November 2017 - wlug - list.wlug.org.nz

Google Patches KRACK WiFi Flaw in Android November Security Update
by Peter Reutemann 10 Nov '17

10 Nov '17

'Some vendors take longer than others to update for critical vulnerabilities - case in point is Google's Android mobile operating system. On Nov. 6, Google released an Android update patching a vulnerability that IT vendors have known about for months. On Oct. 16, security researcher Mathy Vanhoef working at Belgian University KU Leuven publicly disclosed the KRACK WiFi vulnerability that impacted all WiFi devices that use WPA2 encryption, including every Android device ever built.' -- source: https://www.esecurityplanet.com/mobile-security/google-patches-krack-wifi-f… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Samsung Demos Linux Desktop on Its Galaxy Smartphones
by Lawrence D'Oliveiro 10 Nov '17

10 Nov '17

“Concept Demo”, it says, running Ubuntu <http://www.theregister.co.uk/2017/11/10/linux_on_galaxy_video_demo/>.

1 0

Intel To Ship Processors With Integrated AMD Graphics And Memory
by Lawrence D'Oliveiro 09 Nov '17

09 Nov '17

Intel’s gen-8 H-series mobile processors will integrate an AMD Radeon GPU <https://arstechnica.com/gadgets/2017/11/intel-will-ship-processors-with-int…>.

3 4

MINIX: Intel's Hidden In-chip Operating System
by Peter Reutemann 09 Nov '17

09 Nov '17

'Matthew Garrett, the well-known Linux and security developer who works for Google, explained recently that, "Intel chipsets for some years have included a Management Engine [ME], a small microprocessor that runs independently of the main CPU and operating system. Various pieces of software run on the ME, ranging from code to handle media DRM to an implementation of a TPM. AMT [Active Management Technology] is another piece of software running on the ME." [...] At a presentation at Embedded Linux Conference Europe, Ronald Minnich, a Google software engineer reported that systems using Intel chips that have AMT, are running MINIX. So, what's it doing in Intel chips? A lot. These processors are running a closed-source variation of the open-source MINIX 3. We don't know exactly what version or how it's been modified since we don't have the source code. In addition, thanks to Minnich and his fellow researchers' work, MINIX is running on three separate x86 cores on modern chips. There, it's running: TCP/IP networking stacks (4 and 6), file systems, drivers (disk, net, USB, mouse), web servers. MINIX also has access to your passwords. It can also reimage your computer's firmware even if it's powered off. Let me repeat that. If your computer is "off" but still plugged in, MINIX can still potentially change your computer's fundamental settings. And, for even more fun, it "can implement self-modifying code that can persist across power cycles." So, if an exploit happens here, even if you unplug your server in one last desperate attempt to save it, the attack will still be there waiting for you when you plug it back in. How? MINIX can do all this because it runs at a fundamentally lower level. [...] According to Minnich, "there are big giant holes that people can drive exploits through." He continued, "Are you scared yet? If you're not scared yet, maybe I didn't explain it very well, because I sure am scared." Also read: Andrew S. Tanenbaum's (a professor of Computer Science at Vrije Universiteit) open letter to Intel' -- source: https://tech.slashdot.org/story/17/11/07/1041236 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

How to Install Cacti with Cacti-Spine in Debian and Ubuntu
by Peter Reutemann 09 Nov '17

09 Nov '17

'In this tutorial we’ll learn how to install and configure Cacti network monitoring tool in the latest version of Debian and Ubuntu 16.04 LTS. Cacti will be build and installed from source files during this guide. Cacti is an open source monitoring tool created for monitoring networks, especially network devices, such as switches, routers, servers via SNMP protocol. Cacti interacts with end-users and can be administered via a web tool interface.' -- source: https://www.tecmint.com/install-cacti-with-cacti-spine-in-debian-and-ubuntu/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

ubuntu.com down?
by Peter Reutemann 09 Nov '17

09 Nov '17

Tried to go to Ubuntu's homepage and was greeted with a 503 error message (see attachment)... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Bruce Schneier On The Equifax Breach
by Lawrence D'Oliveiro 08 Nov '17

08 Nov '17

Security expert Bruce Schneier has published <https://www.schneier.com/blog/archives/2017/11/me_on_the_equif.html> the testimony he gave to the US House Energy and Commerce Committee on the breach of confidential personal information on close to half the entire population of the US. His main points are worth summarizing: 1. The Equifax breach was a serious security breach that puts millions of Americans at risk. 2. Equifax was solely at fault. 3. There are thousands of data brokers with similarly intimate information, similarly at risk. 4. These data brokers deliberately hide their actions, and make it difficult for consumers to learn about or control their data. 5. The existing regulatory structure is inadequate. 6. The market cannot fix this because we are not the customers of data brokers. 7. We need effective regulation of data brokers. 8. Resist complaints from the industry that this is "too hard." 9. This has foreign trade implications. 10. This has national security implications. 11. We need to do something about it. Read the article for more detail. I would say this is more than a US-specific problem, it is a worldwide problem. Other places may have stricter privacy regulations, but that might not be enough.

1 0

Linux Has a USB Driver Security Problem
by Peter Reutemann 08 Nov '17

08 Nov '17

'USB drivers included in the Linux kernel are rife with security flaws that in some cases can be exploited to run untrusted code and take over users' computers. The vast majority of these vulnerabilities came to light on Monday, when Google security expert Andrey Konovalov informed the Linux community of 14 vulnerabilities he found in the Linux kernel USB subsystem. "All of them can be triggered with a crafted malicious USB device in case an attacker has physical access to the machine," Konovalov said. The 14 flaws are actually part of a larger list of 79 flaws Konovalov found in Linux kernel USB drivers during the past months. Not all of these 79 vulnerabilities have been reported, let alone patched. Most are simple DoS (Denial of Service) bugs that freeze or restart the OS, but some allow attackers to elevate privileges and execute malicious code.' -- source: https://linux.slashdot.org/story/17/11/08/1730210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Create & manage docker hosts with Docker Machine on VirtualBox
by Peter Reutemann 08 Nov '17

08 Nov '17

'Docker Machine is a tool that let us install Docker Engine on virtual hosts on various platforms, on local environment as well on cloud. With Docker Machine, we can easily install docker hosts a Windows machine, a MAC machine or on cloud platform like AWS, AZURE etc. As we know that Docker Engine runs natively on Linux machines, so its pretty easy to get Docker working on Linux machines but for other OS like MAC or Windows this was a problem. So Docker Machine was introduced, especially for older versions of MAC & Windows (there are new native Docker apps for latest OS). Not meant only for Windows or MAC, Docker machine also provides efficient way to provision multiple Docker hosts on local as well as cloud network. To manage the docker hosts, we use rather than using ‘docker’ command, which is used with docker engine. In this tutorial, we will discuss how we can create & manage docker hosts with Docker Machine on VirtualBox.' -- source: http://linuxtechlab.com/create-manage-docker-hosts-with-docker-machine/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Apache OpenOffice: We're OK With Not Being Super Cool
by Peter Reutemann 08 Nov '17

08 Nov '17

'Despite being the subject of a deathwatch -- perhaps mainly by fans of rival LibreOffice -- AOO appears to be rather popular, with the 4.1.4 update racking up at least 1.6 million downloads. [...] While AOO and the ASF formulate a formal statement of direction for the project, Jagielski said more or less that all's well. "AOO is not, and isn't designed to be, the 'super coolest open source office suite with all the latest bells and whistles,'" Jagielski continued. "Our research shows that a 'basic,' functional office suite, which is streamlined with a 'simple' and uncluttered, uncomplicated UI, serves an incredible under-represented community. "Other office suites are focusing on the 'power user' which is a valuable market, for sure, but the real power and range for an open-source office suite alternative is the vast majority which is the 'rest of us. Sometimes we all forget how empowering open source is to the entire world."' -- source: https://news.slashdot.org/story/17/11/07/1944255 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0