Podcast: Download

NIST has finally proposed some sensible password standards, why server CPUs with high core counts make sense in a lot of deployments, the .io TLD is probably sticking around, and the best options for a Linux-based router.

 

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

Klara Halloween Webinar: ZFS Horror Stories. Oct 31st 13:00 EDT, 17:00 UTC

ZBM 101: Introduction to ZFSBootMenu

 

News

NIST proposes barring some of the most nonsensical password rules

You’re right not to rush into running AMD, Intel’s new manycore monster CPUs

The Disappearance of an Internet Domain

 

Free consulting

We were asked about setting up a Linux-based router.

OpenWrt on TP-Link devices

 

 

 

 

 

 

 

Podcast: Download

Why cold storage is never as good as keeping your data warm and regularly tested, how the American air traffic control system became so outdated, and isolating your devices from a roommate’s shenanigans.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Music industry’s 1990s hard drives, like all HDDs, are dying 

FAA air traffic control modernization efforts are a mess

 

Free consulting

We were asked about isolating your devices from a roommate’s shenanigans.

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

 

 

 

Podcast: Download

A proposed solution to the WHOIS TLS verification problem gets a surprising amount of pushback. Plus isolating IoT devices, our thoughts on Ubiquiti gear, setting up WiFi in a new house, remote access with WireGuard, and our mini PC recommendations.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

Google calls for halting use of WHOIS for TLS domain verifications

 

Free consulting

We were asked about isolating IoT devices, our thoughts on Ubiquiti gear, setting up WiFi in a new house, remote access with WireGuard, and our mini PC recommendations.

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

 

 

 

Podcast: Download

The Malaysian government’s misguided plan to control its citizens’ DNS, the wrong way to deploy underwater servers, a philosophical question about how long a person’s photos will exist, and how we manage our SSH keys.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Malaysia’s plan to block overseas DNS dies after a day 

Proposed underwater data center surprises regulators who hadn’t heard about it

 

Free consulting

We were asked about how we manage our SSH keys.

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

 

 

 

Podcast: Download

A surprising way to exploit the WHOIS system, Microsoft will force old versions of Windows 11 to update, and the simple way to set up TP-Link Omada gear.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

Rogue WHOIS server gives researcher superpowers no one should ever have

Windows 11 users still living in the past face forced update, like it or not

 

Free consulting

We were asked about setting up TP-Link Omada gear.

 

 

 

 

 

 

 

Podcast: Download

Another example of the downsides of abstraction, whether AI can ever be truly “open source”, and the security benefits and drawbacks of different types of VPN.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Hackers infect ISPs with malware that steals customers’ credentials

Debate over “open source AI” term brings new push to formalize definition

 

Free consulting

We were asked about whether VPNs are a security measure.

 

 

 

 

 

 

 

Podcast: Download

AMD will patch some old Ryzens against SinkClose now, but their benchmarking methods for newer CPUs didn’t live up to everyday reality. Plus Bcachefs devs annoy Linus Torvalds, the US government sues a college over compliance issues, and Jim disappoints a patron.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

AMD’s Ryzen 3000 CPUs to get SinkClose patch after all

AMD explains, promises partial fixes for Ryzen 9000 performance problems

Linus Torvalds Begins Expressing Regrets Merging Bcachefs

After cybersecurity lab wouldn’t use AV software, US accuses Georgia Tech of fraud

 

Free consulting

We were asked about monitoring your network for new device connections.

 

 

 

 

 

 

 

 

 

Podcast: Download

Insecure SSH implementations and a weak key that let a researcher control 200 MW of electrical capacity reignites the debate about versioned protocols vs pluggable protocols, follow-up on sharing files from your LAN with people on the Internet, and the pros and cons of encrypted backups.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Researchers find insecure SSH implementations everywhere

512-bit RSA key in home energy system gives control of “virtual power plant”

 

Feedback

Syncthing

Resilio

Send

OnionShare

Warp

Immich

 

Free consulting

We were asked about the pros and cons of encrypted backups.

 

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

 

 

 

Podcast: Download

Forcing Windows to undo updates and a separate IPv6 vulnerability, hardware bugs in AMD and Intel CPUs, and using Samba on Linux with Active Directory.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

Your victim’s Windows PC fully patched? Just force undo its updates and exploit away

CVE-2024-38063 – Security Update Guide – Microsoft – Windows TCP/IP Remote Code Execution Vulnerability

Almost unfixable “Sinkclose” bug affects hundreds of millions of AMD chips

SMM LOCK BYPASS

Intel’s crashing 13th and 14th Gen Raptor Lake CPUs: all the news and updates

 

Free Consulting

We were asked about using Samba on Linux with Active Directory.

 

map acl inherit = yes
acl_xattr:ignore system acls = yes
acl_xattr:default acl style = windows

Setting up a Share Using Windows ACLs

 

 

 

 

 

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

 

 

 

 

 

Podcast: Download

Secure boot is compromised on hundreds of devices, Amazon’s desperate attempt to make money from Alexa, and how to decide which open source software on GitHub to trust.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Secure Boot is completely broken on 200+ models from 5 big device makers

old and related

Amazon’s paid Alexa is coming to fill a $25 billion hole dug by Echo devices

Alexa had “no profit timeline,” cost Amazon $25 billion in 4 years

 

Free consulting

We were asked about how to decide which open source software on GitHub to trust.

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a