Jonkman Microblog
  • Login
» The Federation is upon us — ¶
⁂Lather ⁙Rinse ♻Repeat…

  • Public

    • Public
    • Network
    • Groups
    • Popular
    • People

Notices by GeniusMusing (geniusmusing@nu.federati.net)

  1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 29-Aug-2019 20:36:10 EDT GeniusMusing GeniusMusing
    • Nobody [LinuxWalt (@lnxw48a1)]
    • musicman
    @musicman @lnxw48a1
    >I get nothing but frustration by going to the office
    Not really selling it...
    In conversation about 2 months ago from nu.federati.net permalink
  2. GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 29-Aug-2019 09:41:50 EDT GeniusMusing GeniusMusing
    in reply to
    • Linux Liaison :ubuntu:
    • GeniusMusing
    @brandon Also, congrats on the next adventure in your life, enjoy the learning.
    In conversation about 2 months ago from nu.federati.net permalink
  3. GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 29-Aug-2019 09:38:12 EDT GeniusMusing GeniusMusing
    in reply to
    • Linux Liaison :ubuntu:
    @brandon At some point people realize that making a "New X" resolution is pointless because if you want to change something you will, and at the time of your choosing, not some arbitrary date.
    In conversation about 2 months ago from nu.federati.net permalink
  4. GeniusMusing (geniusmusing@nu.federati.net)'s status on Tuesday, 27-Aug-2019 21:39:19 EDT GeniusMusing GeniusMusing
    in reply to
    • Nobody [LinuxWalt (@lnxw48a1)]
    • Linux Liaison :ubuntu:
    • Stephen Michael Kellat
    @brandon @lnxw48a1 @alpacaherder
    The hits just keep coming for Lenovo, its their own software.

    August 26, 2019 - According to Laptop Magazine, security researchers at Pen Test Partners have discovered a security vulnerability that could effectively “hand admin privileges over to hackers or malware.” And since the flaw affects Lenovo laptops that came pre-installed with the Lenovo Solution Center program, millions of older Lenovo laptops could be affected by the flaw. This is because Lenovo laptops had the program installed for years, from 2011 all the way to November 2018.

    https://www.digitaltrends.com/computing/lenovo-laptops-security-flaw/

    Sep 19, 2018 - Now this time, They forced a software program, called "Lenovo Customer Feedback Program 64" that operates daily on these systems and can be categorized as Spyware.

    https://malwaretips.com/threads/lenovo-caught-pre-installing-spyware-on-its-laptops.86894/
    In conversation about 2 months ago from nu.federati.net permalink

    Attachments

    1. Your Lenovo Laptop May Have a Serious Security Flaw | Digital Trends
      from Digital Trends
      A newly discovered security vulnerability involves older Lenovo laptops and a no-longer-supported program called Lenovo Solution Center. The laptop manufacturer has advised customers with these laptops to go ahead and uninstall Lenovo Solution Center to protect their computers.
    2. Privacy Alert - Lenovo Caught Pre Installing Spyware on its Laptops
      from MalwareTips Community
      Lenovo has once again been caught installing spyware on its laptops and workstations without the user's permission or knowledge. This is not first time Lenovo has allegedly installed Spyware onto consumers PCs. Earlier this year, Lenovo was caught red-handed for selling laptops pre-installed...
  5. GeniusMusing (geniusmusing@nu.federati.net)'s status on Tuesday, 27-Aug-2019 21:19:21 EDT GeniusMusing GeniusMusing
    • Nobody [LinuxWalt (@lnxw48a1)]
    • copyright respecter
    @lnxw48a1 @kai I used to feel that way, remote access cured me. There is nothing like fixing the company ERP system in Barcelona, by the pool, with an umbrella drink. On the other plus side, the company also pays for my vacation internet just so I can connect if I need to. Internet is crazy on cruise ships.
    In conversation about 2 months ago from nu.federati.net permalink
  6. GeniusMusing (geniusmusing@nu.federati.net)'s status on Tuesday, 27-Aug-2019 19:36:03 EDT GeniusMusing GeniusMusing
    in reply to
    • Linux Liaison :ubuntu:
    • Stephen Michael Kellat
    @brandon @alpacaherder I have had users ask me for Lenovo laptops and I tell them if they but it they service it. Pre-installed malware and "malware" monitoring software that will install from the chips on a clean install not using the mfg disks but M$ downloads on clean drive. Not in my shop. Not in my house.
    In conversation about 2 months ago from nu.federati.net permalink
  7. GeniusMusing (geniusmusing@nu.federati.net)'s status on Sunday, 25-Aug-2019 15:42:20 EDT GeniusMusing GeniusMusing
    • Nobody [LinuxWalt (@lnxw48a1)]
    @lnxw48a1 From what I hear pretty much all of it, one of these weeks Security Now podcast will be doing a entire episode on SQRL with rumored guest Bruce Schneier and a few others from the security community to pick it apart. Steve is also "going on tour" providing talks to OWASP (Open Web Application Security Project) groups https://www.grc.com/calendar.htm
    In conversation about 2 months ago from nu.federati.net permalink
  8. GeniusMusing (geniusmusing@nu.federati.net)'s status on Sunday, 25-Aug-2019 14:39:16 EDT GeniusMusing GeniusMusing
    • Nobody [LinuxWalt (@lnxw48a1)]
    @lnxw48a1 Interesting that SQRL discussion has made it to fediverse, further reading, and it sounds interesting but needs wider adaption.
    https://www.grc.com/sqrl/sqrl.htm
    In conversation about 2 months ago from nu.federati.net permalink
  9. GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 23-Aug-2019 14:00:59 EDT GeniusMusing GeniusMusing
    • Captain Howdy
    @moonman That is why I always have this at the ready. https://nu.federati.net/attachment/242434
    In conversation about 2 months ago from nu.federati.net permalink
  10. GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 22-Aug-2019 07:30:27 EDT GeniusMusing GeniusMusing
    Backdoor Code Found In 11 Ruby Libraries Slashdot
    https://yro.slashdot.org/story/19/08/22/017228/backdoor-code-found-in-11-ruby-libraries

    >Maintainers of the RubyGems package repository have yanked 18 malicious versions of 11 Ruby libraries that contained a backdoor mechanism and were caught inserting code that launched hidden cryptocurrency mining operations inside other people's Ruby projects. ZDNet reports:
    >
    >The malicious code was first discovered yesterday inside four versions of rest-client, an extremely popular Ruby library. According to an analysis by Jan Dintel, a Dutch Ruby developer, the malicious code found in rest-client would collect and send the URL and environment variables of a compromised system to a remote server in Ukraine. "Depending on your set-up this can include credentials of services that you use e.g. database, payment service provider," Dintel said.
    >
    >The code also contained a backdoor mechanism that allowed the attacker to send a cookie file back to a compromised project, and allow the attacker to execute malicious commands. A subsequent investigation by the RubyGems staff discovered that this mechanism was being abused to insert cryptocurrency mining code. RubyGems staff also uncovered similar code in 10 other projects. All the libraries, except rest-client, were created by taking another fully functional library, adding the malicious code, and then re-uploading it on RubyGems under a new name. All in all, all the 18 malicious library versions only managed to amass 3,584 downloads before being removed from RubyGems.

    Related Links:
    https://www.zdnet.com/article/backdoor-code-found-in-11-ruby-libraries/
    https://github.com/rest-client/rest-client/issues/713
    https://github.com/rest-client/rest-client/issues/713#issuecomment-522967049
    https://github.com/rubygems/rubygems.org/issues/2097
    In conversation about 2 months ago from nu.federati.net permalink

    Attachments

    1. Backdoor Code Found In 11 Ruby Libraries - Slashdot
      Maintainers of the RubyGems package repository have yanked 18 malicious versions of 11 Ruby libraries that contained a backdoor mechanism and were caught inserting code that launched hidden cryptocurrency mining operations inside other people's Ruby projects. ZDNet reports: The malicious code was f...
    2. Backdoor code found in 11 Ruby libraries | ZDNet
      from ZDNet
      RubyGems staff have removed 18 malicious Ruby library versions that have been downloaded 3,584 times since July 8.
    3. [CVE-2019-15224] Version 1.6.13 published with malicious backdoor. · Issue #713 · rest-client/rest-client
      from GitHub
      Summary On August 14, attackers published a series of rest-client versions from 1.6.10 to 1.6.13 using the credentials of a rest-client maintainer whose RubyGems.org account was compromised. The af...
    4. [CVE-2019-15224] Version 1.6.13 published with malicious backdoor. · Issue #713 · rest-client/rest-client
      from GitHub
      Summary On August 14, attackers published a series of rest-client versions from 1.6.10 to 1.6.13 using the credentials of a rest-client maintainer whose RubyGems.org account was compromised. The af...
    5. malware and miner in some gems · Issue #2097 · rubygems/rubygems.org
      from GitHub
      I read rest-client/rest-client#713 and search similar problems using gem-codesearch. And I found some gems contain malware and mining software. znz@aluminium:~$ csearch 'File.read.*/root/.gem/c...
  11. GeniusMusing (geniusmusing@nu.federati.net)'s status on Sunday, 18-Aug-2019 15:20:22 EDT GeniusMusing GeniusMusing
    in reply to
    • Nobody [LinuxWalt (@lnxw48a1)]
    • GeniusMusing
    @lnxw48a1
    Update:
    Oh, and Im not advertising where, because I don't want to deal with the endless stream of hot takes and idiot bigots, from Mastodon, but I *am* on the Fediverse again.
    https://twitter.com/HighlandArrow/status/1163148870546808832
    In conversation about 2 months ago from nu.federati.net permalink
  12. GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 16-Aug-2019 11:10:45 EDT GeniusMusing GeniusMusing
    • Linux Liaison :ubuntu:
    @brandon I have not seen that as an issue in +3 years of having sb's in use, the detach is electro-mechanical via software with the software being windows, what coulg go wrong?
    In conversation about 2 months ago from nu.federati.net permalink
  13. GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 16-Aug-2019 10:28:14 EDT GeniusMusing GeniusMusing
    • Linux Liaison :ubuntu:
    @brandon
    * Great detachment mechanism while it works
    ftfy - hint: two paperclips also work when dead.
    In conversation about 2 months ago from nu.federati.net permalink
  14. GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 16-Aug-2019 09:34:27 EDT GeniusMusing GeniusMusing
    • Linux Liaison :ubuntu:
    @brandon for future reference then.
    In conversation about 2 months ago from nu.federati.net permalink
  15. GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 16-Aug-2019 09:05:37 EDT GeniusMusing GeniusMusing
    • Linux Liaison :ubuntu:
    @brandon Lets make it interesting...
    https://nu.federati.net/url/241177
    In conversation about 2 months ago from nu.federati.net permalink
  • Before

User actions

    GeniusMusing

    GeniusMusing

    ChiTown Suburbia

    AKA Wile E. Coyote, Inventor, Maker, Programmer, Writer and Super Genius.

    Tags
    • (None)
    WebSub
    Active

    Following 0

      Followers 2

      • Firehose
      • Bob Jonkman

      Groups 0

        Statistics

        User ID
        5773
        Member since
        5 Dec 2017
        Notices
        541
        Daily average
        1

        Feeds

        • Atom
        • Help
        • About
        • FAQ
        • TOS
        • Privacy
        • Source
        • Version
        • Contact

        Jonkman Microblog is a social network, courtesy of SOBAC Microcomputer Services. It runs on GNU social, version 1.2.0-beta5, available under the GNU Affero General Public License.

        Creative Commons Attribution 3.0 All Jonkman Microblog content and data are available under the Creative Commons Attribution 3.0 license.

        Switch to mobile site layout.