AtomiBlog


Atomic reaches 1 million servers and counting... PDF Print E-mail
Written by Scott Shinn   
Thursday, 28 February 2013 17:41

Some time back in january the Atomic repo for the first time hit 1 million active servers in a single month. These stats dont count devices behind nat, or private repo users so it could have hit this a while ago. I can remember not that long ago when we were reaching maybe 10,000 and thinking that was pretty cool.

Here are some fun stats:
* Atomic is distributed from 8 public mirrors
* The repo will be 10 years old in June
* The oldest tracked package in the changelog is Tnef, v 1.2.1 released on November 27, 2005 (There were older packages, I just did not have the changelog then)
* Atomic has been through 3 major build systems, Manual me + Vmware, DAR (by Dag Wieers), and now ART-build which is a hybrid of mock, dar, and kmodtool
* The repo was originally started to support a side project at Plesk that was supposed to develop something like OpenExchange
* The first package in Atomic was PHP, in order to support R&D for the OpenExchange project. It was needed to support a specific version of Horde
* The most popular package in Atomic is.... PHP
* Since 2005, there have been 4196 package commits
* Packages are built across 5 build servers, Archelon, Leatherback, Loggerhead, Flatback, and Ministry. (rpm -qi <packagename to see which one!>
* I put jokes, inside references, holiday greetings and birthday announcements in rpm changelogs
* The most complicated package is the ASL kernel spec file at 2630 lines, of which 435 are individual patches
* The second most complicated package is the suite of spec's that handle the openvas project

February Distro Stats :

Redhat/CentOS 4: 5917
Redhat/CentOS/Cloudlinux 5: 592875 (wow!)
Redhat/CentOS/Cloudlinux 6: 310103 (and climbing)
Fedora 4: 20 (really.)
Fedora 5: 8
Fedora 6: 255
Fedora 7: 615
Fedora 8: 1830 (these numbers really surprised me)
Fedora 9: 1145
Fedora 10: 1035
Fedora 11: 1930
Fedora 12: 640
Fedora 13: 1555
Fedora 14: 3935
Fedora 15: 2660
Fedora 16: 1342
Fedora 17: 15235 (again wow)
Fedora 18: 2165

 
Blocking outbound spam and viruses with ASL PDF Print E-mail
Written by Michael Shinn   
Wednesday, 21 November 2012 13:26

How do you prevent outbound spam and viruses from being sent from your server?  Just enable the FW_OUTPUT_MTA feature in ASL.

 
Zero Days: Hype or Reality? PDF Print E-mail
Written by Michael Shinn   
Monday, 14 May 2012 00:00

While participating in a security conference, I was asked a very important question:  "How do we protect ourselves from Zero Days?".   My answer: "There is no such thing as zero days".  Crazy right?  How can that be true?  People report "zero days" everyday, so how can that statement be true?  And how does that answer solve the problem?  Fear not fair reader, all will be revealed!  Lets dig a little deeper and find why there may not really be "zero day" vulnerabilities and why protecting against them isn't as hard you may think.

 
XMLRPC vulnerability: An oldie but a goodie PDF Print E-mail
Written by Michael Shinn   
Sunday, 29 April 2012 17:30

And oldie but a goodie:  we run a number of honeypots as part of our ongoing efforts to learn what attackers are doing and how to best protect customers and users of our products.  An interesting trend we have seen lately is the use of a very old xmlrpc vulnerability from 2005 being widely used in attacks.    What's really interesting is that there appears to be a new variant to this old vulnerability.  Could there be holes in new applications using this old vulnerability?  And what should you do about it?

 
Are firewalls and patching enough? PDF Print E-mail
Written by Michael Shinn   
Friday, 02 March 2012 00:00

We got an interesting question from a potential customer recently that I'd like to answer here.  Our customer asked:

"I recently purchased a new dedicated server. I was told the server is managed so not to worry about security, and they will patch the system and also provide a complementary firewall.  Is this enough security for my server?  Thank you in advance, I just want to make sure I'm doing the right things to protect my server and data."

The short answer is no.

 
Why does Linux use so much memory? PDF Print E-mail
Written by Michael Shinn   
Monday, 27 February 2012 13:08

Note: This article is not about Atomic Secured Linux (ASL), it is about all modern Linux based systems. This characteristic of modern Linux based systems is universal to all modern Linux systems, not just systems running ASL.

We often get asked why a Linux based systemseems to be using so much memory.  Even on huge systems with tons of memory, over time a Linux seems seems to use up all the memory available.  People get worried that something is wrong, and that maybe that there is a bug in something.  Most of the time, it turns out that a Linux system isn't really using as much memory as it may appear, and this article is targeted at explaining how memory works in Linux and what tools you can use to find out how much memory is actually being used.

 
<< Start < Prev 1 2 3 4 5 Next > End >>

Page 1 of 5