Free Republic

A serious vulnerability in the popular OpenSSL cryptographic library has been discovered that allows attackers to steal information unnoticed. Known as the Heartbleed bug, the vulnerability allows anyone on the Internet to read the memory of systems that run vulnerable versions of OpenSSL, revealing the secret authentication and encryption keys to protect the traffic. User names, passwords and the actual content of the communications can also be read. ... OpenSSL recommends that uses immediately upgrade to version 1.0.1g. If that's not possible, users should recompile OpenSSL with the -DOPENSSL_NO_HEARTBEATS flag to remove the the heartbeat handshake. The 1.0.2 version of...

A former government contractor says that the FBI installed a number of back doors into the encryption software used by the OpenBSD operating system. The allegations were made public Tuesday by Theo de Raadt, the lead developer in the OpenBSD project. DeRaadt posted an e-mail sent by the former contractor, Gregory Perry, so that the matter could be publicly scrutinized. "The mail came in privately from a person I have not talked to for nearly 10 years," he wrote in his a posting to an OpenBSD discussion list. "I refuse to become part of such a conspiracy, and will not...

Excerpt - LAKE BUENA VISTA, Fla. — In a rare discussion on the severity of the Windows malware scourge, a Microsoft security official said businesses should consider investing in an automated process to wipe hard drives and reinstall operating systems as a practical way to recover from malware infestation. "When you are dealing with rootkits and some advanced spyware programs, the only solution is to rebuild from scratch. In some cases, there really is no way to recover without nuking the systems from orbit," Mike Danseglio, program manager in the Security Solutions group at Microsoft, said in a presentation at...

What is happening is that the CD purchase FTP ratio is out of control. People pretty much stopped purchasing CDs in quantities they used to and use the FTP mirrors instead. This lack of sales is what is causing the project to turn a small loss for the 2nd year in a row. To fulfill most development goals OpenBSD should be generating about $100K USD. With that amount of money the project can finance 1 large and 4 small hackathons per year. Pay the bills and a part-time developer to mind the shop when Theo isn't around. In an ideal...

<p>The SCO Group has announced it plans to take legal action to block Novell Inc.'s proposed purchase of SUSE Linux AG. The company claims that it has inherited a non-compete agreement, which was part of a broader agreement signed between Novell and one of SCO's ancestors, The Santa Cruz Operation Inc., when Novell sold Unix's intellectual property rights.</p>

DEAR SIR/MADAM: I AM MR. DARL MCBRIDE CURRENTLY SERVING AS THE PRESIDENT AND CHIEF EXECUTIVE OFFICER OF THE SCO GROUP, FORMERLY KNOWN AS CALDERA SYSTEMS INTERNATIONAL, IN LINDON, UTAH, UNITED STATES OF AMERICA. I KNOW THIS LETTER MIGHT SURPRISE YOUR BECAUSE WE HAVE HAD NO PREVIOUS COMMUNICATIONS OR BUSINESS DEALINGS BEFORE NOW. MY ASSOCIATES HAVE RECENTLY MADE CLAIM TO COMPUTER SOFTWARES WORTH AN ESTIMATED $1 BILLION U.S. DOLLARS. I AM WRITING TO YOU IN CONFIDENCE BECAUSE WE URGENTLY REQUIRE YOUR ASSISTANCE TO OBTAIN THESE FUNDS. IN THE EARLY 1970S THE AMERICAN TELEPHONE AND TELEGRAPH CORPORATION DEVELOPED AT GREAT EXPENSE THE...

Update: DARPA pulls funding for OpenBSD Project leader says move is retaliation for anti-war comments By Grant Gross April 18, 2003 The U.S. military has pulled funding from a project involving the OpenBSD open-source operating system, according to the operating system's project leader, and he suspects it was in retaliation for anti-war comments of his that were published in a Canadian newspaper. Theo de Raadt, leader of the OpenBSD project, said he found out Thursday that the remaining funding had been pulled on a $2.3 million Portable Open-Source Security Enhancements project at the University of Pennsylvania , run through the...

SAN JOSE, Calif. - The U.S. military's research agency cut off grant money for helping to develop a secure, free operating system after a top programmer made anti-war statements to a major newspaper. The U.S. Defense Advanced Research Projects Agency halted the contract less than two weeks after The Globe and Mail of Toronto published a story in which programmer Theo de Raadt was quoted as saying he was "uncomfortable" about the funding source. "I try to convince myself that our grant means a half of a cruise missile doesn't get built," de Raadt told the newspaper. Within a few...