- wlug - list.wlug.org.nz

New Cloudflare tool can tell you if your ISP has deployed BGP fixes
by Peter Reutemann 20 Apr '20

20 Apr '20

'For more than an hour at the beginning of April, major sites like Google and Facebook sputtered for large swaths of people. The culprit wasn't a hack or a bug. It was problems with the internet data routing standard known as the Border Gateway Protocol, which had allowed significant amounts of web traffic to take an unexpected detour through a Russian telecom. For Cloudflare CEO Matthew Prince, it was the last straw. BGP disruptions happen frequently, generally by accident. But BGP can also be hijacked for large-scale spying, data interception, or as a sort of denial of service attack. Just last week, United States Executive Branch agencies moved to block China Telecom from offering services in the US, because of allegedly malicious activity that includes BGP attacks. Companies like Cloudflare sit on the front lines of the BGP blowback. And while the company can't fix the problem directly, it can call out those that are slow to contribute defenses.' -- source: https://arstechnica.com/information-technology/2020/04/new-cloudflare-tool-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Growth In Surveillance May Be Hard To Scale Back After Pandemic, Experts Say
by Peter Reutemann 19 Apr '20

19 Apr '20

Long-time Slashdot reader AmiMoJo quotes the Guardian: 'The coronavirus pandemic has led to an unprecedented global surge in digital surveillance, researchers and privacy advocates around the world have said, with billions of people facing enhanced monitoring that may prove difficult to roll back. Governments in at least 25 countries are employing vast programmes for mobile data tracking, apps to record personal contact with others, CCTV networks equipped with facial recognition, permission schemes to go outside and drones to enforce social isolation regimes. The methods have been adopted by authoritarian states and democracies alike and have opened lucrative new markets for companies that extract, sell, and analyse private data. One of the world's foremost experts on mobile phone surveillance said the pandemic had created a '9/11 on steroids' that could lead to grave abuses of power. "Most of these measures don't have sunset clauses. They could establish what many people are describing as a new normal," Ron Deibert, who heads the Citizen Lab at the University of Toronto, said in an interview with the Guardian. The article provides examples from China, Russia, India, Europe, and the United States, and provides a link to an index of new coronavirus-related surveillance measures related to the coronavirus outbreak. The digital rights lead at the group behind the list says "This isn't just an issue with authoritarian governments. This is happening across the world."' -- source: https://yro.slashdot.org/story/20/04/18/0717228 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The Tor Project Lays Off 37% of Its Staff
by Peter Reutemann 19 Apr '20

19 Apr '20

'The Tor Project's executive director Isabela Bagueros writes: Tor, like much of the world, has been caught up in the COVID-19 crisis. Like many other nonprofits and small businesses, the crisis has hit us hard, and we have had to make some difficult decisions. We had to let go of 13 great people who helped make Tor available to millions of people around the world. We will move forward with a core team of 22 people, and remain dedicated to continuing our work on Tor Browser and the Tor software ecosystem. The world won't be the same after this crisis, and the need for privacy and secure access to information will become more urgent. In these times, being online is critical and many people face ongoing obstacles to getting and sharing needed information. We are taking today's difficult steps to ensure the Tor Project continues to exist and our technology stays available. We are terribly sad to lose such valuable teammates, and we want to let all our users and supporters know that Tor will continue to provide privacy, security, and censorship circumvention services to anyone who needs them. Mashable reminds its readers that "Those wishing to make sure the specifics of their online browsing remain their own personal business can donate to Tor's non-profit organization. "Because with more and more of our lives happening online for the foreseeable future, it's a good idea to have an organization working to protect what little digital privacy we have left."' -- source: https://yro.slashdot.org/story/20/04/18/1129249 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

After 8 Years of Remote-Access Trojans Attacks, Can We Still Say Linux is Secure?
by Peter Reutemann 19 Apr '20

19 Apr '20

'Remember when BlackBerry reported Advanced Persistent Threat groups have been infiltrating critical Linux servers for at least eight years? What's the lesson to be learned? LinuxSecurity Founder Dave Wreski argues "Although it may be easy to blame the rise in attacks targeting Linux in recent years on security vulnerabilities in the operating system as a whole, this is simply not the truth. The majority of exploits on Linux systems can be attributed to misconfigured servers and poor administration." Writing for Linux Security, Slashdot reader b-dayyy gathered some additional responses: Some experts argue that it is the popularity of Linux that makes it a target. Joe McManus, Director of Security at Canonical, explains: "Linux and, particularly Ubuntu, are incredibly secure systems but, that being said, it is their popularity that makes them a target." Ian Thornton-Trump, a threat intelligence expert and the CISO at Cyjax, adds: "From an economic and mission perspective, it makes sense for a threat actor to invest in open-source skills for flexibility and the ability to target the systems where the good stuff is happening." Despite the increasing number of threats targeting Linux systems, there is still a sound argument for the inherent security of Linux, which can be attributed to the core fundamentals of Open Source. Due to the transparency of open-source code and the constant scrutiny that this code undergoes by a vibrant global community, vulnerabilities are identified and remedied quicker than flaws that exist in the opaque source code of proprietary software and operating systems. Threat actors recognize this, and are still directing the majority of their attacks at proprietary operating systems. These attacks do; however, serve as a much-needed wakeup call for the security community that more needs to be done to protect Linux servers. BlackBerry's report reveals that security solutions and defensive coverage available within Linux environments is "immature at best". Endpoint protection, detection and response products are inadequately utilized by too many Linux users, and endpoint solutions available for Linux systems are often insufficient in combating advanced exploits. Eric Cornelius, Chief Product Officer at BlackBerry, evaluates: "Security products and services that support Linux, offerings that might detect and give us insight into a threat like this, are relatively lacking compared to other operating systems, and security research about APT use of Linux malware is also relatively sparse." ' -- source: https://it.slashdot.org/story/20/04/19/0040223 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Apple > Ikea
by Lawrence D'Oliveiro 17 Apr '20

17 Apr '20

Guess how much it costs to get the castor wheel kit for your new Apple Mac Pro <https://www.theregister.co.uk/2020/04/16/apple_mac_pro_699_dollar_wheels/>. I wonder what other furnishing-related items Apple could sell. How about a nice doily to go on top?

1 0

New Jersey Needs COBOL Programmers!
by Lawrence D'Oliveiro 17 Apr '20

17 Apr '20

The Governor of the US state of New Jersey is appealing for help in maintaining their elderly COBOL-based mainframe systems <https://www.theregister.co.uk/2020/04/05/new_jersey_seeks_cobol_volunteers/> that process welfare benefit requests. The volume of requests has gone up a lot lately, and the systems are having trouble coping. By the way, I don’t understand this “ugly side of technical debt” phrase. Does technical debt have a pretty side?

3 4

Linksys Asks Users To Reset Passwords After Hackers Hijacked Home Routers Last Month
by Peter Reutemann 17 Apr '20

17 Apr '20

'Router vendor Linksys has locked user accounts on its Smart WiFi cloud service and is asking them to reset passwords after hackers have been observed hijacking accounts and changing router settings to redirect users to malware sites. From a report: Linksys' decision only impacts Smart WiFi accounts. Linksys Smart WiFi is a cloud-based account system that lets device owners connect to Linksys routers (and other equipment) over the internet to manage router settings. Smart WiFi is widely deployed across Linksys' router fleet, making it an ideal target for hackers who may want to hijack routers en-masse. According to a Bitdefender report published last month, this is exactly what's been recently happening. The cyber-security firm said it detected an organized campaign to break into D-Link and Linksys routers and change DNS settings.' -- source: https://it.slashdot.org/story/20/04/16/1727210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The secret behind “unkillable” Android backdoor called xHelper has been revealed
by Peter Reutemann 17 Apr '20

17 Apr '20

'In February, a researcher detailed a widely circulating Android backdoor that’s so pernicious that it survives factory resets, a trait that makes the malware impossible to remove without taking unusual measures. The analysis found that the unusual persistence was the result of rogue folders containing a trojan installer, neither of which was removed by a reset. The trojan dropper would then reinstall the backdoor in the event of a reset. Despite those insights, the researcher still didn’t know precisely how that happened. Now, a different researcher has filled in the missing pieces.' -- source: https://arstechnica.com/information-technology/2020/04/solved-how-android-b… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox To Remove Support For the FTP Protocol
by Peter Reutemann 16 Apr '20

16 Apr '20

'Mozilla has announced plans to remove support for the FTP protocol from Firefox. Going forward, users won't be able to download files via the FTP protocol and view the content of FTP links/folders inside the Firefox browser. From a report: "We're doing this for security reasons," said Michal Novotny, a software engineer at the Mozilla Corporation, the company behind the Firefox browser. "FTP is an insecure protocol and there are no reasons to prefer it over HTTPS for downloading resources," he said. "Also, a part of the FTP code is very old, unsafe and hard to maintain and we found a lot of security bugs in it in the past." Novotny says Mozilla plans to disable support for the FTP protocol with the release of Firefox 77, scheduled for release in June this year.' -- source: https://news.slashdot.org/story/20/03/19/169246 There's always FileZilla... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

NASA Uses 3D Cardboard Glasses
by Lawrence D'Oliveiro 16 Apr '20

16 Apr '20

Here’s a fun one: normally, the drivers of the Curiosity Mars rover have active-shutter 3D glasses for viewing images of the Martian terrain on their office machines. But these don’t work on the hardware that these staffers are currently using from home. So they are falling back to those cheap cardboard red-and-blue glasses that they would give out, included in the price of the ticket, at cinemas <https://www.theregister.co.uk/2020/04/15/nasa_cardboard_3d_glasses_for_curi…>.

1 0