Show Notes: linuxactionnews.com/205

The post Linux Action News 205 first appeared on Jupiter Broadcasting.

Episode Links:

linuxactionnews.com/101

The post Linux Action News 101 first appeared on Jupiter Broadcasting.

Episode Links:

linuxactionnews.com/93

The post Linux Action News 93 first appeared on Jupiter Broadcasting.

Show Notes/Links: linuxunplugged.com/285

The post Pain the APT | LINUX Unplugged 285 first appeared on Jupiter Broadcasting.

Episode Links:

linuxactionnews.com/89

The post Linux Action News 89 first appeared on Jupiter Broadcasting.

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Data from connected CloudPets teddy bears leaked and ransomed, exposing kids’ voice messages

• Extortionists Wipe Thousands of Databases, Victims Who Pay Up Get Stiffed

• Spiral Toys xCEO denies voice recordings stolen

• CloudPets left their database exposed publicly to the web without so much as a password to protect it.

• There are references to almost 2.2 million voice recordings of parents and their children exposed by databases that should never have contained production data.

• CloudPets has absolutely no password strength rules

• The CloudPets Twitter account has also been dormant since July last year so combined with the complete lack of response to all communications, it looks like operations have well and truly been shuttered.

Spammers expose their entire operation through bad backups

• Today we release details on the inner workings of a massive, illegal spam operation. The situation presents a tangible threat to online privacy and security as it involves a database of 1.4 billion email accounts combined with real names, user IP addresses, and often physical address. Chances are that you, or at least someone you know, is affected. Spammergate: The Fall of an Empire

• The data from this well-known, but slippery spamming operation, was discovered by Chris Vickery, a security researcher for MacKeeper and shared with Salted Hash, Spamhaus, as well as relevant law enforcement agencies.

• Vickery also discovered thousands of warm-up email accounts used by RCM to skirt anti-spam measures

• RCM’s data breach also exposed 2,199 IP addresses used for public-faced activities; as well as the group’s internal assets. This is in addition to the 60 IP blocks RCM has identified for activities in the past, as well as current and future operations; and the 140 active DNS servers that are rotated frequently.

• Based on campaign logging documents, the data breach also exposed more than 300 active MX records. In just two spreadsheets alone, RCM recorded nearly 100,000 domains used for their campaigns.

• If an offer doesn’t inbox (meaning it is rejected, or otherwise dumped into a spam or junk folder), or a given domain is blacklisted, RCM goes back to a list of thousands of domains and selects another to restart the process.

Feedback

• Using ZFS mirrors on a motherboard without RAID support

• Rack Noise

• Big heatsink
• Vendor
• IP address question
• Changing volume sizes in bacula?

Round Up:

• Vault 7: CIA Hacking Tools Revealed

• Google: We’re hiking bug bounties because finding security flaws is getting tougher

• Xbox, Skype, Outlook, and more recover from Microsoft Account issues

• Secure computing for journalists – use your phone, use iOS

• EFF to Court: Forcing Someone to Unlock and Decrypt Their Phone Violates the Constitution

• Changes to Ragel in Response to the Cloudflare Incident

• Arbitrary code execution in TeX distributions

• Operation Rosehub

The post Bad Boy Backups | TechSNAP 309 first appeared on Jupiter Broadcasting.

It’s a special roundtable edition of Coder Radio. Our panel discussed the advantages of Go development over PHP, creating a flat-file website with no database, and the real secret to finishing that last 10%.

Then we discuss the black magic Google is using to share 70% of their new Inbox’s apps code across the Web, Android, and iOS. And if Google’s new approach is a quiet condemnation of HTML5 applications.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

— Show Notes: —

Feedback / Follow Up:

• Why Not Start a Campaign to Give Lennart Poettering Positive Feedback

• My Experience into GoLang thus far.

• Docker based development environments

• joschi127/tugger · GitHub

Dev Hoopla:

Maintaining Motivation

How Google Inbox shares 70% of its code across Android, iOS, and the Web

Official Gmail Blog: Going under the hood of Inbox

• Welcome to TypeScript

• TypeScript 1.4 sneak peek: union types, type guards, and more

The post Google's Objective C | CR 129 first appeared on Jupiter Broadcasting.