Show Notes: coder.show/456

The post Linux CEO | Coder Radio 456 first appeared on Jupiter Broadcasting.

Show Notes: techsnap.systems/384

The post Interplanetary Peers | TechSNAP 384 first appeared on Jupiter Broadcasting.

Show Notes: techtalk.today/269

The post The Slice Age | T3 269 first appeared on Jupiter Broadcasting.

Links:

• Uber Halts Autonomous-Car Testing After Fatal Arizona Crash — The 49-year-old woman, Elaine Herzberg, was crossing the road outside of a crosswalk when the Uber vehicle operating in autonomous mode under the supervision of a human safety driver struck her, according to the Tempe Police Department.
• Google plans to boost Amazon competitors in search shopping ads — Google made the announcement on its AdWords blog this morning, detailing an initiative called Shopping Actions. Through this feature, retailers can leverage a “universal cart” that allows customers to easily shop across mobile, desktop and voice-controlled devices. Basically, Google says this will make it much easier for you to shop by voice or with a phone/computer from a number of stores.
• Cambridge Analytica harvested data from millions of unsuspecting Facebook users — Cambridge Analytica, a company that profiled voters for Donald Trump’s campaign, allegedly harvested private information from more than 50 million Facebook profiles, which they used to influence and wage a “culture war” during the 2016 election.
• New York professor sues Cambridge Analytica to find out what it knows about him
• Facebook wants more video creators to compete with YouTube, so it’s rolling out a subscription feature – Recode — Facebook will soon let you subscribe to your favorite creator for $5 a month.
• GrayKey iPhone unlocker poses serious security concerns — According to Forbes, the GrayKey iPhone unlocker device is marketed for in-house use at law enforcement offices or labs.
• Twitter Will Ban Most Cryptocurrency-Related Ads — Twitter plans to ban most cryptocurrency-related ads in the next few weeks, as Sky News first reported and a source confirms to Axios. Why it matters: The recent boom in cryptocurrencies and digital tokens has unsurprisingly attracted some fraudsters. Twitter is following in the footsteps of Facebook and Google, though it’s been having its own problems with accounts promoting scams.

The post Unethical Data Experiment | T3 268 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Imgur’s blog post Re: notice of data breach

• Imgur Confirms 2014 Breach Of 1.7 Million User Accounts

• Troy Hunt praised Imgur’s “exemplary handling” of the incident

• Firefox to collaborate with HaveIBeenPwned to alert users on data breach

• What’s the correct date? 2013 or 2014?

Contrast Imgur’s breach handling wth that of DJI

• developers had left the private keys for both the “wildcard” certificate for all the company’s Web domains and the keys to cloud storage accounts on Amazon Web Services exposed publicly in code posted to GitHub

• Findings of developer: Why I walked away from
  $30,000 of DJI bounty money – PDF

• But as Finisterre worked to document the bug with the company, he got increasing pushback—including a threat of charges under the Computer Fraud and Abuse Act (CFAA).

• “At one point… DJI even offered to hire me directly to consult with them on their security,” Finisterre wrote.

• Ultimately, Finisterre received an e-mail containing an agreement contract that he said “did not offer researchers any sort of protection. For me personally, the wording put my right to work at risk, and posed a direct conflict of interest to many things including my freedom of speech.” It seemed clear to Finisterre that “the entire ‘Bug Bounty’ program was rushed based on this alone,” he wrote.

how can I prevent myself from getting hacked?

• not everyone agrees with Motherboard so see also Basic security precautions for non-profits and journalists in the United States, mid-2017. but to be fair, Bruce say’s it’s pretty good

• see also other Motherboard guides

• Do you want to stop criminals from getting into your Gmail or Facebook account? Are you worried about the cops spying on you? We have all the answers on how to protect yourself.

• The Electronic Frontier Foundation guide to Assessing Your Risks

• … if you come away with one lesson from this guide is: update, update, update, or patch, patch, patch.

• Use a password manager

• Two factor authentication: You should, if the website allows it, use another 2FA option that isn’t SMS-based, such as an authentication app on your smartphone (for example, Google Authenticator, DUO Mobile, or Authy), or a physical token. If that option is available to you, it’s great idea to use it.

• use an ad blocker (e.g. uBlock Origin). Why? A great deal of malware comes through ads.

• Get an iPhone and don’t jailbreak it

• Use Signal instead of WhatsApp

• Even if you keep your privacy settings on lockdown, social media companies are subject to subpoenas, court orders, and data requests for your information. And often times, they’ll fork over the information without ever notifying the user that it’s happening. For the purposes of social media, assume that everything you post is public. This doesn’t mean you should stop using social media, it just means you have to be mindful of how you use it.

Feedback

• Tape Drives and Jails – FreeNAS jails

• From Samir, based on question from Episode 346 : Linux Containers vs Virtual Machines

• Jonathan Davis mentioned Schrodingers Backup Mug

• I will Miss you Mr. Dan

• Reverse SSH as Poor-Man’s VPN

Round Up:

• Potential impact of the Intel ME vulnerability

• Mostly for ZFS: Policy-driven snapshot management and replication tools. & see also zfstools : OpenSolaris-compatible auto snapshotting for ZFS

• The strongest KASLR, ever?

• Better Random Number Generation for OpenSSL, libc, and Linux Mainline – But what’s really exciting for us is that, in the course of working on libc, we were also able to get traction on another important change, in Linux itself. Last year, we suggested a new madvise() option for the Linux kernel. Based on OpenBSD’s MINHERIT_ZERO, the option marks memory regions as WIPEONFORK, which means that those regions are zeroed in a child process immediately after a fork() call.

• How a single PostgreSQL config change improved slow query performance by 50x

• Troy Hunt testifies before Congress and you should be able to watch it live here

• A minimalist guide to tmux

• Top SSL Issuers

The post A Farewell to Dan | TechSNAP 347 first appeared on Jupiter Broadcasting.

RSS Feeds:

MP3 Feed | Video Feed | iTunes Feed

Become a supporter on Patreon:

Links

• Uber Paid Hackers to Delete Stolen Data on 57 Million People – Bloomberg

• 2016 Data Security Incident | Uber Newsroom

• New “Quad9” DNS service blocks malicious domains for everyone | Ars Technica

• Just for Fun: The Story of an Accidental Revolutionary: Linus Torvalds, David Diamond: 9780066620732: Amazon.com: Books

• The Culture – Wikipedia

• Salt: A World History: Mark Kurlansky: 9780142001615: Amazon.com: Books

• The Ultimate Guide to Condenser Microphones for Home Recording

• Podcast Method

The post Eggcellent Recommendations | User Error 36 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Cisco’s Talos Intelligence Group Blog: Player 3 Has Entered the Game: Say Hello to ‘WannaCry’

FCC Filings Overwhelmingly Support Net Neutrality Once Anti-Net Neutrality Spam is Removed

• Net Neutrality II: Last Week Tonight with John Oliver (HBO)

• Because of a procedural quirk, the FCC will not be considering any comments on the issue of net neutrality that are submitted over the next week or so.

• https://youtu.be/qI5y-_sqJT0 — follow up video

Feedback

• IPv6 only

• ZoL and other Linux Filesystems

Round Up:

• Ways in which the WannaCry ransomware could have been much worse

• Postmortem for outage of us-east-1

• 1.9 million Bell customer email addresses stolen by ‘anonymous hacker’ – Technology & Science – CBC News

• Appcanary – Everything you need to know about HTTP security headers

• GitHub – schollz/howmanypeoplearearound: Count the number of people around you by monitoring wifi signals

The post Kill Switch Engage | TechSNAP 320 first appeared on Jupiter Broadcasting.