Monday, March 23, 2020

Corona Malware

This blog has been suspended for a bit because it's practicing social distancing.
Or no one reads it.
Or I'm too lazy.
Or the stripper stories go on the other blog.

See you soon.


Friday, March 20, 2020

COVIDCOVIDCOVIDCOVID




Now that we have that our of our system....


Misconfigured Elasticsearch Instance Exposes More Than 5 Billion Records
MISconfigured or NOT configured?


Attack Surface, Vulnerabilities Increase as Orgs Respond to COVID-19 Crisis


Top 5 Open Source Serverless Security Tools


Open-source project spins up 3D-printed ventilator validation prototype in just one week


Rogers Data Breach Exposed Customer Info in Unsecured Database


Tools to Access The Linux File System from Windows


Open Source Cloud Storage: 14 Top Tools


What do you not want right now? A bunch of Cisco SD-WAN, Webex vulnerabilities? Here are a bunch of them


Surge in home working highlights Microsoft licensing issue: if you are not on subscription, working remotely is a premium feature


Thought you'd go online to buy better laptop for home working? Too bad, kid. So did everyone. Laptops, monitors and WLANs fly off shelves
The lesson here is to always have a high performance laptop. Presenting it to your spouse is your own business.


IT Security Report Finds 97 Percent Have Suspicious Network Activity
SHOCKING!





LINUX


How to Install OwnCloud on Ubuntu 18.04


How to Check Bad Sectors or Bad Blocks on Hard Disk in Linux


Using Keepalived for managing simple failover in clusters


How To Sync Browser Profile Into Tmpfs (RAM) In Linux






Wednesday, March 18, 2020

Browser Privacy Wars





TrueFire Guitar Tutoring Website Suffers Magecart-style Credit Card Breach
ahem... go ahead and piss off a group of people with very heavy guitars, who can't count past 4.  
1...2...3...4...


Well, it's not exactly a war. It's not even a friendly competition.
In fact, it's not even a topic.
Here's a study that ranks the privacy of major browsers.

I disagree with some of it - form your own opinion.



Surveillance Company Says It's Deploying 'Coronavirus-Detecting' Cameras in US

U.S. government, tech industry discussing ways to use smartphone location data to combat coronavirus

Pervasive digital surveillance of citizens deployed in COVID-19 fight, with rules that send genie back to bottle

Sense a theme here?



LINUX   

Exploring the Linux /proc filesystem
it's like spelunking without all that being outside and exertion  

How To Disable Unattended Upgrades On Ubuntu

Viewing and configuring password aging on Linux


How Red Hat tackles security
very carefully, so it doesn't get traumatic brain injury  


Tuesday, March 17, 2020

Brave Goes After Google




Brave browser delivers on promise, files GDPR complaint against Google.
Should be interesting...


Windows 10 now runs on 1 billion devices
What do you expect? The 10,000lb gorilla cornered the market.
Now we must suffer.


Fake Coronavirus Quarantine Text Messages May Be Result of Cyberattack
I know we need the rule of law, but if the actor is found and his name released, maybe nature will take care of itself...








LINUX

Restic – A Fast, Secure And Efficient Backup Application


How to Install R on CentOS 8
I prefer Q


CentOS 8 set up WireGuard VPN server


Open source alternative for multi-factor authentication: privacyIDEA


The $199 Pinebook Pro Gets Even Better With New Manjaro KDE Version
at this price, but a few


How to Install RPM on CentOS

New Webpage Intros the Benefits to using Ubuntu and WSL on Windows 10
We built a castle on the moors and it sank. We built another castle and IT sank [Monty Python]


New Ubuntu Linux Security Updates Arrive for All Supported Releases



Monday, March 16, 2020

Coronavirus Ate My RAM




List of Free Software and Services During Coronavirus Outbreak


Research Finds Microsoft Edge Has Privacy-Invading Telemetry
we're shocked... SHOCKED


Microsoft Teams goes down just as Europe logs on to work remotely


Senate bill would ban TikTok from government phones
seriously? Drunk AND asleep at the wheel


Princess Cruises Confirms Data Breach
these guys couldn't sneeze without screwing it up


Microsoft: WSL2's Linux kernel will be delivered to Windows 10 users via Windows Update
Satan called, requested blankets and a heater.


Smart home developers raise concerns about Alexa and Google Assistant security  What security?


Live Coronavirus Map Used to Spread Malware


Data of millions of eBay and Amazon shoppers exposed
BUCKETS - surprise!




LINUX

Vim Tips – Edit Remote Files With Vim On Linux


Tails 4.4 Anonymous OS Released with Tor Browser 9.0.6


How to Set Up NFS Server and Client on CentOS 8


How to Install Perl Modules Using CPAN on CentOS 8



Friday, March 13, 2020

MS Delivers Patch to Save You from Last Patch




Microsoft delivers emergency patch to fix wormable Windows 10 flaw


Modern RAM used for computers, smartphones still vulnerable to Rowhammer attacks      They said they'd get right on it - what the hell do you want from them?  


Say hello to your new best friend 'LVI' - another security flaw in CPUs for Intel


WordPress Plugin Bug Allows Malicious Code Injection on 100K Sites
it's been a while since the last WordPress bug.. earlier in the week, I think.  

Office 365 ATP To Block Email Domains That Fail Authentication
of course you'd have to use Office 365 to get this feature. I don't think it's worth it.


New CoronaVirus Ransomware Acts as Cover for Kpot Infostealer


Data of millions of eBay and Amazon shoppers exposed






LINUX   


Regular Expressions in Grep (Regex)
I prefer exclamatory expressions  


Sysadmin tools: exa, a modern alternative to ls in Linux





Thursday, March 12, 2020

Coronavirus Crosses to Computers





Crafty Web Skimming Domain Spoofs “https”
What WHO calling the coronavirus outbreak a pandemic means
it means more headlines to beat the dead horse. It also means a ton of people working from home. Is your infrastructure up to it?


Federal report warns U.S. is unready for a cyberattack
I could have produced this report at a cost of $1 million and 6 minutes.






LINUX


How to Install and Configure an NFS Server on Ubuntu 18.04


How To Disable Touchpad While Typing In Ubuntu Using Syndaemon Program


Introduction to the alternatives command in Linux


3 ways to configure a network interface in Linux


5 Ways To Repeat Your Last Command In Linux



Wednesday, March 11, 2020

Told You So




The Internet of Things is a security nightmare reveals latest real-world analysis: unencrypted traffic, network crossover, vulnerable OSes

And the best part of it? Hospitals are most at risk


US telcos tossed yet another extension to keep going with Huawei kit despite America's 'security threat' concerns   Yes, we're damn serious about security.

This after we gave them $1 billion to help them change gear.



Anonymous secret sharing app Whisper left sensitive profile data exposed for years   The database was not password protected and anyone could search and download it

Who are they hiring to do this stuff?
Nobody. Bob the janitor did it for free.


Some mobile ad-blockers and VPNs siphoning user data, report finds
Who coulda seen that coming? It's just an analytics company....


L1ght Looks to Protect Internet Users from Toxic and Predatory Behavior
I can guarantee no good will come of this. But it's for the children......




LINUX  

How to Start Linux Command in Background and Detach Process in Terminal

You-Get – downloader that scrapes the web

How to Enable Nested Virtualization in VirtualBox on Linux
Would that be a swallow's nest? Swallows are non-migratory

Automatically Optimize CPU Speed And Power With Auto-cpufreq In Linux

7 tips to speed up your Linux command line navigation
Your spouse yelling "HURRY UP" is not one of them






Monday, March 9, 2020

Symantec Won't Defend Against Coronavirus




7 Cloud Attack Techniques You Should Worry About


US Govt Shares Tips to Defend Against Coronavirus Cyber Scams


AMD Ryzen 4000 Laptops Will Allegedly Last up to 18 Hours
provided you don't turn it on.....


New AMD Side Channel Attacks Discovered, Impacts Zen Architecture (AMD Responds)


'Unfixable' boot ROM security flaw in millions of Intel chips could spell 'utter chaos' for DRM, file encryption, etc



Thursday, March 5, 2020

McAfee doesn't protect against coronavirus




Coronavirus warning spreads computer virus


Zynga faces class action suit over massive Words With Friends hack


Windows Explorer Used by Mailto Ransomware to Evade Detection


Carnival Cruise Line Operator Discloses Potential Data Breach


The Linux Foundation is Sometimes Against Linux and Its Official Blog Posts Come From Microsoft Veterans This Month (Nowadays It's Not Even Shocking)


You can now jailbreak an iPhone with an Android phone



Wednesday, March 4, 2020

Open Snitching


Let's (not) Encrypt discovers CAA bug, must revoke customer certificates






LINUX

Are you ready?
Open Snitch is available, forked from the original, which went tits-up.
It monitors outgoing traffic, like a firewall. You can control connections per app.

Ubuntu shortcuts everyone should know
except, possibly, non-Ubuntu users


Bash script to check how long the high CPU/memory consumption processes runs


Pkill command
killall is much more satisfying


Wine 5.3 released.
Comes with much stuff


Watching activity with watch and tail commands



Monday, March 2, 2020

Set Up the Jails!




WireGuard - fast, modern and secure VPN tunnel


How to set up chroot jails


How to create and launch Ubuntu VMs with Multipass


Android-x86 9.0 released - run Android 9 Pie on your pc


Hiding Windows file extensions is a security risk - enable now
This title was brought to you by 1998


Windows 10 1909 starts getting Microsoft's fluent icons
Users who have updates turned off will get these first


Hackers can use ultrasonic waves to secretly control voice assistant devices
If these things murdered family members, people wouldn't unplug them...


GhostCat - high risk vuln affects servers running Apache Tomcat




Corona Malware

This blog has been suspended for a bit because it's practicing social distancing. Or no one reads it. Or I'm too lazy. Or the str...