Increase Security Through Open Source (essay)

The disputes about Open and Closed Sources Software existed for a long time and I believe that they will exist also for a long-long time. Open Source Software has a lot of fans, whereas the amount of other side's fan is not less or even bigger.  
As mentioned in the article "Increase Security Through Open Source" the access to the source code can benefit not only the users, but hackers also. I sincerely believe that it is much better to have the same opportunity as the hackers have, than rely only on patches produced by closed source software developers. 
Also I think that people really improve the software through access to the source code. Everyone wants to use the software with comfortable and reliable GUI, that's why people try to improve and bring something good into Open Source Software.

Increase Security Through Open Source

Similarities and differences between close and open sources in a security perspective
	Open Source	Close Source
Independent Assessment	User can assess the system freely. The defender by using open source can assess, inspect, modify, and redistribute the system that will be used to defend. In my opinion, that is one of the main points of the article.	User is not allow to assess the system prior to using in order to find out system's vulnerabilities and risks.
Patches Availability	Because of the fact that open source is access by thousands of users, including qualify developers, patches for vulnerabilities would be produce quiet fast. Open source enables users to find bugs, and to patch any bugs themselves, making open source more secure than close source instantly.	When a vulnerability is found, independent sources usually take a considerable amount of time before producing a patch to fix it. Allowing attacks to happen
Access to source	Both hackers and user have access to the source. Hackers benefit from this since they can access tons of information, making it easy to find system's vulnerabilities. It gives an unfair advantage to attackers from security defenders.	Access to code is not allow, thus minimizing information that may aid a hacker to launch an attack to the system. This is not always the case since hackers could indeed with time find system's vulnerabilities with the use of debuggers and disassembles.
Secure involvement of developers	Open sources allow a widely range of developers to work on the source. This is a good thing since thousands of users could rapidly pinpoint a vulnerability. However, this could easily lead to a system backdoor, a source by hackers posing a trustworthy contribution. In contrast with close source, this approach is more secure.	Only private developers are involved in close source systems. This has advantages and disadvantages. The advantage is that the source will not be widespread, making attacker's jobs more difficult. The disadvantage is that when developers realize vulnerabilities, the process of producing a patch is slow.
Quality Control	Since this source is viewed by everyone, high standards are enforce to developers. It is human nature to do things well when expose to everyone.	Poor project management and quality control
Comunication between users	Since this is an open source system, basically, you are your own customer and are responsible on maintaining the system. For this reason, there is a large amount of help between users as forums for instance.	Customer service and communication between users is limited in close source systems

Slax Linux

Slax Linux is one of the most popular Linux distribution. Surfing the Internet we can find thousands of answers why people use the Slax. Some of them use it because their PC has insufficient memory and other resources; and because of that they cannot start Windows OS. Meanwhile, another people like the size of Slax and its ability to be installed on USB Flash Stick.


Among the many benefits of using this distribution I chose Slax because of its flexibility. Before downloading the distribution we can pick up the necessary modules. For example we can create our own Slax by choosing from different security, graphics, office, multimedia and even the games modules. Slax gives us the opportunity to assemble the distribution for Information Security by using more than 70 different security utilities and programs. So. we can pick up and include into the Slax such programs as WireShark, Netcat and other sniffers, crackers and helpers. 


Another benefit of using Slax is its frequent updates, for example, last version of the Slax was created in August, 2009,  which is very good indicator, especially if we compare it to other Linux distribution. 


To sum up, I chose the Slax Linux because its small size, flexibility in modules and huge assortment of programs.

Probe Targets Archives’ Handling of Data on 70 Million Vets

Everyone knows that sensitive data needs more attention and car, but sometimes people forget about this. So happened in October, 2009 when RAID massive with about 70 millions records of sensitive information was given to vendor to be fixed. The owner of data told that  this is not a problem because  the contractors signed privacy promises in their contracts.
 I believe that even the privacy promises were signed, the data had to be encrypted according to accepted standards. As another variant, the data could be degaussed using degausser Mag EraSURE™ .
Anyway this case shows that special care should be taken when you work with important and sensitive information.

Link to the original article: http://www.wired.com/threatlevel/2009/10/probe-targets-archives-handling-of-data-on-70-million-vets/
About Mag EraSURE™ : http://www.fujitsu.com/downloads/COMP/fcpa/degaussers/magerasure-drivesavers_wp.pdf