HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

“Stack Clash” poses threat to Linux, FreeBSD, OpenBSD, and other OSes

• affects Linux, OpenBSD, NetBSD, FreeBSD and Solaris, on i386 and amd64

• The original blog post

• The official advisory

• The following is not a complete list of CVEs found during the research

• The primary CVE

• Some are secondary and directly related CVE

• Some are independently exploitable and related to sudo

The RNC Files: Inside the Largest US Voter Data Leak

• misconfigured database containing the sensitive personal details of over 198 million American voters was left exposed to the internet by a firm working on behalf of the Republican National Committee (RNC)

• names, dates of birth, home addresses, phone numbers, and voter registration details, as well as data described as “modeled” voter ethnicities and religions.

• exposing the personal information of over sixty-one percent of the entire US population

Dan’s DNS setup

• DNS can be thought of as a phone book
• Once ran a single DNS server at home
• Had both internal (non public) and public hosts in the same zone file
• Moved internal hosts to .int subdomain
• had master/slave in public, but went to svn later
• Held zone files in svn, published them directly to servers

Feedback

• Freenas – Transferring files locally see sysutils/fusefs-ntfs

• Password managers filling in credentials

• Episode 323 Yellow dots give you see also https://en.wikipedia.org/wiki/EURion_constellation

• You cannot turn off Windows 10 Telemetry with a Group Policy

Round Up:

• WannaCry computer worm to North
  Korea

• Rooting a Printer

• Travel (Linux) laptop setup

• FreeNAS 11.0 is Now Here

The post DNS Mastery | TechSNAP 324 first appeared on Jupiter Broadcasting.

HD Video Feed | Mobile Video Feed | MP3 Audio Feed | Ogg Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

iOS 10.3.1 update prevents: attacker within range may be able to execute arbitrary code on the Wi-Fi chip

• What is a stack buffer overflow?

• What is a stack?

Hackers Are Emptying ATMs With a Single Drilled Hole and $15 Worth of Gear

• NOT SO LONG ago, enterprising thieves who wanted to steal the entire contents of an ATM had to blow it up. Today, a more discreet sort of cash-machine burglar can walk away with an ATM’s stash and leave behind only a tell-tale three-inch hole in its front panel.

• The dispenser will obey and dispense money, and it can all be done with a very simple microcomputer.

• They found that the machine’s only encryption was a weak XOR cipher they were able to easily break, and that there was no real authentication between the machine’s modules

• In practical terms, that means any part of the ATM could essentially send commands to any other part, allowing an attacker to spoof commands to the dispenser, giving them the appearance of coming from the ATM’s own trusted computer.

Let’s Encrypt

• Using Let’s Encrypt within FreeBSD.org

Feedback

• Epiosode 311 & future topics

• SQLite

• New laws

• Privacy is Dead? and for FTC vs FCC

• Internet privacy

• Free DNS

Round Up:

• Smart TV hack embeds attack code into broadcast signal—no access required

• Spotify’s Love/Hate Relationship with DNS

• What Killed Adobe Flash?

Dan mentioned these URLs during the podcast:

• Adding a 10Gb NIC to an r610

The post Wifi Stack Overfloweth | TechSNAP 313 first appeared on Jupiter Broadcasting.

Mike and Chris reflect on Microsoft’s Build 2015 conference & discuss the undeniable shift to open industry wide. Mike also announces his new business with a focus on open source.

Plus we discuss Visual Studio Code a bit, bad app ports, new ways for developers to make money & more!

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

Show Notes:

Hoopla

• Build 2015 Objective-C, Android apps, continuity, Visual Studio Code for Linux, Mac, and Windows.

• Microsoft hopes to court iOS apps to Windows 10 with Objective-C support

• Microsoft’s new Code editor is built on Google’s Chromium | Ars Technica

What Microsoft didn’t say when announcing the new editor was how it built Visual Studio Code. In a move that might seem a little surprising, given the regular animosity between the two companies, the editor is built on top of Chromium, the open source version of Google’s Chrome browser.

The app is built using an open source desktop application framework developed by GitHub called Electron. Electron uses HTML5, JavaScript, and other Web technologies, using Chromium for presentation, and io.js (a fork of node.js) to tie it all together.

• If you want Microsoft’s nifty Continuum for phones, you’ll have to upgrade | PCWorld

Continuum is a big deal for Windows Phone—both a technological advance and a means of escape from its lonely island of misfit apps. Microsoft’s plan to bring more Android and iOS apps to Windows 10 is another encouraging sign for the platform. It’s no fun for Windows Phone faithfuls to have to upgrade, but perhaps the right to brag about Continuum’s talents will be worth the expense.

Mike’s new company!
+ Microsoft Wants To Bring Azure To Your Data Center | TechCrunch

Azure Stack will bring Microsoft’s technologies for software-defined networking, pooling direct-attached storage, handling (and securing) virtual machines and monitoring this cloud to on-premise data centers. It’s essentially a new private cloud solution for IT pros and makes it easier for developers to scale their apps across their existing data centers and then boost to the cloud if they need more capacity on short notice.

• Open source won.

Feedback:

• Docker containers on Windows

• Pycon 2015 – Videos and Slides

The post The Open Pivot | CR 152 first appeared on Jupiter Broadcasting.

When targeting Linux, developers have to face some tough choices. Mike’s spent a year planning his move and discusses the opportunity and the risk of supporting Linux, how much effort should be put into targeting Ubuntu, and keeping the big picture in mind.

Plus our follow up and your feedback!

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Feedback

• jQuery vs Javascript?
• Dave’s email
• Linux packaging.

Hoopla

• Spindl\’s new Home

So it is with great enthusiasm that I would like to announce that I will be advancing development of Spindl under Fingertip Tech!

• Ubuntu 13.10 Review | The Linux Action Show s29e02 | Jupiter Broadcasting

Has Ubuntu become all about the Dash? Or is there more going on in this saucy release? We\’ll dig into our pain points and moments of joy in our Ubuntu 13.10 Saucy Salamander review.

Movie Pick

[asa]B0000A9GLO[/asa]

Follow the show

• FingertipTech on Twitter

• Email the show

• Join the Coder Radio Subreddit
• Live Monday 9am PST
• Music by: Ronald Jenkees
• Mike on Twitter
• Mike on Google+
• Mike’s website
• Chris on twitter
• Chris on Google+

The post Betting on Linux | CR 71 first appeared on Jupiter Broadcasting.