February 2021 - wlug - list.wlug.org.nz

Kali Linux 2021.1 Released: Tweaked DEs and Terminals, New Tools, Silicon Macs
by Peter Reutemann 01 Mar '21

01 Mar '21

'Offensive Security has released Kali Linux 2021.1, the latest version of its popular open source penetration testing platform. You can download it or upgrade to it. Kali NetHunter, the distro's mobile pentesting platform, now has an upgraded BusyBox engine and tools updated to the latest version (or, in some cases, completely rewritten). There are two new Kali ARM images: one that can be used with VMs on Apple Silicon Macs (Apple M1) and the other for the Raspberry Pi 400's wireless card.' -- source: https://linux.slashdot.org/story/21/02/27/043218 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Brave Privacy Bug Exposed Tor Onion URLs To Your DNS Provider
by Peter Reutemann 01 Mar '21

01 Mar '21

'Brave Browser had a privacy issue that leaked the Tor onion URL addresses you visited to your locally configured DNS server, "exposing the dark web websites you visit...", writes Bleeping Computer. Long-time Slashdot reader AmiMoJo quotes their report: To access Tor onion URLs, Brave added a "Private Window with Tor" mode that acts as a proxy to the Tor network. When you attempt to connect to an onion URL, your request is proxied through volunteer-run Tor nodes who make the request for you and send back the returned HTML. Due to this proxy implementation, Brave's Tor mode does not directly provide the same level of privacy as using the Tor Browser. When using Brave's Tor mode, it should forward all requests to the Tor proxies and not send any information to any non-Tor Internet devices to increase privacy. However, a bug in Brave's "Private window with Tor" mode is causing the onion URL for any Tor address you visit to also be sent as a standard DNS query to your machine's configured DNS server. This bug was first reported in a Reddit post and later confirmed by James Kettle, the Director of Research at PortSwigger. BleepingComputer has also verified the claims by using Wireshark to view DNS traffic while using Brave's Tor mode. Brave has since released an update which fixes the bug.' -- source: https://yro.slashdot.org/story/21/02/27/221208 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Introducing Crowdsec: a Modernized, Collaborative Massively Multiplayer Firewall
by Peter Reutemann 01 Mar '21

01 Mar '21

'CrowdSec is a massively multiplayer firewall designed to protect Linux servers, services, containers, or virtual machines exposed on the Internet with a server-side agent. It was inspired by Fail2Ban and aims to be a modernized, collaborative version of that intrusion-prevention tool. CrowdSec is free and open-source (under an MIT License), with the source code available on GitHub. It uses a behavior analysis system to qualify whether someone is trying to hack you, based on your logs. If your agent detects such aggression, the offending IP is then dealt with and sent for curation. If this signal passes the curation process, the IP is then redistributed to all users sharing a similar technological profile to 'immunize' them against this IP. The goal is to leverage the power of the crowd to create a real-time IP reputation database. As for the IP that aggressed your machine, you can choose to remedy the threat in any manner you feel appropriate. Ultimately, CrowdSec leverages the power of the community to create an extremely accurate IP reputation system that benefits all its users. It was clear to the founders that Open Source was going to be one of the main pillars of CrowdSec. The project's founders have been working on open-source projects for decades — they didn't just jump on the train. Rather, they are strong Open Source believers. They believe that the crowd is key to the mass hacking plague we are experiencing, and that Open Source is the best lever to create a community and have people contribute their knowledge to the project, ultimately make it better and more secure. The solution recently turned 1.x, introducing a major architectural change: the introduction of a local REST API.' -- source: https://linux.slashdot.org/story/21/02/27/2215223 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox's Total Cookie Protection Aims To Stop Tracking Between Multiple Sites
by Peter Reutemann 24 Feb '21

24 Feb '21

'As part of its war on web tracking, Mozilla is adding a new tool to Firefox aimed at stopping cookies from keeping tabs on you across multiple sites. From a report: The "Total Cookie Protection" feature is included in the web browser's latest release -- alongside multiple picture-in-picture views -- and essentially works by keeping cookies isolated between each site you visit. Or, in Mozilla's words: "By creating a separate cookie jar for every website." Firefox's new feature pares with last month's network partitioning tool, which works by splitting the Firefox browser cache on a per-website basis to prevent tracking across the web, itself targeted at blocking more stubborn "supercookies." According to Mozilla, these types of cookies are more difficult to delete and block as they are stored in obscure parts of the browser, including in Flash storage, ETags, and HSTS flags. Both tools are available as part of Firefox's enhanced tracking protection suite in "strict mode" on desktop and Android.' -- source: https://news.slashdot.org/story/21/02/23/1513219 -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New TLD For Spammers
by Lawrence D'Oliveiro 21 Feb '21

21 Feb '21

Normally I get only a handful of spam e-mails per day -- greylisting is that effective at keeping most of them out. But over the past couple of days, this moved closer to being a flood like the bad old days, with several dozen coming in over the last 24 hours or so. Doing a quick check, all the ones I looked at were being sent from *.cyou domains. Yes, there really is such a top-level domain now. But given that it seems to be used entirely for spam, it’s easy enough to add a line to my block_sender file: /^.+(a).+\.cyou$/ REJECT

1 0

The world’s second-most popular desktop operating system isn’t macOS anymore
by Peter Reutemann 21 Feb '21

21 Feb '21

'For ages now, every annual report on desktop operating system market share has had the same top two contenders: Microsoft's Windows in a commanding lead at number one and Apple's macOS in distant second place. But in 2020, Chrome OS became the second-most popular OS, and Apple fell to third. That's according to numbers from market data firm IDC and a report on IDC's data by publication GeekWire. Chrome OS had passed macOS briefly in individual quarters before, but 2020 was the first full year when Apple's OS took third place. Despite the fact that macOS landed in third, viewing this as an example of Google beating out Apple directly might not be accurate. Rather, it's likely that Chrome OS has been primarily pulling sales and market share away from Windows at the low end of the market. Mac market share actually grew from 6.7 percent in 2019 to 7.5 percent in 2020. Meanwhile, Chrome OS skyrocketed from 6.4 percent in 2019 to 10.8 percent in 2020. Windows fell from 85.4 percent to 80.5 percent.' -- source: https://arstechnica.com/gadgets/2021/02/the-worlds-second-most-popular-desk… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New browser-tracking hack works even when you flush caches or go incognito
by Peter Reutemann 21 Feb '21

21 Feb '21

'The prospect of Web users being tracked by the sites they visit has prompted several countermeasures over the years, including using Privacy Badger or an alternate anti-tracking extension, enabling private or incognito browsing sessions, or clearing cookies. Now, websites have a new way to defeat all three. The technique leverages the use of favicons, the tiny icons that websites display in users’ browser tabs and bookmark lists. Researchers from the University of Illinois, Chicago said in a new paper that most browsers cache the images in a location that’s separate from the ones used to store site data, browsing history, and cookies. Websites can abuse this arrangement by loading a series of favicons on visitors’ browsers that uniquely identify them over an extended period of time. [...] The attack works against Chrome, Safari, Edge, and until recently Brave, which developed an effective countermeasure after receiving a private report from the researchers. Firefox would also be susceptible to the technique, but a bug prevents the attack from working at the moment.' -- source: https://arstechnica.com/information-technology/2021/02/new-browser-tracking… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Top Banks Join Linux and Open-Source Patent Protection Group
by Peter Reutemann 21 Feb '21

21 Feb '21

'ZDNet reports: When it comes to defending the intellectual property (IP) rights of Linux and open-source software, global leading banks aren't the first businesses to come to mind. Things have changed. Barclays, the London-based global corporate and investment bank, and the TD Bank Group, with its 26-million global customers, have joined the leading open-source IP defense group, the Open Invention Network (OIN). For years, the OIN, the largest patent non-aggression consortium, has protected Linux from patent attacks and patent trolls. Recently, it expanded its scope from core Linux programs and adjacent open-source code by expanding its Linux System Definition. In particular, that means patents relating to the Android Open Source Project (AOSP) 10 and the Extended File Allocation Table exFAT file system are now protected... Besides joining the OIN, Barclay is also joining the LOT Network. This is another fast-growing nonprofit group of companies that aims to stop patent trolls in their tracks. It has more than 1,100 member companies and covers over 2 million patent assets. Why? The "IP and Patentable Innovations Lead" at TD noted that activity from so-called patent assertion entities "continues to trend upward in the banking industry," according to ZDNet. He argues they "have become a tax on business and we're willing to explore any reasonable means to address such risks..."' -- source: https://news.slashdot.org/story/21/02/20/0244211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Is Now on Mars, Thanks to NASA's Perseverance Rover
by Peter Reutemann 21 Feb '21

21 Feb '21

'"When NASA's Perseverance rover landed on Mars this week, it also brought the Linux operating system to the Red Planet," reports PC Magazine: The tidbit was mentioned in an interview NASA software engineer Tim Canham gave to IEEE Spectrum. The helicopter-like drone on board the Perseverance rover uses a Linux-powered software framework the space agency open-sourced a few years ago. "This the first time we'll be flying Linux on Mars. We're actually running on a Linux operating system," Canham said. It also might be the first time NASA has brought a Linux-based device to Mars. "There isn't a previous use of Linux that I'm aware of, definitely on the previous rovers," Canham told PCMag in an email. Past Mars rovers have used proprietary OSes, largely from the software company Wind River Systems. The same is true for the Perseverance rover itself; the machine has been installed with Wind River's VxWorks, which was used on past Mars missions. The article also notes that the helicopter-like drone Ingenuity "was built using off-the-shelf parts, including Qualcomm's Snapdragon 801 processor, a smartphone chip." "Ingenuity is purely a technology demonstration," notes ZDNet. "It's not designed to support the Perseverance mission, which is searching for signs of ancient life and collecting rock and dirt samples for later missions to return to Earth. Its mission is to show that it's possible to fly on Mars using commercial off-the-shelf hardware and open-source software."' -- source: https://science.slashdot.org/story/21/02/20/1830240 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Re: wlug Digest, Vol 356, Issue 12
by tom butz 20 Feb '21

20 Feb '21

I'll be away for a week, Tom Butz. On 20/02/2021, wlug-request(a)list.waikato.ac.nz <wlug-request(a)list.waikato.ac.nz> wrote: > Send wlug mailing list submissions to > wlug(a)list.waikato.ac.nz > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > wlug-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > wlug-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of wlug digest..." > > Today's Topics: > > 1. WLUG meeting (Peter Reutemann) > > > ---------------------------------------------------------------------- > > Date: Fri, 19 Feb 2021 14:28:33 +1300 > From: Peter Reutemann <fracpete(a)gmail.com> > Subject: [wlug] WLUG meeting > To: wlug List <wlug(a)list.waikato.ac.nz> > Message-ID: <0C32B561-3ED3-4525-970F-7C0CACAEAE1F(a)gmail.com> > Content-Type: text/plain; charset=utf-8 > > Hi everyone > > We have a meeting next Monday: > "Roger Hardy and Lawrence D'Oliveiro will talk about experiences of a small > business with locally hosted server virtualisation using open source Xen > based hypervisors." > > Details: > https://www.meetup.com/WaikatoLinuxUsersGroup/events/274861044/ > > Cheers, Peter > -- > Peter Reutemann > Dept. of Computer Science > University of Waikato, NZ > +64 (7) 577-5304 > http://www.cms.waikato.ac.nz/~fracpete/ > http://www.data-mining.co.nz/ > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > wlug mailing list -- wlug(a)list.waikato.ac.nz > To unsubscribe send an email to wlug-leave(a)list.waikato.ac.nz > > > ------------------------------ > > End of wlug Digest, Vol 356, Issue 12 > ************************************* >

1 0