Show Notes/Links: linuxunplugged.com/285

The post Pain the APT | LINUX Unplugged 285 first appeared on Jupiter Broadcasting.

MP3 Feed | HD Video Feed | iTunes Feed

Become a supporter on Patreon:

— Show Notes: —

— The Cliff Notes —

• PSA: Errors after updating libdb – Fedora Magazine
• Projects/FleetCommander – GNOME Wiki!
• Amazon.com: AMD Radeon RX 480 4GB GDDR5 PCI Express 3.0 Gaming Graphics Card

— Stay In Touch —

Find all the resources for this show on the Ask Noah Dashboard

Ask Noah Dashboard

Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!

Altispeed Technologies

Contact Noah

asknoah [at] jupiterbroadcasting.com

— Twitter —

• Noah – Kernellinux
• Ask Noah Show
• Altispeed Technologies
• Jupiter Broadcasting

The post Fedora 26 Fleet Commander | Ask Noah 17 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

GUNPG encryption broken

• Fixed in Libgcrypt version 1.7.8

• The study – PDF

• obtain a very efficient full key recovery for RSA-1024

• For RSA-2048 the attack is efficient for 13% of keys (i.e. 1 in 8).

NASDAQ leaks test data

• Financial Times link- paywall

• A data glitch briefly made online games group Zynga more valuable than Goldman Sachs when prices of a host of Nasdaq-listed stocks including Amazon, Apple and Microsoft were reset to exactly $123.47.

• Prices on Nasdaq’s official website appeared unaltered but those shown on financial data services including Bloomberg, Thomson Reuters and Google Finance did display the price changes to $123.47.

• New York Stock Exchange data were unaffected. Typically, vendors discard the test prices when checks are done. While the reason this did not happen for Nasdaq on Monday is not known, there was speculation it was linked to changed timings on the eve of the US Independence Day holiday.

• “It was no error by Nasdaq,” the exchange operator said. “Some vendors took test data and put it out as live prices.”

• Nasdaq said the glitch did not affect any market trading, including after hours. However, traders in Hong Kong said they saw a handful of trades reported at those prices, although many deals were subsequently cancelled.

Taking Control of All .io Domains With a Targeted Registration

• Previous post same person – The Hidden Risks of Domain Extensions

• The .io domain has several top level DNS servers under .io (e.g. a1.io)

• Not so much an exploit as failure of TLD to protect its assets

• Hard part is finding the servers which can be registered and then registering them

• Dan notes that .org does not suffer as easily from this problem because all of the .org NS records are under a given domain: org.afilias-nst.info. (re dig NS org. @k.root-servers.net.)

In the what’s new category for Dan

• Two Samsung 850 EVO 500GB SSDs in ICY DOCK MB882SP-1S-3B converters so I can mount them in 3.5″ drive trays.

• ‘Divider Boxes’ from @LeeValleyTools, set of 5 for CAD$9.50.

• LTO-4 labels for my laser printer

• Inserted 2nd of 6 5TB drives to replace my 3TB drives.

• Uploaded two scripts for my Let’s Encrypt project to GitHub: collect-certs & check-for-new-certs

Feedback

• RISC is Good?

• ZFS checksum errors on DigitalOcean block storage volume

• Alternate e-mail hosting service

• Check Your Backups! You might learn pg_dump better

• Google, MX, email, $1?

• vim customization

Round Up:

• Let’s code a TCP/IP stack, 5: TCP Retransmission

• OpenBSD Will Get Unique Kernels on Each Reboot. Do You Hear That Linux, Windows? – as detailed in BSDNow Episode 199: Read the source, KARL

• Privileged Ports Cause Climate Change – “I’m going to hazard a guess that the same 16-24 core Xeon with ~256gb of RAM that probably hosts less than a hundred 768mb VMs could probably host thousands of user workloads if those workloads ran directly on the same kernel without the cost of a hypervisor or the bloat of containers.” – FreeBSD jails – each one runs on the same kernel

• Pokemon or Big Data

The post Unsecured IO | TechSNAP 327 first appeared on Jupiter Broadcasting.

MP3 Feed | HD Video Feed | iTunes Feed

Become a supporter on Patreon:

— Show Notes: —

— The Cliff Notes —

• Turn VPS into QCOW2 File
• Setup a Virtual host on Centos 6
• io Domains Compromised
• Video for Linux Control Panel
• Magewell USB HDMI Capture Interface

— Noobs Corner —

• Check out the Ask Noah Dashboard

— Stay In Touch —

Find all the resources for this show on the Ask Noah Dashboard

Ask Noah Dashboard

Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!

Altispeed Technologies

Contact Noah

asknoah [at] jupiterbroadcasting.com

— Twitter —

• Noah – Kernellinux
• Ask Noah Show
• Altispeed Technologies
• Jupiter Broadcasting

The post Libvirt on QEMU | Ask Noah 16 first appeared on Jupiter Broadcasting.

Google is planning to phase out Flash support in Chrome & how they’re doing it is interesting. Wendy’s is going automated & the future for VR at Google looks bright.

Plus Apple confirms it was deleting music, the day Smart doorbell owners saw video from other houses thanks to a weird bug & more!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

• Google to phase out full support for Flash on Chrome
• The FBI Can Neither Confirm Nor Deny Wiretapping Your Amazon Echo
• Wendy’s Serves Up Kiosks As Wages Rise, Hits Fast-Food Group | Stock News & Stock Market Analysis – IBD
• Android VR Placeholder Pops Up In The Google Play Developer Console
• Apple confirms reports of potential bug in iTunes; safeguard patch expected next week | iMore
• Smart doorbell owners saw video from other houses thanks to a weird bug | The Verge

KIckstarter of the Week

• In The Shadows for Steam, PS4, XBox One by Colorspace Studio — Kickstarter

The post Chirping Away at Privacy | TTT 244 first appeared on Jupiter Broadcasting.

Github’s new pricing has a bit of a catch, Rob Robinson says Rails is yesterday’s software in light of Swift & GO. Which we simply have to talk about.

Then we jump in our time machine and dazzle you with our new term predictions & more!

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

— Show Notes: —

Hoopla

• Github’s New Pricing
• Shorter App Store Review Times?

Another Rails Discussion

• Today I Accept Rails as Yesterday’s Software

• What is wrong with Rails?

• Abstraction via ActiveRecord
• Abstraction via CoffeeScript
• Shared Space / Gem Collisions
• Suffering from popularity
• What is good
• Speed of development
• Generators
• ActiveRecord
• Benefitting from popularity
• Future of Rails in 5.0

• Rails-API

• Becoming just a little less monolithic?

Google I/O Predictions

• Kotlin Programming Language

The post Git off the Rails | CR 205 first appeared on Jupiter Broadcasting.

Mike takes a victory lap as we discuss the big announcements from Google I/O. Then we get into a heated discussion around how GitHub should be used vs how most people use it.

Plus some great feedback, Mike & Chris share some bold predictions & more!

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

Show Notes:

Hoopla

Google I/O:

• Google I/O: Chris’ Take

• Google I/O: Make’s Take

• Android M Dev Preview delivers permission controls, fingerprint API, and more | Ars Technica

• Google I/O 2015 – Keynote – YouTube

Announcing GitTorrent: A Decentralized GitHub

The biggest change for developers in Android M will be user-selectable permissions. Currently, Android permissions are an all-or-nothing affair—you give the app the full list of permissions it wants or your don’t install it at all. In Android M, Google will be letting users pick and choose which permissions they allow in an app, and the company will provide a control panel for managing permissions.

Google will also revamp the way it displays and explains permissions to users. We were able to talk to Google VP of Product Management Brian Rakowski before the show, and he says permissions have been “dramatically simplified” and reorganized into a “smaller, more understandable list.”

Feedback:

• Getting it Done

The post You're Gitting it Wrong | CR 156 first appeared on Jupiter Broadcasting.

There is some major smoke around the Google I/O fire, we dig into an in depth discussion about the big Google Picture. Plus Vox buys up Re/Code in a move that consolidates tech news & OnePlus teases us with a new device!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

Vox Media Adds ReCode to Its Stable of Websites – NYTimes.com

• Comcast, investor in Vox Media and Recode, could end up buying them both – Quartz

One reason for the renewed discussions may be Comcast’s role in encouraging Vox Media’s acquisition of Recode, the technology news site with a small audience but growing events business. Sources say Comcast, which owns minority stakes in both companies, gave its blessing to the deal several months ago. David Zilberman, a managing director of Comcast Ventures, its venture capital arm, sits on Vox Media’s board. He didn’t reply to a message seeking comment.

APNewsBreak: IRS says thieves stole tax info from 100,000

The thieves accessed a system called “Get Transcript,” where taxpayers can get tax returns and other filings from previous years. In order to access the information, the thieves cleared a security screen that required knowledge about the taxpayer, including Social Security number, date of birth, tax filing status and street address, the IRS said.

Microsoft partners with LG, Sony, other OEMs to sell Android tablets featuring Office, OneDrive, Skype

In total, Microsoft has now partnered with 31 global and local OEMs (11 in March and 20 today) to preinstall its apps onto Android devices throughout this year. Only time will tell if Microsoft’s apps end up actually being used more because of these deals.

OnePlus teases next smartphone announcement on Twitter

OnePlus says it is “Time to change” in its latest tweet, teasing a possible smartphone announcement for June 1. Chinese smartphone maker, OnePlus, relies heavily on Twitter for making announcements and promoting products and now the company would like to shake things up according to its latest tweet.

Update on Extension Signing and New Developer Agreement

Next week, we will activate two new features on AMO: signing of new add-on versions after they are reviewed, and add-on submission for developers who wish to have their add-ons signed but don’t want them listed on AMO. We will post another update once this happens. When this is done, all extension developers will be able to have their extensions signed, with enough time to update their users before signing becomes a requirement in release versions of Firefox.

Google I/O 2015 Preview: We’re doubling down on Android M, Chrome, Wear and more

Obviously Android M(arshmallow?), Wear updates including the next Moto 360 are at the top of the list. I’ve been hearing whispers that the new 360 is smaller, uses more modern/efficient SoC and a better OLED display. I’m praying to the robot dog overlords at Google that they have these as developer demo units (read: presents) at I/O. Use on iOS as has been found in code would also be nice for us who use both platforms. I’ve heard Samsung might have something round for us to feast on soon, and who knows, maybe we’ll see a $1,400 Tag Heuer Watch somehow with Intel Inside.

The post Google's Tech Tease | Tech Talk Today 176 first appeared on Jupiter Broadcasting.

Google may be planning to scrub the grime away from the Internet of Things devices with a new operating system designed for low resources in mind.

We debate what Google’s rumored Brillo OS would look like & the impact it could have on Canonicals big plans for Ubuntu Snappy.

Plus Mike ponders switching to BSD, Google Play services in a library & GBA games in your browser.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

Show Notes:

Project(s) of the Week

Jsemu/GBA
Source for GBA
The Emulation Game | LAS 365
Google Play Services from PTDave

The Pre-IO Calm

• Chrome for Android goes almost ‘entirely open source’

In a post in the /r/Android subreddit, an engineer of Chrome for Android announced that the mobile browser is now “almost entirely open source,” with the bulk of its code now available in the open source Chromium repository just like its desktop sibling. To explain the use of the word ‘almost’ in layman’s terms, Google saves certain features — particularly those which communicate with your Google account — for its commercial version of Chromium, which is the Chrome browser.

Feedback:

• Mike switching Operating Systems
• Thoughts on GTG (Getting Things Done)?

The post Google's Brillo Pad | CR 155 first appeared on Jupiter Broadcasting.

Mike shares his recent experience developing Chrome apps & we debate if Chrome platform tax is costing users a decent browser. Is Chrome becoming the next Windows?

Plus what we’d like to see announced next for Android and iOS & the big problems those features would solve for developers.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

Show Notes:

Why I’m breaking up with Google Chrome

When Chrome debuted for the first time in 2008 it was the fastest browser on the block. It was light, nimble, extensible and easy to use compared to Firefox, which had become slow and cumbersome.

In the past few years, I’ve stuck with it, even as it became a memory hog, unstable and a major drain on battery life.

I was in denial. But now I have to admit it — the stable, snappy Chrome is a distant memory. As it has grown in popularity, it’s steadily got worse.

• Google Lobbying Spending Reached New High in Early 2015

What we’d like to see in iOS 9 at WWDC next month | Ars Technica

We’ve assembled a small wishlist of features for iOS 9, with a focus on the smaller tweaks we hope Apple can focus on now that it’s not pulling up all the carpets and replacing all the fixtures. Some of these are more likely to be incorporated than others. Some have been on our wishlist for literally years. But all of them would be welcome improvements.

• A Google Now Open API is in the Works

Google Now will one day be able to work with information from all of the apps you use. Expanding on the current pilot program that works with 40 third-party services, the plan is to offer an open API in the future, that anyone can build into their apps.

Mike went to Build 2015 NY

• MicroSite: Build Tour

Feedback:

Atom v VS Code so far.

• Love this show.
• H1B Visa – Not Hate Male [ ]
• Atom editor v VS Code, “do you blead?”
• The New Buccaneer Tech

The post Chrome Took My Memory! | CR 154 first appeared on Jupiter Broadcasting.

A WordPress flaw in the wild is under attack & Microsoft releases more software for Linux. Plus a sneak peak at Google I/O & what new features might land in Android M.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

Actively exploited WordPress bug puts millions of sites at risk | Ars Technica

The cross-site scripting (XSS) vulnerability resides in genericons, a package that’s part of a WordPress theme known as Twenty Fifteen that’s installed by default, according to a blog post published Wednesday by security firm Sucuri. The XSS vulnerability is “DOM based,” meaning it resides in the document object model that’s responsible for how text, images, headers, and links are represented in a browser. The Open Web Application Security Project has much more about DOM-based XSS vulnerabilities here.

Microsoft Releases PowerShell DSC For Linux – Slashdot

jones_supa writes: Microsoft is announcing that PowerShell Desired State Configuration (DSC) for Linux is available for download in form of RPM and DEB packages. DSC is a new management platform that provides a set of PowerShell extensions that you can use to declaratively specify how you want your software environment to be configured. You can now use the DSC platform to manage the configuration of both Windows and Linux workloads with the PowerShell interface. Microsoft says that bringing DSC to Linux is another step in the company’s “broader commitment to common management of heterogeneous assets in your datacenter or the public cloud.” Adds reader benjymouse: DSC is in the same space as Chef and Puppet (and others); but unlike those, Microsofts attempts to build a platform/infrastructure based on industry standards like OMI to allow DSC to configure and control both Windows, Linux and other OSes as well as network equipment like switches, etc.

Confirmed: Media Center is Dead – Thurrott.com

“Due to decreased usage, Windows Media Center will not be part of Windows 10,” Mr. Aul tweeted recently.

Digging into the Google I/O 2015 schedule: Android M, voice access, and more | Ars Technica

Google has posted the schedule for Google I/O 2015. While the company tries not to give away too many things with the early schedule, the release always ends up being full of new information. We dug into all the session descriptions, and here’s all the info we could squeeze out of it.

Android M—It looks like Android M, the next version of Android, will be at the show. One sandbox session is called “Android for Work Update” and says, “Android M is bringing the power of Android to all kinds of workplaces.” While full Android releases have alphabetical snack code names, “Android L” launched last year at Google I/O, and the release was a developer preview for what would eventually become Lollipop. So it sounds like Android [letter] is a new pattern that indicates a dev preview.

The post M is for Monopoly | Tech Talk Today 168 first appeared on Jupiter Broadcasting.

Mike and Chris cover some great follow up on new hotness burnout. Then we discuss what impressed us and what tempers our excitement from Google I/O 2014.

Plus why AndroidOne could be the Android of the future and a quick chat about Rust.

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

— Show Notes: —

Feedback / Follow Up:

• Mike, you’re kind of missing the point of the JS frameworks. It’s a battleground. It’s exciting time for Javascript, and the development around the language is getting serious.

• lykwydchykyn’s Zen Aproach to Staying Updated

• Hotness Exhaustion Follow up from Brian

• Follow up to last show – Linux as platform for developers

• rust-lang/rust

@ChrisLAS Could you mention in the show (feedback perhaps?) that Rust 0.11 will be released tomorrow? It’s an extremely cool language from Mozilla, only a few people know about it right now however

@ChrisLAS lol, there’s actually a game engine written in Rust now https://github.com/PistonDevelopers/piston

@ChrisLAS Rust is perhaps the only language which could save us low-level folks from C++

Dev Hoopla:

• Google IO 2014: 5 Reasons Why We Are Excited

Book recommendation: “Free” by Chris Anderson

• Chris Anderson : Free – The Future of a Radical Price | Free Audiobook Download

The post Materially Excited | CR 108 first appeared on Jupiter Broadcasting.

The news we missed during Google I/O that impacts mobile US users, Aero’s fate, and more. Then we circle back and finish up our thoughts on Google I/O 2014.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a Tech Talk Today supporter on Patreon:

Show Notes:

— Headlines —

Supreme Court says police must get warrants for most cellphone searches

“The decision brings the Fourth Amendment into the digital age,” Fisher said. “The core of the decision is that digital information is different. It triggers privacy concerns far more profound than ordinary physical objects.”

In general, warrants are required for ­searches, but the court’s precedents have said that a person’s privacy expectations diminish considerably after an arrest. Police may protect themselves and others by searching the arrestee for weapons or securing evidence that might be destroyed.

Roberts said he “cannot deny” that the decision will have an impact on the ability of law enforcement to combat crime. “Privacy comes at a cost,” he wrote.

But he said police can use their own technology to ensure that the information on cellphones that might contain critical evidence is not erased or lost. He also said there could be “case-specific”exceptions to the warrant rule.

U.S. to Auction $17.4M Worth of Seized Bitcoin

SecondMarket CEO & Founder Barry Silbert and Bloomberg’s Matt Miller discuss the auction by the U.S. government of over $17M worth of Bitcoin seized after shutting down the Silk Road marketplace last year. They speak to Trish Regan on Bloomberg Television’s “Street Smart.” (Source: Bloomberg)

Coinbase Working with Intuit’s QuickBooks to Offer Bitcoin Payments to Small Business

Starting today, Coinbase and QuickBooks Online are collaborating to offer PayByCoin, a new service from Intuit that will enable small businesses to accept bitcoin payments.

How does it work?

• Small business operators register with Coinbase and link their bitcoin wallet to their QuickBooks Online account.
• When a customer receives an invoice, they now have the option to pay by bitcoin, in addition to existing methods such as credit cards and bank transfers.
• Intuit does not currently charge a fee for this new service. Coinbase does not charge any fees for the first $1,000,000 USD in bitcoin transactions; after that, a 1% payment processing fee with be charged when converting bitcoin to USD.

Aereo loses to broadcasters in Supreme Court fight for its life

The Supreme Court struck a dramatic blow against Aereo today in a ruling that puts the TV streaming service as it currently exists on its deathbed. In a 6–3 ruling, the court found that Aereo’s service violates the Copyright Act by playing back recordings of broadcasters’ TV show

Feedback:

• Did Google Just Kill open competitors?

• Shuttleworth on convergence, too early?

The post Google Hangover | Tech Talk Today 16 first appeared on Jupiter Broadcasting.

It’s our live coverage and reactions to the first two hours of the Google I/O 2014 Keynote. The new Android UI is revealed, improvements to ChromeCast, Android for your car, watches, protesters and more.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a Tech Talk Today supporter on Patreon:

Show Notes:

— Headlines —

Keynote Highlights:

• Google I/O 2014 Interrupted by Eviction Protester

• Google’s next version of Android ‘L-release’ has a new look, deeper ties to the web

• Google Introduces Android TV, Its New Platform For Smart TV Apps And Navigation | TechCrunch

• At I/O, Google launches Android Wear, says Moto360 coming this summer | Ars Technica

• Android Now Has 1 Billion Active Users per Month

• Google Chromecast Gets Android Mirroring, Backdrop Slideshows

• Android One will help manufacturers build low-cost phones for developing markets | The Verge

• Google is bringing Android to the car with Android Auto | The Verge

• Google announces Drive for Work with unlimited storage at $10 a month | The Verge

• Google Protester

Google I/O 2014

Google I/O schedule + streams

The post Google I/O 2014 Special | Tech Talk Today 15 first appeared on Jupiter Broadcasting.

Google announces their own domain name management service, the Internet of things has arrived, and it’s already been hacked. We’ll chat about the Nest thermostats rooting, Google buying Dropcam and more.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a Tech Talk Today supporter on Patreon:

Show Notes:

— Headlines —

Google Begins Testing Domain Registrations

When Google Domains launches to the public, you’ll be able to buy and sell domains through the service. Unlike some other domain registration offerings, Google won’t charge you extra to register your domain privately. You’ll be able to create up to 100 email addresses on the domain and as many as 100 customized sub-domains. Google Domains will also use the company’s own DNS servers, so visitors should get a snappy response time when they hit up your site.

GTV Hacker » Google Nest: Exploiting DFU For Root

Today, popular Google TV hacking site GTV Hacker, announces it has hacked the device to enable the booting of unsigned code. If you own a Nest, hackers could have a backdoor into your home.

By leveraging the device’s DFU mode to boot unsigned code at the boot-loader level.

The attack on the Nest thermostat is simple, we use the device’s recovery mode to run our own modified boot-loader (stage one and two). We then use our loaded boot-loaders to initiate a Linux kernel that is used to modify the file system on the Nest. We then add a SSH server running as root as well as functionality to create a reverse SSH tunnel to a specified host using the Nest’s virtual drive.

They found this “feature” back in November 2013, and mentioned it publicly on December 5th, 2013 (see this tweet). Initially, we planned on releasing our findings at a conference this summer (along with new root methods for the Chromecast and Roku), but our talk was declined. Their loss!

They will, however, be speaking this year at DEF CON 22! Our talk, entitled Hack All The Things: 20 Devices in 45 Minutes, will feature unreleased exploits for 20 devices being released in a 45 minute period. If you are in Las Vegas this August, make sure to stop in!

If you are a Nest user, I probably wouldn’t panic yet. It seems the hacker would need physical access to the device, which limits the risk. However, a devious person could exploit it while in your home and then control it remotely later. Hopefully Google can release an update to make the thermostat more secure and block the exploit.

Nest Labs Joins Race to Define Platform for the Internet of Things

Last Friday, Nest moved to broaden its reach in the home, buying a fast-growing maker of Internet-connected video cameras, DropCam, for $555 million. And on Tuesday, Nest is expected to announce a software strategy backed by manufacturing partners and a venture fund from Google Ventures and Kleiner Perkins Caufield & Byers.

Whirlpool and Nest, Mr. Dibkey said, have worked together for more than year to develop a few applications. One allows a Whirlpool clothes dryer and a Nest thermostat to work together to conserve energy and save money. The thermostat detects a local utility’s peak load times, when electricity is most expensive. It sends a signal to the dryer to run on a cooler, slower drying cycle at those times.

In a Jawbone application, the company’s activity-monitoring wristband detects when a person gets up on a winter morning. It then sends a message to the Nest thermostat, telling it to heat up the house

Nest’s Internet of Things strategy will be backed by the Thoughtful Things Fund, a venture capital fund created by Google Ventures and Kleiner Perkins.

Google I/O 2014

How to Watch Google I/O 2014 Keynote Livestream

Google I/O 2014 runs from June 25 to 26. If you are interested in watching the Google I/O 2014 keynote as a livestream, you have a couple of options.

The post Nest Root Attack | Tech Talk Today 14 first appeared on Jupiter Broadcasting.

The rumors of the death of the Nexus line may be exaggerated, we look at some leaked specs of a new 9 inch Nexus tablet. Plus Heartbleed goes on, Linux app updates, Bitcoin’s weekend boost and more!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a Tech Talk Today supporter on Patreon:

Show Notes:

— Headlines —

This Is Volantis, HTC’s Nine-Inch Nexus Tablet

According to our information, the tablet is internally referred to as the Nexus 9, though this name could change before it comes to market. Here’s what we’ve heard so far in the specs department:

• 8.9″ Display at 2048×1440 (281ppi)
• NVIDIA Logan 64-bit processor (Tegra K1)
• 2GB RAM
• 16/32GB internal storage
• 8MP OIS main camera, 3MP front facing camera
• Aluminum zero-gap construction
• Stereo front-facing speakers
• 8.91″x5.98″x0.31″ body (that’s 22.63×15.19×0.79cm)
• 418g (or 427g with LTE) (that’s 14.74/15.1 ounces)

Errata Security: 300k vulnerable to Heartbleed two months later

When the Heartbleed vulnerability was announced, we found 600k systems vulnerable. A month later, we found that half had been patched, and only 300k were vulnerable. Last night, now slightly over two months after Heartbleed, we scanned again, and found 300k (309,197) still vulnerable. This is done by simply scanning on port 443, I haven’t check other ports.

This indicates people have stopped even trying to patch.

Linux Note-taking App ‘Springseed’ 2.0 Refreshes

The open-source app is currently only available on Linux, offering users a minimalistic UI for writing, storing and categorising notes, thoughts, code snippets, and more. Notes can be synced between computers using the built-in Dropbox sync, though this isn’t required to use the app.

Version 2.0, the first stable update since February, refreshed the application’s UI with a darker, angular new look. The light colour scheme and custom window frames of version 1.1 have been replaced by a dark sidebar with large typography, native window borders and a boxier, flatter design with colourful accents in the edit window and high contrast icons.

Opera is back on Linux

As the Opera team said in a Monday blog post:

Many of us at Opera use Linux as our primary platform. It’s great to be able to try out the newest developments of Opera on Linux once again. Adding Linux to our browser line fulfils an important part of Opera’s vision to shape an open, connected world. We want everyone to have fast and safe access to the web. Adding Linux opens up that possibility to more machines running the open-source operating system.

Bitcoin is moving from its Deceptive phase to a very Disruptive phase.

A Greek-American engineer, physician, and entrepreneur best known for being the founder and chairman of the X PRIZE Foundation, the co-founder and chairman of Singularity University and the co-author of the New York Times bestseller Abundance: The Future Is Better Than You Think. He is also the former CEO and co-founder of the Zero-Gravity Corporation, the co-founder and vice chairman of Space Adventures Ltd., the founder and chairman of the Rocket Racing League, the co-founder of the International Space University, the co-founder of Planetary Resources, founder of Students for the Exploration and Development of Space, and vice-chairman & co-founder of Human Longevity, Inc.

Bitcoin is moving from its Deceptive phase to a very Disruptive phase. This Blog is going to explain why, and what you may want to do.

I’ve been tracking Bitcoin since its inception, and my confidence has grown to the point where I’m now trading in a portion of my gold holdings for bitcoin, buying it and accepting bitcoin for the Abundance 360 CEO Summit.

If you’ve followed my work, or participated in my Abundance 360 Summit, you understand that I teach and track exponential technologies using my “6 D’s” approach, looking for “user interface moments.”

Bitcoin is following the 6Ds and is on a path to go from deceptive to disruptive over the next 1 – 3 years.

Why Bitcoin is following the 6 D’s

1. DIGITIZED: Bitcoin is digitized money — it is a global, purely digital currency. Every bitcoin is traded, earned, sold, exchanged and bought in cyberspace. For this reason, it is living on Moore’s law and hopping on the exponential curve.

2. DECEPTIVE: Bitcoin software was released to the public in 2009 and for the first few years has been growing in its deceptive phase. Few heard about it, few used it and accepted it. In addition, the currency has been hard to use; therefore, it hasn’t had its “User Interface Moment” (the key transition from deceptive to disruptive). More soon.

3. DISRUPTIVE: As described below by my friend Barry Silbert (founder of Second Market), Bitcoin is about to enter its disruptive phase where its rate of acceptance and use will explode, as will its value. See below.

4. DEMATERIALIZING: Bitcoin is eliminating or dematerializing the use of physical money (bills and coins), even credit cards. But more than that, it is also dematerializing (read: eliminating) the need for central banks, lawyers and currency exchanges.

5. DEMONETIZING: Bitcoin eliminates middlemen (banks, lawyers, exchanges) and demonetizes the cost of transactions. No fees. It makes it cheaper to use, spread and share money.

6. DEMOCRATIZING: Bitcoin makes access to capital available to everyone, where there are no banks, no ATMs and no credit card suppliers. Ultimately, as we move (over the next 6 years) to a world of 7 billion digitally connected humans, Bitcoin makes currency available to anyone with a connection to the internet.

Bitcoin’s Evolution – Why it will be Disruptive Soon

My friend Barry Silbert (founder of Second Market) recently spoke as my guest at Singularity University’s Exponential Finance conference about Bitcoin. He provided an excellent overview of its near-term trajectory, summarized below. His input has also put me on the lookout for the “User Interface Moment” – that moment in time when an entrepreneur designs a piece of interface software (think Marc Andreessen and Mosaic) that makes it so easy to use bitcoin.

I’ll be reporting on those user interfaces, investing in those startups and helping to promote them.

Okay, now back to Barry Silbert’s insights. Barry outlined five phases for this digital currency that help explain where it’s been and where it’s going.

Phase 1: The period 2009 to 2011 was the early ‘experimentation phase’ for bitcoin (i.e. deceptive). Here the software is released to public and most technologists and hackers started playing with the code. During this phase, there was no apparent value to currency yet; mining bitcoin was easy and could be done by a single person on a MacBook or PC.

Phase 2: 2011 marked the beginning of the ‘early adopter’ phase (still deceptive). There was a lot of early hype and press around Silk Road (where you could buy drugs). The value went from less than $1 to over $30, then crashed. This spurs the first generation of bitcoin companies to build basic infrastructure: wallets, merchant processors, mining operations, exchanges, etc. – i.e. the early user interfaces.

Phase 3: 2012 thru mid-2014 marked the beginning of the ‘Venture Capital Phase.’ Folks like Marc Andreessen, Google Ventures, Benchmark and others have begun investing in Generation 2 Bitcoin companies. We are right in the middle of Phase 3 right now. Thousands of bitcoin companies are getting funding. Many of these are trying to create the “User-Interface Moment.”

Phase 4: Fall 2014 thru 2015 will like see the start of the Wall Street Phase. Here we will begin to see institutional money acknowledging digital currencies as an asset class, and they will begin trading it, investing it and creating products around it. This marks the start of the disruptive phase.

Phase 5: Finally will come the ‘Mass Global Consumer Adoption’ phase — this is where bitcoin becomes a major player in the global economy. When consumers feel it is easy, safe and secure to use bitcoin. It won’t be possible until after the “User Interface Moment” materializes, but I believe, as does Barry, that this is only 1-2 years out.

• XPRIZE Foundation Founder Peter Diamandis: Bitcoin Moving to a Very Disruptive Phase

Support Tech Talk Today creating DAILY PODCASTS

Chris:

• Twitter ChrisLAS
• Google+ +ChrisFisher

The post Return of the Nexus? | Tech Talk Today 13 first appeared on Jupiter Broadcasting.

Our top 10 hopes and expectations from Google I/O 2014. Is this the year Google pushes developers on design, will Google+ take a backseat and more.

Plus our followup includes the challenges facing openGL, why the Nexus program will die, coping with information overload and getting your confidence back.

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

— Show Notes: —

Feedback:

• Which WAF?

• Dirty Zero

• Inside Metal: How Apple plans to unlock the secret graphics performance of the A7 chip

Metal as a technology applies to the GPU (Graphics Processing Unit) of Apple’s new 64-bit A7 Application Processor used in its newest iOS devices: iPhone 5s, iPad Air and Retina iPad mini.

• Information Overload

• Confidence Issues

Dev Hoopla:

Google IO 2014: 10 things we expect

Google IO 2014 is officially scheduled to kick off at 9 a.m. Pacific on June 25

• We haven’t heard about Android@Home since 2011, I think. Hopefully they’ll make something as inexpensive and intuitive as Chromecast was to the Nexus Q.

• LG Google Smartwatch

• New Nexus Tablet?

• ChromeOS tablet?

• Android Silver?

• A less expensive Chromebook Pixel.

• Google+ integration up the yin yang? Or a pull back from G+?

• Will Google push developers for better App design?

• Is this the year Google really focuses on design?

Netflix Will Shut Down Public API Support For Third-Party Developers On November 14

Netflix is getting a lot stingier with the way that third-party developers can use its content, announcing that it will stop supporting its public API by the end of the year. In a letter to API partners, Netflix VP of Edge Engineering Daniel Jacobson announced that it would retire the public API program effective November 14.

The decision to shutdown its API seems a long time coming. Launched six years ago, the API originally provided third-party developers a way to access and point to content that users could get from Netflix in its streaming and DVD catalogs.

That helped the company grow, as subscribers could use third-party apps to check the availability of titles, reserve DVDs, and even link directly to streaming content on the web.

Audience Pick:

• Brackets 0.40 Release (Find Exclusion Sets) – Brackets Blog

The post Bathroom Marketing | CR 106 first appeared on Jupiter Broadcasting.

SSDs in your Network Attached Storage? Maybe! We’ll share our thoughts. Two Million passwords stolen by Keylogging malware, but the data is where the fun is at.

Plus a great batch of your questions, our answers!

Thanks to:

Show Notes:

D-Link finally released fix for some vulnerable routers, over a month late

• In TechSNAP 132 (October 17 2013) we told you about a flaw in D-Link routers that allowed an attacker to entirely bypass the authentication system
• Any user accessing a vulnerable device with the string “xmlset_roodkcableoj28840ybtide” (backwards: edit by 04882 joel backdoor) as their useragent is granted administrative privileges
• D-Link promised to issue fixed firmware by the end of October
• That updated firmware has finally be released, in December
• Newer firmware does not seem to be available for all of the devices

2 Million passwords stolen by Key logging malware

• Spider Labs managed to take over a Pony botnet controller
• The botnet of infected machines was harvesting passwords with a keylogger
• Total Haul:
• ~1,580,000 website login credentials stolen
• ~320,000 email account credentials stolen
• ~41,000 FTP account credentials stolen
• ~3,000 RDP credentials stolen
• ~3,000 SSH account credentials stolen
• Top Domains:
  • 325,000 Facebook
  • 70,000 Google
  • 60,000 Yahoo
  • 22,000 Twitter
  • 8,000 Linkedin
• While the statistics make it look like many of the compromised machines were from the Netherlands, it seems most of the traffic was from a few IP addresses that seem to have been acting as reverse proxies for the infected machines
• Strength of the observed passwords:
  • 6% Terrible
  • 28% Bad
  • 44% Medium
  • 17% Good
  • 5% Excellent
• Conclusion: Even have years of being told to pick good unique passwords, and after multiple breaches like MySpace, Gawker, LinkedIn, and Adobe etc, people still choose terrible passwords
• Additional Coverage

• GoDaddy ad: https://hostcabi.net/hosting_infographic Godaddy hosts one of the largest proportion of the 100,000 most popular websites on the Internet

Hackers courted by Governments for Cyber Warfare jobs

• Rolling Stone does profiles and Interviews at HackMiami, a meetup for hackers to show off their skills to corporate and government recruiters. There is also a ‘Cyber War Games’, where hackers simulate attacks against various targets and networks
• One recruiters pitch: “We built an environment that allows people to legally do the things that would put them in jail”
• “A leaked report from the Department of Homeland Security in May found “increasing hostility” aimed online against “U.S. critical infrastructure organizations” – power grids, water supplies, banks and so on. “
• Dave Marcus, director of threat intelligence and advance research at McAfee Federal Advanced Programs Groups, says the effects would be devastating. “If you shut off large portions of power, you’re not bringing people back to 1960, you’re bringing them back to 1860,” he says. “Shut off an interconnected society’s power for three weeks in this country, you will have chaos.”
• In one profile, Rolling Stone looks at ‘Street’, an expert at social engineering. “Government agencies and corporations fly Street around the world to see if he can bullshit his way into their most sensitive data centers. He has scammed his way into a bank in Beirut, a financial center across from Ground Zero, a state treasury department. He usually records his infiltrations on a spy watch, a 16-gigabyte HD video recorder with infrared lights, then turns over the footage to his clients. When I ask Street the tricks of his trade, he tells me there are two keys to stealing data in person: act like you’re supposed to be there and carry a tablet PC, which convinces victims he’s a tech-support worker. “People see this thing,” he says, waving his tablet, “and think it’s magical.”” — The digital equivalent to a clipboard
• “To see what the front line of cyberwar really looks like, I visit the National Cybersecurity and Communications Integration Center in Arlington, Virginia, the Department of Homeland Security’s mission control. It’s one of our most important hubs in digital warfare, alongside the FBI and NSA. A wall of video screens show online the attacks on the IRS and NASA – both agencies were compromised by a Distributed Denial of Service Attack, a technique that floods a site with access requests, slowing or downing it completely. “

Feedback:

• Dedup in ZFS is a bad implementation

• Using SSD drives for storage?

  • Enterprise Drive Pricing:
  • Intel DC S3700 100, 200, 400 and 800GB: $2.50/GB
  • WD NL SAS: 1TB: $0.135/GB
  • WD NL SAS: 2TB: $0.115/GB
  • WD NL SAS: 3TB: $0.106/GB
  • WD NL SAS: 4TB: $0.092/GB
  • Seagate Barracuda SATA (Desktop): 3TB: $0.030/GB

• Forward Secrecy

• Web Site Hosting

• Google and DNS reflection attacks

• Worst leak in Icelands history

• Contact Server?

Round Up:

• Hack on JPMorgan website exposes data for 465,000 card holder
• Brazilian ISP appears to be suffering DNS poisioning or hijack causing users to received malware instead of Google Analytics
• USB 3.1 connector will be square, fit either way up
• Ways the NSA might break SSL/TLS
• Microsoft blogs about their renewed commitment to privacy and security, expanded encryption
• A paper describing DANE to augment or replace SSL CAs using DNSSEC
• Court: Open Source Project Liable For 3rd Party DRM-Busting Coding
• Why people are so bad at picking passwords
• US Nuclear launch code was 00000000
• Yet Another PoS Skimmer
• OCZ the SSD and computer peripheral manufacturer going out of business

The post SSD Powered NAS? | TechSNAP 139 first appeared on Jupiter Broadcasting.

Angela and Chris go over some of the latest G+ changes from the Google I/O and show of a few of their favorite new features. Plus a few of the changes that took us by surprise, and a big mail sack!

Direct Download:

HD Download | Mobile Download | MP3 Download | YouTube

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Torrent Feed | iTunes Feeds

Show Notes:

• Google+ completely redesigned, now automatically enhances photos and highlights your best shots | The Verge

The redesign doesn’t just feature a new layout for your Google+ stream — the company has also worked to turn the website into more of a proper app instead of a website.

• Google gives Google+ a facelift, enhances photo features – latimes.com

The highlight of the new features may be Google+’s new photo editing and uploading tools. One of them will automatically sift through a bunch of photos taken during a vacation, for instance, and create a themed album to share with friends. Using the company’s technology, Google+ will choose the best pictures based on a variety of factors, including whether they feature people or important landmarks.

• Google Unveils New Music Streaming, Hangout App, Photo Features – ABC News

Google announced today it jumped on the online music streaming bandwagon with a new service through its Google Play – its Android store for apps, music, movies and other multimedia.

• Hipster Dog MEME

Mailsack:

Mike writes: How do you run freenas from cd rom. Not install but run freenas from or on cd rom

Jeff writes:

While watching your last episode of LAS you guys didn’t think too much about Ubuntu Phone spins! I completely disagree and think that there will/should be tons of spins! You forgot to think about custom Android roms. Every phone has more roms than we can keep track of. As a user, we don’t want to be locked into a venders “way”. We want to break out into different ways, new interfaces, faster systems, and more user customization. I for one am only excited about what spins may come because I am honestly not a fan of Canonical, and fear that they will take a mac approach with there Ubuntu phone OS.

Love the show, keep on rocken!

Andrew writes:

I would like to complain, about your Ting advertising. You keep telling us about how fantastic Ting is and how you can mix and match your voice and data components and only pay for what you use. I continually hear it throughout your shows and it makes me look at my phone, and cry! Because Ting is not in Australia. And without Ting in Australia, I cannot sign up to a Ting plan. And without a Ting plan I am stuck paying for hundreds of minutes of voice I will never use
The next time you are talking to your guy at Ting, please tell him Ting needs to start doing business in Australia.

Cal writes:

This is just a general comment…. I don’t support this “Unfiltered” or any show by JB, individually. But I do go out of my way to support JB as a whole because I take something beneficial from each show I watch. My concern is, in supporting one show I would be neglecting another which I gain benefit from. Please do not view your podcasts as simple podcasts, they are the best I have seen on the internet and truly are a culmination of a network. Specific to your case, the “unflitered” news channel, if it is to remain only your bias and not that of commercial interest, then please keep it part of an important piece of the network. Unaffected by anything else.
To be noted – I do not share yor views on a lot but do on some – still nice to here current event with out bs….right?

Pradeep:

I have been a big fan of your Linux Action Show & Coder Radio for the past one year. I am an indepent game developer and I have just released my game Zenania on Google Play for Androids. All the tools used to make it were open source/ free software like gimp…etc. After listening to your shows about the awesome tech in open source, I decided to try open tools for game developement and now I have release my very first indepent game. Thank you for inspiring me take the effort. If it was not for your show I would not have tried those tools (open source)…. Cheers.

Here is a link to my game.

Find FauxShow!

• LIVE: https://jblive.tv – 8pm Pacifc – 11pm Eastern – 3am UTC
• Facebook: https://www.facebook.com/thefauxshow
• Twitter: https://www.twitter.com/angerz
• G+: https://www.gplus.to/fauxshow
• Subscribe to Jupiter Signal: https://www.bit.ly/jupitersignal
• Jupiter Radio: https://jblive.info
• Affiliates Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/jupiterbroadcasting/
• Affiliates Chrome Extension: https://chrome.google.com/webstore/detail/bjekemhblnilimncanbehhjijdpjgimj
• Donations: https://original.jupiterbroadcasting.net/donate
• Shows & Shownotes: https://original.jupiterbroadcasting.net/show/fauxshow/

The post New Google+ Features | FauxShow 140 first appeared on Jupiter Broadcasting.

What we’d like to see come out of Google I/O, and the real changes they need to make to boost Android development to the next level. We’ve got our list, and we’re checking it twice.

Plus is there such a thing as a VPS on the cheap? The real improvements Apple needs to make in iOS 7, your feedback and more!

Thanks to:

GoDaddy.com Use our code coder249 to get a .COM for $2.49.

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Feedback:

• VPS on the cheap?
• Sharing a favorite new tool
• A quick QML Correction
• Just under the wire!

Dev World Hoopla

• Google IO Predications

  • What Google I/O should bring for Android hardware lovers | Internet & Media – CNET News

Google\’s hotly anticipated annual developer conference will kick off in just a couple days in San Francisco. And conference-goers and Android fans are excited about the possibility of new products the company may announce and/or give away.

• New Android Boss Finally Reveals Plans for World\’s Most Popular Mobile OS

So far Pichai, a 40-year old grad of the fabled Indian Institute of Technology and later Stanford, has kept his head down and refused all press. But as this week’s I/O event approached, he granted WIRED his first interview since taking over Android.

• WWDC Wish List

• iOS 7 Launch Likely In WWDC 2013 As Web Traffic From Devices Running Unannounced Apple OS Surge

TechCrunch reported Wednesday that Onswipe, a company that specializes in creating tablet-optimized HTML5 websites for its customers, has observed \”a significant bump\” in the number of visits to its partner sites — from both iPhones and iPads that apparently run on iOS 7

• UDS May 2013 14 May – 16 May 2013

• Ouya Update

• Ouya delays retail launch until June 25th to ensure it can meet demand | The Verge

Ouya has revealed it will delay the retail launch of its Android-based gaming console by three weeks until June 25th. In an interview with Ouya CEO Julie Uhrman.

• OUYA Closes $15 Million Round, Sets Up Microconsole Showdown – Forbes

OUYA, the most well-funded and heavily marketed of a number of approaches to TV-based microconsole gaming, has announced both a $15 million funding round and a three-week pushback on its June 4  retail launch date.

The round, led by Kleiner Perkins, features investment from graphics company NVIDIA (which is marketing its new mobile processors heavily on their console-like gaming performance, most obviously in their proof-of-concept Project Shield console, and which supplies the Tegra 3 mobile processor powering the OUYA), the Mayfield Fund, Shasta Ventures and Ocean Partners. This nearly doubles the $8.5 million funding the OUYA console raised in its July 2012 Kickstarter campaign. Kleiner Perkins\’ Bing Gordon, an EA veteran currently on the board of Zynga, will also join  the OUYA board.

Follow the show

• Email the show
• Join the Coder Radio Sbureddit
• Live Monday 9am PST
• Music by: Ronald Jenkees
• Mike on Twitter
• Mike on Google+
• Mike’s website
• Chris on twitter
• Chris on Google+

The post Google I/O Wish List | CR 49 first appeared on Jupiter Broadcasting.