Show Notes: selfhosted.show/73

The post 100 Days of HomeLab | Self-Hosted 73 first appeared on Jupiter Broadcasting.

In special Raspberry Pi 3 edition of the show we look at the new hardware, review & chat with Mycroft CTO Ryan Sipes on how important the Raspberry Pi is for development of their open artificial intelligence platform & get the latest news.

Plus replacing Spotify on Linux, the new Microsoft lock-in, our hosts face a moral quandary & more!

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | OGG Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

— Show Notes: —

Brought to you by: Linux Academy

The headlining feature of the Pi 3 is the built-in WiFi and Bluetooth, but it doesn’t stop there. Here’s the complete specs for the Pi 3:

• SoC: Broadcom BCM2837 (roughly 50% faster than the Pi 2)
• CPU: 1.2 GHZ quad-core ARM Cortex A53 (ARMv8 Instruction Set)
• GPU: Broadcom VideoCore IV @ 400 MHz
• Memory: 1 GB LPDDR2-900 SDRAM
• USB ports: 4
• Network: 10/100 MBPS Ethernet, 802.11n Wireless LAN, Bluetooth 4.0
• MagPi 43

Lots of Raspberry Pi Accessories

Raspberry Pi 3 Is Looking Towards Upstream Kernel Support

Today on his blog Anholt wrote, “I spent most of [the month] working on the Raspberry Pi 3 support so I could have a working branch for upstream day 1. That involved cleaning up the SDHOST driver for submission, cleaning up pinctrl DT, writing an I2C GPIO expander driver, debugging the I2C controller, fixing HDMI hotplug handling, debugging EMMC (not quite done!), scraping together some wireless firmware, and a bunch of work trying to get BT working on the UART. I’m happy to say that on day 1 I published a branch that worked the same as a RPi2, and by the end of the day I had wireless working. Some of the patches are now out for review, and I’ll be working on cleaning up the rest in the near future.”

New Generations of Products Powered by Pi

• The Raspberry Pi 3 Is Here! – Mycroft

We are testing Mycroft with the Pi 3 and if all goes as planned we will be shipping our backers Mycroft units with a Raspberry Pi 3 at its core. We’d like to thank the Raspberry Pi foundation for all of the work they do to bring makers, hackers and students such a great platform.

Ryan Sipes Mycroft CTO

• Mycroft
• Mycroft: An Open Source Artificial Intelligence For Everyone by Joshua Montgomery — Kickstarter
• Slice : A media player and more by FiveNinjas — Kickstarter
• Meet OTTO – The Hackable GIF Camera by Next Thing Co. — Kickstarter

Ubuntu MATE for the Raspberry Pi 2 and Raspberry Pi 3

We have done what we can to optimise the build for the Raspberry Pi 2
and Raspberry Pi 3, you can comfortably use applications such as
LibreOffice, which in fact is a joy to use But the microSDHC I/O
throughput is a bottleneck so we recommend that you use a Class 6 or
Class 10 microSDHC card.

Other 64bit Kits of Awesome

The Odroid-C2 already has 2GB of RAM, which is also available on the $29 “Plus” version of Pine64’s Pine A64, a quad-core, Cortex-A53 Allwinner A64 SBC with a 40-pin Pi-compatible connector. The PineA64 will soon start shipping to Kickstarter backers, and Pine64 is processing new orders for shipment starting in May.

The $15 version of the Pine A64 with 512MB RAM is sold out, but there’s also a $19 version with 1GB RAM that also moves up to Gigabit Ethernet. As with the Odroid-C2, wireless is an extra-cost option, and despite the Pine A64’s larger dimensions, even the top models are limited to dual USB host ports instead of four on the C2 and Raspberry Pi.

The only other 64-bit ARM hacker boards currently shipping are more expensive 96Boards-compatible SBCs, both of which have onboard wireless. These include Qualcomm’s quad-core, $75 DragonBoard 410c and the octa-core, $99 to $129 HiKey.

RPi Laptop Dock

NexDock is a revolutionary laptop that harnesses the productivity of smartphones, tablets and mini PCs by adding a bluetooth keyboard, a capable battery and a 14-inch screen

Imagine a computer that one day you can use as Chromebook, and the next day as an Ubuntu developer laptop. Imagine a longer lasting computer that you can easily upgrade and customize to become a powerful Windows gamer laptop.
We envision a world where we carry only our mini PCs, which connect to any screen in the world to turn them into tablets, laptops and PCs.

— PICKS —

Runs Linux

• Indian Driverless car RUNS LINUX

Long Time Jupiter Broadcasting fan here from India. I was reading an article about a Driver-less car made ingeniously by a team of 5 here in India. The article mentioned how this automatic driving system was much cheaper and simpler to implement on any car in production.

Linux love from India.
Regards,
Jayant M.

Desktop App Pick

• Google Play Music Desktop Player
• Media Keys support (Play, Pause, Stop, Previous, Next)
• Last.FM Scrobbling and Now Playing support!
• Desktop notifications on track change
• A simplistic mini player
• Customizable Dark theme
• Task bar media controls (media controls embedded into the taskbar) Windows only
• HTML5 Audio Support – No more Adobe Flash Player
• Built in audio equalizer – Make it sounds how you like it
• Background music playing, minimize to the task bar
• Customizable hotkeys, no worries if you don’t have media keys. Choose your own shortcuts
• Choose your audio output device from within the player
• Interface for external applications such as Rainmeter
• GitHub – MarshallOfSound/Google-Play-Music-Desktop-Player-UNOFFICIAL
• Upload music – Google Play Music

Weekly Spotlight

• VideoLAN – VLMC, open source video editor

VideoLAN Movie Creator is a non-linear editing software for video creation based on libVLC and running on Windows, Linux and Mac OS X! It is free software distributed under the terms of the GPLv2.

— NEWS —

DROWN Attack

DROWN is a serious vulnerability that affects HTTPS and
other services that rely on SSL and TLS, some of the essential
cryptographic protocols for Internet security. These protocols
allow everyone on the Internet to browse the web, use email,
shop online, and send instant messages without third-parties
being able to read the communication.

• Fedora’s not DROWNing

Spotify for Linux Sucks, But At Least We Now Know Why

In a post to the Spotify community forum,company rep ‘Jooon’ reveals that: “…since after September, we have had no developers working on the linux client”.

Microsoft wants to monopolise games development on PC. We must fight it

In my view, this is the most aggressive move Microsoft has ever made. While the company has been convicted of violating antitrust law in the past, its wrongful actions were limited to fights with specific competitors and contracts with certain PC manufacturers.

T-Platforms launches a Linux-based, MIPS-powered all-in-one PC (in Russia)

Most modern desktop and notebook computers ship with Intel or AMD processors and Windows or OS X software. A few companies are positioning products with ARM-based chips as desktop computers. But the Tavolga Terminal TB-T22BT is something different.

The computer is made by Russian company T-Platforms, which also offers an SF-BT1 processor module for those that want to build their own hardware.

Both devices use a Baikal-T1 processor which is a 32-bit dual-core MIPS P5600 processor. Like the computers, the chip was designed in Russia, although it’s based on work from Imagination Technologies (the company behind the MIPS architecture)

Thunderbolt Comes to Linux

Already compatible with Windows PCs and Macs, the super-fast Thunderbolt 3 connector technology will soon also work with Linux PCs. The technology will be featured in a new model of Dell’s upcoming XPS 13 Developer Edition, which will have Ubuntu Linux. Thunderbolt 3 will be available via a USB Type-C port.

The PC maker is building driver support for Thunderbolt 3 and USB Type-C into the XPS 13 Developer Edition, wrote a Dell employee in a company forum.

Thunderbolt 3 is a connector technology that can hook up PCs to external peripherals like storage and monitors. It’s like USB, but four times faster. A 4K movie could be transferred from an external storage device to a PC in 30 seconds.

Linux PCs will be a lot more capable with Thunderbolt 3. Users will be able to connect two 4K monitors simultaneously, connect to external graphics cards and establish a peer-to-peer network with other Linux PCs.

Feedback:

Brought to you by: System76

Mail Bag

• https://slexy.org/view/s217DbCjqY
• https://slexy.org/view/s2x1S8bUGT
• https://slexy.org/view/s20bQgbbRH

Emma v. Noah Who: Switching People to Linux

• Can not already be running Linux.
• Must agree to install Linux, or have Linux installed
• Will take place Sat during Linux Fest NW (Location TBD)
• Come find Noah let him switch you to Linux and get a free SSD installed.

Call Box

• Chris’ call out for the community to help him with his background for the Linux Action Show

Catch the show LIVE SUNDAY:

• Noon Pacific
• https://jblive.tv
• Network Calendar

— CHRIS’ STASH —

Chris’s Twitter account has changed, you’ll need to follow!

Chris Fisher (@ChrisLAS) | Twitter

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— NOAH’S STASH —

Noah’s Day Job

Altispeed Technologies

Contact Noah

noah [at] jupiterbroadcasting.com

Find us on Google+

• Chris
• Noah J. Chelliah
• Jupiter Broadcasting’s Page

Find us on Twitter

• Chris – ChrisLAS
• Noah – Kernellinux

Follow us on Facebook

• Jupiter Broadcasting on Facebook
• Noah – Kernellinux

The post 3rd Slice of Pi with Extra Mycroft | LAS 407 first appeared on Jupiter Broadcasting.

A distribution of Linux built to survey and track speech, we go into the surveillance marvel that is Red Star OS. Solus hits 1.0 & we bring on some of the team to tell us all about it.

Plus Mozilla has a new… Distraction? We debate their merits of rumored new Firefox OS powered hardware.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

Become a supporter on Patreon:

Show Notes:

Pre-Show:

• Pirate Bay co-founder builds device that costs the music industry $10,000,000 a day

The ‘Kopimashin’, seen in the video below makes 100 copies of the Gnarls Barkley song ‘Crazy’ and sends them all to /dev/null — a technical term meaning the files are deleted as soon as they are saved.

Follow Up / Catch Up

Solus 1.0 Released

The Solus Project is proud to announce the release of the first version of its operating system, Solus, on 27th of December, 2015. Solus 1.0 is codenamed Shannon after the longest river in Ireland.

Solus 1.0 is the result of over eight months of work, coalesced from over a dozen contributors, over 2000 package builds, a rewrite of the premier desktop environment Budgie, and more.

20151224-gnupg-in-november-and-december

Unfortunately, although Facebook initially announced that they would provide USD50,000 of support per year, they have since rescinded.

DigitalOcean

• DigitalOcean: SSD Cloud Server, VPS Server, Simple Cloud Hosting

How Red Star OS Spies on Users

• North Korea’s indigenous computer operating system reflects Kim Jong-un’s authority

Two German researchers — Florian Grunow and Niklaus Schiess — pulled apart the North Korean operating system, which closely resembles Apple’s Mac OS X, during a presentation at Chaos Communication in Hamburg.

• North Korea’s Linux-based Red Star OS is as oppressive as you’d expect

A pair of German researchers have just given the code a once over — and as you’d expect, it’s locked down and oppressive, and worse than just a weaker version of other Linux distros. It’s geared toward enabling and maintaining a total surveillance state, all while giving the illusion of technological progress to its citizens.

Linux Academy

• Linux Academy | Linux and AWS Online Training

Exclusive: Mozilla working on a tablet a stickTV, an intelligent keyboard and a router

We mentioned earlier that Mozilla’s Firefox os isn’t dead. Mozilla has some great plans for firefox os. These internal documents obtained by Hypertext shows the future of Mozilla Firefox preparing detailed OS beyond smartphones and include Panasonic TVs & these documents detail the new plans of Mozilla.

TING

• Ting – mobile that makes sense

Looking into 2016

• Semi-Official SCaLE 14x Jupiter Broadcasting thread

Support Jupiter Broadcasting on Patreon

The post Slaving for Red Star OS | LINUX Unplugged 125 first appeared on Jupiter Broadcasting.

FOSDEM just wrapped up, where thousands of developers & enthusiasts of free & open source software gather to talk all things Linux.

Plus we drool over the new Raspberry Pi 2 & ask if B+ buyers got a little screwed.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

Become a supporter on Patreon:

Show Notes:

FU:

• I’m from Vivaldi and want to talk.

• Heavy adblock

• A pointer to the Linux Equivalent of

• Your help is needed coming up with a list of the best Gnome Tweaks and Extensions

• which aur helper do you guys use?

FOSDEM 2015

Every year, thousands of developers of free and open source software from all over the world gather at the event in Brussels.

• What’s New in systemd, 2015 Edition

systemd is now a core component of most major distributions. In this talk I want to give an overview over everything new in the systemd project over the last year, and what to expect over the next year.

• How does systemd relate to Plasma? | David Edmundson’s Web Log

Hopefully it clears up what we mean when we talk about systemd and desktop environments, and where we could use different parts of systemd.

It should be apparent that as developers there are parts we want to embrace as it. In many cases it allows us to throw away large amounts of code whilst at the same time providing a better user experience. Adding it as an optional extra defeats the main benefit.

• daniel.haxx.se » Http2 right now

• Daniel Stenberg (@bagder) | Twitter

• FOSDEM 2015 – Living on Mars: A Beginner’s Guide

Raspberry Pi 2 on sale now at $35 | Raspberry Pi

Let’s get the good stuff out of the way above the fold. Raspberry Pi 2 is now on sale for $35 (the same price as the existing Model B+), featuring:

• A 900MHz quad-core ARM Cortex-A7 CPU (~6x performance)
• 1GB LPDDR2 SDRAM (2x memory)
• Complete compatibility with Raspberry Pi 1

Because it has an ARMv7 processor, it can run the full range of ARM GNU/Linux distributions, including Snappy Ubuntu Core, as well as Microsoft Windows 10.

• Turbocharged quad-core Raspberry Pi 2 unleashed, global geekgasm likely • The Register

Speaking to The Register last week, foundation head honcho Eben Upton said: “I think it’s a usable PC now. It was always the case that you could use a Raspberry Pi 1 as a PC but you had to say ‘this is a great PC in so far as it cost me 35 bucks’. We’ve removed the caveat that you had to be a bit forgiving with it. Now it’s just good.”

Runs Linux from the people:

• Send in a pic/video of your runs Linux.
• Please upload videos to YouTube and submit a link via email or the subreddit.

New Shows : Tech Talk Today (Mon – Thur)

• Tech Talk Today Today | Jupiter Broadcasting

Support Jupiter Broadcasting on Patreon

Post-Show

• Ubuntu Phone Desktop Tablet – YouTube

The post Straight Outta FOSDEM | LINUX Unplugged 78 first appeared on Jupiter Broadcasting.

Mike is stuck in a train, stuck in the snow. So it’s an open call edition, with some great discussion around Microsoft’s investment in Cyanogen & the pitch for Python.

Plus a robust chat about the new Raspberry Pi 2 & it’s ability to run Windows 10.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

Show Notes:

Feedback

• Appreciating Ruby

• The math of coding

• Is Perl Obsolete?

• Wakatime – Analytics for Programmers

• WakaTime · Analytics for programmers

Analytics for Programmers. Open-source plugins for automatic time tracking & insights into your programming.

• Priyanka Sharma | Women’s Tech Radio 11

Hoopla

Microsoft to Invest in Rogue Android Startup Cyanogen – Digits – WSJ

People familiar with the matter say Microsoft is putting money into Cyanogen, which is building a version of the Android mobile-operating system outside of Google’s auspices.

Microsoft would be a minority investor in a roughly $70 million round of equity financing that values Cyanogen in the high hundreds of millions, one of the people said. The person said the financing round could grow with other strategic investors that have expressed interest in Cyanogen because they’re also eager to diminish Google’s control over Android. The identity of the other potential investors couldn’t be learned.

“We’re going to take Android away from Google,” said Kirt McMaster, Cyanogen’s chief executive, in a brief interview last week. The next day, at an industry event sponsored by tech news service The Information, McMaster said Cyanogen had raised $100 million to date. Previously the company had disclosed that it raised $30 million of funding. The company spokeswoman declined to make McMaster available for this story.

McMaster said more than 50 million people use a version of the Cyanogen Android operating system, most of whom have installed it in place of their phone’s initial operating system.

To spread adoption more quickly, Cyanogen is working on deals with hardware makers to install the software on their devices. It recently signed a deal with Indian smartphone maker Micromax to ship handsets with Cyanogen’s software and is close to announcing more such deals, say people familiar with the matter.

Raspberry Pi 2 on sale now at $35 | Raspberry Pi

Let’s get the good stuff out of the way above the fold. Raspberry Pi 2 is now on sale for $35 (the same price as the existing Model B+), featuring:

• A 900MHz quad-core ARM Cortex-A7 CPU (~6x performance)
• 1GB LPDDR2 SDRAM (2x memory)
• Complete compatibility with Raspberry Pi 1

Because it has an ARMv7 processor, it can run the full range of ARM GNU/Linux distributions, including Snappy Ubuntu Core, as well as Microsoft Windows 10.

For the last six months we’ve been working closely with Microsoft to bring the forthcoming Windows 10 to Raspberry Pi 2. Microsoft will have much more to share over the coming months. The Raspberry Pi 2-compatible version of Windows 10 will be available free of charge to makers.

Visit WindowsOnDevices.com today to join the Windows Developer Program for IoT and receive updates as they become available.

• Snappy Ubuntu Core on Raspberry Pi 2 | Ubuntu Insights

Free the Future of a Radical Price Book Pick

• FREE: The Future of a Radical Price Audiobook

The post Windows in the Pi | CR 139 first appeared on Jupiter Broadcasting.

Some of the best tools to save and recover data from a failing drive are free, and built for Linux. We’ll demo some of the best tools to save your data, and make the best of a bad situation. Plus a few tips to prevent data loss and monitor the health of your drives.

PLUS: Setting up a Honeypot for security and fun, things to keep in mind, and using a Raspberry Pi as the Honeypot.

Then: A big batch of your emails, dev drama of the week, Ubuntu Forums is hacked…

AND SO MUCH MORE!

All this week on, The Linux Action Show!

Thanks to:

GoDaddy.com Use our code linux249 to score .COM for just $2.49! Free Private Registration with your .COM just use our code free3 until the end of the month!
Ting.com Visit las.ting.com to save $25 off your device or service credits.

Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | Ogg Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Feed | Ogg Feed | iTunes Feeds | Torrent Feed

Support the Show:

— Show Notes: —

Save Your Data From a Dying Drive with Linux:

Brought to you by: System76

• GSmartControl – Home / News

GSmartControl is a graphical user interface for smartctl (from smartmontools package), which is a tool for querying and controlling SMART (Self-Monitoring, Analysis, and Reporting Technology) data on modern hard disk drives. It allows you to inspect the drive’s SMART data to determine its health, as well as run various tests on it.

• Ddrescue

GNU ddrescue is a data recovery tool. It copies data from one file or block device (hard disc, cdrom, etc) to another, trying hard to rescue data in case of read errors.

• Recover a data disk with ddrescue

Basic Syntax

ddrescue /dev/disk /mnt/tuna/partimg/mydisk.img logfile
Be sure to write the image to a separate disk/storage location.

Mount the Image

mount -t loop -o ro mydisk.img /somewhere

• dc3dd | Free software downloads at SourceForge.net

• Dc3dd – Forensics Wiki

Comparison to GNU dd

The following features are available in dc3dd that are not found in GNU dd:

• On the fly hashing with multiple algorithms (MD5, SHA–1, SHA–256, and SHA–512) with variable sized piecewise hashing
• Able to write errors directly to a file
• Combined error log. Groups errors together (e.g. Had 1,023 ‘Input/ouput errors’ between blocks 17–233’ )
• Pattern wiping. Wipe output files with a single hex digit or a text pattern
• Verify mode
• Progress reports. See the progress of the operation while it’s running
• Split output. Able to split output files into fixed size chunks

The following changes to GNU dd’s behavior were made:

• On a partial read, the whole block is wiped with zeros. This allows for repeatable reads/hashes of a drive with errors.

• A Geek’s Guide to Digital Forensics – YouTube

“A Geek’s Guide to Digital Forensics, or How i Learned to Stop Worrying and Love the Hex Editor”
Presented by Andrew Hoog.

Boot a Failing System

• SystemRescueCd

Description: SystemRescueCd is a Linux system rescue disk available as a bootable CD-ROM or USB stick for administrating or repairing your system and data after a crash. It aims to provide an easy way to carry out admin tasks on your computer, such as creating and editing the hard disk partitions. It comes with a lot of linux software such as system tools (parted, partimage, fstools, …) and basic tools (editors, midnight commander, network tools). It can be used for both Linux and windows computers, and on desktops as well as servers. This rescue system requires no installation as it can be booted from a CD/DVD drive or USB stick, but it can be installed on the hard disk if you wish. The kernel supports all important file systems (ext2/ext3/ext4, reiserfs, btrfs, xfs, jfs, vfat, ntfs), as well as network filesystems (samba and nfs).

• Tuxboot – About

Tuxboot helps you to create a bootable Live USB drive for Clonezilla live, DRBL live, GParted live and Tux2live. It is modified from UNetbootin and runs on both MS Windows and GNU/Linux. You can choose to download the latest version of Clonezilla live, DRBL live, or GParted live ISO/zip file then create the live USB.

Features:

• Support Clonezilla live, DRBL live, GParted live and Tux2live. Tuxboot uses the syslinux in the ISO/zip file to make your USB drive bootable, so it is compatible with the same version of syslinux boot menu in the ISO/zip file.
• Auto find the latest version.
• Download an ISO file and build bootable USB flash drive on the fly.

• OSFClone – Open source utility to create and clone forensic disk images

OSFClone is a free, self-booting solution which enables you to create or clone exact raw disk images quickly and independent of the installed operating system. In addition to raw disk images, OSFClone also supports imaging drives to the open Advance Forensics Format (AFF).

---

– Picks –

Runs Linux:

• Modern Society, Runs Linux

– Linux Foundation Executive Director Jim Zemlin

Android Pick:

• BitTorrent® Sync

Desktop App Pick:

• iftop: display bandwidth usage on an interface

• Bonus Pick: Gateways

– From viewer David

• Picks so far
• Madjo

Search our past picks:

• LASAppPicks

Git yours hands all over our STUFF:

• Jupiter Broadcasting Affiliate Extensions
• Callisto-app – Google Project Hosting
• Quick Update to the Jupiter Broadcasting Android App

---

— NEWS —

• Angry Linus is BACK!

• Kernel developer Sarah Sharp tells Linus Torvalds to stop using abusive language

• Linus Torvalds defends his right to shame Linux kernel developers

• Linux 3.11 Officially Named “Linux For Workgroups”

• Linus Torvalds Calls For More Linux Kernel Patches

• Interview: Ubuntu/Canonical founder | Mobile World Live

• The Ubuntu Edge Phone?

• Ubuntu forums hacked; 1.82M logins, email addresses stolen

• ubuntuforums.org hacked

• screenshot: https://i.imgur.com/15u3X7V.png

  — /etc: Protect Your Network with a Honeypot —

Brought to you by: Untangle

• HoneyDrive honeypot bundle distro

HoneyDrive is a virtual appliance (OVA) with Xubuntu Desktop 12.04 32-bit edition installed. It contains various honeypot software packages such as Kippo SSH honeypot, Dionaea malware honeypot, Honeyd low-interaction honeypot, Glastopf web honeypot along with Wordpot, Thug honeyclient and more. Additionally it includes useful pre-configured scripts and utilities to analyze, visualize and process the data it can capture, such as Kippo-Graph, Honeyd-Viz, and much more. Lastly, many other helpful security, forensics and malware related tools are also present in the distribution.

• HoneyDrive – Readme Has the Deets

• K6RTM Kippo Honeypot

I installed a Kippo honeypot on a Raspberry Pi to log attacks against a specific service,

• Glastopf Pi: A Simple Yet Cool Web Honeypot for your Raspberry Pi

– Feedback: –

• Hard Drives For Jupiter: Amazon.com: Hard Drives for Jupiter Whishlist

• Android x86 -An Interesting Use Case

• Sucess with Bittorrent Sync

• Switching back to POP3!

• CentOS vs Oracle Linux(OEL)

• ReactOS Review

• Send a Bitmessage to LAS:

BM-GuJRSMgViBNXnafzuRQL3tpHHFSJQ5Wm

— Chris’ Stash —

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— What’s Matt Doin? —

• Ubuntu vs. Debian
• Writing about Linux, sometimes, even asking tough questions
• Hell froze over, Matt’s on Facebook

— Find us on Google+ —

• Chris
• Matt Hartley
• Jupiter Broadcasting’s Page

— Find us on Twitter —

• Chris – ChrisLAS
• Matt – matthartley

— Follow the network on Facebook: —

• Jupiter Broadcasting on Facebook

— Catch the show LIVE Sunday 10am Pacific / 1pm Eastern / 6pm UTC: —

• https://jblive.tv
• Network Calendar

The post Linux Drive Recovery | LAS s27e10 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/39177/whats-in-your-cache-techsnap-115/ Thu, 20 Jun 2013 16:31:02 +0000 https://original.jupiterbroadcasting.net/?p=39177 New research reveals your browser cache contains a lot more than you might expect, and we’ve got the details on some security issues WordPress doesn’t have a fix for...

The post What’s in Your Cache | TechSNAP 115 first appeared on Jupiter Broadcasting.

]]>

New research reveals your browser cache contains a lot more than you might expect, and we’ve got the details on some security issues WordPress doesn’t have a fix for…

Plus: We’ll answer your questions, chat about rolling your own email server, and much much more!

On this week’s TechSNAP

Thanks to:

GoDaddy.com Use our code tech249 to score .COM for $2.49! 35% off your ENTIRE first order just use our code 35off3 until the end of the month!
Ang Reports on her Android challange Catch episode 144 find out how things stand after her week on Android

Direct Download: HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | HD Torrent | Mobile Torrent RSS Feeds: HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feeds | Torrent Feed

 

Support the Show:

Purchase anything at Amazon.com Purchase anything at Think Geek using this link Purchase anything at Newegg using this link Contribute directly on our donation page or check out our advertising options and reach millions of amazing people! Grab our Chrome Extension and auto-tag your shopping session for us!

   

Show Notes:

Get TechSNAP on your Android:

• Callisto – Android App
• Jupiter Broadcasting – Android App by ShaneQful

Browser Affiliate Extension:

• Jupiter Broadcasting Affiliate Extensions for Chrome and Firefox

Researchers find that 21 financial sites store sensitive information in your cache

• Browsers used to never cache any content that was served over HTTPS
• The internet has changed significantly since then and many more sites use HTTPS for entire browsing sessions, including Google and Facebook
• Secure sites are supposed to send special headers instructing the browser which files not to cache, but it seems somes sites do not bother, and some send a non-standard header that only works with Internet Explorer
• Researchers from Independent Security Evaluators in Baltimore conducted a survey of a number of popular financial sites and found rather disappointing results
• “Non-technical users likely believe that if, after visiting a site and viewing personal data, they logout and close their browsers, that their data will be safe. Our findings prove this assumption incorrect in 70% of the cases tested.”
• ADP, Verizon Wireless, Scottrade, Geico, Equifax, PayPal and Allstate were among the websites that saved items such as prescription information, utility bills, check images and credit reports.
• All told 21 of 30 sites checked improperly stored sensitive data in the users’ local cache
• ISE identified 4 different ways to instruct Internet Explorer to not cache sensitive information, only one of which is actually an HTTP Standard
• The correct way to tell a browser to not store sensitive data is to send the header: “Cache-Control: no-store”
• Part of the problem may be that most Online Banking systems were designed in the early 2000s, when Internet Explorer had over 90% market share
• Researchers Report

---

Amazon vows to help you fight government requests for data stored on their cloud

• An Amazon executive said “If a U.S. entity is serving us with a legally binding subpoena, we contact our customer and work with that customer to fight the subpoena. We will do that proactively and help the customer in any way to comply with the subpoena or fight it.”
• Amazon also recommends that you encrypt all data stored in the cloud
• However, many such orders from US Agencies include a gag order, preventing Amazon from informing the customer that their data is being sought. If Amazon faced a subpoena that required it to keep the order secret, such encryption would be useful to customers. “If the data is encrypted, all we’d be handing over would be the ciphertext,”
• One of Amazon’s main rivals, RackSpace said: “Rackspace reviews any orders to determine that they are lawful and have been issued in accordance with the 4th amendment. We are prohibited from accessing and disclosing customer data stored on their servers or storage devices in our data centers without a properly issued, lawful request from a court with jurisdiction over both Rackspace and the data sought. In the event Rackspace receives a court order for customer data that does not adhere to the 4th amendment, Rackspace will oppose the order.”
• Amazon is also building a $600 million private cloud for the CIA, a contract protested by IBM

---

WordPress plugins still a security nightmare

• Security researchers at Checkmarx find that 12 of the top 50 wordpress plugins are susceptible to common attacks
• The researchers also found that 7 of the top 10 e-commerce plugins contained flaws
• Many popular plugins are susceptible to SQL injection, Cross-Site Script Injection (XSS), Cross-Site Request Forgery (CSRF), Remote/ Local File Inclusion (RFI/ LFI) and Path Traversal
• “First of all, Web admins think that if they are downloading these plug-ins from a reputable source, then there is an assumption that they are receiving a secure plug-in,”
• Checkmarx started their research in January, at which time 18 of the top 50 wordpress plugins were vulnerable. During a subsequent scan in June, every plugin tested had been updated but only 6 fixed all of the vulnerabilities
• The researchers recommend that you only download plugins from official sources, and that the official sources conduct more intense security scans on plugins before they are listed in the marketplace
• Research Paper

---

Feedback:

• Question on serial access on routers

• Windows LAN Mail Server?

• Raspberry Pi Router

• NSA Concernes from Germany

• TOR Proxy via a Jail or VM?

• VPS Breach

• Whats to become a excellent PenTester

• PCBSD moving forward with Rolling Release of 9-STABLE

TechSNAP Bitmessage: BM-GuGEaEtsqQjqgHRAfag5FW33Dy2KHUmZ

Round-Up:

• GCHQ intercepted foreign politicians’ communications at G20 summits
• LinkedIn Outage Due To Possible DNS Hijacking [Update: Fidelity.com Also Affected]
• Network Solutions takes credit for downing Linkedin and others
• Terrorists Live tweet during attack
• Playstation 4 Reportedly Running a Modified FreeBSD 9.0
• Project Loon – Google
• Former President of TigerDirect indicted for money laundering
• 9 reasons your syadmin hates you
• Stanford launches the Cookie Clearing House with Mozilla and Opera
• Bruce Schneier – Evidence that the NSA Is Storing Voice Content
• Richard Betjtlich (the Mandian APT report) on What businesses need to know
• MySQL Man page relicense was a bug, has been fixed

The post What’s in Your Cache | TechSNAP 115 first appeared on Jupiter Broadcasting.

]]>