Press "Enter" to skip to content

Posts published in “News”

The Man Who Didn’t Invent Email Attacks Free Speech

The man whose much disputed claim to have invented email when he was a 14-year-old is taking legal actions, or threatening such, against anyone who publicly disagrees with his version of history.

email to remove Ayyadurai post from diaspora

Shiva Ayyadurai says he invented email and will sue the pants off anyone who says he didn’t. He’s already picked up a fat $750,000 settlement check from Gawker, which decided to settle because another lawsuit by Hulk Hogan had already put the site out of business. There is currently a suit pending against Techdirt, a site that mainly reports on threats to free speech. Now he’s going after social media, by sending a demand to a node of Diaspora to remove three posts by Roy Schestowitz, publisher of the popular FOSS site Tux Machines and the iconoclastic blog Techrights.

MongoDB Ransomware Attacks Grow in Number

Evidently DevOps running MongoDB haven’t heard the word about the latest round of ransomware targeting the database, as the numbers of deployments with data being held for ransom continues to rise.

MongoDB ransomware

Last week when the news started hitting the net about ransomware attacks focusing on unprotected instances of MongoDB, it seemed to me to be a story that would have a short life. After all, the attacks weren’t leveraging some unpatched vulnerabilities in the database, but databases that were misconfigured in a way that left them reachable via the Internet, and with no controls — like a password other than the default — over who had privileges. All that was necessary to get this attack vector under control was for admins to be aware of the situation and to be ready and able to reconfigure and password protect.

Guess what? It hasn’t gone down that way — at least not so far.

On Wednesday when I wrote about this there had been about 2,000 databases attacked. By this morning, according to eWeek, over 10,000 databases have been affected. What’s more, last week it appeared as if all of the attacks were being carried out by one person or organization. Now there are at least five organizations steadily working in an attempt to turn unprotected databases into bitcoins.

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

GNU Officially Boots Libreboot

FSF and GNU decide to grant Libreboot lead developer Leah Rowe’s wishes. The project is no longer a part of GNU says RMS.

Breaking News

booting Libreboot

A saga that began about four months ago has ended — or so it seems, On Thursday, Richard Stallman, founder and head of the GNU Project, officially said Goodbye to GNU Libreboot in an email on the GNU mailing list.

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

Open Source 101 Coming to Raleigh, N.C.

All Things Open presents Open Source 101, a one day conference scheduled for February that might be a good way for tech students at N.C. State to network and talk with recruiters.

OpenSource 101

There’s a new open source conference coming to Silicon Valley East. Open Source 101 will be a single day event held Saturday February 4, 2017 on the campus of North Carolina State University in Raleigh. The event is being hosted by All Things Open, the organization behind the four-year-old All Things Open conference that’s held every October in downtown Raleigh.

Another Yahoo Security Breach Affects a Billion Accounts

After announcing in September that 500 million accounts had been compromised in a 2014 security breach, the company announces today that an additional billion accounts have been hacked in a separate incident.

Yahoo logo

Breaking News

If you’re a Yahoo user, you should strongly consider closing your account. If you decide to keep your account open, you might as well post your username and password to Facebook and send them out in a tweet, for all the good Yahoo’s security precautions will do for you.

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

‘Refer a Friend’ Ransomware Program

A new, under development ransomware called Popcorn Time has a “refer a friend” option meant to appeal to the victim’s worst instincts.

Popcorn Time lock screen
All graphics in this article are courtesy Bleeping Computer, LLC. Used with permission.

Security

If you need any proof that malware is a business much like any other — with the big exception that it’s illegal — all you have to do is look at the latest ploy being used by the currently-in-development ransomware called Popcorn Time that was discovered December 7 by MalwareHunterTeam. The folks behind the malware are incorporating a scheme to drum up business that’s directly from a Marketing 101 textbook.

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

Users Told Disconnect Certain Netgear Routers

Some popular Netgear routers contain a security flaw that is evidently easy to exploit and can make users vulnerable to a CSRF attack.

security vulnerability

Breaking News

About this time I’m wondering if I’d even purchase a Netgear router.

You’d think that with all of the fuss recently about the insecure Internet of things, especially when it comes to routers, that any router maker would be on top of it and patching vulnerabilities as soon as they’re discovered.

Evidently not, as far as Netgear is concerned.

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

System 76 Talks With Ubuntu, WordPress Ups Game and More…

Also included: Fedora community says goodbye to Matthew Williams, Solus gets a new package build system, end-of-life for Fedora 23 and IoT security.

Ubuntu logo

FOSS Week in Review

Something arctic this way comes. That”s what Lannie Pope, the weatherwoman on the local NBC affiliate, tells us, Trouble is, I’m still stuck in a house without proper heat, a situation that’s been dragging on since near the end of September. It’s a long story, but…brrr. I’m glad I don’t live in a part of the country where it gets really cold.

Now on to this week’s FOSS news, which is always warm…

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

New IoT Botnet, Attackers Target Tor, and More…

Also included, Flash on life support, Mageia’s new release, Ubuntu sets date for “Zesty Zapus” and our News Wire gets an RSS feed.

Tor logo

FOSS Week in Review

Outside of FOSS, the news becomes too depressing and repetitive to read. Gamergate has taken over our country and is set to move into the White House and to have free rein in the halls of congress. Roles are being reversed and it’s rapidly becoming politically incorrect to express concerns for our mother the earth or for the creatures who inhabit it, while it’s perfectly fine to label anyone who advocates for equality as a “social justice warrior” who should have no place within any organization.

If you think I’m bummed out, you’re right. At least for the time being, in the world of FOSS life goes on as usual…

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

Securing SourceForge With HTTPS

SourceForge

SourceForge says, “With a single click, projects can opt-in to switch their web hosting from HTTP to HTTPS.”

SourceForge has added a feature that gives project websites the opportunity to opt-in to using SSL HTTPS encryption. Project admins can find this option in the Admin page under “HTTPS.”

Opting-in will also trigger a domain name change, from http://name.sourceforge.net to https://name.sourceforge.io. Visitors using the old domain will automatically redirect to the new domain.

What Malware Is on Your Router?

router

Mirai is exposing a serious security issue with the Internet of Things that absolutely must be quickly handled.

Until a few days ago, I had been seriously considering replacing the 1999 model Apple Airport wireless router I’ve been using since it was gifted to me in 2007. It still works fine, but I have a philosophy that any hardware that’s more than old enough to drive probably needs replacing. I’ve been planning on taking the 35 mile drive to the nearest Best Buy outlet on Saturday to see what I could get that’s within my price range.

After the news of this week, that trip is now on hold. For the time being I’ve decided to wait until I can be reasonably sure that any router I purchase won’t be hanging out a red light to attract the IoT exploit-of-the-week.

Christine Hall

Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

Latest Articles