Notices by GeniusMusing (geniusmusing@nu.federati.net)
-
GeniusMusing (geniusmusing@nu.federati.net)'s status on Sunday, 04-Aug-2019 10:06:54 EDT 
GeniusMusing
@lnxw48a1 You could always look at the code.... sorry. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 01-Aug-2019 19:06:34 EDT
GeniusMusing
Putting this up because I have not seen it and this will be a big thing in a few days, maybe next week.
URGENT/11 Information from the Research Team Armis Labs
https://armis.com/urgent11/
>The Armis research team, Armis Labs, have discovered 11 zero day vulnerabilities in VxWorks®, the most widely used operating system you may never heard about. VxWorks is used by over 2 billion devices including critical industrial, medical and enterprise devices. Dubbed “URGENT/11,” the vulnerabilities reside in VxWorks’ TCP/IP stack (IPnet), impacting all versions since version 6.5, and are a rare example of vulnerabilities found to affect the operating system over the last 13 years. Armis has worked closely with Wind River®, the maintainer of VxWorks, and the latest VxWorks 7 released on July 19 contains fixes for all the discovered vulnerabilities.
~~
A partial list of devices impacted include:
SCADA devices
Industrial controllers
Patient monitors
MRI machines
Firewalls
VOIP phones
Printers
~~
Partial list of comapnies or devices using VxWorks versions impacted by URGENT/11 (links to company’s advisories have been included, if available):
ABB
Arris Modems
Avaya VOIP Media Gateways
Belden Industrial Devices
Dräger
Kyocera Printers
Ricoh Printers
Rockwell PLCs
Samsung Printers
Schneider Electric PLCs
Sonicwall Firewalls
Xerox Printers
If you think you may have something on this list, stop what you are doing and update the firmware. Now! Pretty much from what I have read/heard is the only way to make one of these devices safe without updating is to turn it off or disconnect it. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 01-Aug-2019 07:36:31 EDT
GeniusMusing
Capital One hacking suspect barely hid what she was doing kgw.com
https://nu.federati.net/url/238937 -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Wednesday, 31-Jul-2019 08:26:43 EDT
GeniusMusing
@sean HBD! -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Tuesday, 30-Jul-2019 19:19:36 EDT
GeniusMusing
@sullybiker
Updates on Maiyannah can be found here.
https://nu.federati.net/conversation/2294446#notice-3037916
I update as I see notices. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Saturday, 27-Jul-2019 08:49:58 EDT
GeniusMusing
@sean
“I have not failed. I've just found 10,000 ways that won't work.” ― Thomas A. Edison -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 26-Jul-2019 13:54:02 EDT
GeniusMusing
@lnxw48a1 @alpacaherder Will they now be known as S-Mobile?
Re color:
https://www.youtube.com/watch?v=6v9IzInhS6s
The result by mixing Magenta (Purple) together with Yellow Play Doh is a bright orange with a touch of very light brown.
So their new logo will be the poop emoji... -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Wednesday, 24-Jul-2019 20:29:30 EDT
GeniusMusing
@lnxw48a1
Update:
Anyways, you have no idea what I've gone through to be able to say this, but I've managed to get mysql to load the database from the crashed drive OK. I'm going through now to make sure everything looks good. If it is ... Im gonna put the community instance on its own VM.
https://twitter.com/HighlandArrow/status/1154180643212996614
I am not even going to attempt recovery of the /files/ directory right now ... but if the mysql looks clean ... I might. If I can get everything back up, why not?
https://twitter.com/HighlandArrow/status/1154180837325332480 -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Monday, 22-Jul-2019 09:54:51 EDT
GeniusMusing
@brandon Also: Get a UPS! -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Monday, 22-Jul-2019 09:54:08 EDT
GeniusMusing
@brandon On crappy days, you are doing emergency repair from storm damage, on nice days you are doing maintenance on things, turning the power off is just to upset people. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 19-Jul-2019 21:48:52 EDT
GeniusMusing
@lnxw48a1@nu.federati.net @klaatu@mastodon.xyz
Looks like upgrades.
Jul 15, 2019 - Openclipart on Twitter: "Update: Testing our new hardened mailer and final issue, conversion to php7 to fix some longstanding issues. REMEMBER: Openclipart was engineered by @rejon in 2004 and improved with the contribution of the late @basselkhartabil through his aiki technology. Very close now!" / Twitter
https://twitter.com/openclipart/status/1150765002392887296
Jul 18, 2019 - Openclipart on Twitter: "UPDATE: Issue 1 Mailer is solved. Final Issue php7 work in progress. Thank you for your patience!" / Twitter
https://twitter.com/openclipart/status/1151754563780665349 -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 18-Jul-2019 16:49:06 EDT
GeniusMusing
@brandon Also works correctly in FF on Fedora 30, btw my W10 at work is also 1903. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 18-Jul-2019 16:46:31 EDT
GeniusMusing
@lnxw48a1 It is a dual course in skill improvement and anger management. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 18-Jul-2019 11:28:30 EDT
GeniusMusing
@brandon What OS? Works correctly on W10. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Wednesday, 17-Jul-2019 21:35:12 EDT
GeniusMusing
@lnxw48a1
Highland Arrow on Twitter: "Ill probably get the instance going Friday or Sat. Just gonna grab another domain, its the path of least resistance. Dont wanna promise thursday, Im pretty booked up in Real Life." / Twitter
https://twitter.com/HighlandArrow/status/1151664325855236098 -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Wednesday, 17-Jul-2019 21:32:53 EDT
GeniusMusing
@lnxw48a1 not all of us... -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Wednesday, 17-Jul-2019 19:55:34 EDT
GeniusMusing
@sean Then stop shredding and it will stop? -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Saturday, 13-Jul-2019 18:23:01 EDT
GeniusMusing
>Though it may be possible to opt-out of data collection from individual marketing companies, a spokesperson for the state of Florida "said there's no way for drivers to opt out if they don't want their personal information sold." -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Saturday, 13-Jul-2019 18:22:35 EDT
GeniusMusing
Florida's DMV Made $77 Million- By Selling Off Personal Information - Slashdot
https://nu.federati.net/url/235125
>Florida's Department of Highway Safety and Motor Vehicles "made $77 million in 2017 by selling drivers' personal information to more than 30 private companies, including marketing firms, bill collectors, insurance companies and data brokers..." according to local news site.
Move over Florida Man. -
GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 11-Jul-2019 07:27:12 EDT
GeniusMusing
The Most Clever 'Zip Bomb' Ever Made Explodes a 46MB File To 4.5 Petabytes Slashdot
https://nu.federati.net/url/234574
>Programmer and engineer David Fifield has unveiled a brand-new Zip bomb that explodes a 46-megabyte file to 4.5 petabytes of data. Fifield's new type of "Zip bomb" or "compression bomb" is particularly novel because he "figured out how to 'overlap' files inside of a Zip archive, allowing for compression rates far beyond those of a traditional archive," reports Motherboard. From the report:
>In an email interview, Fifield noted that, while 42.zip (which has a 106 billion-to-one compression ratio and has been hosted on the same single-serving website for at least 15 years) gets much of the attention, he finds later attempts more technically interesting. "eI find 42.zip inspiring on an aesthetic level -- not so much the file itself but the circumstances around it," Fifield said. "It's like folklore. There must have been many examples of the same basic idea, but for whatever reason 42.zip is the one that had staying power."
>
>Fifield noted that part of what makes his process possible was by coming up with ways to handle cyclic redundancy checks, or CRCs, a basic error-correction functionality baked into Zip, PNG, Ethernet, and numerous other technical standards. Messing around with CRC -- 32 checksums, as they're called, was where Fifield said he learned the most. Fifield, who will present his findings at the USENIX Workshop on Offensive Technologies (WOOT) conference next month, noted that while the work itself adds to a history of research and likely will be superseded in the future, its benefit from an awareness standpoint is important.
Related Links:
https://nu.federati.net/url/234575
https://www.bamsoftware.com/hacks/zipbomb/
https://unforgettable.dk/
https://www.techopedia.com/definition/1793/cyclic-redundancy-check-crc
https://www.usenix.org/conference/woot19
Will this be the new RickRoll?
All Jonkman Microblog content and data are available under the