Show Notes: coder.show/478

The post Strange New Workflows | Coder Radio 478 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/477

The post Sweet Little Lies | Coder Radio 477 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/407

The post Halls of Glowing Apples | Coder Radio 407 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/373

The post Interactive Investigations | Coder Radio 373 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/368

The post Clojure Clash | Coder Radio 368 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/366

The post Functional First | Coder Radio 366 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/354

The post A Life of Learning | Coder Radio 354 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/353

The post A Week with WSL | Coder Radio 353 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/348

The post Dependency Dangers | Coder Radio 348 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/347

The post Rusty Rubies | Coder Radio 347 first appeared on Jupiter Broadcasting.

Show Notes: coder.show/325

The post Clojure Calisthenics | Coder Radio 325 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

How I tricked Symantec with a Fake Private Key

• If true, not very good.

• The Baseline Requirements – a set of rules that browsers and certificate authorities agreed upon – regulate this and say that in such a case a certificate authority shall revoke the key within 24 hours (Section 4.9.1.1 in the current Baseline Requirements 1.4.8).

• I registered two test domains at a provider that would allow me to hide my identity and not show up in the whois information. I then ordered test certificates from Symantec (via their brand RapidSSL) and Comodo.

• Comodo didn’t fall for it. They answered me that there is something wrong with this key. Symantec however answered me that they revoked all certificates – including the one with the fake private key

Alert, backup, whatever on DNS NOTIFY with nsnotifyd

• Fair warning: blog post is from 2015, but with Let’s Encrypt all around us, I think this is relevant now.

• “Tony Finch has created a gem of a utility called nsnotifyd. It’s a teeny-tiny DNS “server” which sits around and listens for DNS NOTIFY messages which are sent by authority servers when they instruct their slaves that the zone has been updated and they should re-transfer (AXFR / IXFR) them. As soon as nsnotifyd receives a NOTIFY, it executes a shell script you provide.

• offical repo

• nsnotifyd on GitHub

• man 1 nsnotifyd

• man 1 nsnotify

• man 4 metazone

New details emerge on Fruitfly, highly-invasive Mac malware

• Mysterious Mac Malware Has Infected Victims for Years

• The recently discovered Fruitfly malware is a stealthy, but highly-invasive, malware for Macs that went undetected for years. The controller of the malware has the capability to remotely take complete control of an infected computer — files, webcam, screen, keyboard and mouse.

• Apple released security patches for Fruitfly earlier this year, but variants of the malware have since emerged. The core of the malware is an obfuscated perl script using antiquated code, with indicators in the code that suggest the malware may go back almost half a decade or more, the security firm said.

• Wardle said based on the target victims, the malware is less likely run by a nation state attacker, and more likely operated by a single hacker “with the goal to spy on people for perverse reasons.” He wouldn’t say how many were affected by the malware, but suggested it wasn’t widespread like other forms of malware.

Feedback

• Tell me more on XML vs JSON
• JSON – data format
• XML – language
• Stop Comparing JSON and XML
• Extensible Data Notation
• https://www.compoundtheory.com/clojure-edn-walkthrough/
• Transit is a format and set of libraries for conveying values between applications written in different programming languages.

• https://github.com/cognitect/transit-js

• Thanks for Dan’s recommendations
  +Lee Valley Divider boxes

• Duluth Fire Hose Pants

Round Up:

• Vulnerabilities discovered in Windows security protocols

• With Patch Tuesday imminent, make sure you have Automatic Update turned off + From Matthew Garrett‏ – YOU ARE EVERYTHING WRONG WITH SOCIETY
  

• Post mortums from NASA: flight test & Avionics cooling

• Interesting analysis by Bitdefender suggests Petya/Goldeneye/NotPetya gave Kaspersky AV users a pass

• Adobe to pull plug on Flash, ending an era

• Roomba’s Next Big Step Is Selling Maps of Your Home to the Highest Bidder

• How the coffee-machine took down a factory control room

The post Teeny Weeny DNS Server | TechSNAP 329 first appeared on Jupiter Broadcasting.

MP3 Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

— Show Notes: —

Hoopla & Feedback

Starbucks Should Really Open their API

• Starbucks: A Javascript interface to the (private) Starbucks ordering API

Coder Listener Looking for Work

State of Dev Ecosystem 2017

Google Analytics is used to track users.

Google Analytics is used on the about:addons site while browsing not installed AddOns.

• Firefox tracks users with Google Analytics in the add-on settings | Hacker News

My life the last 3 years…

Open a Tube

Chat systemshttps://t.co/7Yro5UE3z0 pic.twitter.com/nXdx5DKX0j

— Sameroom HQ (@sameroomhq) March 13, 2017

Pick one, connect the rest!

Amazon may give app developers access to Alexa audio recordings – The Verge

The change would be aimed at enticing developers to continue investing in Alexa as a voice assistant platform, by giving those app makers more data that could help improve their software over time. Amazon’s goal, according to The Information, is to stay competitive with more recent entrants in the smart speaker market, like Apple and Google.

The post Mike the Botter | CR 266 first appeared on Jupiter Broadcasting.

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

— Show Notes: —

Hoopla

• Ubuntu Unity is dead: Desktop will switch back to GNOME next year

• Electron is flash for the desktop

• Visual Studio Code – Code Editing. Redefined

• Clojure

• ClojureScript

• ClojureScript + React Native

• Functional Programming | Clojure for the Brave and True

• Kotlin Programming Language

• Dokku – The smallest PaaS implementation you’ve ever seen

• Express – Node.js web application framework

The post DysFunctional | CR 252 first appeared on Jupiter Broadcasting.