We’ll look back at 10 years of Patch Tuesday, then the shutdown of Lavabit and Silkroad.

Plus a big batch of your questions, our answers, and much much more!

Thanks to:

— Show Notes: —

Microsoft Patch Tuesday turns 10

• On Oct. 9, 2003, Microsoft announced its new security patching process, it ended up changing the entire industry
• Microsoft promised:
• “Improved patch management processes, policies and technologies to help customers stay up to date and secure.”
• “Global education programs to provide better guidance and tools for securing systems.”
• “Our goal is simple: Get our customers secure and keep them secure. Our commitment is to protect our customers from the growing wave of criminal attacks.”
• Microsoft started blogging about security issues and also embarked on serious outbound communication campaigns to educate users
• Even Microsoft’s security bulletin text format and sections were delivered in a consistent format that security professionals have come to rely upon
• Today public disclosure of serious Microsoft security holes is now the exception

2 new vulnerabilities bypass Java ‘Click2Play’ security system

• A new variant of the \”Kore-ish\” Cool Exploit Kit appears to make use of two new zero-day exploits in Java7u21
• CVE-2013-2460
• CVE-2013-2472
• It appears this vulnerability may have originally been discovered by VUPEN and solid to governments and used for an indeterminate amount of time, until it was fixed by Oracle in Java7u25
• The current version of Java is Java7u40
• The latest version of Java includes a new ‘deployment rule set’ feature, that allows enterprise customers to create a whitelist of allowable applications, preventing drive-by attacks

Barclay’s hit by KVM attack, 1.3 million GBP stolen

• An person pretending to be an IT admin, walked in to the branch and installed an IP-KVM connected to a 3G Router, then later used it to take over the workstation it was connected to
• Barclays claims to have recovered “a significant amount” of the stolen money
• When police raided a number of properties to arrest the perpetrators, they found thousands of credit cards and other personal data, plus drugs, jewellery and cash
• This is not the first time Barclay’s has been hit. “We have been working closely with the Metropolitan Police following a security breach at our Swiss Cottage branch in April 2013. We identified the fraud and acted swiftly to recover funds on the same day,” said Alex Grant, managing director of fraud prevention at Barclays.

Feedback

[asa]B00457X7XQ[/asa]

• Zero Day: A Jeff Aiken Novel Audiobook | Mark Russinovich | Audible.com

• Co-located server connected to home server + 6 screens problem

• proXPN VPN | Checkout Code: JBLIVE for 20% off for Life

• Why use services like LastPass instead of directly generating passwords using e.g. PBKDF2?

• ZFS and Virtualization

• ZFS Distributed FS

• Follow up to the TechSNAP 128 Bank Job

• Ethernet over power!

• BSD Conference and vBSDcon 2013 – Verisign

Round Up:

• Edward Snowden\’s E-Mail Provider Defied FBI Demands to Turn Over Crypto Keys, Documents Show
• FIMail – Graphical Email client for DOS
• Silk Road Shutdown, Owner Arrested. FBI Says Simple Mistake Led to his Arrest
• Internet of Things Demands New Social Contract To Protect Privacy
• Rocket Researches bypass US GPS limits
• Lackluster broadband hurting adoption of ‘the cloud’
• Former NSA CTO Prescott Winter says enterprise IT security is appalling
• Signals from the Crowd: Uncovering Social Relationships through Smartphone Probes
• Security after the death of trust
• Yahoo does bugbounty wrong, researcher reports serious vulnerability, gets $12.50 coupon for Yahoo store

The post ZFS Can Do that | TechSNAP 130 first appeared on Jupiter Broadcasting.

The War on Drugs has never looked more antiquated after receiving a major blow in public opinion, and by the Justice Department. And while the nation moves forward on the issue, ground zero of Cannabis legalization takes a step backward. We’ll reflect on what might be a legitimate turn for the better, in one of the larger embarrassments for the United States.

But first: An interview with Lavabit’s founder brings into focus the depth and reach of the Obama Administration’s attempt to cover up their warrantless surveillance programs.

Plus our follow up, your feedback, and much much more.

On this week’s Unfilter.

Direct Download:

Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

Video Feed | MP3 Feed | OGG Feed | HD Torrent | Mobile Torrent | iTunes

Become an Unfilter Supporter:

— Show Notes —

NSA Fallout

• NSA ‘secret backdoor’ paved way to U.S. phone, e-mail snooping

Today’s top-secret document leaked by Snowden reveals that “procedures approved on 3 October 2011 now allow for use of certain United States person names and identifiers as query terms when reviewing collected FAA 702 data.”

FAA 702 is a reference to section 702 of a 2008 law that amended the Foreign Intelligence Surveillance Act. Those amendments created a warrantless surveillance process that could be employed by NSA analysts, but Congress never intended it to be used domestically against American citizens: A congressional report accompanying the law claimed it allows electronic surveillance only of “persons located outside the United States in order to acquire foreign intelligence information.”

• NSA loophole allows warrantless search for US citizens’ emails and phone calls | World news | The Guardian

• White House insists James Clapper will not lead NSA surveillance review | World news | theguardian.com

“The panel will not report to the DNI. As the DNI’s statement yesterday made clear, the review group will brief its interim findings to the president within 60 days of its establishment, and provide a final report with recommendations no later than December 15 2013.”

She added: "As we announced on Friday, the review group will be made up of independent, outside experts. The DNI’s role is one of facilitation, and the group is not under the direction of or led by the DNI.

“The members require security clearances and access to classified information so they need to be administratively connected to the government, and the DNI’s office is the right place to provide that. The review process and findings will be the group’s.”

• Lavabit

• Lavabit.com owner: ‘I could be arrested’ for resisting surveillance order – Investigations

Levison said he started Lavabit 10 years ago to capitalize on public concerns about the Patriot Act, offering customers a paid service — between $8 and $16 a year — that would encrypt their emails in ways that would make it extremely difficult, if not impossible, for law enforcement agents to decipher. He said that until he shut down, his small company was generating about $100,000 in revenue annually with about 10,000 users paying for the encryption service.

• EXCLUSIVE: Owner of Snowden’s Email Service on Why He Closed Lavabit Rather Than Comply With Gov’t

• Michael Hayden, Bob Schieffer and the media’s reverence of national security officials | Glenn Greenwald | Comment is free | theguardian.com

But inviting Hayden to do exactly that is what establishment media outlets do continually. Just yesterday, Face the Nation featured Hayden as the premiere guest to speak authoritatively about how trustworthy the NSA is, how safe it keeps us, and how wise President Obama is for insisting that all of its programs continue. As usual, no mention was made of the role he played in secretly implementing an illegal warrantless spying program aimed directly at the American people.

• Michael Hayden, Former NSA Chief: After A Major Attack, U.S. Likely To Seize More Surveillance Powers

You’ve got this metadata. It’s now [currently] queried under very, very narrow circumstances. If the nation suffers an attack, there are other things you could do with that metadata. There are other tools. So in that kind of emergency perhaps you would go to the court and say, ‘In addition to these very limited queries we’re allowed to do, we actually want to launch some complex algorithms against it.’"

– Thanks for Supporting Unfilter –

This Week’s New Supporters:

• Kenneth A
• Percival C
• Jonathan

• Thanks to our 155 Unfilter supporters!

• Supporter perk: Downloadable Pre and Post show. Extra clips, music, hijinks, and off the cuff comments. The ultimate Unfiltered experience.

WEED

• Sanjay Gupta Changed His Mind On Weed – Business Insider

Dr. Sanjay Gupta, CNN’s chief medical correspondent, says he was wrong to ignore marijuana’s medical potential when he wrote an opinion piece in 2009 called "Why I would Vote No on Pot

• Sanjay Gupta Shows the Medical Marijuana Tide is Turning – Stephanie Slade (usnews.com)

Polling shows people are increasingly open to the notion that not all drugs should be outlawed. A survey by Pew Research Center back in March found a majority of Americans – 52 percent – now say marijuana should be legal. More strikingly, 72 percent agreed that government efforts to enforce marijuana laws cost more than they are worth, and three in four agreed the drug has “legitimate medical uses.”

Today in America, one in every 15 black men is behind bars.

• WEED: A Dr. Sanjay Gupta Special – YouTube

CNN’s Dr. Sanjay Gupta cuts through the smoke and travels around the world to uncover the highs and lows of cannabis.

New Questions in Hastings Death

• Michael Hastings Writing Expose On CIA Chief John Brennan When He Died

Michael Hastings was working on an expose on CIA director John Brennan at the time of his suspicious death, the wife of the Rolling Stone journalist said on Monday.

Last month, a source sent San Diego 6 News an email from Fred Burton, the president of CIA contractor Straffor. The email claims that Brennan was leading the “witch hunts” against journalists.

Text of the email, which was posted on WikiLeaks, read: “Brennan is behind the witch hunts of investigative journalists learning information from inside the beltway sources.”

• Michael Hastings’ 911 Callers and New Video Confirm Large Explosions – YouTube

Feedback:

Bitmessage Address: BM-GuQ4gqmBeW8CYpSo3Htg2pBrBdHbvpe7

• Prepare for a visit with the TSA

Supporters Show Email:

• Some local information about the Detroit Bankruptcy

If you’re a Supporter check your inbox!

Call us: 1.425.312.1756

Follow the Us:

• Unfilter on Reddit
• Chris on Twitter
• Chase’s Geek and Gaming Network
• Connect with Chase

The post Gupta: Weed Hypocrisy | Unfilter 63 first appeared on Jupiter Broadcasting.

Does the Linux community lean on the age old excuse of choice, to brush of the real limitations of desktop Linux environments? We debate that, and then discuss the growing reasons to roll your own email server.

Plus we read a ton of feedback, chat with our live hangout, some tablet troubleshooting, and more!

Thanks to:

ProXPN Use our code JBLIVE to get 20% off for life.
UnitySync Visit dirwiz.com/unitysync use code linux for an extended trial and a year of maintenance.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

Open Ended:

• Forget Arch challenge, Im doing the KDE challenge!

• My Switch to KDE, then back to Gnome (sound woes), then my switch back to KDE.

• Fixing my dead Nexus 7
  My Nexus 7 (2012) won\’t charge or turn on – Google Play Help

Panel:

• Lavabit shutdown, roll your own email?

• Lavabit suspend operations. : LinuxActionShow

\”My Fellow Users,
I have been forced to make a difficult decision: to become complicit in crimes against the American people or walk away from nearly ten years of hard work by shutting down Lavabit…\”

• Check out: https://www.youtube.com/user/professormesser/videos

The post Too Much Choice | LU1 first appeared on Jupiter Broadcasting.