It's the Bucket Lady!

That's Boo-KAY.


Private photos leaked by PhotoSquare's unsecured cloud storage.
By this, of course I mean open buckets.



US Govt Warns Critical Industries After Ransomware Hits Gas Pipeline Facility

Ummm.... yeah.. it makes sense (to me) to secure infrastructure. Maybe I'm alone.

BingWall is —Yes, a Bing Wallpaper App for Ubuntu

As South Park says, Jesus Tapdancing Christ, was the dev drunk?

Firefox 73.0.1 released with fixes for Win, Mac, and linux.

But we're not going to tell you what they are 

ISPs sue Maine - web privacy law violates their free-speech rights

because customers would have to opt-in before the ISPs can share your data

LINUX   

How to create new groups with groupadd command

groupadd Led Zeppelin  

Give your firewall a security boost  

with new Security Meth!  

Is your HOSTS file over 16G too?

Wherefore Art Thou, Citrix?

Attackers are scanning for vulnerable Citrix servers. Secure yours NOW.


Firefox 0-day - Active Attacks
Update NOW.


5 ways to do serverless on Kubernetes
I have no idea what it means, but Kubernetes is a buzzword lately.


How to set up an anonymous ftp download server in Fedora

Hacker Zero

HackerOne breach lets outside hacker read customers' private bug reports.
With a cookie. Cookies are the panacea of life.


In the continuing march to more expensive doom and possibly crippling radiation, here's some more great 5g news.  News: it's not going to make pancakes, watch your kids, or even let you use it.

In addition, the EU council is in a bit of a tizzy about 5g.


Firefox 71 released with native MP3 decoding, because patents expired. Other interesting features...including kiosk mode and password manager. Unfortunately the password manager requires a Firefox account. Just a little bit silly.


Are you ready for Nessus Map? It parses .Nessus files and shows output in interactive UI.


A coupla linux network troubleshooting commands (basic)


I've mentioned the Ring doorbell cameras.
So has Amazon: to the police. They gave the police a 'heatmap' of all devices in an area. While the feature was removed, you can be sure that Amazon would never do it again, nor would police expect them to.


The FBI applied for and received a search warrant to Sony on a PlayStation 4's owner. Apparently national security required the FBI to know what games the alleged cocaine seller had and how far he got in them.


Windows - it's not an OS, it's a virus.
A bug in the login system put users at risk of account hijacks.


Apple's i11 sends location data to Apple, even with location off. Apple sees no problem with this.

Telco Malware?

Mandiant has discovered malware that siphoned texts out of the telco's network.
Infects servers that route SMS messages.
Tracks back to... get ready..... a Chinese Government sponsored hacking group.

The only question that remains is who gets it first: the NSA or the Chinese?




Speaking of Chinese food, I don't eat it because it all tastes the same, regardless of where it's from. Bland. No spice.

Speaking of Chinese spying, the US Department of the Interior has grounded its 800 drone fleet over concerns of Chinese spying.

Here's the good part - you're gonna love it: DHS alerted about data security issues, specifically on Chinese drones.  Who woulda thought? Didn't we (temporarily and partially) ban Huawei networking products for this reason?

Would all the heads of government agencies who understand tech please stand in line. All of you. Any at all? Not even one? No, Sir, you're the janitor.. I'm sure you know more than the heads of agencies, but you're not the head of this agency.




The Pirate Bay was down for a week due to a DDoS attack.
Gee, I wonder where that came from....



As of Firefox 73, you can no longer sideload extensions.
The comments are priceless.

I like to sit alone on weekends and sideload, so this will affect me.



Happy Friday, everyone.
Sleep tight, and pray the large numbers of little brown bedbugs don't bite.

More Facial Recognition Woes

While messing around with this new blog's visual settings, I went for the most hideous combinations I could find. I hope you'll agree I succeeded. ThermionicEmissions has been described as "ugly as hell", "burns my retina", and "WTF?"  I can't hope to top that, so I may go more standard here. Please send a comment, regardless.



Facial recognition could compromise your medical images(!)
Rest assured, this data will be combined with other data and POOF - you're no longer anonymous.


Several vulnerabilities were found in VLC.
If you're not aware, VLC is an excellent media player that plays almost everything on almost every platform. One was in the OGG format, one ASF. These have been patched by VideoLAN, so update immediately.



The linux kernel is getting more reliable - Linus Torvalds.
Plus, what does a Chief Linux Maintainer do?
(at very least, a foul temper is required - and appreciated)


Faceyspaces will let someone find out your new identity even after you blocked them. Like an abusive ex.   I very desperately need to get me an account!


Another product I like, Firefox, has a bug that could copy saved passwords without the master password. This has been fixed as of 68.0.2.  Once again: do not save browser passwords or use browser password lockers. You're asking for it.


Brian Krebs on the $566 million breach of BriansClub.

• The 26 million cards in this breach represent almost 1/3 of the accounts for sale in the underground.
• What the watchdogs did.
• Large banks knew, smaller banks found out through VISA/MC alerts.

Apparently there's a Ford app that allows an owner/renter to remote control start/stop, lock/unlock, and track.

5 months after renting, a man still has the app and can still start/stop, lock/unlock, and track the vehicle. Ford has leapt to inaction by doing nothing.

While we're at it, the next time you rent a vehicle, DON'T HOOK YOUR PHONE TO THE STEREO. People don't delete their data and neither do the rental agencies. What kind of information is in your phone that you don't want to share with anyone who rents a car?

Linux Azure?

Per Microsoft: Azure Sphere OS, a linux-based IoT platform, will be available in February 2020.   Obviously this is an attempt to undermine linux


An Australian consumer watchdog sues Google over location data use.
Somebody needs to.


Q. What happens when your IoT device needs updating?
A. Nothing.


If you've got an iPhone 5, you better update it by November 3, or you'll lose your net access.  I don't like iDevices, but isn't that a little old?

Speaking of Apple, Airpods Pro will scan your ears to tell you if they fit correctly.  And if they're giving off enough superiority spray.


A religious website exposed user data for at least 6-7 months.  Oh God.


Mozilla acknowledged an issue in Firefox 70.0  with pages that use dynamic JavaScript. It affects at very least YouTube and Facebook.   And the problem is?


HAPPY BIRTHDAY, Internet  50 years young


A hacker security researcher managed to get access to all Xiaimo pet feeders around the world. She found 10,950 devices whose API allowed it to locate the rest of them.  Unrelated news: a pet obesity epidemic is upon us.


A persistent android dropper called Xhelper has infected 45,000 devices in the past 6 months. It plays ads incessantly, and if you try to uninstall, it reinstalls itself.





Have you ever spellchecked a tech blog? I have a very serious headache.