Category Archives: Security

RedHat hacked

RedHat just announced a breach (RHSA-2008:0855-6):

Last week Red Hat detected an intrusion on certain of its computer systems and took immediate action. While the investigation into the intrusion is on-going, our initial focus was to review and test the distribution channel we use with our customers, Red Hat Network (RHN) and its associated
security measures. Based on these efforts, we remain highly confident that our systems and processes prevented the intrusion from compromising RHN or the content distributed via RHN and accordingly believe that customers who keep their systems updated using Red Hat Network are not at risk

SSH was targeted by the attackers:

In connection with the incident, the intruder was able to sign a small number of OpenSSH packages relating only to Red Hat Enterprise Linux 4 (i386 and x86_64 architectures only) and Red Hat Enterprise Linux 5 (x86_64 architecture only). As a precautionary measure, we are releasing an updated version of these packages, and have published a list of the tampered packages and how to detect them at http://www.redhat.com/security/data/openssh-blacklist.html

Check your packages.

BioDiesel from the wastelands

Wikipedia points out that Jatropha curcas is easy to grow and convert into fuel:

The seeds contain 30% oil [8]that can be processed to produce a high-quality biodiesel fuel, usable in a standard diesel engine. […] Cultivation is uncomplicated. Jatropha curcas can grow in wastelands and grows almost anywhere, even on gravelly, sandy and saline soils. It can thrive on the poorest stony soil and grow in the crevices of rocks. Complete germination is achieved within 9 days.

Again biodiesel presents a major paradigm shift for islands and other remote areas in need of a fuel source.

Oil content varies from 28% to 30% and 94% extraction, one hectare of plantation will give 1.6t (metric tonne) of oil if the soil is average.

This plant is unfit for human consumption as food, requires no pesticides, and it grows even in the desert.

Fish market and identity

The child of an expert in genetic barcoding decided to apply his father’s teachings to fish in New York. Reuters tells a story from the perspective of “teenage sleuths”:

The two classmates from New York’s Trinity school collected and sent off 60 fish samples to the University of Guelph in Canada. Of 56 samples that could be identified by a four-year-old DNA identification technique, 14 were mislabeled.

In all cases, the fish was labeled as a more costly type, apparently ruling out simple chance. It was the first known student use of DNA barcoding technology in a public market.

White tuna turned out to be Mozambique tilapia, while Mediterranean red mullet was actually a goatfish from the Caribbean.

Hard to reconcile the finer points of these fish with the American habit of sloshing everything into unlabeled/unmarked wasabi and soy sauce.

I wonder what would happen if these prodigies of identity management focused their research on vegetables?

“It bears on a number of issues — food safety, fraud and protection of endangered species,” said Bob Hanner of Guelph, who oversaw the analysis of samples. Other imports, such as meat, could also benefit from DNA checks.

Scientists have catalogued barcodes for about 46,000 animal species so far (www.barcodinglife.org). The barcoders are looking to raise $150 million to create 5 million records from 500,000 animal species by 2014 — or a cost of $30 each.

Strangely enough they only seem interested in animal species. I smell an ulterior motive.