Podcast: Download

Secure boot is compromised on hundreds of devices, Amazon’s desperate attempt to make money from Alexa, and how to decide which open source software on GitHub to trust.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Secure Boot is completely broken on 200+ models from 5 big device makers

old and related

Amazon’s paid Alexa is coming to fill a $25 billion hole dug by Echo devices

Alexa had “no profit timeline,” cost Amazon $25 billion in 4 years

 

Free consulting

We were asked about how to decide which open source software on GitHub to trust.

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

 

 

 

Podcast: Download

How and why the recent huge Windows outage was caused by a bad CrowdStrike update and how it could have been avoided, a hilariously dumb ESXi vulnerability, and using SAS drives with a PCIe card.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

A closer look at what caused the CrowdStrike Windows crashes

Ransomware gangs are loving this dumb but deadly ESXi flaw

Jake Williams on Twitter

 

Free Consulting

We were asked about using SAS drives with a PCIe card.

 

 

 

 

 

 

 

 

 

Podcast: Download

How a Bitcoin mine made life in a Texas town absolutely miserable, why paying for extended support for end of life Windows versions is just doubling down on technical debt, and the best way to manage router redundancy.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Inside the ‘Nightmare’ Health Crisis of a Texas Bitcoin Town

Enterprises urged to think carefully about Windows 10 extended support options

 

Free Consulting

We were asked about managing router redundancy.

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

 

 

 

Podcast: Download

A widely-used login system is still using MD5 which is bad news, miscreants took over some domains when they moved from Google to Squarespace, Linksys’ sloppy app isn’t a huge problem but is a bad sign, and why backing up an Android phone in one go is pretty much impossible without root.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

New Blast-RADIUS attack breaks 30-year-old protocol used in networks everywhere

Squarespace migration linked to DNS hijacking, claims report

Linksys Velop routers send Wi-Fi passwords in plaintext to US servers

 

Free Consulting

We were asked about backing up Android phones.

 

 

 

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

 

 

 

 

 

Podcast: Download

We didn’t get to all of your questions for our Episode 200 free consulting special so here is another full episode of your questions and our answers. Our thoughts on a new UK smart devices law, backing up 30TB off-site, how to learn ZFS, SMB vs other ways to share files, and backing up secrets.

 

Smart devices: new law helps citizens to choose secure products

FreeBSD Mastery: ZFS

FreeBSD Mastery: Advanced ZFS

 

 

 

 

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

 

 

Podcast: Download

Why we didn’t mention pocket fluff when we talked about USB-C charging issues, Microsoft abandons its promising underwater data center experiment and didn’t monitor it’s SSL certs, why you should be careful which WordPress plugins and themes you install,an Australian ISP’s tech debt comes due, and remoting into desktop Linux.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

 

News

Microsoft ends Project Natick underwater data center experiment despite success

Microsoft declares its underwater data center test was a success

Shouting in the Datacenter

Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack

Coding error in forgotten API blamed for massive data breach

Microsoft hits snooze again on security certificate renewal

 

 

Podcast: Download

Vulnerabilities in Asus hardware make us think there should be some regulations about what can be sold as a router, a VPN feature that we hadn’t heard of is removed from Windows, and why we don’t believe that Microsoft will ever take security as seriously as they claim.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

High-severity vulnerabilities affect a wide range of Asus router models

Dear Asus router user: You’ve been pwned, thanks to easily exploited flaw

Microsoft to remove DirectAccess from Windows, recommends switching to Always On VPN

Microsoft fixes hack-me-via-Wi-Fi Windows security hole

CVE-2024-30078

Microsoft in damage-control mode, says it will prioritize security over AI

Pluralistic: Microsoft pinky swears that THIS TIME they’ll make security a priority

 

 

 

 

 

 

Tailscale

Tailscale is an easy to deploy, zero-config, no-fuss VPN that allows you to build simple networks across complex infrastructure. Go to tailscale.com/25a and try Tailscale out for free for up to 100 devices and 3 users, with no credit card required.

 

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

 

 

 

 

 

Podcast: Download

It’s our episode 200 free consulting special. Jim and Allan answer your questions about hard drive availability, USB-C robustness, ZFS performance on a VPS, cold storage with a 2.5″ form factor, how we gained our level of knowledge, disk enclosure issues, and monitoring Windows servers.

 

 

 

 

 

 

Tailscale

Tailscale is an easy to deploy, zero-config, no-fuss VPN that allows you to build simple networks across complex infrastructure. Go to tailscale.com/25a and try Tailscale out for free for up to 100 devices and 3 users, with no credit card required.

 

1Password

Extended Access Management: Secure every sign-in for every app on every device. Support the show and check it out at 1password.com/25a

 

 

 

 

 

Podcast: Download

How to prepare for your loved ones to have the access they need if the worst unexpectedly happens, Joe’s weird issues with wireless access points, and dealing with email accounts that shouldn’t exist.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

After you die, your Steam games will be stuck in legal limbo

EAP225 AC1350 wireless access point

 

Podcast: Download

Microsoft is tightening up SMB security in Windows which might break access to your old NAS, a Cogent root-server mysteriously goes out of sync without them spotting it, and protecting hard drives from electromagnetic pulses.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

Installing Windows 11 24H2 might mean binning that old NAS

A root-server at the Internet’s core lost touch with its peers. We still don’t know why