Show Notes: coder.show/373

The post Interactive Investigations | Coder Radio 373 first appeared on Jupiter Broadcasting.

Show Notes: techsnap.systems/409

The post Privacy Perspectives | TechSNAP 409 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Massive cyberattack hits Europe with widespread ransom demands

• New Ransomware Variant Compromises Systems Worldwide

• some infections may be associated with software update systems for a Ukrainian tax accounting package called MeDoc

• MDDoc posts about a virus

• notes at SANS ISC InfoSec Forums

Google Says It Will No Longer Read Users’ Emails To Sell Targeted Ads

• Google will no longer scan emails in Gmail accounts in order sell targeted advertising, the company said Friday.

• Google’s blog post

• more than 3 million paying companies that use G Suite

• Bloomberg post on same topic

Does US have right to data on overseas servers? We’re about to find out

Feedback

• AES-256 encryption keys cracked by hands-off hack from Shawn via Twitter

• workflow and backup strategy advice

• Regarding DNS, I think Dan mentioned that he didn’t have any of the books he used to learn about it. Any suggestions about some good reading material on that topic? Thanks for the awesome show. – DNS and BIND is the name of the book

Round Up:

• How LZ4 works

• Know your Times Tables, but… do you know your “Hash Tables”?

• AWS Security Primer

The post Google Reads Your Email | TechSNAP 325 first appeared on Jupiter Broadcasting.

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

House Passes Long-Sought Email Privacy Bill

• The U.S. House of Representatives on Monday approved a bill that would update the nation’s email surveillance laws so that federal investigators are required to obtain a court-ordered warrant for access to older stored emails.

• This is a very short piece of legislation. You can read it quickly, but it is an amendment. Basically, it’s copy/cut/pasting into the existing act, so you have to read it in context of the OLD act.

• Under the current law, U.S. authorities can legally obtain stored emails older than 180 days using only a subpoena issued by a prosecutor or FBI agent without the approval of a judge.

• Based on a 1986 law created in the days when cell phones did not contain email. Back then, the standard was store and forward, not the central storage so common today. There was no cloud.

• EFF’s Surveillance Self-Defense guide.

• This is very important. What is also important is protecting privacy when crossing borders. Your rights must be preserved when crossing borders. Trouble is, it seems we have no rights when doing so.

Here’s What Transport for London Learned From Tracking Your Phone On the Tube

• Advertising? I can see how this is useful for more than just advertising. Traffic flow. Knowing about time from A to B. Mention EZPass and monitoring of badges to determine flow.

• Signs announced trial, opt out by disabling wifi.

• The documents also seem to suggest that if TfL switched on tracking full time it could offer real time crowding information to passengers – so we could see a CityMapper of the not-too-distant future telling us which stations to avoid.

• That sounds simlar to how Waze and Google Maps collect real-time data on traffic congestion.

• Collecting information is one thing. Controlling access to that information is vital. As we’ve seen so many times in the past, it is the use of that data for unintended purposes which is of most concern.

• Rainbow tables

GitLab Postmortem of database outage of January 31

• This came from Shawn. We covered this incident in eposide 305.

• I want to make it clear from the start, we are not mocking GitLab. There is no joy to be taken here.

• On January 31st 2017, we experienced a major service outage for one of our products, the online service GitLab.com. The outage was caused by an accidental removal of data from our primary database server.

• What a horrible feeling that engineer then had. Imagine, for a moment. Production has just been wiped out… OMG.

• Backups could not be found, nor could they be used. It was all gone.

• I can imagine lots and lots of waiting for stuff to finish. Very stressful. Much hope, but very stressful.

• Wow, could not access their own projects. Ouch. Almost want their own repo offline, but then accusations of not dog fooding, etc.

• Prometheus monitorin

• Some places take the approach of making staging the hot backup for production. Exactly the same. Move production onto staging hardware if required.

• “I don’t remember where I saw it (probably hackernews), but someone proposed to constantly recreate staging from production’s backup. This way we would have an up-to-date staging version and frequently tested backup recovery process.”

Feedback:

• Should I convert to FreeNAS

• Follow Up Bacula

• possible malware distributor

Round Up:

• No more ransom – from Alejandro

• Semi-Critical Intel Atom C2000 SoC Flaw Discovered, Hardware Fix Required – from Shawn

• Ticketbleed – from Shawn

• Yahoo, MSN Struck by Advanced Malvertising Campaign

• Factory That Made Exploding Galaxy Note 7 Batteries Catches Fire

• US Judge Ordered Google to Hand Over Emails Stored On Foreign Servers to FBI

• Vizio settles with FTC, will pay $2.2 million and delete user data

• WordPress Kept Users And Hackers In The Dark While Secretly Fixing Critical Zero-Day

• Diehard Coders Just Rescued NASA’s Earth Science Data

• University attacked by its own vending machines, smart light bulbs & 5,000 IoT devices

• Bored with ho-hum cloud backups? Use Usenet (yes, Usenet!) instead

• Unpacking the rack-mount chassis – YouTube

• Moving tower system into rack mount chassis – YouTube

• Yes, an APC AR3100 rack can fit into a Subaru Outback

• APC AR3100 rack assembly – YouTube

• Moving the rack into place – YouTube

The post Metadata Matters | TechSNAP 306 first appeared on Jupiter Broadcasting.

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Malware authors have found a way to evade URL-blocking systems by swapping bad domain names with unknown ones

• Malware is often hosted on pop-up domains (bought specifically for the purpose, and with very odd names). Othertimes, it is resident on compromised hosts (PYS!). As such hosting locations/domains are discovered, they are added to blacklists.
• The criminals have yet anotherfound a way to avoid the blacklists – spoofing
• Spoofing is not knew: think of it as pretending to be someone else.
• What seems to be new is deception in the TCP packets, or more specifcally, the TCP headers.
• For some time now URL filtering techniques have provided a fairly reliable way for organizations to block traffic into their network from domains that are known to be malicious. But as with almost every defense mechanism, threat actors appear to have found a way around that as well.
• Security researchers from Cyren are warning about a new tactic for fooling Web security and URL–filtering systems. The technique, which Cyren has dubbed “Ghost Host,” is designed to evade host and domain blacklists by swapping bad domain names and inserting random, non-malicious host names in the HTTP host field instead.
• The objective is to evade host and domain blacklists by resetting the host name with a benign one, even when the actual connection is to a malicious command and control IP, according to a Cyren blog post today.
• “Ghost hosts are unknown or known-benign host names used by malware for evading host and URL blacklists,” says Geffen Tzur, a security researcher at Cyren.
• Tzur says there have been no previously reported incidents he knows of where malware actors have attempted to fool detection systems by inserting benign names in the HTTP host field.

Feedback:

• @TechSNAP_Dan How’d you first get into BSD?
  • Why I wanted FreeBSD before I knew it existed
  • How I found FreeBSD
  • The installation

Round Up:

• Android Was 2016’s Most Vulnerable Product
• FTC issues the IoT security challenge. Design the best service or device to manage the security of various IoT devices in a home, and win the $25,000 prize
• Ultrasound Tracking Could Be Used to Deanonymize Tor Users

The post The Next Generation | TechSNAP 301 first appeared on Jupiter Broadcasting.

Jewel is cofounder of Workfrom, an online resource for remote workers, freelancers, digital nomads & travelers to find a place to work from!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

Interview – Jewel Mlnarik – @juellez

• Workfrom — Best Places to Work Remotely in a City
• jewel mlnarik (@juellez) | Twitter
• Workfrom (@workfrom) | Twitter

Are you looking for the transcription? Please let us know you use it and we may bring it back!

• WTR Transcription Poll

The post Oops, We Went International | WTR 55 first appeared on Jupiter Broadcasting.

Verizon’s super cookie just got nastier, Facebook has plans for free Internet from space & Google launches AMP, Accelerated Mobile Pages Project for a faster, open mobile web.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

— Episode Links —

• FAA Proposes $1.9 Million Fine For Unauthorized Drone Use
• Verizon’s Zombie Cookie Gets New Life
• Official Google Blog: Introducing the Accelerated Mobile Pages Project, for a faster, open mobile web
• Accelerated Mobile Pages Project, Backed By Google, Promises Faster Pages
• Carriers are Making More From Mobile Ads than Publishers Are — Medium
• Facebook to beam free internet to Africa with satellites
• Elon Musk’s satellite Internet project takes another step forward

The post Creeper Cookies | TTT 215 first appeared on Jupiter Broadcasting.

Mike and Chris discuss malware getting injected into unsuspecting developers apps. Then the advertising cold war that’s brewing, how it impacts users, content creators & developers.

Also our top three must haves before you sign any development work contract.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

Show Notes:

Hoopla

• XCode Ghost vulnerability

• Apple’s iOS App Store suffers first major attack

The Right Way to Ship Software

Feedback

• Required Contract Items

• Backdoors

The post Advertising Cold War | CR 172 first appeared on Jupiter Broadcasting.

A Google leak suggests a new Chromecast & two new Nexus devices are just around the corner. Facebook is turning up the tracking & the big statement Microsoft is making with their $75 million donation.

Plus an illuminating Kickstarter of the week!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

— Episode Links —

• Exclusive: This is the 2nd gen. Chromecast w/ backdrop feeds, better WiFi, ‘Fast Play,’ more | 9to5Google
• Exclusive: Google and Spotify launching Chromecast support later this month | 9to5Google
• Facebook’s Like Buttons Will Soon Track Your Web Browsing to Target Ads | MIT Technology Review
• Microsoft to spend $75 mln to boost computer science in schools
• Google Glass now “Project Aura,” ex-Amazon Fire Phone employees hired | Ars Technica

Kickstarter of the week:

• Zyntony Torch: Baddest Light on the Planet! by Zyntony — Kickstarter
• Zyntony | Where will your Torch take you?

The post Dislike the Like Button | TTT 213 first appeared on Jupiter Broadcasting.

Liz Heidner is a designer at Substantial working on the user experience.

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

• Substantial
• Substantial on Twitter
• Airbnb
• Women’s Tech Radio Episode 8
• Codecademy
• Dash General Assembly

Full transcription of previous episodes can be found at heywtr.tumblr.com

The post Unicorns Don’t Exist | WTR 15 first appeared on Jupiter Broadcasting.

Alice is a site reliability engineer with New Relic & describes herself as “the digruntled Spock of our age.”

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

• Peter Jennison Music

• Pandora

• Alice Goldfuss on Twitter

• Learn To Program
• New Relic
• Coursera
• Rice University

• /r/linux subreddit

• Kenneth Love

• Treehouse

• Treehouse Twitter

• Forrest Norvell

• Rachel Kelly
• PyLadies

The post Alice Goldfuss | WTR 10 first appeared on Jupiter Broadcasting.

In lieu of the AoC review originally scheduled for this week, Jeremy’s decided to throw together some of the hottest stories that’ve surfaced over the past week in the MMO industry. Included in this grab bag of editorial goodness is the DCUO-F2P announcement, GamersFirst’s new “offer” venture, WoW’s unique features coming in patch 4.3, and Trion World’s charitable efforts.

Show Notes: