j_lagof

Hint: Rackspace lost badly (21% of the sites they hosted got blacklisted in the last 90 days). Netsol won with only 1% of sites blacklisted...

You mean yesterday?

Apple has been doing way worse things and nobody (of importance) seems to care.

It is funny that Windows is a proprietary platform and nobody (government) ever allowed them this kind of control/restriction.

Now Apple/Twitter/Facebook is going crazy and nobody does nothing...

OSSEC is a powerful open source HIDS. If you are not using it on your servers, you should be.

More like a lessons learned from the Apache defacement.

Very good article and awesome mention of OSSEC. Good to see it gaining some attention.

Very interesting research describing a simple way to detect which version a web app is running.

They just fingerprint a few css/js files, get their md5sums and create a list of them for each version...

Great initiative. Note that for 3l33t (severe) bugs found they will pay $1337 instead.

I agree, it is the same thing as buying a piece of land and waiting for the area to become more popular and sell later...

The issue comes from the fact that buying domains are very cheap and easy, but that's other problem.

*btw, I am not saying that I approve people with 1000s of domains just waiting for someone interested, but the business idea is the same.

Most of these look like just extensions of the "big" ones, optimized for specific purposes...

I will recommend Linode, for me it has been working great, no downtimes, good support ,etc.

I also having a good experience with GoDaddy, but it seems that I am an exception and not the rule, since everyone complains about it.

Good luck!

I really think email spam is a problem already solved (at least for most end users). I use gmail, yahoo and hotmail (for different accounts) and I rarely get any spam.

Now, I know the anti-spam tools are working very hard to stay updated, but using the spammers tactic is too much. Why change if the current research/defense tools are working?

But is there any company offering that? Tracking that via a mailing list is much harder...

I agree. What I said is that I do something similar to it, not exactly the same.. I have a little shell script that I run:

./pass-site.sh http://facebook.com

" #!/bin/sh

SITE=$1 stty -echo read UPASS stty echo PASS=`sha1 "$SITE $UPASS"` echo "PASS: $PASS" "

usual software bugs: One that the developer can't fix and will blame the user for that :)

I still prefer schemes without any kind of software for my passwords... Something like that:

http://blog.sucuri.net/2009/10/password-security-without-pas...

A javascript app for that would be good, btw :)

Very true, specially monitoring the monitors :)

I think the main reason is that Linux users are most likely not willing to pay for something like that, while Mac users are used to pay for everything..

I use it too.. My "top" arsenal is composed of top, atop (for apache) and innotop.

It works with anything but Google chrome.. I just learned that it doesn't support SOCKS proxy :/

I think this is more for personal use (at home) and if you use it at a office, you must be certain that you dont have anything non safe for work :)

No, I don't think so...

The only company focused on the Linux Desktop is Canonical (for Ubuntu) while all others only care about servers...

Plus, other companies don't see Linux as very important for the end user, so you end up with cameras, printers, scanners, etc that don't work on Linux.

My say is that it will continue to grow with the geek community, but not for the average users.

That's why most companies have a terrible customer support...