS servers" (and remember / note your original DNS server in case you want to go back to it), then click "Save":

- if you're using "Automatic (DHCP)" as the "Method", switch it to "Automatic (DHCP) addresses only" and enter "127.0.0.2" under "DNS servers", then click "Save":

3. And finally, restart your network connection (under Unity: select Network indicator > Enable Networking twice to disable and then re-enable it) and web browser.

You may want to check if the "127.0.0.2" DNS is actually in use (it needs to be the only DNS) - to do this in Unity, from the Network indicator select Connection Information.

Because the dnscrypt-proxy packages from Pascal's PPA don't use OpenDNS, you can't check to see if the DNS are used via the "dig txt debug.opendns.com" command or by visiting OpenDNS' test pages. However, you can check this by visiting https://dnsleaktest.com/ and running a DNS check - if you didn't change the default dnscrypt-proxy package resolver, it should display something like this:

Another way of checking if dnscrypt-proxy is working is by using the following command:

sudo tcpdump -i NETWORK-INTERFACE dst host 176.56.237.171

... and then visiting some website in your web browser.

(where NETWORK-INTERFACE is your active network interface like eth0, p5p1, etc. - you can find it using "ifconfig" -, and "176.56.237.171" is the default resolver used by Pascal's packages - if you've used a different one, change it in the command above with yours!)

The command output should look like this:

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on p5p1, link-type EN10MB (Ethernet), capture size 262144 bytes
16:14:53.142488 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512
16:14:53.142514 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512
16:14:53.291372 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512
16:14:53.291450 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512
16:14:53.464624 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512
16:14:53.464641 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512
16:14:53.751950 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512
16:14:53.815789 IP ubuntu-desktop.local.57467 > resolver1.dnscrypt.eu.https: UDP, length 512

Tip: DNSCrypt can be used with Unbound or dnsmasq (I didn't test it though) - for this and other tips, see THIS ArchWiki entry.

For more information on DNSCrypt / dnscrypt-proxy, check out the following links:

seen @ desdelinux.net, thanks to Pascal Mons for the PPA!

Tor Browser 4.5.2 Released, Install on Ubuntu / Linux Mint via PPA

Tor Browser 4.5.2 Released, Install on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS) / Linux Mint 17.2 Rafaela, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana via PPA

Tor Browser Bundle is a free and platform-independent application designed to allow users to browser the Web anonymously through the powerful Tor network on the Linux, Microsoft Windows and Mac OS X operating systems, without the need to use any third-party software.

Features at a glance

It is a portable software, allowing users to use directly from a USB flash drive, running a pre-configured web browser to protect their anonymity. The Tor software is the key component of Tor Browser Bundle, protecting users by bouncing their communications around a distributed network of relays, which are run by volunteers all around the world.

Tor Browser 4.5.2 provides a fix for the Logjam attack (https://weakdh.org/) and updates a number of Tor Browser components: Tor to version 0.2.6.9, Torbutton to version 1.9.2.6, NoScript to version 2.6.9.26 and HTTPS-Everywhere to version 5.0.5. Moreover, it fixes a possible crash on Linux and avoids breaking the Add-ons page if Torbutton is disabled.

Here is the complete changelog since 4.5.1:

All Platforms
- Update Tor to 0.2.6.9
- Update OpenSSL to 1.0.1n
- Update HTTPS-Everywhere to 5.0.5
- Update NoScript to 2.6.9.26
- Update Torbutton to 1.9.2.6
  - Bug 15984: Disabling Torbutton breaks the Add-ons Manager
  - Bug 14429: Make sure the automatic resizing is disabled
  - Translation updates
- Bug 16130: Defend against logjam attack
- Bug 15984: Disabling Torbutton breaks the Add-ons Manager
Linux
- Bug 16026: Fix crash in GStreamer
- Bug 16083: Update comment in start-tor-browser

How to : Install Tor Browser 4.5.2on Ubuntu / Linux Mint via PPA

To install Tor Browser Bundle 4.5.2 on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS) / Linux Mint 17.2 Rafaela, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana and other Ubuntu derivative systems via PPA, open a new Terminal window and bash (get it?) in the following commands:

sudo add-apt-repository ppa:upubuntu-com/tor-bundle
sudo apt-get update
sudo apt-get install tor-browser

Tor Browser Bundle 4.5.2 Removal (Optional)

To uninstall To Browser, run these commands:

sudo add-apt-repository --remove ppa:upubuntu-com/tor-bundle
sudo apt-get remove tor-browser
sudo apt-get update

Enjoy! I hope this article adding you more clarity.

Suricata 2.0.9 Available Now, Install on 12.04 Precise / 14.04 Trusty / 15.04 Vivid / 15.10 Wily via PPA

Suricata is an open source, multi-platform and totally free network intrusion prevention and detection engine developed by the Open Information Security Foundation (OISF) and its supporting vendors.

The IDS/IPS engine is multi-threaded

Suricata’s IDS/IPS engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.

It is highly scalable

You should try Suricata because its highly scalable, it recognizes most common protocols, and it can identify thousands of file types, check MD5 checksums, and extract files from archives.

Ubuntu Installation - Personal Package Archives (PPA)

The latest Suricata git/dev, stable and beta packages are available for Ubuntu in a Ubuntu PPA (launchpad).
The Suricata packages are available for the official and supported Ubuntu OS versions both in 32bit and 64bit:

12.04 Precise
14.04 Trusty
15.04 Vivid
15.10 Wily

https://launchpad.net/~oisf/+archive/suricata-stable

Installation
To setup to install the latest stable Suricata, do:

sudo add-apt-repository ppa:oisf/suricata-stable
sudo apt-get update

Then you can install the latest stable Suricata with:

sudo apt-get install suricata

or for the Suricata package with build in (enabled) debugging!

sudo apt-get install suricata-dbg

After installation, continue with the Basic Setup.

Upgrading
Upgrading is simple:

sudo apt-get update
sudo apt-get upgrade

Remove
To remove Suricata from your system:

sudo apt-get remove suricata

The source is available now. Binary packages are in the process of being built, and will appear soon at their respective download locations.

Angry IP Scanner 3.3.3 Released, Install on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS), Debian 8 "jessie", Debian 7 "wheezy", Linux Mint 17.2 Rafaela, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana, Fedora 22, Fedora 21, OpenSUSE 13.2, OpenSUSE 13.1, Mageia 5, Mageia 4 and REDHAT

Angry IP Scanner (or simply ipscan) is an open-source and cross-platform network scanner designed to be fast and simple to use. It scans IP addresses and ports as well as has many other features.

It is widely used by network administrators and just curious users around the world, including large and small enterprises, banks, and government agencies. It runs on Linux, Mac OS X, Windows and possibly supporting other platforms as well.

Download version 3.3.3 below or browse all 3.x releases

DEB Package for Ubuntu/Debian/Mint, 64-bit
RPM Package for Fedora/RedHat/Mageia/openSUSE, 64-bit
DEB Package for Ubuntu/Debian/Mint, 32-bit
RPM Package for Fedora/RedHat/Mageia/openSUSE, 32-bit

Install Angry IP Scanner 3.3.3 on Ubuntu / Debian / Linux Mint :

To Install/Update Angry IP Scanner 3.3.3 on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS), Ubuntu 13.10/13.04/12.04, Linux Mint 17.2 Rafaela, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana, Linux Mint 13 Maya, Pinguy OS 14.04, Elementary OS 0.3 Freya, Elementary OS 0.2 Luna, Peppermint Five, Deepin 2014, LXLE 14.04, Linux Lite 2.0, Linux Lite 2.2 and other Ubuntu derivative systems, open a new Terminal window and bash (get it?) in the following commands:

For 64 bit :

$ sudo apt-get install openjdk-7-jdk ant rpm wine
$ sudo wget http://github.com/angryziber/ipscan/releases/download/3.3.3/ipscan_3.3.3_amd64.deb
$ sudo dpkg -i ipscan_3.3.3_amd64.deb

For 32 bit :

$ sudo apt-get install openjdk-7-jdk ant rpm wine
$ wget http://github.com/angryziber/ipscan/releases/download/3.3.3/ipscan_3.3.3_i386.deb
$ sudo dpkg -i ipscan_3.3.3_i386.deb

In case “dpkg” indicates missing dependencies, complete the installation by executing the following command:

$ sudo apt-get install -f

Install Angry IP Scanner 3.3.3 on Fedora / Mageia / OpenSUSE / REDHAT :

To Install/Update Angry IP Scanner 3.3.3 on Fedora 22, Fedora 21, OpenSUSE 13.2, OpenSUSE 13.1, Mageia 5, Mageia 4 and REDHAT derivative systems, open a new Terminal window and bash (get it?) in the following commands:

For OpenSUSE 64 bit :

$ wget http://github.com/angryziber/ipscan/releases/download/3.3.3/ipscan-3.3.3-1.x86_64.rpm
$ sudo zypper install ipscan-3.3.3-1.x86_64.rpm

For OpenSUSE 32 bit :

$ wget http://github.com/angryziber/ipscan/releases/download/3.3.3/ipscan-3.3.3-1.i386.rpm
$ sudo zypper install ipscan-3.3.3-1.i386.rpm

Fedora 64 bit :

$ wget http://github.com/angryziber/ipscan/releases/download/3.3.3/ipscan-3.3.3-1.x86_64.rpm
$ sudo yum install ipscan-3.3.3-1.x86_64.rpm

Fedora 32 bit :

$ wget http://github.com/angryziber/ipscan/releases/download/3.3.3/ipscan-3.3.3-1.i386.rpm
$ sudo yum install ipscan-3.3.3-1.i386.rpm

Running
Make sure you have Oracle Java or OpenJDK installed - check your distribution. GCJ is not recommended.

DEB and RPM packages will install appropriate 'desktop' files, so Angry IP Scanner will appear in the applications menu, under either Internet or Networking. Alternatively, you can just type ipscan to launch the application.
Jar files are launched by either double-clicking or typing java -jar jar-file.

The source is available now. Binary packages are in the process of being built, and will appear soon at their respective download locations.

Suricata 2.0.6 released, Available for Ubuntu, Fedora, OpenSUSE, RHEL, Slackware, Devbian, Linux Mint, Mac OSX, FreeBSD and Windows

Suricata 2.0.6 released, Available for Ubuntu, Fedora, OpenSUSE, RHEL, Slackware, Devbian, Linux Mint, Mac OSX, FreeBSD and Windows

Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by the OISF and its supporting vendors.

Suricata is without no doubt the best IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) software ever built, powered only by open source technologies.

What's New in This Release:

Bug #1364: evasion issues
Bug #1337: output-json: duplicate logging
Bug #1325: tls detection leads to tcp stream reassembly sequence gaps (IPS)
Bug #1192: Suricata does not compile on OS X/Clang due to redefinition of string functions
Bug #1183: pcap: cppcheck warning

1. Highly Scalable

Suricata is multi threaded. This means you can run one instance and it will balance the load of processing across every processor on a sensor Suricata is configured to use. This allows commodity hardware to achieve 10 gigabit speeds on real life traffic without sacrificing ruleset coverage.

2. Protocol Identification

The most common protocols are automatically recognized by Suricata as the stream starts, thus allowing rule writers to write a rule to the protocol, not to the port expected. This makes Suricata a Malware Command and Control Channel hunter like no other. Off port HTTP CnC channels, which normally slide right by most IDS systems, are child’s play for Suricata! Furthermore, thanks to dedicated keywords you can match on protocol fields which range from http URI to a SSL certificate identifier.

3. File Identification, MD5 Checksums, and File Extraction

Suricata can identify thousands of file types while crossing your network! Not only can you identify it, but should you decide you want to look at it further you can tag it for extraction and the file will be written to disk with a meta data file describing the capture situation and flow. The file’s MD5 checksum is calculated on the fly, so if you have a list of md5 hashes you want to keep in your network, or want to keep out, Suricata can find it.

Suricata has many more great features, and we hope you give it a run. It’s free, it’s fast, and it’s going to be here long term!

Suricata 2.0.6 released, Available for Ubuntu, Fedora, OpenSUSE, RHEL, Slackware, Devbian, Linux Mint, Mac OSX, FreeBSD and Windows

to installation Suricata 2.0.6 stable on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS), Ubuntu 13.10/13.04/12.04, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana, Linux Mint 13 Maya, Pinguy OS 14.04, Elementary OS 0.3 Freya, Elementary OS 0.2 Luna, Peppermint Five, Deepin 2014, LXLE 14.04, Linux Lite 2.0, Linux Lite 2.2 and other Ubuntu derivative systems via PPA, open a new Terminal window and bash (get it?) in the following commands:

PPA : https://launchpad.net/~oisf/+archive/suricata-stable

sudo add-apt-repository ppa:oisf/suricata-stable
sudo apt-get update

Then you can install the latest stable Suricata with:

sudo apt-get install suricata

or for the Suricata package with build in (enabled) debugging!

sudo apt-get install suricata-dbg

To remove Suricata from your system:

sudo apt-get remove suricata

For Other OS and other linux distro you can follow link this bellow :

Linux/Mac/FreeBSD/UNIX/Windows Source: suricata-2.0.6.tar.gz
PGP Signature: suricata-2.0.6.tar.gz.sig
Windows (win32) installer: Suricata-2.0.5-1-32bit.msi

Home Suricata

Tor Browser 4.5a3 is based on Firefox ESR 31.4.0, which features important security updates to Firefox. Its updater now contains the code for verifying signed update files and does not accept unsigned ones anymore. Moreover, this release includes an updated Tor, 0.2.6.2-alpha, an updated meek, 0.15, which is now working again, and a bunch of additional improvements and bugfixes.

The third alpha release of the 4.5 series is available from the extended downloads page and also from our distribution directory.

Here is the changelog since 4.5-alpha-2:

All Platforms
- Update Firefox to 31.4.0esr
- Update Tor to 0.2.6.2-alpha
- Update NoScript to 2.6.9.10
- Update HTTPS Everywhere to 5.0developement.2
- Update meek to 0.15
- Update Torbutton to 1.8.1.3
  - Bug 13998: Handle changes in NoScript 2.6.9.8+
  - Bug 14100: Option to hide NetworkSettings menuitem
  - Bug 13079: Option to skip control port verification
  - Bug 13835: Option to change default Tor Browser homepage
  - Bug 11449: Fix new identity error if NoScript is not enabled
  - Bug 13881: Localize strings for tor circuit display
  - Bug 9387: Incorporate user feedback
  - Bug 13671: Fixup for circuit display if bridges are used
  - Translation updates
- Update Tor Launcher 0.2.7.1
  - Bug 14122: Hide logo if TOR_HIDE_BROWSER_LOGO set
  - Translation updates
- Bug 13379: Sign our MAR files
- Bug 13788: Fix broken meek in 4.5-alpha series
- Bug 13439: No canvas prompt for content callers

How to install Tor Browser 4.5a3 on Ubuntu/Linux Mint via PPA

To Install/Update Tor Browser 4.5a3 on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS), Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana via PPA, open a new Terminal window and bash (get it?) in the following commands :

sudo add-apt-repository ppa:webupd8team/tor-browser
sudo apt-get update
sudo apt-get install tor-browser

Cyphertite 2.0.4 released, The most secure, encrypted and powerful tar-like remote archive application for UNIX

Cyphertite is a free, cross-platform and open source command-line application designed to enable users to easily create remote and highly encrypted backups. It can also be used as an encrypted file storage powered by the strongest standards-compliant cryptography available, Cyphertite real privacy and protection, with no questionable security protocols.

Cyphertite 2.0.4 Supported on Linux, BSD, Windows and Mac OS X

Cyphertite is a true cross-platform application, designed to work on numerous operating system, including GNU/Linux (Ubuntu, openSUSE, Fedora), BSD (FreeBSD and OpenBSD), and Microsoft Windows (Windows 8, Windows 7, Vista, XP, Server 2003, and Server 2008). Supported hardware architectures include 32 and 64-bit.

What's new in Cyphertite 2.x.x:

The Windows version has a new look and feel.
The landing page is broken up into four “live” tiles that update in real-time to provide contextual information to the user.
The tiles also provide navigation into the four major areas in the product: Create, Browse, Status, and Settings.
This release strives to make each of these areas clear, concise, and linear.

The source is available now. Binary packages are in the process of being built, and will appear soon at their respective download locations.

Clam AntiVirus 0.98.5 is released, you can install in Linux Ubuntu, Fedora, openSUSE, debian, Linux Mint, REDHAT, FreeBSD, Mandrive and gentoo

Clam AntiVirus (also known as ClamAV) is a multi-platform and open source anti-virus software that runs on top of the UNIX/Linux command-line interface and can be easily integrated into any mail server for virus scanning of attachments.

Key features include a command-line scanner, fast and multi-threaded daemon with support for on-access scanning, Milter interface for sendmail, built-in support for a plethora of mail file formats, as well as advanced database updater with support for digital signatures and scripted updates.

A virus scanner C library, on-access scanning (Linux and FreeBSD), built-in support for almost all mail file formats, built-in support for a wide range of archive formats, including zip, tar, rar, gzip, bzip2, cabinet, ole2, chm, sis, binhex, etc., are also supported by Clam AntiVirus.

What new in version 0.98.5 :

Instruct OpenSSL to allow MD5 when in FIPS-compliant mode.
Adjust the logic surrounding adjusting the PE section sizes. This fixes a crash with maliciously crafted yoda's crypter files and also improves virus detections for PE files.

To Install Clam AntiVirus 0.98 ntu, Fedora, openSUSE, debian, Linux Mint, REDHAT, FreeBSD, Mandrive and gentoo you can follow or read this page .

Tor Browser Bundle 4.0.2 is out, install on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS), Ubuntu 13.10/13.04/2.04, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana, Linux Mint 13 Maya, Pinguy OS 14.04, Elementary OS 0.3 Freya, Elementary OS 0.2 Luna, Peppermint Five, Deepin 2014, LXLE 14.04, Linux Lite 2.0, Linux Lite 2.2 and other Ubuntu derivative systems via PPA

The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked.

The Tor Browser lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is self-contained.

What's New in This Release:

Update Firefox to 31.3.0esr
Update NoScript to 2.6.9.5
Update HTTPS Everywhere to 4.0.2
Update Torbutton to 1.7.0.2
Bug 13019: Synchronize locale spoofing pref with our Firefox patch
Bug 13746: Properly link Torbutton UI to thirdparty pref.
Bug 13742: Fix domain isolation for content cache and disk-enabled
browsing mode
Bug 5926: Prevent JS engine locale leaks (by setting the C library
locale)
Bug 13504: Remove unreliable/unreachable non-public bridges
Bug 13435: Remove our custom POODLE fix (fixed by Mozilla in 31.3.0esr)

Features at a glance

It is a portable software, allowing users to use directly from a USB flash drive, running a pre-configured web browser to protect their anonymity. The Tor software is the key component of Tor Browser Bundle, protecting users by bouncing their communications around a distributed network of relays, which are run by volunteers all around the world.

To Install/Update xxx on Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS), Ubuntu 13.10/13.04/2.04, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana, Linux Mint 13 Maya, Pinguy OS 14.04, Elementary OS 0.3 Freya, Elementary OS 0.2 Luna, Peppermint Five, Deepin 2014, LXLE 14.04, Linux Lite 2.0, Linux Lite 2.2 and other Ubuntu derivative systems, open a new Terminal window and bash (get it?) in the following commands:

i386/32-bit Architectures

sudo add-apt-repository ppa:upubuntu-com/tor
sudo apt-get update
sudo apt-get install tor-browser
sudo chown $USER -Rv /usr/bin/tor-browser/

Amd64/64-bit Architectures

sudo add-apt-repository ppa:upubuntu-com/tor64
sudo apt-get update
sudo apt-get install tor-browser
sudo chown $USER -Rv /usr/bin/tor-browser/

The source is available now (32 & 64 Bit ). Binary packages are in the process of being built, and will appear soon at their respective download locations.

EncFS 1.8 RC1 Available For Download

EncFS is a FUSE-based cryptographic filesystem which encrypts individual files. As some of you might know, an EncFS security audit that was conducted in February 2014, revealed some potential vulnerabilities:

EncFS is probably safe as long as the adversary only gets one copy of the ciphertext and nothing more. EncFS is not safe if the adversary has the opportunity to see two or more snapshots of the ciphertext at different times. EncFS attempts to protect files from malicious modification, but there are serious problems with this feature.

And that's understandable since the last stable EncFS version was released back in December 2011. But that also means that the tool needs an update badly and a first step in this direction was made recently, with the release of EncFS 1.8 RC1.

The first EncFS 1.8 release candidate fixes two of the potential vulnerabilities mentioned in the security audit and brings a few other improvements:

improve automatic test converage: also test reverse mode (make test)
add per-file IVs based on the inode number to reverse mode to improve security
add automatic benchmark (make benchmark)
compare MAC in constant time
add --nocache option
lots of fixes to make building on OSX easier

Unfortunately, EncFS 1.8 RC1 doesn't fix all the potential vulnerabilities, but more should come with future release candidates - see the EncFS GitHub issues page for more information.

More information on EncFS:

The tool is especially useful to encrypt private files before syncing them with various cloud storage services such as Dropbox (without encrypting the whole cloud storage folder):

Note: EncFS doesn't come with a GUI, the tool in the screenshot above is called GNOME EncFS Manager.

Build EncFS 1.8 RC1 in Ubuntu or Linux Mint

As I said above, there are still some potential vulnerabilities so you may want to wait until all are fixed. But if you want to install the latest EncFS 1.8 RC1 anyway, here's how to build it under Ubuntu or Linux Mint.

1. Enable source code repositories:

in Ubuntu: enable "Source code" in Software & Updates (Ubuntu Software tab), then run "sudo apt-get update";
in Linux Mint: under Software Sources, check the box next to "Enable source code repositories" (Official Repositories tab), then run "sudo apt-get update".

2. Download the latest EncFS and extract it.

3. In the extracted EncFS directory, run the following commands to build EncFS:

sudo apt-get build-dep encfs
autoreconf -if
./configure --prefix=/usr --with-boost-libdir=/usr/lib/$(dpkg-architecture -qDEB_HOST_MULTIARCH)
make

4. Install EncFS 1.8 RC1

Now you can either install it directly or create a deb (using checkinstall) and install that, so it's easier to remove / upgrade.

To create an EncFS 1.8 deb and install it, use the following commands (in the EncFS 1.8 folder):

sudo apt-get install checkinstall
sudo checkinstall

And follow the steps. Important: when prompted, change the package name from "encfs-1.8" to just "encfs" and the version from "rc1" to "1.8~rc1".

Or, to install it directly, simply use (in the EncFS 1.8 folder):

sudo make install

FILES DOWNLOAD

Thursday, October 29, 2015

Suspicious TrueCrypt Announcement Declares The Tool Insecure, Development Stopped

Saturday, October 24, 2015

ownCloud Ubuntu Package Affected By Multiple Critical Security Issues, Nobody To Fix It [Updated]

Wednesday, October 14, 2015

Encrypt DNS Traffic In Ubuntu With DNSCrypt [Ubuntu PPA]

Install DNSCrypt (dnscrypt-proxy) in Ubuntu / Linux Mint via PPA

Tuesday, October 6, 2015

Tor Browser 4.5.2 Released, Install on Ubuntu / Linux Mint via PPA

How to : Install Tor Browser 4.5.2on Ubuntu / Linux Mint via PPA

Suricata 2.0.9 Available Now, Install on 12.04 Precise / 14.04 Trusty / 15.04 Vivid / 15.10 Wily via PPA

Angry IP Scanner 3.3.3 Released, Install on Ubuntu, Debian, Linux Mint, Fedora, OpenSUSE, Mageia and REDHAT

Install Angry IP Scanner 3.3.3 on Ubuntu / Debian / Linux Mint :

Install Angry IP Scanner 3.3.3 on Fedora / Mageia / OpenSUSE / REDHAT :

Suricata 2.0.6 released, Available for Ubuntu, Fedora, OpenSUSE, RHEL, Slackware, Devbian, Linux Mint, Mac OSX, FreeBSD and Windows

Suricata 2.0.6 released, Available for Ubuntu, Fedora, OpenSUSE, RHEL, Slackware, Devbian, Linux Mint, Mac OSX, FreeBSD and Windows

How to install Tor Browser 4.5a3 on Ubuntu/Linux Mint via PPA

How to install Tor Browser 4.5a3 on Ubuntu/Linux Mint via PPA

Cyphertite 2.0.4 is released, available for GNU/Linux (Ubuntu, openSUSE, Fedora), BSD (FreeBSD and OpenBSD), and Microsoft Windows (Windows 8, Windows 7, Vista, XP, Server 2003, and Server 2008)

Clam AntiVirus 0.98.5 is released, you can install in Linux Ubuntu, Fedora, openSUSE, debian, Linux Mint, REDHAT, FreeBSD, Mandrive and gentoo

Clam AntiVirus 0.98.5 is released, you can install in Linux Ubuntu, Fedora, openSUSE, debian, Linux Mint, REDHAT, FreeBSD, Mandrive and gentoo

Tor Browser Bundle 4.0.2 is out, install on Linux Mint 17.1 Rebecca and Ubuntu 15.04 vivid Vervet, ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr (LTS)

Features at a glance

EncFS 1.8 RC1 Available For Download

Build EncFS 1.8 RC1 in Ubuntu or Linux Mint