Show Notes: techsnap.systems/405

The post Update Uncertainty | TechSNAP 405 first appeared on Jupiter Broadcasting.

Video Feed | MP3 Feed | HD Torrent | iTunes

Become an Unfilter supporter on Patreon:

— Show Notes —

Links:

• Obama Campaign Paid $972,000 To Law Firm That Paid Fusion GPS
• US Spy Satellites Catch Chinese Ships Illegally Selling Oil To North Korea | Zero Hedge
• State Department releases emails from computer Huma Abedin shared with Anthony Weiner
• FBI opened Russia probe after Papadopoulos told Australian diplomat of Clinton dirt
• Russia accuses U.S. of training former Islamic State fighters in Syria
• How the Russia Inquiry Began: A Campaign Aide, Drinks and Talk of Political Dirt – The New York Times
• Devin Nunes, targeting Mueller and the FBI, alarms Democrats and some Republicans with his tactics
• Report: Australian officials frustrated by FBI-Russia leak | TheHill
• DeSantis: Papadopoulos’ Barroom Boasts Are ‘Thinner’ Explanation for Russia Probe Than Dossier | Fox News Insider
• Steve Bannon Suggests Donald Trump Met With Russians After Don Jr. Did
• Sessions terminates US policy that let legal pot flourish
• GOP Reps. Mark Meadows, Jim Jordan call on Sessions to resign
• White House bans personal phones from West Wing after book scandals – AOL News
• Drudge exposes Bannon’s new benefactor – Washington Times
• Intel, ARM and AMD chip scare: What you need to know – BBC News
• ‘Fire and Fury’ author Wolff calls Trump least credible person who has ever walked on earth – NBC News
• Brill’s Content: The Truth About Burn Rate
• In 1967, the CIA Created the Label “Conspiracy Theorists” … to Attack Anyone Who Challenges the “Official” Narrative | Zero Hedge | Zero Hedge
• NSA Chief Mike Rogers’s Classified Retirement Memo Leaks
• Trump defends his sanity amid questions about his mental state
• Trump claims he’s ‘a very stable genius’ | New York Post
• Electrospaces.net: Section 702 FAA expires: what are the problems with PRISM and Upstream?
• Exclusive: Bannon apologizes – Axios
• There is no ‘gorilla channel’ book excerpt about Trump – The Verge
• Let’s Talk About the Gorilla Channel for One More Day – The New York Times
• Internet falls for Trump-‘Gorilla Channel’ parody – POLITICO
• WikiLeaks shares full text of Wolff’s Trump book | TheHill
• RT’s editor-in-chief on election meddling, being labeled Russian propaganda – CBS News
• FBI agents’ text messages spur congressional probe into possible news leaks | TheHill
• Blocked by passwords, FBI can’t unlock over half of devices seized as evidence – NBC News
• Fusion GPS lawyer: “Somebody’s already been killed as a result” of Trump Dossier being published – CBS News
• Listen to ‘The Daily’: ‘Fire and Fury’ in the White House – The New York Times
• Trump blasts ‘sneaky Dianne Feinstein’ for releasing Fusion GPS transcript | Fox News
• Feud over Trump dossier intensifies with release of interview transcript – The Washington Post
• Senior Republican refers Trump-Russia dossier author for possible charges – The Washington Post
• Dianne Feinstein Releases Transcript Of Fusion GPS Co-Founder’s Testimony On Russia | HuffPost
• ‘Sloppy Steve’ Bannon becomes Trump’s latest example of name-calling – ABC News
• White House transcript fails to include line from Trump on clean DACA bill | TheHill

The post Fired and Furious | Unfilter 264 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

The Market for Stolen Account Credentials

Usernames and passwords to active accounts at military personnel-only credit union NavyFederal.com fetch $60 apiece,

while credentials to various legal and data aggregation services from Thomson Reuters properties command a $50 price tag.

Hackers Target Plant Safety Systems

FireEye reported that a plant of an unmentioned nature and location (other firms believe it’s in the Middle East) was forced to shut down after a hack targeted its industrial safety system

— it’s the first known instance of a breach like this taking place.

• Source at FireEye

R OBOT Attack: 19-Year-Old Bleichenbacher Attack On Encrypted Web Reintroduced

A 19-year-old vulnerability has been re-discovered in the RSA implementation from at least 8 different vendors—including F5, Citrix, and Cisco—that can give man-in-the-middle attackers access to encrypted messages.

• The ROBOT Attack – Return of Bleichenbacher’s Oracle Threat

• robot-detect: Detection script for the ROBOT vulnerability

WannaCry: End of Year Retrospective

Last November marked the six-month anniversary of WannaCry, arguably the most impactful global cyberattack in history. The persisting WannaCry attack is a re-purposed ransomware strain amplified by (allegedly) leaked exploit code from the NSA.

• Why NSA spied on inexplicably unencrypted Windows crash reports | Ars Technica

Linux Network Namespaces Explained

• Namespaces in operation, part 7: Network namespaces

• namespaces(7) – Linux manual page

• Network Namespaces » ADMIN Magazine

• Network namespaces – Unweaving the web

• How to Get the Network Namespace Associated With a Socket

• Virtual Ethernet devices

• Testing network software with pytest and Linux namespaces

• lldpd » implementation of IEEE 802.1ab (LLDP)

• Routing & Network Namespaces

• VRF for Linux – Cumulus Networks Blog

• linux/vrf.txt at master · torvalds/linux

• Using VRFs with linux

Feedback

Reboot Follow Up

• People REALLY love the MP3 Chapters. Check to see if your Podcast player supports them.

• Overcast

• Pocket Casts
• AntennaPod – Android Apps on Google Play

• Podcast Addict – Android Apps on Google Play

• Why someone would need a keylogger for developing a audio driver.

• DHCPDECLINE over and over again

• DHCP Snooping

Hidden Backdoor Found In WordPress Captcha Plugin Affects Over 300,000 Sites

This backdoor code was designed to create a login session for the attacker, who is the plugin author in this case, with administrative privileges, allowing them to gain access to any of the 300,000 websites (using this plugin) remotely without requiring any authentication.

The post All Natural Namespaces | TechSNAP 349 first appeared on Jupiter Broadcasting.

RSS Feeds:

MP3 Feed | Video Feed | iTunes Feed

Become a supporter on Patreon:

Links:

• The Story of the Last Linux Action Show // VLOG 49 – YouTube
• WannaCry kill-switch hero Marcus Hutchins collared by FBI on way home from DEF CON • The Register
• Fibaro Flood Sensor ZW3, Water Leak Detector, FGFS-101 ZW3 – – Amazon.com
• Does Google Home work with HomeKit? | iMore
• WWDC 2017 Video Session – What’s New in HomeKit – YouTube
• Amazon.com : Koogeek WiFi Smart LED Light Bulb E26, 60W Equivalent, Dimmable, 16000K Colors, Timers, Siri, Works with Apple HomeKit, 2700-6000K, on 2.4Ghz Network : Patio, Lawn & Garden
• Koogeek Smart Plug, WiFi Switch, for Apple HomeKit with Siri, Electronics Controller on 2.4Ghz Network – – Amazon.com
• Google’s Pixel 2 will ditch the 3.5mm headphone jack and nobody seems to care – BGR
• Apple pulls massive HomeKit chip U-turn to keep up with Amazon Echo and Google Home • The Register
• Stephen K. Bannon once guided a global firm that made millions helping gamers cheat
• For 20 Years, This Man Has Survived Entirely by Hacking Online Games – Motherboard
• Apple has proven me wrong about HomeKit – The Verge
• Path of Exile on Steam

The post Those Damn Milleniums | User Error 21 first appeared on Jupiter Broadcasting.

Video Feed | MP3 Feed | HD Torrent | iTunes

Become an Unfilter supporter on Patreon:

— Show Notes —

Links

• Senate bill would require court’s approval for Trump firing Mueller | TheHill
• Democrats fear Republican attacks tying them to Pelosi | McClatchy Washington Bureau
• Mueller Seeks White House Documents on Flynn – The New York Times
• Michael Flynn to disclose advisory role linked to Cambridge Analytica | US news | The Guardian
• Bongino: Maxine Waters Is a Fraud | Fox News Insider
• Report: This is Loretta Lynch’s latest email scandal — it involves the Clintons – TheBlaze
• Trump gets a folder full of positive news about himself twice a day – VICE News
• WikiLeaks: Alcohol Industry Encourages Congressional Concern About Cannabis – Accmag
• Senators Aim To Protect Mueller From Being Fired As Special Counsel : NPR One
• North Korea threatens Guam after Trump remarks | TheHill
• Trump has sent messages ‘back and forth’ with Mueller, attorney says | Fox News
• What Donald Trump’s ‘fire and fury’ on North Korea might signify
• Investigator: ‘Donna Brazile is in a Category of Persons of Interest as it Relates to the Death of Seth Rich’ – Big League Politics
• Sessions promises of pot crackdown up in smoke | Fox News
• Donald Trump sent private messages to special counsel Mueller
• Trump Campaign Turns Over Thousands of Documents in Russia Probe – Bloomberg
• Putin Is Mocking Trump and His Golf Game, Warns Ex-Ambassador to Russia
• FBI executed search warrant at Paul Manafort’s home in Russia probe – ABC News
• OPINION | Dershowitz: Why did Mueller impanel a second grand jury in DC? | TheHill
• Transcript: Trump urged Mexican president to stop criticizing wall – CNNPolitics
• Transcripts of Trump’s calls with Mexico and Australia – Washington Post
• What is the Kronos malware trojan that Marcus Hutchins is accused of creating? | WIRED UK
• Researcher Who Stopped WannaCry Ransomware Detained in US After Def Con – Motherboard
• WannaCry Researcher Indicted for Allegedly Creating Banking Malware – Motherboard
• Kronos Indictment R
• MalwareTech researcher Marcus Hutchins has been granted a $30,000 bail – Business Insider
• WannaCry-Stopping Hacker MalwareTech Charged With Helping Write Kronos Banking Trojan | WIRED
• MalwareTech on Twitter: “Anyone got a kronos sample?”

The post Fire and Fury | Unfilter 247 first appeared on Jupiter Broadcasting.

Video Feed | MP3 Feed | HD Torrent | iTunes

Become an Unfilter supporter on Patreon:

— Show Notes —

Links:

• President Trump’s Lies, the Definitive List – The New York Times
• Obama’s secret struggle to retaliate against Putin’s election interference – Washington Post
• CNN deletes, retracts story linking Trump and Russia
• Report: Pro-Clinton Group Behind Russian Dossier on Trump | Fox News Insider
• Bernie and Jane Sanders hire lawyers in FBI-involved investigation
• CNN Executive Editor Demands To Review All Future Russia-Related Stories…”No Exceptions” | Zero Hedge
• Three journalists quit CNN in fallout from retracted Russia story | Fox News
• ‘Historic’ cyber attack hits Ukraine government and businesses – France 24
• Cannabis as a substitute for prescription drugs – a cross-sectional study | JPR
• CNN’s Russia story debacle came at the worst possible time for the network – The Washington Post
• How one typo helped let Russian hackers in – CNNPolitics.com
• Massive cyber attack spreads across the globe | Fox Business
• Reality Winner case: Accused leaker’s trial set for October 23 – CNN.com
• Alleged NSA Leaker Reality Winner Appears in Federal Court, Trial Date Set – NBC News
• Sanders: FBI inquiry of wife is ‘pathetic’ attack | TheHill
• Ingredient in Roundup weed killer going on list as potentially cancerous – CBS News
• ‘Petya’ Ransomware Hits At Least 65 Countries; Microsoft Traces It To Tax Software : The Two-Way : NPR
• Global Ransomware Attack: What We Know and Don’t Know – The New York Times
• A new ransomware outbreak similar to WCry is shutting down computers worldwide | Ars Technica
• Chernobyl monitoring system hit by global cyber attack – CNN.com
• Insurance Study Ties Legal Pot to Boost in Car Crash Claims | Washington, DC News | US News
• Marijuana, car crash study: Legalized marijuana linked to car crashes
• Claim rates go up where marijuana is legal
• Insurance study ties legal pot to boost in car crash claims – The Washington Post

The post Russian Nothing Burger | Unfilter 242 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

“Stack Clash” poses threat to Linux, FreeBSD, OpenBSD, and other OSes

• affects Linux, OpenBSD, NetBSD, FreeBSD and Solaris, on i386 and amd64

• The original blog post

• The official advisory

• The following is not a complete list of CVEs found during the research

• The primary CVE

• Some are secondary and directly related CVE

• Some are independently exploitable and related to sudo

The RNC Files: Inside the Largest US Voter Data Leak

• misconfigured database containing the sensitive personal details of over 198 million American voters was left exposed to the internet by a firm working on behalf of the Republican National Committee (RNC)

• names, dates of birth, home addresses, phone numbers, and voter registration details, as well as data described as “modeled” voter ethnicities and religions.

• exposing the personal information of over sixty-one percent of the entire US population

Dan’s DNS setup

• DNS can be thought of as a phone book
• Once ran a single DNS server at home
• Had both internal (non public) and public hosts in the same zone file
• Moved internal hosts to .int subdomain
• had master/slave in public, but went to svn later
• Held zone files in svn, published them directly to servers

Feedback

• Freenas – Transferring files locally see sysutils/fusefs-ntfs

• Password managers filling in credentials

• Episode 323 Yellow dots give you see also https://en.wikipedia.org/wiki/EURion_constellation

• You cannot turn off Windows 10 Telemetry with a Group Policy

Round Up:

• WannaCry computer worm to North
  Korea

• Rooting a Printer

• Travel (Linux) laptop setup

• FreeNAS 11.0 is Now Here

The post DNS Mastery | TechSNAP 324 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Cultivating cybersecurity talent

• Unit 8200 dates back to 1952

Theresa may to create new internet that would be controlled and regulated by government

• Theresa May is planning to introduce huge regulations on the way the internet works, allowing the government to decide what is said online.

new SMB worm using 7 NSA tools not 2

• New SMB Worm Uses Seven NSA Hacking Tools. WannaCry Used Just Two

Feedback

• WannaCry – an overlooked defense

• user feedback on why no autofill for password managers

• Finnish developer shows how browser autofill profiles can be exploited to leak information

• DVL might want to remove webring

Round Up:

• The new normal?

• Congress introduces bill to stop US from stockpiling cyber-weapons

• The increased use of powershell in attacks

• Chipotle says ‘most’ of its restaurants were infected with credit card stealing malware

• Comcast tries to censor pro-net neutrality website calling for investigation of fake FCC comments potentially funded by cable lobby

• What is astroturfing? vs grassroots movements

The post A Burrito Stole My Money | TechSNAP 321 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Cisco’s Talos Intelligence Group Blog: Player 3 Has Entered the Game: Say Hello to ‘WannaCry’

FCC Filings Overwhelmingly Support Net Neutrality Once Anti-Net Neutrality Spam is Removed

• Net Neutrality II: Last Week Tonight with John Oliver (HBO)

• Because of a procedural quirk, the FCC will not be considering any comments on the issue of net neutrality that are submitted over the next week or so.

• https://youtu.be/qI5y-_sqJT0 — follow up video

Feedback

• IPv6 only

• ZoL and other Linux Filesystems

Round Up:

• Ways in which the WannaCry ransomware could have been much worse

• Postmortem for outage of us-east-1

• 1.9 million Bell customer email addresses stolen by ‘anonymous hacker’ – Technology & Science – CBC News

• Appcanary – Everything you need to know about HTTP security headers

• GitHub – schollz/howmanypeoplearearound: Count the number of people around you by monitoring wifi signals

The post Kill Switch Engage | TechSNAP 320 first appeared on Jupiter Broadcasting.

HD Video Feed | MP3 Audio Feed | iTunes Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

Hackers Hit Dozens of Countries Exploiting Stolen N.S.A. Tool

• Timeline of the attach

• Don’t tell people to turn off Windows Update, just don’t

• U.K. Hospitals Hit in Widespread Ransomware Attack

+The need for urgent collective action to keep people safe online: Lessons from last week’s cyberattack

+ Microsoft Issues WanaCrypt Patch for Windows 8, XP

• Global ‘Wana’ Ransomware Outbreak Earned Perpetrators $26,000 So Far

• Tim Cook’s refusal to help FBI hack iPhone is validated by ‘WannaCry’ ransomware attack

• WCry/WanaCry Ransomware Technical Analysis

• Stopping the malware by registering a domain

Keylogger Found in Audio Driver of HP Laptops

• HP issues fix for ‘keylogger’ found on several laptop models

Feedback

• Budget switches By request, some of Dan’s 10G stuff two zpools

• Password Manager – Why No Autofill?

Round Up:

• Fastmail’s https://blog.fastmail.com/2017/05/13/nyi-datacentre-move/

• Debugging Under Fire: Keep your Head when Systems have Lost their Mind • Bryan Cantrill

The post When IT Security Cries | TechSNAP 319 first appeared on Jupiter Broadcasting.