Language Selection

English French German Italian Portuguese Spanish

Security Leftovers

Filed under
Security
  • Apple patches zero-day kernel hole and much more – update now! [Ed: Apple did not patch this until it was publicly known that it had been exploited]

    The bug fixes for iPhones and iPads include remote code execution flaws (RCEs) in components from the kernel itself to Apple’s image rendering library, graphics drivers, video processing modules and more. Several of these bugs warn that “a malicious application may be able to execute arbitrary code with kernel privileges”. That’s the sort of security hole that could lead to a complete device takeover – what’s known in the jargon as a “jailbreak“, because it escapes from Apple’s strict lockdown and app restrictions.

  • Creating our own password manager

    We can manage a range of passwords by creating our own password manager using the bash commandline available in popular GNU/Linux operating systems. The GNU/Bash Shell is readily available in Ubuntu/Debian based Linux systems. They can be launched using the terminal application (with the shortcut Ctrl+Alt+T).

  • Conti presses Costa Rica. Bluetooth LE proof-of-concept. Making initial access more difficult. Cyber phases of hybrid wars. [Ed: Costa Rica pays a huge price for being penetrated by Microsoft]

    Reuters reports that the number of Costa Rican organizations affected by Conti's ransomware attack has now grown to twenty-seven. Recently elected President Rodrigo Chaves has said that nine institutions, most of them governmental, were heavily affected, and that the attacks were having an "enormous" impact on foreign trade and tax collection. The governments of Israel, the United States and Spain are all providing Costa Rica with assistance in recovery and remediation, but a lot of work remains to be done.

  • Fantastic Open Source Cybersecurity Tools and Where to Find Them [Ed: Ironically, one must run unsafe proprietary software just to open this article]
  • Venezuelan cardiologist charged with 'designing and selling ransomware' [Ed: Microsoft Windows]

    The US Attorney’s Office has charged a 55-year-old cardiologist with creating and selling ransomware and profiting from revenue-share agreements with criminals who deployed his product.

    A complaint [PDF] filed on May 16th in the US District Court, Eastern District of New York, alleges Moises Luis Zagala Gonzalez – aka “Nosophoros,” “Aesculapius” and “Nebuchadnezzar” – created a ransomware builder known as “Thanos”, and ransomware named “Jigsaw v. 2”.

    The self-taught coder and qualified cardiologist advertised the ransomware in dark corners of the web, then licensed it ransomware to crooks for either $500 or $800 a month, it is claimed. He also ran an affiliate network that offered the chance to run Thanos to build custom ransomware, in return for a share of profits, it is alleged.

  • Firefox out-of-band update to 100.0.1 – just in time for Pwn2Own? [Ed: Bloated browsers beget impossible security?]
  • How crooks backdoor sites and scrape credit card info • The Register

    In a paper scheduled to appear at the Usenix '22 security conference later this year, authors Asuman Senol (imec-COSIC, KU Leuven), Gunes Acar (Radboud University), Mathias Humbert (University of Lausanne) and Frederik Zuiderveen Borgesius, (Radboud University) described how they measured data handling in web forms on the top 100,000 websites, as ranked by research site Tranco. ®

  • Meet Wizard Spider, the multimillion-dollar gang behind Conti, Ryuk malware [Ed: Microsoft Windows]

    There also is a custom hash-cracking system that "stores cracked hashes, updates threat actors on the cracking status and shows the results of cracking attempts on other servers," the threat hunters wrote. The software claims it can crack a broad array of common hash types, including LM:NTLM hashes, cached domain credentials, Kerberos 5 TGS-REP/AS-REP tickets, KeePass files, and those used for MS Office 2013 documents.

  • Pentester pops open Tesla Model 3 using low-cost Bluetooth module

    Tesla Model 3 and Y owners, beware: the passive entry feature on your vehicle could potentially be hoodwinked by a relay attack, leading to the theft of the flash motor.

    Discovered and demonstrated by researchers at NCC Group, the technique involves relaying the Bluetooth Low Energy (BLE) signals from a smartphone that has been paired with a Tesla back to the vehicle. Far from simply unlocking the door, this hack lets a miscreant start the car and drive away, too.

  • Technical Advisory – Tesla BLE Phone-as-a-Key Passive Entry Vulnerable to Relay Attacks
  • India slightly softens infosec incident reporting rules • The Register

    India has slightly softened its controversial new reporting requirements for information security incidents and made it plain they apply to multinational companies.

    The rules were announced with little advance warning in late April and quickly attracted criticism from industry on grounds including the requirement to report 22 different types of incident within six hours, a requirement to register personal details of individual VPN users, and retention of many log files for 180 days.

  • How to choose a certificate management tool

    Managing certificates that hold all your encryption secrets is impossible without the right tool. Here's how to narrow the field.

  • OpenSSF Helping to Secure Open Source Software [Ed: No, it is mostly a marketing (openwashing) facade for proprietary software companies that actively insert back doors into things and strive to centralise everything around themselves under the guise of "security"]
  • Sigstore Sets Out to Secure Cloud-Native Supply Chain [Ed: No, this is about outsourcing trust and centralising it around Pentagon-connected companies in the name of so-called 'security' (it's censorship of software)]
  • SBOM Everywhere: The OpenSSF Plan for SBOMs [Ed: Missing disclosure here about LF paying for puff pieces about its programs and schemes]
  • Patch your VMware gear now – or yank it out, Uncle Sam tells federal agencies [Ed: When VMWare points the finger at Linux it's a deflection tactic]
  • Malicious PyPI package opens backdoors on Windows, Linux, and Macs [Ed: It's not an OS issue but an issue of people installing malware on their OS]

More in Tux Machines

today's howtos

  • How to Install Fail2ban on Ubuntu 22.04

    Fail2ban is a free and open-source IPS that helps administrators safeguard Linux servers against brute-force assaults. Python-based Fail2ban has filters for Apache2, SSH, FTP, etc. Fail2ban blocks the IP addresses of fraudulent login attempts. Fail2ban scans service log files (e.g. /var/log/auth.log) and bans IP addresses that reveal fraudulent login attempts, such as too many wrong passwords, seeking vulnerabilities, etc. Fail2ban supports iptables, ufw, and firewalld. Set up email alerts for blocked login attempts. In this guide, we’ll install and configure Fail2ban to secure Ubuntu 22.04. This article provides fail2ban-client commands for administering Fail2ban service and prisons.

  • How to install software packages on Red Hat Enterprise Linux (RHEL) | Enable Sysadmin

    There's a lot of flexibility in how you install an application on Linux. It's partly up to the software's developer to decide how to deliver it to you. In many cases, there's more than one "right" way to install something.

  • What is the /etc/hosts file in Linux – TecAdmin

    /etc/hosts is a text file on a computer that maps hostnames to IP addresses. It is used for static name resolution, which is not updated automatically like the Domain Name System (DNS) records. /etc/hosts are usually the first file checked when resolving a domain name, so it can be used to block websites or redirect users to different websites.

Accessibility in Fedora Workstation

The first concerted effort to support accessibility under Linux was undertaken by Sun Microsystems when they decided to use GNOME for Solaris. Sun put together a team focused on building the pieces to make GNOME 2 fully accessible and worked with hardware makers to make sure things like Braille devices worked well. I even heard claims that GNOME and Linux had the best accessibility of any operating system for a while due to this effort. As Sun started struggling and got acquired by Oracle this accessibility effort eventually trailed off with the community trying to pick up the slack afterwards. Especially engineers from Igalia were quite active for a while trying to keep the accessibility support working well. But over the years we definitely lost a bit of focus on this and we know that various parts of GNOME 3 for instance aren’t great in terms of accessibility. So at Red Hat we have had a lot of focus over the last few years trying to ensure we are mindful about diversity and inclusion when hiring, trying to ensure that we don’t accidentally pre-select against underrepresented groups based on for instance gender or ethnicity. But one area we realized we hadn’t given so much focus recently was around technologies that allowed people with various disabilities to make use of our software. Thus I am very happy to announce that Red Hat has just hired Lukas Tyrychtr, who is a blind software engineer, to lead our effort in making sure Red Hat Enterprise Linux and Fedora Workstation has excellent accessibility support! Read more

Android Leftovers

Raspberry Pi Zero Prints Giant Pictures with Thermal Receipt Printer

It’s no secret that thermal receipt printers can print much more than receipts, but this Raspberry Pi project, created by a maker known as -PJFry- on Reddit, has taken the idea to a new extreme. With the help of a Raspberry Pi Zero, they’ve coded an application to print huge, poster-sized images (opens in new tab) one strip at a time on their thermal printer. Inspiration for this project came from similar online projects where users print large-scale images using regular printers or thermal printers like the one used in this project. In this case, however, -PJFry- coded the project application from scratch to work on the Pi Zero. It works by taking an image and breaking it into pieces that fit across the width of the receipt printer and printing it one strip at a time. Then, these strips can be lined up to create a full-sized image. It is the only microelectronics project we can find that -PJFry- has shared, but it’s clear they have a great understanding of our favorite SBC to craft something this creative from scratch. According to -PJFry-, the project wasn’t created for efficiency but more for fun as a proof of concept. The result is exciting and provides an artistic take on the Raspberry Pi’s potential. Read more