Romania – Jupiter Broadcasting https://www.jupiterbroadcasting.com Open Source Entertainment, on Demand. Thu, 07 Apr 2016 16:44:35 +0000 en-US hourly 1 https://wordpress.org/?v=5.5.3 https://original.jupiterbroadcasting.net/wp-content/uploads/2019/04/cropped-favicon-32x32.png Romania – Jupiter Broadcasting https://www.jupiterbroadcasting.com 32 32 Holding Hospitals Hostage | TechSNAP 261 https://original.jupiterbroadcasting.net/98616/holding-hospitals-hostage-techsnap-261/ Thu, 07 Apr 2016 08:44:35 +0000 https://original.jupiterbroadcasting.net/?p=98616 Find out about another hospital that accidentally took advantage of free encryption, researchers turn up a DDoS on the root DNS servers & the password test you never want to take. Plus your batch of networking questions, our answers & a packed round up! Thanks to: Get Paid to Write for DigitalOcean Direct Download: HD […]

The post Holding Hospitals Hostage | TechSNAP 261 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

Find out about another hospital that accidentally took advantage of free encryption, researchers turn up a DDoS on the root DNS servers & the password test you never want to take.

Plus your batch of networking questions, our answers & a packed round up!

Thanks to:


DigitalOcean

Ting

iXsystems

Direct Download:

HD Video | Mobile Video | MP3 Audio | OGG Audio | YouTube | HD Torrent | Mobile Torrent

RSS Feeds:

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Patreon

Show Notes:

Researchers at VeriSign investigate DDoS on root DNS servers

  • Researchers from VeriSign, the company that runs the .com and .net registries, and operations 2 of the 13 critically import root DNS servers, will be giving a talk at a conference detailing their investigation into the attack
  • Their findings suggest the attack, which took place in November of 2015, was not directed at the root name servers directly, but was an attempt to down two chinese websites
  • The attack had some interesting patterns, likely caused by design decisions and mistakes made by the programmer of the botnet that was used in the attack
  • The provide a video showing a breakdown of the attack
  • It was interesting to learn that Randall Munroe (of XKCD fame) actually came up with the best way to visualize the distribution of IP addresses, with a grid where sequential numbers are in adjacent squares
  • Only IP addresses in the first 128 /8 netbooks were used. The use of 128/8 specifically suggests an less than or equal, rather than an equal was used during the comparison of IP addresses
  • It is not clear why a larger set of addresses were not used
  • The attack seemed to use 3 or 4 different groups of bots, sending spoofed DNS requests
  • Two of the larger groups of bots sequentially cycled through the 2.0.0.0/8 through 19.0.0.0/8 subnets at different speeds
  • Attacks were not seen from the 10.0.0.0/8 and 127.0.0.0/8 networks, for obvious reasons
  • However, a delay in the attacks sourced from 11.0.0.0/8 suggests that the botnet attempted to use the entire 10 block, but the packets just never left the source networks
  • “The researchers also note that Response Rate Limiting was an effective mitigation in countering up to 60 percent of attack traffic. RRL is a feature in the DNS protocol that mitigates amplifications attacks where spoofed DNS queries are used to target victims in large-scale DDoS attacks.”
  • “In addition to RRL, the researchers said attack traffic was easily filterable and through filtering were able to drop response traffic for the attack queries, leaving normal traffic untouched. One of the limitations with this approach is that it’s a manual process”

Virus hits Medstar hospital network, Hospital forced to shutdown systems

  • “The health system took down some its computers to prevent the virus from spreading, but it’s not clear how many computers — or hospitals — are affected”
  • “A statement by the health system said that all facilities remain open, and that there was “no evidence of compromised information.””
  • “The not-for-profit healthcare system operates ten hospitals across the Washington and Baltimore region, with more than a hundred outpatient health facilities. According to the system’s website, it has more than 31,000 employees and serves hundreds of thousands of patients annually.”
  • “One visitor to the hospital told ZDNet that staff switched the computers off after learning about the virus. The person, who was visiting a patient in one of the healthcare system’s Washington DC hospital, said the computers were powered off for more than an hour, with all patient orders lost, the person said.”
  • “It’s not clear exactly what kind of malware was used in Monday’s cyberattack. A spokesperson for MedStar Health did not immediately respond to a request for comment.”
  • An FBI spokesperson confirmed that it was “aware of the incident and is looking into the nature and scope of the matter.”
  • Additional Coverage: Threat Post
  • After a few days, the medical network was recovering
  • “The healthcare provider said the attack forced it to shut down its three main clinical information systems, prevented staff from reviewing patient medical records, and barred patients from making medical appointments. In a statement issued Wednesday, it said that no patient data had been compromised and systems were slowly coming back online.”
  • “Clinicians are now able to review medical records and submit orders via our electronic health records. Restoration of additional clinical systems continues with priority given to those related directly to patient care”
  • “While the hospital still won’t officially confirm the attacks were ransomware related, The Washington Post along with other news outlets are reporting that employees at the hospital received pop-up messages on their computer screens seeking payment of 45 Bitcoins ($19,000) in exchange for a digital key that would decrypt data”
  • “The MedStar cyberattack is one of many hospitals in recent months targeted by hackers. Last week, Kentucky-based Methodist Hospital paid ransomware attackers to unlock its hospital system after crypto-ransomware brought the hospital’s operations to a grinding halt. Earlier this year Los Angeles-based Hollywood Presbyterian Medical Center paid 40 Bitcoin ($17,000) to attackers that locked down access to the hospital’s electronic medical records system and other computer systems using crypto-ransomware.”
  • As long as hospitals continue to pay out, this will only grow to be a worse problem
  • “Medical facilities don’t give security the same type of attention that other verticals do,” said Craig Williams, senior technical leader for Cisco Talos. “They are there to heal people and cure the sick. Their first priority is not to take care of an IT environment. As a result it’s likely the hackers have been out there for quite some time and realized that there are a lot (healthcare) sites that have a lot of base vulnerabilities.”
  • As you might expect: 1400 vulnerabilities to remain unpatched in medical supply system
  • Additional Coverage
  • In related news:
  • Canadian hospital website compromised serves up the Angler malware kit to visitors
  • The site is for a hospital in a small city that serves a mostly rural area. Happens to be where I grew up, and the hospital I was born in
  • The hospital site is run on Joomla, and is running version 2.5.6, which has many known vulnerabilities. The latest version of Joomla is 3.4.8
  • “Like many site hacks, this injection is conditional and will appear only once for a particular IP address. For instance, the site administrator who often visits the page will only see a clean version of it, while first timers will get served the exploit and malware.”
  • The obvious targets are “staff, patients and their families and visitors, as well as students”
  • The hospital became a teaching facility for McMaster University’s Faculty of Health Sciences in 2009
  • “The particular strain of ransomware dropped here is TeslaCrypt which demands $500 to recover your personal files it has encrypted. That payment doubles after a week.”

CNBC Password Tester — How not to do it

  • CNBC has a post about constructing secure passwords
  • The basic idea was that you submit your password, and it tells you how strong it is
  • There are obvious problems with this idea. Why are you giving out your password anyway?
  • Of course, the CNBC site is served in plain text (which is fine for a news site), but it means your password is sent to them in the clear
  • Worse, they had the site adding all of the submitted passwords to a google spreadsheet, also in the clear
  • Because the password was submitted as a GET variable, and was in the URL, it was also included in the referral information sent to all of the advertising networks in the CNBC site, including DoubleClick, ScoreCardResearch, something hosted at Amazon AWS, and any other widgets on the site (Facebook, Gigya)
  • If you actually did want to build a tool like this, at least use javascript to perform the calculations on the users’ device and never transmit their passwords
  • Of course, users should never type the password into another website. This is the definition if a phishing attack
  • The page has since been removed
  • Additional Coverage

Feedback:

Round Up:

The post Holding Hospitals Hostage | TechSNAP 261 first appeared on Jupiter Broadcasting.

]]> Meteorites & Lasers | SciByte 38 https://original.jupiterbroadcasting.net/18136/meteorites-lasers-scibyte-38/ Tue, 20 Mar 2012 21:43:26 +0000 https://original.jupiterbroadcasting.net/?p=18136 We take a look at more Lego’s into space and near space, Venus transit, a meteorite that crashed through a cabin, guiding lightning with lasers, and more!

The post Meteorites & Lasers | SciByte 38 first appeared on Jupiter Broadcasting.

]]>

post thumbnail

We take a look at more Lego’s into space and near space, Venus transit, a meteorite that crashed through a cabin, guiding lightning with lasers, updates on Encyclopedia Britannica, near-orbital skydiving, check in on the latest news on Neutrinos and solar storms and as always take a peek back into history and up in the sky this week.

Direct Download:

MP3 Download | Ogg Download | HD Video | Mobile Video | YouTube

RSS Feeds:

MP3 Feed | Ogg Feed | iTunes Feed | HD Feed | Mobile Feed | Tablet Feed

Support the Show:

   

Show Notes:

Legoooo’s in Spaaaace … again

  • *The shuttle *
  • Raul Oaidia from Romania launched a Lego space shuttle into the stratosphere on the back of a weather balloon
  • Lego space shuttle model (set number 3367!) and a video camera to capture the voyage
  • Originally he was looking for someone to support project, found a businessman on twitter, who after discussing options decided that a launching something on a weather balloon
  • Launching in Romania required problematic flight clearance and waiting times, while Germany where his father worked had much looser regulations
  • He and his father traveled to Germany to launch the balloon, since that country’s regulations on this sort of project are more relaxed than those in Romania
  • The balloon lofted Lego shuttle flew to an altitude of about 114,800 ft [35,000 m]
  • Lego’s to Jupiter
  • Specially-constructed LEGO mini-figures are of the Roman god Jupiter, his wife Juno, and “father of science” Galileo Galilei.
  • Jupiter (who was the equivalent of “Zeus” to the Greeks) drew a veil of clouds around himself to hide his mischief. While Juno was able to peer through the clouds and reveal Jupiter’s true nature
  • Galileo Galilei first to point a telescope at the sky to make astronomical observations and discovered the four largest satellites of Jupiter – named the Galilean moons in his honor.
  • Juno and the mini-figures are scheduled to arrive in July 2016 and orbit Jupiter for a year (33 revolutions) before intentionally crashing into the giant gas planet
  • Made out of space-grade aluminum the figures, basically the size of the normal LEGO figures, were prepared in a very special way
  • * Lego Station*
  • While the actual Space Station (ISS) took more than 200 astronauts from 12 countries more than a dozen years to build an astronaut from Japan, matched that feat in just about two hours, at least in LEGO form
  • The Lego station would not be able to bear it’s own weight under gravity
  • The Lego station was used as a demonstration for a series of recorded videos aimed at engaging and educating children about living and working in space
  • Building Lego’s in space are much harder to put together in space, to keep the bricks contained it had to be put together inside a glove box
  • Because of the difficulty of putting it together in a glove box, some pieces of the model were launched partially-preassembled
  • In space you have to worry about the little pieces getting loose and becoming either lost or potentially getting jammed in equipment or even becoming a flammability hazard
  • There are flammability concerns about the Lego’s; due to the flammability hazards, the toy bricks could only be exposed to the open cabin air for two hours
  • Other building brick sets that were launched last year, the LEGO space station was part of an educational collaboration between the Danish toy company and NASA
  • Multimedia
  • YouTube VIDEO : Lego Space Shuttle
  • Further Reading / In the News
  • Lego Space Shuttle Takes Flight, Returns to Earth Undamaged @ PCWorld.com
  • Astronaut Builds LEGO Space Station Inside Real-Life Space Station
  • What would you like to see in space? @ microblade.blogspot.com

*— NEWS BYTE — *

Venus Transit

  • The low down
  • Transits of Venus are when it passes in between the Earth and the sun and are among the rarest of planetary alignments
  • Between each occurrence is happens at uneven occurrences at 121.5, then 8 then 105.5, then 8 years again. So only four times every 243 years and only in early Dec or early June
  • Only six Venus transits have occurred since the invention of the telescope (1631, 1639, 1761, 1769, 1874
  • The last transit occurred in 2004
  • Observations
  • Your location north or south on Earth slightly affects the apparent path you see Venus taking south or north across the Sun
  • The transit this year will last about 6.5 hours and will be visible from more than half of the Earth’s surface; northwestern North America, Hawaii, the western Pacific, northern Asia, Japan, Korea, eastern China, Philippines, eastern Australia, and New Zealand.
  • The Sun will set while the transit is still in progress from most of North America, the Caribbean, and northwest South America
  • It will also already be in progress at sunrise for observers in central Asia, the Middle East, Europe, and eastern Africa
  • No portion of the transit will be visible from Portugal or southern Spain, western Africa, and the southeastern 2/3 of South America.
  • Significance
  • Edmund Halley first realized that transits of Venus could be used to measure the Sun’s distance which established the absolute scale of the solar system from Kepler’s third law
  • Accurately timing the transit from the surface of the Earth past a certain degree of accuracy due to atmospheric conditions and diffraction
  • The Venus transits in 1761 and 1769 were still able to give Astronomers their first good value for the Sun’s distance.
  • * Of Note*
  • The next pair of Venus transits occur over a century from now on 2117 Dec 11 and 2125 Dec 08.
  • Mercury, the other planet with an orbit between the sun and Earth undergoes transits about 13 or 14 transits of Mercury each century, and fall within several days of 8 May and 10 November
  • Multimedia
  • IMAGE : 2012 Venus Transit Map @ skyandtelescope.com
  • IMAGE : A line plotted of the transit as seen from Earth’s center, with Universal Times @ skyandtelescope.com
  • Further Reading / In the News
  • Transit of Venus: June 5–6, 2012 @ skyandtelescope.com
  • 2004 and 2012 Transits of Venus @ nasa.gov

The sky, well a meteorite, fell in Norway right into a cabin

  • The low down
  • Norwegian family arrived at their holiday cabin in Oslo recently for the first time all winter, to discover that a meteorite had apparently fallen through their roof
  • Significance
  • No one is sure when the meteorite actually crashed through the cabin’s roof, because the cabin had been closed during the winter.
  • Although it is thought is may have fallen during a wave of meteor sightings over Norway on March 1
  • The 1.3 pound [585 gram] meteorite was found split in two
  • Cross-section’s of the meteorite show that it contains bits of many different particles that are compressed together
  • Identified as a rare type of breccia meteorite, which is a conglomerate of smaller fragments of minerals
  • These type of meteorites indicates that another, larger meteorite smashed rock on another planet before being propelled into outer space
  • * Of Note*
  • Meteorites rarely fall in populated areas
  • According to Views and News from Norway, only 14 meteorites have been found in the Scandinavian country since 1848
  • Photos and Video of the meteorite in local news site
  • Further Reading / In the News
  • Meteorite smashed through Oslo roof @ newsinenglish.no
  • Norwegian Family Finds Meteorite Crashed Through Their Roof
  • Fikk meteorittstein gjennom taket i kolonihagen @ vg.no

Directing lightning with lasers

  • The low down
  • New research has shown that brief bursts of intense laser light can redirect lightning
  • Significance
  • Researchers in France have successfully directed coaxed laboratory-generated lightning into striking the same place, not just twice, but over and over
  • The researchers pulses of laser light, femtosecond (one quadrillionth of a second) long to create a virtual lightning rod out of a column of ionized gas
  • It has also been confirmed with other experiments that a femtosecond laser could produce an ultra-short filaments of ionized gas that act like electrical guide
  • Further studies revealed that these filaments could function over long distances, potentially greater than 164ft [50 m]
  • The research team sent a laser beam skimming past a spherical electrode to an oppositely charged planar electrode
  • The laser then stripped away the outer electrons from the atoms along its path
  • The resulting plasma filament channeled an electrical discharge from the planar electrode to the spherical one
  • The researchers then added a longer, pointed electrode to their experiment
  • With no laser the discharge obeyed normal rules and always struck the taller, pointed electrode
  • Then researchers used the later the discharge was redirected, following the filaments and striking the spherical electrode instead, even when they turned it on after the initial path of the discharge began to form
  • Multimedia
  • An illustration of how lightning occurs when two streamers meet. @ Wikipedia
  • Further Reading / In the News
  • Laser lightning rod: Guiding bursts of electricity with a flash of light @ physorg.com

*— TWO-BYTE NEWS — *

Encyclopaedia Britannica, in print no more

  • The low down
  • Encyclopaedia Britannica has been in print since it was first published in Edinburgh, Scotland, in 1768.
  • Significance
  • It was announced on Tuesday, March 13, 2012 that after 244 years, the Encyclopaedia Britannica is going out of print, instead focusing on its online encyclopedia
  • The President of Encyclopaedia Britannica said “This has to do with the fact that now Britannica sells its digital products to a large number of people.”
  • The final hardcover encyclopedia set is available for sale at Britannica’s website for $1,395.
  • * Of Note*
  • The top year for the printed encyclopedia was 1990, when 120,000 sets were sold
  • just six years later in 1996, that number fell to 40,000
  • The company started exploring digital publishing in the 1970s.
  • The first CD-ROM edition was published in 1989 and a version went online in 1994.
  • They made the contents of the website available for one week
  • Multimedia
  • YouTube VIDEO : Totally Digital: The Encyclopaedia Britannica Now
  • Social Media
  • Encyclo. Britannica@Britannica
  • Further Reading / In the News
  • Last entry for Encyclopaedia Britannica book form

Skydiving at the orbital extreme

*— Updates — *

Neutrinos loop back around again

The Sun will not sit quietly

SCIENCE CALENDER

Looking back

  • March 26, 1859: 153 years ago : Vulcan Discovered? : In 1859, Lescarbault, a French medical doctor and amateur astronomer reported sighting a new planet in an orbit inside that of Mercury which he named Vulcan. He had seen a round black spot on the Sun with a transit time across the solar disk 4 hours 30 minutes. He sent this information and his calculations on the planet’s movements to Jean LeVerrier, France’s most famous astronomer. Le Verrier had already noticed that Mercury had deviated from its orbit. A gravitational pull from Vulcan would fit in nicely with what he was looking for. However, it was not consistently seen again and it is now believed to have been a “rogue asteroid” making a one-time pass close to the sun. [Or this is the non-prime universe and it was destroyed, que Bryan crying out in anguish]
  • March 25, 1970: 42 years ago : Concorde Flew : In 1970, the prototype British-built airplane Concorde 002 made its first supersonic flight (700 mph; 1,127 kph). A few months earlier, the French prototype, Concorde 001, had broken the sound barrier on 1 Oct 1969. Mach 2 was achieved by Concorde 001 on 4 Nov 1970, and by Concorde 002, a few days later on 12 Nov 1970. The combined number of supersonic flights by the two aircraft reached 100 by January of the following year, 1971.

Looking up this week

The post Meteorites & Lasers | SciByte 38 first appeared on Jupiter Broadcasting.

]]>