Exim is a free and open source message transfer agent (MTA) developed at the University of Cambridge. It is famous on Unix and Linux systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. There is a buffer overflow in base64d() of Exim MTA that allows an attacker to run code remotely. ALL versions of Exim MTA affected by overflow vulnerability i.e. CVE-2018-6789.
Continue reading “400K+ Exim MTA affected by overflow vulnerability on Linux/Unix”
OpenSSH needs no introduction. OpenSSH is a free and open source suite of security-related software based on the SSH protocol. OpenSSH provides secure network communication and tunneling capabilities. OpenSSH gives peace of mind when communicating with Linux or Unix-like server over the Internet on the insecure network.
SSH is essential for both sysadmins and developers. The book “SSH Mastery” (2nd ed) talks about OpenSSH server, clients, encryption, public/private keys, VPNs and other security-related network-level utilities based on the Secure Shell SSH protocol.
Chomper is a free and open source Python cli for Linux desktop. It lets you block access to distracting websites for specified periods of time. The program is intended to help you with issues being productive on a desktop due to Internet distractions. One can set a period to block websites. Until that timer expires, you will be unable to access sites.
I have like over 50k+ comments posted on this site. A commenter is allowed to leave their website or Github/Twitter URL in the comment section. Unfortunately, many websites are dead creating a mess. Many are just spam and nothing else. This is not good for anyone. Here is a quick way to delete all existing comment author URLs in WordPress using mysql command line option.
WordPress version 4.4 and above use a filter called pre_get_document_title() for a customzing title for each page, post, tag, category and more. For example, I can change 404 error title using this filter. One can use the wp_title() which was formerly deprecated in version 4.4 but was returned for compatibility reasons.
FreeBSD includes software from the OpenSSL Project for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. OpenSSL has multiple vulnerabilities on a FreeBSD. Currently, no workaround is available. You need to update OpenSSL on FreeBSD version 10.x and 11.x.
The Debian project has announced an updated version of Debian 9 (codename “stretch”) and Debian 8 (codename “jessie”). One can get new updates merely running the apt command/apt-get command.
S-tui is a free and open source terminal UI for monitoring your computer. s-tui allows to monitor CPU temperature, frequency, power and utilization in a graphical way from the terminal. It is written in Python and need root permission to use the s-tui. It is useful for:
- Watch your CPU temperature/utilization/frequency/power
- See performance dips caused by thermal throttling
- No need to use X-server. Perfect for headless usage including Raspberry PI
Let us see how to install and use s-tui on a Linux based system.
The vim editor is a free and open source text editor. It is a clone of vi text editor. Vim is extremely popular among the Linux, macOS and Unix-like system users. Vim has many commands. It comes with a pretty extensive built-in manual too. One might get lost in the built-in manual. Let us see if “Mastering Vim Quickly From WTF to OMG in no time” can help a new or experienced vim user to increase productivity.
You can configure sudo command to insult user when they type the wrong password. Now, it is possible to
abuse insult the user when they enter the wrong command at the shell prompt.