Private – Jupiter Broadcasting

Weiner’s Explosive Leak | Unfilter 211

chris — Thu, 03 Nov 2016 00:29:43 +0000

RSS Feeds:

Become an Unfilter supporter on Patreon:

— Show Notes —

Links:

The post Weiner's Explosive Leak | Unfilter 211 first appeared on Jupiter Broadcasting.

The Edge of Privacy | TTT 231

chris — Tue, 02 Feb 2016 11:20:19 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Microsoft’s Edge browser is caught storing browsing history in private mode, Dutch police are training dinosaurs to capture flying drones, the Java plugin days are coming to an end & big phone rumors loom!

Plus our Kickstarter of the week & more!

Direct Download:

RSS Feeds:

Become a supporter on Patreon

Show Notes:

— Episode Links —

Kickstarter of the Week:

Stop Motion Magazine – 1 Year Subscription by Stop Motion Magazine

The post The Edge of Privacy | TTT 231 first appeared on Jupiter Broadcasting.

The Sound of Security | TechSNAP 142

chris — Thu, 26 Dec 2013 13:27:18 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Researches prove its possible to extract an RSA key from the noises your computer makes, the NSA foils the great BIOS plot, but we’re a little skeptical….

Then it’s a batch of your questions, our answers, and much much more!

Thanks to:

Direct Download:

RSS Feeds:

— Show Notes: —

RSA Key Extraction via Acoustic Cryptanalysis

Many computers emit a high-pitched noise during operation, due to vibration in some of their electronic components.
These acoustic emanations are more than a nuisance: they can convey information about the software running on the computer, and in particular leak sensitive information about security-related computations.
In the report they describe a new acoustic cryptanalysis key extraction attack, applicable to GnuPG\’s current implementation of RSA.
The attack can extract full 4096-bit RSA decryption keys from laptop computers (of various models), within an hour, using the sound generated by the computer during the decryption of some chosen ciphertexts.
Experimentally they demonstrate that such attacks can be carried out, using either a plain mobile phone placed next to the computer, or a more sensitive microphone placed 4 meters (13 feet) away.
A modern mobile phone placed next to the computer is sufficient to carry out the attack, but up to four meters have been successfully tested using specially designed microphones.
They have disclosed the attack to GnuPG developers under CVE-2013-4576, suggested suitable countermeasures, and worked with the developers to test them. New versions of GnuPG 1.x and of libgcrypt (which underlies GnuPG 2.x), containing these countermeasures and resisting our current key-extraction attack, were released concurrently with the first public posting of these results
PDF Report
Adi Shamir – Wikipedia
Inventor of SSSS (Shamir\’s secret-sharing scheme)
CVE – CVE-2013-4576

NSA Says It Foiled the BIOS Plot

Called a BIOS plot, the exploit would have ruined, or \”bricked,\” computers across the country, causing untold damage to the national and even global economy.
Debora Plunkett, director of cyber defense for the The National Security Agency described for the first time a cataclysmic cyber threat the NSA claims to have stopped On Sunday\’s \”60 Minutes.\”
CBS suggest China is to Blame, the NSA does not confirm or deny that in the interview.
CBS reported the “virus” would be delivered via a software update to every computer’s BIOS.
The NSA says it closed this vulnerability by working with computer manufacturers.
No further technical, or general details provided.
CBS Airs NSA Propaganda Informercial Masquerading As \’Hard Hitting\’ 60 Minutes Journalism By Reporter With Massive Conflict Of Interes
In the end, this appears to be the NSA stealing the plot from our book recommendation a few weeks ago. Mark Russinovich’s Zero Day – which is very much the same plot (Copyright March 2011), except the attackers were wealthy backers of Al Qaeda instead of the Chinese
In the sequel Trojan Horse , China uses APT techniques to compromise computers at the UN Office for Disarmament Affairs, and alter a report about Iran’s Nuclear Weapons Program to disrupt international attempts to prevent Iran from getting Nuclear Weapons. Look for this story on the news next year…

Krebs: The Case For a Global, Compulsory Bug Bounty

Security experts have long opined that one way to make software more secure is to hold software makers liable for vulnerabilities in their products
This idea is often dismissed as unrealistic and one that would stifle innovation in an industry that has been a major driver of commercial growth and productivity over the years. But a new study released this week presents perhaps the clearest economic case yet for compelling companies to pay for information about security vulnerabilities in their products
Stefan Frei, director of research at NSS Labs, suggests compelling companies to purchase all available vulnerabilities at above black-market prices.
The director of research for Austin, Texas-based NSS Labs examined all of the software vulnerabilities reported in 2012, and found that the top 10 software makers were responsible for more than 30 percent of all flaws fixed.
Even if vendors were required to pay $150,000 per bug, it would still come to less than two-tenths of one percent of these companies\’ annual revenue
To ensure that submitted bugs get addressed and not hijacked by regional interests, Frei also proposes building multi-tiered, multi-region vulnerability submission centers that would validate bugs and work with the vendor and researchers.
The questions is, would this result in a reduction in cybercrime overall, or would it simply hamper innovation? As one person quoted in the article points out, a majority of data breaches that cost companies tens of millions of dollars have far more to do with other factors unrelated to software flaws, such as social engineering, weak and stolen credentials, and sloppy server configurations.
The Case for a Compulsory Bug Bounty — Krebs on Security
How many Zero-Days hit you today?

Feedback:

Round Up:

The post The Sound of Security | TechSNAP 142 first appeared on Jupiter Broadcasting.

Profiting from Prisoners | Unfilter 4

chris — Fri, 08 Jun 2012 20:57:39 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We discuss the trend towards privatized prisons, how they make money, and dirty details they don\’t want you to know.

Then we unfilter the headlines, with an update on Stuxnet, some hard questions for the Chairman of the Federal Reserve, and using drones for police enforcement.

Plus an update on some stories from last week, and feedback!

Direct Download:

RSS Feeds:

Show Notes:

ACT ONE: Headlines

Confirmed: US and Israel created Stuxnet, lost control of it
Germany Readying Offensive Cyberwarfare Unit, Parliament Told
HP, Cisco, Sun Gear Surfaces Inside Iranian Mobile Operator
- There is no evidence indicating that any of these companies sold their products directly to Iranian companies. However, should these companies be allowed to sell their products directly to Iranian companies and anyone else they want to do business with?
- Or do you agree with “the UN Human rights council believes that American firms should be building clauses into their contracts with international customers that levy heavy fines if a customer redistributes or uses the products in a way that violates human rights.”
Sanders Questions Bernanke on Conflicts at the Fed
Canada No Pirate Nation: Global Leader In Music Download Sales
- Canada makes the U.S. piracy list, again in

Drone Headlines:

ACT TWO: Prison Industrial Complex

ACT THREE: Feedback

A follow up on last week\’s stories, stop the leaks!
First voicemail!

Unfilter on Reddit

Link List:

Song pick of the week: Prison Song by System of a Down

Mention:

Leave us a voicemail: +1.425.312.1756
Catch us LIVE Thursday’s 7pm PDT
Thanks to Ronald Jenkees for the awesome show music.
Want more? Check out The No Agenda Show

Follow the Team:
Chris on Twitter
Syracuse Innovators Guild
Chase on Twitter
Michael Vail\’s Website

The post Profiting from Prisoners | Unfilter 4 first appeared on Jupiter Broadcasting.

Battery Malware | TechSNAP 16

chris — Thu, 28 Jul 2011 22:52:47 +0000

Attackers take aim at Apple with an exploit that could brick your Macbook, or perhaps worse. Plus you need to patch against a 9 year old SSL flaw.

Plus find out about a Google bug that could wipe a site from their Index, and a excellent batch of your feedback!

All that and more, on this week’s TechSNAP!

Direct Download Links:

Subscribe via RSS and iTunes:

[ad#shownotes]

Show Notes:

iPhones vulnerable to 9 year old SSL sniffing attack

A nine year old bug discovered and disclosed by Moxie Marlinspike in 2002 allows attackers to decrypt intercepted SSL sessions. Moxie Marlinspike released a newer, easier to use version of the tool on monday, to coincide with Apple finally patching the flaw on iPhone and other iOS devices.
Any unpatched iOS device can have all of it’s SSL traffic trivially intercepted and decrypted
This means anyone with this new easy to use tool sitting near a wifi hotspot, can intercept encrypted login information (gmail, facebook), banking credentials, e-commerce transactions, or anything else people do from their phone.
The bug was in the way iOS interpreted the certificate chain. Apple failed to respect the ‘basicConstraint’ parameter, allowing an attacker to sign a certificate for any domain with an existing valid certificate, a condition normally prevented by the constraint.
There are no known flaws in SSL it self, in this case, the attacker could perform a man-in-the-middle attack, by feeding the improperly signed certificate to the iPhone which would have accepted it, and used the attackers key to encrypt the data.
Patch is out with a support doc and direct download links

Apple Notebook batteries vulnerable to firmware hack

After analyzing a battery firmware update that Apple pushed in 2009, researchers found that all patched batteries, and all batteries manufactured since, use the same password
With this password, it is possible to control the firmware on the battery
This means that an attacker can remotely brick your Macbook, or cause the battery to overheat and possibly even explode
The attacker can also falsify the data returned to the OS from the battery, causing odd system behaviour
The attacker could also completely replace the Apple firmware, with one designed to silently infect the machine with malware. Even if the malware is removed, the battery would be able to reinfect the machine, even after a complete OS wipe and reinstall.
Further research will be presented at this years Black Hat Security Conference
In the meantime, researchers have notified Apple of the vulnerability, and have created a utility that generates a completely random password for your Mac’s battery.
Additional Link

Facebook fixes glitch that let you see private video information

A glitch in facebook allowed you to see the thumbnail preview and description of private videos posted by other users, even when they were not shared with you.
It was not possible to view the actual videos

Google was quick to shutdown Webmaster Tools after vulnerability found

Using the google webmaster tools, users were able to remove websites that did not belong to them from the Google Index
By simply modifying the query string of a valid request to remove your own site from the google index, and changing one of the two references to the target url, you were able to remove an arbitrary site from the google index
The issue was resolved within 7 hours of being reported to Google
Google restored sites that were improperly removed from its index.

Researchers find vulnerablity in Skype

Inproper input validation and output sanitation allowed attackers to inject code into their skype profile
By entering html and java script in to the ‘mobile phone’ section of your profile, anyone who had you on their friends list would execute the injected code.
This vulnerability could have allowed attackers to high your session, steal your account, capture your payment data, and change your password

Feedback

Q: (Sargoreth) I downloaded eclipse, and I didn’t bother to verify the md5 hash they publish on the download page, how big a security risk is this?
A: Downloadable software often has an MD5 hash published along with the downloadable file, as a measure to allow you to ensure that the file you downloaded is valid. Checking the downloaded file against this hash can ensure that the file was not corrupted during transfer. However it is not a strong enough indicator that the file has not been tampered with. If the file was modified, the MD5 hash could just as easily have been updated along with it. In order to be sure that the file has not been tampered with, you need a hash that is provided out of band, from a trusted source (The FreeBSD Ports tree comes with the SHA256 hashs of all files, which are then verified once they are downloaded). SHA256 is much more secure, as MD5 has been defeated a number of times, with attackers able to craft two files with matching hashes. SHA-1 is no longer considered secure enough for cryptographic purposes. It should also be noted that SHA-512 is actually faster to calculate than SHA256 on 64bit hardware, however it is not as widely supported yet. The ultimate solution for ensuring the integrity of downloadable files is a GPG signature, verified against a trusted public key. Many package managers (such as yum) take this approach, and some websites offer a .asc file for verification. A number of projects have stopped publishing the GPG signatures because the proportion of users who checked the signature was too low to justify the additional effort. Some open source projects have had backdoors injected in to their downloadable archives on official mirrors, such as the UnrealIRCd project.

Q: (Christoper) I have a windows 7 laptop, and a Ubuntu desktop, what would be a cheap and easy way to share files between them?
A: The easiest and most secure way, is to enable SSH on the ubuntu machine, and then use an SFTP client like FileZilla (For Windows, Mac and Linux), and then just login to your ubuntu machine using your ubuntu username/password. Alternatively, If you have shared a folder on your windows machine, you should be be able to browse to it from the Nautilus file browser in Ubuntu. Optionally, you can also install Samba, to allow your Ubuntu machine to share files with windows, it will appear as if it were another windows machine in your windows ‘network neighbourhood’.

Q: (Chad) I have a network of CentOS servers, and a central NFS/NIS server, however we are considering adding a FreeNAS box to provide ZFS. I need to be able to provide consistent centralized permissions control on this new file system. I don’t want to have to manually recreate the users on the FreeNAS box. Should I switch to LDAP?
A: FreeNAS is based on FreeBSD, so it has a native NIS client you can use (ypbind) to connect to your existing NIS system. This would allow the same users/groups to exist across your heterogeneous network. You may need to modify the /etc/nsswitch.conf file to configure the order local files and NIS are checked in, and set your NIS domain in /etc/rc.conf. Optionally, you could use LDAP, again, adding some additional parameters to nsswitch.conf and configuring LDAP. If you decide to use LDAP, I would recommend switching your CentOS machines to using LDAP as well, allowing you to again maintain a single system for both Linux and BSD, instead of maintaining separate account databases. If you are worried about performance, you might consider setting the BSD machine up as an NIS slave, so that it maintains a local copy of the NIS database. The FreeBSD NIS server is called ypserv. You can find out more about configuring NIS on FreeBSD here

Bitcoin Blaster

Allan’s Bitcoin mining rig mined it’s 36th bitcoin today
Research shows Bitcoin may be less anonymous than initially though
Buy Humble Bundle 3 with Bitcoins!
Why We Are No Longer Accepting Dwolla « TradeHill

Roundup

The post Battery Malware | TechSNAP 16 first appeared on Jupiter Broadcasting.