<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">

    <title type="text">ITSecurity Geek</title>
    <subtitle type="text">ITSecurity Geek:</subtitle>
    <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/" />
    <link rel="self" type="application/atom+xml" href="http://www.itsecuritygeek.com/itsgeek/atom/" />
    <updated>2008-07-03T15:06:08Z</updated>
    <rights>Copyright (c) 2008, markus</rights>
    <generator uri="http://www.pmachine.com/" version="1.6.4">ExpressionEngine</generator>
    <id>tag:itsecuritygeek.com,2008:07:03</id>


    <entry>
      <title>How to install Vista in two minutes</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/how-to-install-vista-in-two-minutes/" />
      <id>tag:itsecuritygeek.com,2008:/6.1028</id>
      <published>2008-07-03T16:05:08Z</published>
      <updated>2008-07-03T15:06:08Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="Generic Geekery"
        scheme="http://www.itsecuritygeek.com/itsgeek/C6/"
        label="Generic Geekery" />
      <content type="html"><![CDATA[
        <p>Okay, so I&#8217;m slow to post this.
</p>
<p>
<object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/FVbf9tOGwno&amp;hl=en&amp;fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/FVbf9tOGwno&amp;hl=en&amp;fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object>
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>serial console, quick fix</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/serial-console-quick-fix/" />
      <id>tag:itsecuritygeek.com,2008:/6.1022</id>
      <published>2008-06-01T23:05:00Z</published>
      <updated>2008-06-01T20:40:03Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="Generic Geekery"
        scheme="http://www.itsecuritygeek.com/itsgeek/C6/"
        label="Generic Geekery" />
      <content type="html"><![CDATA[
        <p>A common problem with remotely managed Linux servers is console access. Not everybody is lucky enough to have KVM-over-IP readily available, but for most uses a simple serial console on a hardwired line to a suitable box nearby suffices.
</p>
<p>
The configuration is simple enough.
</p>
<p>
First, to run a login prompt on the serial line, add this to <b>/etc/inittab</b>:
</p>
<pre>T0:23:respawn:/sbin/getty -L ttyS0 115200 vt100</pre>
</p>
<p>
Second, to run both the VGA and serial console, add this to <b>/boot/grub/menu.lst</b> (on Debian, for other distros, take your pick):
</p>
<pre>
serial --unit=0 --speed=115200 --word=8 --parity=no --stop=1
terminal --timeout=10 serial console
timeout 10
</pre>
</p>
<p>
This will set up the VGA and serial consoles and prompt on both for attention and once that timeout expires, the grub boot timeout will commence. In a nutshell, this setup gives an operator on either the VGA or serial console a chance to intervene and interact with grub (to pick the kernel to boot, say); failing any interaction, the server will (try to) boot unattended.
</p>
<p>
To make the kernel aware of all of this, an additional edit in menu.lst is required. Append console options to grub&#8217;s default kopt line
</p>
<pre># kopt=root=/dev/mapper/server-root ro console=tty0 console=ttyS0,115200n8</pre>
</p>
<p>
and then run <b>update-grub</b> (on Debian).
</p>


 
      ]]></content>
    </entry>

    <entry>
      <title>gotta love Microsoft</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/gotta-love-microsoft/" />
      <id>tag:itsecuritygeek.com,2007:/6.521</id>
      <published>2007-07-25T17:12:00Z</published>
      <updated>2007-07-25T14:14:49Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <category term="IT Security"
        scheme="http://www.itsecuritygeek.com/itsgeek/C7/"
        label="IT Security" />
      <content type="html"><![CDATA[
        <p><a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fwww.proper.com%2Froot-cert-problem%2F">Microsoft Windows Root Certificate Security Issues</a>
</p>
<p>
I don&#8217;t know how much of a problem this is in practice, but be glad if you can run Linux instead.
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>interesting denial of service idea</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/interesting-denial-of-service-idea/" />
      <id>tag:itsecuritygeek.com,2007:/6.518</id>
      <published>2007-07-21T19:24:00Z</published>
      <updated>2007-07-21T16:29:13Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <content type="html"><![CDATA[
        <p><a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Farstechnica.com%2Fnews.ars%2Fpost%2F20070716-mit-project-shines-a-blue-light-on-yellow-dots.html">MIT Project aims human buffer overflow at Secret Service</a>
</p>
<p>
Apparently the Secret Service takes an interest in people who value their privacy and inquire about the yellow-dotted &#8220;serial numbers&#8221; some or all color printers emit as a way to identify counterfeiters.
</p>
<p>
It&#8217;s a thought to sign up as many people as you can to send their own inquiries to the printer manufacturers. On the other hand, does anybody know if a (carefully selected) pattern of yellow dots wouldn&#8217;t solve the privacy problem with less exposure?
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>another reason to give Vista a clear miss</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/another-reason-to-give-vista-a-clear-miss/" />
      <id>tag:itsecuritygeek.com,2007:/6.516</id>
      <published>2007-07-12T15:57:00Z</published>
      <updated>2007-07-12T13:06:55Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="Generic Geekery"
        scheme="http://www.itsecuritygeek.com/itsgeek/C6/"
        label="Generic Geekery" />
      <content type="html"><![CDATA[
        <p><a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fnews.softpedia.com%2Fnews%2FForget-about-the-WGA-20-Windows-Vista-Features-and-Services-Harvest-User-Data-for-Microsoft-58752.shtml">Forget about the WGA! 20+ Windows Vista Features and Services Harvest User Data for Microsoft</a>
</p>
<p>
That&#8217;s quite a lot of phoning home&#8230; 
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>Linux Genuine Advantage</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/linux-genuine-advantage/" />
      <id>tag:itsecuritygeek.com,2007:/6.189</id>
      <published>2007-02-10T23:58:00Z</published>
      <updated>2007-02-10T21:00:22Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="Generic Geekery"
        scheme="http://www.itsecuritygeek.com/itsgeek/C6/"
        label="Generic Geekery" />
      <content type="html"><![CDATA[
        <blockquote><p><a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fwww.linuxgenuineadvantage.org%2F">Linux Genuine Advantage™</a> is an exciting and mandatory new way for you to place your computer under the remote control of an untrusted third party!
</p>
<p>
According to an independent study conducted by some scientists, many users of Linux are running non-Genuine versions of their operating system. This puts them at the disadvantage of having their computers work normally, without periodically phoning home unannounced to see if it&#8217;s OK for their computer to continue functioning. These users are also missing out on the Advantage of paying ongoing licensing fees to ensure their computer keeps operating properly.
</p>
<p>
To remedy this, we have created a new program available as a required free download: Linux Genuine Advantage™!</p></blockquote>
<p>
I don&#8217;t know whether to laugh or cry.
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>come again?</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/come-again/" />
      <id>tag:itsecuritygeek.com,2006:/6.149</id>
      <published>2006-10-06T04:35:01Z</published>
      <updated>2006-10-06T03:38:23Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <content type="html"><![CDATA[
        <p><a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fwww.microsoft.com%2Fwindows%2Fwindowsmedia%2Fplayer%2F11%2Freadme.aspx%231608319">Release Notes for Windows Media Player 11 Beta 2 for Windows XP</a>
</p>
<blockquote><p><b>Backing up and restoring licenses</b>
</p>
<p>
Windows Media Player 11 does not permit you to back up your media usage rights (previously known as licenses). However, depending upon where your protected files came from, you might be able to restore your rights over the Internet.</p></blockquote>
<p>
Enough said.
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>blast from the past</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/blast-from/" />
      <id>tag:itsecuritygeek.com,2006:/6.140</id>
      <published>2006-09-11T13:45:00Z</published>
      <updated>2006-09-11T12:48:41Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <content type="html"><![CDATA[
        <p>The Register reports that the <a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fwww.theregister.co.uk%2F2006%2F09%2F08%2Fturing_bombe_rebuild%2F">(Bombe) that broke Enigma code is rebuilt</a>, the culmination of a ten-year project.
</p>
<p>
Too bad I don&#8217;t live in the U.K. anymore, I wouldn&#8217;t mind taking a gander.
</p>
 
      ]]></content>
    </entry>

    <entry>
      <title>Debian forks cdrecord</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/debian-forks-cdrecord/" />
      <id>tag:itsecuritygeek.com,2006:/6.137</id>
      <published>2006-09-06T01:49:00Z</published>
      <updated>2006-09-06T01:14:06Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="Generic Geekery"
        scheme="http://www.itsecuritygeek.com/itsgeek/C6/"
        label="Generic Geekery" />
      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <content type="html"><![CDATA[
        <p>The short version is that cdrecord tools is apparently comprised of source files and a build environement sporting a mix of licenses, the specific combination thereof the Debian team deemed as unacceptable, because in their opinion it would prevent them from distributing binaries for the cdrecord package.
</p>
<p>
There&#8217;s an amusing <a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Flinux.slashdot.org%2Fcomments.pl%3Fsid%3D195728">thread on /.</a> about whose interpretation of the license is right or wrong - among other topics. Most posters miss the point entirely, though. It doesn&#8217;t matter whose interpretation of the legal situation is correct - the only issue that matters is whether or not the author of cdrecord can convince the relevant people at Debian that they can legally distribute his software; failing that, they had no choice but to <a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fbugs.debian.org%2Fcgi-bin%2Fbugreport.cgi%3Fbug%3D377109">remedy the problem</a>, which in this case led to the creation of a <a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Flists.debian.org%2Fdebian-devel-announce%2F2006%2F09%2Fmsg00002.html">fork</a> from the last unencumbered version.
</p>
<p>
Interestingly enough, Fedora reached a <a href="http://www.itsecuritygeek.com/?URL=https%3A%2F%2Fwww.redhat.com%2Farchives%2Ffedora-devel-list%2F2006-August%2Fmsg00644.html">similar</a> <a href="http://www.itsecuritygeek.com/?URL=https%3A%2F%2Fwww.redhat.com%2Farchives%2Ffedora-devel-list%2F2006-August%2Fmsg00652.html">conclusion</a>.
</p>
<p>
There&#8217;s precedent for this pattern, other &#8220;characters&#8221; have been deemed to difficult to work with, to the point where it&#8217;s less painful to rewrite or fork their code. It will happen again.
<br />

</p> 
      ]]></content>
    </entry>

    <entry>
      <title>so about the lack of PC games&#8230;</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/so-about-the-lack-of-pc-games/" />
      <id>tag:itsecuritygeek.com,2006:/6.131</id>
      <published>2006-08-14T16:31:00Z</published>
      <updated>2006-10-07T12:58:08Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="Generic Geekery"
        scheme="http://www.itsecuritygeek.com/itsgeek/C6/"
        label="Generic Geekery" />
      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <content type="html"><![CDATA[
        <p>I haven&#8217;t done a lot of gaming in recent years, but I do peruse the shelves of game purveyors once in a while. I&#8217;ve noticed that in the last few years, console games are crowding out PC games. According to Id&#8217;s Kevin Cloud, <a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fwww.1up.com%2Fdo%2FnewsStory%3FcId%3D3152680%26a%3Dall">it&#8217;s piracy whodunnit</a>.
</p>
<p>
Without a doubt, piracy results in lost revenue, although credible analysis is hard to come by and piracy as the default culprit for lagging sales is getting old. The people commenting on the story make a number of valid points. PC games have increased in price, while not offering much in return other than eye candy. The PC is a fragmented platform, which drives up development cost at a time when game publishers are squeezed to develop on the cheap. Intrusive copy protection and in-game product placement are not likely to boost sales. And so on&#8230;
</p>
<p>
I myself am somewhat of a curmudgeon when it comes to games. I never cared for the types of games I associate with consoles and that well is poisoned beyond recall; on top of that, I&#8217;m not willing to spend money on (more or less) single purpose hardware, when I have plenty of perfectly good general purpose PCs around. I haven&#8217;t had all that much free time to play games in recent years, but I would make the time if there were games that I could get into. The Sims and other god games are fun, right up until the point when the inevitable micro-management spoils it. FPS and real-time strategy games don&#8217;t much interest me and decent adventure games are few and far in between. So what&#8217;s a gamer to do&#8230;
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>from the &#8220;I told you so&#8221; department</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/from-the-i-told-you-so-department/" />
      <id>tag:itsecuritygeek.com,2006:/6.130</id>
      <published>2006-08-14T15:58:00Z</published>
      <updated>2006-10-07T13:01:36Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <category term="IT Security"
        scheme="http://www.itsecuritygeek.com/itsgeek/C7/"
        label="IT Security" />
      <content type="html"><![CDATA[
        <p><a href="http://www.vnunet.com/vnunet/news/2162173/old-hard-drives-yield-dark">Old hard drives yield dark secrets</a>
</p>
<p>
It&#8217;s hardly surprising that old hard drives contain all kinds of juicy information. I&#8217;ve said for years that old disks acquired through ebay or the like are ideal for forensics target practice. Having said that, it nevertheless amazes me that free and readily available tools like <a href="http://dban.sourceforge.net/">Darik&#8217;s Boot and Nuke</a> aren&#8217;t in universal use. 
</p>
 
      ]]></content>
    </entry>

    <entry>
      <title>more Windows &#8220;Genuine&#8221; &#8220;Advantage&#8221;</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/more-windows-genuine-advantage/" />
      <id>tag:itsecuritygeek.com,2006:/6.129</id>
      <published>2006-08-10T12:59:00Z</published>
      <updated>2006-10-07T13:03:09Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <content type="html"><![CDATA[
        <p>Another article on WGA: <a href="http://www.microsoft-watch.com/article2/0,2180,2001181,00.asp">Microsoft to Tighten the Genuine Advantage Screws </a>.
</p>
<p>
This paragraph in particular caught my attention:
</p>
<blockquote><p>One element of Microsoft&#8217;s OEM-focused Genuine Advantage strategy could be increasing the number of copies of Microsoft Office that are preloaded on new PCs. Under an internal Microsoft program known as the Unlicensed PC Initiative, the company is working to reduce piracy by curbing the number of new PCs sold without Windows – and, increasingly, Office&#8212;preloaded on them.</p></blockquote>
<p>
In addition to some other comments that come to my mind, I can&#8217;t help wondering of the profits from an increasing number of preloaded copies doesn&#8217;t already make up for the alleged losses due to piracy&#8230;
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>GNU/Solaris</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/gnu-solaris/" />
      <id>tag:itsecuritygeek.com,2006:/6.128</id>
      <published>2006-08-09T15:14:00Z</published>
      <updated>2006-08-09T14:27:08Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="IT Security"
        scheme="http://www.itsecuritygeek.com/itsgeek/C7/"
        label="IT Security" />
      <content type="html"><![CDATA[
        <p>It&#8217;s always fun to watch somebody take an axe to two or more unrelated projects and bolt selected chunks together.
</p>
<p>
NextentaOS, a.k.a. <a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fwww.gnusolaris.org%2F">GNU/Solaris</a>, is an example. On the heels of Sun releasing opening up the source code of Solaris, the project took the OpenSolaris kernel and grafted the GNU user-land on top of it. Although Solaris on Intel never tickled my fancy, the Ubuntu/OpenSolaris hybrid is an intriguing combination, if for no better reason than &#8220;because it can be done"&#8230;
</p>
<p>
It&#8217;s not the first time that the GNU user-land has been ported to a kernel other than Linux, either. GNU/Mach comes to mind and I dimply recall a similar project involving one of the *BSD kernels. While it&#8217;s not a bad thing to be agnostic about the kernel and for desktop usage or most application servers any differences should be transparent, the situation is different for firewalls and VPN gateways, say. Having said that, the preceeding also suggests a fun project or two - retool these appliances for NextentaOS.&nbsp;
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>a bit of a puzzler</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/a-bit-of-a-puzzler/" />
      <id>tag:itsecuritygeek.com,2006:/6.127</id>
      <published>2006-08-07T15:45:00Z</published>
      <updated>2006-10-07T13:04:09Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <category term="IT Security"
        scheme="http://www.itsecuritygeek.com/itsgeek/C7/"
        label="IT Security" />
      <content type="html"><![CDATA[
        <p>For once, people seem to fuss about the wrong issue&#8230;
</p>
<p>
So Microsoft <a href="http://www.microsoft.com/whdc/driver/kernel/64bitpatch_FAQ.mspx">tries to do something about kernel rootkits</a>. <a  href="http://www.theregister.co.uk/2006/07/28/ms_kernel_security_controversy/">Criticism</a> <a href="http://www.agnitum.com/news/kernel_patch_protection.php">abounds</a> and <a href="http://www.lamlaw.com/">reasoned comment</a> is hard to find, not that the source of the latter is particularly friendly towards Microsoft.
</p>
<p>
In nutshell, it&#8217;s perfectly okay to flame Microsoft for not hardening their kernel in the first place. If the fix doesn&#8217;t close all the known holes, then there&#8217;s another obvious problem. Clearly, purveyors of third-party security products have a vested interest in being able to install their wares, but if they already complain about a partial fix, what would they say about a fix that left both them and the malware writers high and dry? Looks like they are between a rock and a hard place, doesn&#8217;t it?
</p>
<p>
<b>Update</b>: More media coverage: <a href="http://news.com.com/Windows+defense+handcuffs+good+guys/2100-7355_3-6104379.html?tag=st.prev">Windows defense handcuffs good guys</a>
</p>
<p>
I still don&#8217;t know that the security vendors have a legitimate grievance. However, there is the problem with Microsoft entering the security market. A partial fix that appears designed to deal a major setback to competitors, while leaving the door wide open for the bad guys deserves a few raised eyebrows.
</p> 
      ]]></content>
    </entry>

    <entry>
      <title>Nessus 3 vs. OpenVAS</title>
      <link rel="alternate" type="text/html" href="http://www.itsecuritygeek.com/itsgeek/nessus-3-vs-openvas/" />
      <id>tag:itsecuritygeek.com,2006:/6.126</id>
      <published>2006-08-07T13:07:00Z</published>
      <updated>2006-10-07T12:59:59Z</updated>
      <author>
            <name>markus</name>
            <email>x13317@yahoo.com</email>
            <uri>http://www.itsecuritygeek.com/</uri>      </author>

      <category term="In the news"
        scheme="http://www.itsecuritygeek.com/itsgeek/C10/"
        label="In the news" />
      <category term="IT Security"
        scheme="http://www.itsecuritygeek.com/itsgeek/C7/"
        label="IT Security" />
      <content type="html"><![CDATA[
        <p>A recent announcement of a new Nessus 3 plugin (<a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fblog.tenablesecurity.com%2F2006%2F08%2Fnessus_3_agentl.html">Nessus 3 Agent-less Compliance checks</a>) reminded me of this particular open source vs. closed source can of worms.
</p>
<p>
To state the obvious, it&#8217;s up to the copyright holder to chose the license under which their product ships. It is also obvious that closing the source on a previously open-source project is certain to antagonize a subset of users and perhaps a sizeable one at that. Tenable spun their decision one way, the people that kicked off the <a href="http://www.itsecuritygeek.com/?URL=http%3A%2F%2Fwww.openvas.org">OpenVAS</a> fork have a different view. I haven&#8217;t kept tabs on either Tenable or OpenVAS; perhaps they&#8217;re both doing well, perhaps not. 
</p>
<p>
Speaking for myself, Nessus 3 as closed source doesn&#8217;t work for me for philosophical and pragmatical reasons. It seems increasingly geared towards a clientele that is shopping for an off-the-shelf product and while I don&#8217;t know how much the open-source user community contributed back to the project, there is less incentive to contribute to a commercial project.&nbsp;
</p> 
      ]]></content>
    </entry>


</feed>