

All Jupiter Broadcasting Shows
Jupiter Broadcasting
Every audio version of Jupiter Broadcasting's productions.
Episodes
Mentioned books

Sep 13, 2019 • 0sec
The Story Behind our Daily Linux Podcast | Jupiter Extras 13
Chris and Chz catch up on what's been going on and then share the story behind our new daily Linux podcast and the breakthrough it took to make it possible.Links:Self-HostedLinux HeadlinesChatting With Alex and Chris From The Self Hosted Podcast! - YouTube

Sep 12, 2019 • 0sec
Splitting Fun and Profit | User Error 74
It's another #AskError episode. The finances of social situations and FOSS projects, automated vehicles, and ways to cheer up.
Plus bad language, and being late.
Check out Linux Headlines and Self Hosted
00:01:22 How do you deal with splitting up money with friends after a group trip/bbq/dinner?
00:06:20 What’s the best way to organise the finances for a FOSS project?
00:14:49 Do you swear in front of your family and, if not, why not?
00:22:22 Would you ride in an automated car that has no human input or override?
00:26:03 What do you do to feel better when you feel upset?
00:29:16 Would you rather always be 10 minutes late or always be 20 minutes early?

Sep 12, 2019 • 0sec
The First One | Self-Hosted 1
You've been wanting to host a Nextcloud instance (or anything else) for your family for a while now. Where on Earth do you start? We share some hard learned lessons about self-hosting, discuss the most important things to consider when building a home server, and Chris gives Alex a hard time about Arch as a Server OS.Links:@SelfHostedShow on TwitterYour preferred Linux "server" OS? — I currently host a bunch of services inside of Docker containers. Had been using Ubuntu Server, but I felt like the OS is kind of bloated and I wanted to try some new things so I switched to Alpine.
Alpine is a bit too minimalistic for my tastes and I've run into some compatibility issues with it (even when using it just as a Docker host).
At this point I'm planning on staying with a Linux OS and with Docker as the way I run my actual services, just not sure of what I want to actually use next.Wireless Security Camera System - EufyCam E Review — What's the best wireless security camera system? Here's my EufyCam E review, which covers my main criteria for a good camera system: battery-operated, easy to setup, good image quality, no subscription fees, local storage, and integrations with my smart home.Ending Note by TouchRemix

Sep 11, 2019 • 0sec
Recapping vBSDcon 2019 | BSD Now 315
vBSDcon 2019 recap, Unix at 50, OpenBSD on fan-less Tuxedo InfinityBook, humungus - an hg server, how to configure a network dump in FreeBSD, and more.
Headlines
vBSDcon Recap
Allan and Benedict attended vBSDcon 2019, which ended last week.
It was held again at the Hyatt Regency Reston and the main conference was organized by Dan Langille of BSDCan fame.The two day conference was preceded by a one day FreeBSD hackathon, where FreeBSD developers had the chance to work on patches and PRs. In the evening, a reception was held to welcome attendees and give them a chance to chat and get to know each other over food and drinks.
The first day of the conference was opened with a Keynote by Paul Vixie about DNS over HTTPS (DoH). He explained how we got to the current state and what challenges (technical and social) this entails.
If you missed this talk and are dying to see it, it will also be presented at EuroBSDCon next week
John Baldwin followed up by giving an overview of the work on “In-Kernel TLS Framing and Encryption for FreeBSD” abstract and the recent commit we covered in episode 313.
Meanwhile, Brian Callahan was giving a separate session in another room about “Learning to (Open)BSD through its porting system: an attendee-driven educational session” where people had the chance to learn about how to create ports for the BSDs.
David Fullard’s talk about “Transitioning from FreeNAS to FreeBSD” was his first talk at a BSD conference and described how he built his own home NAS setup trying to replicate FreeNAS’ functionality on FreeBSD, and why he transitioned from using an appliance to using vanilla FreeBSD.
Shawn Webb followed with his overview talk about the “State of the Hardened Union”.
Benedict’s talk about “Replacing an Oracle Server with FreeBSD, OpenZFS, and PostgreSQL” was well received as people are interested in how we liberated ourselves from the clutches of Oracle without compromising functionality.
Entertaining and educational at the same time, Michael W. Lucas talk about “Twenty Years in Jail: FreeBSD Jails, Then and Now” closed the first day. Lucas also had a table in the hallway with his various tech and non-tech books for sale.
People formed small groups and went into town for dinner. Some returned later that night to some work in the hacker lounge or talk amongst fellow BSD enthusiasts.
Colin Percival was the keynote speaker for the second day and had an in-depth look at “23 years of software side channel attacks”.
Allan reprised his “ELI5: ZFS Caching” talk explaining how the ZFS adaptive replacement cache (ARC) work and how it can be tuned for various workloads.
“By the numbers: ZFS Performance Results from Six Operating Systems and Their Derivatives” by Michael Dexter followed with his approach to benchmarking OpenZFS on various platforms.
Conor Beh was also a new speaker to vBSDcon. His talk was about “FreeBSD at Work: Building Network and Storage Infrastructure with pfSense and FreeNAS”.
Two OpenBSD talks closed the talk session: Kurt Mosiejczuk with “Care and Feeding of OpenBSD Porters” and Aaron Poffenberger with “Road Warrior Disaster Recovery: Secure, Synchronized, and Backed-up”.
A dinner and reception was enjoyed by the attendees and gave more time to discuss the talks given and other things until late at night.
We want to thank the vBSDcon organizers and especially Dan Langille for running such a great conference. We are grateful to Verisign as the main sponsor and The FreeBSD Foundation for sponsoring the tote bags. Thanks to all the speakers and attendees!
humungus - an hg server
Features
View changes, files, changesets, etc. Some syntax highlighting.
Read only.
Serves multiple repositories.
Allows cloning via the obvious URL. Supports go get.
Serves files for downloads.
Online documentation via mandoc.
Terminal based admin interface.
News Roundup
OpenBSD on fan-less Tuxedo InfinityBook 14″ v2.
The InfinityBook 14” v2 is a fanless 14” notebook. It is an excellent choice for running OpenBSD - but order it with the supported wireless card (see below.).
I’ve set it up in a dual-boot configuration so that I can switch between Linux and OpenBSD - mainly to spot differences in the drivers. TUXEDO allows a variety of configurations through their webshop.
The dual boot setup with grub2 and EFI boot will be covered in a separate blogpost. My tests were done with OpenBSD-current - which is as of writing flagged as 6.6-beta.
See Article for breakdown of CPU, Wireless, Video, Webcam, Audio, ACPI, Battery, Touchpad, and MicroSD Card Reader
Unix at 50: How the OS that powered smartphones started from failure
Maybe its pervasiveness has long obscured its origins. But Unix, the operating system that in one derivative or another powers nearly all smartphones sold worldwide, was born 50 years ago from the failure of an ambitious project that involved titans like Bell Labs, GE, and MIT. Largely the brainchild of a few programmers at Bell Labs, the unlikely story of Unix begins with a meeting on the top floor of an otherwise unremarkable annex at the sprawling Bell Labs complex in Murray Hill, New Jersey.
It was a bright, cold Monday, the last day of March 1969, and the computer sciences department was hosting distinguished guests: Bill Baker, a Bell Labs vice president, and Ed David, the director of research. Baker was about to pull the plug on Multics (a condensed form of MULTiplexed Information and Computing Service), a software project that the computer sciences department had been working on for four years. Multics was two years overdue, way over budget, and functional only in the loosest possible understanding of the term.
Trying to put the best spin possible on what was clearly an abject failure, Baker gave a speech in which he claimed that Bell Labs had accomplished everything it was trying to accomplish in Multics and that they no longer needed to work on the project. As Berk Tague, a staffer present at the meeting, later told Princeton University, “Like Vietnam, he declared victory and got out of Multics.”
Within the department, this announcement was hardly unexpected. The programmers were acutely aware of the various issues with both the scope of the project and the computer they had been asked to build it for.
Still, it was something to work on, and as long as Bell Labs was working on Multics, they would also have a $7 million mainframe computer to play around with in their spare time. Dennis Ritchie, one of the programmers working on Multics, later said they all felt some stake in the success of the project, even though they knew the odds of that success were exceedingly remote.
Cancellation of Multics meant the end of the only project that the programmers in the Computer science department had to work on—and it also meant the loss of the only computer in the Computer science department. After the GE 645 mainframe was taken apart and hauled off, the computer science department’s resources were reduced to little more than office supplies and a few terminals.
Some of Allan’s favourite excerpts:
In the early '60s, Bill Ninke, a researcher in acoustics, had demonstrated a rudimentary graphical user interface with a DEC PDP-7 minicomputer. Acoustics still had that computer, but they weren’t using it and had stuck it somewhere out of the way up on the sixth floor.
And so Thompson, an indefatigable explorer of the labs’ nooks and crannies, finally found that PDP-7 shortly after Davis and Baker cancelled Multics.
With the rest of the team’s help, Thompson bundled up the various pieces of the PDP-7—a machine about the size of a refrigerator, not counting the terminal—moved it into a closet assigned to the acoustics department, and got it up and running. One way or another, they convinced acoustics to provide space for the computer and also to pay for the not infrequent repairs to it out of that department’s budget.
McIlroy’s programmers suddenly had a computer, kind of. So during the summer of 1969, Thompson, Ritchie, and Canaday hashed out the basics of a file manager that would run on the PDP-7. This was no simple task. Batch computing—running programs one after the other—rarely required that a computer be able to permanently store information, and many mainframes did not have any permanent storage device (whether a tape or a hard disk) attached to them. But the time-sharing environment that these programmers had fallen in love with required attached storage. And with multiple users connected to the same computer at the same time, the file manager had to be written well enough to keep one user’s files from being written over another user’s. When a file was read, the output from that file had to be sent to the user that was opening it.
It was a challenge that McIlroy’s team was willing to accept. They had seen the future of computing and wanted to explore it. They knew that Multics was a dead-end, but they had discovered the possibilities opened up by shared development, shared access, and real-time computing. Twenty years later, Ritchie characterized it for Princeton as such: “What we wanted to preserve was not just a good environment in which to do programming, but a system around which a fellowship could form.”
Eventually when they had the file management system more or less fleshed out conceptually, it came time to actually write the code. The trio—all of whom had terrible handwriting—decided to use the Labs’ dictating service. One of them called up a lab extension and dictated the entire code base into a tape recorder. And thus, some unidentified clerical worker or workers soon had the unenviable task of trying to convert that into a typewritten document.
Of course, it was done imperfectly. Among various errors, “inode” came back as “eye node,” but the output was still viewed as a decided improvement over their assorted scribbles.
In August 1969, Thompson’s wife and son went on a three-week vacation to see her family out in Berkeley, and Thompson decided to spend that time writing an assembler, a file editor, and a kernel to manage the PDP-7 processor. This would turn the group’s file manager into a full-fledged operating system. He generously allocated himself one week for each task.
Thompson finished his tasks more or less on schedule. And by September, the computer science department at Bell Labs had an operating system running on a PDP-7—and it wasn’t Multics.
By the summer of 1970, the team had attached a tape drive to the PDP-7, and their blossoming OS also had a growing selection of tools for programmers (several of which persist down to this day). But despite the successes, Thompson, Canaday, and Ritchie were still being rebuffed by labs management in their efforts to get a brand-new computer.
It wasn’t until late 1971 that the computer science department got a truly modern computer. The Unix team had developed several tools designed to automatically format text files for printing over the past year or so. They had done so to simplify the production of documentation for their pet project, but their tools had escaped and were being used by several researchers elsewhere on the top floor. At the same time, the legal department was prepared to spend a fortune on a mainframe program called “AstroText.” Catching wind of this, the Unix crew realized that they could, with only a little effort, upgrade the tools they had written for their own use into something that the legal department could use to prepare patent applications.
The computer science department pitched lab management on the purchase of a DEC PDP-11 for document production purposes, and Max Mathews offered to pay for the machine out of the acoustics department budget. Finally, management gave in and purchased a computer for the Unix team to play with. Eventually, word leaked out about this operating system, and businesses and institutions with PDP-11s began contacting Bell Labs about their new operating system. The Labs made it available for free—requesting only the cost of postage and media from anyone who wanted a copy.
The rest has quite literally made tech history.
See the link for the rest of the article
How to configure a network dump in FreeBSD?
A network dump might be very useful for collecting kernel crash dumps from embedded machines and machines with a larger amount of RAM then available swap partition size. Besides net dumps we can also try to compress the core dump. However, often this may still not be enough swap to keep whole core dump. In such situation using network dump is a convenient and reliable way for collecting kernel dump.
So, first, let’s talk a little bit about history. The first implementation of the network dumps was implemented around 2000 for the FreeBSD 4.x as a kernel module. The code was implemented in 2010 with the intention of being part of FreeBSD 9.0. However, the code never landed in FreeBSD. Finally, in 2018 with the commit r333283 by Mark Johnston the netdump client code landed in the FreeBSD. Subsequently, many other commitments were then implemented to add support for the different drivers (for example r333289). The first official release of FreeBSD, which support netdump is FreeBSD 12.0.
Now, let’s get back to the main topic. How to configure the network dump? Two machines are needed. One machine is to collect core dump, let’s call it server. We will use the second one to send us the core dump - the client.
See the link for the rest of the article
Beastie Bits
Sudo Mastery 2nd edition is not out
Empirical Notes on the Interaction Between Continuous Kernel Fuzzing and Development
soso
GregKH - OpenBSD was right
Game of Trees
Feedback/Questions
BostJan - Another Question
Tom - PF
JohnnyK - Changing VT without keys
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
Your browser does not support the HTML5 video tag.

Sep 11, 2019 • 0sec
A Chat with Wes Payne | Jupiter Extras 12
Brent joins Wes Payne, well-known Jupiter Broadcasting co-host of Linux Unplugged, Coder Radio, and TechSNAP, for a deep-dive conversation that touches a wide swath of life as a Wes, with topics including:
adventures in learning
a recipe for great collaborations
one definition of Wes-work
creativity and problem-solving in tech
introvertedness and the subtle art of being agreeable
strategies in brainstorming
entropy and evolution of routines in creativity
hammock time and meditation
Buddhism and our mind's understanding of the world
the importance of context in comprehension
Links:The World Before Your Feet' Documentary - Matt Green Walks Every Street in New York CityQuiet: The Power of Introverts in a World That Can't Stop Talking by Susan CainThe 4-Hour Workweek by Tim FerrissSix Thinking HatsBrain Pickings - Daily Rituals: A Guided Tour of Writers’ and Artists’ Creative HabitsHammock Driven Development, or, If We're Not Solving Problems What are We Doing? - Rich HickeyConvinced Coder - Hammock Driven DevelopmentDerek Sivers - “HELL YEAH!” or “no."Why Buddhism is True: The Science and Philosophy of Meditation and Enlightenment by Robert WrightThe Knowledge Gap: The Hidden Cause of America’s Broken Education System–and How to Fix It - Natalie Wexler

Sep 10, 2019 • 0sec
Manjaro Levels Up | LINUX Unplugged 318
It’s official, Manjaro is a legitimate business; so what happens next? We chat with Phil from the project about the huge news.
Plus we share some big news of our own, and the strange feels we get from Chrome OS.Special Guests: Brent Gervais, Ell Marquez, and Philip Muller.Links:Kate Planning — Whereas Kate already works well as a general purpose editor, the competition in the text editor space got more intense in the last years. For example Sublime, Atom and Visual Studio Code are things to keep an eye on feature & polishing wise.Free software advocate Richard Stallman spoke at Microsoft Research this week | ZDNet — Stallman gave a "mostly standard talk," covering the importance of free software, GPL v3, GNU vs. Linux. He added that "he had a list of 'small requests': make Github push users to better software license hygiene, make hardware manufacturers to publish their hardware specs, make it easier to workaround Secure Boot."Microsoft hosts first Windows Subsystem for Linux conference | ZDNet — Hayden Barnes, founder of Whitewater Foundry, a startup focusing on Windows Subsystem for Linux (WSL) announced WSLconf 1, the first community conference for WSL.Manjaro is taking the next step - Announcements - Manjaro Linux Forum — On July 8th, Philip and Bernhard met together with the CEO of Blue Systems to officially found this business entity. As a result, Bernhard and Philip will now be able to commit full-time to Manjaro, while Blue Systems will take a role as an advisor.
Manjaro CommunityBridgeSelf-Hosted — Discover new software and hardware to get the best out of your network, control smart devices, and secure your data on cloud services. Self-Hosted is a chat show between Chris and Alex two long-time "self-hosters" who share their lessons and take you on the journey of their new ones.Linux Headlines — Linux and open source headlines every weekday, in under 3 minutes.
Free Courses at Linux Academy — September 2019 — On September 17th Linux Torvald first released the Linux Operating System Kernel on September 17th, 1991 so we are celebrating by offering free training for you to increase your Linux Skills.
Texas Cyber Summit — October 10th-12th 2019 in San Antonio TexasTexas Cyber Summit Telegram GroupUnofficial Hacker Family Dinner & Unbirthday Party — Join Chris, Wes, Chz and Ell for a meet and greet with fellow Texas Cyber Summit attendees and a belated celebration of Ell and Allie's Birthdays! There will be good food, good friends, and we hope some good conversation.
LINUX Unplugged 296: Defining Desktop Linux — "[...] a desktop linux operating system where you are able to download the source code for the current version of the kernel, compile it, install it, reboot and boot off the kernel you just compiled and built. If you can't do that, it is not desktop linux." - WimpyLinux for Chromebooks could get an installation menu for different distros – About Chromebooks — A Crostini user recently submitted a feature request to provide more options, such as Ubuntu, Fedora or theoretically, any Linux distro that Google could possibly offer.Google Launches Chrome OS, Says Windows is 'Torturing Users' | CIO — Google co-founder Sergey Brin said Windows and other traditional PC operating systems are "torturing users" at Google's Chrome OS launch event Wednesday, where the company claimed 75% of business users can be converted from Windows to Chrome OS right away.
Elgan: Why Chromebooks will fail | ComputerworldIn the Clouds: Inventing Chromebook — While working for Google back in 2006, I had the good fortune to create a new operating system.
dnschneid/crouton: Chromium OS Universal Chroot EnvironmentChromebooks can now run Linux in a Chrome OS window – Gigaom — This is cool: Chromebook users can now run their favorite Linux distribution within a window right on their Chrome OS desktop. Google’s own happiness evangelist François Beaufort revealed with a Google+ post Tuesday that Chromebook oners who have set their device in developer mode can download special Crouton Chrome extension to run Linux without being forced to switch back and forth between the two operating systems.
The Google Play store, coming to a Chromebook near youA new generation of Chromebooks, designed to work with millions of appsLINUX Unplugged Episode 248: Contain All The Things — Chrome OS is officially getting full-fledged Linux apps, and we ponder if this is truly a win for Linux.
You can now run Linux apps on Chrome OS | TechCrunch — For the longest time, developers have taken Chrome OS machines and run tools like Crouton to turn them into Linux-based developer machines. That was a bit of a hassle, but it worked. But things are getting easier. Soon, if you want to run Linux apps on your Chrome OS machine, all you’ll have to do is switch a toggle in the Settings menu. That’s because Google is going to start shipping Chrome OS with a custom virtual machine that runs Debian Stretch, the current stable version of the operating system.
Chrome OS Stable Channel Gets Linux Apps | Linux JournalNeverware — Whether you’re a business, a school, or a home user, CloudReady OS is the fast, easy way to convert your hardware to the security and manageability of Google's Chrome ecosystem.
chromefy — Transforming Chromium to Chrome
Brunch with Brent: A Chat with Drew DeVore — Brent sits down with Drew DeVore, Jupiter Broadcasting's latest addition to the Audio Editing Engineer team and cohost of Choose Linux. We chat shoes, his love for linux, adventures in audio, and why JB feels like home.

Sep 9, 2019 • 0sec
Python's Long Tail | Coder Radio 374
As Python 2's demise draws near we reflect on Python's popularity, the growing adoption of static typing, and why the Python 3 transition took so long.
Plus Apple's audacious app store tactics, Google's troubles with Typescript, and more!Links:Correction: macOS and Zsh — I believe the new macOS Catalina shell is zsh.Feedback: What about Perl 6? — Last episode (373) that's on about shell scripting, interpreted languages, repl & cli, made me think about Perl 6.Feedback: Pry and a Pick — In the previous episode I was amazed to hear that Mike had never used pry before! It's one of the first things I show off to people when introducing them to Ruby.Feedback: Learning Web Dev — I feel woefully unready and I was wondering if either of you had suggestions for structured content around web dev/design that I could use to augment my learning? I've been using Pluralsight, which is great, and I'd be curious to know what else you might suggest.
Google feedback on TypeScript 3.5 — We know and expect every TypeScript upgrade to involve some work. For example, improvements to the standard library are expected and welcomed by us, even though they may mean removing similar but incompatible definitions from our own code base. However, TypeScript 3.5 was a lot more work for us than other recent TypeScript upgrades.Apple has copied some of the most popular apps in the App Store for its iPhone, iPad and other software updates - The Washington Post — Apple plans this month to incorporate some of Clue’s core functionality such as fertility and period prediction into its own Health app that comes pre-installed in every iPhone and is free — unlike Clue, which is free to download but earns money by selling subscriptions and services within its app. Apple’s past incorporation of functionality included in other third-party apps has often led to their demise.
How Apple’s Apps Topped Rivals in the App Store It Controls - The New York Times — But as Apple has become one of the largest competitors on a platform that it controls, suspicions that the company has been tipping the scales in its own favor are at the heart of antitrust complaints in the United States, Europe and Russia.Sunsetting Python 2 | Python.org — We have decided that January 1, 2020, will be the day that we sunset Python 2. That means that we will not improve it anymore after that day, even if someone finds a security problem in it. You should upgrade to Python 3 as soon as you can.Python 2.7 CountdownPorting Python 2 Code to Python 3Our journey to type checking 4 million lines of Python | Dropbox Tech Blog — Dropbox is a big user of Python. It’s our most widely used language both for backend services and the desktop client app (we are also heavy users of Go, TypeScript, and Rust). At our scale—millions of lines of Python—the dynamic typing in Python made code needlessly hard to understand and started to seriously impact productivity. TProjectPSX: Experimental C# Playstation Emulator — ProjectPSX is a C# coded emulator of the original Sony Playstation (Playstation 1/PS1/PSX)
junegunn/fzf — fzf is a general-purpose command-line fuzzy finder.

Sep 8, 2019 • 0sec
Linux Action News 122
Android 10 has a lot we like while the PinePhone is real and closer than we thought.
Plus Red Hat's new desktop strategy, and what we think Mozilla is getting right.Links:Welcoming Android 10! — Today we're releasing the Android 10 source code to Android Open Source Project (AOSP) and making it available to the broader ecosystem. We’re also starting the official Android 10 rollout to all three generations of Pixel devices worldwide. Google Releases Android 10 With "Vulkan Everywhere", Privacy ImprovementsThe Verge Android 10 ReviewAndroid 10 adds warnings for USB port contamination and overheatingThe PinePhone is real & shipping soon — I am hereby happy to announce that the first PinePhones have now entered production and will start shipping to developers this month.Firefox 69 released — As of today, Enhanced Tracking Protection will be turned on by defaultTor Blog: Browser Fingerprinting - An Introduction and the Challenges AheadIntroducing Red Hat CodeReady Containers — CodeReady Containers brings a minimal, preconfigured OpenShift 4.1 or newer cluster to your local laptop or desktop computer for development and testing purposes.

Sep 5, 2019 • 0sec
Mobile Security Mistakes | TechSNAP 411
We take a look at a few recent zero-day vulnerabilities for iOS and Android and find targeted attacks, bad assumptions, and changing markets.
Plus what to expect from USB4 and an upcoming Linux scheduler speed-up for AMD's Epyc CPUs.Links:Google says hackers have put ‘monitoring implants’ in iPhones for years | Technology | The Guardian — Their location was uploaded every minute; their device’s keychain, containing all their passwords, was uploaded, as were their chat histories on popular apps including WhatsApp, Telegram and iMessage, their address book, and their Gmail database.Project Zero: A very deep dive into iOS Exploit chains found in the wild — We discovered exploits for a total of fourteen vulnerabilities across the five exploit chains: seven for the iPhone’s web browser, five for the kernel and two separate sandbox escapes. Project Zero: In-the-wild iOS Exploit Chain 1 — This exploit provides evidence that these exploit chains were likely written contemporaneously with their supported iOS versions; that is, the exploit techniques which were used suggest that this exploit was written around the time of iOS 10. This suggests that this group had a capability against a fully patched iPhone for at least two years. Project Zero: In-the-wild iOS Exploit Chain 3 — It’s difficult to understand how this error could be introduced into a core IPC library that shipped to end users. While errors are common in software development, a serious one like this should have quickly been found by a unit test, code review or even fuzzing. Project Zero: JSC Exploits — In this post, we will take a look at the WebKit exploits used to gain an initial foothold onto the iOS device and stage the privilege escalation exploits. All exploits here achieve shellcode execution inside the sandboxed renderer process (WebContent) on iOS.Project Zero: Implant Teardown — There is no visual indicator on the device that the implant is running. There's no way for a user on iOS to view a process listing, so the implant binary makes no attempt to hide its execution from the system. The implant is primarily focused on stealing files and uploading live location data. The implant requests commands from a command and control server every 60 seconds.The implant has access to all the database files (on the victim’s phone) used by popular end-to-end encryption apps like Whatsapp, Telegram and iMessage.iPhone Hackers Caught By Google Also Targeted Android And Microsoft Windows, Say Sources — Multiple sources with knowledge of the situation said that Google’s own Android operating system and Microsoft Windows PCs were also targeted in a campaign that sought to infect the computers and smartphones of the Uighur ethnic group in China.Google's Shocking Decision To Ignore A Critical Android Vulnerability In Latest Security Update — Despite immediately acknowledging the vulnerability and confirming in June that it will be fixed, Google had not provided an estimated time frame for the patch.Android Zero-Day Bug Opens Door to Privilege Escalation Attack, Researchers Warn | Threatpost — “In the unlikely event an attacker succeeds in exploiting this bug, they would effectively have complete control over the target device,” he told Threatpost. Once an attacker obtains escalated privileges, “it means they could completely take over a device if they can convince a user to install and run their application,”Why 'Zero Day' Android Hacking Now Costs More Than iOS Attacks | WIRED — "During the last few months, we have observed an increase in the number of iOS exploits, mostly Safari and iMessage chains, being developed and sold by researchers from all around the world. The zero-day market is so flooded by iOS exploits that we've recently started refusing some them"Linux 5.4 Kernel To Bring Improved Load Balancing On AMD EPYC Servers — The scheduler topology improvement by SUSE's Matt Fleming changes the behavior as currently it turns out for EPYC hardware the kernel has failed to properly load balance across NUMA nodes on different sockets. USB4 is coming soon and will (mostly) unify USB and Thunderbolt | Ars Technica — The USB Implementers Forum published the official USB4 protocol specification. If your initial reaction was "oh no, not again," don't worry—the new spec is backward-compatible with USB 2 and USB 3, and it uses the same USB Type-C connectors that modern USB 3 devices do.

Sep 5, 2019 • 0sec
Librem 5 Unplugged | Jupiter Extras 11
We react to the "ship date" of the Librem 5, and look back at when it was first announced.
Then our take on what steps Purism could take to turn this situation into a net positive.Links:Librem 5 Will Begin Shipping In The Weeks Ahead, But Varying Quality Over Months Ahead — With the initial batch of phones at the end of September and early October, the hardware quality is said to be "Individually milled case, loose fit, varying alignment, unfinished switch caps. (Hand crafted)" On the software side there is their initial release of mobile software on PureOS while software updates will have to be done from the terminal. Their shipping window for this first batch is 24 September to 22 October.Librem 5 Shipping Announcement – Purism — Due to the high volume, growing demand for the Librem 5, and in the interest of openness and transparency, Purism is publishing its full, detailed, iterative shipping schedule.Massive Progress, Exact CPU Selected & Minor Shipping Adjustment – PurismThe Librem 5 from Purism: A Matrix Native Smartphone. | Matrix.org


