uPNP – Jupiter Broadcasting

The Future of HTTP | TechSNAP 389

Angela Fisher — Thu, 15 Nov 2018 19:45:06 +0000

Show Notes: techsnap.systems/389

The post The Future of HTTP | TechSNAP 389 first appeared on Jupiter Broadcasting.

Another Pass at Bypass | TechSNAP 369

chris — Wed, 23 May 2018 13:31:01 +0000

Show Notes: techsnap.systems/369

The post Another Pass at Bypass | TechSNAP 369 first appeared on Jupiter Broadcasting.

Internet of Problems | TechSNAP 199

chris — Thu, 29 Jan 2015 18:32:54 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

The internet of dangerous things is arriving but what about taking care of the devices we already have? We’ll discuss!

Plus details on critical updates from Adobe, the surprising number of Gas Stations vulnerable to exploitation via the internet, your questions, our answers & much, much more!

Thanks to:

Get Paid to Write for DigitalOcean

Direct Download:

RSS Feeds:

Become a supporter on Patreon:

— Show Notes: —

Flash Updates

On January 22nd Adobe released an emergency patch for Flash Player to resolve the zero day vulnerability that we discussed last week
Adobe released Flash Player 16.0.0.287 on the 22nd
It turns out that this fix did not completely close the vulnerability, and the exploit kit quickly worked around the fix and continued to exploit the vulnerability
Adobe issued a security advisory (different than an bulletin) about the issue
On January 27th, Adobe released Flash Player 16.0.0.296 in another bulletin
The latest release, 16.0.0.296 fixes both CVE-2015-0311 and CVE-2015-0311
The researcher who originally discovered the exploits in the wild, has also pointed out that the 2015-0311 flaw is being used outside of the exploit kit now as well
FireEye also discovered the 2015-0311 vulnerability being exploited in a different way

Gas Stations vulnerable to exploitation via the internet

“An attacker with access to the serial port interface of an ATG may be able to shut down the station by spoofing the reported fuel level, generating false alarms, and locking the monitoring service out of the system,” said HD Moore, the chief research officer at security firm Rapid7
“Tank gauge malfunctions are considered a serious issue due to the regulatory and safety issues that may apply.”
While doing research, HD Moore found that more than 5000 gas gauge devices are connected to the internet with no authentication. The automated tank gauges generally only have a serial port.
“Approximately 5,800 ATGs (Automated Tank Gauge) were found to be exposed to the Internet without a password,” Moore said. “Over 5,300 of these ATGs are located in the United States, which works out to about 3 percent of the approximately 150,000 fueling stations in the country.”
Some of the devices have TCP/IP interfaces, and those that do not can be connected to a serial server, a common device in the IT industry, then be connected to the internet. Most serial servers do offer the ability to require a password to access the port, however this feature is often not enabled, and is not very secure
“Operators should consider using a VPN [virtual private network] gateway or other dedicated hardware interface to connect their ATGs with their monitoring service,” the researcher said. “Less-secure alternatives include applying source IP address filters or setting a password on each serial port.”
Another example of taking devices that were not meant to be put on the internet, and then doing so, without taking into account the security implications. Even with a password and source IP filtering, these devices should not be directly connected to the Internet. That is what VPNs are for
Additional Coverage – ITWorld

The internet of dangerous things

Krebs talks about the trends in Distributed Denial of Service Attacks
Krebs cites data from Arbor networks, and their subsidiary Prolexic, which Krebs uses to protect his site, which was under constant attack from various sources throughout December
The point needs to be raised that a growing number of these attacks are sources from ‘Internet of Things’ type devices, small consumer devices with an embedded operating system that receives no updates after it ships
The attacks against Sony and Microsoft over Christmas used exploited routers, but a growing number of other devices could be vulnerable, especially in light of things like the new Linux Ghost vulnerability
We have seen viruses attacking NAS and other types of storage devices, and I am sure it will not be long before the first attack against set-top boxes like the Boxee and Roku.
“As Arbor notes, some of the biggest attacks take advantage of Internet-based hardware — everything from gaming consoles to routers and modems — that ships with networking features that can easily be abused for attacks and that are turned on by default. Perhaps fittingly, the largest attacks that hit my site in the past four months are known as SSDP assaults because they take advantage of the Simple Service Discovery Protocol — a component of the Universal Plug and Play (UPnP) standard that lets networked devices (such as gaming consoles) seamlessly connect with each other.”
“Arbor also found that attackers continue to use reflection/amplification techniques to create gigantic attacks.”
It has been over a year since these amplification vulnerabilities were patches, but there are still many systems being exploited to perform these attacks
“According to the Open Resolver Project, a site that tracks devices which can be abused to help launch attacks online, there are currently more than 28 million Internet-connected devices that attackers can abuse for use in completely anonymous attacks.”
“According to Arbor, the top three motivations behind attacks remain nihilism vandalism, online gaming and ideological hacktivism— all of which the company said have been in the top three for the past few years.”
While analyzing the data from the dump of the Lizard Stresser database, Krebs found that one of the most popular targets for attack were small personal minecraft servers
Krebs: “Tech pundits and Cassandras of the world like to wring their hands and opine about the coming threat from the so-called “Internet of Things” — the possible security issues introduced by the proliferation of network-aware devices — from fitness trackers to Internet-connected appliances. But from where I sit, the real threat is from The Internet of Things We Already Have That Need Fixing Today.”

Feedback:

Round Up:

The post Internet of Problems | TechSNAP 199 first appeared on Jupiter Broadcasting.

Backing up Blu-Ray on Linux | LAS s28e02

chris — Sun, 04 Aug 2013 14:56:12 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Manage your Blu-Ray’s under Linux with ease, it’s our workflow for getting the highest quality backups of your Blu-Rays possible.

Plus: The case for replacing your routers firmware with Linux, we start the X11 Doomsday Clock, a big batch of your emails…

AND SO MUCH MORE!

All this week on, The Linux Action Show!

Thanks to:

GoDaddy.com

Use our code linux249 to score .COM for just $2.49!

Free Private Registration with your .COM just use our code free3 until the end of the month!

Ting.com

Visit las.ting.com to save $25 off your device or service credits.

Download:

RSS Feeds:

Support the Show:

Purchase anything at Amazon.com
Purchase anything at Think Geek using this link
Purchase anything at Newegg using this link
Contribute directly on our donation page or check out our advertising options and reach millions of amazing people!
Grab our Chrome Extension and auto-tag your shopping session for us!

— Show Notes: —

Backup Blu-Ray Under Linux

Brought to you by: System76

[asa]B009LJM6HG[/asa]

Tools

MakeMKV is your one-click solution to convert video that you own into free and patents-unencumbered format that can be played everywhere.

MakeMKV for Linux forum
AUR (en) – makemkv
MakeMKV software.opensuse.org:
HandBrake: Open Source Video Transcoder
Check your Seasons and Episode Details: At the TVDB

The Process

Start Make MKV Before your load the disk
Choose your titles – This is a tricky job under Linux. Most the time it’s obvious.
Once its done the resulting MKV will be huge. You could keep this, it’s an unencumbered copy of the blu-ray, and is the same quality.
Now add your new MKV file to HandBrake
Choose your preset based on your needs.

– Picks –

Runs Linux:

Android Pick:

Run VLC with the parameter “–extraintf=http” to use both the desktop and web interface.

# vlc –extraintf=http

Desktop App Pick:

Search our past picks:

LASAppPicks

Git yours hands all over our STUFF:

— NEWS —

The developers will add support for OpenPGP signatures and encryption to the core of Mailpile, so that it can be used intuitively and without all the hassles usually involved in setting this up properly.

LastPass Premium Plans To Be Bundled with Ubuntu Edge

Wayland Action Update

— /etc: Replacing Your Routers Firmware —

Brought to you by: Untangle

[asa]B002YLAUU8[/asa]

– Feedback: –

BM-GuJRSMgViBNXnafzuRQL3tpHHFSJQ5Wm

— Chris’ Stash —

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— What’s Matt Doin? —

— Find us on Google+ —

— Find us on Twitter —

— Follow the network on Facebook: —

Jupiter Broadcasting on Facebook

— Catch the show LIVE Sunday 10am Pacific / 1pm Eastern / 6pm UTC: —

The post Backing up Blu-Ray on Linux | LAS s28e02 first appeared on Jupiter Broadcasting.

Universal Exploit n’ Play | TechSNAP 95

chris — Thu, 31 Jan 2013 17:53:30 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

It’s way past time to turn off Universal Plug and Play, we’ll give you the details on the exploit that only requires a single network packet.

Plus how we’ve built our VM storage setup, our favorite network monitoring tools, and much much more! In this week’s episode of TechSNAP!

Thanks to:

GoDaddy.com

Use our code tech295 to get a .COM for $2.95.

Something else in mind? Use go28off2 to save 28% on your entire order!

Pick your code and save:
techsnap7: $7.49 .com
techsnap10: 10% off
techsnap11: $1.99 hosting for the first 3 months
techsnap20: 20% off 1, 2, 3 year hosting plans
techsnap40: $10 off $40
techsnap25: 25% off new Virtual DataCenter plans
techsnapx: 20% off .xxx domains

Direct Download:

RSS Feeds:

Support the Show:

Purchase anything at Amazon.com
Purchase anything at Think Geek using this link
Purchase anything at Newegg using this link
Contribute directly on our donation page or check out our advertising options and reach millions of amazing people!
Grab our Chrome Extension and auto-tag your shopping session for us!

Fill out my Wufoo form!

Show Notes:

Get TechSNAP on your Android:

Browser Affiliate Extension:

Jupiter Broadcasting Affiliate Extensions for Chrome and Firefox

Many consumer devices exposed via new uPnP exploits

Universal Plug’n’Play is a networking protocol that allows your consumer devices (routers, printers, media servers, IP cameras, SmartTVs, home automation systems and network storage devices) to communicate and discover each other
Most consumer devices come with uPnP enabled by default, and many devices lack a way to turn the feature off
As with all consumer devices, a large portion of these do not include any update facilities and cannot be updated or patched
Rapid7 security researcher HD Moore conducted a survey of all Internet addressable IPv4 addresses and found many more devices than expected
He also found more than 10 different vulnerabilities across the various devices and implementations
His survey found over 6900 unique products from 1500 manufacturers
81 million unique IP addresses responded to uPnP queries (2.2% of the internet, more IP addresses than are assigned to the entire country of Canada)
over 20% (17 million) of those devices exposed the uPnP SOAP API to the Internet
73% of the devices were created using the 4 most popular SDKs, meaning the any exploits for one device and likely to affect a large portion of all devices, even from different manufacturers
332 unique products use MiniUPnPd 1.0, which is remotely exploitable
69% of all devices using MiniUPnPd where version 1.0 or older
23 million devices use a vulnerable version of libupnp that allows remote code execution
uPnP is a 12 year old protocol, and has had security problems from the start, while it contains some systems for authentication, they are rarely implemented
The main issue seems to be that many manufacturers are using older version of the SDK, or not updating their code base when developing newer devices, as well as not including update mechanisms in the products to allow them to be patched as vulnerabilities like these are found
HD Moore commented that he was unable to find any previous CVE’s mentioning any of the uPnP SDKs that he found exploits for, meaning they have not been extensively tested, or that vulnerabilities were attributed to individual devices when they actually apply to all devices based on the same SDK
Full Paper

New York Times hacked by Chinese

The New York Times reports that for the last 4 months it has been under attack by Chinese hackers
Using custom APT (Advanced Persistent Threat) malware, the attackers managed to steal passwords for reporters and other employees of the newspaper
The attacks apparently started after the Times posted an investigation that found that relatives of Chinese Premier Wen Jiabao had amassed a fortune worth over a billion dollars from various business dealings
The Chinese attackers routed their attacks through computers they had compromised at various US Universities, in an attempt to mask the source of the attack and evade detection
Investigators were not able to determine how the attackers initially broke into the systems, but they suspect a spear-phishing attack was used to compromise an individual computer, then island hop from there
Investigators identified 45 unique pieces of malware, all of which appeared to be custom and only 1 of which was detected by the Symantec Anti-virus system used at the Times
“Security experts found evidence that the hackers stole the corporate passwords for every Times employee and used those to gain access to the personal computers of 53 employees”
The official Chinese response was “Chinese laws prohibit any action including hacking that damages Internet security.”
“damages Internet security” is sufficiently vague that it could mean anything from an individual user using a weak password to a security researcher disclosing a vulnerability
Technically, targeted attacks do not necessarily “damage the security of the Internet”
Consultants hired by the New York Times’ claim that no customer data was exposed
This is not the first attack against the US media that appears to have come from the Chinese government
Bloomberg News reported being attacked in a similar fashion in June after posting an article about relatives of Xi Jinping (General Secretary of the Communist Party, expected to become President in March 2013)
New York Times Hack Started With A Simple Email Scam

Feedback:

Chris is not sure if we should keep submitting plain text password offenders. While it is shameful, it’s also so common that if we put every organization guilty of this that we find out about in the Hall of Shame it will be huge. I think the Hall of Shame should be reserved for especially bad, unique and large in scope security blunders.

Limited TechSNAP 100 T-Shirt

T-Shirt with or without Swearing?

Round-Up:

The post Universal Exploit n’ Play | TechSNAP 95 first appeared on Jupiter Broadcasting.