CrashPlan – Jupiter Broadcasting

The Free Phone Nightmare | LINUX Unplugged 212

chris — Tue, 29 Aug 2017 20:12:25 +0000

RSS Feeds:

MP3 Feed | iTunes Feed | Video Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Follow Up / Catch Up

Mazda and Toyota join forces on Linux-based connected car platform

Mazda and Toyota are working together on a Linux-based connected car navigation and entertainment system, according to reports.

Burger King Ushers in the Cyber Dystopia we’ve all been waiting for

Russians will be able to buy a Whopper with the virtual cash, once they have amassed 1,700 whoppercoins.

Wimpy was Right

At this year’s E3 — aka the biggest date in the gaming industry calendar, known under its full title as the Electronic Entertainment Expo — there was an Oculus-shaped rift where the Oculus-shaped Rift should have been showing off its vision of the future of electronic gaming and entertainment.

Linux Academy

Linux Academy | Linux and AWS Online Training

sshync aka Auto-sync

Auto-sync files or directories over SSH.

wshax was surpised we did not mention SpiderOak
surfrock66 does the math, and sticks with CrashPlan Pro

DigitalOcean

DigitalOcean: SSD Cloud Server, VPS Server, Simple Cloud Hosting

Purism’s Phone Campaign Getting Serious AF

Enabling the next generation of cable-cutters, we are making the Librem 5 the first ever Matrix-powered smartphone, natively using end-to-end encrypted decentralized communication in its dialer and messaging app. We will also offer regular baseband functionality separated off from the CPU, and work towards the goal of freeing all components.

TING

Ting – mobile that makes sense

Librem 15 Re-Review: The Replacening

The Librem 15 is the first ultra-portable workstation laptop that was designed chip-by-chip, line-by-line, to respect your rights to privacy, security, and freedom. Every hardware and software component—and everything we do—is in line with our belief in respecting your rights to privacy, security, and freedom. We know you will be happy with the results.

Librem line of Systems

The post The Free Phone Nightmare | LINUX Unplugged 212 first appeared on Jupiter Broadcasting.

Forks Done Right | LINUX Unplugged 211

chris — Tue, 22 Aug 2017 18:43:59 +0000

RSS Feeds:

MP3 Feed | iTunes Feed | Video Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Follow Up / Catch Up

Solar Eclipse Oregon Meetup

Are Laptops & PCs Preloaded with Ubuntu Budgie on the Way? – OMG! Ubuntu!

That’s if hints dropped on the Linux distribution’s social media pages are to be believed.

CrashPlan is shutting down their Consumer plans

CrashPlan is making an immediate pivot to focus its cloud backup service exclusively on businesses, and the company is planning to shut down its consumer-facing “CrashPlan for Home” product as a result.

rclone supports Backblaze and Others

Rclone is a command line program to sync files and directories to and from

Google Drive
Amazon S3
Openstack Swift / Rackspace cloud files / Memset Memstore
Dropbox
Google Cloud Storage
Amazon Drive
Microsoft OneDrive
Hubic
Backblaze B2
Yandex Disk
SFTP
FTP
HTTP
The local filesystem
Duplicati
Déjà Dup in Launchpad
duplicity: Main

FINALLY! An Electron based File Manager for Linux!!!oneone!!

It’s called JumpFM and it’s described as a ‘minimalistic dual pane file manager for Linux’. The developer of the app cites fman, a cross-platform Qt file manager, and Exa, a terminal tool that lets you add bling to the ls command, as key main influences.

ChromeOS is coming for the Enterprise

Google is launching a new enterprise service for large businesses that want to adopt Chrome OS devices. The new Chrome Enterprise subscription, which will cost $50 per device and year, is essentially a rebrand of Chromebooks for Work, but with a number of additional capabilities.

Easy bashrc generator

Pick the elements you want to use in your prompt.

banga/powerline-shell: A beautiful and useful prompt for your shell

A Powerline like prompt for Bash,
ZSH and Fish:

Shows some important details about the git/svn/hg/fossil branch (see below)

Changes color if the last command exited with a failure code

If you’re too deep into a directory tree, shortens the displayed path with an ellipsis

Shows the current Python virtualenv environment

It’s easy to customize and extend. See below for details.

justjanne/powerline-go: A beautiful and useful low-latency prompt for your shell, written in go

A Powerline like prompt for Bash, ZSH and Fish. Based on Powerline-Shell by @banga. Ported to golang by @justjanne.

Linux Academy

Linux Academy | Linux and AWS Online Training

Ubuntu just showed every other distro how to roll a Dock

Ubuntu Dock is a light fork of Dash to Dock, with very few tweaks that I’ll highlight in this post.

Ubuntu Dock Now Present By Default In Ubuntu 17.10’s GNOME Session

Check your containers before you wreck your self

Introducing Anchore Navigator, a service for quick discovery, deep inspection, and analysis of public and private container images.

DigitalOcean

DigitalOcean: SSD Cloud Server, VPS Server, Simple Cloud Hosting

Firefox wants more Data

One solution is the use of differential privacy [2] [3], which allows us to collect sensitive data without being able to make conclusions about
individual users, thus preserving their privacy.

An attacker that has access to the data a single user submits is not able
to tell whether a specific site was visited by that user or not.

The Google Open Source project called RAPPOR [4] [5] is the most widely known and deployed implementation of differential privacy.

We have been investigating the use of RAPPOR for these kind of use-cases, with initial simulation results being promising.

Plex changes its new privacy policy after backlash, clarified it’s not trying to see what’s in your library | TechCrunch

Popular media player software maker Plex has had a rough weekend. The company alerted users via email on Friday about an updated privacy policy due to go into effect in September. The new policy would remove users’ ability to opt out of data collection, said Plex. This move quickly resulted in much user backlash, with many subscribers concerned that their data would be shared or sold to third parties, or that Plex would now be able to identify the media files housed in their library.

TING

Ting – mobile that makes sense

Stage 9 | A virtual recreation of the Star Trek TNG sets in Unreal Engine 4

This aim of the Stage 9 project is to recreate the sets used in Star Trek The Next Generation in Unreal Engine 4 with a focus on attention to detail.

The eventual goal is to allow you to explore every part of the ship that you’ve seen on the show and interact with it.

Imagine walking to Worfs’ tactical station on the Bridge, pressing buttons on his control panel and firing torpedoes or sitting in Datas’ chair at the helm console and taking the ship into warp. Immersion and interactivity are the key here!

stage9 log

The post Forks Done Right | LINUX Unplugged 211 first appeared on Jupiter Broadcasting.

Tendresse for Ten | BSD Now 21

chris — Thu, 23 Jan 2014 21:58:45 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We\’ve got some great news for OpenBSD, as well as the scoop on FreeBSD 10.0-RELEASE – yes it\’s finally here! We\’re gonna talk to Colin Percival about running FreeBSD 10 on EC2 and lots of other interesting stuff. After that, we\’ll be showing you how to do some bandwidth monitoring and network performance testing in a combo tutorial. We\’ve got a round of your questions and the latest news, on BSD Now – the place to B.. SD.

Thanks to:

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

FreeBSD 10.0-RELEASE is out

The long awaited, giant release of FreeBSD is now official and ready to be downloaded
One of the biggest releases in FreeBSD history, with tons of new updates
Some features include: LDNS/Unbound replacing BIND, Clang by default (no GCC anymore), native Raspberry Pi support and other ARM improvements, bhyve, hyper-v support, AMD KMS, VirtIO, Xen PVHVM in GENERIC, lots of driver updates, ZFS on root in the installer, SMP patches to pf that drastically improve performance, Netmap support, pkgng by default, wireless stack improvements, a new iSCSI stack, FUSE in the base system… the list goes on and on
Start up your freebsd-update or do a source-based upgrade right now!

OpenSSH 6.5 CFT

Our buddy Damien Miller announced a Call For Testing for OpenSSH 6.5
Huge, huge release, focused on new features rather than bugfixes (but it includes those too)
New ciphers, new key formats, new config options, see the mailing list for all the details
Should be in OpenBSD 5.5 in May, look forward to it – but also help test on other platforms!
We\’ll talk about it more when it\’s released

DIY NAS story, FreeNAS 9.2.1-BETA

Another new blog post about FreeNAS!
\”I did briefly consider suggesting nas4free for the EconoNAS blog, since it’s essentially a fork off the FreeNAS tree but may run better on slower hardware, but ultimately I couldn’t recommend anything other than FreeNAS\”
Really long article with lots of nice details about his setup, why you might want a NAS, etc.
Speaking of FreeNAS, they released 9.2.1-BETA with lots of bugfixes

OpenBSD needed funding for electricity.. and they got it

Briefly mentioned at the end of last week\’s show, but has blown up over the internet since
OpenBSD in the headlines of major tech news sites: slashdot, zdnet, the register, hacker news, reddit, twitter.. thousands of comments
They needed about $20,000 to cover electric costs for the server rack in Theo\’s basement
Lots of positive reaction from the community helping out so far, and it appears they have reached their goal and got $100,000 in donations
From Bob Beck, \”we have in one week gone from being in a dire situation to having a commitment of approximately $100,000 in donations to the foundation\”
This is a shining example of the BSD community coming together, and even the Linux people realizing how critical BSD is to the world at large

This episode was brought to you by

Interview – Colin Percival – cperciva@freebsd.org / @twitter

FreeBSD on Amazon EC2, backups with Tarsnap, 10.0-RELEASE, various topics

Tutorial

Bandwidth monitoring and testing

News Roundup

pfSense talk at Tokyo FreeBSD Benkyoukai

Isaac Levy will be presenting \”pfSense Practical Experiences: from home routers, to High-Availability Datacenter Deployments\”
He\’s also going to be looking for help to translate the pfSense documentation into Japanese
The event is on February 17, 2014 if you\’re in the Tokyo area

m0n0wall 1.8.1 released

For those who don\’t know, m0n0wall is an older BSD-based firewall OS that\’s mostly focused on embedded applications
pfSense was forked from it in 2004, and has a lot more active development now
They switched to FreeBSD 8.4 for this new version
Full list of updates in the changelog
This version requires at least 128MB RAM and a disk/CF size of 32MB or more, oh no!

Ansible and PF, plus NTP

Another blog post from our buddy Michael Lucas
There\’ve been some NTP amplification attacks recently in the news
The post describes how he configured ntpd on a lot of servers without a lot of work
He leverages pf and ansible for the configuration
OpenNTPD is, not surprisingly, unaffected – use it

ruBSD videos online

Just a quick followup from a few weeks ago
Theo and Henning\’s talks from ruBSD are now available for download
There\’s also a nice interview with Theo

PCBSD weekly digest

10.0-RC4 images are available
Wine PBI is now available for 10
9.2 systems will now be able to upgrade to version 10 and keep their PBI library

Feedback/Questions

Sha\’ul writes in: https://slexy.org/view/s2WQXwMASZ
Kjell-Aleksander writes in: https://slexy.org/view/s2H0FURAtZ
Mike writes in: https://slexy.org/view/s21eKKPgqh
Charlie writes in (and gets a reply): https://slexy.org/view/s21UMLnV0G
Kevin writes in: https://slexy.org/view/s2SuazcfoR

Contest

We\’ll be giving away a handmade FreeBSD pillow – yes you heard right
All you need to do is write a tutorial for the show
Submit your BSD tutorial write-ups to feedback@bsdnow.tv
Check bsdnow.tv/contest for all the rules, details, instructions and a picture of the pillow.

All the tutorials are posted in their entirety at bsdnow.tv
The poudriere tutorial got a couple fixes and modernizations
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
Stop commenting on the Jupiterbroadcasting pages and Youtube! We don\’t read those!
Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)

The post Tendresse for Ten | BSD Now 21 first appeared on Jupiter Broadcasting.

Feedback Blowout #1 | TechSNAP 60

chris — Thu, 31 May 2012 17:52:35 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Software that’s supposed to get you around censorship, could be logging your activities online, plus we’ve got a classic Social Engineering story for you.

And then we clear the decks and answer a ton of your questions, in our feedback blowout!

All that and so much more, in this week’s episode of, TechSNAP.

Thanks to:

GoDaddy.com

Use our codes TechSNAP10 to save 10% at checkout, or TechSNAP20 to save 20% on hosting!

Limited time offer:

$1.99/mo economy hosting for 3 months – special offer!
Code: 199tech
Expires: June 30, 2012

Direct Download:

RSS Feeds:

Support the Show:

Purchase anything at Amazon.com
Purchase anything at Think Geek using this link
Purchase anything at Newegg using this link
Contribute directly on our donation page or check out our advertising options and reach millions of amazing people!
Grab our Chrome Extension and auto-tag your shopping session for us!

Show Notes:

Anti censorship application circulating with backdoor keylogger

The anti-censorship application Simurgh, used heavily in Iran and Syria to get around government internet censorship, has been spotted on P2P networks and download sites
The official version of the application from the official site is legitimate, however the version being propagated via P2P networks has been modified to log keystrokes and send the data back to a server in the USA on an IP block registered in Saudi Arabia
The infected version injects javascript into pages, and removes the windows navigation sounds to prevent the user noticing the automated activity
Anyone who has run a compromised version should consider all of their online accounts (email, IM, social networks, banking) compromised

WHMCS databases compromised via Social Engineering

WHMCS (Web Hosting Management Complete Solution) is a commonly used billing, help desk and client management system for web hosting companies
The attackers called the hosting company where WHMCS has their servers, managed to successfully answer the security questions and have the administrative passwords etc send to them
The attackers made off with 1.7GB of data including the usernames, email addresses, hashed passwords, and encrypted credit card details
The hashed passwords as not immediately vulnerable, however they can still be brute forced with time (especially if they are plain MD5 rather than salted MD5)
It is highly recommended that you change all of your passwords if you were a WHMCS customer
The attackers claim they targetted WHMCS because they refused to stop doing business with cyber criminals, specifically, script kiddies selling exploits, malware and running scams while using WHMCS to process the payments
Additional Coverage
Official Response
It seems the group that comprised the data, has since analyzed the source code for WHMCS and found a number of vulnerabilities
PHP Register Globals
SQL Injection

Cambridge Researchers find backdoor in US Military chips

The backdoor is in the chip, not the firmware, so it cannot be resolved with a firmware update
The backdoor was discovered using a newly developed scanning technique
The backdoor seems to have been left by the designers, not added by the Chinese manufacturers as has been incorrectly reported in the last few weeks
This vulnerability could allow a remote attacker to disable or alter the functionality of the chips
The research also suggests it is possible to steal the AES encryption keys used by these chips
Open letter from researchers at Cambridge University to interested Governments
Additional Coverage
Errata Security: Bogus story: no Chinese backdoor in military chip

Feedback:

KatsumeBlisk wrote:

The Blizzard thing is why I use their 2-factor authentication. There’s no reason not to when there’s an app for the major mobile OSes and the $6.50 physical one.

Wayne Merricks asks: How can I replace DFS

Justin Bates asks: Backing up Between two Windows Hosts

CrashPlan Backup

Chris Urie asks: How to Setup SSH Keys

Jono asks: Safely Storing Local Passwords

A few of you asked: WHY U NO MIRO?

TechSNAP in HD in the Miro Guide now!

Round-Up:

The post Feedback Blowout #1 | TechSNAP 60 first appeared on Jupiter Broadcasting.

Ultimate Backups | TechSNAP 26

chris — Thu, 06 Oct 2011 19:52:13 +0000

We’ll tell you about AT&T leaving Android open to a hack so easy, my two year old son could pull it off. Plus FireFox goes to battle with McAfee and is Bank of America Under attack?

Then – We delve into backups, from the fundamentals to the very best tools!

All that and more, in this week’s TechSNAP!

Direct Download Links:

Subscribe via RSS and iTunes:

[ad#shownotes]

Show Notes:

Security hole in AT&T Samsung Galaxy S II

Bug allows someone to bypass the security lockout screen, accessing the phone without the password
The flaw does not exist on the Sprint version of the Samsung Galaxy S , or the Epic Touch 4G
By pressing the lock button to wake the phone, and you will be prompted with the unlock screen. Allow the phone to go back to sleep, and immediately tap the lock button again, and you will have access to the phone
This feature is likely designed for the situation where you are waiting for some interaction on the phone and it falls asleep, if you press a button to wake it within a few seconds, it doesn’t prompt you to reunlock the phone. This is a useful feature, however, it should be predicated on the fact that you just recently unlocked the phone (don’t make me unlock the phone twice within 90 seconds, or something similar)
The flaw only effects phones that have been unlocked once since boot
Since the flaw only effects the AT&T version of the phone, it would seem it is based on software added to the phone by AT&T, which appears to cache your response to the unlock screen, and use it to bypass the screen when you re-wake the phone immediately after it goes to sleep.
Another example of the vendors messing with the core google product.
Users with Microsoft Exchange security policies don’t seem to be affected
Users can adjust the settings on their phone by accessing: Settings ->Location and Security->Screen unlock settings->Timeout and setting the value to Immediately, disabling the ‘feature’ that presents the vulnerablity.

Firefox advises users to disable McAfee Plugin

Firefox says the McAfee ScanScript plugin causes Stability and Security problems
The problem only seems to effect the new Firefox 7, it is likely caused by a compatibility problem with versions of ScanScript designed for older versions of Firefox
Firefox has started generating popup warnings to users using versions of McAfee older than 14.4.0 due to an incredibly high volume of crash reports
McAfee says it is working with Firefox to solve the issue for the next version of the software
McAfee is very popular in corporate environments and is often enforced with a Active Directory Group Policy that makes it nearly impossible for the end user to disable the virus scanner

Bank of America – Unexplained Outages – Is it an attack?

The Bank of America website has been degraded, slow, returning errors or down for more than 6 days
Bank of America (BofA) said its Web and mobile services have not been hit by hacking or denial-of-service attacks, however they would not disclose what has been causing the online problems.
Quote: “I just want to be really clear. Every indication [is that] recent performance issues have not been the result of hacking, malware or denial of service,” said BofA spokeswoman Tara Burke. “We’ve had some intermittent or sporadic slowness. We don’t break out the root cause.”
The problems began Friday morning, a day after BofA announced it would charge a $5 monthly fee for account holders using their debit cards
Additional Coverage

Feedback:

Continuing our Home Server Segment – This week we are covering backups.
Before we cover some of the solutions, we should look at some of the concepts and obstacles to creating proper backups. There are a number of different ways to back things up, but the most popular involves using multiple ‘levels’ of backup.

Full backup
This is a backup of every file (or a specific subset, or without specific exclusions) on a system.
This is the base of higher level backups, and is also known as a level 0 backup
Full backups are the biggest and take the slowest
Differential Backup
A differential backup is one that includes every file that has changed since the last full backup was started (this is important).
>It is very important the higher level backups always be based on the START time of the lower level backup, rather than the last modified, or finish time. During the last backup, if the file changed after it was backed up, but before that backup completed, we want to be sure to include it in the next backup
Differential backups require only the most recent full backup to restore
Incremental Backup
An incremental backup consists of every file that has changed since the start of the last backup of any level
Incremental backups are the smallest and fastest
Incremental backups can take the longest to restore, and can require access to each of the previous differential backups since last full backup, and that most recent full backup
Incremental backups offer the trade off, they take less time and less storage, however they slow the recovery process.
Incremental backups, due to their smaller size, make it easier to have ‘point of time’ backups of files, rather than just the most recent.
Some backup systems do away with the name designations, and allow even more granularity
A level 0 backup is a full backup
A level 1 is everything that has changed since the level 0
A level n is everything that has changed since the last level n–1 or higher
Systems such as the unix ‘dump’ utility, allow up level 9 backups
Some backup systems, such as Bacula, support ‘synthetic full backups’
A synthetic backup is when you use a full backup, plus more recent differential and incremental backups to create a new, more recent full backup.
This can be especially advantageous in remote and off site backup systems, where transferring the full data set over the network can be very slow and costly.
rsync
Not actually a backup tool, it just creates and synchronizes a copy of the files
Copies only the changes to the files, so is faster
snapshots
A point in time copy of the files in a filesystem (supported by LVM, UFS, ZFS, etc)
A good place to take a backup from, resolves issues with open files
bacula
Designed to backup a large number of machines
Quite a bit of setup (Directory, Storage Daemon, SQL Database, File Daemons (Clients))
Cross platform
Powerful deduplication system, and ‘base backups’
Support for Windows Volume Shadow Copy (snapshots of open files)
flexbackup
simple perl script that creates archives (tar, cpio, etc) with optional compression (gzip, bzip2, etc).
Uses the ‘find’ command to create multi-level backups based on modified date
backupmypc
rsync based
Supports FTP, SCP, RCP, & SMB for Windows
s very smart about how it handles portable devices that miss backups.
It’s magic is it’s de-dupe hard-link mojo that saves tons of space
Bit of a nerd project to get going, but is bullet proof once its in
TarSnap – BSD Encrypted Cloud Backup
Mondo Rescue – GPL disaster recovery solution
CrashPlan – Online Backup Software, Disaster Recovery
Allan’s AppFail.com article about backups

Round Up:

Jupiter Broadcasting stats

Firefox 42.66%
Chrome 29.73%
Internet Explorer 14.43%

The post Ultimate Backups | TechSNAP 26 first appeared on Jupiter Broadcasting.