We cover the breaking news out of CES, Ford’s new found love for the Amazon Echo, the first big LastPass release after LogmeIn & how Star Trek creator Gene Roddenberry’s words were freed from old floppy disks.

Plus our Kickstarter of the week & more!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

• Linux Action Show at SCALE 14x | Teespring
• Nvidia Announces New Drive PX 2 ‘Supercomputer In A Lunchbox’ For Self-Driving Cars | TechCrunch
• NVIDIA CES 2015 press conference: DRIVE PX Computer Vision (part 7) – YouTube
• Ford meets Amazon: Automaker to integrate Echo and Alexa with SYNC, linking cars to homes – GeekWire
• Ford is finally adding CarPlay and Android Auto to its cars | The Verge
• LogMeIn adds emergency break-in feature to LastPass •
• EFF Confirms: T-Mobile’s Binge On Optimization is Just Throttling, Applies Indiscriminately to All Video | Electronic Frontier Foundation
• Oculus Rift preorders start in less than 48 hours, but price and ship date still a mystery – GeekWire
• How Star Trek creator Gene Roddenberry’s words were freed from old floppy disks | PCWorld
• ProGo – A Revolutionary Carry-on Backpack by Ari — Kickstarter

The post Live Long and Floppy | TTT 228 first appeared on Jupiter Broadcasting.

The new OnePlus 2 specs, price, availability & everything else you should know are out. Motorola doubles down on Moto X with Style, Play & updates Moto G. Microsoft’s Arrow Launcher for Android, Razer acquires OUYA & Scientists confirm ‘impossible’ EM Drive propulsion.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

• OnePlus 2 specs, price, availability and everything else you should know
• Motorola doubles down on Moto X with Style and Play, and updates Moto G – CNET
• This is Microsoft’s Arrow Launcher for Android (download APK)
• Some Steam Accounts Hijacked Following Security Lapse
• Razer Acquires OUYA Software Assets | techPowerUp
• Scientists Confirm ‘Impossible’ EM Drive Propulsion | Hacked
• Smoking Gun: MPAA Emails Reveal Plan To Run Anti-Google Smear Campaign Via Today Show And WSJ | Techdirt

The post EMerging Science | TTT 197 first appeared on Jupiter Broadcasting.

The FCC Chairman makes it clear, he plans to push for Title II classification of the Internet. Is Net Neutrality going to save us all? We’ll debate & discuss the mounting counter battle.

Plus Valve is about to reveal their openGL replacement & we take a look at an open source device that’s NSFW.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

FCC Chairman Tom Wheeler: This Is How We Will Ensure Net Neutrality

After more than a decade of debate and a record-setting proceeding that attracted nearly 4 million public comments, the time to settle the Net Neutrality question has arrived. This week, I will circulate to the members of the Federal Communications Commission (FCC) proposed new rules to preserve the internet as an open platform for innovation and free expression. This proposal is rooted in long-standing regulatory principles, marketplace experience, and public input received over the last several months.

Broadband network operators have an understandable motivation to manage their network to maximize their business interests. But their actions may not always be optimal for network users. The Congress gave the FCC broad authority to update its rules to reflect changes in technology and marketplace behavior in a way that protects consumers. Over the years, the Commission has used this authority to the public’s great benefit.

AT&T previews lawsuit it plans to file against FCC over net neutrality | Ars Technica

AT&T seems resigned to the near-certainty that the Federal Communications Commission will reclassify broadband as a common carrier service in order to enforce net neutrality rules. But it isn’t going to let the decision stand without a legal challenge, and the company is already telling the world what it’s going to argue in court.

“I have no illusions that any of this will change what happens on February 26,” when the FCC is expected to vote, AT&T Federal Regulatory VP Hank Hultquist wrote in a blog post yesterday. “But when the FCC has to defend reclassification before an appellate court, it will have to grapple with these and other arguments. Those who oppose efforts at compromise because they assume Title II rests on bullet proof legal theories are only deceiving themselves.”

Toshiba releases super-secure Encrypted USB Flash Drive with hardware-based encryption

“Available in 4GB ($95), 8GB ($112), 16GB ($140) and 32GB ($200) capacities, the Toshiba Encrypted USB Flash Drive uses a built-in mini-keyboard to authenticate access, incorporating a rechargeable battery so the user can enter a secure code before plugging into a USB port. Users simply enter their secure PIN and plug the drive into any USB 2.0 port on a compatible device. Once access is granted, the drive ‘unlocks’ the media, permitting clearance to all of the content stored on the drive. When the drive is removed from a USB port, the drive automatically re-locks and encrypts the stored media”, says Toshiba.

Serious bug in fully patched Internet Explorer puts user credentials at risk | Ars Technica

A vulnerability in fully patched versions of Internet Explorer allows attackers to steal login credentials and inject malicious content into users’ browsing sessions. Microsoft officials said they’re working on a fix for the bug, which works successfully on IE 11 running on both Windows 7 and 8.1.

The vulnerability is known as a universal cross-site scripting (XSS) bug. It allows attackers to bypass the same origin policy, a crucially important principle in Web application models that prevents one site from accessing or modifying browser cookies or other content set by any other site. A proof-of-concept exploit published in the past few days shows how websites can violate this rule when people use supported versions of Internet Explorer running the latest patches to visit maliciously crafted pages.

glNext: The Future of High Performance Graphics (Presented by Valve)

Join us for the unveiling of Khronos’ glNext initiative, the upcoming cross-platform graphics API designed for modern programming techniques and processors. glNext will be the singular choice for developers who demand peak performance in their applications. We will present a technical breakdown of the API, advanced techniques and live demos of real-world applications running on glNext drivers and hardware.

KICKSTARTER OF THE WEEK: The Mod – Multivibrating Open-Source Dildo | Indiegogo

The Mod is a great vibrator. It’s made from 100% silicone.
Its three powerful motors create amazing sensations, ranging from a lovely low
frequency rumble to patterns that move up and down the shaft. It is USB rechargeable,
and its built in buttons make it easy to control vibration patterns and
intensities.

The post Open-source Market Penetration | Tech Talk Today 127 first appeared on Jupiter Broadcasting.

What are the best options for non-coders and developers to contribute to their favorite open source project? We’ll break down some of the barriers we’ve faced & approaches we like to help out in a non-development capacity.

Plus the common ways the Ghost vulnerability is being exploited, how you can do your taxes under Linux & a few surprises!

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | OGG Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

— Show Notes: —

Contribution to open source when your not a developer

Brought to you by: System76

Problems we’ve faced trying to help

• Who could use the money the most ie: Mozilla vs Tox

• Abandoned IRC, unclear if anyone still “owning” the project.

• Mixed ways of funding. I want to contribute, but each project has their own payment system, and way of handling it.

Non-Monetary ways to help

• Advocation for software,

• Documentation

• Community outreach

• Bug Triage, find dupes, discover missing information developers would need to fully troubleshoot.

— PICKS —

Runs Linux

Samsung Smart Refrigerator

The Samsung 4-Door refrigerator with 8″ Wi-Fi Enabled LCD will allow you to browse the web, access apps and connect to other Samsung smart devices – opening up a world of interactive communication and entertainment.

• Samsung’s new smart fridge mirrors your smart phone

Desktop App Pick

Gourmet Recipe Manager

Gourmet Recipe Manager is a recipe-organizer available for Windows, Linux, and other Unix systems.

Weekly Spotlight

BeansBooks

Easily create invoices and purchase orders, pay bills and track sales tax. Import and automatically categorize bank transactions.

Our Past Picks

These are the weekly picks provided by the Jupiter Broadcasting podcast, the Linux Action Show.

This site includes a separate picks lists for the “Runs Linux”, Desktop Apps, Spotlight Picks, Android Picks, and Distro Picks.

— NEWS —

WordPress, PHP Apps, Subject to Ghost glibc Attacks

“Less than 48 hours after the disclosure of the Ghost vulnerability in the GNU C library (glibc), researchers have uncovered that PHP applications, including the WordPress content management system, could be another weak spot and eventually in the crosshairs of attackers.

Ghost is a vulnerability in glibc that attackers can use against only a handful of applications right now to remotely run executable code and gain control of a Linux server. The vulnerability is a heap-based buffer overflow and affects all Linux systems, according to experts, and has been present in the glibc code since 2000. ???An example of where this could be a big issue is within WordPress itself: it uses a function named wp_http_validate_url() to validate every pingback???s post URL,??? wrote Sucuri research Marc-Alexandre Montpas in an advisory published Wednesday. ???And it does so by using gethostbyname(). So an attacker could leverage this vector to insert a malicious URL that would trigger a buffer overflow bug, server-side, potentially allowing him to gain privileges on the server.???”

LibreOffice gets a streamlined makeover, native alternatives for major Microsoft

The Document foundation announced availability of the latest version of LibreOffice on Thursday, which it says is the most beautiful version of the open source productivity suite yet. LibreOffice 4.4 also fixes some compatibility issues with files that are saved in Microsoft’s OOXML formats.

Official Google Drive Linux Client Screenshots Leaked

The screenshots above are bundled with the official Google Drive Mac client and they first appeared with version 1.18.7821.2489 (I checked the previous version and some random old versions and none contained these screenshots), released on October 30, 2014, which isn’t long ago and it most probably means that Google is testing Drive for Linux internally. So we might actually see an official release pretty soon.

Bill Gates Inadvertently Shows Off Ubuntu on His Facebook Page

The Internet is abuzz today after Bill Gates published an image on his Facebook page and a link towards his website with the text “15 years from now, most people in poor countries will be able to take classes online.” It’s a sound goal and it’s perfectly doable, but in the image posted on Facebook the operating system is Ubuntu.

— FEEDBACK —

• Income Tax software for Linux

• Help Noah aquire this for his house

— CHRIS’ STASH —

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— NOAH’S STASH —

• Noah’s Day Job

Find us on Google+

• Chris
• Noah J. Chelliah
• Jupiter Broadcasting’s Page

Find us on Twitter

• Chris – ChrisLAS
• Noah – Kernellinux

Follow the network on Facebook

• Jupiter Broadcasting on Facebook
• Noah – Kernellinux

Catch the show LIVE Sunday 10am Pacific / 1pm Eastern / 6pm UTC:

• https://jblive.tv
• Network Calendar

The post How Non-Devs Can Help Linux | LAS 350 first appeared on Jupiter Broadcasting.

WireLurker is attacking iOS and Macs in China & researches say it could be the future of attacks for the platform. Google fires back at Dropbox & Microsoft by owning your “Open With” menu.

Plus what Office going free means for open source projects like LibreOffice.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Google Drive now lets you open files in compatible Mac & PC apps w/ new Chrome extension | 9to5Google

Google announced today that it’s releasing a new Chrome extension called Application Launcher for Drive that allows users to open files directly from its Google Drive service in compatible apps on a Mac or PC. The extension adds an “Open With” option that will let users launch files in apps like, for example, Mac OS X’s Preview app or third-party editing apps like those from Adobe and Microsoft.

Users can enable the feature by installing the new Chrome extension from the Chrome Web Store and making sure files are synced using the latest version of the Drive app for Mac or PC. You’ll then be able to see compatible apps by right-clicking files and selecting “Open With” in Drive (as pictured above).

Researchers Discover New ‘WireLurker’ Malware Affecting Macs and iOS Devices in China – Mac Rumors

Researchers from Palo Alto Networks (via The New York Times) have published a research paper on WireLurker, a malware new family that’s been infecting both Mac OS and iOS systems over the course of the past six months. The researchers say that WireLurker, which is targeting users in China, “heralds a new era in malware attacking Apple’s desktop and mobile platforms.”

The WireLurker malware is the “biggest in scale” in the trojanized malware family, and it is able to attack iOS devices through OS X using USB. It’s said to be able to infect iOS applications similar to a traditional virus, and it is the first malware capable of installing third-party applications on non-jailbroken iOS devices “through enterprise provisioning.”

Thus far, WireLurker has been used in 467 OS X apps in the Maiyadi App Store, which is a third-party Mac app store in China. The apps have been downloaded 356,104 times, infecting hundreds of thousands of users.

According to the researchers, WireLurker looks for iOS devices connected via USB to an infected Mac, installing malicious third-party applications onto the device even without a jailbreak.

Once installed, WireLurker can collect information from iOS devices like contacts and iMessages, and it’s able to request updates from attackers. It’s said to be under “active development” with an unclear “ultimate goal.”

Former NSA lawyer: the cyberwar is between tech firms and the US government | Technology | The Guardian

Former NSA general counsel Stewart Baker said on Tuesday.

Speaking at Web Summit in Dublin, Baker claimed that moves by Google and Apple and others to encrypt user data was more hostile to western intelligence gathering than to surveillance by China or Russia.

“The state department has funded some of these tools, such as Tor, which has been used in Arab Spring revolutions or to get past the Chinese firewall, but these crypto wars are mainly being fought between the American government and American companies,” he said, in conversation with Guardian special projects editor James Ball.

Baker said encrypting user data had been a bad business model for Blackberry, which has had to dramatically downsize its business and refocus on business customers. “Blackberry pioneered the same business model that Google and Apple are doing now – that has not ended well for Blackberry,” said Baker.

OnePlus One sales numbers: 500,000 smartphones sold to date, stretch goal of 1 million by year’s end | 9to5Google

OnePlus co-founder Carl Pei confirmed to Forbes that OnePlus One smartphone sales have eclipsed the 500,000 mark to date, adding that the Chinese company has a lofty goal of selling 1 million units by the end of the year.

Forbes claims that OnePlus has achieved half a million sales of its flagship One device, which has been available on an invite-only basis since April, with an advertising budget of just $300. That small figure was allocated towards OnePlus experimenting with Facebook advertising.

Models go for $299 and $349.

OnePlus has been able to sell its flagship One smartphone for so cheap because it is only barely profiting off each handset sold. “We’re making a single-figure dollar amount on each phone,” Pei told Forbes. “That’s not the way we’re going to make money in the future, it’s just to keep the operation going.”

Microsoft Changes Tack, Making Office Suite Free on Mobile

“We’d like to dramatically increase the number of people trying Office,” John Case, corporate vice president of Office marketing at Microsoft, said about the new offering. “This is about widening the funnel.”

Microsoft says it has more than 7 million consumers subscribing to Office 365. It says there have been more than 40 million downloads of its Office apps for the iPad. In its most recent quarter, which ended Sept. 30, Microsoft said its consumer Office revenue grew 7 percent.

By making an unabridged version of Office available for free on mobile, Microsoft is betting it can get even more people to start using the software, without stealing sales from the PC and Mac versions of the product, where it still makes truckloads of money.

The post Macs Do Get Viruses | Tech Talk Today 87 first appeared on Jupiter Broadcasting.

Did Home Depot get struck by the same malware that attacked Target? How the FBI found the Silkroad server, and Reddit just got a big cash infusion… But is it enough?

Plus a nostalgic look back at the WORM drive & much more!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Reddit Raising Big Funding Round With Help From Y Combinator Contacts

Reddit, the social news site with a big Web footprint, is raising a big funding round — with help from some of the people who helped launch the site nine years ago, including co-founder Alexis Ohanian and other people associated closely with startup incubator Y Combinator.

Sources said the site has reached a preliminary agreement to sell less than 10 percent of the company for more than $50 million. That could give the company a valuation of upwards of $500 million.

Home Depot Hit By Same Malware as Target — Krebs on Security

The apparent credit and debit card breach uncovered last week at Home Depot **was aided in part by a new variant of the same malicious software program that stole card account data from cash registers at **Target last December, according to sources close to the investigation.

A source close to the investigation told this author that an analysis revealed at least some of Home Depot’s store registers had been infected with a new variant of “BlackPOS” (a.k.a. “Kaptoxa”), a malware strain designed to siphon data from cards when they are swiped at infected point-of-sale systems running Microsoft Windows.

BlackPOS also was found on point-of-sale systems at Target last year. What’s more, cards apparently stolen from Home Depot shoppers first turned up for sale on Rescator[dot]cc, the same underground cybercrime shop that sold millions of cards stolen in the Target attack.

—

Other clues in the new BlackPOS malware variant further suggest a link between the cybercrooks behind the apparent breach at Home Depot and the hackers who hit Target. The new BlackPOS variant includes several interesting text strings. Among those are five links to Web sites featuring content about America’s role in foreign conflicts, particularly in Libya and Ukraine.

One of the images linked to in the guts of the BlackPOS code.

Three of the links point to news, editorial articles and cartoons that accuse the United States of fomenting war and unrest in the name of Democracy in Ukraine, Syria, Egypt and Libya. One of the images shows four Molotov cocktails with the flags of those four nations on the bottles, next to a box of matches festooned with the American flag and match ready to strike. Another link leads to an image of the current armed conflict in Ukraine between Ukrainian forces and pro-Russian separatists.

Dread Pirate Sunk By Leaky CAPTCHA — Krebs on Security

“The IP address leak we discovered came from the Silk Road user login interface. Upon examining the individual packets of data being sent back from the website, we noticed that the headers of some of the packets reflected a certain IP address not associated with any known Tor node as the source of the packets. This IP address (the “Subject IP Address”) was the only non-Tor source IP address reflected in the traffic we examined.”

“The Subject IP Address caught our attention because, if a hidden service is properly configured to work on Tor, the source IP address of traffic sent from the hidden service should appear as the IP address of a Tor node, as opposed to the true IP address of the hidden service, which Tor is designed to conceal. When I typed the Subject IP Address into an ordinary (non-Tor) web browser, a part of the Silk Road login screen (the CAPTCHA prompt) appeared. Based on my training and experience, this indicated that the Subject IP Address was the IP address of the SR Server, and that it was ‘leaking’ from the SR Server because the computer code underlying the login interface was not properly configured at the time to work on Tor.”

• Nik Cubrilovic – New Web Order » Analyzing the FBI’s Explanation of How They Located Silk Road

Doubts cast over FBI ‘leaky CAPTCHA’ Silk Road rapture • The Register

“The idea that the CAPTCHA was being served from a live IP is unreasonable. Were this the case, it would have been noticed not only by me — but the many other people who were also scrutinizing the Silk Road website. Silk Road was one of the most scrutinized sites on the web, for white hats because it was an interesting challenge and for black hats since it hosted so many Bitcoin (with little legal implication if you managed to steal them).”

Moreover, an externally hosted image would still be routed over Tor and any packet sniffer would be unable to detect the Silk Road’s IP address.

Cubrilovic claimed it was more likely the FBI found and exploited a security vulnerability or discovered an information leak in the Silk Road login page and application.

CenturyLink Said to Seek to Acquire Rackspace Hosting – Bloomberg

CenturyLink has discussed the idea with San Antonio-based Rackspace, which last month said it is still conducting an internal review of its strategic options, according to the people, who asked not to be identified talking about private information. One person said a deal may not be reached for the company, which had a stock-market valuation of $5.33 billion at the end of last week.

Odds of the deal going through are less than 50 percent unless Rackspace is willing to take payment in stock or enter a joint venture, Jaegers said. CenturyLink wants to avoid a debt downgrade that may come with financing a large deal, she said.

What is WORM (write once, read many)?

In computer storage media, WORM (write once, read many) is a data storage technology that allows information to be written to a disc a single time and prevents the drive from erasing the data. The discs are intentionally not rewritable, because they are especially intended to store data that the user does not want to erase accidentally. Because of this feature, WORM devices have long been used for the archival purposes of organizations such as government agencies or large enterprises. A type of optical media, WORM devices were developed in the late 1970s and have been adapted to a number of different media. The discs have varied in size from 5.25 to 14 inches wide, in varying formats ranging from 140MB to more than 3 GB per side of the (usually) double-sided medium. Data is written to a WORM disc with a low-powered laser that makes permanent marks on the surface.

• IBM 3363 optical WORM drive | 102671161 | Computer History Museum

The post Grand Theft Depot | Tech Talk Today 54 first appeared on Jupiter Broadcasting.

Michael Hall from Canonical joins us to discuss his personal views on what he’s coined the new 80/20 rule for open source. Are the consumers of open source the biggest hurdle to projects becoming sustainable?

Plus Valve might looking at your DNS history, getting young users to try Linux, and your feedback!

Thanks to:

• Help the DigitalOcean community by submitting articles and get paid $50 per published piece!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

Show Notes:

FU

• HowTo Linux Show… Website?!

• GNU/Linux for the younger generation

• Chris thinks Internet savvy younger Linuxers will find the resources for the adults and adapt. They just need to be encouraged and told self education is not a bad thing.

• Comments about the last LUP show…

• Linux in school

• Valve, VAC, and trust

There are a number of kernel-level paid cheats that relate to this Reddit thread[1] . Cheat developers have a problem in getting cheaters to actually pay them for all the obvious reasons, so they start creating DRM and anti-cheat code for their cheats. These cheats phone home to a DRM server that confirms that a cheater has actually paid to use the cheat.

VAC checked for the presence of these cheats. If they were detected VAC then checked to see which cheat DRM server was being contacted. This second check was done by looking for a partial match to those (non-web) cheat DRM servers in the DNS cache. If found, then hashes of the matching DNS entries were sent to the VAC servers. The match was double checked on our servers and then that client was marked for a future ban. Less than a tenth of one percent of clients triggered the second check. 570 cheaters are being banned as a result.

Cheat versus trust is an ongoing cat-and-mouse game. New cheats are created all the time, detected, banned, and tweaked. This specific VAC test for this specific round of cheats was effective for 13 days, which is fairly typical. It is now no longer active as the cheat providers have worked around it by manipulating the DNS cache of their customers\’ client machines.

Michael Hall: A new 80/20 rule for open source Upstream Liaison

• A new 80/20 rule for open source | Michael Hall

Put simply, this rule says that people will tend to appreciate it more when you give them 20% of something, and resent you if you give them 80%. It seems completely counter-intuitive, I know, but that\’s what I was seeing in all of those conversations. People by and large were saying that the reason Canonical and Mozilla were being judged so harshly was because they already did most of what those people wanted, which made them resented that they didn\’t do everything.

Mailsack:

• Linux Trivia

• Retrieving data from a partition

• Ddrescue – GNU Project – Free Software Foundation (FSF)

The post Neckbeard Entitlement Factor | LINUX Unplugged 28 first appeared on Jupiter Broadcasting.

Preventing data at rest from rotting, Microsoft puts out the warning signal on RC4, and the International Space Station gets infected by malware.

Plus a fantastic batch of your questions, our answers, and much much more!

Thanks to:

Show Notes:

6 in 10 malware analysts in US have investigated or addressed a data breach that was never disclosed by their company

• “The independent blind survey of 200 security professionals dealing with malware analysis within U.S. enterprises was conducted by Opinion Matters on behalf of ThreatTrack Security in October 2013”
• “These results indicate that known data breaches may be significantly underreported and are putting customers and partners at risk”
• “according the survey, companies with more than 500 employees are even more likely to have had an unreported breach”
• A device used by a member of senior management is most likely to be infected by:
• Clicking on a malicious link in a phishing email (56%)
• Allowing a family member to use a company-owned device (45%)
• Visiting a pornographic website (40%)
• Installing a malicious mobile app (33%)
• “When asked to identify the most difficult aspects of defending their companies\’ networks from advanced malware, 67% said the complexity of malware is a chief factor; 67% said the volume of malware attacks; and 58% cited the ineffectiveness of anti-malware solutions.”

Microsoft tells developers to drop RC4 from their applications

• They also recommend against using SHA-1, and will stop recognizing the validity of SHA-1 based certificates after 2016
• “Since 2005 there have been known collision attacks (where multiple inputs can produce the same output), meaning that SHA-1 no longer meets the security standards for a producing a cryptographically secure message digest”
• Additional Coverage
• Jacob Appelbaum: RC4 is broken in real time by the #NSA – stop using it.

International Space Station infected by malware

• The Malware came aboard on a USB stick carried by a Russian Astronaut
• “Kaspersky revealed that Russian astronauts carried a removable device into space which infected systems on the space station. He did not elaborate on the impact of the infection on operations of the International Space Station (ISS).”
• “Kaspersky said he had been told that from time to time there were \”virus epidemics\” on the station.”
• Until recently, the dozens of laptops on the ISS all ran Windows XP
• Kaspersky also revealed that an unnamed Russian nuclear facility, which is also cut off from the public internet, was infected with the infamous Stuxnet malware.
• “Russian security expert Eugene Kaspersky has also told journalists that the infamous Stuxnet had infected an unnamed Russian nuclear plant and that in terms of cyber-espionage \”all the data is stolen globally… at least twice.\””
• Additional Coverage

Feedback:

• Did you guys do a segment on Cryptlocker? I would really like to watch that

• FreeBSD as transparent DNS?

• Data Integrity

• New Job Blues

Round Up:

• While the FAA will allow passengers to use Kindles during flight, European regulators will allow 3g and 4g broadband
• Backblaze Blog » How long do disk drives last?
• Skype investigating adding ‘typing suprression’
• Cisco threatening the open switch design coming from Facebook, Intel and Broadcom
• GCHQ created fake LinkedIn to comprimise specific users’ information
• Amazon offering virtualized workspaces started at $35 per month
• Netflix and Youtube now make up 50.2% of US traffic during peak time
• XSplit does password reset after apparent compromise

The post Predicting Drive Failures | TechSNAP 136 first appeared on Jupiter Broadcasting.

Should Linux users be anti-cloud? Why do so many of us feel guilty for using the\”cloud\”?

This week will dig into this conundrum and maybe even solve this more and more complex question.

Plus a little KDE vs Gnome debate, moral pirates, and even RMS\’ workflow.

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

— Show Notes: —

FU

• paul4er comments on ZoneMinder Review | LAS s28e10

• Chris also managed to make his KDE setup look rather hideous — so no wonder no one would want to look at that for much longer! I see he now also is blaming KDE for what most likely was the unstable and impractical fiddler\’s distro, Arch, wrecking his configuration

• donniezazen comments on ZoneMinder Review | LAS s28e10

One think about KDE that has always bugged me is lack of a design philosophy.

— Dat Cloud —

• What would be your dream setup?

I would ideally like to have a machine with the speed and memory of a laptop, and the display size of a laptop too, combined with the same freedom that I have now on the Yeelong.

Until I can have them both, freedom is my priority. I’ve campaigned for freedom since 1983, and I am not going to surrender that freedom for the sake of a more convenient computer.

I do hope to switch soon to a newer model of Yeelong with a 10-inch display.

It\’s the little things that make me use the cloud. IE, Dropbox, G+ pictures, Google Docs, etc.

• Ex-Microsoft privacy adviser: I don\’t trust company after NSA revelations

Mail Sack:

• New Arch-er reporting : LinuxActionShow
• Comment on digital content restrictions

The post Cloud Guilt | LINUX Unplugged 8 first appeared on Jupiter Broadcasting.

RAM Prices are getting hot, we’ll tell you why.

Plus the router flaw you need to know about, a pfSense disaster, your questions our answers, and much much more.

On this week’s TechSNAP!

Thanks to:

— Show Notes: —

Hynix factory in China suffers damage in Fire. RAM prices shoot up

• The factory in Wuxi, China is responsible for 40 – 50% of Hynix’s output and 12 – 15% of all DRAM manufacturing capacity around the globe
• The fire started at 07:50 GMT and was extinguished at 09:20 GMT
• The fire apparently started while Hynix was installing some new equipment
• There was only one minor injury during the file
• Hynix has suspended operations at the plant while it evaluates the damage and makes repairs
• “Following news of the shutdown all memory suppliers have apparently stopped quoting prices”
• Reuters followup article
• Hynix reports that the damage is not as bad as initially reported, the huge plumes of black smoke were caused by the fact that the fire was in the air purification system
• Shares in Hynix’s competitors rose sharply, but then slackened off once it was reported that the damage was not severe. Micron shares were up 4 percent to $14.615 at midday Thursday, after surging almost 9 percent at one point. Sandisk was up 2.3 percent at $56.60, after climbing 6 percent at its peak.
• Samsung had 32.7 percent of the global DRAM market in the second quarter, Hynix 30 percent and Micron owned 12.9 percent
• Hynix has published a statement: \”Currently, there is no material damage to the fab equipment in the clean room, thus we expect to resume operations in a short time period so that overall production and supply volume would not be materially affected\”
• DRAM chip prices nearly doubled in the first six months of this year due to tight supply during the summer, prices had been starting to return to normal but this event will undoubtedly keep them inflated for some time to come

Amazon looking to hire 100 IT staff who can get Top Secret security clearance to work on CIA private cloud

• After IBM won a lawsuit to restart the bidding to decide who would build the CIA’s private cloud, Amazon has started a new recruiting drive
• The job openings include: software developers, operations managers and cloud support engineers, among others
• Candidates must meet all requirements to get a Top Secret security clearance, including passing a federally administered polygraph exam
• “Amazon\’s hiring effort includes an invitation-only recruiting event for systems support engineers at its Herndon, Va., facility on Sept. 24 and 25. “
• In filings, Amazon is claiming that it is uniquely qualified to deliver ‘cloud computing’, while analysts have responded by saying that Cloud computing \”simply describes one approach to data center asset provisioning, one that has been around and been practiced by vendors including IBM for many years\”
• The government originally accepted Amazon’s bid at $148 million over the IBM bid at $93 million
• Part of the problem was the way the government wrote the original RFP
• “The vendors were required to address hypothetical scenarios. In one instance, it involved the processing of 100 terabytes of data. But the scenario was ambiguous, and the vendors priced it in different ways, making it impossible to compare prices”
• Analysts also said that the CIA \”too casually brush off Amazon\’s outages\” when considering their bid
• Amazon\’s effort to get government cloud work includes being certified by the U.S. under its Federal Risk and Authorization Program, or FEDRAMP.

Kingcope finds vulnerabilities in Mikrotik routerOS sshd

• Mikrotik RouterOS uses ROSSSH rather than OpenSSH
• Kingcope found that ROSSSH is vulnerable to a remote pre-authentication heap corruption
• ShodanHQ shows that there are nearly 300,000 devices running ROSSSH
• There is an undocumented built-in user account, you can login as ‘devel’ using the admin password, if the file /etc/devel-login exists
• By sending a login name consisting of the letter A 100,000 times, you can crash the ssh daemon
• Exploitation of this vulnerability will allow full access to the router device

Feedback:

• FreeBSD 10\’s removal of GNU

  • Why FreeBSD Deprecated GCC

• pfsense goes down in flames

• IP Leak Follow up

• Hard drive diagnostics before installing FreeNAS ?

• Setting up your own private certificate authority?

• Create a Public Key Infrastructure Using the easy-rsa Scripts – ArchWiki

• Data Recovery business

• Linux Drive Recovery | LAS s27e10

Round up:

• Security researcher releases MegaPWN, displays your Mega private master key and RSA exponent – Just as Mega announces new email service to replace Lavabit and SilentCircle
• The search engine was invented 20 years ago
• Hilariously bad video about the power of IP KVM
• Building a VNC client in 200 lines of javascript (node.js)
• Unusual TOR growth continues, over 1 million new clients, important updates released to try to help the network scale
• NetworkWorld tries out Huawei’s first enterprise managed switch for the North American market – Good power consumption and acceptable performance, but a few rough spots
• The NSA hacks other countries by buying millions of dollars’ worth of computer vulnerabilities
• Godaddy sysadmin blog explains why you shouldn’t cluster your database based on GUIDs
• MyOpenID service shutting down due to lack of adoption
• Intel launches new i7 4690X extreme edition processor. 6x 3.6ghz with turbo up to 4.0ghz – confusingly named, other i7 4*** series are the new Haswell, which features better single core performance at the same clock speeds
• Thoughts on Snowden from a Counterintelligence Agent

The post Random Access Fires | TechSNAP 126 first appeared on Jupiter Broadcasting.

It’s a worst case scenario, when a server room catches fire in this week’s war story!

Plus: We’ll share a story that might make you re-think taking advantage of your hard drive warranty, the secrets to reliable SQL replication.

All that and more, in this episode of TechSNAP!

Thanks to:

Direct Download Links:

HD Video | Large Video | Mobile Video | MP3 Audio | OGG Audio | YouTube

Subscribe via RSS and iTunes:
    Subscribe...           --RSS-- TechSNAP HD TechSNAP Large     TechSNAP Mobile      TechSNAP MP3     TechSNAP OGG     --iTunes--     TechSNAP iTunes HD     TechSNAP iTunes Mobile     TechSNAP iTunes Large     TechSNAP iTunes MP3  
   

Show Notes: