NYC – Jupiter Broadcasting https://www.jupiterbroadcasting.com Open Source Entertainment, on Demand. Sun, 17 Sep 2017 04:16:44 +0000 en-US hourly 1 https://wordpress.org/?v=5.5.3 https://original.jupiterbroadcasting.net/wp-content/uploads/2019/04/cropped-favicon-32x32.png NYC – Jupiter Broadcasting https://www.jupiterbroadcasting.com 32 32 One Way or Another | User Error 26 https://original.jupiterbroadcasting.net/118281/one-way-or-another-user-error-26/ Sat, 16 Sep 2017 20:16:44 +0000 https://original.jupiterbroadcasting.net/?p=118281 RSS Feeds: MP3 Feed | Video Feed | iTunes Feed Become a supporter on Patreon: Links Equifax finally responds to swirling concerns over consumers’ legal rights TwitchCon 2017 Invisible Hand | GeekGamer.TV GeekGamer.TV GeekGamer.TV (@geekgamertv) | Twitter Orwell at PAX West 2017 – YouTube The Invisible Hand at PAX West 2017 – YouTube [ROM][N6][7.1.2_r24]★ Pure […]

The post One Way or Another | User Error 26 first appeared on Jupiter Broadcasting.

]]>

RSS Feeds:

MP3 Feed | Video Feed | iTunes Feed

Become a supporter on Patreon:

Patreon

Links

The post One Way or Another | User Error 26 first appeared on Jupiter Broadcasting.

]]>
New York Pressure Cooker | Unfilter 205 https://original.jupiterbroadcasting.net/103286/new-york-pressure-cooker-unfilter-205/ Tue, 20 Sep 2016 22:46:24 +0000 https://original.jupiterbroadcasting.net/?p=103286 RSS Feeds: Video Feed | MP3 Feed | OGG Feed | HD Torrent | Mobile Torrent | iTunes Become an Unfilter supporter on Patreon: — Show Notes — Links: VIDEO: Hot mic catches Hillary trying to hide more coughing – The American MirrorThe American Mirror Researcher Bypasses iPhone Passcode Using the Technique the FBI Said […]

The post New York Pressure Cooker | Unfilter 205 first appeared on Jupiter Broadcasting.

]]>
RSS Feeds:

Video Feed | MP3 Feed | OGG Feed | HD Torrent | Mobile Torrent | iTunes

Become an Unfilter supporter on Patreon:

Patreon

— Show Notes —

Links:

The post New York Pressure Cooker | Unfilter 205 first appeared on Jupiter Broadcasting.

]]>
Restores are Everything | TechSNAP 168 https://original.jupiterbroadcasting.net/60922/restores-are-everything-techsnap-168/ Thu, 26 Jun 2014 14:45:11 +0000 https://original.jupiterbroadcasting.net/?p=60922 A company known for backup shuts down after their AWS account gets hacked, the Hedge fund thats under attack, how far you can get with a little cab data… Your questions, our answers, and much, much more! Thanks to: Direct Download: HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | […]

The post Restores are Everything | TechSNAP 168 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

A company known for backup shuts down after their AWS account gets hacked, the Hedge fund thats under attack, how far you can get with a little cab data…

Your questions, our answers, and much, much more!

Thanks to:


DigitalOcean


Ting


iXsystems

Direct Download:

HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | HD Torrent | Mobile Torrent

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feeds | Torrent Feed

— Show Notes: —

Company shuts down after their AWS account compromised, all customer data deleted

  • Code Spaces, a source code hosting and backup service has ceased doing business
  • On June 17th the company came under a DDoS attack, which is apparently business as normal for them
  • Later, they found messages in their Amazon Web Services portal, urging them to contact a hotmail address
  • When contacted, the attacker demanded a large ransom
  • When Code Spaces attempted to change their passwords in the AWS control panel, additional administrator accounts added by the attacker were used to delete all EC2 virtual machines, S3 stores and EBS volumes in the account before all accessed could be revoked
  • The most embarrassing part of the situation is the text on the original Code Spaces website:
    “Backing up data is one thing, but it is meaningless without a recovery plan, not only that [but also] a recovery plan—and one that is well-practiced and proven to work time and time again,” “Code Spaces has a full recovery plan that has been proven to work and is, in fact, practiced.”
  • It is not clear what the Code Spaces backup strategy was, but it seemed to involve the same Amazon account
  • In general, the idea with an “offsite” backup is to separate it from a failure of the primary. If you keep the backups for your database beside the database server and your office burns down, what good are the backups
  • What if Amazon suffered a catastrophic data loss? or what if your account is compromised?
  • The backups should have at least been in a different Amazon account that was very strictly controlled, or better yet, stored in some other service
  • It is still unclear how the account was compromised, but it seems likely that Code Spaces was not making use of the Amazon’s Multi-Factor Authentication service, which offers either a mobile phone app, or two different types of hardware authenticators (key fob and credit-card style)

Poorly anonymized NYC Taxi data, de-anonymized

  • Under an Open Data initiative, the New York City Taxi & Limousine Commission released the anonymized GPS logs of all taxi trips in 2013 (173 million trips)
  • Chris Whong got a hold of this data and did some interesting stuff with it
  • When he was done with it, he posted the data for everyone
  • Developer Vijay Pandurangan took a look at the data and noticed that the medallion and hack numbers appeared to simply be MD5 hashes
  • In particular, the driver with ID# CFCD208495D565EF66E7DFF9F98764DA appeared to have an impossibly large number of trips
  • Turns out, that is the MD5 hash of “0”, cases where the data was unavailable
  • Realizing that the data was only anonymized using MD5, and knowing the structure of a drivers license # (5-7 characters, with specific characters being numbers or letters), he was able to brute force all 24 million combinations in only 2 minutes using a single CPU
  • Once this was done, he had the original un-anonymized data
  • Using other websites, it is possible to link the medallion and hack numbers to the owners names
  • Original Post
  • Additional Coverage – Ars Technica
  • To prevent this, there are a number of approaches, the fastest but weakest is a ‘secret key’. Instead of md5(hack#) just do md5(SUPERLONGSECRETKEYhack#), as long as the attacker doesn’t know the secret key, and it is long enough to make guessing it impractical, the data would remain anonymized
  • Another option is to use the md5 hash of the encrypted form of the value. However this eventually just relies on a secret key as well. However, if the data never needs to be anonymized, a very strong key can be used, and that key can then be destroyed, making decryption impossible.

Hackers attack hedge fund for monetary gain

  • BAE systems, a British defense contractor that also specializes in cyber security, was called in to investigate after computers at a hedge fund were hacked
  • The attackers somehow infiltrated the HFT (High Frequency Trading) system, and injected delays of several hundred microseconds into the order entry system
  • This causes the Hedge Fund to miss out on profits it could have made on the trades
  • It is suspected, that the attackers capitalized on this to make those profits themselves
  • “Hedge funds “really have inadequate cybersecurity as a whole” and the attacks threaten to undermine the systems used globally for high-speed trading, said Tom Kellerman, chief cyber security officer for Trend Micro Inc. ”

Feedback:


Round Up:


The post Restores are Everything | TechSNAP 168 first appeared on Jupiter Broadcasting.

]]>
The Cluster & The Cloud | BSD Now 24 https://original.jupiterbroadcasting.net/51482/the-cluster-the-cloud-bsd-now-24/ Tue, 11 Feb 2014 21:47:41 +0000 https://original.jupiterbroadcasting.net/?p=51482 A talk with Luke Marsden, CEO of HybridCluster, about how they use BSD at large. Plus our tutorial will show you how to securely share files with SFTP in a chroot.

The post The Cluster & The Cloud | BSD Now 24 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

This week on BSD Now… a wrap-up from NYCBSDCon! We\’ll also be talking to Luke Marsden, CEO of HybridCluster, about how they use BSD at large. Following that, our tutorial will show you how to securely share files with SFTP in a chroot. The latest news and answers to your questions, of course it\’s BSD Now – the place to B.. SD.

Thanks to:


\"iXsystems\"

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

FreeBSD 10 as a firewall

  • Back in 2012, the author of this site wrote an article stating you should avoid FreeBSD 9 for a firewall and use OpenBSD instead
  • Now, with the release of 10.0, he\’s apparently changed his mind and switched back over
  • It mentions the SMP version of pf, general performance advantages and more modern features
  • The author is a regular listener of BSD Now, hi Joe!

Network Noise Reduction Using Free Tools

  • Really long blog post, based on a BSDCan presentation, about fighting spam with OpenBSD
  • Peter Hansteen, author of the book of PF, goes through how he uses OpenBSD\’s spamd and other security features to combat spam and malware
  • He goes through his experiences with content filtering and disappointment with a certain proprietary vendor
  • Not totally BSD-specific, lots of people can enjoy the article – lots of virus history as well

FreeBSD ASLR patches submitted

  • So far, FreeBSD hasn\’t had Address Space Layout Randomization
  • ASLR is a nice security feature, see wikipedia for more information
  • With a giant patch from Shawn Webb, it might be integrated into a future version (after a vicious review from the security team of course)
  • We might have Shawn on the show to talk about it, but he\’s also giving a presentation at BSDCan about his work with ASLR

Old-style pkg_ tools retired

  • At last the old pkg_add tools are being retired in FreeBSD
  • pkgng is a huge improvement, and now portmgr@ thinks it\’s time to cut the cord on the legacy toolset
  • Ports aren\’t going away, and probably never will, but for binary package fans and new users that are used to things like apt, pkgng is the way to go
  • All pkg_ tools will be considered unsupported on September 1, 2014 – even on older branches

This episode was brought to you by

\"iXsystems


Interview – Luke Marsden – luke@hybridcluster.com / @lmarsden

BSD at HybridCluster


Tutorial

Filesharing with chrooted SFTP


News Roundup

FreeBSD on OpenStack

  • OpenStack is a cloud computing project
  • It consists of \”a series of interrelated projects that control pools of processing, storage, and networking resources throughout a datacenter, able to be managed or provisioned through a web-based dashboard, command-line tools, or a RESTful API.\”
  • Until now, there wasn\’t a good way to run a full BSD instance on OpenStack
  • With a project in the vein of Colin Percival\’s AWS startup scripts, now that\’s no longer the case!

FOSDEM BSD videos

  • This year\’s FOSDEM had seven BSD presentations
  • The videos are slowly being uploaded for your viewing pleasure
  • Not all of the BSD ones are up yet, but by the time you\’re watching this they might be!
  • Check this directory for most of \’em
  • The BSD dev room was full, lots of interest in what\’s going on from the other communities

The FreeBSD challenge finally returns!

  • Due to prodding from a certain guy of a certain podcast, the \”FreeBSD Challenge\” series has finally resumed
  • Our friend from the Linux foundation picks up with day 11 and day 12 on his switching from Linux journey
  • This time he outlines the upgrade process of going from 9 to 10, using freebsd-update
  • There\’s also some notes about different options for upgrading ports and some extra tips

PCBSD weekly digest

  • After the big 10.0 release, the PCBSD crew is focusing on bug fixes for a while
  • During their \”fine tuning phase\” users are encouraged to submit any and all bugs via the trac system
  • Warden got some fixes and the package manager got some updates as well
  • Huge size reduction in PBI format

Feedback/Questions

  • After today\’s questions, our email backlog will be just about caught up. Now\’s a great time to send us something – questions, stories, ideas, requests, anything you want
  • Derrick writes in: https://slexy.org/view/s21nbJKYmb
  • Sean writes in: https://slexy.org/view/s2yhziVsBP
  • Patrick writes in: https://slexy.org/view/s20PuccWbo
  • Peter writes in: https://slexy.org/view/s22PL0SbUO
  • Sean writes in: https://slexy.org/view/s20dkbjuOK

  • All the tutorials are posted in their entirety at bsdnow.tv
  • Last week\’s NTP tutorial got a small update if you\’re running a LAN-only server, as well as a couple links on how to turn it into a stratum 1 server with a GPS device
  • The SSH tutorial also got some updates
  • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
  • Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)
  • Lastly, the BSD Now t-shirt is close to being ready… stay tuned!

The post The Cluster & The Cloud | BSD Now 24 first appeared on Jupiter Broadcasting.

]]>
Journaled News-Updates | BSD Now 22 https://original.jupiterbroadcasting.net/50737/journaled-news-updates-bsd-now-22/ Thu, 30 Jan 2014 23:05:18 +0000 https://original.jupiterbroadcasting.net/?p=50737 We talk with George Neville-Neil about the brand new FreeBSD Journal .Plus we've got a tutorial on how to track the -stable and -current branches of OpenBSD.

The post Journaled News-Updates | BSD Now 22 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

We talk with George Neville-Neil about the brand new FreeBSD Journal and what it\’s all about. After that, we\’ve got a tutorial on how to track the -stable and -current branches of OpenBSD. Answers to all your BSD questions and the latest headlines, only on BSD Now – the place to B.. SD.

Thanks to:


\"iXsystems\"

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

FreeBSD quarterly status report

  • Gabor Pali sent out the October-December 2013 status report to get everyone up to date on what\’s going on
  • The report contains 37 entries and is very very long… various reports from all the different teams under the FreeBSD umbrella, probably too many to even list in the show notes
  • Lots of work going on in the ARM world, EC2/Xen and Google Compute Engine are also improving
  • Secure boot support hopefully coming by mid-year
  • There\’s quite a bit going on in the FreeBSD world, many projects happening at the same time
  • Jordan (jkh), one of the co-founders of the FreeBSD project, is once again a FreeBSD committer

n2k14 OpenBSD Hackathon Report

  • Recently, OpenBSD held one of their hackathons in New Zealand
  • 15 developers gathered there to sit in a room and write code for a few days
  • Philip Guenther brings back a nice report of the event
  • If you\’ve been watching the -current CVS logs, you\’ve seen the flood of commits just from this event alone
  • Fixes with threading, Linux compat, ACPI, and various other things – some will make it into 5.5 and others need more testing
  • Another report from Theo details his work
  • Updates to the random subsystem, some work-in-progress pf fixes, suspend/resume fixes and more signing stuff

Four new NetBSD releases

  • NetBSD released versions 6.1.3, 6.0.4, 5.2.2 and 5.1.4
  • These updates include lots of bug fixes and some security updates, not focused on new features
  • You can upgrade depending on what branch you\’re currently on
  • Confused about the different branches? See this graph.

The future of open source ZFS development

  • On February 11, 2014, Matt Ahrens will be giving a presentation about ZFS
  • The talk will be about the future of ZFS and the open source development since Oracle closed the code
  • It\’s in San Jose, California – go if you can!

This episode was brought to you by

\"iXsystems


Interview – George Neville-Neil – gnn@freebsd.org / @gvnn3

The FreeBSD Journal


Tutorial

Tracking -STABLE and -CURRENT (OpenBSD)


News Roundup

pfSense news and 2.1.1 snapshots

  • pfSense has some snapshots available for the upcoming 2.1.1 release
  • They include FreeBSD security fixes as well as some other updates
  • There are recordings posted of some of the previous hangouts
  • Unfortunately they\’re only for subscribers, so you\’ll have to wait until next month when we have Chris on the show to talk about pfSense!

FreeBSD on Google Compute Engine

  • Recently we mentioned some posts about getting OpenBSD to run on GCE, here\’s the FreeBSD version
  • Nice big fat warning: \”The team has put together a best-effort posting that will get most, if not all, of you up and running. That being said, we need to remind you that FreeBSD is being supported on Google Compute Engine by the community. The instructions are being provided as-is and without warranty.\”
  • Their instructions are a little too Linuxy (assuming wget, etc.) for our taste, someone should probably get it updated!
  • Other than that it\’s a pretty good set of instructions on how to get up and running

Dragonfly ACPI update

  • Sascha Wildner committed some new ACPI code
  • There\’s also a \”heads up\” to update your BIOS if you experience problems
  • Check the mailing list post for all the details

PCBSD weekly digest

  • 10.0-RC4 users need to upgrade all their packages for 10.0-RC5
  • Help test GNOME 3 so we can get it in the official ports tree
  • By the way, PCBSD 10.0 is out!
  • Special thanks to developers, testers, translators and docs team!
  • Upcoming: Working on a 11-CURRENT PC-BSD and 10-STABLE

Feedback/Questions

  • Tony writes in: https://slexy.org/view/s21ZlfOdTt
  • Jeff writes in: https://slexy.org/view/s2BFZ68Na5
  • Remy writes in: https://slexy.org/view/s20epArsQI
  • Nils writes in: https://slexy.org/view/s213CoNvLt
  • Solomon writes in: https://slexy.org/view/s21XWnThNS

  • All the tutorials are posted in their entirety at bsdnow.tv
  • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
  • Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)
  • A BSD Now t-shirt design is in the works, we\’ll update you on the progress (but we have to get permission to use the mascots and get a rough sketch first)
  • NYCBSDCon will be on February 8th in NYC
  • We\’ll announce the winner of our tutorial contest on next week\’s episode! Get your last minute tutorial submissions in for our contest

The post Journaled News-Updates | BSD Now 22 first appeared on Jupiter Broadcasting.

]]>
US vs Bitcoin Revolution | Plan B 19 https://original.jupiterbroadcasting.net/41582/us-vs-bitcoin-revolution-plan-b-19/ Tue, 13 Aug 2013 16:05:39 +0000 https://original.jupiterbroadcasting.net/?p=41582 An organized effort is underway at multiple levels of the US government to investigate, understand, regulate and potentially domesticate Bitcoin.

The post US vs Bitcoin Revolution | Plan B 19 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

An organized effort is underway at multiple levels of the US government to investigate, understand, regulate and potentially domesticate Bitcoin. We dig through the details and ponder the future.

Plus the ASIC challenge, the Electrum server outage, and a PSA for Android users.

Downloads:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | Video Feed | Torrent Feed | iTunes Audio | Ogg Feed

\"coinbaseqr\"

— Support the Show —

— Feedback —

Voice Links:

In our partnership ORSoC will be responsible for product development, including design, production and testing.

Lets Play w/Coins! Send in your favorite online gaming sites that take Crypto currency.

Help spread the word on iTunes with a Rating and Review:

Call or txt the Show:

1 (352) 587-5262

(352) 58-PLANB

— Discussion —

Every Important Person In Bitcoin Just Got Subpoenaed By New York\’s Financial Regulator

An official told the Associated Press that 22 subpoenas have been issued in all, seeking information on such topics as what measures Bitcoin companies may have taken to prevent money laundering, and what kind of consumer protections might be available for Bitcoin investors.

\”If virtual currencies remain a virtual Wild West for narcotraffickers and other criminals, that would not only threaten our country\’s national security, but also the very existence of the virtual currency industry as a legitimate business enterprise,\” Benjamin Lawsky, who heads the New York Department of Financial Services, said in a memo accompanying the subpoenas on Monday.

The New York State Department of Financial Services is stepping into the sheriff\’s boots.

\”We believe that — for a number of reasons — putting in place appropriate regulatory safeguards for virtual currencies will be beneficial to the long-term strength of the virtual currency industry,\” said NYSDFS superintendent Benjamin Lawsky in a statement.

List of companies subpoenaed by the New York State Department of Financial Services

  • BitInstant
  • BitPay
  • Coinabul
  • Coinbase Inc.
  • CoinLab
  • Coinsetter
  • Dwolla
  • eCoin Cashier
  • Payward, Inc.
  • TrustCash Holdings Inc.
  • ZipZap
  • Butterfly Labs
  • Andreesen Horowitz
  • Bitcoin Opportunity Fund
  • Boost VC Bitcoin Fund
  • Founders Fund
  • Google Ventures
  • Lightspeed Venture Partners
  • Tribeca Venture Partners
  • Tropos Funds
  • Union Square Ventures
  • Winklevoss Capital Management

Congress appropriations bill directs FBI to launch a federal investigation of Bitcoin as potential means for criminal, terrorist or other illegal activities

A Senate committee is pressing federal regulators and law enforcement officials to explain how they plan to oversee Bitcoin and other virtual currencies as the issue gains increasing attention from government officials concerned about the role these new markets will play in the future.

The Senate Homeland Security and Government Affairs Committee on Monday sent letters to several agencies requesting that they disclose their virtual currency policies, how they developed them, how agencies are coordinating and finally what they plan to do going forward.

  • From the bill (page 45):

Money laundering.–The Committee understands that Bitcoins and other forms of peer-to-peer digital currency are a potential means for criminal, terrorist or other illegal organizations and individuals to illegally launder and transfer money. News reports indicate that Bitcoins may have been used to help finance the flight and activity of fugitives. The Committee directs the FBI, in consultation with the Department and other Federal partners, to provide a briefing no later 120 days after the enactment of this Act on the nature and scale of the risk posed by such ersatz currency, both in financing illegal enterprises and in undermining financial institutions. The briefing should describe the FBI efforts in the context of a coordinated Federal response to this challenge, and identify staffing and other resources devoted to this effort.

The Journalistic Source Protection Defence Fund (JSPD) was set up on August 9 with the goal to provide legal as well as campaign aid to journalistic sources. Snowden, who is behind the biggest intelligence leak in the history of the US National Security Agency (NSA), has been selected the first such source.


Android Security Flaw Puts Bitcoin Wallets at Risk

SecureRandom is a Java class that generates cryptographically strong random numbers. In order to remain secure the random numbers used to generate private keys must be nondeterministic, meaning that the output of the generator cannot be predicted. Mike Hearn stated in an email to bitcoin developers regarding the Secure Random class on android, \”Android phones/tablets are weak and some signatures have been observed to have colliding R values, allowing the private key to be solved and money to be stolen.\” Bitcoin uses a random number in transaction signatures and if the same random number is reused the private key of the wallet can be determined.

Before the announcement was made, users on the bitcointalk.org forums had noticed over 55 BTC were stolen a few hours after the client improperly signed a transaction using the compromised random number generator. Users observed SecureRandom re-using the same random numbers for multiple transactions, thus compromising the private keys.

There are two types of mobile wallets, those where the private keys are generated locally on the phone, and those where private keys are held by a private company. Android wallet apps where keys are generated on the device include: Bitcoin Wallet, BitcoinSpinner, Mycellium Wallet, and Blockchain.info. Blockchain.info has already repaired the vulnerability, Bitcoin Wallet has an update in beta testing, and fixes for BitcoinSpinner and Mycellium are currently in development.

The announcement on bitcoin.org identified a three step process to secure existing addresses on all other apps:

  1. Generate a new address on a secure random number generator.
  2. Transfer all existing bitcoins to the new address. Do not send any bitcoins from this address using an Android device until the updates are implemented
  3. Notify any users of your old address of the change, so that the compromised address does not receive any more bitcoins.

Bitcoin Pick

— Watch Live —

Tuesday 2pm PDT / 5pm EDT / 9pm GMT

— Plan B Subreddit —

— Contact us —

— Music —

\"coinbaseqr\"

— Support the Show —

The post US vs Bitcoin Revolution | Plan B 19 first appeared on Jupiter Broadcasting.

]]>
Regulation Dooms Bitcoin? | Plan B 17 https://original.jupiterbroadcasting.net/40977/regulation-dooms-bitcoin-plan-b-17/ Tue, 30 Jul 2013 16:43:57 +0000 https://original.jupiterbroadcasting.net/?p=40977 Compliance is the buzzword of the season for Bitcoin, but on further reflection we have to ask - could regulation compliance weaken Bitcoin?

The post Regulation Dooms Bitcoin? | Plan B 17 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

Compliance is the buzzword of the season for Bitcoin, but on further reflection we have to ask – could regulation compliance weaken Bitcoin?

Plus the story of Thailand banning Bitcoin might be exaggerated, how deflation can help the middle class, and the Kickstarter upset of the week!

Downloads:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | Video Feed | Torrent Feed | iTunes Audio | Ogg Feed

\"coinbaseqr\"

— Support the Show —

— Feedback —

  • Xanny comments on Bitcoin Must Comply

  • \”Deflation is a death spiral\” is a statist mantra. The US economy experienced slow but steady deflation during the 19th century – during rapid growth, yet they will never teach you that in school. A little deflation rewards savers and doesn\’t hurt anyone. Inflation rewards central banksters.

From adkantor on YouTube

If you ordered an Erupter at 1 BTC, all is not lost yet. A coupon program is being initiated by ASICMINER and distributed by BTC Guild. 30% of the units sold at 1 BTC will be eligible to purchase a 2nd unit for 0.10 BTC (+0.05 Shipping/Handling). The exact method of coupon distribution will be announced when coupon units arrive, which should be around August 5th.
If you have a backordered 1.05 BTC unit, you are GUARANTEED to receive the coupon(s) for additional unit(s) at 0.15 BTC.

Help spread the word on iTunes with a Rating and Review:

Call or txt the Show:

1 (352) 587-5262

(352) 58-PLANB

— Discussion —

Did Thailand really ban Bitcoin?

A Thai Bitcoin exchange has suspended operations after failing to win a license from the country\’s central bank. However, the outfit\’s conclusion — that Bitcoin is illegal in Thailand — smells funny.

At the conclusion of the meeting senior members of the Foreign Exchange Administration and Policy Department advised that due to lack of existing applicable laws, capital controls and the fact that Bitcoin straddles multiple financial facets the following Bitcoin activities are illegal in Thailand:

  • Buying Bitcoins
  • Selling Bitcoins
  • Buying any goods or services in exchange for Bitcoins
  • Selling any goods or services for Bitcoins
  • Sending Bitcoins to anyone located outside of Thailand
  • Receiving Bitcoins from anyone located outside of Thailand

Based on such a broad and encompassing advisement, Bitcoin Co. Ltd. therefore has no choice but to suspend operations until such as time that the laws in Thailand are updated to account for the existance of Bitcoin.

Kickstarter pulls “Bitcoin: The Movie”

Andrew Wong, the entrepreneur behind the movie, launched the crowdfunding campaign on Kickstarter on July 16, and had scheduled the project to run until August 15, with a crowdfunding goal of $100,000. However, late last week, the crowdfunding site unexpectedly suspended the project. When Kickstarter pulled the plug, the movie had $15,896 pledged by 154 backers.


The Berlin district where virtual currency is as easy as cash

BERLIN — A sign above the counter of a popular bar in Berlin\’s hip Kreuzberg district warns customers of owner Joerg Platzer\’s somewhat peculiar payment preferences: \”I believe in honest money — gold, silver and Bitcoin.\”

Platzer\’s Room77 is among a cluster of more than two dozen local businesses to accept the virtual currency for everyday payments. Stickers with Bitcoin symbols on restaurant doors and shop windows guide the way.

Bitcoin activists propose hard fork to Bitcoin to keep it anonymous and regulation-free

Two anonymous activists have proposed an alternative to Bitcoin, which would fork the protocol to retain more anonymity for users. Labelled \”Bitcoin 2″, the currency would modify the existing bitcoin code to maintain what they call \”the original long-term vision\”, stripping out elements of the protocol that they feel are damaging, and building in support for anonymity protocol Zerocoin.

Bitcoin Pick

Currency — the bills and coins you carry in your wallet and in your bank account — is founded on marketing, on the belief that banks and governments are trustworthy. Now, Paul Kemp-Robertson walks us through a new generation of currency, supported by that same marketing … but on behalf of a private brand. From Nike Sweat Points to bottles of Tide (which are finding an unexpected use in illegal markets), meet the non-bank future of currencies.

— Watch Live —

Tuesday 2pm PDT / 5pm EDT / 9pm GMT

— Plan B Subreddit —

— Contact us —

— Music —

\"coinbaseqr\"

— Support the Show —

The post Regulation Dooms Bitcoin? | Plan B 17 first appeared on Jupiter Broadcasting.

]]>
Super Spin Sandy | Unfilter 24 https://original.jupiterbroadcasting.net/26886/super-spin-sandy-unfilter-24/ Thu, 01 Nov 2012 23:41:35 +0000 https://original.jupiterbroadcasting.net/?p=26886 It’s been called a once in a lifetime super storm, we’ll reflect on the media’s coverage of this major event, and we bust the October Surprise rumors.

The post Super Spin Sandy | Unfilter 24 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

It’s been called a once in a lifetime super storm, we’ll reflect on the media’s coverage of this major event, and we bust the October Surprise rumors that are spreading like wildfire online.

When you think of the fight for control of the Internet, you probably think of SOPA, CISPA, and Net Neutrality. But an International effort is underway and laying on thick rhetoric in an attempt to undermine the open nature of the web, we’ll share the details with you.

Then in ACT3: Your feedback challenges are assumptions, and we respond.

All that and a heck of a lot more, on this week’s Unfilter!

Direct Download:

HD Video | Mobile Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

HD Feed | Mobile Feed | MP3 Feed | OGG Feed | HD Torrent | Mobile Torrent | iTunes

Get Unfilter on your Android:

Browser Affiliate Extension:

  • Jupiter Broadcasting Affiliate Extensions for Chrome and Firefox

Show Notes:

ACT ONE:

ACT TWO: THE SUPER STORM

ACT THREE: FEEDBACK

Follow the Team:

Call us: 1.425.312.1756

The post Super Spin Sandy | Unfilter 24 first appeared on Jupiter Broadcasting.

]]>
/var/water/logged | TechSNAP 82 https://original.jupiterbroadcasting.net/26841/varwaterlogged-techsnap-82/ Thu, 01 Nov 2012 16:37:44 +0000 https://original.jupiterbroadcasting.net/?p=26841 An inside look at how hard some Sysadmins had to work to keep their servers running after being hit by Superstorm Sandy!

The post /var/water/logged | TechSNAP 82 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

An inside look at how hard some Sysadmins had to work to keep their servers running after being hit by Superstorm Sandy!

Plus the final analysis of the Diginotar saga, an epic network debugging war story that will leave you groaning and a huge batch of your questions, and so much more!

Thanks to:

Use our codes TechSNAP10 to save 10% at checkout, or TechSNAP20 to save 20% on hosting!

BONOUS ROUND PROMO:

Get your .COMs just $5.99 per year up to 3 domains! Additional .COMs just $7.99 per year!
CODE: 599tech

SPECIAL OFFER! Save 20% off your order!
Code: go20off5

Pick your code and save:
techsnap7: $7.49 .com
techsnap10: 10% off
techsnap11: $1.99 hosting for the first 3 months
techsnap20: 20% off 1, 2, 3 year hosting plans
techsnap40: $10 off $40
techsnap25: 25% off new Virtual DataCenter plans
techsnapx: 20% off .xxx domains

 

Direct Download:

HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | HD Torrent | Mobile Torrent

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feeds | Torrent Feed

 

Support the Show:

   

Show Notes:

Get TechSNAP on your Android:

Browser Affiliate Extension:

  • Jupiter Broadcasting Affiliate Extensions for Chrome and Firefox
  • Hurricane Sandy creates havoc for data centers in New York and New Jersey

    • A number of data centers in and around New York and New Jersey suffered various failures and issues
    • ConEd the utility provider in New York started proactively shutting down power before the storm hit, in an effort to avoid damage to their equipment
    • Most data centers had already pro-actively switched to off-grid mode, providing their own power via Diesel Generators
    • What happens when salt water meets high voltage gear
    • Slashdot created a status page, showing the known issues
    • WebHostTalk thread where various customers report the status of their gear
    • More reporting from the Web Hosting Industry Review
    • Equinix reports on their situation
    • Oct 29th: Datagram goes down, takes out Gawker, HuffingtonPost, BuzzFeed and others
    • Oct 29th: Internap announces they are evacuating the 75 Broad Street building
    • “The flooding has submerged and destroyed the site’s diesel pumps and is preventing fuel from being pumped to the generators on the mezzanine level. The available fuel reserves on the mezzanine level are estimated to support customer loads for approximately 5–7 hours”
    • It appears that NY building codes prevent storing large amounts of fuel on the upper floors due to the danger to occupants and emergency personnel in the event of a fire
    • Generators are located in the basement with the fuel supply, and some customers have their own generators on the upper floors
    • The above ground generators and fueled from small ‘day tanks’, that are then refueled from the sub-basement by pumps
    • The pumps must be located near the fuel supply, rather than on the upper levels, because the pumps would not be able to ‘prime’ themselves (pumps need liquid to pump, they cannot create enough vacuum to draw the fuel up many floors)
    • Due to the flooding cutting off fuel supplies and drowning generators, some data centers that did manage to stay powered up, lost some or all of their transit to the internet, because the other buildings that their connections go through, or their providers lost power
    • Peer1, in the same building (75 Broad Street) is on the 17th floor, provided customers hourly updates via their forums
    • Peer1 staff and customers 2 took to carrying barrels of diesel fuel up to the 17th floor to keep the day tanks full
    • Oct 29, 17:40 – Sites 1 and 2 transitioned to generator power
    • 20:36 – Still on generator. Building reports that the lobby has taken in some water
    • 22:27 – Building has detected some flooding in the 1st and 2nd basement due to the storm surge. Extent of the damage will not be determined until the basement is accessible. The fuel system has a header with 5000 gallons of fuel and will be the primary supply for the next 12–24 hours. They are also observing some lowering of the water level outside the building.
      • Oct 30, 03:30 – We are still running from emergency generator power. Water has receded and we are currently waiting for a report back from building engineers on the status of the fuel and power systems that were located in the basement. We will post further updates when we have them
      • 08:00 – At this point we have an estimate of 4 hours for the fuel left on our generators. Our techs and facility are continuously working to get emergency fuel delivery on time and was looking to set-up a temporary tank and pump since the basement is still flooded. In the event of not receiving the fuel on time, worst case scenario is we will have to gracefully shutdown the facility.
      • 16:00 – the PEER 1 Hosting NYC datacenter remains on generator power with fuel being provided through the remaining building supply. The fuel tank has arrived at our facility and due to flooding conditions in the basement caused by the weather, we are working on alternative methods of fuel delivery to the day tank located on the 17th floor. As of now, our datacenter team is carrying half-full 50 gallon barrels of diesel to our daily fuel reservoir on the 17th floor, until a more sustainable solution is reached.
      • Oct 31, 00:00 – Peer1 is still maintaining generator power. We did have slight temperature rise at Site 1 but this has been addressed by technicians. We will provide our next update in 1 hour
      • 04:00 – Peer1 is still maintaining generator power for most customers in Site 2 and Site 1. the temperature in Site 1 is still running at critically high level. At this point, We have started to call all clients in our site 1 and are asking all our colocation clients to turn down non essential equipment. This will maximize our time to run on Generator and help with the temperature rise in site 1. Our technicians will go ahead and shutdown all customers at Site 1 within the next hour (You will receive an update when this is being performed). We will provide our next update in 1 hour.
      • 08:00 – completed shutdown of customer equipment in Site 1
      • 10:00 – The A/C in site 1 is powered off building generators that are still down. If we bring site 1 back up before the building generators are back up site 1 will just overheat . we are working to try and find another work around, but we are having trouble getting electricians on site and are also working with the building to get their generator up and running. Additional spare fuel is still being manually put into our generator.We have also schedule a fuel drop off for the next fueling marker. We will provide our next update in 1 hour.
      • 15:00 – Peer1 is still maintaining generator power for customers in Site 2 . The temperature in Site 1 is starting to stabilize but we are still not bringing up the power due to our cooling system still down in site 1. The electrician is currently moving electrical circuits to get a portion of the CRAC units in site 1 online. We will contact those customers directly once we have these units online. Fuel is still good, we will provide our next update in 1 hour.
      • 23:00 – Peer1 is still maintaining generator power for customers in Site 2. The temperature in Site 1 is has stabilize. We will soon begin the process of slowly bringing up customer’s cabinets at Site 1. Fuel is still good, we will provide our next update in 1 hour.
      • Nov 1, 13:00 – Peer1 is still maintaining generator power. We have an update from the building. We are providing them a fuel hose that will allow them to start filling the building fuel tank in the next hour. We are continuing to run from our generator.
    • 16:00 – Peer1 is still maintaining generator power. Building is currently pumping fuel into the 5000 gallon header tank. We are looking at cutting over to the 5000 gallon header tank in ~90 minutes
    • Additional Story
    • NY Times live updates on Sandy’s Aftermath

    70% of State chief information security officers report breaches this year

    • Between 2010 and 2011 only 14% of CISOs saw a budget increase, while 44% say their budgets didn’t change and 34% saw their budgets reduced
    • Only 24% of CISOs are confidence that they can safeguard their data from outside attacks
    • Report PDF

    DigiNotar report lands, all CAs totally compromised

    • The attacker who compromised the SSL CA DigiNotar last year, had full control over all 8 of their certificate issuing servers
    • The report suggests that the attacker may have issued additional rouge certificates that were never identified
    • This risk was mitigated somewhat by most vendors revoking all trust in DigiNotar issued certificates, but customers who did not receive the root trust update could still be vulnerable
    • The company investigating the compromise found that the log files were generally stored on the same servers that had been compromised and evidence was found that they had been tampered with
    • “While these log files could be used to make inconclusive observations regarding unauthorized actions that took place, the absence of suspicious entries could not be used to conclude that no unauthorized actions took place”
    • Investigators also found evidence that a claim by the anonymous attacker who compromised the Comodo CA, that he was also the one who breached DigiNotar, may infact be true
    • The DigiNotar network was highly segmented and a number of the segments were isolated from the public Internet. However, a lack of strict enforcement of these policies may have allowed the attacker to island hop from compromised web server to the CA servers
    • "The investigation showed that web servers in DigiNotar’s external Demilitarized Zone (DMZ-ext-net) were the first point of entry for the intruder on June 17, 2011”
    • "From the web servers in DMZ-ext-net, the intruder first compromised systems in the Office-net network segment between the 17th and 29th of June 2011”
    • “Subsequently, the Secure-net network segment that contained the CA servers was compromised on July 1, 2011”
    • “Specialized tools were recovered on systems in these segments, which were used to create tunnels that allowed the intruder to make an Internet connection to DigiNotar’s systems that were not directly connected to the Internet. The intruder was able to tunnel Remote Desktop Protocol connections in this way, which provided a graphical user interface on the compromised systems, including the compromised CA servers."”
    • The attack on DigiNotar lasted for almost six weeks, without being detected
    • “The private keys were activated in the netHSM using smartcards. No records could be provided by DigiNotar regarding if and when smartcards were used to activate private keys, except that the smartcard for the Certificate Authorities managed on the CCV-CA server, which is used to issue certificates used for electronic payment in the retail business, had reportedly been in a vault for the entire intrusion period”
    • Original Article, in Dutch
    • Full Report PDF

    Feedback

    Followup:

    Warstory The little ssh that sometimes couldn’t

    • Mina Naguib is a sysadmin and director of engineering at Adgear
    • Noticed that some of his SSH cronjobs started reporting failures and timeouts between his servers in London (UK) and Montreal (CA)
    • He found that the transfers either completed at high speed, or hung and never completed (there we no transfers that succeeded at low speed)
    • Running the transfers manually seemed to work fine
    • After examining packets with TCPDump as they left in London, he found that some packets were being transmitted, not acknowledged, and then retransmitted, still not acknowledged
    • While examining the packets are they were received in Montreal, he noticed a difference
    • The 15th byte of every 16 bytes was being predictably corrupted
    • In the SSH handshake, instances of “h” became “x”, all instances of “c” became “s”, but only beyond the first 576 bytes
    • The SSH sessions were getting stuck, because the remote server’s kernel was discarding the TCP packet because it was corrupted, the retransmit was corrupted the same way, and so the connection was in a stalemate
    • He rules out an issue with the NICs in the servers on either side, because the issue was affecting multiple servers, and two different Montreal data centers
    • To prove his hypothesis, he used netcat, and piped /dev/zero over the network, and while examining the packets as they were received on the other side, beyond the first 576 bytes, a specific bit was being transformed from a 0 to a 1
    • The issue did not affect UDP or ICMP packets, only TCP
    • Now, the task was to pinpoint which router along the path was causing the issue
    • This was more difficult because unlike an ICMP ECHO where you can evoke a predictable response from a remote host, for TCP you require both endpoints to cooperate
    • So, he grabbed nmap, and used it’s ‘Random IP’ mode to find a collection of SSH servers, some that did, and some that did not, share hops in common with the affected route between London and Montreal
    • He created a list of servers that did not experience corruption, and those that did, and used traceroutes to identify the paths the packets took
    • Note: some internet paths are asymmetrical, and a standard traceroute will not find the return path, this could have made this problem much harder to diagnose
    • After finding 16 bad, and 25 good SSH connections, he was able to narrow his list of suspects down to a specific connection between 2 backbone providers
    • London → N hops upstream1 → Y hops upstream2
    • “Through upstream1, I got confirmation that the hop I pointed out (first in upstream2) had an internal “management module failure” which affected BGP and routing between two internal networks. It’s still down (they’ve routed around it) until they receive a replacement for the faulty module.”
    • The upstreams involved appear to have been GBLX and Level3

    Round Up:

    The post /var/water/logged | TechSNAP 82 first appeared on Jupiter Broadcasting.

    ]]>