- wlug - list.wlug.org.nz

UK Government May Push Anti-Encryption Laws After Election
by Lawrence D'Oliveiro 25 May '17

25 May '17

Not too surprising to discover that some parties in the UK might be using the Manchester attack as a pretext to push through laws to ban secure encryption <https://www.theregister.co.uk/2017/05/25/uk_to_push_antiencryption_laws_aft…>. As if such a ban would have helped uncover a perpetrator who, by all accounts, had already been reported to the authorities multiple times...

3 5

A wormable code-execution bug has lurked in Samba for 7 years. Patch now!
by Peter Reutemann 25 May '17

25 May '17

'Maintainers of the Samba networking utility just patched a critical code-execution vulnerability that could pose a severe threat to users until the fix is widely installed. The seven-year-old flaw, indexed as CVE-2017-7494, can be reliably exploited with just one line of code to execute malicious code, as long as a few conditions are met. Those requirements include vulnerable computers that (a) make file- and printer-sharing port 445 reachable on the Internet, (b) configure shared files to have write privileges, and (c) use known or guessable server paths for those files. When those conditions are satisfied, remote attackers can upload any code of their choosing and cause the server to execute it, possibly with unfettered root privileges depending on the vulnerable platform. "All versions of Samba from 3.5.0 onwards are vulnerable to a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it," Samba maintainers wrote in an advisory published Wednesday. They urged anyone using a vulnerable version to install a patch as soon as possible.' -- source: https://arstechnica.com/security/2017/05/a-wormable-code-execution-bug-has-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Windows switch to Git almost complete: 8, 500 commits and 1, 760 builds each day
by Peter Reutemann 25 May '17

25 May '17

'Back in February, Microsoft made the surprising announcement that the Windows development team was going to move to using the open source Git version control system for Windows development. A little over three months after that first revelation, and about 90 percent of the Windows engineering team has made the switch.' -- source: https://arstechnica.com/information-technology/2017/05/90-of-windows-devs-n… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Malicious Subtitles Threaten VLC, Kodi and Popcorn Time Users, Researchers Warn
by Peter Reutemann 24 May '17

24 May '17

'Millions of people risk having their devices and systems compromised by malicious subtitles, according to a new research published by security firm Check Point. The threat comes from a previously undocumented vulnerability which affects users of popular streaming software, including Kodi, Popcorn-Time, and VLC. Developers of the applications have already applied fixes and in some cases, working on it. From a report: While most subtitle makers do no harm, it appears that those with malicious intent can exploit these popular streaming applications to penetrate the devices and systems of these users. Researchers from Check Point, who uncovered the problem, describe the subtitle 'attack vector' as the most widespread, easily accessed and zero-resistance vulnerability that has been reported in recent years. "By conducting attacks through subtitles, hackers can take complete control over any device running them. From this point on, the attacker can do whatever he wants with the victim's machine, whether it is a PC, a smart TV, or a mobile device," they write.' -- source: https://it.slashdot.org/story/17/05/24/1329211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Testing Windows Software For Vulns Too Slow? Do It On Linux!
by Lawrence D'Oliveiro 24 May '17

24 May '17

“Distributed, scalable fuzzing on Windows can be challenging and inefficient. This is especially true for endpoint security products, which use complex interconnected components that span across kernel and user space. This often requires spinning up an entire virtualized Windows environment to fuzz them or collect coverage data.” Porting stuff like Windows antivirus tools to Linux lets Ormandy “run the code I’m testing in minimal containers with very little overhead, and easily scale up testing”. Oh, and “I also think Linux has better tools”. <https://www.theregister.co.uk/2017/05/24/whats_got_a_vast_attack_service_an…>

1 0

WannaCry Makes an Easy Case For Linux
by Peter Reutemann 23 May '17

23 May '17

'The thing is, WannaCry isn't the first of its kind. In fact, ransomware has been exploiting Windows vulnerabilities for a while. The first known ransomware attack was called "AIDS Trojan" that infected Windows machines back in 1989. This particular ransomware attack switched the autoexec.bat file. This new file counted the amount of times a machine had been booted; when the machine reached a count of 90, all of the filenames on the C drive were encrypted. Windows, of course, isn't the only platform to have been hit by ransomware. In fact, back in 2015, the LinuxEncoder ransomware was discovered. That bit of malicious code, however, only affected servers running the Magento ecommerce solution. The important question here is this: Have their been any ransomware attacks on the Linux desktop? The answer is no. With that in mind, it's pretty easy to draw the conclusion that now would be a great time to start deploying Linux on the desktop. I can already hear the tired arguments. The primary issue: software. I will counter that argument by saying this: Most software has migrated to either Software as a Service (SaaS) or the cloud. The majority of work people do is via a web browser. Chrome, Firefox, Edge, Safari; with few exceptions, SaaS doesn't care. With that in mind, why would you want your employees and staff using a vulnerable system? [...] Imagine, if you will, you have deployed Linux as a desktop OS for your company and those machines work like champs from the day you set them up to the day the hardware finally fails. Doesn't that sound like a win your company could use? If your employees work primarily with SaaS (through web browsers), then there is zero reason keeping you from making the switch to a more reliable, secure platform.' -- source: https://linux.slashdot.org/story/17/05/18/1757205 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

Check-In Delays At Auckland Airport, Australia And Elsewhere
by Lawrence D'Oliveiro 22 May '17

22 May '17

You may have come across this report <http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11860878> about problems with check-in processing at Auckland and Wellington “as a result of a global issue”. This item from The Register <https://www.theregister.co.uk/2017/05/22/sita_failure_australia/> gives a few more details, mentioning an international hookup called “SITA” which was hit by problems in the UK.

1 0

Disabling Microsoft Telemetry Is Not So Easy
by Lawrence D'Oliveiro 22 May '17

22 May '17

Came across a link to this series of tweets <https://twitter.com/m8urnett/status/866353982217699328> detailing a sysadmin’s attempts to block his Windows 10 Enterprise installation from making gratuitous Internet accesses. Seems like the obvious answer--blocking things at your border router--can cause major Windows malfunctions...

1 0

upcoming meeting
by Peter Reutemann 18 May '17

18 May '17

Hi everyone We don't have anything scheduled yet for the upcoming meeting next week. Any ideas? [and apologies if I should have missed your suggestion - I've got too many things going on at the moment...] Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

Google Takes Another Shot At Making Android Great On Low-Budget Smartphones
by Peter Reutemann 17 May '17

17 May '17

'At its developer conference, Google unveiled Android Go, a project wherein Google will offer a version of Android that runs swiftly on budget, low-specced smartphones. With the new strategy, Google hopes to further improve the low-budget smartphone ecosystem in developing markets. Android Go will be focused around building a version of Android for phones with less memory, with the System UI and kernel able to run with as little as 512MB of memory. Apps will be optimized for low bandwidth and memory, with a version of Play Store designed for those markets that will highlight these apps. From a report: Another feature of Android Go will be data management. Android Go will let you easily see your data usage, and thanks to carrier integration, it'll also let you top-up with more data right on your device.' -- source: https://hardware.slashdot.org/story/17/05/17/202209 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0