CIA – Jupiter Broadcasting

Malicious apps were surreptitiously added somewhere along the supply chain.
Check Point didn’t disclose the names of the companies that owned the infected phones. One of the affected parties was a “large telecommunications company” and the other was a “multinational technology company.”
It’s interesting how this came on out March 10 and the WikiLeaks notice about compromised cellphones came out a few days earlier. Coincidence?

“Vault 7” by WikiLeaks

A total of 8,761 documents have been published as part of ‘Year Zero’, the first in a series of leaks the whistleblower organization has dubbed ‘Vault 7.’ WikiLeaks said that ‘Year Zero’ revealed details of the CIA’s “global covert hacking program,” including “weaponized exploits” used against company products including “Apple’s iPhone, Google’s Android and Microsoft’s Windows and even Samsung TVs, which are turned into covert microphones.”
Among the more notable disclosures which, if confirmed, “would rock the technology world”, the CIA had managed to bypass encryption on popular phone and messaging services such as Signal, WhatsApp and Telegram. According to the statement from WikiLeaks, government hackers can penetrate Android phones and collect “audio and message traffic before encryption is applied.”
NOTE: From what I’ve read, this compromise involves first compromising the phone in question and as such is not an attack on the apps themselves.
Kreb’s coverage
Krebs says: “The documents for the most part don’t appear to include the computer code needed to exploit previously unknown flaws in these products, although WikiLeaks says those exploits may show up in a future dump. This collection is probably best thought of as an internal corporate wiki used by multiple CIA researchers who methodically found and documented weaknesses in a variety of popular commercial and consumer electronics.”
Krebs also says: “Some of the exploits discussed in these leaked CIA documents appear to reference full-on, remote access vulnerabilities. However, a great many of the documents I’ve looked at seem to refer to attack concepts or half-finished exploits that may be limited by very specific requirements — such as physical access to the targeted device.”
See also Espionage vs. Surveillance
Best advice: patch your shit, secure physical access, it is not as bad as WikiLeaks is making it out to be.

Feedback

VLANing vs. subnetting
[Just getting into freebsd](https://slexy.org/view/s2GHEJe0zR
Bacula disk autochanger
Blocking ip from attempting connections to postfix email server
- https://techarena51.com/index.php/confiigure-fail2ban-block-brute-force-ips-scanning-postfix-logs/
- WordPress and Fail2ban

Round Up:

+Silent Data Corruption Is Real

The post Don’t Panic & P your S | TechSNAP 310 first appeared on Jupiter Broadcasting.

Vault 7 Unlocked | Unfilter 228

chris — Thu, 09 Mar 2017 02:42:38 +0000

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Links

The post Vault 7 Unlocked | Unfilter 228 first appeared on Jupiter Broadcasting.

Bad Boy Backups | TechSNAP 309

chris — Tue, 07 Mar 2017 21:42:43 +0000

RSS Feeds:

Become a supporter on Patreon:

Show Notes:

Data from connected CloudPets teddy bears leaked and ransomed, exposing kids’ voice messages

Extortionists Wipe Thousands of Databases, Victims Who Pay Up Get Stiffed
Spiral Toys xCEO denies voice recordings stolen
CloudPets left their database exposed publicly to the web without so much as a password to protect it.
There are references to almost 2.2 million voice recordings of parents and their children exposed by databases that should never have contained production data.
CloudPets has absolutely no password strength rules
The CloudPets Twitter account has also been dormant since July last year so combined with the complete lack of response to all communications, it looks like operations have well and truly been shuttered.

Spammers expose their entire operation through bad backups

Today we release details on the inner workings of a massive, illegal spam operation. The situation presents a tangible threat to online privacy and security as it involves a database of 1.4 billion email accounts combined with real names, user IP addresses, and often physical address. Chances are that you, or at least someone you know, is affected. Spammergate: The Fall of an Empire
The data from this well-known, but slippery spamming operation, was discovered by Chris Vickery, a security researcher for MacKeeper and shared with Salted Hash, Spamhaus, as well as relevant law enforcement agencies.
Vickery also discovered thousands of warm-up email accounts used by RCM to skirt anti-spam measures
RCM’s data breach also exposed 2,199 IP addresses used for public-faced activities; as well as the group’s internal assets. This is in addition to the 60 IP blocks RCM has identified for activities in the past, as well as current and future operations; and the 140 active DNS servers that are rotated frequently.
Based on campaign logging documents, the data breach also exposed more than 300 active MX records. In just two spreadsheets alone, RCM recorded nearly 100,000 domains used for their campaigns.
If an offer doesn’t inbox (meaning it is rejected, or otherwise dumped into a spam or junk folder), or a given domain is blacklisted, RCM goes back to a list of thousands of domains and selects another to restart the process.

Feedback

Round Up:

The post Bad Boy Backups | TechSNAP 309 first appeared on Jupiter Broadcasting.

Dangerous Intelligence Games | Unfilter 226

chris — Wed, 22 Feb 2017 21:45:11 +0000

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Links:

The post Dangerous Intelligence Games | Unfilter 226 first appeared on Jupiter Broadcasting.

The Kremlin Candidate | Unfilter 222

chris — Wed, 18 Jan 2017 23:29:12 +0000

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Links:

The post The Kremlin Candidate | Unfilter 222 first appeared on Jupiter Broadcasting.

2016 Review | Unfilter 219

chris — Wed, 28 Dec 2016 16:17:35 +0000

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Links

The post 2016 Review | Unfilter 219 first appeared on Jupiter Broadcasting.

Backtracking Brexit | Unfilter 194

chris — Wed, 29 Jun 2016 20:36:38 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We’ve all woken up with a Brexit hangover. this week we break down message behind the vote & why the Brexit might ultimately not go through. Plus the official report on Benghazi is here, the airport shooting in Turkey already being linked to ISIS, overtime & more!

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Episode Links

The post Backtracking Brexit | Unfilter 194 first appeared on Jupiter Broadcasting.

DNC_Secret_Documents.zip | Unfilter 193

chris — Wed, 22 Jun 2016 20:33:22 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Guccifer 2.0 debunks DNC claim it was hacked by Russia & we dig through some of the leaked docs. The gun debate is going crazy in the US & the 2016 election could be about to take a major twist.

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Episode Links

The post DNC_Secret_Documents.zip | Unfilter 193 first appeared on Jupiter Broadcasting.

CIA Rewrites History | Unfilter 189

chris — Wed, 25 May 2016 20:11:08 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We break apart a grade A propaganda story designed to rewrite history in favor of the CIA. We discuss the remarkable lengths they’ve strived for to set the record straight about 9/11.

Plus a quick update on EgyptAir 804, the best of the election cycle this week, the storm clouds forming around DNC Chairwoman Debbie Wasserman Schultz & a super important Overtime segment!

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Episode Links

The post CIA Rewrites History | Unfilter 189 first appeared on Jupiter Broadcasting.

Torturing the Truth | Unfilter 188

chris — Mon, 16 May 2016 20:23:18 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

A quick update edition of Unfilter this week, we just couldn’t stay away! We cover some of the crazy things happening in the news, our favorite clips of the week & more!

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Episode Links

The post Torturing the Truth | Unfilter 188 first appeared on Jupiter Broadcasting.

Ubuntu 16.04: From Warty to Wimpy | LAS 413

chris — Sun, 17 Apr 2016 20:24:58 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We review Ubuntu 16.04 & it’s various flavors. We discuss the new features that make this one of the most important Ubuntu releases in years & debate the major challenges that modern distributions have solved, that Ubuntu still struggles with.

Plus the latest stats show Ubuntu dominating where it counts, how Red Hat is making all that money, Linux in ALL the places, our weekly picks & more!

Thanks to:

Get Paid to Write for DigitalOcean

Direct Download:

RSS Feeds:

Become a supporter on Patreon:

— Show Notes: —

Brought to you by: Linux Academy

Some Bugs

Bug #1553652 “Ubiquity Install fails to create Swap Partition Er…” : Bugs : ubiquity package : Ubuntu

Attempting to install Daily Drop of Unity Desktop 16.04. Selecting fourth install option to Erase Disk and Install Ubuntu. Receiving error that Swap Partition creation failed. Unable to proceed with installation and must reboot. This is a hard failure and also happens on the current Gnome Daily 16.04 distribution.

@dominucco @Kernellinux not yet. I understand it's an upstream Intel video driver issue. Will let you know when I see a fix appear.

— Alan Pope (@popey) April 16, 2016

No Catalyst/fglrx video driver in Ubuntu 16.04 | Timo Aaltonen’s Weblog

In case someone hasn’t noticed yet, fglrx has been removed from Xenial. There are a couple of reasons for this. First of all, the driver did not support XServer 1.18 which we wanted to get in for 16.04. But more importantly, AMD asked us earlier this year to migrate to the open driver stack since fglrx would not be supported in 16.04.

Snap Packages

Snapcraft 2.8 Now Live in Ubuntu 16.04, Adds Support for Snappy’s New Interfaces

New features in Snapcraft 2.8 include better detection of some of the steps that need to be executed for showing the current version of the snapraft.yaml file, support for using the “cleanbuild” command to make sure you have a clean build of your snaps, as well as support for Snappy’s new interface, which is still work in progress.

Starting with Snapcraft 2.8, support for Snappy’s “config” setting has been completely removed, and by popular request, the “geoip” feature has been disabled by default. Users can enable it in Snapcraft using the “–enable-geoip” flag via the command-line. More details should be found in today’s announcement.

Great Flavors

Download Ubuntu MATE 16.04

New in Ubuntu MATE 16.04

Here is a run down of the headline features in Ubuntu MATE 16.04:

MATE Desktop 1.12.1
- Touchpad support is significantly improved and now features multi touch and natural scrolling.
- Multi monitor support has been improved so the display settings use output names and the revised UI lets you set the primary monitor.
- The power applet now displays model and vendor information so you can distinguish between multiple battery powered devices.
- Improved session management which now includes screensaver inhibition while playing media.
- Extended systemd support.
- Long standing bugs and many little usability paper-cuts were fixed.
- Consistent categorisation of the Control Center and System menus.
- See the MATE Desktop 1.12 release announcement for more details.
- CPU resource requirements have been reduced across the board.
Complete overhaul of Ubuntu MATE Welcome
- Incorporates Ubuntu MATE Software Boutique with one-click installs for nearly 150 best in class Linux desktop applications.
- One-click install for popular applications that are not in the official Ubuntu archive, such as Google Chrome, InSync, Minecraft, Opera, Spotify, Steam, Skype, Syncthing, Telegram, TorBrowser and Vivaldi via the Software Boutique.
- Pre-installation documentation and assistant.
- System Information and Diagnostics.
- Post-install setup and configuration assistant.
- Added one-click enablement of the LibreOffice Fresh PPA to continually track stable LibreOffice releases.
- One-click install of Drivers, Firmware and Codecs.
- Includes Raspberry Pi specific documentation and features.
- Translated in 20 languages.
Cross tooklit integration and theming
- QT applications will inherit GTK theming.
- Client Side Decorated and Header Bar applications render correctly in all supported window managers, even without compositing enabled in all shipped themes.
- The default Ubuntu MATE themes have been refined to minimise differences between GTK3 and GTK2.
- Deeper Compiz integration, gtk-window-manager now sources settings directly from MATE when Compiz is running in a MATE session.
Supports Raspberry Pi 2 and Raspberry Pi 3
- Including the Raspberry Pi 3 integrated Bluetooth and WiFi. Also includes Raspberry Pi accelerated versions of VLC, ffmpeg and Kodi.
- Option to enable experimental hardware accelerated OpenGL rendering.
MATE Tweak capabilities have been extended.
- Option to enable Keyboard LED to show a Caps Lock and Num Lock status indicator for modern laptops and wireless keyboards that no longer have built-in status LEDs.
- Added Compton GPU accelerated compositing, as an alternative to Compiz, for those seeking tear free video playback.
- Displays a confirmation after changing the compositor to either Compton or Compiz.
Added MATE Dock Applet developed by Robin Thompson.
- A configurable dock applet that can be placed on any panel, in any orientation.
Added Topmenu Applet developed by Javier S. Pedro
- A GTK+ module that allows placing a global menu in MATE panel applets.
- The Ubuntu MATE team also added lxpanel-plugin-topmenu and xfce4-topmenu-plugin to the Debian and Ubuntu archives so those desktops can benefit too.
Added Mutiny panel layout which showcases mate-dock-applet and topmenu-gtk.
- The traditional GNOME2 style two panel layout is, and will continue to be, the default.
- The Mutiny layout is a Unity-like interface, designed to showcase MATE Dock Applet and Topmenu Applet.
Added Synapse which also includes complete MATE integration.
- Synapse is a graphical launcher enabling you to start applications and also to quickly find and access relevant documents and files (by making use of the Zeitgeist engine).
- The Synapse Launcher can be enabled via MATE Tweak.
Updated to Plank 0.11 and includes a new theme for Ubuntu MATE contributed by Holger Rueckershaeuser.
DVD and BluRay libraries are pre-installed
- This doesn’t mean encrypted DVD and BluRay will play out-of-the-box, but they can be fully enabled via Ubuntu MATE Welcome.
Vastly expanded language support, the full rationale on how we choose the languages and what we install is available from https://launchpad.net/bugs/1520278.
- Including this wider language support has added ~400MB to the size of the .iso images.
Improved support for braille displays and a new indicator for changing accessibility profiles in Ubiquity.
Added an assortment of new community contributed background wallpapers, more consistent icons and icon rendering in menus is optimised.
…and many other minor improvements and hundreds of bug fixes.
KDE neon upgrades to 16.04LTS

KDE neon is a package archive of KDE software built on a stable foundation. We use Ubuntu because it’s good technology that we’re familiar with and which provides a Long Term Support foundation we can use. When we started the only practical version to use at the start was 15.10 so our packages have been built using that. But with 16.04LTS due out next week it’s time to move to a solid foundation where we expect to stay for the next couple of years.

— PICKS —

Runs Linux

Pi Powered Weather Monitor RUNS LINUX

Essentially, one Raspberry Pi acts as a surveillance camera and temperature sensor, while the other Raspberry Pi acts as a remote display. You can view the feed of the camera using a touchscreen that allows you to switch over to a graph at a tap. As you’d expect, you’ll need a couple of Raspberry Pis, a touch screen, a temperature sensor, a Raspberry Pi camera, and a pair of Wi-Fi dongles. When you’re all finished with the project, you’ll easily be able to pull up a live feed from the camera on a Pi. It’s a pretty easy little project when all’s said and done. Head over to Adafruit for the full guide.

Desktop App Pick

AltYo

AltYo – drop-down console, is written in vala, depends only on libvte, gtk3.

For full description please follow this link https://github.com/linvinus/AltYo

AltYo – drop-down terminal emulator, written in Vala, depends only on libvte and gtk3.

Weekly Spotlight

Shotwell has a new Maintainer

GitHub – chubin/wttr.in: Web frontend for wego

This is a web frontend for a console weather application wego, using it as a backend.
You can check it at wttr.in.

— NEWS —

Ubuntu Linux Continues To Dominate OpenStack and Other Clouds

In the latest OpenStack user survey, we see that OpenStack is finally gaining real momentum in private clouds. We also see that Ubuntu Linux is continuing to dominate OpenStack. As Canonical cloud marketing manager Bill Bauman said, “Ubuntu OpenStack continues to dominate the majority of deployments with 55 percent of production OpenStack clouds. The previous survey showed Ubuntu OpenStack at 33 percent of production clouds. Ubuntu has seen almost 67 percent growth in an area where Ubuntu was already the market leader. These numbers are a huge testament to the community support Ubuntu OpenStack receives every day.” The Cloud Market’s latest analysis of operating systems on the Amazon Elastic Compute Cloud (EC2) shows Ubuntu with just over 215,000 instances. Ubuntu is followed by Amazon’s own Amazon Linux Amazon Machine Image (AMI), with 86,000 instances. Further back, you’ll find Windows with 26,000 instances. In fourth and fifth place, respectively, you’ll find Red Hat Enterprise Linux (RHEL) with 16,500 instances and then CentOS with 12,500 instances.

How Red Hat is Worth 2 Billion

Many corporate cultures still conform to the hierarchical command and control management model designed for 20th century business needs. Knowledge workers are driving our economy today and they thrive in organizations that welcome their opinions, tap their creativity and award contribution over title.

In his new book The Open Organization (published by the Harvard Business Review Press), Red Hat’s CEO Jim Whitehurst challenges businesses to adopt an open approach that ignites passion and performance. Red Hat became the world’s first (and only so far) billion-dollar open source company by staying true to its ethos – leveraging a community approach to creating solutions where the best ideas win.

CIA’s In-Q-Tel invests in Docker, Mesosphere

Mesosphere and Docker are very well-funded San Francisco-based companies, with valuations that are said to be at or above $1 billion.

All Linux ALL The Time

The culture at Cumulus is all about standards. It was expressed repeatedly that Cumulus want to ensure that their linux is absolutely standard, so the file system hierarchy should be the standard, configuration files should be where they normally are, and so forth. A system that doesn’t follow those guidelines becomes a special snowflake that can’t be supported by regular tools and, as you’ll see, this attitude has paid dividends in this solution.

Noah v. Emma: Switching People to Linux

Noah vs Emma Card
Can not already be running Linux.
Must agree to install Linux, or have Linux installed
Will take place Sat during Linux Fest NW (Location TBD)
Come find Noah let him switch you to Linux and get a free SSD installed.

Call Box

Chris’ call out for the community to help him with his background

Catch the show LIVE SUNDAY:

— CHRIS’ STASH —

Chris’s Twitter account has changed, you’ll need to follow!

Chris Fisher (@ChrisLAS) | Twitter

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— NOAH’S STASH —

Noah’s Day Job

Altispeed Technologies

Contact Noah

noah [at] jupiterbroadcasting.com

Find us on Google+

Find us on Twitter

Follow us on Facebook

The post Ubuntu 16.04: From Warty to Wimpy | LAS 413 first appeared on Jupiter Broadcasting.

Cooking The Precedent | Unfilter 177

chris — Wed, 24 Feb 2016 22:52:07 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

It’s our uniquely qualified take on the FBI’s battle to get access to one of the San Bernardino shooter’s iPhones. Our coverage captures the core issues, why it is about setting a precedent, and how Apple could lose big if they don’t change their argument.

Plus the media’s scare on phone privacy at just the right time, an update on the Syrian ceasefire, Russia’s plans to snap some pictures of your backyard, a 2016 race update, and much more!

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Episode Links —

Episode Links:

The post Cooking The Precedent | Unfilter 177 first appeared on Jupiter Broadcasting.

Chasing Down Terror | Unfilter 169

chris — Wed, 09 Dec 2015 22:14:13 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

In a very special edition of your Unfilter show, we cover the San Bernardino Shooting in that special way that only the Unfilter show can & the big developments in the war against encryption. Then Iraq & Russia call out Turkey for financing ISIS.

Plus we end on a high note you green thumbs will just love, the weeks big news & more!

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

Unfilter SWAG for the Holidays

Show Notes:

— Episode Links —

The post Chasing Down Terror | Unfilter 169 first appeared on Jupiter Broadcasting.

War: As Seen On TV | Unfilter 167

chris — Mon, 23 Nov 2015 20:54:58 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Following the attacks in Paris we analyze the new momentum for a global state of war & debunk the continued scapegoating of encryption. Snowden comes under attack & some stark long term options in Syria and Iraq.

Plus full coverage on the week’s “cyber warfare” and privacy stories & the great turkey shortage!

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

Show Notes:

— Episode Links —

The post War: As Seen On TV | Unfilter 167 first appeared on Jupiter Broadcasting.

5 Blind Eyes | Unfilter 166

chris — Wed, 18 Nov 2015 22:01:46 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Brutal attacks in Paris are all the west need to pass new laws and launch new campaigns against their self created monster. Despite communicating in the clear text, the debate to break encryption is being pushed back into the public conversation with Telegram as the primary target. We explain why this was inevitable.

We cover the complete timeline of events in the Paris attacks, with the absolutely latest information. Discuss the major cyber attack pinned on Iran, and wrap the whole thing up with a high note.

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

Show Notes:

— Links and Notes —

This video shows the absurdity of the war in Syria in one single blown-up Humvee – The Washington Post

The above video, reportedly recorded outside of Aleppo, Syria and posted online Tuesday, features rebels from the U.S.-backed Free Syrian Army firing a U.S.-supplied anti-tank guided missile at what it is clearly a U.S.-made Humvee.

Paris emergency responders went through mass shooting drill before attack, report says

Bloomberg News has reported that on the same day as the Paris attacks, local emergency responders had gone through an exercise that simulated a mass shooting event. (Drills such as the one carried out Friday became regular occurrences after the Charlie Hebdo shootings in January, according to the report.)

Signs Point to Unencrypted Communications Between Terror Suspects

Yet news emerging from Paris — as well as evidence from a Belgian ISIS raid in January — suggests that the ISIS terror networks involved were communicating in the clear, and that the data on their smartphones was not encrypted.

The post 5 Blind Eyes | Unfilter 166 first appeared on Jupiter Broadcasting.

Why the US Stays in Afghanistan | Unfilter 163

chris — Wed, 21 Oct 2015 21:23:12 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

It’s called the longest war in US history, so why does the US fight in Afghanistan? Is it the poppyseeds? Maybe it’s the oil? Or perhaps there’s a much bigger, longer-term reason the US has for staying there. We look into the big elephant sitting in the room.

Plus the latest in the hunt for home grown terrorist, the stoner who hacked the CIA director’s AOL email & the drone policy you need to know about.

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter supporter on Patreon:

Show Notes:

— Episode Links —

The post Why the US Stays in Afghanistan | Unfilter 163 first appeared on Jupiter Broadcasting.