ASL Kernel 2.6.32.41 updates
Now that we're nearing the finish line for the 3.0 ASL release, there has been some time for those of us that are not gifted with user interface design skills to focus on some much needed back end...
View ArticleWhy does Linux use so much memory?
Note: This article is not about Atomic Secured Linux (ASL), it is about all modern Linux based systems. This characteristic of modern Linux based systems is universal to all modern Linux systems, not...
View ArticleAre firewalls and patching enough?
We got an interesting question from a potential customer recently that I'd like to answer here. Our customer asked: "I recently purchased a new dedicated server. I was told the server is managed so...
View ArticleXMLRPC vulnerability: An oldie but a goodie
And oldie but a goodie: we run a number of honeypots as part of our ongoing efforts to learn what attackers are doing and how to best protect customers and users of our products. An interesting trend...
View ArticleZero Days: Hype or Reality?
While participating in a security conference, I was asked a very important question: "How do we protect ourselves from Zero Days?". My answer: "There is no such thing as zero days". Crazy right?...
View ArticleBlocking outbound spam and viruses with ASL
How do you prevent outbound spam and viruses from being sent from your server? Just enable the FW_OUTPUT_MTA feature in ASL.
View ArticleAtomic reaches 1 million servers and counting...
Some time back in january the Atomic repo for the first time hit 1 million active servers in a single month. These stats dont count devices behind nat, or private repo users so it could have hit this a...
View ArticleFighting Spam with ASL
Spam is a complex topic. It can be in your mailbox, your browser, your mobile device. It can be blatant and obvious like a flashing popup, or silent and nefarious, hijacking banners and redirecting...
View ArticleStopping symlink attacks with ASL
This isnt a new attack, but we're seeing it used more often so we wanted to highlight a feature we've had in ASL for over a year to stop this. Attackers discovered a way to get access to files on a...
View ArticleAtomicorp Threat Intelligence System
As some users may have noticed we quietly added a new feature to Atomic Secured Linux (ASL), the Atomicorp Threat Intelligence system. Right now the TI is only applied to web events, but we will be...
View Article
