The concern for everybody is that it has to be decrypted at some point to be able to analyze the traffic and it would be decrypted outside your premises where you have no control. Heck you would even need to encrypt it with a public key for which you have no control over the matching private key!!!
And guess what? The other runs on the cloud! This all sounds great to me.
Don't try to get smart here, as a former president said: "either you are with the children or you are against the children!" (or something like that;-)
You just create your own CA cert and you use it to sign the other certs. So you are your own CA. Very accessible to mere mortals...;-)
As always, you need to put your CA cert and the signing machine in a safe, without internet connection. I am only half kidding here. The CA cert is not required to run openvpn, only to sign certs.
Most machines running VPNs haven't updated their SSL libraries could be more precise. Maybe some VPNs bundle their own SSL libraries within their product but in that case, it would make more sense if they used the system wide libraries.
Example, you don't need to update OpenVPN, only the SSL libraries:
Or just getting frustrated in the relationship with his computer and he plans to have groovy orgies with "smart phones" instead to help forget about him.
Nothing specific to voip here. The attack exploits a network attached device (IoT?) that runs a web server accessible without any form of authentication. It is just a variant of other IoT device attacks; web camera, temperature controller etc.
Shut the damned web server off on the device or at least choose a user name and password to allow access to it...
Slashdot Mirror
Thanks for the tip guys!
There is definitely more energy (hydrogen) in the oceans than there is in those silly oil patches. Who needs water anyway?
We might have to make a deal with Nestlé but this should come along well.
https://www.salon.com/2015/04/...
Truly yours,
Rex Wayne Tillerson
Just put those IoT on their own VLAN and do not allow them to connect anywhere!
The concern for everybody is that it has to be decrypted at some point to be able to analyze the traffic and it would be decrypted outside your premises where you have no control. Heck you would even need to encrypt it with a public key for which you have no control over the matching private key!!!
And guess what? The other runs on the cloud! This all sounds great to me.
Agreed, sending your protected LAN traffic and what not to the cloud. What could possibly go wrong?
As a matter of fact, our current security setup wouldn't even allow the data to be sent.
Only if GPS coordinates were embedded in the picture. In short, they are cheating ;-)
http://osxdaily.com/2015/05/08...
Don't try to get smart here, as a former president said: "either you are with the children or you are against the children!" (or something like that ;-)
This! This! But you forgot the most important part; authorities should be allowed to do anything if it ultimately protects the children! ;-)
You just create your own CA cert and you use it to sign the other certs. So you are your own CA. Very accessible to mere mortals... ;-)
As always, you need to put your CA cert and the signing machine in a safe, without internet connection. I am only half kidding here. The CA cert is not required to run openvpn, only to sign certs.
https://openvpn.net/index.php/...
Most machines running VPNs haven't updated their SSL libraries could be more precise. Maybe some VPNs bundle their own SSL libraries within their product but in that case, it would make more sense if they used the system wide libraries.
Example, you don't need to update OpenVPN, only the SSL libraries:
https://community.openvpn.net/...
Nah, I am a real man and I get along fine with half-precision.
Or just getting frustrated in the relationship with his computer and he plans to have groovy orgies with "smart phones" instead to help forget about him.
Hmm... you will be fucking smart phones? Are you currently fucking your computer and planning to switch? Please explain...
Not me, I first thought it was a misspelling of "Whory".
Have any technical articles been posted on what all of these 'servers' were running?
Well, take a guess...
Horry County school district (South Carolina, US). Got it! Thanks for the tip ;-)
At least banks and other victim institutions keep the whole thing secret. Great idea to render it public.
Another funny part in TFA:
Coincidentally, when the ransomware incident happened, the school's administration was looking into hiring an outside security provider.
What if it wasn't coincidental?
Exactly, same here it is called: backports
Nope all patched
Have you ever heard about backports??? It has the advantage of patching the hole without risks to introduce new holes usually.
Hey man, don't make fun of me! I am still on 2.6 on most machines, 3.2 on more recent machines...
$ uname -a
Linux XXX 2.6.30.5 #4 SMP PREEMPT Sun Dec 29 21:46:53 EST 2013 i686 unknown unknown GNU/Linux
$ uname -a
Linux XXX 3.2.45 #1 SMP Fri Oct 3 14:32:04 EDT 2014 x86_64 Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz GenuineIntel GNU/Linux
I think the takeaway points are that the body adjusts to the increased fat burn through multiple mechanisms...
Exactly, adaptation, evolution, mutations. Next subject please!
Get a sex change into a man.
Indeed
Me too, but it only works for drumming when my girlfriend parades nude in front of the stage.
Nothing specific to voip here. The attack exploits a network attached device (IoT?) that runs a web server accessible without any form of authentication. It is just a variant of other IoT device attacks; web camera, temperature controller etc.
Shut the damned web server off on the device or at least choose a user name and password to allow access to it...
8088 was 8 bits. 8086 was 16 bits so I assume x86 should mean at least 16 bits.