bk99.de entertain the web since 1997

Blog 2009

15 posts

Projects, Linux, networks, systems, finds and internet standards from 2009.

IPv6: getting over the first hurdles

Jens Link introduces IPv6 and explains addresses, prefixes, automatic configuration and the practical differences from familiar IPv4 operations. IPv6 works more easily as a new operating model than as an enlarged IPv4. Experimenting early prevents a hectic migration later under address pressure.

Read the full post

Fixes for security hole in the Linux kernel [second update]

In August 2009 kernels 2.6.27.30 and 2.6.30.5 appeared, closing a hole that had existed since 2001 through which normal users could gain root privileges. Debian and Fedora delivered updates immediately and Ubuntu followed a day later, while Red Hat and SUSE initially only offered workarounds. Red Hat recommended disabling the affected network protocols, which rendered the public exploit ineffective.

Read the full post

Critical hole in the Linux kernel affects all versions since 2001

In 2009 Tavis Ormandy and Julien Tinnes from Google found a hole that affected all Linux kernels 2.4 and 2.6 since May 2001 and allowed local root privileges. With rarely used protocols such as Bluetooth, PPPoX or ISDN, pointers in the socket operations remained uninitialised, which could be exploited via sock_sendpage. Brad Spengler published the exploit “wunderbar_emporium”, which worked on a current Ubuntu 8.10.

Read the full post

Network security tool Nessi 2 becomes open source

In January 2009 TU Berlin released the network security simulator Nessi 2 as free software under the Apache License 2.0. Administrators can use it to model networks, simulate attacks using profiles and test countermeasures. Nessi 2 was created at the DAI-Labor on the basis of software for Deutsche Telekom Laboratories.

Read the full post

Sun Java System Web Server as open source

In January 2009, with the Open Web Server, Sun released a free version of its Java System Web Server 7.0 under a BSD licence. It was meant to scale well, handle thousands of simultaneous connections and work together with Glassfish, Tomcat or Geronimo. Compared with the commercial version, however, the administration interface, SNMP, WebDAV and JSP were missing.

Read the full post

Linux kernel 2.6.29 gets two new file systems

In January 2009 the file systems Btrfs and Squashfs were accepted into the development branch for Linux 2.6.29. Squashfs compresses files, directories and inodes and is used mainly for live CDs and embedded systems, but offers no write access. Oracle’s Btrfs was regarded as a possible future standard but was not yet production-ready, which is why Ext4 was to follow Ext3 for the time being.

Read the full post