Israel Junior

Do lwn.net:

Dan Kaminsky has found a flaw in the design of DNS that can allow cache poisoning as an article at Securosis.com details. This has lead to a CERT advisory as well as a coordinated release of patched DNS servers from all affected vendors. Evidently source port randomization is helpful in alleviating the problem. “The issue is extremely serious, and all name servers should be patched as soon as possible. Updates are also being released for a variety of other platforms since this is a problem with the DNS protocol itself, not a specific implementation. The good news is this is a really strange situation where the fix does not immediate reveal the vulnerability and reverse engineering isn’t directly possible.” That last claim seems rather strong, time will tell, but it makes sense to be prepared to upgrade affected servers as soon as distributions make them available.

Em português, no blog do Petryx.

Semana passada encontrei um post bem interessante sobre segurança em bancos de dados PostgreSQL. O artigo é velhinho e vai fazer aniversário em 18 de agosto, mas as dicas são de extrema importância quando se trata de acesso aos dados.

Algumas das dicas me ajudaram e ajudaram o pessoal no meu trabalho a deixar o acesso ao banco mais seguro, já que o PostgreSQL dá permissão de uso nas tabelas do dicionário de dados ao schema public, permitindo que qualquer usuário veja os nomes das tabelas existentes no banco.