Let’s Encrypt – Jupiter Broadcasting

GNOME 3.28 Released — One major new feature for this release is automatic downloading of operating systems in Boxes, which takes the work out of creating and running virtual machines — just pick the operating system that you want to create a virtual machine of, and Boxes will now download and install it for you.
GNOME 3.28 Release Notes
Firefox 59 released — We launched an entirely new engine in November, made significant improvements to graphics rendering in January, and are continuing to post performance gains and add features with this release. On Firefox for desktop, we’ve improved page load times, added tools to annotate and crop your Firefox Screenshots, and made it easier to arrange your Top Sites on the Firefox Home page. On Firefox for Android, we’ve added support for sites that stream video using the HLS protocol.
Firefox is a Snap
Raspberry Pi 3 Model B+ — Alongside a 200MHz increase in peak CPU clock frequency, we have roughly three times the wired and wireless network throughput, and the ability to sustain high performance for much longer periods.
US city bans new Bitcoin mining — Plattsburgh, New York has imposed an 18-month moratorium on Bitcoin mining to prevent miners from using all the city’s cheap electricity.
Let’s Encrypt rolls out wildcard certs — Free “wildcard” certificates to enable secure HTTP connections for entire domains. In addition to a new version of the Automated Certificate Management Environment (ACME) protocol, an interface that can be used by a variety of client software packages to automate verification of certificate requests.
TechSNAP Episode 359
Eric Raymond’s open source UPS — Last week, ESR opened up the work-in-progress on GitLab: the Upside project is currently defining requirements and developing a specification for a “high quality UPS that can be built from off-the-shelf parts in any reasonably well-equipped makerspace or home electronics shop”.
Wil Wheaton runs Linux — But ab

The post Linux Action News 45 first appeared on Jupiter Broadcasting.

Netflix’s Dark Capacity | TechSNAP 359

chris — Thu, 15 Mar 2018 21:03:47 +0000

RSS Feeds:

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

The post Netflix’s Dark Capacity | TechSNAP 359 first appeared on Jupiter Broadcasting.

LetsEncrypt is a SNAP | TechSNAP 328

chris — Tue, 18 Jul 2017 22:47:27 +0000

RSS Feeds:

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

‘Devil’s Ivy’ Vulnerability

Beyond public key encryption

One of the saddest and most fascinating things about applied cryptography is how 6689264031_4c7516b3e1_zlittle cryptography we actually use. In fact, with a few minor exceptions, the vast majority of the cryptography we use was settled by the early-2000s.*
Identity Based Cryptography – In the mid-1980s, a cryptographer named Adi Shamir proposed a radical new idea. The idea, put simply, was to get rid of public keys.
Attribute Based Encryption – The beautiful thing about this idea is not fuzzy IBE. It’s that once you have a threshold gate and a concept of “attributes”, you can more interesting things. The main observation is that a threshold gate can be used to implement the boolean AND and OR gates

Dan’s Let’s Encrypt Tool

use case is centralized Let’s Encrypt with dns-01 challenges

Feedback

ARM & risc systems not readily sold. Intel and AMD have a very compelling AESNI and virt instructions, and PCIe
Host your own mail server – see https://www.nethserver.org/
PXE boot – see Zalman ZM-VE350
HOWTO: setup a PXE Server with dnsmasq
Cobbler – Linux install and update server

Round Up:

Alexa is listening to what you say – and might share that with developers – see https://nakedsecurity.sophos.com/2017/07/17/alexa-is-listening-to-what-you-say-and-might-share-that-with-developers/
Life Is About to Get a Whole Lot Harder for Websites Without HTTPS
BCBS sent out USB cards telling people to insert into their computer. Here is the prototype for the next big wave of security breaches.
Google Glass 2.0 is a startling second act
Google Glass is officially back with a clearer vision

The post LetsEncrypt is a SNAP | TechSNAP 328 first appeared on Jupiter Broadcasting.

Wifi Stack Overfloweth | TechSNAP 313

chris — Wed, 05 Apr 2017 01:02:34 +0000

RSS Feeds:

Become a supporter on Patreon:

Show Notes:

iOS 10.3.1 update prevents: attacker within range may be able to execute arbitrary code on the Wi-Fi chip

Hackers Are Emptying ATMs With a Single Drilled Hole and $15 Worth of Gear

NOT SO LONG ago, enterprising thieves who wanted to steal the entire contents of an ATM had to blow it up. Today, a more discreet sort of cash-machine burglar can walk away with an ATM’s stash and leave behind only a tell-tale three-inch hole in its front panel.
The dispenser will obey and dispense money, and it can all be done with a very simple microcomputer.
They found that the machine’s only encryption was a weak XOR cipher they were able to easily break, and that there was no real authentication between the machine’s modules
In practical terms, that means any part of the ATM could essentially send commands to any other part, allowing an attacker to spoof commands to the dispenser, giving them the appearance of coming from the ATM’s own trusted computer.

Let’s Encrypt

Using Let’s Encrypt within FreeBSD.org

Feedback

Round Up:

Dan mentioned these URLs during the podcast:

Adding a 10Gb NIC to an r610

The post Wifi Stack Overfloweth | TechSNAP 313 first appeared on Jupiter Broadcasting.