Show Notes:

Java flaws not entirely fixed by emergency patch

• The Polish security firm that initially discovered the 29 Java vulnerabilities back in April, two of which were the target of the emergency out-of-band patch issued by Oracle last week, has discovered that the flaws are still exploitable
• Oracle’s patch removed the getField and getMethod methods from the implementation of the sun.awt.SunToolkit, this disabled all of the Proof of Concept exploits from the security researchers, and the exploits actively being used in the wild
• Oracle basically removed the exploitation vector, without fixing the underlying vulnerabilities
• The Polish firm discovered another exploitation vector, that when combined with the unpatched vulnerabilities, allowed them to update their Proof of Concept code and continue to posses a large number of working exploits again Java
• Adam Gowdiak, CEO of Security Explorations (the Polish firm that discovered the vulnerabilities) also commented that Java 6 seemed much more secure, in all the time they spend researching it, they only ever managed to escape the sandbox once, using an Apple Quicktime exploit
• Researchers find critical vulnerability in Java 7 patch hours after release

---

More infrastructure switches vulnerable

• Some GarrettCom switches come with a hard coded password for a default account that cannot be changed or disabled
• A researcher at Cylance discovered the hidden account in April and warned the vendor and ICS-CERT
• The issue is present in GarrettCom Magnum MNS–6K Management Software version 4.1.14 and 14.1.14 SECURE, the vendor released an update that addresses the issue in May, but the issue was not disclosed until this week
• The attack is mitigated somewhat by the fact that the attacker would need access to an account on the switch, in order to exploit the vulnerability and escalate the privileges of the regular user account
• “A ‘factory’ account intended to only be allowed to log in over a local serial console port exists in certain versions of GarrettCom’s MNS–6K and MNS–6K-SECURE software. Cylance has identified an unforseen method whereby a user authenticated as ‘guest’ or ‘operator’ can escalate privileges to the ‘factory’ account”
• GarretCom switches are marketed as “Hardened” and used in traffic control systems, railroad communications systems, power plants, electrical substations, and even US military sites. Beyond simple L2 and L3 networking these devices are also used for serial-to-ip conversion in SCADA systems
• Original Advisory
• ICS-CERT Advistory

---

Hackers claim to have stolen Mitt Romney’s tax returns from financial firm

• A group claims to have broken into the offices of Price Waterhouse Cooper in Tennessee, accessed the network file servers and copied the Romney’s tax returns for the years before 2010
• Later years were apparently not digitized yet and so were not able to be copied
• It doesn’t seem correct to refer to the individuals as hackers because the data was physically stolen from unsecured file servers, rather than accessed remotely
• The attackers seem to have thought ahead, going so far as to include secret statements in the copies of the documents sent to PWC and using those to authenticate themselves as the real attackers
• The attackers claim to have send encrypted copies of the documents to the media, as well as both political parties
• The attackers provide two bitcoin addresses, if the first receives 1 million USD worth of bitcoins before September 28th, then the encryption keys will be destroyed. If this does not happen, or if 1 million USD is sent to the second bitcoin address, the keys will be released publically
• In Canada the Personal Information Protection and Electronic Documents Act (PIPEDA) mandates specific security measures be taken to safeguard such personal information, it seems that the security practices at PWC were extremely lax
• The US Secret Service is investigating
• Pastebin Post #1
• Pastebin Post #2
• Additional Coverage

---

Anti-sec releases 1 million iOS unique device ID, apparently stolen from FBI laptop

• Anti-sec claims the original file they stole contains more than 12 million records
• The file apparently includes detailed data, including the UDIDs, push notification tokens, device names, usernames, phone numbers, addresses and device types
• Antisec claims to have remotely accessed Supervisor Special Agent Christopher K. Stangl’s Dell Vostro notebook in March 2012 using the AtomicReferenceArray Java vulnerability
• "During the shell session some files were downloaded from his Desktop folder one of them with the name of ‘NCFTA_iOS_devices_intel.csv’
• NCFTA is the: National Cyber Forensics and Training Alliance, a private group set up by a former FBI agent to facilitate information sharing between private companies and the FBI. Companies can share information with the 501(c)6 non-profit that they would be wary of (or prohibited from) sharing directly with the FBI
• SSA Stangl is a member of the FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team
• The FBI denies the claim . “The FBI is aware of published reports alleging that an FBI laptop was compromised and private data regarding Apple UDIDs was exposed. At this time there is no evidence indicating that an FBI laptop was compromised or that the FBI either sought or obtained this data”
• A website has been setup to attempt to identify which apps or companies are sharing data with the FBI
• Original Pastebin
• Additional Coverage

---

Feedback:

• Comcast transparent DNS proxy. Another pfSense solution? : techsnap
• How do you choose networking gear?
• How I cope with a cap on my bandwidth

Have some fun:

• What will be in the news the week in October when Allan is at Euro BSD Con? Let make a prediction on the head lines or just make up funny stuff to read

What I wish the new hires “knew”

Round-Up:

• GhostBSD 3.0 BETA1 LXDE is ready to test. | GhostBSD
• BBC pursuades Adobe to continue to support Flash for Android 4.x
• Widely used fingerprint reader exposes Windows passwords in seconds
• Research shows possible vulnerability in Firefox and Opera, using data URIs to mask phishing attacks
• Intel immerses its servers in oil — and they like it!
• the Islamic Republic of Iran and the Democratic People’s Republic of Korea (DPRK, North Korea), have signed a number of new cooperation agreements, and are likely collaberating to attempt to defend them selves from the current cyber warfar campaign being waged against them
• Bitfloor hacked

The post Donated Privacy | TechSNAP 74 first appeared on Jupiter Broadcasting.

]]> https://original.jupiterbroadcasting.net/22961/keeping-you-distracted-unfilter-13/ Thu, 09 Aug 2012 22:06:41 +0000 https://original.jupiterbroadcasting.net/?p=22961 We look at the tricks and distractions the campaigns and media use to keep the public focused on their pet topics.

The post Keeping You Distracted | Unfilter 13 first appeared on Jupiter Broadcasting.

]]>

We look at the tricks and distractions the campaigns and media use to keep the public focused on their pet topics.

In ACT 1: We unfilter the media\’s talking points around the tragic shooting that took place this last week in the south of Milwaukee. Plus the story behind the bad week medical marijuana had, and some news updates from around the world.

In ACT2: Is the media robbing the American people of their opportunity for a rational, and effective public discussion? This week using the lens of the reignited gun-control debate we\’ll ask some hard questions.

In ACT 3: Some follow up on a few stories from the recent weeks.

All that and much more, in this week\’s Unfilter.

Direct Download:

HD Video | Mobile Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

HD Feed | Mobile Feed | MP3 Feed | OGG Feed | HD Torrent | Mobile Torrent | iTunes

Show Notes:

ACT ONE:

• U.S. Freezes All Nuclear Power Plant Licensing Decisions

• Sikh temple shootings leave 7 dead in Wisconsin

• Sikh temple shooter Wade Michael Page Sikh temple shooter played bass in white supremacist bands

• Kim Dotcom raid video revealed

• Europe\’s economic woes deepen amidst uncertainty

• Greece Considers Labor Pool

• Crazy Details About The Bank That’s Been Accused Of Transferring $250 Billion To Iran

• \’New Approach Washington\’ Launches Pro-Marijuana Legalization Ad In Evergreen State

• Tacoma pot doc fighting state charges, says ad ban restricts doctors\’ right to free speech
• Medical Marijuana Crackdown: Rep. Barbara Lee Tells Feds to Back Off
• New Hemp Bill Introduced in US Senate

Tech Related News:

• Googlers to Begin Commuting in Self-Driving Cars

• Google Creates Interactive Visual About Small Arms Trade

• NASA\’s Mars Rover Crashed Into a DMCA Takedown top story on the Unfilter Reddit this week

ACT TWO: Election Year Distractions

• Ohio Man arrested for weapons in theater; attorney says he was just protecting himself
• Oak Creek tragedy should prompt new gun debate
• Movie Theater Shooting Prompts Gun Control Debate
• Historic NDAA Battle Underway: TV Networks Silent
• Earl Ofari Hutchinson: How the Economy Can Help or Hurt President Obama

ACT THREE: Feedback

• Obama That I Used To Know – Gotye \’Somebody That I Used To Know\’ Parody – YouTube
• Blackwater to pay fine to settle arms charges
• White House considers executive action to address cybersecurity
• Treasury Secretary Timothy Geithner Admits He Hid LIBOR Fraud From The DOJ

Song pick(s) of the week:

• Save Me Now by Blood Angel released under a creative commons license
• Only A Pawn In Their Game by Bob Dylan

• Only A Pawn In Their Game by Bob Dylan on Amazon UK

• Correction from last week I (Dan) said that my intro to podcasting presentation at the Syracuse Innovators Guild was going to be on the 14th. However, it going to be this Saturday August 11th from 6:00PM to 8:00PM at the Syracuse Innovators Guild Makerspace located at 3650 James st Suite 111, Syracuse, NY the class is open to everyone so if you in the area and interested in learn how on earth I end up on Unfilter along with other stuff I’ve learned about podcasting please stop by.

Follow the Team:

• Filterfree.ME show Blog
• Chris on Twitter
• Follow DanFilterFree on identi.ca if you want to know when he is at the Syracuse Innovators Guild if you want to stop by send him a PM and he will make sure the doors are open. Learn more about our upcoming events at https://www.meetup.com/Syracuse-Innovators/.
• Chase’s Geek Stuff
• Michael Vail\’s Website

If you don’t already have a Dropbox account help Dan out by signing up using this link and then installing Dropbox

The post Keeping You Distracted | Unfilter 13 first appeared on Jupiter Broadcasting.

]]>