Many programs on your computer access the internet even though they don’t need to. They phone home for a variety of reason including telemetry and checking for updates.
I don’t need or want most programs phoning home for any reason. Still, they try.
With programs getting more invasive I thought it would be appropriate to show you how to block their access to the net.
[Read more…] about Blocking A Programs Internet Access Via The Windows Firewall
Security
Wednesday Random Stuff…
Nvidia GeForce Game Ready Driver 416.94 WHQL
“Provides the optimal gaming experience for Battlefield V, Fallout 76, and Hitman 2”
Download | Release Notes
Ultimate Windows Tweaker 4.5 Released
I bookmarked this this morning. Unfortunately ATM the site seems to be having issues.
Download | Release Announcement
U.S. Secret Service Warns ID Thieves are Abusing USPS’s Mail Scanning Service
“A year ago, KrebsOnSecurity warned that “Informed Delivery,” a new offering from the U.S. Postal Service (USPS) that lets residents view scanned images of all incoming mail, was likely to be abused by identity thieves and other fraudsters unless the USPS beefed up security around the program and made it easier for people to opt out. This week, the U.S. Secret Service issued an internal alert warning that many of its field offices have reported crooks are indeed using Informed Delivery to commit various identity theft and credit card fraud schemes.”
Hacker Breaks Down 26 Hacking Scenes From Movies & TV | WIRED
Not quite hacker related but the one tech related Hollywood BS that sets me off is “can you enhance that” when talking about pics or video.
Ahhhhhhhhhhhhhhhhhhhhh! NO. NO you fracking can’t!
Patch Tuesday
Windows 7, 8.1, and 10 have updates.
Windows 7
November 13, 2018—KB4467106 (Security-only update)
November 13, 2018—KB4467107 (Monthly Rollup)
Windows 8.1
November 13, 2018—KB4467703 (Security-only update)
November 13, 2018—KB4467697 (Monthly Rollup)
Windows 10
Build 1809 –
November 13, 2018—KB4464455 (OS Build 17763.107)
November 13, 2018—KB4467708 (OS Build 17763.134)
Build 1803 – November 13, 2018—KB4467702 (OS Build 17134.407)
Build 1709 – November 13, 2018—KB4467686 (OS Build 16299.785)
Build 1703 – November 13, 2018—KB4467696 (OS Build 15063.1446)
Additionally Windows 8.1 & 10 have Flash updates.
Win10 “October” Update
Windows 10, version 1809 Re-Released
When you have it offered to you is anyone’s guess.
Media Creation Tool / ISOs available here: Download Windows 10 Disc Image (ISO File)
The Facebook Dilemma
This topic has been making the rounds for a couple of days. I wanted to watch the entire thing before I passed it along.
The Facebook Dilemma is two, 50+ minute videos of a PBS Frontline special. It is the story of the dangers of Facebook. The first video deals more about the dangers to individuals. The second is about the dangers Facebook presents to society and democracies around the world. It then circles back to the dangers to individuals.
You’ll learn not only about these topics but about the stunning greed, arrogance, tone deafness, and outright deceit on these issues from the highest levels of Facebook.
In the end the only solution is to #DeleteFacebook.
“The promise of Facebook was to create a more open and connected world. But from the company’s failure to protect millions of users’ data, to the proliferation of “fake news” and disinformation, mounting crises have raised the question: Is Facebook more harmful than helpful? On Monday, Oct. 29, and Tuesday, Oct. 30, 2018, FRONTLINE presents The Facebook Dilemma. This major, two-night event investigates a series of warnings to Facebook as the company grew from Mark Zuckerberg’s Harvard dorm room to a global empire. With dozens of original interviews and rare footage, The Facebook Dilemma examines the powerful social media platform’s impact on privacy and democracy in the U.S. and around the world.”
Patch Tuesday
Windows Update
Windows 7 and 8.1 get over a dozen security updates.
Windows 7 – October 9, 2018—KB4462923 (Monthly Rollup)
Windows 8.1 – October 9, 2018—KB4462926 (Monthly Rollup)
Windows 10, “This update includes quality improvements. No new operating system features are being introduced in this update.”
Win10 also has over a dozen security updates.
Win10 1809 – October 9, 2018—KB4464330 (OS Build 17763.55)
Win10 1803 – October 9, 2018—KB4462919 (OS Build 17134.345)
Win10 1709 – October 9, 2018—KB4462918 (OS Build 16299.726)
Win10 1703 – October 9, 2018—KB4462937 (OS Build 15063.1387)
Win10 1607 – September 11, 2018—KB4457131 (OS Build 14393.2485)
Cold Boot Attack
Security flaw in ‘nearly all’ modern PCs and Macs exposes encrypted data
“A firmware bug means existing security measures “aren’t enough to protect data in lost or stolen laptops,” says new security research”
(Thanks Dan!)
Everything you need to know to is in the excellent paper:
F-Secure’s Guide To Evil Maid Attacks
Geeks have always known that once someone has physical access to your PC (or Mac, or phone), given enough time, it will be compromised.
Conduct yourself accordingly, especially on mobile devices. Given that, IMHO it is all about putting hurdles in place to slow an attacker down and frustrate them.
Here is what I tell my friends when they ask about mobile tech device security:
– Use a BIOS/EFI password.
– Use an OS password.
– Use a password manager.
– Encrypt your important docs.
– Cover your webcam. I use these: Laptop Camera Cover Set
– Delete those compromising pics of yourself and/or your significant other (and stop taking them).
– Keep your system up to date. This means both the OS and the firmware.
– Backup, backup, backup
Patch Tuesday
Sorry I’m a day late with this, yesterday was a long day at work.
Windows Update
Windows 7 and 8.1 get a few security updates.
Windows 10, “This update includes quality improvements. No new operating system features are being introduced in this update.”
Win10 1803 – September 11, 2018—KB4457128 (OS Build 17134.285)
Win10 1709 – September 11, 2018—KB4457142 (OS Build 16299.665)
Win10 1703 – September 11, 2018—KB4457138 (OS Build 15063.1324)
Win10 1607 – September 11, 2018—KB4457131 (OS Build 14393.2485)
Google Chrome Updated
“The stable channel has been updated to 69.0.3497.92 for Windows, Mac, and Linux…This update includes 2 security fixes.”
Download | Download standalone(full) | Download standalone 64-bit Windows version(full)
Android too:
“Chrome 69 (69.0.3497.91) for Android has been released and will be available on Google Play over the course of the next few weeks. This release contains bug fixes and improvements.”
Download
Win10 Insider
Installed Win10 Insider Preview on my dual-boot Win7/Win10 machine. Here is what it did to my Win7 install:
Thursday Random Stuff…
Tor Browser and Tails Updated
Download Tor Browser
Download Tails
Paint.net 4.1
“This update converts some effects to use the GPU for rendering, resulting in huge performance gains. Copy/Paste can now be performed on selections, Bicubic resampling is now available for the Move Selected Pixels tool, and there are lots of little quality-of-life improvements and general bug fixes.”
Download
Stuff I bookmarked recently. Some off topic, some not:
Windows 10 support extended again: September releases now get 30 months
The headline is clickbait. Only Windows 10 Enterprise and Education versions will see this. IMHO this only reinforces the notion that home users are thought of as beta testers for businesses.
This Microsoft blog post explains it:
“All currently supported feature updates of Windows 10 Enterprise and Education editions (versions 1607, 1703, 1709, and 1803) will be supported for 30 months from their original release date…All feature releases of Windows 10 Home, Windows 10 Pro, and Office 365 ProPlus will continue to be supported for 18 months (this applies to feature updates targeting both March and September).”
Americans are changing their relationship with Facebook
“Just over half of Facebook users ages 18 and older (54%) say they have adjusted their privacy settings in the past 12 months, according to a new Pew Research Center survey. Around four-in-ten (42%) say they have taken a break from checking the platform for a period of several weeks or more, while around a quarter (26%) say they have deleted the Facebook app from their cellphone. All told, some 74% of Facebook users say they have taken at least one of these three actions in the past year.”
Senate Committee Vents About Hijacking Of Big Tech For Information War
“The leaders of the Senate intelligence committee vented Wednesday morning about what they called the shortcomings of major tech firms, which they argue have led Americans to become vulnerable to foreign disinformation campaigns.
“What is under attack is the idea that business as usual is good enough. The information your platforms disseminate changes minds, hardens opinions, helps people make sense of the world. … That’s how serious this is,” said Chairman Richard Burr, R-N.C.”
Twitter and Facebook CEO’s showed up. Google thinks they are to good to answer when called.
17 countries where teachers can earn the highest starting salary
“While the US is, according to World Bank data, the nation that pays high school teachers the sixth highest, according to the Learning Police Institute they’re actually paying teachers less and less — to the point where the country is experiencing a teacher shortage.
Data gathered from the National Center for Education Statistics actually suggests many states in the US have seen an average of a 4.6% salary reduction since the 2009-10 school year, which could be part of the reason the country is having to outsource teachers from overseas.”
The U.S. is ranked #6, ironically just above Mexico?!
Airport security trays carry more germs than toilets, study reveals
Just another reason I’ve no desire to fly.
There Are Whales Alive Today Who Were Born Before Moby Dick Was Written
“Bowheads seem to be recovering from the harvest of Yankee commercial whaling from 1848 to 1915, which wiped out all but 1,000 or so animals. Because the creatures can live longer than 200 years — a fact George discovered when he found an old stone harpoon point in a whale — some of the bowheads alive today may have themselves dodged the barbed steel points of the Yankee whalers.”
Man erects electrified fence to keep bus stop kids off his lawn
“The man — whose name is Bryan — said he was sick of students who cursed, fought, and littered at the bus stop.
“They don’t respect other peoples’ land,” Bryan said. “I pick up trash every day.”
Parents are ticked off. Perhaps they could teach their children to respect others property?
Applebees $2 Samuel Adams OctoberFest For All Of September
That’ll go nice with a Bourbon Street Steak!
Sources: Fox Sports Detroit’s Mario Impemba and Rod Allen involved in physical altercation
I haven’t watched many games this year because the Tigers suck. Not a surprise these 2 don’t like each other and the result shows in the booth. The broadcasting is sub-par. The only bright spot is the former Tiger great Kirk Gibson who is in the booth sparingly as he has Parkinson’s disease.
Burt Reynolds, Screen Legend and Sex Symbol, Dies at 82
One of my favorite actors. RIP brother.
Burt Reynolds Wikipedia
Burt Reynolds IMDB
Fox Makes Keys To Henhouse
Google’s new hardware security key was made by a Chinese company
I’m at a loss for words.
Wednesday Random Stuff…
Virtual Machine Host Software Updated
VMware Workstation Player 14.1.3 – 1 bugfix, OpenSSL update, Sprectre/Meltdown patch
VirtualBox 5.2.18 – a few bugfixes
Speaking of VMs. Many of you know I do most of my day-to-day web activity in a Linux VM. In the past I’ve used openSUSE. I have switched to Linux Mint 19 “Tara” Cinnamon. About the only thing I had to add after standard install was Chromium, Tor Browser, and HPLIP (HP printer drivers).
Foreshadow
Great. Just fracking great. Another Spectre type CPU vulnerability.
“Foreshadow is a speculative execution attack on Intel processors which allows an attacker to steal sensitive information stored inside personal computers or third party clouds. Foreshadow has two versions, the original attack designed to extract data from SGX enclaves and a Next-Generation version which affects Virtual Machines (VMs), hypervisors (VMM), operating system (OS) kernel memory, and System Management Mode (SMM) memory.”
Wired has a good breakdown.
The Guardian – How to turn off Google’s location tracking
After Monday’s news, I was gonna write up something on this and saw this article. It is well done.
Stuff I bookmarked recently. Some off topic, some not:
Ajit Pai grilled by lawmakers on why FCC spread “myth” of DDoS attack
“An FCC Inspector General (IG) investigation found that the FCC lied to members of Congress multiple times in letters that answered questions about DDoS attacks that never happened. Pai’s FCC claimed for more than a year that a May 2017 outage in the public comments system was caused by multiple DDoS attacks. In reality, the FCC system crashed because it was unable to handle an influx of comments triggered by comedian John Oliver asking viewers of his program Last Week Tonight to oppose Pai’s net neutrality repeal.”
Mystery Russian satellite’s behaviour raises alarm in US
“Russian intentions with respect to this satellite are unclear and are obviously a very troubling development,” she added, citing recent comments made by the commander of Russia’s Space Forces, who said adopting “new prototypes of weapons” was a key objective for the force.”
Sacramento welfare investigators track drivers to find fraud. Privacy group raises red flags.
“The EFF has a more skeptical view of the data-collection practice and said it’s “disturbing” that millions of people who are not suspected of a crime can be tracked with license plate photos.”
Suns Out, Guns Out
Remember our hero JJ Watt? Dude is ripped. I’m sure he will be destroying people. Don’t know how much NFL I will be watching this year but that is a topic for another day.
The Internet Reacts To JJ Watt’s Freakishly Large Arms In Latest Instagram Post
