Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Login

Log In

[ Create a new account ]

Slashdot is powered by your submissions, so send in your scoop

Posted by CmdrTaco on Sat Apr 05, 2008 10:34 AM
from the three-of-you-will-watch dept.
os2man writes "ApacheCon Europe 2008, the official user conference of the Apache Software Foundation will be held 7 April through 11 April in Amsterdam, The Netherlands. Some of the tracks will be broadcast via live streaming: System Administration (Wednesday), Web Security (Thursday) and Web Services and Web 2.0 (Friday). There's a 99 euro registration fee for the tracks, although all keynote sessions and the opening plenary are available free of charge."
Posted by CmdrTaco on Sat Mar 15, 2008 09:53 AM
from the something-to-think-about dept.
SkiifGeek writes "Zone-H have recently posted the statistical breakdown of the collected website defacements from the last few years. Surprisingly, in 2007 more Linux servers suffered a successful attack than all versions of Windows, combined. Similarly, more Apache installations were successfully attacked than all IIS versions combined. A day after posting this data, Zone-H have questioned the appropriateness of continuing to operate the archive. Despite the valuable information that can be gleaned from the service, it may soon be lost to the world. The natural successor to the now-defunct Alldas archive of defaced websites, Zone-H's archive maintains records of over 2.6 million defaced sites but may be shut down due to the continuous accusations of impropriety leveled against them any time they disclose and mirror a reported defacement."
Posted by Zonk on Thu Jan 24, 2008 03:46 PM
from the duck-and-cover-like-tommy-the-turtle dept.
lisah writes "Reports are beginning to surface that some Web servers running Linux and Apache are unwittingly infecting thousands of computers, exploiting vulnerabilities in QuickTime, Yahoo! Messenger, and Windows. One way to tell if your machine is infected is if you're unable to create a directory name beginning with a numeral. Since details are still sketchy, the best advice right now is to take proactive steps to secure your servers. 'We asked the Apache Software Foundation if it had any advice on how to detect the rootkit or cleanse a server when it's found. According to Mark Cox of the Apache security team, "Whilst details are thin as to how the attackers gained root access to the compromised servers, we currently have no evidence that this is due to an unfixed vulnerability in the Apache HTTP Server." We sent a similar query to Red Hat, the largest vendor of Linux, but all its security team could tell us was that "At this point in time we have not had access to any affected machines and therefore cannot give guidance on which tools would reliably detect the rootkit."'"
Posted by kdawson on Sun Dec 16, 2007 11:08 PM
from the confluence-of-interests dept.
jschauma writes "Yahoo published a press release announcing that it has become a platinum sponsor of the Apache Software Foundation. In their company blog, Yahoo points out their particular interest in the Apache projects Lucene and Hadoop, and that they have hired Doug Cutting, creator of both projects and VP at Apache. (Lucene powers the search on Wikipedia; Yahoo also provides hosting capacity to Wikimedia.)"
Posted by CmdrTaco on Mon Aug 06, 2007 10:16 AM
from the trolls-rejoice-in-netcraft-story dept.
benjymouse quotes this month's netcraft survey "In the August 2007 survey we received responses from 127,961,479 sites, an increase of 2.3 million sites from last month. Microsoft continues to increase its web server market share, adding 2.6 million sites this month as Apache loses 991K hostnames. As a result, Windows improves its market share by 1.4% to 34.2%, while Apache slips by 1.7% to 48.4%. Microsoft's recent gains raise the prospect that Windows may soon challenge Apache's leadership position."
Posted by Zonk on Fri Jun 08, 2007 02:22 PM
from the consider-the-source dept.
eldavojohn writes "According to Google, Microsoft's server software is at least twice as likely to host viruses or malware. The reason why? 'Google reports that IIS is likely used to distribute malware more often than Apache because many IIS installs are on pirated Windows versions which aren't configured to automatically download patches. (Even pirated Windows versions can automatically receive security fixes, however.) Our analysis demonstrates how important it is to keep web servers patched to the latest patch level,' Google notes."
Posted by CowboyNeal on Fri Jun 01, 2007 07:19 AM
from the wading-through-legalese dept.
An anonymous reader writes "The most notable changes found in this latest draft include making GPLv3 compatible with version 2.0 of the Apache license, ensuring that distributors who make discriminatory patent deals after March 28 may not convey software under GPLv3, adding terms to clarify how users can contract for private modification of free software or for a data center to run it for them, and replacing the previous reference to a U.S. consumer protection statute with explicit criteria for greater clarity outside the United States. The draft also does not prohibit Novell from distributing software under GPLv3 'because the patent protection they arranged with Microsoft last November can be turned against Microsoft to the community's benefit,' FSF executive director Peter Brown said."
Posted by CmdrTaco on Sun May 27, 2007 10:32 AM
from the wouldn't-it-be-nice-if-we-were-faster dept.
An anonymous reader writes "As the load on an application increases, the bottlenecks in the underlying infrastructure become more apparent in the form of slow response to user requests. This article discusses many of the server configuration items that can make or break an application's performance and focuses on steps you can take to optimize Apache and PHP."
Posted by Zonk on Fri May 18, 2007 03:05 PM
from the step-right-up-rilly-big-shew dept.
Famestay writes "Verisign's iDefense is putting up a $16,000 prize for any hacker who can find a remotely exploitable vulnerability in six critical Internet infrastructure applications. The bounty is for a zero-day code execution hole on the following Internet infrastructure technologies: Apache httpd, Berkeley Internet Name Domain (BIND) daemon, Sendmail SMTP daemon, OpenSSH sshd, Microsoft Internet Information (IIS) Server and Microsoft Exchange Server. 'Immunity founder Dave Aitel, who also purchases flaws and exploits for use in the CANVAS pen testing tool, says its doubtful iDefense will get any submissions from hackers. "It's very hard to exploit [those listed applications]," Aitel said. "IIS 6 hasn't had a public remotely exploitable bug in it. Ever." Several other hackers I spoke to had very much the same message, arguing that $16,000 can never equate to the amount of work/expertise required to find and exploit a hole in the six targeted technologies.'"
Posted by kdawson on Tue Feb 13, 2007 04:24 PM
from the LAMP=~s/L/S/ dept.
tbray writes "This is your friendly local Sun corporate drone reporting that we're going to be building and optimizing and DTrace-ing and shipping and supporting the AMP part of LAMP (details here). I think that basically the whole tech industry, excepting Microsoft, is now at least partly in the AMP camp."
Yesterday's News  >