- wlug - list.wlug.org.nz

Android Trojan Steals Money From PayPal Accounts Even With 2FA On
by Peter Reutemann 11 Dec '18

11 Dec '18

'ESET researchers have discovered a new Android Trojan using a novel Accessibility-abusing technique that targets the official PayPal app, and is capable of bypassing PayPal's two-factor authentication. A report elaborates: At the time of writing, the malware is masquerading as a battery optimization tool, and is distributed via third-party app stores. After being launched, the malicious app terminates without offering any functionality and hides its icon. This video, courtesy of ESET, demonstrates the process in practice.' -- source: https://it.slashdot.org/story/18/12/11/1722251 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft Fixes Notepad
by Lawrence D'Oliveiro 11 Dec '18

11 Dec '18

Windows Notepad has never been able to handle any newline convention other than the old DOS/Windows/CP/M one (CR-LF). Now, after so many decades, Microsoft has finally decided to give it “universal newline” capability, so it can handle lines ending in LF-only (Unix/Linux) and CR-only (old MacOS) <http://www.theregister.co.uk/2018/05/08/windows_notepad_unix_macos_line_end…>. Gee, I wonder how many lines of code that took...

2 2

No, I Didn’t Know That
by Lawrence D'Oliveiro 11 Dec '18

11 Dec '18

Would you believe, malware can make money by generating fake clicks on ads? Would you further believe, that ad networks pay more for clicks from Apple devices than from Android? Can you guess what happens next? <https://www.theregister.co.uk/2018/12/10/android_ios_clickfraud/>

1 0

Presentations using the Waikato Uni video projector - Console windows font size.
by Ian Stewart 11 Dec '18

11 Dec '18

Hi, This is mostly a memo to myself as I have twice been caught out with Linux consoles being displayed with too small a font on the Uni video projector. However the following may also be useful to other presenters in the future. Most wlug presentations are done with a Linux laptop or PC running in a GUI Environment that is connected to the video projector. If you open a GUI console terminal window or web-browser window and the video projector display is difficult to read, then you can increase the size with the keystroke sequence Control + Shift + Plus, or decrease the size with Control + Minus. Linux also has 6 x console windows available. The keystroke sequence Ctrl + Alt + F1 opens tty1 console, through to Ctrl + Alt + F6 opening tty6 console. Note that Ctrl + Alt + F7 returns you to the laptops GUI environment. As your laptop/pc is likely to auto-size to the resolution of the video projector, then I think your laptop will opt to displaying the 1080p resolution of 1920 x 1080 pixels. By default your Linux consoles are likely to be configured to display a "Fixed" font of "8x16". When you display your console window with the video projector then one page of the display will be about 60 lines of text with 200 characters across the page. This is almost impossible to read on the projector screen. One way to overcome this problem this is to edit... /etc/default/console-setup You will see... FONTFACE="Fixed" FONTSIZE="8x16" At the bottom of the file add something like... # For Waikato University Video Projector # Choices of Fontsize with Terminus font: # 6x12, 8x14, 8x16, 10x20, 11x22, 12x24, 14x28, 16x32 FONTFACE="Terminus" FONTSIZE="14x28" ...save the changes to the console-setup file and execute... $ setupcon The console displayed should now be about 35 rows by 80 character cells, and should allow everyone to read what is displayed. cheers, Ian. PS: Another approach to making these changes is... $ dpkg-reconfigure console-setup ...this will step through 4 x graphical input screens. From these screens select "Terminus" as the Font and the "14x28" as the Font size. To restore to the original settings run dpkg-reconfigure console-setup again and select "Fixed" and "8x16".

1 0

Malicious Sites Abuse 11-Year-Old Firefox Bug That Mozilla Failed To Fix
by Peter Reutemann 11 Dec '18

11 Dec '18

'Malware authors, ad farmers, and scammers are abusing a Firefox bug to trap users on malicious sites. From a report: This wouldn't be a big deal, as the web is fraught with this kind of malicious sites, but these websites aren't abusing some new never-before-seen trick, but a Firefox bug that Mozilla engineers appear to have failed to fix in the 11 years ever since it was first reported back in April 2007. The bug narrows down to a malicious website embedding an iframe inside their source code. The iframe makes an HTTP authentication request on another domain. [...] For the past few years, malware authors, ad farmers, and scammers have been abusing this bug to lure users on sites where they show all sorts of nasties, such as tech support scams, ad farms that reload the page with new ads in a loop, pages that push users to buy fake gift cards, or sites that offer malware-laced software updates. Whenever users try to leave, the owners of these shady sites trigger the authentification modal in a loop.' -- source: https://news.slashdot.org/story/18/12/10/0220258 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

ESET Discovers 21 New Linux Malware Families
by Peter Reutemann 11 Dec '18

11 Dec '18

'In a report published last week by cyber-security firm ESET, the company detailed 21 "new" Linux malware families. All operate in the same manner, as trojanized versions of the OpenSSH client. From a report: They are developed as second-stage tools to be deployed in more complex "botnet" schemes. Attackers would compromise a Linux system, usually a server, and then replace the legitimate OpenSSH installation with one of the trojanized versions.' -- source: https://linux.slashdot.org/story/18/12/10/1538203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Faxes To Be Banned At The NHS
by Lawrence D'Oliveiro 10 Dec '18

10 Dec '18

The UK’s National Health Service is being forced to phase out its heavy reliance on fax machines <https://www.theregister.co.uk/2018/12/10/hancock_fax_ban_nhs/> and resort to more, um, “digital” alternatives like e-mail instead: However, it's worth noting that just last week, up to 1.2 million staffers were locked out of their NHSmail accounts after Accenture reportedly botched a data centre upgrade. [Helen Stokes-Lampard, chair of the Royal College of General Practitioners] raised similar concerns about the resilience of the IT systems the NHS is racing to introduce. "What's shocking is how often digital innovations fall over," she said. "It doesn't mean we shouldn’t do it, but what it does mean is we have to be realistic about with the time scales for this."

1 0

National Oracle System Is A Write-Off
by Lawrence D'Oliveiro 10 Dec '18

10 Dec '18

Looks like the nationwide attempt to streamline and update the IT systems of all the DHBs is now going to be written off <https://www.theregister.co.uk/2018/12/10/national_oracle_solution_write_dow…>. It hasn’t officially been abandoned, mind you, but because it’s been “on hold” for so long, the DHBs are now obliged to start recording “impairments” in their accounts over their investment in the system. By the way, the Waikato DHB was one of the four that managed a rollout of the system so far. Not sure whether that stays in place or gets rolled back...

1 0

How to Auto Backup Files to USB Media When Connected
by Peter Reutemann 10 Dec '18

10 Dec '18

'A backup is the last defense against data loss, offering a means to restore original data. You can use either a removable media such as an external hard drive or USB flash disk or a shared network folder, or a remote host to back up your data. It’s very easy (and equally essential) to automatically backup your important files without you having to remember to do so. In this article, we will learn how to auto backup data to a removable media after connecting it to your Linux machine. We will test with an external disk. This is a basic guide to get you started with using udev for real-life solutions.' -- source: https://www.tecmint.com/auto-backup-files-to-usb-media-in-linux/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Linux.org's DNS Got Hijacked
by Peter Reutemann 09 Dec '18

09 Dec '18

'Linux.org reports: Wednesday afternoon around 5pm EST someone was able to get into the registrar account for our domain and point DNS to another server -- as well as lock us out from changing it. They pointed the domain name to a pretty rude page for most of the evening until Cloudflare stepped in and blocked the domain for us. After a lot of back and forth with our registrar, we were able to get things back under our control. I'd like to point out that our server environment was not touched so there are no worries about your data. We've gone over security protocols and are tightening things up that may have slipped through in the past. Thanks for your support! Linux.org apparently pointed to a page exclaiming "G3T 0WNED L1NUX N3RDZ", which also included a NSFW picture, some abusive language, a shout-out to recently-deceased programmer Terry Davis, and a link to an article about Linus Torvalds' controversial apology for "his hostile behavior towards others in the community." Long-time Slashdot reader Grady Martin says he also saw the page pointing to "presumably doxed info" about the creator of Linux's code of conduct, a fact confirmed by a report in the Register. "As for how it was hacked, [Linux.org owner Mike] McLagan blames the public Whois displaying his partner's email address -- presumably the hacker worked their way into the Yahoo email account listed as the admin of the site and from there requested a password change in her Network Solutions account to gain access to the domain."' -- source: https://it.slashdot.org/story/18/12/08/0355227 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0