internet – Jupiter Broadcasting

Requires unreliastic levels of censorship by platforms; not even the big players will be able to comply 100%
Proponents consider startups to be outliers, which “will be successfully prosecuted, civilly and criminally under this law”.
Proponents are overstating the effectiveness of filtering
Proposed standards actually discourage platforms from filtering

Companies Look to an Old Technology to Protect Against New Threats

Tape is an old techology. It is also highly reliable and stable
Tape sales are increasing
Yep, backup to NAS is great, but do you have different versions of your data?

CBS’s Showtime caught mining crypto-coins in viewers’ web browsers

This isn’t about CBS. It’s about the potential for abuse by website owners
Code unlikely to be official sanctioned / added by CBS; mure more likely it was a malicious third party or insider.
The email address associated with the mining account is personal, not corporate
Ethical issues for content providers to figure out

Feedback

Round Up:

The post Laying Internet Pipe | TechSNAP 339 first appeared on Jupiter Broadcasting.

Broadband from Space | TechSNAP 326

chris — Tue, 04 Jul 2017 22:52:58 +0000

RSS Feeds:

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Low-latency satellite broadband gets approval to serve US residents

UK Cops Say Visiting the Dark Web Is a Potential Sign of Terrorism

Dark web was mentioned in a leaflet amongst other items to watch
Police in the capital (London) have reportedly been handing out leaflets listing what authorities deem as suspicious activity, in the hope that vigilant community members can continue to provide helpful information to law enforcement.

https://krebsonsecurity.com/2017/06/got-robocalled-dont-get-mad-get-busy/

Feedback

Black and white print tracking dots: document forgery and counterfitting is not limited to cash, nor is the desire to track. – Joe

Round Up:

The post Broadband from Space | TechSNAP 326 first appeared on Jupiter Broadcasting.

Best of 2016 | TechSNAP 298

chris — Thu, 22 Dec 2016 10:37:02 +0000

RSS Feeds:

Become a supporter on Patreon:

Show Notes:

Links

The post Best of 2016 | TechSNAP 298 first appeared on Jupiter Broadcasting.

Creeper Cookies | TTT 215

chris — Wed, 07 Oct 2015 10:20:20 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Verizon’s super cookie just got nastier, Facebook has plans for free Internet from space & Google launches AMP, Accelerated Mobile Pages Project for a faster, open mobile web.

Direct Download:

RSS Feeds:

Show Notes:

— Episode Links —

The post Creeper Cookies | TTT 215 first appeared on Jupiter Broadcasting.

Traveling in the Future | FauxShow 222

chris — Thu, 06 Aug 2015 13:07:20 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Angela and Chris discuss a couple major projects that being worked on for the future of our airways. Everything from making our Back To The Future dreams come true to drone delivery from Amazon & getting internet to areas that can’t support a full infrastructure.

Email angela@jupiterbroadcasting.com your computer based PORN SKIT! Yes, write your own potentially horribly geeky porn skit and email it in. Send in a pic and/or link and IRC nick.

WTR

Check out [A Computer Should Do This | WTR 38 | Jupiter Broadcasting
Follow WTR on twitter: www.twitter.com/heywtr
Email WTR: wtr@jupiterbroadcasting.com

Follow Jupiter Broadcasting

See more pics: https://instagram.com/jupiterbroadcasting#
Sign up for Jupiter Signal: www.bit.ly/jupitersignal
Unfilter is on Patreon! https://www.patreon.com/unfilter
Tech Talk Today is on Patreon! https://www.patreon.com/jupitersignal

JB SWAG

Join our virtual LUG! | Teespring

— Find the FauxShow! —

Facebook: https://www.facebook.com/thefauxshow
Twitter: https://www.twitter.com/angerz
G+: https://www.gplus.to/fauxshow
Subscribe to Jupiter Signal: https://www.bit.ly/jupitersignal
Jupiter Radio: https://jblive.info
Affiliates Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/jupiterbroadcasting/
Affiliates Chrome Extension: https://chrome.google.com/webstore/detail/bjekemhblnilimncanbehhjijdpjgimj
Donations: https://original.jupiterbroadcasting.net/donate
Shows & Shownotes: https://original.jupiterbroadcasting.net/show/fauxshow/

The post Traveling in the Future | FauxShow 222 first appeared on Jupiter Broadcasting.

Early Tech Obsession | WTR 30

chris — Wed, 10 Jun 2015 06:35:12 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Shannon is a producer & podcast host on Hak5 and TekThing. She discusses her early obsession with technology & how she moved into the podcasting world.

Thanks to:

Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

Full transcription of previous episodes can be found below:

Transcription:

ANGELA: This is Women’s Tech Radio.
PAIGE: A show on the Jupiter Broadcasting Network interviewing interesting women in technology. Exploring their roles and how they are successful in technology. I’m Paige.
ANGELA: And I”m Angela.
PAIGE: So Angela, today we had an awesome opportunity to interview Shannon Morse. She’s a new media podcasting host. She’s known for the show Hak5 and also TekThing is her new show. We got to talk to her about how she got into everything, gaming, and all sorts of fun topics.
ANGELA: Yes, we sure did. And before we get into the interview, I’d like to mention Digital Ocean. If you go to digitalocean.com and use the promo code heywtr, you can save on simple cloud hosting dedictated to offering the most intuative and easy way to spin up a cloud server. You can create a cloud server in 55 seconds, and pricing plans start at only $5.00 a month. That’s 512 megabytes of RAM, 20 gigabytes SSD, 1 CPU, and 1 terabyte transfer. Digital Ocean has data center locations in New York, San Francisco, Singapore, Amsterdam, and London. And the interface is incredibly simple, intuitive. The control panel is awesome. It will help you design exactly what you need, which empowers users to replicate on large scales with the company’s straightforward API. Check out digitalocean.com by using promo code heywtr.
PAIGE: And we got started with our interview today by asking Shannon what’s she’s up to in tech these days.
SHANNON: So, I am a producer and host of several different tech shows on the internets, on YouTube and on RSS feeds all over the place. Specifically, my main shows right now are Hak5, H-A-K-5 over at Hak5.org, and TekThing, which is T-E-K Thing dot com. ANd both of these involve, well Hak is obviously about hacking and internet security. And then the TekThing show, that one is about technology in general for consumers.
PAIGE: So you’re like a new media entertainer? Would you fit into that category?
SHANNON: Yeah. Yeah, I guess you would say that. You know, I was just filling out my tax docs and I was like, uh, what do I put my profession as. I guess I’ll just pick journalism.
ANGELA: Yep, I know how that goes.
PAIGE: I get to fall under the consultant category for almost everything. So how did you get into that? New media is, such like a, if we can use that term, it’s such a new thing. It’s kind of all over the place. What started that for you?
SHANNON: Well, I’ve always been interested in technology and stuff like that. And then I didn’t discover podcasting or internet media until I was in college. So, it was probably like 2003 or 2004. And I was really, really in to video games at the time. Which, I still am even though I don’t have enough time to do it these days. And my friend and I discovered this podcast called Pure Ownage up in Canada.
PAIGE: Oh my god, I love Pure Ownage.
SHANNON: Yes, me too. I’m so excited that they’re working on their movie right now. I backed it on Kickstarter when they did that. Or Indiegogo. So, my best friend and I, we drove like 20 hours from Missouri all the way up to Canada for the weekend, just to see this live premier. I fell in love with the community, and I fell in love with like how there was no middle man between the host of the show and the characters and their fans. So you could just walk up to them and like chill at a bar after their live premier show. So, for me, it felt like it was the perfect middle ground of loving technology and being able to enjoy it with your fans as well.
PAIGE: That’s really — I would have never really thought of that end of it. That there’s no middle man between the fan and the person. Because I always think about it from the technology standpoint. To say there’s no — especially then — there was no middle man between me and the content. Like, that came right from the producers of the content to me as a consumer.
SHANNON: Yeah.
PAIGE: And back then they had to just host it on their site and you had to download it. There was no YouTube or anything.
SHANNON: Yeah. A lot of us who are working in podcasting, we don’t have agents or anything like that. So the only thing that’s holding us back from reaching out to people is actually getting out of our house and getting out from in front of the cameras and going outside into the sun and enjoying time with real people. So yeah, I fell in love with it. And then after that I just started talking to the right people. I ended up meeting the guys from Hak5 and they asked me if I wanted to move out to Virginia, as weird as that is. But I moved into the Hak house, as it was called back in day. ANd they invited me on the show after I did a little bit of camera work behind the scenes. At that time I just had a full-time job and I just kind of did it as a hobby. But eventually it turned into a big full-time gig. So I’m really happy that it did.
ANGELA: So, I obviously am into podcasting. We go to conventions in different places. Mainly local, like Washington, Oregon, California, but we did Ohio an Ohio fest for technology related stuff. I get a lot of people coming up to me saying, Angela. And I’m like hi, I don’t know you. But they know everything about me. You know, has that happened to you?
SHANNON: Yes. Very much so. Most likely it’s happened most often at a convention called DEFCON. Which is in Las Vegas. That’s the biggest hacker convention in the US and possibly the world. I’ll have to check my facts on that. But yeah, I’ll go there and I’m walking down to the room where we set up our booth and we do all of our interviews and everything. People will stop me and they’ll be like, oh my god congratulations on getting married. And I’m just like, I forgot I posted that publically. Thank you.
ANGELA: Right.
SHANNON: It’s a little awkward, but I’m like dude it’s so cool that people are willing to come up and be just be like, hey congrats, and I’m like cool, give me a hug.
ANGELA: Yeah. Yeah.
PAIGE: Yeah, I actually had that experience when I first met Angela, because I had been a follower of Jupiter Broadcasting for a long time and she post so prolifically about her kids and her awesome photography of her kids and I’m like, I feel like I just know you and we just met. It’s cool to get to know the person behind it, but definitely and interesting experience.
SHANNON: Yeah. Totally.
PAIGE: And like my experience with meeting Chris at the convention, because I was star struck. Before I asked him, I was like oh I’m so nervous. Maybe he’ll just give me some advice on podcasting and it will be great.
SHANNON: I don’t try to act too star struck whenever I meet other podcasters that I listen to all the time, but sometimes you just can’t help it.
ANGELA: Yeah, I’ve had people come up and their like, I don’t really know what to say. I’m like, but I’m — it’s really cool to actually meet you. It’s really neat.
PAIGE: Yeah, I have to make a confession that I was actually really nervous to ask Shannon to be on the show, because I have been watching Hak5 since before she came on Hak5 and I kind of watched her journey and that’s been really awesome to see. Especially because when it got started it was such a dude show and as a woman watching the show I was always like, yeah this is cool. And they had that one chick would kind of stop in and do some gaming stuff once in a while.
SHANNON: I’ll be honest, it was very intimidating when I first started on the show. I was not involved with the hacker community very at the time. And I was just kind of getting my feet wet into the whole process of learning all of the information that’s out there about hacking and internet security. But in the, god how long have I been doing this? Seven years? Oh my gosh, that’s a long time. So in the seven years that I’ve been doing this, I’ve learned so, so much. And I feel like a lot of this is, it’s just because I’ve gotten so involved and I made sure to ask the right questions. I come to it as a, no question is a stupid question. So I’m going to be person to ask that question, even though other people might look at me and think I’m stupid, I don’t care, because other people have those questions, but they’re afraid to ask them. I felt like I’ve grown so much just by being a part of this show and it’s been really informative for me. And I’m glad that I have some female fans out there. It makes me very happy.
ANGELA: What was your focus in college? Was it a technical degree?
SHANNON: It wasn’t, as weird as that is. I probably should have gone into theater at the time, but I didn’t, because I was obsessed with theater. I went into hospitality and restaurant administration. So I guess what I took out of college, mostly, was the business perspective. It helped me be a better public speaker, because we did a lot of presentations for our classes. And it also taught me a lot about how to run a business. So, we’ve been able to open up a store for Hak5 online. So we do a lot of ecommerce. We’ve also learned a lot about marketing and things like that.
PAIGE: So you said you’ve always been interested in technology. What did that look like as a kid for you?
SHANNON: Oh yeah. My dad had a computer in my nursery. He did. We didn’t have enough rooms in the house apparently. This is the story he’s told me. When I was a baby he just stuck his first computer, or one of his many computers, in my nursery and he would let me sit on his lap and pound at the keyboard until I figured out something that happened on the keyboard. So I’ve just been around computer my whole life. My dad was a really big influence on that for me. Also, for my Star Trek geekiness, because he watched it every single day after work, so I would sit down and watch it with him. I love my geeky influences. But yeah, I learned how to build computers when I was, probably an early teen, 11 or 12 I think was when I first built my computer with my dad. He got me into building websites when I was in middle school. So I learned a little bit about HTML and how to build a really simple anime fan gallery type website on GeoCities. So I learned a little bit there. I also got really involved with video gaming. I made a good group of friends at school who got me really obsessed with that kind of stuff. So it was just always a really good influence with me, like as far as the people that I was hanging out with. My dad was always there and he was always like, yeah come with me to the computer store. We’ll go to Best Buy and you can check out motherboards, back when they had motherboards.
PAIGE: Dude, you had the best dad ever.
SHANNON: He was awesome. He’s a great guy. He still gets really geeky with me. I’ll be like, let’s go to Fry’s and he’s like, yeah let’s go.
PAIGE: My friends call that Meca.
SHANNON: Oh yes.
PAIGE: So you did all this as a young person. And then why did you end up choosing hospitality instead?
SHANNON: A lot of it was because I really like working with people and I felt like if I went into a tech thing I wouldn’t get to work with people as much, like one on one or face to face. But I went into a lot of jobs during high school and during college where I managed restaurants or I was a server. I think I did assistant management at a Dominos Pizza for like five years. So it was really fun for me. I loved being able to make people happy and make perfect, perfect food for them and see the smile on their faces, and get really good tips out of it. So for me it was just all about really enjoying my job and being able to be around people. Because I’m a friendly person.
PAIGE: I had a very similar story where I was really involved in tech doing a lot of IT support and i kind of topped out desktop support and knew that the next step would kind of be to end up as a server monkey in a server farm, like just in the basement. I kind of had to transition. And the first interview I did where I was trying to transition, they were like well why would you want to leave this field? It’s lucrative, it’s good, it’s interesting. And I’m like, you know, I don’t want to just stare at server fans all day. I want to interact with other people.
SHANNON: Yeah.
PAIGE: Even if it’s in a non-technical space.
SHANNON: That’s why I love podcasting now, is because I can, I can use my tech experience that my dad’s taught me, and I can use what I can find online and through educational books that I can purchase and learn, and I can also use my theater obsession, and I kind of mixed the two together. And I can still talk to people face to face with interviews, and talking to fans, and going to conventions and stuff like that. So it’s the happy medium for all those different obsessions for me.
ANGELA: Mm-hmm.
PAIGE: What have been your biggest challenges with podcasting.
SHANNON: Being a woman.
PAIGE: Really?
SHANNON: Yeah, I think so. It’s been very tough for me to get over my own conflictions in my brain telling me, you know, whenever you’re around men who are in a certain technical community, they may talk down to you because you’re a female. Or if I am at a convention, I have to deal with people sexualzing me becuase I’m a woman and because I just happen to have girly parts. So it’s been very hard for me to get people to act mature whenever I’m talking on a show and I just happen to be wearing a shirt that has a little bit of cleavage or something like that. So, it’s been hard, but I think I’ve gotten to the point where I’m respected because I respect people just as much, and I’ve learned a lot about what I’m good at. ANd I also don’t lie to people. So, you know, whenever I’m on the show talking about a certain segment, I’ll tell them straight up. Hey, I”m not an expert in blah, blah, blah, but this is something that I studied and I know this is correct.
PAIGE: I’ve always been really impressed with your ability to kind of present a brand new topic and be humble about it, without being apologetic.
SHANNON: Yeah. Yeah.
PAIGE: That’s really key, especially for women. Our tendency is to be apologetic that we don’t know things. And it’s okay to not know everything, but it’s also okay to know what you know.
SHANNON: Yeah, I totally agree with you on that. And I’m totally willing on the show too to ask for support as well. Like, if there’s a certain thing that I run into, like a problem, which I’ll run into problems. Everybody does with technical aspects. I’ll ask the community. I’ll say hey has anybody else run into this problem. Can you answer this for me? Email and I’ll shout you out in the next show. So that way it’s rewarding for them and it’s rewarding for me to, because I love to learn. And I’m always willing to learn, because, you know, you can never learn everything that’s available in the world.
ANGELA: Have you done any kind of boot camp or any kind of online, specifically technical classes?
PAIGE: Yeah, like what’s your favorite resource for learning all the new stuff that you’re constantly teaching?
SHANNON: I’m a huge bookworm. So, if I can find an educational book that’s written by an expert in the field, I’m going to buy the book. I know that I could just Google it and probably find a great Wikipedia article about whatever I’m learning, but I prefer to use school textbooks.
PAIGE: I think you might be the first guest that’s said that.
SHANNON: I don’t know why, but I learn so much better whenever I can sit down and read a book. And I think it’s just because I’ve always been around books my whole life, so I’m a huge bookworm.
PAIGE: Yeah, I have to say, I kind of agree. Like when I really need to deep dive a topic, like I just recently had to start learning angularjs for my job, and trying to do it with the online tutorials I was getting some of it, but when I finally was like, okay I’m just going to get the O’Reilly book and sit down and plow through it, it all just comes together so much more richly.
SHANNON: Yeah, it’s really tough too with online articles, because a lot of them start at a, you know, a more advanced topic. When I choose to start my segments at a very beginner topic. So, if I’m just learning things, I can’t start from like halfway in, like the 201 series. I have to start with the 101 or else I don’t understand a thing. So I’m very logical. I’m very step-by-step and tutorial based. I like to teach people the same way that I like to teach myself.
PAIGE: Yeah, I have to say, I’ve definitely recommended you hack tip segments for several women trying to kind of get their head around some basic stuff for Linux.
SHANNON: Thank you.
PAIGE: Stuff like that.
SHANNON: I’m really happy to hear that.
ANGELA: Yeah, Paige is a huge advocate. She runs the Portland chapter of Women Who Code and does a lot of networking.
SHANNON: Oh that is awesome. Yeah, I’ve even had a few people email me and say, hey I’ve been using your hack tips as a series in my school or in my classroom. So it’s really, really inspiring whenever I have people email me and tell me that they’re using this to teach a younger generation.
PAIGE: So, what would you, I guess, I’m always interested because, especially with it being so accessible. Really, all you need is a computer, an internet connection, and some sort of microphone and you can get started podcasting. What would you say to people who are interested in sharing their knowledge in this way?
SHANNON: Definitely do it about something that you’re obsessed with. Not just something that you’re semi interested in and you kind of want to teach people about it, but something that you really know. Something that you’re willing to learn and really delve into and really become and expert on. Because if you’re not, it really come across in podcasting whenever somebody doesn’t know everything. And be willing to learn more too. And then as far as technical experience with podcasting, get a good mic. Audio is key. People won’t listen to a podcast if it doesn’t have good audio. And don’t worry about how many people are watching your show, because the ones that matter, they will be there from the beginning to the end. You don’t, it doesn’t matter if you have a million views. Don’t look at it as trying to make money, just look at it as sharing. Sharing something that you love.
PAIGE: The internet is an awesome place, because we’ve all taken the time to share.
SHANNON: I agree.
PAIGE: So we talked about your biggest challenges in podcasting. What keeps you in podcasting? What lights your fire about it?
SHANNON: For me, it’s really when I go to conventions or when I go to a meetup or something like that and I see a little boy or a little girl come up to me and be a a little bit shy about meeting me, but tell me that they’ve learned from me and they’ve been able to develope some of experience with whatever I’ve been teaching on the different shows. For me, it feels so good to know what I’m changing somebody’s view on technology. So it’s not just like, you know, when me and you grew up. It’s not like it feels geeky for them. Like, we’re look at as, looked down on, looked down up.
PAIGE: Yeah, I remember when geek wasn’t cool.
SHANNON: Yeah, it wasn’t cool back in our day, but now it’s more of a cool thing because you have these interesting people get into it that are so obsessed with it that we come across as like, I don’t know, BIll Nye’s. I remember watching Bill Nye in high school and thinking wow he’s so cool. He makes me so excited for science. I want to be that person. I want to be the person that gets these little kids excited about talking about internet security and hacking.
ANGELA: Yeah, exactly.
PAIGE: Right. Yeah, I’ve never seen anyone be able to light up a room about PGP the way that you can.
SHANNON: Yeah, I love seeing when a little nine year old girls comes up to me and her eyes light up, because she’s like oh my gosh I learned so much from you. I just makes me feel so good inside. And that’s really what keeps me going.
PAIGE: Yeah, I totally agree. Reaching out, helping the community, and just building it back. And I think hearing you talk at the beginning about how being involved in the community was what kind of jump started you into the knowledge and the place that you have in podcasting, this community, the hack community, the tech community is welcoming by in large. Like you said, no question is a bad question.
SHANNON: Yeah, absolutely. And I’ve had a few people look at me and just be like, you’re asking that question? And I’m like, yeah I am, because guess what, the five people behind me, they want to ask that question too, but they’re too afraid to raise their hands.
PAIGE: Yeah. No, exactly. I talk a lot — I teach an intro to JavaScript course and one of the biggest things I teach is ask questions and let me help you learn how.
SHANNON: Yeah, absolutely. Because you’re not going to learn if something goes over your head. You have to ask those questions.
PAIGE: Yeah, and don’t be afraid to ask how to ask the question too, because sometimes it’s just that you’re missing that, you know, you’re asking these questions and you’re just asking the wrong question. So go ahead and ask what should I know here. What am I missing?
SHANNON: Absolutely. Oh man, I wish I could have taken your course in college.
ANGELA: And so then, we talked briefly about your nickname. On Twitter your /Snubs, or I guess @snubs. And your website is snubsie.com.
SHANNON: Yeah.
ANGELA: Can you tell us how you got that nickname?
SHANNON: That was in high school. I was hanging out with my friend Danny and I was really into video games at the time. I was learning that I really needed to get a screen name. And I thought Shannon is not that great of a screen name so I need something cool. So one of my friends, he was like well what about Snubsie Boo. And I was like, that’s so cute. Snubsie Boo. So over time it just kind of shortened down to Snubs, because it’s easier to spell and it’s faster to type.
ANGELA: That works.
PAIGE: Sometimes what our friends lay on us, it just sticks.
SHANNON: It’s a boring question, or it’s a boring answer, but I get it all the time.
ANGELA: I think the first time I had to come up with a screen name was for Livejournal. Well first of all, it was actually AOL and I wanted Curly, but there were apparently 8,500, 700. Anyway, it wa Curly85647. When I got to choose one creatively in high school for Livejournal, I just Googled, I put a random word into Google, just picked a random word and then did it again with a different word and picked a second word and it ended up being Scaling Dynasty.
SHANNON: Oh, that’s cool.
ANGELA: I know.
PAIGE: That’s pretty cool, actually.
ANGELA: I know. It is cool. I haven’t used it anywhere else, but yeah.
PAIGE: My friends always get a little bit weirded out when they find out my online handle, because I’m kind of like a tomboy girl, backwards hats and everything, and my handle is Feather.
SHANNON: Aw, that’s adorable. I like it.
ANGELA: Yeah.
PAIGE: It works for me.
SHANNON: People get weirded out whenever I walk into like a Fry’s and I’m like, I want to build a computer. And I get these looks from the reps and they’re like, you sure you want to build a computer? Like, yes. I can do my manicures and pedicures and want to build a computer too.
ANGELA: Yeah.
PAIGE: Do you find that because you have a fairly feminine appearance, even for women in technology, that that sets you even farther apart?
SHANNON: Oh for sure. I did an experiment recently where, and it was just kind of a quiet experiment that I didn’t tell anybody about, but you can see it on TekThing if you look close enough. So, in one episode I wore a very floral shirt. It was very, like it had flowers all over it and it was pink and it very, very girly. I was talking about some kind of technical segment. I don’t remember what it was now, but I got a lot of harsh criticism on that episode. And I was like, well I know that I was teaching the correct facts, so I’m going to try something new on the next episode. So, on another episode of TekThing I decided to do another different shirt where I wore a gaming T-shirt. So it wasn’t flattering, it wasn’t girly at all. It was just a gaming T-shirt with a bunch of consoles on it. I got really, really good constructive feedback on that one. Nobody was negative. I was like, that’s strange. So I did it again, same thing. Isn’t that weird?
ANGELA: Wow.
PAIGE: Wow.
SHANNON: Yeah, isn’t that crazy. So I was like, huh. So, it totally has to do with how you show yourself on a show. And a lot of it is kind of sexist. And I don’t think it’s meant to be, but it’s just the way that we’ve grown up and the way that we perceive women as compared to men. So women generally are perceived as lesser or we don’t have as much education as men or as much experience. Not that I’m a feminist, necessarily, I might be sometimes. But, I’ve noticed a big difference depending on what i wear on the show.
ANGELA: Right. Well, and if you just put it into sentences that somebody reads, it’s like if the audience is thinking what does she know? She’s wearing flowers.
SHANNON: Exactly.
ANGELA: That sounds weird. But it was like, oh she might know something. She has a gaming shirt.
SHANNON: Yep.
ANGELA: That’s so bizarre.
SHANNON: It’s totally bizarre, but it’s true. And that’s the way our society has been taught.
PAIGE: It’s an unconscious bias and that’s the hardest part about it, is it is by and large an unconscious bias. I get treated very differently than most of my female counterparts because I wear baseball caps, I wear T-shirts and jeans, and most guys just treat me like one of the guys. So it’s kind of interesting because I feel sometimes like I get to be a double agent to like infiltrate and be like, advocate for women. And they’re like, but you’re one of the guys. What’s going on?
SHANNON: That’s hilarious. It’s terrible, but it’s hilarious.
ANGELA: Yeah.
PAIGE: But at the same time, it’s interesting because I’ll get the unconscious bias the other way where I show up to women’s event and because I don’t look very feminine, I can get the judgement in the other direction too.
SHANNON: Oh yeah, for sure.
PAIGE: It’s very interesting. Although, the geek community is more accepting of that.
ANGELA: Accepting, yes.
PAIGE: Which is good. Speaking of dressing, interestingly, one last thing that I’m’ always fascinated by, who’s your favorite character to cosplay?
SHANNON: Oh, heck yeah. Um, I would say Sailor Mars. She’s my favorite.
PAIGE: Oh, good call.
SHANNON: From Sailor Moon. If nobody has watched it, Sailor Moon is amazing. So good.
PAIGE: Yeah, you went old school.
SHANNON: Yes, it’s totally old school but I made my first Sailor Mars costume when I was in college and I loved it so much. I even dyed my hair black and I grew it out so it would look like Sailor Mars. There are pictures. There are pictures on the internet of my Sailor Mars cosplay on my Twitter.
ANGELA: Yeah, I was just going to say, who are you dressed as in your current Twitter picture?
SHANNON: Let’s see, my current Twitter I think is just my, oh yeah, that’s my Renaissance festival costume.
ANGELA: Yeah. Okay. Yeah, awesome.
SHANNON: I just decided to dress as a Ren Fair person.
PAIGE: I’m trying to put together my very first cosplay costume and it is a big reach, because I want to cosplay as Baymax from Big Hero 6.
ANGELA: Oh my gosh.
SHANNON: Cool.
PAIGE: But I’ve been a costumer for a long time. I do a lot of Renaissance fair and all that jazz. I like costuming, but this is an interesting. I want to do the blow up and figure out how to make it work.
SHANNON: That is really cool. I wish you tons of luck. It’s hard work, but it’s worth it.
ANGELA: i actually have a fan for material to blow it up.
PAIGE: All right. We’re going to have to talk.
ANGELA: Yeah. That’s great. It’s for a Hulk costume, but you could totally just use it for that.
PAIGE: Oh, that’s neat. I should look into that. So cosplay, what about cosplaying do you enjoy, Shannon?
SHANNON: I like being able to dress up and pretend to be somebody else. It’s the theater thing for me.
PAIGE: I always like the idea of be all you can be.
SHANNON: Yeah. Oh man, it’s so much fun.
PAIGE: Yeah, it’s very fun. I highly recommend that if you’ve never played dress up as an adult, you at least give it a go. At the very least it’s an interesting psychological experiment.
SHANNON: It is. It’s kind of like Halloween every single day.
PAIGE: Yeah, with less candy.
SHANNON: Yes, with less candy. Well, unless you buy it from the grocery store next door to the hotel like I do.
PAIGE: Feel like you might have done that.
SHANNON: Maybe.
ANGELA: Might be from experience.
PAIGE: Just one last question. You have mentioned that you go to conventions. What’s the next convention that you’re headed to?
SHANNON: Let’s see, the next one will be this summer. If will be DEFCON again. This will be, I think like my sixth DEFCON. Wow, that’s a lot.
PAIGE: Oh wow.
SHANNON: And after that, I’ll be going to Dragoncon for my first time this year, so I’m planning to cosplay at that one.
PAIGE: Are you skipping PAX this year?
SHANNON: No PAX, yeah no PAX for me.
PAIGE: Oh bummer.
SHANNON: Do you go to PAX? Maybe I should go.
PAIGE: Yeah, we’re up here in Seattle, so I’m planning to go to PAX this year. It will be my first year. It will be a good time.
SHANNON: It looks amazing. I have friends from Missouri that go to PAX and i’m like, oh man, I live so much closer, I need to go.
PAIGE: You really should come up.
SHANNON: I’ll take you up on that.
PAIGE: Awesome. Very cool. Well, thank you so much for joining us Shannon. This has been amazing. We’ll look forward to seeing you on your shows.
SHANNON: Thank you so much. And it was a pleasure talking to both of you.
ANGELA: Thank you for listening to this episode of Women’s Tech Radio. Remember, you can find a full transcription in the show notes at jupiterbroadcasting.com or also at heywtr.tumblr.com.
PAIGE: And also, any links to Shannon’s shows will be in the show notes. So if you want to check her out, go ahead and take a gander there. You can also find us on iTunes. Subscribe to the show there. Or if you prefer an RSS feed, it’s’ available at jupiterbroadcasting.com under the heywtr show. And you can also follow us on Twitter @heywtr. Thanks for listening.

Transcribed by Carrie Cotter | transcription@cotterville.net

The post Early Tech Obsession | WTR 30 first appeared on Jupiter Broadcasting.

Open-source Market Penetration | Tech Talk Today 127

chris — Wed, 04 Feb 2015 11:12:10 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

The FCC Chairman makes it clear, he plans to push for Title II classification of the Internet. Is Net Neutrality going to save us all? We’ll debate & discuss the mounting counter battle.

Plus Valve is about to reveal their openGL replacement & we take a look at an open source device that’s NSFW.

Direct Download:

RSS Feeds:

Become a supporter on Patreon

Show Notes:

FCC Chairman Tom Wheeler: This Is How We Will Ensure Net Neutrality

After more than a decade of debate and a record-setting proceeding that attracted nearly 4 million public comments, the time to settle the Net Neutrality question has arrived. This week, I will circulate to the members of the Federal Communications Commission (FCC) proposed new rules to preserve the internet as an open platform for innovation and free expression. This proposal is rooted in long-standing regulatory principles, marketplace experience, and public input received over the last several months.

Broadband network operators have an understandable motivation to manage their network to maximize their business interests. But their actions may not always be optimal for network users. The Congress gave the FCC broad authority to update its rules to reflect changes in technology and marketplace behavior in a way that protects consumers. Over the years, the Commission has used this authority to the public’s great benefit.

AT&T previews lawsuit it plans to file against FCC over net neutrality | Ars Technica

AT&T seems resigned to the near-certainty that the Federal Communications Commission will reclassify broadband as a common carrier service in order to enforce net neutrality rules. But it isn’t going to let the decision stand without a legal challenge, and the company is already telling the world what it’s going to argue in court.

“I have no illusions that any of this will change what happens on February 26,” when the FCC is expected to vote, AT&T Federal Regulatory VP Hank Hultquist wrote in a blog post yesterday. “But when the FCC has to defend reclassification before an appellate court, it will have to grapple with these and other arguments. Those who oppose efforts at compromise because they assume Title II rests on bullet proof legal theories are only deceiving themselves.”

Toshiba releases super-secure Encrypted USB Flash Drive with hardware-based encryption

“Available in 4GB ($95), 8GB ($112), 16GB ($140) and 32GB ($200) capacities, the Toshiba Encrypted USB Flash Drive uses a built-in mini-keyboard to authenticate access, incorporating a rechargeable battery so the user can enter a secure code before plugging into a USB port. Users simply enter their secure PIN and plug the drive into any USB 2.0 port on a compatible device. Once access is granted, the drive ‘unlocks’ the media, permitting clearance to all of the content stored on the drive. When the drive is removed from a USB port, the drive automatically re-locks and encrypts the stored media”, says Toshiba.

Serious bug in fully patched Internet Explorer puts user credentials at risk | Ars Technica

A vulnerability in fully patched versions of Internet Explorer allows attackers to steal login credentials and inject malicious content into users’ browsing sessions. Microsoft officials said they’re working on a fix for the bug, which works successfully on IE 11 running on both Windows 7 and 8.1.

The vulnerability is known as a universal cross-site scripting (XSS) bug. It allows attackers to bypass the same origin policy, a crucially important principle in Web application models that prevents one site from accessing or modifying browser cookies or other content set by any other site. A proof-of-concept exploit published in the past few days shows how websites can violate this rule when people use supported versions of Internet Explorer running the latest patches to visit maliciously crafted pages.

glNext: The Future of High Performance Graphics (Presented by Valve)

Join us for the unveiling of Khronos’ glNext initiative, the upcoming cross-platform graphics API designed for modern programming techniques and processors. glNext will be the singular choice for developers who demand peak performance in their applications. We will present a technical breakdown of the API, advanced techniques and live demos of real-world applications running on glNext drivers and hardware.

KICKSTARTER OF THE WEEK: The Mod – Multivibrating Open-Source Dildo | Indiegogo

The Mod is a great vibrator. It’s made from 100% silicone.
Its three powerful motors create amazing sensations, ranging from a lovely low
frequency rumble to patterns that move up and down the shaft. It is USB rechargeable,
and its built in buttons make it easy to control vibration patterns and
intensities.

The post Open-source Market Penetration | Tech Talk Today 127 first appeared on Jupiter Broadcasting.

Internet Pet Peeves | FauxShow 197

chris — Sun, 19 Oct 2014 19:06:31 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Angela and Chris go through their pet peeves about the internet and why they prefer some social sites over others

Direct Download:

HD Download | Mobile Download | MP3 Download | YouTube

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Torrent Feed | iTunes Feeds

Fill out my Wufoo form!

— Show Notes: —

Angela’s list:

FIRST! comments
Every week is daughters week!
Reposts with misspellings (which can’t be fixed by the poster.
EMAILS
Pretty much everything Reddit
Articles with full sentences as titles (and a cliffhanger)
Absurdly angled titles, perspectives, etc just for clicks
Being an advocate for something but make bad comments about it.
Mobile ads that move the screen
Links to an article that isn’t really an article but another link to the actual site.
Click through slide shows (for clicks)
Google signing out

— November 2nd Awards —

Send in a picture of your or someone else wearing the LAS jacket! (sale ends Sunday! https://teespring.com/jbjacket)

Send your pic and/or link, IRC nick and explanation to:

Email: angela@jupiterbroadcasting.com

See more pics: https://instagram.com/jupiterbroadcasting#
Sign up for Jupiter Signal: www.bit.ly/jupitersignal

Unfilter is on Patreon! https://www.patreon.com/unfilter

Tech Talk Today is on Patreon! https://www.patreon.com/jupitersignal

— Find the FauxShow! —

Facebook: https://www.facebook.com/thefauxshow
Twitter: https://www.twitter.com/angerz
G+: https://www.gplus.to/fauxshow
Subscribe to Jupiter Signal: https://www.bit.ly/jupitersignal
Jupiter Radio: https://jblive.info
Affiliates Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/jupiterbroadcasting/
Affiliates Chrome Extension: https://chrome.google.com/webstore/detail/bjekemhblnilimncanbehhjijdpjgimj
Donations: https://original.jupiterbroadcasting.net/donate
Shows & Shownotes: https://original.jupiterbroadcasting.net/show/fauxshow/

The post Internet Pet Peeves | FauxShow 197 first appeared on Jupiter Broadcasting.

75% of the Internet | Unfilter 64

chris — Wed, 21 Aug 2013 21:13:03 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Declassified documents today reveal the NSA has intentionally abused their surveillance program, and retained data on US citizens despite a court order. All this as more details emerge about how the NSA collects nearly 75% of all US Internet traffic

David Miranda Glenn Greenwald’s partner was held for nine hours under an Orwellian anti-terrorism law. They confiscated his equipment, and questioned him about the Guardian’s reporting of the Snowden Leaks.

Plus we follow the money in Egypt, your feedback, and much much more.

On this week’s Unfilter.

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Become an Unfilter Supporter:

Subscribe With Bitcoin

— Show Notes —

Glenn Greenwald’s partner detained at Heathrow airport for nine hours

Glenn Greenwald’s partner detained at Heathrow airport for nine hours | World news | The Guardian

The 28-year-old was held for nine hours, the maximum the law allows before officers must release or formally arrest the individual. According to official figures, most examinations under schedule 7 – over 97% – last less than an hour, and only one in 2,000 people detained are kept for more than six hours.

Miranda was released, but officials confiscated electronics equipment including his mobile phone, laptop, camera, memory sticks, DVDs and games consoles.

David Miranda’s lawyers apply for interim injunction over seized data | World news | theguardian.com

The London law firm Bindmans will present Miranda’s case for the injunction before two high court judges, arguing that the Metropolitan police misused schedule 7 of the Terrorism Act 2000.

US doesn’t know what Snowden took, sources say – Investigations

More than two months after documents leaked by former contractor Edward Snowden first began appearing in the news media, the National Security Agency still doesn’t know the full extent of what he took, according to intelligence community sources, and is “overwhelmed” trying to assess the damage.

– Thanks for Supporting Unfilter –

This Week’s New Supporters:

David P

Kim J

Jason T

Quentin B

Ben D

Alexander S

Josef D

Sean from T-Town

Thanks to our 162 Unfilter supporters!
Supporter perk: Downloadable Pre and Post show. Extra clips, music, hijinks, and off the cuff comments. The ultimate Unfiltered experience.

NSA is CRAZY

New Details Show Broader NSA Surveillance Reach – WSJ.com

The system has the capacity to reach roughly 75% of all U.S. Internet traffic in the hunt for foreign intelligence, including a wide array of communications by foreigners and Americans. In some cases, it retains the written content of emails sent between citizens within the U.S. and also filters domestic phone calls made with Internet technology

The 86-page opinion, which was declassified by U.S. intelligence officials Wednesday, explains why the chief judge of the Foreign Intelligence Surveillance Court ruled the collection method unconstitutional. The judge, John D. Bates, found that the government had “advised the court that the volume and nature of the information it has been collecting is fundamentally different from what the court had been led to believe.”

Under the program, the NSA for three years diverted large volumes of international data passing through fiber-optic cables in the United States into a repository where the material could be stored temporarily for processing and for the selection of foreign communications, rather than domestic ones. But in practice, the NSA was unable to filter out the communications between Americans.

According to NSA estimates, the agency may have been collecting as many as 56,000 “wholly domestic” communications each year.

Bradley Manning Gets 35

WikiLeaks trial: Bradley Manning shows no reaction to prison sentence – latimes.com

Wednesday morning and was sentenced to 35 years in prison for leaking hundreds of thousands of classified documents to the anti-secrecy group WikiLeaks.

Manning, who could have been sentenced to 90 years, stood at attention and showed no emotion as the military judge, Army Col. Denise Lind, delivered the sentence. As soon as Lind left the bench, Army guards quickly rushed Manning out of the courtroom.

“We’ll keep fighting for you Bradley!” shouted half a dozen Manning supporters among the 45 spectators in the courtroom. “You’re our hero!”

That short scene, lasting no more than two minutes, ended more than three years of legal jousting and a summer-long court-martial that highlighted the growing national debate about government secrecy.

WikiLeaks soldier Manning sentenced to 35 years in prison | Reuters

“It’s more than 17 times the next longest sentence ever served” for providing secret material to the media, Goitein said. “It is in line with sentences for paid espionage for the enemy.”

Following the Money Flowing to Egypt

Where U.S. aid to Egypt goes

The money is deposited into an account at the Federal Reserve Bank of New York, which Egypt can access to make payments on long-term contracts it signs with defense companies. The U.S. government is a co-signer on the contracts, guaranteeing the payments will be made. If aid to Egypt is suspended, the U.S. government could still be responsible for the deals Egypt has made so far, according to a Congressional Research Service report.

Point-Counterpoint Cut off aid to Egypt – and to Israel | National Columnists | ADN.com

Since July 3, the Israeli government has lobbied U.S. officials not to cut off aid to Egypt.

Top 10 US companies profiting from military aid to Egypt

US defense contractors profiting from military aid to Egypt

Feedback:

Bitmessage Address: BM-GuQ4gqmBeW8CYpSo3Htg2pBrBdHbvpe7

If you’re a Supporter check your inbox!

Call us: 1.425.312.1756

Follow the Us:

The post 75% of the Internet | Unfilter 64 first appeared on Jupiter Broadcasting.

Saving Private Exploit | TechSNAP 91

chris — Thu, 03 Jan 2013 17:37:01 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Internet Explorer, Ruby on Rails, and the Windows Nvidia drivers all have new exploits. We’ll tell you the good, the bad, and the ugly.

Plus picking the right VPS, a big batch of your questions, and Allan’s videos from EuroBSD Con.

On this week’s episode of TechSNAP!

Thanks to:

GoDaddy.com

Use our code tech295 to get a .COM for $2.95.

Something else in mind? Use go20off5 to save 20% on your entire order!

Pick your code and save:
techsnap7: $7.49 .com
techsnap10: 10% off
techsnap11: $1.99 hosting for the first 3 months
techsnap20: 20% off 1, 2, 3 year hosting plans
techsnap40: $10 off $40
techsnap25: 25% off new Virtual DataCenter plans
techsnapx: 20% off .xxx domains

Direct Download:

RSS Feeds:

Support the Show:

Purchase anything at Amazon.com
Purchase anything at Think Geek using this link
Purchase anything at Newegg using this link
Contribute directly on our donation page or check out our advertising options and reach millions of amazing people!
Grab our Chrome Extension and auto-tag your shopping session for us!

Fill out my Wufoo form!

Show Notes:

Get TechSNAP on your Android:

Browser Affiliate Extension:

Jupiter Broadcasting Affiliate Extensions for Chrome and Firefox

New IE exploits affects IE 6, 7 and 8, but not 9 and 10

Windows XP users cannot upgrade beyond IE 8 and are still stuck
A number of large organizations and many home users still use Windows XP
This exploit was used in a Watering Hole attack against the website of think tank The Council on Foreign Relations
Ever after a high profile attack in the wild, Microsoft Announced that a patch for the exploit will not be available for this weeks patch Tuesday
Microsoft has issued a temporary Fix-It Solution that can be used to mitigate the exploit until a patch can be released

Vulnerability in all versions of Ruby on Rails

A flaw in the implementation of the ‘finder’ method of the Active Record system could allow SQL injection
If users can supply a symbol keyed hash as the second parameter to the find_by_* method, they would be able to inject arbitrary SQL
The very popular Authlogic library is vulnerable in some instances, specifically when the attacker knows the HMAC key that is used to sign cookies
Authlogic stores session data in a cookie on the users’ computer, and this cookie is cryptographically signed with HMAC to ensure it cannot be tampered with. This works well when the HMAC key is secret, but many examples on github and many open source applications include a default HMAC that is often not changed, resulting in a large install base using publically known HMAC keys, allowing them to be exploited
CVE–2012–5664
Ruby on Rails recommends upgrading to the latest version in your desired branch: 3.2.10, 3.1.9 or 3.0.18
Threatpost Coverage

Zero day exploit for nVidia display drivers in windows

The nVidia driver service listens on a named pipe (\pipe\nsvr) that has a null access control list
Any user logged on to the machine or any remote user in a domain context (if the machine has file sharing enabled, and the firewall relaxed/disabled) could have access to the service
The attacker could then trigger a buffer overflow due to a bad memmove operation
The exploit could be used to escalate privileges and gain full control over the machine
The exploit is also able to bypass data execution prevention (DEP) and the address space layout randomization (ASLR) feature introduced in Windows Vista
The exploit was initially made public because the researcher felt that the risk was minimal, however after some pressure from the community and possibly the discovery of additional attack vectors, the exploit was taken down

Feedback:

Round-Up:

The post Saving Private Exploit | TechSNAP 91 first appeared on Jupiter Broadcasting.

10 Handy Tech Sites | FauxShow 101

chris — Wed, 01 Aug 2012 21:11:37 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Angela and Chris share the rules of the internet as well as some useful technology related websites! They also announce the JB Affiliate is available in both the Firefox and Chrome App stores.

Direct Download:

HD Download | Mobile Download | MP3 Download | YouTube

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Torrent Feed | iTunes Feeds

Fill out my Wufoo form!

Show Notes:

Rules of the Internet: https://rulesoftheinternet.com/index.php?title=Main_Page

Chrome: https://www.chromium.org/administrators/policy-list-3#ExtensionInstallSources

Jupiter Signal: https://us4.campaign-archive2.com/?u=2df68335d3d6a9d63964943ec&id=f0cd53da6f&e=3d4df58bce

Pleated Jeans: https://www.pleated-jeans.com/2011/11/28/21-funny-tumblr-coincidences-11-28-11/

blanksheet of paper: https://blanksheetofpaper.com/

Michael Dominick’s new App: https://codejournalapp.com/

USB Dead Drop: https://www.slightlywarped.com/crapfactory/curiosities/2010/dead_drops.htm

https://stackoverflow.com/

The new Digg.com: https://www.digg.com

Watch the Mars Probe Land: https://www.nasa.gov/multimedia/nasatv/index.html

Download a YouTube video: https://keepvid.com

REALLY Check our Internet Connection: https://netalyzr.icsi.berkeley.edu/

Dead Link https://fruit.gs/404.html

Animator vs animation: https://alanbecker.deviantart.com/art/Animator-vs-Animation-34244097?q=gallery%3Aalanbecker%2F37912700&qo=0

Be Social With the FauxShow:

Facebook: https://www.facebook.com/thefauxshow
Twitter: https://www.twitter.com/angerz
G+: https://www.gplus.to/fauxshow
Dailybooth: https://www.dailybooth.com/thefauxshow

Subscribe to Jupiter Signal: https://www.bit.ly/jupitersignal
Jupiter Radio: https://jblive.info

Affiliates Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/jupiterbroadcasting/
Affiliates Chrome Extension: https://chrome.google.com/webstore/detail/bjekemhblnilimncanbehhjijdpjgimj
Donations: https://original.jupiterbroadcasting.net/donate

Shows & Shownotes: https://original.jupiterbroadcasting.net/show/fauxshow/

The post 10 Handy Tech Sites | FauxShow 101 first appeared on Jupiter Broadcasting.

Answers for Everyone | TechSNAP 42

chris — Thu, 26 Jan 2012 20:40:12 +0000

We’ve got the answer to life the universe and everything, plus why you need to get upset about ACTA, and patch your Linux Kernel!

All that and more, in this Q&A PACKED edition of TechSNAP!

Thanks to:
GoDaddy.com Use our codes TechSNAP10 to save 10% at checkout, or TechSNAP20 to save 20% on hosting!

Pick your code and save:
DOTCO9: .co domain for $17.99
techsnap7: $7.99 .com
techsnap10: 10% off
techsnap20: 20% off 1, 2, 3 year hosting plans
techsnap40: $10 off $40
techsnap25: 25% off new Virtual DataCenter plans

Direct Download Links:

Subscribe via RSS and iTunes:

Show Notes:

Dreamhost gets hacked, resets all customers’ passwords, has scale issues

On January 19th, Dreamhost.com detected unauthorized activity in one of their databases
It is unclear which databases were compromised, if they were dreamhost databases of customer data, or customer site databases
Dreamhost uses separate passwords for their main web control panel, and individual user SSH and FTP accounts
Dreamhost ran in to scale issues, where their centralized web control panel could not handle the volume of users logging in and attempting to change their shell passwords
The fast forced password reset by DreamHost appears to have promptly ended the malicious activity
Based on the urgency of the reset, there seem to be indications that DreamHost stores users’ passwords in plain text in one or more databases
This assertion is further supported by the fact that they print passwords to confirmation screens and in emails
Dreamhost also reset the passwords for all of their VPS customers

Linux root exploit – when the fix makes it worse

Linux kernel versions newer than 2.6.39 are susceptible to a root exploit that allowed writing to protected memory
Prior to version 2.6.39 write access was prevent by an #ifdef, however this was deemed to be to weak, and was replaced by newer code
The new security code that was to ensure that writes were only possible with the correct permissions, turned out to be inadequate and easily fooled
Ubuntu has confirmed that an update for 11.10 has been released, users are advised to upgrade
This issue does not effect Redhat Enterprise Linux 4 or 5, because this change was not backported. A new kernel package for RHEL 6 is now available
Analysis
Proof of Concept
Proof of Concept for Android

Feedback

Q: Tzvi asks how to best Monitor employee Internet usage?

A: There are a number of ways to monitor and restrict Internet access through a connection you control. A common suggestion is the use of a proxy server. The issue with this is that it requires configuration on each client machine and sometimes even each client application. This is a lot of work, and is not 100% successful. However, there is an option know as a ‘transparent proxy’. This is where the router/firewall, or some other machine that all traffic to the internet must pass through analyzes the traffic, and routes connections outbound for port 80 or 443 (HTTP and HTTPS respectively, and optional additional ports) through the proxy server, without any configuration required on the individual clients. Then, you can use the firewall to deny all traffic outbound that is not via the proxy.

This is relatively easy to setup, so much so that as part of the final exam in my Unix Security class, students had 2 hours to setup their machine as follows:

Configure TCP/IP stack
Download GPG and Class GPG Key
Decrypt Exam Instructions
Install Lynx w/ SSL support
Install a class self-signed SSL certificate and the root certificate bundle to be trusted
Install and configure Squid to block facebook with a custom error page
Configure Lynx to use Squid
Create a default deny firewall that only allows HTTP via squid and FTP to the class FTP server
Access the college website and facebook (or rather the custom error page when attempting to access facebook)

While they had a little practice, and didn’t have to configure a transparent proxy, it is still are fairly straight forward procedure.

Instead of rolling your own, you can just drop in pfSense and follow these directions

Q: Brett asks, what do you do after a compromise?

A: The very first thing you do after a compromise, is take a forensic image of the drive. A bit by bit copy, without ever writing or changing the disk in any way. You then pull that disk out and put it away for safe keeping. Do all of your analysis and forensics on copies of that first image (but no not modify it either, you don’t want to have to do another copy from the original). This way as you work on it, and things get modified or trashed, you do not disturb the original copy. You may need the original unmodified copy for legal proceedings, as the evidentiary value is lost if it is modified or tampered with in any way.

So your best bet, is to boot off of a live cd (not just any live cd, many try to be helpful and auto-mount every partition they find, use a forensics live cd that will not take any auction without you requesting it). Then use a tool like dd to image the drive to a file or another drive. You can then work off copies of that. This can also work for damaged disks, using command switches for dd such as conv=noerror,sync . Also using a blocksize of 1mb or so will speed up the process greatly.

You asked about tripwire and the like, the problem with TripWire is that you need to have been running it since before the incident, so it has a fingerprint database of what the files should look like, so it can detect what has changed. If you did not have tripwire setup and running before, while it may be possible to create a fingerprint database from a backup, it is not that useful.
The freebsd-update command includes an ‘IDS’ command, that compares all of the system files against the central fingerprint database used to update the OS, and provides quick and powerful protection against the modification of the system files, but it does not check any files installed my users or packages. The advantage to the freebsd-update IDS over tripwire is that it uses the FreeBSD Security Officers fingerprint database, rather than a locally maintained one that may have been modified as part of the system compromise. In college I wrote a paper on using Bacula as a network IDS, I’ll see if I can find it and post it on my blog at appfail.com.

Q: Jono asks, VirtualBox vs. Bare to the metal VMs?

Xen, KVM and VirtualBox are not bare metal, they requires a full linux host
XenServer is similar to VMWare ESXi, in that it is bare metal. It uses a very stripped down version of CentOS and therefore far fewer resources than a full host. However XenServer is a commercial product (though there is a free version)
+The advantage to XenServer over VMWare ESXi (both are commercial but free), is XenServer is supported by more open source management tools, such as OpenStack

Q:Gene asks, IT Control is out of control, what can we users do?

Q: Crshbndct asks, Remote SSH for Mum

Roundup

The post Answers for Everyone | TechSNAP 42 first appeared on Jupiter Broadcasting.