Last minute geek

1. Kubernetes security: 4 strategic tips
(English/Linuxtoday)

enterprisersproject: Kubernetes security experts share the tips that will help you avoid trouble and maybe even build support for security across your organization. Read all  ...

2. The "Uber of Live Music" will charge you $1100-1600 to book a house show, pay musicians $100
(English/BoingBoing ibag)

... house gets the rest up to $Y (to cover costs: rent, insurance, sound tech, light tech, security, cashier, manager, and oh yeah promoting the show) and anything above $Y, the bands and the house split 80/20. ...

3. Trump's stealth attack on Social Security: "Chained CPI"
(English/BoingBoing ibag)

Trump was elected by old white people who are certain they'll be dead before climate change renders the planet uninhabitable, but who are also seriously invested in continuing to receive Social Security ...

4. In less than one second, a malicious web-page can uniquely fingerprint an Iphone, Pixel 2 or Pixel 3 without any explicit user interaction
(English/BoingBoing ibag)

In a new paper for IEEE Security, a trio of researchers (two from Cambridge, one from private industry) identify a de-anonymizing attack on Iphones that exploits minute differences in sensor calibration: ...

5. Thangrycat: a deadly Cisco vulnerability named after an emoji
(English/BoingBoing ibag)

... virtually impossible to eliminate malware once it has been installed. Thangrycat relies on attackers being able to run processes as the system's administrator, and Red Balloon, the security firm that ...

6. The government of Baltimore has been taken hostage by ransomware and may remain shut down for weeks
(English/BoingBoing ibag)

... were hit by a ransomware attack last year, they were hardened against future attacks. The city did not allocate funds to improve its security, or improve its training, or take out cyberattack insurance, ...

7. US government warns China may have access to drone data
(English/engadget)

Today, the Department of Homeland Security issued an alert warning that Chinese-made drones may be sending flight information back to their manufacturers, who could share it with third parties. According ...

8. Google just gave Huawei a wakeup call
(English/engadget)

... security. While the executive order didn't explicitly name c... Read all  ...

9. Data Breach: Millions of Instagram 'influencers,' celebrities, and brands' data found online
(English/BoingBoing ibag)

... as the Instagram account owner’s email address and phone number. Security researcher Anurag Sen discovered the database and alerted TechCrunch in an effort to find the owner and get the database secured. ...

10. Research shows that 2FA and other basic measures are incredibly effective at preventing account hijacking
(English/BoingBoing ibag)

... the efficacy bar, preventing 99% of bulk attacks and 90% of targeted attacks. But safest of all are security keys, which were 100% effective against all attacks (!!), confirming the emerging consensus ...

11. Hackers turn tables on account hijackers by stealing forum data
(English/engadget)

Online account hijackers received a taste of ironic punishment this week. KrebsOnSecurity has learned that hackers stole the database from the popular hijacker forum OGusers on May 12th, obtaining email ...

12. Google stats show how much a recovery number prevents phishing
(English/engadget)

In case you haven't already set up a recovery phone number for your Google account, and enabled extra security features like multifactor authentication, the search giant is using hard data to explain ...

13. Over 21,000 Linksys routers leaked their device connection histories
(English/engadget)

Certain Linksys WiFi routers might be sharing far more data than their users would like. Security researcher Troy Mursch has reported that 33 models, including some Max-Stream and Velop routers, are exposing ...

14. The world's preeminent cryptographers can't get visas to speak at US conferences
(English/BoingBoing ibag)

Ross Anderson (previously) is one of the world's top cryptographers; the British academic and practitioner was honored by having his classic, Security Engineering, inducted into The Cybersecurity Canon; ...

15. Trump wants a goth brutalist border wall with black spikes (no, really)
(English/BoingBoing ibag)

... Security officials and military engineers. And the tips of the bollards should be pointed, not round, the president insists, describing in graphic terms the potential injuries that border-crossers might ...

16. Grifty "information security" companies promised they could decrypt ransomware-locked computers, but they were just quietly paying the ransoms
(English/BoingBoing ibag)

Ransomware has been around since the late 1980s, but it got a massive shot in the arm when leaked NSA cyberweapons were merged with existing strains of ransomware, with new payment mechanisms that used ...

17. Facebook bans election-attack firm linked to Israeli military and 'dozens' more disinformation accounts
(English/BoingBoing ibag)

... air force. Archimedes advertises itself online as a consulting firm for presidential election campaigns. From the Associated Press: Nathaniel Gleicher, Facebook’s head of cybersecurity policy, told reporters ...

18. What is IPSEC and how it works
(English/Linuxtoday)

LinuxHint: IPSEC (Internet Protocol Security) are 3 cryptographic protocols useful to encrypt communications through a network Read all  ...

19. Elizabeth Warren calls for a zero-emissions military, serviced by zero-emissions contractors
(English/BoingBoing ibag)

... and energy independence as serious risks to US security. The Pentagon is America's leading energy consumer (unsurprising, given the size and scale of the US military, which dwarfs every other country's ...

20. Alex Stamos on the security problems of the platforms' content moderation, and what to do about them
(English/BoingBoing ibag)

Alex Stamos (previously) is the former Chief Security Officer of Yahoo and Facebook. I've jokingly called him a "human warrant canary" because it seems that whenever he leaves a job, we later learn that ...

21. Google recalls some Titan security keys after finding Bluetooth vulnerability
(English/engadget)

Google is recalling its Bluetooth Titan security keys due to a vulnerability that could allow attackers to connect to your device. No need to panic -- the bug only seems to apply to a very narrow set of ...

22. Discovering whether your Iphone has been hacked is nearly impossible thanks to Apple's walled garden
(English/BoingBoing ibag)

... you don't answer the call. Apple has received a lot of praise for the security of its Ios devices, which are said to be so secure in part because of Apple's walled garden strategy, which prevents Iphone ...

23. Akita connected home Wi-Fi security watchdog review
(English/the-gadgeteer)

... As soon as we do that, we open potential doors into our networks for bad guys to hack in and do … Akita connected home Wi-Fi security watchdog review Read More Read all  ...

24. Install updates now to address a vulnerability in most Intel CPUs
(English/engadget)

In January 2018, a pair of security exploits dubbed Spectre and Meltdown showed how attackers could take advantage of commonly-implemented CPU technology to access data they shouldn't have been able ...

25. A year after Meltdown and Spectre, security researchers are still announcing new serious risks from low-level chip operations
(English/BoingBoing ibag)

Spectre and Meltdown are a pair of chip-level security bugs that exploit something called "speculative execution," through which chips boost performance by making shrewd guesses about which computer operations ...