Show Notes: extras.show/59

The post Brunch with Brent: Brandon Bruce | Jupiter Extras 59 first appeared on Jupiter Broadcasting.

RSS Feeds:

MP3 Feed | Video Feed | iTunes Feed

Become a supporter on Patreon:

— Links —

• BitTorrrent CEOs Out, Los Angeles Studio Closed, Staff Laid Off
• Second Amendment

The post A Perfectly Fine Gun | User Error 6 first appeared on Jupiter Broadcasting.

This week we take a look at what Noah’s using at Altispeed to provide remote assistance to his clients. We ponder over what Microsoft might have planned for Skype on Linux, cover why Android’s full disk encryption might not be as secure as you think, Mycroft’s collaboration with Canonical, the picks, your feedback & more!

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | OGG Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

— Show Notes: —

Brought to you by: Linux Academy

— PICKS —

Runs Linux

Tim Hortan’s Runs LINUX

Tim Hortons dougnut shop – RUNS LINUX!

Desktop App Pick

pinger-indicator

Ping Indicator is an app that shows the ping speed of various services or addresses.

The application “pings” a given set of hosts (with configurable ping interval) and monitors the response time with logarithmic scale, displaying the results in the indicator menu.

For each host, the app shows the response time as a graph in the AppIndicator icon. On packet losses, the graph turns red, as you can see in the screenshot above, for the latest entry, which doesn’t exist.

Ping Indicator is useful in many situations, including to track your latency in various areas (by adding hosts from certain areas), monitor your website latency, track when a website that went down goes back up and so on.

According to its developer, Ping Indicator still has some rough edges and unimplemented parts from the old Link Monitor Applet, and asks its users to star and watch the project on GitHub, to encourage further improvements.

Spotlight

Open Broadcaster Software

Open Broadcaster Software is free and open source software for video recording and live streaming.

OBS Studio (formerly known as OBS Multiplatform) is a complete rewrite of the original OBS from the ground up, with the main goals being multiplatform support, a more thorough feature set, and a much more powerful API. While still in its early stages, releases are currently available for Windows, Mac and Linux.

OBS Studio will eventually support many of the advanced requested features not present in the original OBS, such as multiple stream outputs and scene previewing, the latter of which is now available in the current release.

— NEWS —

Skype May Be Back on Linux

If you’re a GNU/Linux user, then you’ll be very aware at just how horrible Skype is on the platform. Not only has it not been updated since June 2014, but the Skype team at Microsoft – perhaps when they were bored – added extra hoops and complications as time went on.

• Exciting news for Linux users

Encryption on Android just got weaker

Privacy advocates take note: Android’s full-disk encryption just got dramatically easier to defeat on devices that use chips from semiconductor maker Qualcomm, thanks to new research that reveals several methods to extract crypto keys off of a locked handset. Those methods include publicly available attack code that works against an estimated 37 percent of enterprise users.

A blog post published Thursday revealed that in stark contrast to the iPhone’s iOS, Qualcomm-powered Android devices store the disk encryption keys in software. That leaves the keys vulnerable to a variety of attacks that can pull a key off a device. From there, the key can be loaded onto a server cluster, field-programmable gate array, or supercomputer that has been optimized for super-fast password cracking.

The independent researcher that published the post included exploit code that extracts the disk encryption keys by exploiting two vulnerabilities in TrustZone. TrustZone is a collection of security features within the ARM processors Qualcomm sells to handset manufacturers. By stitching together the exploits, the attack code is able to execute code within the TrustZone kernel, which is an enclave dedicated for sensitive operations such as managing cryptographic keys and protecting hardware.
A third of enterprise Android phones exploitable

Both Google and Qualcomm are quick to note that both of the vulnerabilities involved—indexed as CVE-2015-6639 and CVE-2016-2431—have since been patched. The first was patched in January while the second was patched in May. Google also pointed out that it paid the researcher for his work through the company’s bug bounty program.

But researchers from two-factor authentication service Duo Security told Ars that an estimated 37 percent of all the Android phones that use the Duo app remain susceptible to the attack because they have yet to receive the patches. The lack of updates is the result of restrictions imposed by manufacturers or carriers that prevent end users from installing updates released by Google.

Mycroft: The Open Source Answer to Natrual Language

We’re thrilled to be working with Mycroft, the open source answer to proprietary natural language platform. Mycroft has adopted Ubuntu Core and Snaps to deliver their software to Mycroft hardware, as well as Snaps to enable desktop users to install the software regardless of the Linux distribution they are using! CEO of Mycroft, Joshua Montgomery, explains more within his piece below.

Mail Bag

• https://slexy.org/view/s2mb9BXVeZ

• https://slexy.org/view/s2WJ5IRiRm

Call Box

• Chris’ call out for the community to help him with his background

Catch the show LIVE SUNDAY:

• Noon Pacific
• https://jblive.tv
• Network Calendar

— CHRIS’ STASH —

Chris’s Twitter account has changed, you’ll need to follow!

Chris Fisher (@ChrisLAS) | Twitter

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— NOAH’S STASH —

Noah’s Day Job

Altispeed Technologies

Contact Noah

noah [at] jupiterbroadcasting.com

Find us on Google+

• Chris
• Noah J. Chelliah
• Jupiter Broadcasting’s Page

Find us on Twitter

• Chris – ChrisLAS
• Noah – Kernellinux

Follow us on Facebook

• Jupiter Broadcasting on Facebook
• Noah – Kernellinux

The post Remotely Helpful | LAS 425 first appeared on Jupiter Broadcasting.

Jewel is cofounder of Workfrom, an online resource for remote workers, freelancers, digital nomads & travelers to find a place to work from!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

Interview – Jewel Mlnarik – @juellez

• Workfrom — Best Places to Work Remotely in a City
• jewel mlnarik (@juellez) | Twitter
• Workfrom (@workfrom) | Twitter

Are you looking for the transcription? Please let us know you use it and we may bring it back!

• WTR Transcription Poll

The post Oops, We Went International | WTR 55 first appeared on Jupiter Broadcasting.

A new big tech trend right under our noses? A new generation of nomadic high-tech workers living off the grid, while staying always connected.

These developers ask why is there is much pressure to buy the biggest house, buy the best TV, get a great car?

Before us now is an entire world of possibilities & cultures, some of us have been completely blind to. The ability to live comfortably, in a tiny home, or an RV & move about or bring your home with you when you travel is an amazing way to live. We look at a few remarkable examples.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

— Episode Links —

Off the Grid, But Still Online | Motherboard

For the last 61 days I’ve been traveling throughout California while living out of my Corolla, collecting stories from people living off the grid.

The people I’ve met have abandoned the chase of the American Dream; they are not battling traffic to work a nine-to-five job in order to live in a big house or buy a fancy car. Instead, their values are centered around new life experiences, connecting with nature, building their own homes, growing their own food, and having a full sense of control over their lives—including managing the amount of time they spend on the internet.

The average American feels lost going a day without logging onto their social media accounts via smartphone, tablet, or computer. By contrast, these people know exactly how much power their solar panels need to generate to charge their phones or watch a DVD on their laptops, and they moderate their usage in the same way they would measure out exactly how much water they need to cook dinner and take a shower.

Joey Hess

So I’ve built etckeeper (managing /etc with git, for sysadmins), ikiwiki (wikis and blogs in git), and git-annex (applying git to very large files). I’m funded by a Kickstarter project in 2012-2013 to build something not unlike DropBox, based on git-annex, that automatically version controls and syncs files between computers.

I’m also a long-time Debian developer, having been involved in building the Debian installer, and I run a 30-year delayed Usenet feed at olduse.net.

• joeyh (Joey Hess) · GitHub

This place is nicely remote, and off the grid, relying on solar power. I only get 50 amp-hours of juice on a sunny day, and often less than 15 amp-hours on a bad day. So the whole house runs on 12 volt DC power to avoid the overhead of an inverter; my laptop is powered through a succession of cheap vehicle power adapters, and my home server runs on 5 volt power provided by a USB adapter.

WatsonsWander

Since 2012 we have traveled the U.S. while living and working from our renovated 25-foot Airstream. Follow us on our crazy journey in search of beautiful scenery, fun adventures, interesting people, tasty foods, and more…

• Watsons Wander Live

Since June 2012 we have traveled the U.S. while living and working from our 25-foot Airstream. We’ve crafted this interactive infographic, which is updated daily with the data from our journey.

• WatsonsWander (@WatsonsWander) | Twitter

Technomadia | Adventures in Nomadic Serendipity

We’ve been perpetually on the road since 2006 combining technology and travel (tech+nomad).

We’re currently full time RVers roaming around in a geeked out vintage bus conversion.

We work remotely as technology & strategy advisors, app developers and authors.. always sucking up mobile internet bandwidth.

We love sharing a slice of our life from the road, provide a little inspiration and some lessons learned over the years.

Best RV Internet Access Options: The Learning Banks Uncensored at dc404 Sep 2015 – YouTube

06:05 Free Wifi – the reality
10:20 Cellular Internet – the reality
19:33 Put it all together
20:23 DIY RV wifi antenna repeater + Verizon (~$200 — Score: C)
26:40 WiFi Ranger + Wilson cradle booster and antenna (~$875 — Score: D-)
36:39 MaxxFi Standard (includes CradlePoint router, plus dual Wilson boosters and antennas (~$1700 — Score: C+)
53:50 Best RV internet options for the DIYer ~ $380
59:39 Part 2: Our solar power setup
1:01:00 Our goals for solar power
1:03:20 Expectation hardware needed
1:04:55 What did we install?
1:12:06 Solar power success!
1:14:26 In a perfect world
1:17:48 Parts list
1:20:26 Q&A

The post Gridless H4X0R | TTT 218 first appeared on Jupiter Broadcasting.

Lauren is the founder of May 1st’s #talkpay which is geared to encourage open discussion of pay to help employees have a better idea of what their talents are worth.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

• Societal Obstacle (@laurenvoswinkel) | Twitter
• Cascadia Ruby 2014- Lightning Talks – YouTube
• Let’s Talk About Pay | Model View Culture
• #talkpay hashtag on Twitter
• #Talkpay Topped Twitter — But How Many People Tweeted Their Salaries – BuzzFeed News

Transcription:

ANGELA: This is Women’s Tech Radio.
PAIGE: A show on the Jupiter Broadcasting Network, interviewing interesting women in technology. Exploring their roles and how they’re successful in technology careers. I’m Paige.
ANGELA: And I’m Angela.
PAIGE: So, Angela, today we’re going to talk to Lauren Voswinkel. She is a developer with Living Social. And she’s also the founder, I guess, of the movement #Talkpay. And so we get into a whole bunch of stuff about, kind of, getting started in programing. What it’s like to be a more experienced programer. And then we dive into a long, awesome conversation about #Talkpay.
ANGELA: Yeah. And it’s really epic. But before we get into that, I want to let you know how you can support. Women’s Tech Radio. You can go to patreon.com/jupitersignal. That supports the entire network, but specifically it also helps Women’s Tech Radio. And you can donate as little as $1.00, $3,00, $5,00 a month. You know, like a coffee or a beer. A bottle of wine is a little more expensive, like maybe $10.00 or $11.00, at least mine is.
PAIGE: Sponsor Angela’s Mountain Dew addiction.
ANGELA: Yes. Actually, there you go, yeah. About $2.00 for a 20oz Mountain Dew. So, if you’d like to support the network, you can go over to Patreon.com/today.
PAIGE: And we get started with this week’s episode by asking Lauren what she’s into and where she is in her career.
LAUREN: What I’m doing today is actually, I am in Portland going to Open Source Bridge, because I gave a talk about performance profiling with gperftools on Tuesday, which went really well. That’s not my normal day-to-day. My normal day-to-day is working remotely out of Pittsburg with the company Living Social as a senior web developer. So, that is afar more my average day.
PAIGE: Both of those days sound pretty awesome to me. What stack do you work in for your web development with Living Social?
LAUREN: So, I primarily work with Ruby on Rails. That’s typically what we’re dealing with. Although, we started recently doing things with Closure. Basically, working on making certain web services that allow you to handle much higher loads than a Rube service would. So basically I’m trying to learn that as we push forward. But primarily, it’s Ruby on Rails and some amount of JavaScript.
PAIGE: This is an interesting question. I have a lot of kind of young ladies that I’m mentoring as they’re getting into their development career and they all want to know should I learn multiple languages? Do I dive in? I usually say, you’re going to have to learn multiple languages over your career. As someone who is kind of doing that sort of shift now, where you’re shifting your mental aspects, how would you encourage a young person or how does it affect your day-to-day to have to be in Rails and then over in Closure and maybe again to Rails?
LAUREN: For me, it’s not that big of a problem. But I would, like, when I’m teaching someone how to get into development and whatnot, I typically want to see them get really good with one particular language first, because of how transferable that knowledge is typically. Like, learning Ruby or Python or what have you will basically get your really, really solidly started on knowing object oriented principals and whatnot, which will allow you to switch over to say Java or C# or PHP or what have you. So, rather than just kind of branching out into a whole bunch of different languages, my advice would be to learn one language really well, because that will help you pick up other languages as time goes on. And then it also gives you a little bit of an appreciation for the differences between different languages. Which is kind of funny, because one of the main things that we teach Girl Develop-It Pittsburgh is web development. And it’s actually really interesting watching how difficult it is for people to get into html and CSS development, specifically because of the multiple language switching back and forth. It’s very easy to get confused by switching from the markup syntax of html over to the CSS. And there’s a lot of confusion between, wait, so I don’t do the curly braces here? These are the angle brackets? So, wait, you mean I have to surround this in quotes? Why don’t I have to do that in CSS? So, those small little differences tend to add up if you don’t have a solid grounding in one of them. So that’s why I kind of recommend people just focus on one at a time. But switching between, after you get comfortable, for me is not that big of a problem even though like most other developers I spend the majority of my time looking up syntaxes and whatnot and the documentation. You never kind of get this — at least it feels like you never get this degree of comfort where you can just know all of the libraries for a particular language and you never have to look anything up. There’s always those moments of, wait what method did I want on this object again? Do I have a zip function for a hash or how does that even work? And so, you’re constantly looking things up. And so, another thing that I try to encourage in people is the fact that there is no shame in looking things up or not knowing something.
PAIGE: Yeah. Exactly. You know, you can be a professional developer. You’re still going to be going to the documentation, because a year from now they’re going to add new things to your language or take old things out. It doesn’t matter. If if you’re in just one language for forever, it’s going to change.
LAUREN: Yeah, absolutely.
PAIGE: So, you’ve learned multiple languages. You’ve clearly been doing this a while. How did you get into it? Were you kind of the nerdy kid who was always taking things apart? What’s your story?
LAUREN: My story was that I got, my family got a computer when I was fairly young. I want to say like eight or something. And I really, really enjoyed playing video games on the computer. The problem with that was that a lot of the games that I wanted to play required special configurations and whatnot. So, I would invariably start fiddling around in the command line trying to get a dos game to run. ANd it would be like, oh we need more extended more or extended RAM or what have you. And just trying to figure out what that even meant and just fiddling with settings. So much that I would end up breaking the computer and then have to start playing a game of fix the computer before mom and dad get home.
PAIGE: I have definitely participated in that game.
LAUREN: Yeah, so that trial and error, that constant push to want to figure something out is really what pushed me to enjoy working with computers so much. That early on understanding that failure is not a bad thing, per say, is something that I think was key to being able to be comfortable with learning program later in high school to a small degree and then in college after that. Because whenever you’re doing anything with computers you’re going to fail quite a bit and it’s perfectly fine if you do. The cost to make mistakes in programming is typically very small. You just need to change some text and you fix something instead of wasting like canvas or paints or various other materials. So, I often encourage people to fail quickly and get used to that feeling.
PAIGE: I think that’s really interesting that you make the analogy with art, because I actually come from an art background in theater, and our mistakes are much more costly, because there’s materials. There’s a lot more time and a lot more people involved. But there’s this paradigm that Samuel Beckett, the playwright, kind of gave that’s, the quote is “Risk, fail, risk again fail better, fail faster.” It’s something in that nature. And this is a prevailing attitude in the arts. Like go ahead, takes risk, and fail. And that’s okay. And then we don’t bring that over into programming where failure is so much less costly.
LAUREN: Yeah, so there’s kind of an irony to that, because there’s the paradigm in startup culture of move fast break stuff. Which is kind of lampooned in a lot of circles that are in, like people more diversity minded and what have you. So that’s kind of funny, because there is like, that thing of we can just keep moving and break stuff and then a couple down the line just be like wait we just painted ourselves into a corner. And that’s when the mistakes become a little bit more expensive. When you have systems that you are, that people are relying on. And it’s like, okay well now that there’s people relying on this, can we change this? And the answer typically in those situations is no. So, usually taking the time to make mistakes and to learn from those mistakes as quickly as possible is by and far the better option. But, again, because of how cheap it is to fail with relation to tech, it’s not that big of a problem.
ANGELA: Well, I would really like to get into this whole movement of your #Talkpay. Can you tell our audience about that?
LAUREN: #Talkpay was something that started at Cascadia Ruby last year. I ended up having discussion with people about how imbalanced the relationship between workers and employers tends to be, particularly with relation to pay and pay negotiation. Mostly because employers tend to have all of these various resources that give them an idea of how much they should be paying for a particular type of talent, whereas individual works don’t have access to that information. And so, I kind of have a more socialist leaning bend, which is still like a dirty word in this country for terrible reasons. But the conversations that I was having with people led me to do a lighting talk. Which is a short form five minute talk about openly sharing salaries. And so I got on stage in front of everybody and like laid out this spill about how in a capitalistic society, basically our goal as individuals to be to make as much money as possible because of the system that we’re put in where that behavior is encouraged. And so because corporations and companies are looking to make as much money as possible, they are actively engaging in an antagonistic relationship with their employees. They want to pay employees as little as possible that still has them feel like they’re being well compensated, so they don’t move on to somewhere else. And so, I kind of told people in a salary negotiation to absolutely avoid talking about past salaries and then if they are staunchly saying no we need to have past salary information in order to be able to give you a number, then my suggestion was to basically lie about it, mostly because of various privacy laws in place, an employer cannot contact a past employer to obtain that information due to the pay structures being potentially company secrets. Which is part of the case law from various labor lawsuits and whatnot. But anyway, I laid out all of this information and then gave details about my career. The fact that I’m based in Pittsburgh working for a DC company. I have ten years of experience. I attend numerous workshops to work on my code quality. I help teach with Girl Develop-It. And I then gave my salary in front of everybody. Which, for the sake of transparency is $120,000. It’s a little bit more than that now. But at the time it was $120,000. And I just said that into this room of technologist. About like 300 of them or so. And then also asked for other people in the audience to do the same. And there was, I want to say there was probably like a good 15 people that immediately wanted to share that information. And it just started this conversation about like why we don’t talk about pay more often. And it basically started a couple of conversations where a woman came up to me and started talking about how she was managing someone, and she was a developer as well, so she was basically like a far more senior developer that was managing the team as well. And she learned that one of her employees that she was managing was making like $20,000 more than her. And how if everybody was sharing this information, that could not be allowed to happen. It would be obvious that people are getting, for lack of a better term, screwed out of literally tens of thousands of dollars of pay. Typically that ends up marginalized to people significantly more women, people of color, etcetera, so on and so forth, because of the social upbringing that we’re brought into that kind of says that people who are in underrepresented groups tend to appear to be push or greedy if they ask for more money. So that discourages women and people of color from asking for more money in a negotiation phase.
PAIGE: There’s also the balance there of if you are somebody who grows up in a minority environment or as a woman, you’re not encouraged to do that. But if you grow up — like I was listening to this story on The TIm Ferriss Podcast with the guy who founded WordPress. And he was like, yeah, you know, I was doing my thing and I was a high school dropout, or maybe just graduated high school. And I was a programer and some guy was mentoring me and he was like, you have to go down to this place and tell them that you want no less than, and it was some ungodly sum, like $200 an hour to do coding. He had no work experience and he was 19. And granted it was about in the boom, but he just went out there and did that, because he was encouraged to do it and it was expected of him as a successful blue collar white male in that area at that time. And I don’t think, like, I’ve had so many discussions with women who are like, well how much should I charge? Even just freelancing. And trying to talk someone into charging more than $20.00 an hour is a painful conversation.
ANGELA: Right. Yeah.
LAUREN: Interestingly enough, I’ve had this conversation a couple times at Open Source Bridge this year, because of the stuff with #Talkpay and how I actively push people to ask for more money. One person that I was encountering was like, oh well I was thinking about asking for this much, because I”m a junior developer, because I only have two years of experience. And I’m like, wait. Whoa, whoa, whoa, whoa. Why do you feel like you’re a junior developer? And she’s just like, I only have two years of experience. I’m like, there are people out there that are getting like senior jobs with two years of experience. So you asking, you basically putting yourself in that box is inherently eliminating what you’re doing. Also, then I went through some of the skills that she has and I was just like those are managerial level skills as far as a senior developer goes. You’re basically taking product requirements and breaking them into bite size tasks that a team could then easily act upon. That is a senior level skill. Do not sell yourself short. But again, women and people of color are basically taught to constantly undersell themselves and that has huge impacts on their pay over the long term. Put on top of that that so many employers base the salary that they offer on your previous salary, it leads to this really terrible multiple, multi-point impact where they’re paid less when they first start working and they continue to sell themselves short, and then also are affected by the fact that they undersold themselves in their first couple of jobs. It’s just-
PAIGE: Yeah, it’s a spiral.
LAUREN: It is this really terrible cycle. Yeah, exactly.
PAIGE: That’s really interesting. I mean, the whole thing of how culture impacts this, how history impacts this, how capitalism at its heart impacts all of this. It’s a really interesting conversation. I really applaud you for getting up and standing up and being willing to say a lot of that. I think this sort of openness is really important. You know, we’re data geeks. Let’s get some data on the table.
ANGELA: Yeah.
LAUREN: Yeah, so that was actually one of the really funny things. I wrote an article for Model You Culture pushing people to share their salaries on May 1st. And there was actually a bit of backlash from Gamer Gate after a while. They were saying, oh this is all a ploy of (unintelligible). And what ended up happening was in the article I said, I don’t care what data we get when we start sharing this information. If we find out that women are making just as much money as men in various fields, that’s fine. But we need more concrete data to be able to make informed decisions about this. We need to have people that are first coming into this field, whether it be through hacker schools or people that are self-teaching. Those people need to have a good understanding of what their skills are worth in order to not undersell themselves. I have heard so many stories of people that graduated hacker school and they’re used to making $11.00 an hour. So when a company drops a salary of $40,000 an hour, yeah, that would be amazing, $40,000 a year, people are just like, oh my God this is so much money and they immediately will take that. Not realizing that even as a junior developer they could be making, depending on the area that they’re living in, 60, 70, $80,000 a year. And so basically that’s another thing that ends up leading to marginalized individuals or under represented individuals to enter into that spiral from the very beginning. LIke, the unrealistic expectation of what their skills can bring, hugely impacts that first salary.
PAIGE: Yeah. No, totally. We have a — I have heard of a company in Portland that specifically targets the self-taught/boot camp audience and they will sign you into a two-year contract at $35,000.
ANGELA: Wow.
LAUREN: Oh my god.
PAIGE: Yeah.
LAUREN: That is so predatory and it-
PAIGE: Yeah. And they do have a strong mentorship program where they’re really trying to run that, but it’s still like really guys? I don’t know. So have you recorded any of your pay talks yet?
ANGELA: Or the lightening talk?
LAUREN: The lighting talk was recorded. If I were to dig around I could provide a link, and I will probably email that to you all so that-
PAIGE: That’d be great.
LAUREN: -it can be attached to things. So that talk was recorded. I have not given a talk about — like a long forum talk about this, although I’m going to be giving one in Toronto on July 11th for Toronto AlterConf, which is funny because most of my information is based solely in like American history of labor. And so I get to dig into Canadian labor laws and labor history. It was kind of funny because I started digging into it when the hashtag was really going, like so May 1st or 2nd. But then I kind of wasn’t able to find the information I was looking for immediately and now this is pushing me to like broaden my horizons of what I know on that so that I cannot sound like the self-centered American that only we’re important.
ANGELA: That’ all the countries view us as.
LAUREN: Yeah, exactly.
PAIGE: Which is really interesting, actually. When we were at Linux Fest one of our listeners came up to us and was talking about this exact thing, but he was from Poland. He said, where we are, we don’t have the disparity in the tech field at all. Even at the university level, the classes are fairly split 50/50 and the salary diversity is all but nonexistent from what he was saying. So that might be — the international look at this might be really interesting. I love comparing what we’re doing to other modern cultures, I guess. Why it’s working and why it’s not working.
ANGELA: So, one thing I wanted to ask, we talked just before we started recording about the hashtag and I mentioned that there are a couple of twitter accounts that will anonymously post your information if you direct message them. Do you run either one of those?
LAUREN: No, actually I don’t.
ANGELA: Or any of them, I guess, there might be more than two, but I saw two immediately.
LAUREN: I don’t run any of them. That idea, I believe started because of, kind of a friend of mine. A friend of mine, Stephanie Marreo. who started collecting DMs from people. Particularly people of color and anonymizing it so that there would be less of a backlash against people of color.
ANGELA: Sure. Sure.
LAUREN: And so once she started doing that, I think other people saw that and said, you know what, we can automate this. Amusingly enough, somebody fairly recently, if I remember, used one of these twitter bots to just say butts or something. So that was kind of funny. I knew that the hashtag was going well when someone started using a tool like that to just be snide or snarky or what have you. So that was kind of funny. But no, I do not actually run any of them. So that all came about because of the conversation as a whole.
PAIGE: That’s really cool.
LAUREN: Which I am super happy about.
ANGELA: I wonder if anybody listening to this how and is interested in participating in that #Talkpay, because it’s not just on May 1st, but that will probably be a yearly thing, right? You’ll promote it, like okay it’s May 1st #Talkpay, or is it over?
LAUREN: I definitely want to continue this conversation going for as long as I possibly can.
ANGELA: Right.
LAUREN: There probably will be a push every May 1st.
ANGELA: Great.
LAUREN: To do that, because not a lot of Americans know, but May 1st is International Workers Day, which is why I picked that day in particular. Basically, as a way to kind of bring American workers, in particular, into the fold of a yearly celebration of workers as a class.
ANGELA: If you do use the #Talkpay hashtag, and I’m speaking to the audience, use also the hashtag #heywtr or #wtr so that we know.
PAIGE: Yeah, that’d be great. We’d love to hear. Perhaps we should participate.
ANGELA: Like, I’m all for open and transparency on salary, but at the same time I think I would prefer being anonymous, because I don’t really want to post like to all my family what I make. That’s still uncomfortable. I’d rather people in the industry know more than my family.
PAIGE: It’s an interesting part about American culture. We don’t like talking about money.
ANGELA: Yeah.
PAIGE: Yeah, there’s three things that we don’t like talking about and they’re also the three things we fight about the most; which is money, sex, and family.
ANGELA: Yeah. Can’t live without any of those.
LAUREN: So, what’s interesting is I kind of am still a little ambivalent about the anonymous contributions, because one of the things, one of the reasons why I started hashtag was basically to encourage people to attach their name to a number. And the reason why I wanted people to attach their name to a number is because there are already various services that Glass Door and whatnot that give ranges of salaries that people can look at if they want, but what i found ends up happening is that people from underrepresented groups who see those salary ranges find it very difficult to justify being in the higher end of those salary ranges.
PAIGE: Especially in things where it’s so huge a salary range.
LAUREN: Yeah.
PAIGE: I mean like the developer salary can start at like 50, 60 and ends up at 250.
LAUREN: Yeah, exactly. And so a lot of people have difficulties like putting themselves towards the higher end of that. And so what attaching names to these numbers actually does is they allow you to look at people and say what does this person know or do that is worth so much more than what I would value myself at. That ability to look at that is absolutely critical in being able to give someone a realistic perspective of what they should be making. Because it’s easy to say, oh I don’t know deserve $120,000 a year, because I don’t have X, Y, and Z. But when you realize that you coworker is making that much and they maybe have a year more of experience than you, or maybe they actually have less experience than you and you can look at their work and whatnot, you have something to concretely compare it to. That makes it a little bit easier to just say, you know what, I am worth that much money.
PAIGE: I totally agree. Before we go, is there anything else you wanted to throw out that the audience should follow you on or things you might be interested in that we should take a look at?
LAUREN: I dont’ know of anything in particular, but if anybody is — as a hobby I like to, as I say, play with fire doing fire ploy and fire breathing and whatnot, which is always entertaining. I don’t know of any videos of me doing it, but those are always really interesting to watch people play around with, just if you’re bored.
ANGELA: I actually, I have an online friend that does that. I know somebody.
PAIGE: Fire ploy is very awesome. That’s very cool that you do that.
LAUREN: It’s a great feeling. I’m not going to lie, but definitely don’t just try to go out and do that by yourself. There are communities for that that will teach you how to do it safely without setting yourself on fire, and definitely look around for that before trying.
PAIGE: How many times have you set yourself on fire?
LAUREN: Let’s see, I want to say about like three or four. Fortunately no accidents with fire breathing, which is probably like the most dangerous thing.
PAIGE: That is good, yeah.
ANGELA: Yeah.
LAUREN: But I have caught my hair on fire occasionally. I’ve caught my pants on fire.
PAIGE: The pants seems to be the most common one.
LAUREN: Yeah, no. That one is really, really easy to have happen. Because if you don’t have your plains just right when doing ploy, they will just brush past you, particularly in the very beginning of a set when the fuel is still very, very fresh and easily transferable.
PAIGE: I used to play fire lookout for a friend. Always have a friend at least.
LAUREN: Fire safety with a blanket ready, a fire retardant blanket ready at the — ready to go. If you don’t have that then you shouldn’t be spinning.
PAIGE: Right, awesome.
LAUREN: Yeah, so other than that no, just nothing really. I just am mostly just a giant socialist when it comes to pay transparency and worker’s rights and what have you. I also update people quite a bit on the goings on in the trans community and the LGBT community as a whole.
PAIGE: Very cool.
LAUREN: But that’s pretty much me.
PAIGE: Well, we shall have to keep an eye on hash pay or #Talkpay.
ANGELA: #Talkpay.
PAIGE: There it is. I’m not a Twitterer.
ANGELA: Twitterer.
PAIGE: i dont know if that’s a word, but I do stalk people on Twitter, but that’s about it. So thank you for so much for joining us Lauren. We shall have to get together and talk chat more again.
LAUREN: All right. Absolutely. Take care. Thanks for having me.
ANGELA: Thank you for listening to this episode of Women’s Tech Radio. Remember, you can find the full transcription in the show notes. Go onto jupiterbroadcasting.com, click on Women’s Tech Radio, and just scroll down and all the transcription is right there.
PAIGE: Yeah. You can also find us on iTunes. If you’ve got a moment, please leave us a review. Let us know how you like the show or what we could do better. If you’d like to leave more direct feedback you can contact us at wtr@jupiterbroadcasting.com or find us on the contact form at jupiterbroadcasting.com. You’ll also find the RSS feed available there. And if you’d like to follow us on Twitter, we are @heywtr. Thanks so much.

Transcribed by Carrie Cotter | Transcription@cotterville.net

The post #talkpay Today | WTR 34 first appeared on Jupiter Broadcasting.

Terra founded Soma Collaborations, an executive and professional collaborative coaching service.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

• LinkIt! | Online K-12 Assessment and Instruction Solution
• Trello
• CardSmith – Cloud Campus Card Solutions
• AT Tracker Web
• Soma Collaborations — Where innovative teams collaborate for greatest impact.

• Terra Soma (@Soma_Terra) | Twitter

• Support Women’s Tech Radio

Full transcription of previous episodes can be found below or also at heywtr.tumblr.com

Transcription:

ANGELA: This is Women’s Tech Radio.
PAIGE: A show on the Jupiter Broadcasting Network, interviewing interesting women in technology. Exploring their roles and how they’re successful in technology careers. I’m Paige.
ANGELA: And I’m Angela.
PAIGE: Angela, today we are interviewing Terra Soma. She is an executive coach, mostly, and also a team coach in the IT collaboration space. I met her working with the Women in Tech space in Portland.
ANGELA: Awesome. Before we get into the interview, I want to mention that you can support the show by going to patreon.com/jupitersignal. This supports the entire network, including this show. ANd there are, I think, 11 or 12 shows now on this network. It’s amazing. A lot of them are technology based. If you are interested in expanding your podcast listening, go check out some of those shows.
PAIGE: To get started in the interview today, we asked Terra to tell us about her role in technology now.
TERRA: My current role in technology is supporting people who are working in technology to become more collaborative, and supporting teams in general. And I also have a specific interest in helping women. I think we need more women’s voices. So, weaving that into everything that I do.
PAIGE: What does it look like to help people be more collaborative?
TERRA: It comes about in two ways. One is through coaching and individual one on one. Executive coaching, and I also work a lot of different levels. And then I do team development stuff. Sometimes that’s teaching people how to engage conflict more effectively. Sometimes that’s actually working with a team alongside them, and pointing out things while they’re working. A lot of times meetings get so off track unless there’s a trained facilitator. So, I come in and I’m not just saying, all right let’s stay on track, but I’m actually looking at what are the dynamics that are going on that get people off track and how can we get people back on track. The underlying power dynamics that come into play, I’m working with those a lot so that we can get more creative ideas. And also, all the interpersonal dynamics that help people collaborate more effectively, I”m developing those.
PAIGE: How did you end up there? That’s a really interesting, unique role. That sort of coaching and meeting. I kind of want to call it meeting, debugging.
TERRA: I got into it sort of in a random way. I was working at an e-commerce company as an analyst and the HR director who, super savvy guy, said Terra what is it that you really want to be doing? I didn’t even know that executive coaching was a field at the time. So, I said well I’d really like to teach executives to do yoga and have that help them be more effective in their jobs. And he said, oh you want to be an executive coach. I didn’t even know what that was. So, he introduced me to various people who do similar type work in the coaching realm and in the professional development realm, and it just started this path of getting the certifications that I needed for coaching and starting to work more on the team side than the coaching side, because I really like the interpersonal way. And developing that path. Just very much more of a journey than following a specific goal that was already set out. So, leaning into different things. Setting everything from zen to Sufi to adult development theory, and it’s just been a process of understanding things. Very organic.
PAIGE: That’s awesome. I love wrapping that in — I’ve actually been, myself, kind of, really on a journey of trying to wrap more than just technical documentation into my career and zen is one of the things on my list as well. Although, I have found that it’s really difficult, because being a technician, I expect to be able to pick up a book. And especially having like a more Judeo-Christian background, I expect to be able to pick up a book and see do this, don’t do that, do this, don’t do that. And zen is the exact opposite of that, and sometimes it is infuriating.
TERRA: Right. Yeah, find that exact opposite is actually what’s really helpful for helping people learn how to move into ambiguity, because our world is so crazy and complex, and it’s unnerving. But there is also that ground of, okay what do I do now when you don’t have the specific guidelines of how to go.
PAIGE: Yeah, and the answer is listen.
TERRA: Yes, that is always the answer.
PAIGE: Do you have a medication or mindfulness practice?
TERRA: I do. I actually, I get a lot of anxiety if I do sitting medication, so I actually do a moving meditation practice in the Sufi tradition.
PAIGE: What does that look like?
TERRA: It involves breathing. It’s similar to yoga, is probably the thing people will understand the most, but it’s not as scripted as yoga. There’s a scripted intro of about five, ten minutes of moving in a way that just connects me to my breath, and then it’s actually moving into more organic, just following how my body wants to move. It’s a really beautiful practice. Definitely takes some time to get into, but a beautiful practice for working with anxiety and trusting intuition.
PAIGE: That’s really interesting. I haven’t heard of that before. It’s kind of cool though. I actually have a similar problem. Especially, I have kind of like the ADDs, if you will. And I like Tai Chi and the same moving medication, but for me, being a developer and i like very clear paths. The scriptedness of the Tai Chi is very helpful for me to turn my mind off.
TERRA: Yeah, I can totally see that.
ANGELA: I’m going to have to do some research, because I don’t know any of these. The practicing mindfulness that I do is I just — I lay in bed and listen to music that has no words and i don’t know by heart, although I’m starting to. And just close my eyes and just lay there. And I’ve had a couple moments but I interrupt myself, like when my thoughts start free flowing, I’m like oh my gosh how did I even think of that. And I pull myself right out of it. So, I definitely need to practice it more.
TERRA: That sounds beautiful.
ANGELA: It was. It was amazing. It really was. It’s happened several times. Just a handful of times I was able to achieve that and it was really cool.
PAIGE: The allusive flow.
ANGELA: Mm-hmm.
PAIGE: Yeah. I think that it’s been really interesting to see how many successful people I know have a mindfulness practice, and whether that’s Sufi movement or Tai Chi, or mindfulness, or an actual zen medication if you will, but just how they incorporate that. Is that something you also teach with your coaching clients?
TERRA: It is. And I work in — it depends on how open they are. Sometimes I do it super subtly, I just offer a suggestion. And if they’re more open then I’ll be more explicit about what we’re actually doing.
PAIGE: Yeah, I’ve heard that from several people that kind of — that’s why the term mindfulness is coming about.
ANGELA: Yes.
PAIGE: I think. Because it doesn’t sound like medication.
ANGELA: Right. Yeah.
TERRA: Yeah, it’s a very non-denomination term, if you will.
PAIGE: Yeah, a secular term maybe.
TERRA: Yeah, secular is the word.
PAIGE: How did you — I know you’re very passionate about — we worked together recently on the ACTW Conference, which is Accelerating Careers of Women in Technology. I know you’re passionate about tech. How did that passion come into your life? Did you grow up with a lot of tech. Were you a developer? What does that story sound like?
TERRA: I actually grew up in a family that was really interested in any type of technology. My father especially is just kind of a tinker. He’s actually a farmer. That’s how he makes his living. But I think if he weren’t a farmer he would have been kind of a mad scientist. So, there was just that tinkering, playing with things, figuring things out. But, ironically, as a woman, I was not really encouraged to follow that path. I grew up in a family that was very interested in — women had very traditional roles. So I’ve had to do a lot of pushing against that. So, I didn’t actually go the developer path. I’ve worked mostly on the business side. Probably the most technical thing I”ve done is write SQL queries as an analyst. So, I’ve always been interested though in being around the development of technology, because it’s so fascinating. Just the things that we’re capable of doing and the passion that people have. And being around smart people is amazing. And smart people creating cools stuff is double amazing.
PAIGE: I like thinking about it that way. Smart people creating cool stuff.
ANGELA: Yep. Your description reminded of Belle’s dad Maurice in Beauty and the Beast, the tinkerer.
TERRA: Yes. Yeah, very much.
PAIGE: I can totally see that. So, growing up with that kind of built in — we’re going to go a little deep here — growing up with that built in patriarchy, do you think it gave you a leg up? Like, I actually spent a lot of my youth doing very masculine things. I worked at a garage. I did a lot of things like that. And I feel like, coming into the tech community it actually gave me kind of a leg up and a thick skin. I hate that I have to use it sometimes, but I have noticed that it really has impacted my career to have that ability to just kind of stand up and be one of the guys, if you will.
TERRA: Yeah, absolutely. And I see it as very much a double edged sword. On the one hand — and I’ve always, the same, been kind of a tomboy, play out in the dirt. I would rather play with the boys, because they were doing fun stuff, instead of just playing with dolls. So there’s always been that thing. And I think that’s really helped me in a lot of ways, because I can just be one of the guys, and everything that comes with that. The plusses and minuses with that has been hugely helpful. And I also don’t think of — when I was working at Lucent Technologies or working at Ebay. Ebay was better gender equality, but Lucent Technologies, I was one of two women on the entire team. I didn’t really realize it until later and I looked back. I was like, oh yeah, there really weren’t that many women. So I think there is that, just capacity to be one of the guys is hugely helpful. And the thick skin. I would say the double edge sword of that is that I’m also really sensitive. And it’s very strange, because I don’t feel it so much defensive in myself, but I feel really protective of other people. So, if there are other women around and there are crude comments made or their not given opportunities, then I feel really protective and defensive of them.
PAIGE: I share that. I will rarely speak up for myself because of the thick skin, but I will not hesitate to speak up for someone else.
ANGELA: Yep.
TERRA: Mm-hmm.
PAIGE: So, you’ve kind of been tangentially involved in technology. Have you found it kind of more difficult, less difficult with kind of how you wrap yourself into the community or effecting the community. Because I know you were kind of reading through some of the things that we’ve talked about or that you put in for the interview. You’re interested in helping women in technology careers. How does that impact you?
TERRA: My work as a consultant means that I’m outside of the team a lot. I tend to integrate into teams and become somewhat part of the team, but there is always a sense of being the outsider. And then not being a developer, while I can understand most of what they’re talking about, there are some things that I just don’t get. So, there is a little bit of that outsider trying to understand the inside. I think that outsider perspective gives me a lot of power, because I can actually impact the system rather than being a part of it. But there is that sense of never quite being in the middle of it and not having direct impact. Rather, I’m helping other people and helping other people grow. So, I’m not actually creating something, I’m just helping the process with that. And then from the outside it’s the total mother/lion protector thing. I’m really watching out for women. I’m actually working with a client right now and there’s a woman in charge of the group, but there are a lot of men that are coming in that have really strong personalities, and I feel so, so protective of her. I can’t really make her do anything, but I really want to influence her to have the right power to not get overrun. Kind of like, I would think like a mother. I’m trying to do the best that I can, but then I also have to just let go and let whatever happens happen.
ANGELA: That’s interesting. It kind of reminded me, it’s not the same, but it’s similar. All of my jobs I floated and wore many hats, and I always had direct input on whatever was going to happen. A lot of them are smaller companies, but even at McDonald’s, I was really good friends with my manager right away and she let me help with some technical aspects. But then a more recent job, the owners, that were all men, coincidentally, they would all meet behind closed doors and i had no input, and that was weird. it felt really weird that I wasn’t part of that. So that took some adjustment for me personally, because I always felt like I had input.
TERRA: Right.
ANGELA: Anyway, so it’s similar but different.
TERRA: Yeah. Yeah, that sounds so frustrating.
ANGELA: Yes. Yes, definitely.
PAIGE: Yeah, I think it’s just that balance of — you know, we talked about this in one of our other interviews, if you see behavior like that we have to say something, and it’s really difficult sometimes to be willing to stand up and kind of stick your neck out and say, hey guys you may not realize it but you’re cutting me out. Or, you’re using language that automatically puts me on the defensive, because you’re saying I’m emotional or I’m not coming at this rationally. Or just some of the things that are kind of built in with the way that society has typically viewed women. And especially coming into a workforce as a minority, that you have that impact and stigma. And I was talking with another friend and we kind of talked about getting women into technology. Just getting them in trickle by trickle is not the answer.
ANGELA: Mm-hmm.
TERRA: Yes.
PAIGE: It’s just going to create the same problem that we see now where women are leaving technology in droves, because they don’t have the support. They don’t have that network. If you’re in that company and you’re one of two or you’re one of one, it can be — you can kind of suffer a lot of friction. Even if you don’t realize it. But there is a gender gap, and that’s okay. And we can change it. But we have to speak up. We have to say things. We have to come up with different strategies.
TERRA: Yeah, absolutely. I think one of the tricky things is that there are effective ways to say things, and then there are things that just come out because we are so frustrated, and that creates more problems.
ANGELA: Right. So you should mediate first.
TERRA: So there’s that finessing. Yes.
ANGELA: I’m feeling this. I feel like saying this. I should practice mindfulness right now, because I shouldn’t say that. So, yeah I definitely — yes.
TERRA: Yeah. And then there are sometimes that you just have to have that. Sometimes that explosion really makes the difference that needs to happen. Like you said, I think it was Paige said, you have to be willing to stick your neck out. So it’s totally finding that balance.
PAIGE: It’s not easy. That’s the hardest part is I hate that it’s not easy. The mother lion in me wants it to be easy. Especially by now. I talk about one of the reasons I do Women’s Tech Radio is because I’ve talked with girls recently, like this year, with 16 year old girls who come into some of the meetups I run, or I just meet through other things, and they’re like yeah I’ve never really considered programing or technology or whatever, because that’s for boys. I’m like, seriously? It’s 2015. Like no. No, no, no. Trust me, you can type just as well as a boy.
TERRA: Right. Oh wow. That’s so sad.
PAIGE: Yeah, it was surprising to me. I really kind of felt like — I’ve been involved in initiatives to help girls get into technology many years before — ten years ago. I was like, yeah, ten years ago we needed that. Holy crap, we still need it now.
TERRA: Yeah, that’s amazing.
PAIGE: And I think that’s also true for the class gap. You know, not just to put a gender barrier on it. There’s plenty of other people who need to get into technology. These careers are accessible.
TERRA: I think that that’s one of the really interesting things. When I look at Sheryl Sandberg’s book Lean in, I feel that class gap which is, not all of us have nannies at home taking care of kids. There’s definitely — that’s a big thing for me along with the gender lines, is that not everyone has the same opportunities and how can we equalize the field. Because technology is such a great equalizer.
ANGELA: And so is raising a family.
TERRA: Yes.
PAIGE: Now we — not only do we have jobs in technology, but we have the technology to allow you to stay home, raise your kids, and work.
ANGELA: You know, there was a couple years ago, or maybe five years ago, a big push for work at home. And then all the sudden it just went right back the other direction. Like, no. Nobody can work at home.
PAIGE: I was so sad seeing some of those big corporations, because they had really mismanaged the process.
ANGELA: Right.
PAIGE: Because it is — like we talked about with Darcy, it’s all about the process and how we communicate and how we keep on the team. Remote work is not the devil, but it’s not the answer to everything either. It has to be a carefully managed process.
TERRA: Right. For me too, collaboration is such an in-person thing that there is that balance of how do you get — and I’m also an introvert. So I need my time alone and my space to do my own thing. And I’m so much more productive at home. And collaborating in person is 1,000 times better. The sparks are just so much more intense. So, it is a balance and it is a process of figuring out.
ANGELA: Yeah. Although, even having people come into an office at a medical supply job that I worked at, we were divided. Customer service was upstairs and purchasing, shipping, and receiving were in the back, downstairs. And it totally created the us versus them mentality. I had to work with customer services on that. Like, okay stop. We’re not your enemy. We’re on your team. We can do this. So, there’s still — but it’s even worse, I think, possibly, when you’re remote.
PAIGE: I’ve kind of had the opposite experience, actually.
ANGELA: Really?
PAIGE: Yeah, because nobody is together, we’re all together.
ANGELA: Oh, interesting.
PAIGE: Because nobody is sitting — actually, in our office, in my company we have a small home office, but I would say probably 85 percent of the company is remote and we’re scattered all over the US. Even sometimes all over the world. But because we don’t build that kind of team mentality of us on our floor — Like, even some of my friends who are in the gaming industry, where they have their Nerf guns at their desks and they go on raids to other departments and stuff. It definitely creates that us versus them mentality where with the full remote team, we’re all just kind like we’re a team. This is how we do it and we all understand that we’re all doing it together.
ANGELA: Right.
TERRA: That’s a really cool perspective.
PAIGE: It’s not always what you think it will be.
TERRA: That’s a great new way to break down silos.
PAIGE: Yeah, I hadn’t really thought about that, but I like it. It’s cool. I like remote work and I’m also an extravert, so it’s an interesting challenge for me where I get less work done at home. So I tend to work at coffee shops and things like that, because it’s just enough buzz in the air.
TERRA: Right.
PAIGE: That could be the caffeine. Terra, the one thing I did want to know, because you’ve kind of got a unique role that we haven’t talked about yet with the coaching is, what kind of software tools do you use in your day-to-day.
TERRA: That’s a good question. The big thing for me is just staying organized. So, I’m trying to figure out the best way to do that. Tracking all the different things that I have going on with clients. I use Linkit, somewhat. Which is cool. It’s kind of Tello like, but it’s a lot more organic. I have a friend who is actually developing Cardsmith, which will be a really cool strategic thinking, project management, task management tool. So, I’m super excited for that to come out. And then, of course, email, etcetera. My iPhone is definitely my best friend. It has everything on it. I track — what is the — I think it’s call AT Tracker, where I actually have all of my different clients and then I just push a button when I start working with them, and then it tracks the hours and that makes it really easy for me to invoice. Which is super helpful. My iPhone, literally, all the cool apps I have on my IPhone are the lifesavers.
PAIGE: Well, this has been a great conversation. Thank you so much for joining us.
TERRA: Yeah. Thank you.
PAIGE: If people want to kind of find you, maybe they’re interesting in coaching or anything, what’s the best way to find you?
TERRA: Somacollaborations.com is my business site. I’m also on LinkedIn at Terra Soma, and it’s T-E-R-R-A Soma. And then Twitter, @Soma_Terra.
PAIGE: And that will all be in the show notes for everyone.
ANGELA: Thank you for listening to this episode of Women’s Tech Radio. Don’t forget that you can find full transcription in the show notes on jupiterbroadcasting.com. There you can also use the contact form and email us directly by using the dropdown to select Women’s Tech Radio.
PAIGE: Or you can get us at wtr@jupiterbroadcasting.com. You can also follow us on Twitter @heywtr.com. And if you’re interested, you can always subscribe to the podcast on iTunes. if you have spare a moment, leave us a review or some feedback with the contact form. We’d love to hear what you think ladies.

Transcribed by Carrie Cotter | transcription@cotterville.net

The post Meeting Debugging | WTR 28 first appeared on Jupiter Broadcasting.

YouTube is preparing a monthly subscription service with no ads & other perks. But is the Internet ready to pay for YouTube content? Our panel is skeptical.

LinkedIn buys Lynda & their plans leave us a bit creeped out. Plus why Samsung is teetering on the edge of something huge.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

Welcome to the LinkedIn Family, lynda.com! | Official LinkedIn Blog

So, I couldn’t be more thrilled to welcome the talented lynda.com team to the LinkedIn family today. Together, I believe we can make it even easier for professionals around the world to accelerate their careers and realize their potential through the learning and development of new skills. Today’s announcement that LinkedIn intends to acquire lynda.com allows us to take a meaningful step forward in building the Economic Graph, which you can read more about from our CEO Jeff Weiner’s post here.

YouTube’s paid subscription offering takes shape — and it’s almost here | The Verge

It will offer ad-free videos as well as the ability to store videos offline on their mobile devices, for a price expected to be around $10 a month. It will also let creators put their videos behind a paywall so that only subscribers to the premium version can view them, sources said. (Bloomberg published a letter sent to creators today.)

The offering may also include lower-priced subscriptions for specific categories, such as music and children’s programming. (YouTube Music Key, which serves as a model for the all-access subscription, has been in invite-only beta since November. At the time, Google said Music Key would cost $7.99 a month when it comes out of beta.)

Samsung Facing Supply Shortages for Curved-Screen Galaxy S6 Edge – WSJ

“We’re working hard to resolve the difficulty in supply,” he said at a media event in Seoul ahead of the flagship phone’s global launch on Friday. He added that the supply issue could persist “for a while.”

Hidden backdoor API to root privileges in Apple OS X |

The Admin framework in Apple OS X contains a hidden backdoor API to root privileges. It’s been there for several years (at least since 2011), I found it in October 2014 and it can be exploited to escalate privileges to root from any user account in the system.

Feedback TTT 154 “Bitcoin Recession”

I perked up when listening to “Bitcoin Recession” because I expected some thoughtful Bitcoin discussion. But instead all I heard was Popey pooping on Bitcoin for 10 minutes. I know Popey doesn’t like Bitcoin and won’t give it a chance. So can we get someone else from the mumble room to comment who isn’t openly, unabashedly against it? Can we please have a discussion about Bitcoin for once that doesn’t involve pooping on it?

Linuxbrew

• Can install software to a home directory and so does not require sudo
  • Install software not packaged by the native distribution
  • Install up-to-date versions of software when the native distribution is old
  • Use the same package manager to manage both your Mac and Linux machines

The post Cat Videos | Tech Talk Today 156 first appeared on Jupiter Broadcasting.

Kaspersky researchers discover malware hidden in the firmware of hard drives & link the development to the NSA. We discuss what’s known publicly at this point.

The Pebble smartwatch just got access to Android Wear apps & Apple prepares to sell millions & millions of watches.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

How “omnipotent” hackers tied to NSA hid for 14 years—and were found at last | Ars Technica

In 2009, one or more prestigious researchers received a CD by mail that contained pictures and other materials from a recent scientific conference they attended in Houston. The scientists didn’t know it then, but the disc also delivered a malicious payload developed by a highly advanced hacking operation that had been active since at least 2001. The CD, it seems, was tampered with on its way through the mail.

It wasn’t the first time the operators—dubbed the “Equation Group” by researchers from Moscow-based Kaspersky Lab—had secretly intercepted a package in transit, booby-trapped its contents, and sent it to its intended destination. In 2002 or 2003, Equation Group members did something similar with an Oracle database installation CD in order to infect a different target with malware from the group’s extensive library. (Kaspersky settled on the name Equation Group because of members’ strong affinity for encryption algorithms, advanced obfuscation methods, and sophisticated techniques.)

Kaspersky researchers have documented 500 infections by Equation Group in at least 42 countries, with Iran, Russia, Pakistan, Afghanistan, India, Syria, and Mali topping the list. Because of a self-destruct mechanism built into the malware, the researchers suspect that this is just a tiny percentage of the total; the actual number of victims likely reaches into the tens of thousands.

• Kaspersky PDF Report
• Someone (probably the NSA) has been hiding viruses in hard drive firmware | The Verge

Report: Apple Prepping Electric Car | News & Opinion | PCMag.com

Still, according to the Journal, “the size of the project team and the senior people involved indicate that the company is serious.”

The paper pointed to talks with high-end car makers and Apple’s work with designer Marc Newsom, who has experience with car design.

Apple Orders More Than 5 Million Watches for Initial Run – Digits – WSJ

Apple has asked its suppliers in Asia to make a combined five to six million units of its three Apple Watch models during the first quarter ahead of the product’s release in April, according to people familiar with the matter.

Pebble’s Smartwatch Now Officially Supports Android Wear Apps | TechCrunch

Now your watch can take advantage of apps that support Google’s Android Wear platform, in addition to those within Pebble’s own app store.

Flaw In Netgear Wi-Fi Routers Exposes Admin Password, WLAN Details – Slashdot

A number of Netgear home wireless routers sport a vulnerability that can be misused by unauthenticated attackers [here’s the report at seclists.org] to obtain the administrator password, device serial number, WLAN details, and various details regarding clients connected to the device, claims systems/network engineer Peter Adkins. The vulnerability is found in the embedded SOAP service, which is a service that interacts with the Netgear Genie application that allows users to control (change WLAN credentials, SSIDs, parental control settings, etc.) their routers via their smartphones or computers.

The post No Security Anymore | Tech Talk Today 134 first appeared on Jupiter Broadcasting.

Coming up this week, we’ll be talking with Adrian Chadd about all things wireless, his experience with FreeBSD on various laptop hardware and a whole lot more. As usual, we’ve got the latest news and answers to all your emails, on BSD Now – the place to B.. SD.

Thanks to:

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

FreeBSD 10.1-BETA1 is out

• The first maintenance update in the 10.x series of FreeBSD is on its way
• Since we can’t see a changelog yet, the 10-STABLE release notes offer a glimpse at some of the new features and fixes that will be included in 10.1
• The vt driver was merged from -CURRENT, lots of drivers were updated, lots of bugs were fixed and bhyve also got many improvements from 11
• Initial UEFI support, multithreaded softupdates for UFS and many more things were added
• You can check the release schedule for the planned release dates
• Details for the various forms of release media can be found in the announcement

Remote headless OpenBSD installation

• A lot of server providers only offer a limited number of operating systems to be easily installed on their boxes
• Sometimes you’ll get lucky and they’ll offer FreeBSD, but it’s much harder to find ones that natively support other BSDs
• This article shows how you can use a Linux-based rescue system, a RAM disk and QEMU to install OpenBSD on the bare metal of a server, headlessly and remotely
• It required a few specific steps you’ll want to take note of, but is extremely useful for those pesky hosting providers

Building a firewall appliance with pfSense

• In this article, we learn how to easily set up a gateway and wireless access point with pfSense on a Netgate ALIX2C3 APU
• After the author’s modem died, he decided to look into a more do-it-yourself option with pf and a tiny router board
• The hardware he used has gigabit ports and a BSD-compatible wireless card, as well as enough CPU power for a modest workload and a few services (OpenVPN, etc.)
• There’s a lot of great pictures of the hardware and detailed screenshots, definitely worth a look

Receive Side Scaling – UDP testing

• Adrian Chadd has been working on RSS (Receive Side Scaling) in FreeBSD, and gives an update on the progress
• He’s using some quad core boxes with 10 gigabit ethernet for the tests
• The post gives lots of stats and results from his network benchmark, as well as some interesting workarounds he had to do
• He also provides some system configuration options, sysctl knobs, etc. (if you want to try it out)
• And speaking of Adrian Chadd…

Interview – Adrian Chadd – adrian@freebsd.org / @erikarn

BSD on laptops, wifi, drivers, various topics

News Roundup

Sendmail removed from OpenBSD

• Mail server admins around the world are rejoicing, because sendmail is finally gone from OpenBSD
• With OpenSMTPD being a part of the base system, sendmail became largely redundant and unneeded
• If you’ve ever compared a “sendmail.cf” file to an “smtpd.conf” file… the different is as clear as night and day
• 5.6 will serve as a transitional release, including both sendmail and OpenSMTPD, but 5.7 will be the first release without it
• If you still need it for some reason, sendmail will live in ports from now on
• Hopefully FreeBSD will follow suit sometime in the future as well, possibly including DragonFly’s mail transfer agent in base (instead of an entire mail server)

pfSense backups with pfmb

• We’ve mentioned the need for a tool to back up pfSense configs a number of times on the show
• This script, hosted on github, does pretty much exactly that
• It can connect to one (or more!) pfSense installations and back up the configuration
• You can roll back or replace failed hardware very easily with its restore function
• Everything is done over SSH, so it should be pretty secure

The Design and Implementation of the FreeBSD Operating System

• We mentioned when the pre orders were up, but now “The Design and Implementation of the FreeBSD Operating System, 2nd edition” seems to be shipping out
• If you’re interested in FreeBSD development, or learning about the operating system internals, this is a great book to buy
• We’ve even had all three authors on the show before!

OpenBSD’s systemd replacement updates

• We mentioned last week that the news of OpenBSD creating systemd wrappers was getting mainstream attention
• One of the developers writes in to Undeadly, detailing what’s going on and what the overall status is
• He also clears up any confusion about “porting systemd to BSD” (that’s not what’s going on) or his code ever ending up in base (it won’t)
• The top comment as of right now is a Linux user asking if his systemd wrappers can be ported back to Linux… poor guy

Feedback/Questions

• Brad writes in
• Ben writes in
• Mathieu writes in
• Steve writes in

• All the tutorials are posted in their entirety at bsdnow.tv
• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv – we’d love to hear from you!
• Last week we mentioned that Ken was looking for help to port Lumina to other BSDs, and now it’s been done for OpenBSD and DragonFly – so now you can try it out there too
• Antoine Jacoutot sent a screenshot of Lumina on OpenBSD
• We’ll be at EuroBSDCon soon, so there will be a prerecorded episode next week
• When we’re not in Europe, you can usually watch live Wednesdays at 2:00PM Eastern (18:00 UTC)

The post The Promised WLAN | BSD Now 55 first appeared on Jupiter Broadcasting.

We double down on your follow up. Working remotely, scratching your itch while at your current job, why we missed Heartbleed & the video that will make you never again complain about how hard something is.

Plus why you should write code every day, the hard numbers about mobile games & more!

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

— Show Notes: —

Follow up / Feedback

• Database Versioning
• Career Course Correction
• Remote work
• About Working Remotely
• Reading the OpenSSL Code base
• In House Github
• Tips for hiring?
• PHP to PDF Options (Question from Episode 98)

Dev Hoopla

• Weaving software into core memory by hand – YouTube
• Episode 100 plans

The post Is That a Weave? | CR 99 first appeared on Jupiter Broadcasting.

As the final hours countdown we chat about the fate of the Ubuntu Edge campaign and debate with our live callers about the bigger picture.

Plus our thoughts on the new KDE release, Steam, and a few more thoughts on elementary OS.

Thanks to:

Ting.com Use our code visit linux.ting.com.
UnitySync Visit dirwiz.com/unitysync use code linux for an extended trial and a year of maintenance.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed | WebM Torrent Feed

• Upgraded to KDE 4.11 this AM before Coder Radio. Audio problems better?

The rate of games coming to Linux. I check for new games weekly now, and almost install two or three new games a week. This is amazing.

We need to track Steam better as a community. Each month the numbers come out we don\’t have any good visualization of how we are doing. Asymco for Apple for example.

• why hasn’t ubuntu edge made 32 million yet?

• roll your own email? // Slexy 2.0

• Linux Games: Before it was cool

Luna OS review Forgot:

• Good desktop for developers. Ubuntu LTS compatibility/support with simple UI to let them focus.

• App indicators work

• In a couple years high end OEMs like System76 might move to Elementary OS if Ubuntu totally jumps the mobile shark

• They plan to go w/Wayland, not Mir. Big diff from Ubuntu.

The post Edge of Failure | LINUX Unplugged 2 first appeared on Jupiter Broadcasting.

Our straightforward approach to setting up Remote access to a Linux, Windows, or Mac. Control your desktop from your mobile device, or another computer.

PLUS: An overview of the Drives for Jupiter project, why Chris went with FreeNAS, the joys of NFS, an epic announcement….

AND SO MUCH MORE!

All this week on, The Linux Action Show!

Thanks to:

GoDaddy.com Use our code linux249 to score .COM for just $2.49! For new orders save 32% with our code go32off2
Ting.com Visit las.ting.com to save $25 off your device or service credits.

Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | Ogg Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Feed | Ogg Feed | iTunes Feeds | Torrent Feed

Support the Show:

— Show Notes: —

Remote Linux Desktop with Splashtop

Brought to you by: System76

• Splashtop Streamer for Linux | Splashtop

Splashtop Streamer is a high-performance audio-video streaming server, enabling remote access from an Android device (tablet/phone) or an iOS device (iPad/iPhone/iPod). You can connect within a Local Area Network or through a cross-network or Internet connection.

Due to its efficient protocol, algorithms and optimizations, Splashtop has been shown in performance benchmarks to deliver up to 15x higher video frame rates and up to 10x lower latency times than its competition. Splashtop sessions are secured with SSL and 256-bit AES encryption, allowing it to serve as a secure pipe between devices, in some cases allowing users to eliminate their need for separate VPN solutions.

• Splashtop Streamer for Ubuntu Controls Your Linux Desktop, Streams Video, and More

Just like its Windows and Mac versions, Splashtop Streamer for Linux aims to be a faster way to connect to your desktop PC from a mobile device. Coupled with the Splashtop apps for iOS and Android, you can view or edit files, run Linux programs, stream music and videos, and more right from your iPhone, iPad, or Android device.

• Splashtop For Linux Claims 10x Performance Advantage

While at first it seems boring yet another remote desktop application for Linux when there’s already VNC and friends, the features offered are fairly interesting. In the press release being issued today, Splashtop claims a 10x performance advantage over VNC.

Splashtop 2 client devices can connect to a remote computer running Ubuntu and the company attributes their “efficient protocol, algorithms, and optimizations” that allow it to deliver 10x the performance over VNC in latencies. Splashtop also claims 15x higher video frame-rates than the competition. I haven’t yet tried out this software on Linux myself so I cannot attest to these performance claims.

• Splashtop Streamer for Ubuntu Linux (Beta) — Ubuntu Apps Directory

Installing to Splashtop to Arch:

1. For the machine to be accessed, server even, install splashtop-streamer.
2. For the client, install splashtop-client and for your phone, Splashtop 2 Remote Desktop.

---

– Picks –

Runs Linux:

• SAM, Runs Linux (Sample Analysis at Mars) had a Birthday

• Sent in by Jeff

Android Pick:

• GrooVe IP

Desktop App Pick:

• Guacamole – HTML5 Clientless Remote Desktop

• Picks so far

• Madjo

Search our past picks:

• LASAppPicks

Git yours hands all over our STUFF:

• Jupiter Broadcasting Affiliate Extensions
• Callisto-app – Google Project Hosting
• Quick Update to the Jupiter Broadcasting Android App

---

— NEWS —

• Ubuntu Edge Price Lowered Again, Now Fixed At $695

• Bloomberg Pledge $80,000 to Ubuntu Edge Campaign

• Updated: Bloomberg signs up for $32M Ubuntu Edge fundraiser and Canonical cuts pricing

• “Hand of Thief” banking trojan doesn’t do Windows—but it does Linux

• OS X apps run on Linux with Wine-like emulator for Mac software

• SOL Laptop Gets Specs

• The Road to Luna

• How about elementary OS review on LAS?

• elementary OS

• KDE Connect: Fusion your devices with KDE

— /etc: Managing 24TB For Fun and Profit —

Brought to you by: Untangle

• WD Red 3 TB NAS Hard Drive: 3.5 Inch, SATA III, 64 MB Cache – WD30EFRX

• Mediasonic H82-SU3S2 ProBox 8 Bay External Hard Drive Enclosure with USB 3.0 & eSATA

• HighPoint RocketRAID 642L 2 SATA 6Gb/s and 2 eSATA 6Gb/s Ports PCI-Express 2.0 x4 SATA III Controller Card

• iXsystems, Inc. – FreeNAS® Mini/Mini Plus

• Multiple arrays part of my Pool

• Using RAIDZ2

• Drives for Jupiter Album

– Feedback: –

• FreeNAS Woes

• Send a Bitmessage to LAS:

BM-GuJRSMgViBNXnafzuRQL3tpHHFSJQ5Wm

— Chris’ Stash —

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— What’s Matt Doin? —

• Hell froze over, Matt’s on Facebook

— Find us on Google+ —

• Chris
• Matt Hartley
• Jupiter Broadcasting’s Page

— Find us on Twitter —

• Chris – ChrisLAS
• Matt – matthartley

— Follow the network on Facebook: —

• Jupiter Broadcasting on Facebook

— Catch the show LIVE Sunday 10am Pacific / 1pm Eastern / 6pm UTC: —

• https://jblive.tv
• Network Calendar

The post Easy Linux Remote Desktop | LAS s28e03 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/41227/office-hours-cr-61/ Mon, 05 Aug 2013 12:38:12 +0000 https://original.jupiterbroadcasting.net/?p=41227 The guys struggle with classic work/life balance. Dealing with the unique circumstances of working at home, why it’s not the dream 9-to-5 types picture.

The post Office Hours | CR 61 first appeared on Jupiter Broadcasting.

]]>

Mike and Chris bare it all on their classic work/life balance struggles. Dealing with the unique circumstances of working at home, why it’s not the dream 9-to-5 types picture.

Plus your feedback, a few follow ups and much more!

Thanks to:

GoDaddy.com Use our code coder249 to get a .COM for $2.49.
UnitySync Visit dirwiz.com/unitysync use code coder for an extended trial and a year of maintenance.

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Feedback

• Chris’ random mailbag grab.
• Send in your feedback for next week!

Missed your chance to call? Leave us a voicemail:

• 1 (425) 374-4847

The Dream Turns to a Nightmare:

• Home Economics: The Link Between Work-Life Balance and Income Equality – Stephen Marche – The Atlantic

The central conflict of domestic life right now isn\’t men versus women or mothers versus fathers; it\’s the family against money.

• 8 Ways To Achieve Better Work-Life Balance

Achieving the elusive \”work-life balance\” can often feel like an impossible goal, especially for people who strive to give everything 100%. In today\’s \”do more with less\” competitive reality, how can we manage careers and families, and feel satisfied with both?

• 3 Golden Rules For Working From Home – SitePoint

Expectations

The main problem with working from home is everyone\’s expectations.

• your expectations* your family and friends expectations* your clients\’/ employer\’s expectations.

• Technology and Expectations: Myths About Working From Home

However, since more and more people have switched to working at home, there are still some wrinkles to be ironed out with respect to the general public\’s expectations.

Follow Up:

• Apple sends out developer update: planning to restore most of the remaining services this week

Apple has been slowly restoring their Developer Center, and today the company has sent out an email update to developers regarding the restorations to take place this week:

We sincerely appreciate your patience as we work to bring our developer program services back online, and we want to give you an update on our progress. The majority of our developer services are currently online, including Certificates, Identifiers & Profiles, Dev Centers, software downloads, Videos, Apple Developer Forums, iTunes Connect, Bug Reporter, App Store Resource Center, and access to pre-release documentation.

We plan to reinstate most of the remaining services this week: Xcode automatic configuration as well as access to license agreements, TSIs, program enrollments, and renewals in Member Center. You can check the availability of these systems on our status page.

As a reminder, if your membership was set to expire during this downtime, it has been extended and your apps will remain on the App Store and Mac App Store.

We apologize for the significant inconvenience that our downtime has caused and encourage you to reach out to our support team if you need any assistance.

Book Pick:

[asa]B0052RDIXW[/asa]

Follow the show

• Email the show
• Join the Coder Radio Subreddit
• Live Monday 9am PST
• Music by: Ronald Jenkees
• Mike on Twitter
• Mike on Google+
• Mike’s website
• Chris on twitter
• Chris on Google+

The post Office Hours | CR 61 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/40802/ethically-hacked-techsnap-120/ Thu, 25 Jul 2013 19:17:35 +0000 https://original.jupiterbroadcasting.net/?p=40802 A huge amount of SIM cards are susceptible to an Over the Air attack, Apple’s hacker outs himself, and the trouble with the Ubuntu forums!

The post Ethically Hacked | TechSNAP 120 first appeared on Jupiter Broadcasting.

]]>

A huge amount of SIM cards are susceptible to an Over the Air attack, Allan’s got the details, Apple’s hacker outs himself, and the trouble with the Ubuntu forums!

Plus a batch of your questions, and much much more!

Thanks to:

GoDaddy.com Use our code tech249 to score .COM for $2.49! Get private registration FOR FREE with a .COM! code: free5
Ting.com Visit techsnap.ting.com to save $25 off your device or service credits.

Direct Download: HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | HD Torrent | Mobile Torrent RSS Feeds: HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feeds | Torrent Feed

---

Security Researcher Claims Apple Developer Website Hack

• Apple\’s Developer Center first went offline last Thursday, and on Sunday, Apple revealed that it had been taken down as a precaution after a security breach. It is unclear who was responsible for the hacking, but a security researcher, Ibrahim Balic has suggested that he might be to blame for the outage.
• The company added that critical developer data had not been compromised and that they were working day n’ night to fix the vulnerability and bring the site back online.
• According to 9 to 5 Mac adds that, “In an email… Balic … is persistent in stating he did this for security research purposes and does not plan to use the information in any malicious manner.”
• The comment comes from independent security researcher Ibrahim Balic, who claims that his effort was not intended to be malicious and that he reported his findings to Apple just hours before the developer site was taken down by the company.
• Balic, who has reported 13 different bugs to Apple, originally discovered an iAd Workbench vulnerability on June 18 that allowed a request sent to the server to be manipulated. This security hole could be used to acquire the names and email addresses of iTunes users (even non-developers).
• After finding the loophole, Balic wrote a Python script to harvest data from the vulnerability and then displayed it in a YouTube video, which may have put him on Apple\’s radar.
• In addition to the iAd Workbench bug, Balic also discovered and submitted a report on a bug that caused the Dev Center site to be vulnerable to a stored XSS attack. While Balic says that it was possible to access user data by exploiting the Dev Center issue, he claims that he did not do so.
• New Details Emerge on Security Researcher Potentially Responsible for Dev Center Outage s
• Apple Outlines Plan for Bringing Developer Center Back Online
  Additional Coverage

---

Ubuntu Forums compromised

• The forums were defaced and the database compromised
• There were approximately 1.82 million registered accounts in the forum database
• Attackers have access to each of these user\’s username, password and email address
• The passwords were salted hashes, but by which algorithm was not made clear. Where these cryptographic hashes, or just md5(salt+md5(password)) or similar like some forum software?
• If you were a registered user, and reused that password anywhere else, you are likely going to have a bad time
• “Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach”
• Timeline:
• 2013-07-20 2011 UTC: Reports of defacement
• 2013-07-20 2015 UTC: Site taken down, this splash page put in place while investigation continues.
• 2013-07-21: we believe the root cause of the breach has been identified. We are currently reinstalling the forums software from scratch. No data (posts, private messages etc.) will be lost as part of this process.
• 2013-07-22: work on reinstalling the forums continues.

---

Feedback:

TechSNAP Bitmessage: BM-GuGEaEtsqQjqgHRAfag5FW33Dy2KHUmZ

• Voicemail from OSCON
• 389 Directory Server (Open Source LDAP)

The enterprise-class Open Source LDAP server for Linux. It is hardened by real-world use, is full-featured, supports multi-master replication, and already handles many of the largest LDAP deployments in the world. The 389 Directory Server can be downloaded for free and set up in less than an hour using the graphical console.

• Too many VMs in One Place?

• An Excellent Chance to Talk about FreeBSD for Allan!

• PPA for PHP5 : Ondřej Surý

• How does one learn how to become a PenTester?

  • Metaspolitable
  • Backtrack view by example
• Linux Drive Recovery | LAS s27e10 | Jupiter Broadcasting

Round Up:

• Feds Demand the Keys, Preparing for the Death of Public-Key Encryption
• The UNIX Issue of the Bell System Technical Journal turns 35 Spotted by Poul-Henning Kamp @bsdphk
• UK MP leading the charge for default blocking porn, has website hacked and filled with porn, accuses random blogger who comments on it of being behind the attack #doesnotknowhowtheinternetworks
• MIT Uses Machine Learning Algorithm To Make TCP Twice As Fast
• NSA says it cannot search its own emails to fulfill FOIA requests
• US-CERT releases advisory about DNS Amplification attacks, includes configuration suggestions to prevent your servers from being part of an attack
• True tales of white-hat hacking

---

The post Ethically Hacked | TechSNAP 120 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/39887/who-watches-the-monitors-techsnap-117/ Thu, 04 Jul 2013 18:46:14 +0000 https://original.jupiterbroadcasting.net/?p=39887 Extending your office LAN for remote office workers, monitoring the monitoring service, and Zynga's embarrassing Apache error.

The post Who Watches the Monitors | TechSNAP 117 first appeared on Jupiter Broadcasting.

]]>

Extending your office LAN for remote office workers, monitoring the monitoring service, and Zynga\’s embarrassing Apache error.

Plus a HUGE batch of your questions, our answers, and much much more!

Thanks to:

GoDaddy.com Use our code tech249 to score .COM for $2.49! Get private registration FOR FREE with a .COM! code: free5
Ting.com Visit techsnap.ting.com to save $25 off your device or service credits.

Direct Download: HD Video | Mobile Video | MP3 Audio | Ogg Audio | YouTube | HD Torrent | Mobile Torrent RSS Feeds: HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feeds | Torrent Feed

Show Notes:

Monitoring the Monitors

• An interesting short article from USENIX that raises the question of how do you monitor your monitoring system?
• The article breaks the monitor monitoring systems down based on their features:
• Automated vs. manual execution
• Automated vs. manual response
• Destructive vs. non-destructive response
• Monitoring vs. monitoring of notification services
• For example, a “dead-man switch” is an example of an automated execution (releasing the trigger happens automatically), automatic response (no other action is required to cause the response) and is generally destructive
• Another complication of monitoring systems is how do you monitor the notification service?
• If the sysadmin gets notified that a service is down via text message, how do you ensure they actually got the text message?
• One solution mentioned in the article is sending a text message to the on-duty admin at the start of each ‘shift’. If they do not get this message, they know something is wrong and investigate
• A better solution to this may be a similar alert that they must acknowledge it, possible before the off-going sysadmin is allowed to leave
• It is quite possible to ‘miss’ an event, especially when it becomes routine. If you get a text message every morning at 9am, would you notice if you didn’t get it one day?
• Instead, what if the text message contained a URL you had to visit in order to acknowledge the message, else the alert would repeat and eventually escalate

---

A Secure Processor Architecture

• A system designed to prevent someone with access to a system from determining what other operations are happening on that system
• Seems relevant to our previous discussion about how from inside one VM you could collect enough data to disclose the private encryption keys of another VM running on the same physical hardware
• The described system, ‘Ascend’ features ‘Obfuscated Instruction Execution’ and ‘Oblivious RAM’

---

Zynga directs support inquiries to a random stranger

• When Zynga users were confronted with an HTTP Error 500 page from the fb.themepark.zynga.com server, it told them to email someone @themepark.com which they did not actually own
• It appears Zynga uses Apache as their web server (no wonder they were throwing 500 errors under load), and had misconfigured the ‘ServerAdmin’ directive, so the error pages contained this incorrect email address
• The unfortunate recipient of emails from many whiny facebook gamers complained to Zynga, but got no response
• So he decided to have some fun with it, and wrote back responses trolling the users
• “I know that For Canada Day, the engineering department wraps the .ca servers in Canadian flags, and then sets a plate of poutine on top. This sometimes can cause the server to overheat, and sometimes even get gravy into the login/logout module.”

---

Feedback:

[asa]B008U5ZNIG[/asa]

• Michael asks about setting up a VPN for remote office workers
• Requires the pfSense ‘tap fix’, install it from the pfSense packages menu

• OpenVPN Bridge Mode How-To for pfSense

• Virtual Box / VmWare images

• How do you direct pfsense to direct packets sent to the gateway back to the local subnet?

• pfSense Performance Issue Followups

• Router DNS Caching?

• What is some advice you can give people starting out as a contractor or service provider?

• What is your backup?

• Secure lan messaging server

• First FreeBSD Desktop Questions

• Follow up on FreeBSD Media Server

Roundup:

• McAfee report: Average firm takes 10 hours to detect a securit breach
• Security update regarding your Ubisoft account – please create a new password
• Problem with Android digital signature checking means all android devices will accept a maliciously modified package as being unmodified
• Nginx just became the most used web server among the top 1000 websites
• California’s Attorney General wants to crack down on companies that do not encrypt data
• DecryptoCat – TobTu
• What can you learn about someone from 6 months worth of ‘metadata’
• Mastercard and Visa Start Banning VPN Providers
• Alcatel Lucent develops first gigabit DSL

The post Who Watches the Monitors | TechSNAP 117 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/32452/office-hours-cr-38/ Mon, 25 Feb 2013 11:43:08 +0000 https://original.jupiterbroadcasting.net/?p=32452 Yahoo disappoints with their high-profile announcement that all remote workers must return to their cubes. And why this encourages a culture of “B-Players”.

The post Office Hours | CR 38 first appeared on Jupiter Broadcasting.

]]>

Yahoo disappoints Mike and Chris with their high-profile announcement that all remote workers must return to their cubes. We’ll get into why this encourages a culture of “B-Players”, and serves as a disservice to the entire industry.

Plus the awkward gadget habit our jobs can force us to have, the possibilities Sony’s PS4 could present indie game devs, an honest look at the Chrome Pixel, and much more!

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

— Show Notes —

Feedback

• Oliver is moving away from Rails to Play
• I confused Dave re the OracleJDK and OpenJDK
• Re my iPhone 5

Dev World Hoopla

• No more remote work at Yahoo by David of 37signals
• Xamarin Studio
• Indie devs flock to PS4 to self-publish, how The Witness became PS4 exclusive
• Chrome Pixel
• Chromebook Pixel review

Tool of the Week

• TM Theme Editor

Pick of the week

• TechSNAP 100 Shirt

Follow the show

• Email the show
• Live Monday 9am PST
• Music by: Ronald Jenkees
• Mike on Twitter
• Mike on Google+
• Mike’s website
• Chris on twitter
• Chris on Google+

The post Office Hours | CR 38 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/13468/great-disk-famine-techsnap-30/ Thu, 03 Nov 2011 17:15:36 +0000 https://original.jupiterbroadcasting.net/?p=13468 Hard Drives are in very short supply, find out why. Plus Anonymous says it’s going after a Mexican Drug Cartel, we’ll share you the amazing details

The post Great Disk Famine | TechSNAP 30 first appeared on Jupiter Broadcasting.

]]>

Anonymous says it’s going after a Mexican Drug Cartel, we’ll share you the amazing details!

Plus: Our tips for controlling remote downloads, and why all I’m going to want for Christmas is hard drives!

All that and more, on this week’s TechSNAP!

Thanks to:

GoDaddy.com Use our codes TechSNAP10 to save 10% at checkout, or TechSNAP20 to save 20% on hosting!

Pick your code and save:

techsnap7: $7.49 .com
techsnap10: 10% off
techsnap20: 20% off 1, 2, 3 year hosting plans
techsnap40: $10 off $40
techsnap25: 25% off new Virtual DataCenter plans

 

Direct Download Links:

HD Video | Large Video | Mobile Video | MP3 Audio | OGG Audio | YouTube

Subscribe via RSS and iTunes:
Subscribe... --RSS-- TechSNAP HD TechSNAP Large TechSNAP Mobile TechSNAP MP3 TechSNAP OGG --iTunes-- TechSNAP iTunes HD TechSNAP iTunes Mobile TechSNAP iTunes Large TechSNAP iTunes MP3
[ad#shownotes]

Show Notes:

Anonymous says it will go after Mexican Drug Cartel

• Anonymous claims one of its members was kidnapped at a street protest
• Anonymous claims it will start releasing details about journalists, taxi drivers, police officers and government officials who are on the Cartel’s payroll, if the kidnap victim is not released by November 5th (Guy Fawkes Day)
• No information about the person who was allegedly kidnapped has been released
• Anonymous hopes that releasing this information, the government will be able to pursue the allegedly corrupt officials. However, depending on the type of information, it is unlikely that the evidence provided would be enough to convict someone.
• There are serious concerns that the release or even the threat of the release of such information could result in a violent backlash from the Cartel.
• It would seem that anyone who’s name appears on the lists released by anonymous would be in serious danger. A case of mistaken identity or speculation could result in the death of an innocent person.
• Anonymous has claimed it would attack a number of entities, including the NYSE and Facebook, a large number of these attacks have never taken place, or were unsuccessful and never mentioned again.

---

Series of spear phishing attacks against chemical and defense companies

• At least 50 different companies were targeted by attackers attempting to steal research and development documents and other sensitive information.
• The attacks started in July, and continued through September, it is also believed that the same attackers were targeting NGOs and the auto industry earlier this year.
• The attacks where spear phishing attacks, a specialized form of the common email attack. Unlike a typical phishing scam, where an attacker poses as your bank and attempts to get you to enter your login credentials and other personal information in to a fake site designed to mimic the look of your banks site, a spear phishing attack specifically targets individuals, using information that is known about them and where they work. Spear Phishing attacks also commonly involve impersonating someone you might expect to receive such an email from.
• The emails sent in this case often took the form of meeting invitations with infected attachments. In other cases when the messages were broadcast to many victims, they took the form of security bulletins, usually riding on actual vulnerability announcements for common software such as Adobe Reader and Flash Player. It also seems the attackers attached the infected files in 7Zip format, to evade many spam filters and virus scanners that block or scan .zip files. The attackers also took to encrypting the zip files with a password, and providing that password in the email, again to avoid virus scanners on the inbound mail servers.
• This attackers used PoisonIvy, a common backdoor trojan written by one or more persons who speak Mandarin. The Trojan also contained the address of a Command and Control (C&C) server used to feed it additional instructions.
• Once the attackers made their way in to the network through one or more infected machines, they leveraged that access to eventually gain permissions to copy sensitive documents and upload them to an external server where they could then be recovered.
• One of the command and control servers was a VPS operated in the United States, owned by a Chinese individual from Hebei province. Investigators have not been able to determine if this individual was part of the attacks, if anyone else had access to the VPS, or if he was acting on behalf of another group. It is possible the server was compromised, or that it could have been made to look like that was the case.
• Symantec says that there were a number of different groups attacking these companies during this time span, some using a custom developed backdoor called ‘Sogu’ and using specially crafted .doc and .pdf files. There is no word on if these additional attacks were also successful.
• Full Report

---

Feedback:

• Remote Downloads?
• Q: I have a question regarding downloads, in particular, remote downloads.
• A: There are a number of options, ranging in capability and ease of use.
• rTorrent – A command line torrent client, works great over SSH (especially when combined with Screen). This is what Allan uses to seed the Linux Action Show torrents.
• uTorrent – uTorrent (microTorrent) is available for windows, mac and linux. It offers an optional web UI (the web UI is the only option for linux) for remotely controlling the torrents, and can also automatically start downloading torrents when they are placed in a specified directory. uTorrent also incorporates an RSS reader.
• wget – is a standard command line downloading tool included in most GNU Linux distros. Also available for windows
• curl – A library and utility for dealing with http, it is a common feature of most web hosting servers, and easily integrates with PHP. You could write a short PHP script that would download files to the report server when prompted (possibly by an email or access from your mobile phone)

Round UP:

• Windows Kernel Zero Day Vulnerability Found in Duqu Installer
• Stop Online Piracy Act Introduced in the House
• Data points to China as source of March RSA breach, wider attacks
• Authorities Seize Duqu’s C&C Servers in India
• AWS Load Balancer Sends 2 Million Netflix API Reqs To Wrong Customer
• Mac OS X Trojan steals processing power to produce Bitcoins

The post Great Disk Famine | TechSNAP 30 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/12691/virtualbox-pros-and-beginners-las-s18e10/ Sat, 08 Oct 2011 21:09:42 +0000 https://original.jupiterbroadcasting.net/?p=12691 VirtualBox is a power house Virtualization wizard! We’ll show you how to get off the ground, and how to pull tricks so fancy you’ll be the hit of the party!

The post VirtualBox: Pros and Beginners | LAS | s18e10 first appeared on Jupiter Broadcasting.

]]>

VirtualBox is a power house Virtualization wizard! We’ll show you how to get off the ground, and how to pull tricks so fancy you’ll be the hit of the party!

PLUS – Big news updates from HTC, Kernel.org, Red Hat and more!

Thanks to:

GoDaddy.com Use our codes LINUX to save 10% at checkout, or LINUX20 to save 20% on hosting!

Direct Episode Download Links: HD Video | Large Video | Mobile Video | MP3 | OGG Audio | OGG Video | WebM Video | YouTube

Subscribe…— The Linux Action Show! —iTunes MP3iTunes Large VideoiTunes iPod VideoLarge Video RSSiPod Video RSSMP3 Audio RSSOgg Audio RSS— ALL SHOWS —iTunes Large VideoiTunes MP3Large Video RSSMP3 Audio RSSOGG Audio RSS— PODCAST NETWORKS —StitcherMiroZuneiTunes

[ad#shownotes]

Episode Show Notes:

Runs Linux:

Juniper’s Junosphere Lab, Runs Linux

Android Pick:

• 1980s TV Trivia
• Android Picks so far thanks to Madjo in the IRC Chat room!

Universal Pick:

• PlayTerm – Replay your Terminal Recordings Online!
• Picks so far

Should LAS go Season less? RESULTS:

• Yes! 49.43%
• No! 35.63%
• Flip a coin! 14.94%

Linux Action Show Subreddit

• Linux Action Show Subreddit

News:

• HTC acknowledges security vulnerability, patch already in development
• Red Hat Acquiring Cloud Storage Company Gluster – Slashdot
• OpenStack spinning off from RackSpace
• Linux Tablet Will Be Fully Open Source
• Native Netflix Client Coming to Linux ‘In The Next 12 Months’
• Kernel.org is back [LWN.net]
• The Humble Frozen Results

VirtualBox

• Can you run virtualbox headless?
• VBoxHeadless
• USB device to virtualbox?
• VirtualBox/USB – Community Ubuntu Documentation
• How to enable USB support in Virtualbox
• Virtual adapters and bridges.
• Remote desktop feature of Virtual box. Is there a client?
• Can VBox run off a physical device instead of a vhd

Find us on Google+

• Chris
• Allan

Find us on Twitter:

• Chris – ChrisLAS
• Allan – AllanJude

Follow the network on Facebook:

• Jupiter Broadcasting on Facebook

Catch the show LIVE Sunday 10am PDT:

• https://jblive.tv
• Network Calendar

The post VirtualBox: Pros and Beginners | LAS | s18e10 first appeared on Jupiter Broadcasting.

]]>