The Atom Editor

I didn’t set out to write a blog post about a text editor. I was going to write about one of the other awesome projects that the Ops team is doing here at Wombat. Along the way I decided to give Atom a chance again and I’m glad I did. I enjoyed it enough that I thought I would defer my post about automating my “Ops Environment” on a mac (I promise, I’ll do that one soon-ish) in favor of this.

Quick Update: ClipGrab and PlayOnLinux Applications Are Now Available For ALL Ubuntu Versions

ClipGrab is fairly popular application to download video from famous sites of the Internet. It allows you to search video with in application and select to download the video or other way you can copy and paste the video URL to the application to download the video. Since famous video sites are supported by this application, if some site isn't officially supported, you may still be able to download the videos from it.

aTunes Enriched Audio Player Now Available For All Current Ubuntu/Linux Mint Versions

There are wide variety of audio players available for Linux and you may have your favorite one installed on your system. aTunes is not new audio player but its initial release was way back in 2006 and the most recent version was released in June, 2014. In almost two years there is no news on the website or release from developers, well it is open-source released under GPL-V2 license and we don't see any other to carry on the development of this great application. It is written in Java programming language and it's cross-platform available for Linux, Unix, Windows and Mac. It uses Mplayer as its playback engine and supports wide variety of known formats such as: MP3, Ogg Vorbis, FLAC, WMA and other formats.

Kernel explained

[Older] [Video] Audio on Linux: The End of a Golden Age?

State of Sway April 2017

Development on Sway continues. I thought we would have slowed down a lot more by now, but every release still comes with new features - Sway 0.12 added redshift support and binary space partitioning layouts. Sway 0.13.0 is coming soon and includes, among other things, nvidia proprietary driver support. We already have some interesting features slated for Sway 0.14.0, too!

Today Sway has 21,446 lines of C (and 4,261 lines of header files) written by 81 authors across 2,263 commits. These were written through 653 pull requests and 529 issues. Sway packages are available today in the official repos of pretty much every distribution except for Debian derivatives, and a PPA is available for those guys.

How To Backup Your Entire Linux System Using Rsync

How to Play Wii Games on Ubuntu with Dolphin

Installing VeraCrypt in GNU/Linux

Typing Greek letters

Download Files with Wget on the Linux Shell - Explanation and Examples

How to Compare Numbers, Strings and Files in Bash Shell Script

How to Easily Set Up Third Party DNS on Linux

How to Install Magento 2.1 on CentOS 7

YMPD - MPD Web GUI

New approaches to network fast paths

How to Install Invoice Ninja on Ubuntu 16.04

neofetch: Awesome system info bash script that supports Linux, MacOS, and Unix-like systems

youtube-dl-gui - Graphical Interface for youtube-dl

Signals

issue #78: octodns, SSH, grsecurity, postal, nginx, cgroups, vim & more

Configuring Vim as an IDE

Android: Getting up and running on the iMX6

Freeing Disk Space with the PackageKit cache

How to use LXD (Linux containers) in a shell script to create VM when the cloud instance launches

How to disable fast mirror yum plugin in CentOS Linux server

Linux/Unix bash shell script to purge Cloudflare url/images from the command line

Shell script to mirror backups to another server in pull mode using rsync

Install 24 Popular GTK Themes With One Command Using This Script

Is there any way to truly secure Docker container contents?

All this adds up to a lot of work, which is not taken care of for you by default in Docker. It is no surprise that many Docker images are insecure, given this picture. The unfortunate reality is that many Docker containers are running with known vulnerabilities that have known fixes, but just aren’t, and that’s sad.

Compromise recovery on Qubes OS

Occasionally fuckups happen, even with Qubes (although not as often as some think).

What should we – users or admins – do in such a situation? Patch, obviously. But is that really enough? What good is patching your system if it might have already been compromised a week earlier, before the patch was released, when an adversary may have learned of the bug and exploited it?

That’s an inconvenient question for many of us – computer security professionals – to answer. Usually we would mutter something about Raising the Bar(TM), the high costs of targeted attacks, attackers not wanting to burn 0-days, or only nation state actors being able to afford such attacks, and that in case one is on their list of targets, the game is over anyway and no point in fighting. Plus some classic cartoon.

While the above line of defense might work (temporarily), it really doesn’t provide for much comfort, long term, I think. We need better answers and better solutions. This post, together with a recently introduced feature in Qubes OS 3.2 and (upcoming) 4.0, is an attempt to offer such a solution.

Top 5 Kali Linux Pentest tools for WiFi/network and exploits

Linux/Shishiga Malware Brute-Forces SSH Credentials

A new strain of Linux malware has been detected. Dubbed Linux/Shishiga, the malware could transform into a dangerous piece of malware. Linux/Shishiga was officially discovered and examined by researchers at Eset.

Cybercriminals have taken notice of leaked government spying techniques

Microsoft Closes Word/Wordpad Hole—6 Months after Report

[Older] The Pentagon’s Bug Bounty Program Should Be Expanded to Bases, DOD Official Says [iophk: "any version of Windows at all is inappropriate"]

“About 75 percent of the devices that are control systems are on Windows XP or other nonsupported operating systems,” said Daryl Haegley, program manager for the Office of the Assistant Secretary of Defense for Energy, Installations and Environment.

[...]

“A lot of these systems are still Windows 95 or 98, and that’s OK—if they’re not connected to the internet,” Haegley added.

Don’t Info Op Until You See The Whites of Their Eyes

CFP P70

This is the official CFP for P70.

VM escape - QEMU Case Study

In this paper, we provide a in-depth analysis of CVE-2015-5165 (a memory-leak vulnerability) and CVE-2015-7504 (a heap-based overflow vulnerability), along with working exploits. The combination of these two exploits allows to break out from a VM and execute code on the target host. We discuss the technical details to exploit the vulnerabilities on QEMU's network card device emulation, and provide generic techniques that could be re-used to exploit future bugs in QEMU.

CIA’s anti-leaking tool leaked as ‘whistleblowers watch the watchers’

Former MI5 intelligence officer Annie Machon and retired US Army Colonel Ann Wright, who is also a retired US State Department official, shared their views on these and other questions with RT.

On Friday, WikiLeaks released a series of documentations on a US Central Intelligence Agency (CIA) project known as ‘Scribbles,’ which was allegedly created to allow ‘web beacon’ tags to be embedded “into documents that are likely to be copied.”

WikiLeaks began publishing a huge cache of secret documents on the CIA named ‘Vault 7’ in March.

Vault 7: CIA tool to track people through Word docs released

The documentation says: "Scribbles (SCRIB) is a document watermarking tool that can be used to batch process a number of documents in a pre-seeded input directory. It generates a random watermark for each document, inserts that watermark into the document, saves all such processed documents in an output directory, and creates a log file which identifies the watermarks inserted into each document."

It says the tool was successfully tested on Office 2013 (on Windows 8.1 x64), documents from Office versions 97-2016 (Office 95 documents will not work!) and documents that are not locked forms, encrypted, or password-protected.

There is a limitation to the Scribbles system: if a document that has the watermarks in it and is opened in OpenOffice, LibreOffice the watermark images and URLs may become visible.

The US Takes On the World in NATO’s Cyber War Games

Last year, Capt. Sean Ruddy and his team of operator-soldiers from the US Cyber Brigade entered a Locked Shields, a NATO-organized cyber-defense war game that pits teams from dozens of countries against “live-fire” attacks. It was their first time. And of the 19 countries represented, the US finished dead last. This week, they got their shot at redemption.