MP3 Feed | HD Video Feed | iTunes Feed

Become a supporter on Patreon:

— Show Notes: —

— Join us For War Stories Night! —

• Call In 1-855-450-NOAH
• Saturday, November 18th
• Listen Live
• Watch Live

— The Cliff Notes —

• Cheap Ham Radio
• Best Ham Radio for the Money
• Automatic Packet Reporting System
• ARRL Find a Club
• ARRL November Sweepstakes Competition
• Question Pool
• SnapShooter.io
• VoxTeleSys

— Stay In Touch —

Find all the resources for this show on the Ask Noah Dashboard

Ask Noah Dashboard

Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!

Altispeed Technologies

Contact Noah

asknoah [at] jupiterbroadcasting.com

— Twitter —

• Noah – Kernellinux
• Ask Noah Show
• Altispeed Technologies
• Jupiter Broadcasting

The post Owning Your Communications | Ask Noah 34 first appeared on Jupiter Broadcasting.

More and more data breaches are leading to blackmail but the stats don’t tell the whole story. We’ll explain.

Plus the latest in the Sony hack, and the wider reaction. Plus a great batch of emails & much, much more!

Thanks to:

• Get Paid to Write for DigitalOcean

Become a supporter on Patreon:

— Show Notes: —

Illinois Hospital being blackmailed with stolen Patient Data

• “An Illinois hospital says someone attempted to blackmail it to stop the release of data about some of its patients.”
• The hospital chain received an anonymous email asking for a substantial amount of money in order to prevent the release of patient data. A sample of the data was included in the email as proof
• “The hospital says it immediately notified law enforcement agencies.”
• “An investigation discovered the data relates to patients who visited Clay County Hospital clinics on or before February 2012. A hospital representative declined to disclose how many people are involved but said the data is limited to their names, addresses, Social Security numbers and dates of birth. No medical information was compromised in the breach”
• “The hospital believes the data has not been released so far. It didn’t disclose how the data was obtained but said an audit by an outside expert concluded the hospital hadn’t been hacked.”
• The age of the data suggests that the compromise may have involved backups and/or cold storage
• It is not clear of the Hospital stores the older data themselves, or if they rely on a 3rd party provider that may have been compromised
• “A recent report by the Identity Theft Report Center found that by early December there had been 304 breaches so far this year in the U.S. healthcare sector. That’s 42 percent of the 720 breaches reported across the country. But, in part because of the massive breaches at major retailers, the entire healthcare sector only accounted for 9.7 percent of all records compromised in reported breaches so far in 2014.”

Sony cancels the release of “The Interview” – plays the victim

• Sony has apparently cancelled the release of the film that is apparently the cause of the hack of their systems
• A number of cinemas had declined to screen the file after vague threats of physical violence were made
• “We are deeply saddened at this brazen effort to suppress the distribution of a movie, and in the process do damage to our company, our employees, and the American public,” Sony’s statement continues. “We stand by our filmmakers and their right to free expression and are extremely disappointed by this outcome.”
• If they stand for freedom of expression, they wouldn’t have cancelled the movie
• A number of people believe that the hackers may have found something especially damaging to Sony, and Sony is hoping to avoid the disclosure
• Bruce Schneier – “It’s really a phenomenally awesome hack—they completely owned this company,”
• “this is like Snowden, only with Sony.” He said that releases from the hack could go on for months.
• That seems to suggest that the hackers will soon leak something that will look very, very bad for the company, Schneier says.
• Earlier this week, Sony sent a letter to news outlets reporting on the leaks, saying that they could face prosecution for downloading stolen information. That letter, Schneier said, was a signal that the worst is still to come.
• Gawker posts a copy of the threatening letter
• “The fact that they sent that letter tells me there is stuff still to be found that Sony is terrified of. There’s some really bad stuff in there—stuff they did, stuff they said, stuff that’s illegal. Someone [from Sony] is going to jail for this.”
• Reaction to the Sony hack is beyond the realm of stupid – This is not terrorism
• Cisco analysis of Wiper malware used at Sony
• Newer version of Wiper malware signed with stolen Sony certificate
• ThreatPost Digital Undergound Podcast – Details of the Sony Breach
• The leak has also covered a number of different plans and plots by the MPAA
• Inclusing the MPAA’s post-SOPA plan to make ISP DNS Servers block sites

Feedback:

• FW Question

• IP management with 257 devices

• Isolating a server

• Certificate for web site
  • Mozilla TLS Server Side settings

• OpenYourMouth · GitHub

• Cipherli.st – Strong Ciphers for Apache, nginx and Lighttpd

Round Up:

• Viber calls out ESET for flagging them, ESET responds with a digital uppercut
• Yahoo releases new disclosure policy, all new bugs it finds will be disclosed within 90 days
• Report: Mysterious Russian Malware Is Infecting 100,000+ WordPress Sites
• Red October APT team is back, with the CloudAtlas APT attack
• Verizon’s new “end-to-end” encrypted calling app, includes “Government Access Option” – Cellcrypt’s vice president for North America, disputes the idea that building technology to allow wiretapping is a security risk. “It’s only creating a weakness for government agencies,” he says. “Just because a government access option exists, it doesn’t mean other companies can access it.”
• Leaked Government documents reveal Canadian Telco’s offering the Government “Surveillance Ready Networks”, to avoid legislation, and to force small operators out of the market
• Ars was briefly hacked yesterday; here’s what we know (Ars uses PHPass to hash passwords, that is 2048 rounds of MD5. Not as bad as it sounds: If you want to put this into “OL Hashcat” terms, a single R9 290X (video card) can pull ~ 12.2 GH/s on raw MD5, but only 3 MH/s against PHPass. Divide that by 1,071,734 unique salts, and that means our effective speed is only 2.86 H/s. That’s beyond properly slow.)
• A small bank in Kansas may be the future of banking, replacing ‘batched processed’ ACH transfers with instant transfers backed by the existing ATM processing network
• phpBB Status Update
• Study by Dell SecureWorks researchers finds that prices on the Internet Underground are rising

The post Don’t Fire IT | TechSNAP 193 first appeared on Jupiter Broadcasting.

We recap Uber’s really bad week & their recent changes in response. Thanks to the Apple Watch SDK we now have an idea of what using one will be like & it’s limitations become more clear.

Plus Viber takes chats public & we ponder why, the Stingray mystery & more!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

“God View”: Uber Investigates Its Top New York Executive For Privacy Violations

Uber said Tuesday that it is investigating its top New York executive for tracking a BuzzFeed News reporter without her permission in violation of what the transit giant says has long been its privacy policy. The company also published its privacy policy for the first time on Tuesday, though it said the policy had always been in effect.

Uber took both actions in the wake of a BuzzFeed News story that revealed that the reporter’s ride had been tracked without her permission and that another Uber executive had suggested the company might smear journalists who wrote critically of Uber. The executive who suggested digging into the private lives of journalists, Emil Michael, said his comments were “wrong” and that he regrets them.

Tracking customers is easy using an internal company tool called “God View,” two former Uber employees told BuzzFeed News. They said God View, which shows the location of Uber vehicles and customers who have requested a car, was widely available to corporate employees. Drivers, who operate as contractors, do not have access to God View.

Early this November, one of the reporters of this story, Johana Bhuiyan, arrived to Uber’s New York headquarters in Long Island City for an interview with Josh Mohrer, the general manager of Uber New York. Stepping out of her vehicle — an Uber car — she found Mohrer waiting for her. “There you are,” he said, holding his iPhone and gesturing at it. “I was tracking you.”

Mohrer never asked for permission to track her.

11 things we just learned about how the Apple Watch works | The Verge

An iPhone is required — at (almost) all times. In Apple’s own words, Watch apps extend iOS apps. “You begin your Watch app development with your existing iOS app, which must support iPhone.”

Native apps are coming next year. Important footnote from the press release: “Starting later next year, developers will be able to create fully native apps for Apple Watch.”

There could be more Watch sizes later. “Unlike iOS, where you place views at a coordinate on the screen,” Apple says, “with WatchKit, objects automatically flow downward from the top left corner of the screen, filling the available space.”

There are two types of Apple Watch notifications. The “Short Look” is only seen briefly when you raise your wrist — it’s an app icon, an app name, and some brief information. If the wearer keeps their wrist raised long enough — “after a moment,” according to Apple — the screen changes to a “Long Look” notification, which provides more information and is more customizable. For Long Looks, the app icon and name move to the top of the screen, and wearers can scroll down through the interface to use custom actions (such as “comment” or “favorite”) or dismiss the notification.

Glances. We already knew some of this, but now it’s well documented. In addition to the app itself and the notification, developers can make “Glances” for quick view of information (e.g. time, weather, tasks left). All the information must fit on a single screen and is read-only, but you’ll be able to tap it to enter the corresponding app.

No custom gestures. The interface is more or less locked to what Apple wants: vertical swipes scrolls through the screen, horizontal swipes go between pages, taps indicate selection, “force touch” opens up a context menu, and that digital crown scrolls through pages way faster. Additionally an edge swipe left goes back or up a page (“back to the parent interface controller,” if we’re being technical), and an edge swipe up opens the “Glance” view.

Messaging App Viber Takes A Step Into Social Networking With New Public Chats Feature | TechCrunch

Today Viber, the messaging app with 209 million users, is taking a different approach: it is launching Public Chats, giving users a way of using its direct messaging and voice services app to broadcast to the world at large.

Public Chats will see the introduction of live conversation streams — from celebrities, or as CEO Talmon Marco told me, other interesting people “like taxi drivers!” — that will be open for any follower to see, but not necessarily participate in. Users will only be able to jump in and talk in Public Chats if the account in question is in their contacts.

Baltimore Police balk when pressed by judge on phone tracking capabilities – Baltimore Sun

Baltimore prosecutors withdrew key evidence in a robbery case Monday rather than reveal details of the cellphone tracking technology police used to gather it.

The surprise turn in Baltimore Circuit Court came after a defense attorney pressed a city police detective to reveal how officers had tracked his client.

City police Det. John L. Haley, a member of a specialized phone tracking unit, said officers did not use the controversial device known as a stingray. But when pressed on how phones are tracked, he cited what he called a “nondisclosure agreement” with the FBI.

Defense attorney Joshua Insley still believes that police used a stingray to find Taylor. He cited a letter in which prosecutors said they were prohibited by the Department of Justice from disclosing information about methods used in their investigation.

The portable device was developed for the military to help zero in on cellphones. It mimics a cellphone tower to force nearby phones to connect to it.

Records shows that the Baltimore Police Department purchased a stingray for $133,000 in 2009.

The post Uber's God Complex | Tech Talk Today 95 first appeared on Jupiter Broadcasting.

It’s been one year and we pay up on the Monkey Suit Mir Bet. We chat with Kevin Gunn Engineering Manager for Display Server & Unity UI at Canonical about how closed drivers will work with Mir, how new devices like the Oculus Rift might work, Wayland, and much more.

Plus: Unreal 4 and GOG.com announce incoming Linux support, AMD could be planning some major video driver changes, Ubuntu Tablet rumors…

AND SO MUCH MORE!

All this week on, The Linux Action Show!

Thanks to:

Download:

HD Video | Mobile Video | WebM Torrent | MP3 Audio | Ogg Audio | YouTube | HD Torrent

RSS Feeds:

HD Video Feed | Large Video Feed | Mobile Video Feed | MP3 Feed | Ogg Feed | iTunes Feeds | Torrent Feed

Support the Show:

— Show Notes: —

MIr Chat: Kevin Gunn

Engineering Manager for Display Server & Unity UI at Canonical

Brought to you by: System76

• KevinGunn – Ubuntu Wiki

• What is your involvement with the MIR Project?

• DO you like my hair?

• How do you feel that MIR will hold up to time? We’ve seen how initial decisions with X have impacted its ability to preform as our computing needs have changed. Is MIR being designed with as much forward compatibility as possible?

• Does or will MIR have the ability to be expanded/extended upon with regard to future devices/platforms? Is it monolithic in that it will exist as a single unit, or can it be altered easily for different systems with different goals in mind?

• One of the concerns we’ve heard is that ‘;eventually’ applications will need to be written for MIR, Obviously there is the XMir compatibility layer, but are there plans for a wayland compatibility layer to deal with future Wayland/MIR differences which may creep up over time.

• How do you feel MIR will perform as a display server over the next, say, 10 years? Do you believe it will fair better than X has over the past 10 years?

• Can you give me a better picture of how closed source drivers will work with Mir?

• Will I be able to do ssh with x forwarding from a computer running Mir. Will I be able to do something like ssh -X to a computer running Mir from a computer running X? From a computer running Mir?

• And much more!

2013 Followup: our milestones effectively match this line of thought

• Launching Mir & UnityNext

• Its like a 3 stage rocket for Mir & Unity Next…

• First target is integration of Unity Next & Mir (we’ll be discussing this at the upcoming UDS)….

• second is actually creating our Ubuntu for Phone with Unity Next + Mir sometime in 4Q13. Lastly we should hit full convergence in 2Q 2014.

– Picks –

Runs Linux:

• Indian Banks switching to Linux, rather than taking extended Windows XP Support

Desktop App Pick

• Viber – Free calls, Free text messages, photo and location sharing

• AUR (en) – viber

• Viber – Google Play

• Viber on the App Store

• On February 13, 2014, Rakuten announced they had acquired Viber for $900 million

• Viber – Privacy Policy

• Viber founder: ‘People should be concerned about privacy’ | Technology | theguardian.com

Viber’s policy is that if it receives a proper subpoena, it will provide records of who made and received calls, and when, but that no content from those conversations will be shared.

He says Viber does not “have the capability to listen to conversations”. Messages are stored, for two weeks or until they are opened by the recipient, whichever is shorter. Around 80% are deleted in less than a second.

Weekly Spotlight

• If Mir fails within one year from now, I’ll wear this on the show (Matt)

• Matt Makes the Bet: https://www.youtube.com/watch?v=FsTQc0ME1eo&feature=youtu.be&t=24m56s

— NEWS —

First Ubuntu Tablets To Launch This Autumn

“[Tablets] will arrive pretty much simultaneously with phones. Q3, middle of this year we’ll see both phones and tablets running Ubuntu on the market.”

GOG.com Soon On More Platforms

No, don’t duck. This is actually good news. We just wanted to announce that, after much deliberation, **we’ve decided that one of the next steps for us is to support Linux.

We’re initially going to be launching our Linux support on GOG.com with the full GOG.com treatment for Ubuntu and Mint.

Getting geared up for a big kick-off in the fall with at least 100 Linux games ready for you to play.

This is, of course, going to include games that we sell which already have Linux clients, but we’ll also be bringing Linux gamers a variety of classics that are, for the first time, officially supported and maintained by a storefront like ours.

Unreal Engine 4 to Support Linux with Monthly Sub for Devs

For $19/month you can have access to everything, including the Unreal Editor in ready-to-run form, and the engine’s complete C++ source code hosted on GitHub for collaborative development.

We’re working to build a company that succeeds when UE4 developers succeed. Anyone can ship a commercial product with UE4 by paying 5% of gross revenue resulting from sales to users. If your game makes $1,000,000, then we make $50,000. We realize that’s a lot to ask, and that it would be a crazy proposition unless UE4 enables you to build way better games way more productively than otherwise!

This first release of Unreal Engine 4 is just the beginning. In the C++ code, you can see many new initiatives underway, for example to support Oculus VR, Linux, Valve’s Steamworks and Steam Box efforts, and deployment of games to web browsers via HTML5.

The All New Oculus Rift Development Kit 2 (DK2) Virtual Reality Headset to Ship with Linux Support

The Oculus Rift and the Oculus SDK currently support Windows, Mac OS X, and Linux.

Debian Project Leader canidate proposes PPA system

It’s again that time of the year for the Debian Project: the elections of its Project Leader! Starting on March 31st, and during the following two weeks, the Debian Developers will vote to choose the person who will guide the project for one year.

Among this year’s candidates there is the current DPL, Lucas Nussbaum, who admits that “the workload involved in being the DPL is just huge,”

In his platform, Lucas speaks of technical and social steps to improve the project: from reproducible builds for a more secure archive to a renewed effort to run Debian on new platforms (especially smartphone and tablets); from a more welcoming approach to prospective contributors to an easier collaboration with organizations.

Neil McGovern. Neil’s platform focuses mainly on the need to “ensure that we cater to our users, and there’s millions of them. From those running the latest software in unstable, to people who simply want a rock solid core release.”

In his opinion “the size of Debian is increasing, and will reach a point where we’re unable to guarantee basic compatibility with other packages, or the length of time it takes to do so becomes exponentially longer, unless something changes.” To fix this problem, Neil proposes the implementation of PPAs (Personal Package Archives), the modernisation of the current build and infrastructure system as well as generally supporting the various teams.

AMD Is Exploring A Very Interesting, More-Open Linux Driver Strategy .

The short answer of what AMD’s trying to do is seeing about leveraging the existing (with modifications) open-source Radeon (Direct Rendering Manager) kernel driver underneath the closed-source Catalyst driver.

– Feedback: –

• Bob’s development blog: Why the display server doesn’t matter

Display servers are the component in the display stack that seems to hog a lot of the limelight. I think this is a bit of a mistake, as it’s actually probably the least important component, at least to a user.

• Albert Westra – Google+ – Want to help me get to LinuxFest Northwest this year?

• Linux Action Show hoodies & funny story

Straw Poll: Should LAS Drop “Seasons” post Episode 300?

— Chris’ Stash —

• jupiterbroadcasting on Instagram

Hang in our chat room:

irc.geekshed.net #jupiterbroadcasting

— What’s Matt Doin? —

• Check out LINUX Unplugged

• Datamation.com – Two articles coming yet to be posted

— Find us on Google+ —

• Chris
• Matt Hartley
• Jupiter Broadcasting’s Page

— Find us on Twitter —

• Chris – ChrisLAS
• Matt – matthartley

— Follow the network on Facebook: —

• Jupiter Broadcasting on Facebook

— Catch the show LIVE Sunday 10am Pacific / 1pm Eastern / 6pm UTC: —

• https://jblive.tv
• Network Calendar

The post Mir Monkey Business | LAS s31e05 first appeared on Jupiter Broadcasting.