@IRJ said in Android malware bites back in the real world.:

@travisdh1 said in Android malware bites back in the real world.:

@scottalanmiller said in Android malware bites back in the real world.:

@travisdh1 said in Android malware bites back in the real world.:

@scottalanmiller said in Android malware bites back in the real world.:

Android seems like a really bad choice for high security applications, like military. Custom Raspberry Pis with super locked down Linux general purpose OSes would make more sense.

Any consumer cellular devices period, I can easily triangulate a cell phone with very little hardware investment.

Do we know that they were consumer phones? I didn't look into it. You can put Android on non-phones, too.

True. I was assuming because the malware was able to stay in contact somehow. Might have been on a dedicated military network with just 1 connection to the outside.

Very interesting article...

You don't have to hack hundreds of phones. Have 3-5 important android devices may be enough to nearly paint a full picture.

And one might attack another.

Pretty sure you just have to pop it in the microwave for about 60 seconds... full power... should get it all sorted.

@travisdh1 said in "Thieves can guess your credit card data in seconds" well, duh:

@dafyre said in "Thieves can guess your credit card data in seconds" well, duh:

@DustinB3403 said in "Thieves can guess your credit card data in seconds" well, duh:

This is where credit fraud protection comes into place, and class action law-suits start for all of the declined claims from people who have had their credit cards used illegally, and the bills not dropped by Visa.

I'd be surprised if there aren't already commericals on TV for 'Do you have a Visa credit card? Has your credit card been used without your consent, and the charges not dropped by Visa, call us now, you may be entitled to X"

Call J. G. Wetworth! 1-877-CASH-NOW....

Sorry... I'll see myself out now.

Let's all jump on board for lawsuits that only make the lawyers money!

Hey I need that 30 cents!

I can feel my ADSL connection melting just thinking about that much data

@scottalanmiller said in 1 million Google accounts compromised by Android malware called Gooligan:

@ChrisL said in 1 million Google accounts compromised by Android malware called Gooligan:

Who in their right mind is out there still using 3rd party app stores or side-loading? It's almost like they want to be hacked.

Strangely, every time I talk about why I don't like Android, people tell me to do exactly this!

alt text

@scottalanmiller said in bold/italic not working:

@travisdh1 said in bold/italic not working:

See https://mangolassi.it/topic/11647/900-000-routers-knocked-offline-in-germany-amid-rumors-of-cyber-attack

Fixed it. You had used the tags incorrectly. You can only use that on unbroken paragraphs. You had it on a big block of text that had paragraph breaks in the middle, so there was no open/close tag pairs.

Ah, well, good thing that wasn't a rattlesnake, I'd be dead.

Wow, that is a rough one.

@travisdh1 said in Microsoft, at least they found and fixed the problem themselves this time.:

I mean, even I make sure that GPG is enabled. Guess this could be included in the "Burned by eschewing best practices" thread as well.

Are they DSS compliant? That's one of the big checks according to the STIGS. We even have to make local repos GPG check and encrypted.

@IRJ said in Really AT&T?:

AT&T involved in surveillance? No way! They are just an upstanding company.

The government is even giving them a helping hand, how could it get any better?

Press release:

Seagate Technology plc (NASDAQ: STX) today introduced the ClusterStor® 300N storage system with Nytro® Intelligent I/O Manager, the newest addition to its family of scale-out storage systems for high-performance computing (HPC) and the first with a flash cache accelerator.

Powered by the software-based Nytro Intelligent I/O Manager, the ClusterStor 300N seamlessly runs multiple mixed workloads simultaneously on the same storage platform, eliminating performance bottlenecks that can result when data demands outpace what the existing storage architecture can accommodate. As a result, organizations can use it to automatically support multiple applications that generate a diverse range of I/O workloads on the same storage platform without negatively impacting performance. It’s particularly suitable for the kinds of mixed and unpredictable workloads found in many of today’s most demanding, data-intensive HPC applications like seismic processing, financial transition modeling, machine learning, geospatial intelligence and fluid dynamics.

Ideal for organizations seeking both peak performance and cost efficiency when managing large data sets at scale with unpredictable workloads, the ClusterStor 300N represents the convergence of Seagate’s market leading enterprise class hard drives, innovative solid state designs and the industry’s most sophisticated system software within a platform purpose built to help organizations manage and move massive amounts of critical data while maintaining workload efficiency and minimizing the cost per terabyte. The Nytro Intelligent I/O Manager software delivers up to 1,000 percent input/output workload acceleration over traditional HPC storage systems and can quickly scale to accommodate any workload at any time.

“Maximizing value of data in the kinds of extraordinary environments represented by supercomputing is all about being able to handle extreme, unpredictable storage bandwidth and capacity needs at scale,” said Ken Claffey, vice president and general manager, Seagate HPC systems business. “Seagate’s ClusterStor 300N expands on our proven, engineered systems approach that delivers performance efficiency and value for HPC environments of any size, using a hybrid technology architecture to handle tough workloads at a fraction of the cost of all-flash approaches.”

The ClusterStor 300N is architected specifically as a common platform for both the ClusterStor, Lustre® and IBM Spectrum Scale™ storage systems as the L300N and G300N, respectively.

“With a long track record of mission-critical HPC deployments and support, Atos Extreme Computing is excited to extend its support to Seagate’s new range of Nytro Intelligent I/O Manager -based ClusterStor appliances,” said Eric Eppe, head of products and solutions, Extreme Computing, Atos. “We believe Seagate’s 300N appliance will help our HPC customers solve their most data intensive workloads and data hierarchy issues in a comprehensive, yet more efficient way.”

“The 300N offers the density, extreme bandwidth, low latency and simplified manageability that our customers demand in their HPC storage environments today,” said Mike Vildibill, vice president, HPC Storage, Hewlett Packard Enterprise. “New storage innovations like the ClusterStor 300N are critical for answering these demands and maintaining a high level of performance across a wide range of workloads.”

The 300N will be widely available in January 2017. Learn more at Seagate’s booth #1209 at the Supercomputing 2016 conference in Salt Lake City, Utah, Nov. 14-17. Other Seagate technology demonstrations at the event will include the highest density 720 terabyte, two-rack unit (RU) Lustre storage system technology configuration, making it possible to build the world's first 15 petabyte, 42RU system, as well as a single NVMe over a Fabric, 24-drive all flash array shared storage system delivering 4.8 million IOPS with single-digit microsecond latency.

The ClusterStor family architecture is built on Seagate’s field-proven, enterprise-class hard drives and high-performance parallel file systems such as Lustre and IBM Spectrum Scale. Combining superior performance with ultra-efficient scalability, the ClusterStor family includes the new ClusterStor L300N and G300N, as well as the ClusterStor A200 Active Archive, ClusterStor L300, ClusterStor G200, ClusterStor 9000, ClusterStor 1500, ClusterStor Secure Data Appliance and Hadoop Workflow Accelerator for ClusterStor’s architecture.

@stacksofplates said in Suddenly hit from lots of different places today.:

@travisdh1 said in Suddenly hit from lots of different places today.:

@stacksofplates said in Suddenly hit from lots of different places today.:

@travisdh1 said in Suddenly hit from lots of different places today.:

@dafyre said in Suddenly hit from lots of different places today.:

@travisdh1 I'm totally shocked... not a single hit for root as the login name!

I know right 😕

When I first started here, the website was hosted on a Windows Server VPS, so the administrator at least makes a little sense.

Also, remote root login (the only one available because it's a VPS) is key based. So go ahead and try logging in as root with a password.

Ha we can't log in with root at all over SSH.

While it's very tempting to do just that, the only user the system started with was root. If I have to burn it all down, I need some way to access the thing.

Ah ic. Do you not have console access?

I do, but the only user on the system was created after the OS/cPanel was installed. So if I have to nuke it from orbit, I kinda need that access.

@scottalanmiller said in Android Banking Malware:

Active users of mobile banking apps should be aware of a new Android banking malware campaign targeting customers of large banks in the United States, Germany, France, Australia, Turkey, Poland, and Austria. This banking malware can steal login credentials from 94 different mobile banking apps. Due to its ability to intercept SMS communications, the malware is also able to bypass SMS-based two-factor authentication. Additionally, it also contains modules to target some popular social media apps.

Defeats two factor authentication!!

Honestly, any vendor using Flash is just asking for this.

SMS has never been a secure factor. Easy to intercept on wireless networks, even more on smartphones where an malicious app has access to the GSM modem or messaging API.

Just confirmed this works on Ubuntu as well. I imagine that means Mint would also work, but have not confirmed Mint yet, and probably will not as the only installs of that I have are workstations that don't require quite the same level of monitoring.

I've got it installed, and backing itself up, but the first client system is throwing errors on me. Firewall ports are open and services running according to the guide here. It'll be this afternoon before I can get around to looking at the error logs.

@scottalanmiller said in Bacula and selinux...:

@syko24 said in Bacula and selinux...:

@DustinB3403

Again I didn't get too far with it but they appear to have their own web ui.

https://www.bareos.org/en/bareos-webui.html

Maybe a thread looking at that product would make sense. I don't know it but am interested to see what they are bringing to the table that make forking Bacula make sense.

I agree, and I'll start another one after lunch once I get the basic platform setup. Gotta love a good base image.

I think I'm in the twilight zone today, found a 750GB USB drive that's showing up as 5.5TB. Maybe I should've just taken a vacation day today.

@scottalanmiller said in More bad news for Rochester, NY:

@thwr said in More bad news for Rochester, NY:

@travisdh1 said in More bad news for Rochester, NY:

https://www.dslreports.com/shownews/Verizon-to-Close-5-Call-Centers-Impacting-3200-Employees-138099

Verizon closing down a number of call centers... as if their customer service wasn't already terrible enough. One of the call centers is apparently in Rochester, NY. You're job market just got even worse 😞

They will probably open a new one. In Romania. Or even worse, in Egypt. Seen that before 😞

Romania is way more technical than Rochester 🙂

This is true. Had a Romanian guy try to install some remote control software on my family's computers back in the mid 90s. Software was in Romanian. That was the last time I let anybody near a computer that was mine and left hem alone, unsupervised.