Collaborate Disseminate
Researchers at Eset have published a huge report on the Ebury malware/botnet (pdf), and one of the high profile targets of this campaign was part of the kernel.org infrastructure. So …read more Continue reading This Week in Security: The Time Kernel.org Was Backdoored and Other Stories
This week Jonathan Bennett and Rob Campbell talk with Gareth Coleman and Hamish Cunningham! It’s all about the Unphone, an open source handset sporting an ESP32, color touchscreen, and LoRa …read more Continue reading FLOSS Weekly Episode 783: Teaching Embedded with the Unphone
There’s a clever “new” attack against VPNs, called TunnelVision, done by researchers at Leviathan Security. To explain why we put “new” in quotation marks, I’ll just share my note-to-self on …read more Continue reading This Week in Security: TunnelVision, Scarecrows, and Poutine
This week Jonathan Bennett and David Ruggles chat with Rak Siva and Steve Demchuck to talk about Nitric! That’s the Infrastructure from Code framework that makes it easy to use …read more Continue reading FLOSS Weekly Episode 782: Nitric — In Search of the Right Knob
The UK has the answer to all our IoT problems: banning bad default passwords. Additionally, the new UK law requires device makers to provide contact info for vulnerability disclosures, as …read more Continue reading This Week in Security: Default Passwords, Lock Slapping, and Mastodown
This week Jonathan Bennett and Doc Searls sit down with Mathias Buus Madsen and Paolo Ardoino of Holepunch, to talk about the Pear Runtime and the Keet serverless peer-to-peer platform. …read more Continue reading FLOSS Weekly Episode 781: Resistant To The Wrath Of God
This week Jonathan Bennett and Doc Searls sit down with Mathias Buus Madsen and Paolo Ardoino of Holepunch, to talk about the Pear Runtime and the Keet serverless peer-to-peer platform. …read more Continue reading FLOSS Weekly Episode 781: Resistant To The Wrath Of God
There’s a trend recently, of big-name security appliances getting used in state-sponsored attacks. It looks like Cisco is the latest victim, based on a report by their own Talos Intelligence. …read more Continue reading This Week in Security: Cisco, Mitel, and AI False Flags
This week Jonathan Bennett and Aaron Newcomb chat with Isaac Connor about Zoneminder! That’s the project that’s working to store and deliver all the bits from security cameras — but …read more Continue reading FLOSS Weekly Episode 780: Zoneminder — Better Call Randal
It may be time to rotate some keys. The venerable PuTTY was updated to 0.81 this week, and the major fix was a change to how ecdsa-sha2-nistp521 signatures are generated. …read more Continue reading This Week in Security: Putty Keys, Libarchive, and Palo Alto