2.5 Admins 175: Guess Who’s Listening

Twitch pulls out of Korea thanks to the opposite of Net Neutrality, it’s not clear to what extent smart devices are listening to your conversations, more on water usage in data centers, and our thoughts on mandatory access controls.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

Twitch to shut down in Korea over ‘prohibitively expensive’ network fees

Marketer sparks panic with claims it uses smart devices to eavesdrop on people

 

Free Consulting

We were asked for our thoughts on mandatory access controls.

 

 

 

 

Kolide

Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today to see how it works at kolide.com/25a

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 174: Guess Who’s Watching

What you need to know about the recent SSH vulnerability, yet another privacy issue with cloud-connected security cameras, why it’s difficult to get to the bottom of an obscure ZFS encryption bug, and more.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

SSH protects the world’s most sensitive networks. It just got a lot weaker

UniFi devices broadcasted private video to other users’ accounts

 

Free Consulting

We were asked about the state of ZFS encryption, and Syncoid snapshots.

 

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 173: Ghost Files

Google Drive client users lost months of files, a feature of UEFI that has left millions of computers potentially vulnerable to persistent malware, and why you probably shouldn’t buy cheap resold volume Windows licenses.

 

Plugs

Support us on patreon to get ad-free episodes that are sometimes a day or so early.

 

News/discussion

Google Drive users say Google lost their files; Google is investigating

How to restore files in Drive for desktop (v84.0.0.0-84.0.4.0)

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

 

Free Consulting

We were asked about using cheap resold volume Windows licenses.

 

 

 

 

 

Kolide

Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today to see how it works at kolide.com/25a

 

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 172: HOLEy ZFS

Jim and Allan break down the details of the recent ZFS data corruption bug, and give their tips for managing a fleet of 40+ servers.

 

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

Two new versions of OpenZFS fix long-hidden corruption bug

 

Free Consulting

We were asked about managing 40+ servers.

 

 

 

 

Automox

Save time, eliminate risk, and automate the patching, configuration, and control of all your Windows, macOS, and Linux endpoints with Automox.

 

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 171: RSA PSA

Why a small island nation’s top level domain ended up with such a terrible reputation, an ssh vulnerability that’s not as scary as it sounds, whether software can be “finished”, and using powerline or WiFi for security cameras.

 

 

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

How a tiny Pacific Island became the global capital of cybercrime

Passive SSH server private key compromise is real … for some vulnerable gear

 

Feedback

The beauty of finished software

 

 

 

Free Consulting

We were asked about using powerline or WiFi for security cameras.

 

 

 

 

 

 

Kolide

Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today to see how it works at kolide.com/25a

 

The Traceroute Podcast

Check out the new season of the Traceroute Podcast on Apple, Spotify, or wherever you get your podcasts.  Visit the website.

 

 

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 170: Uninterruptible WiFi

Why and how Allan installed a set of new Power over Ethernet wireless access points, and our hardware recommendations for a media server and NAS in one.

 

Allan’s new WiFi setup

Access points

Controller

 

 

Free Consulting

We were asked for hardware recommendations for a media server and NAS in one.

 

 

 

 

 

 

HelloFresh

With HelloFresh, you get farm-fresh, pre-portioned ingredients and seasonal recipes delivered right to your doorstep. Get free breakfast for life at hellofresh.com/25adminsfree with code 25adminsfree. (One breakfast item per box while subscription is active).

 

Kolide

Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today to see how it works at kolide.com/25a

 

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 169: SDCoF

A Cloudflare outage shines a light on sloppy data center practices, and why you shouldn’t run a mail server at home. Plus followup on the Android multi-user bug, package managers on Windows, and Toshiba hard drives.

 

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News/discussion

Cloudflare claims Flexential data center outage was behind service disruption – DCD

Post Mortem on Cloudflare Control Plane and Analytics Outage

Android 14’s storage disaster gets patched, but your data might be gone

 

Feedback

winget

Toshiba Consumer Internal Hard Disk Drives

 

Free Consulting

We were asked about running a mail server at home.

“Run Your Own Mail Server” chapter 0

 

 

 

 

 

 

HelloFresh

With HelloFresh, you get farm-fresh, pre-portioned ingredients and seasonal recipes delivered right to your doorstep. Get free breakfast for life at hellofresh.com/25adminsfree with code 25adminsfree. (One breakfast item per box while subscription is active).

 

Kolide

Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today to see how it works at kolide.com/25a

 

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 168: Do The Right Thing

Okta seems to not be taking its security seriously enough, crashing iPhones is far easier than it should be, Jim’s report from the Ubuntu Summit, and what to do when you find a company’s sensitive data on the Internet.

 

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

 

News

No, Okta, senior management, not an errant employee, caused you to get hacked

Okta October breach affected 134 orgs, biz admits

Okta hit by another breach, this one stealing employee data from 3rd-party vendor

This tiny device is sending updated iPhones into a never-ending DoS loop

Jim went to the Ubuntu Summit

 

Free Consulting

We were asked about what to do when you find a company’s sensitive data on the Internet.

 

 

 

 

The Traceroute Podcast

Check out the new season of the Traceroute Podcast on Apple, Spotify, or wherever you get your podcasts.  Visit the website.

 

Automox

Save time, eliminate risk, and automate the patching, configuration, and control of all your Windows, macOS, and Linux endpoints with Automox.

 

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 167: Delayed Flush

The large water consumption of AI and data centers in general, China’s big push towards IPv6, why we don’t talk about Toshiba hard drives very often, and the implications of poor Bluetooth security on an e-bike.

 

Plugs

Support us on patreon

Unlocking Infrastructure Sovereignty: Harnessing the Power of Open Source Solutions for Business Flexibility and Cost-Effectiveness

 

News/discussion

The Secret Water Footprint of AI Technology

China requires all new Wi-Fi kit to run IPv6

 

Free Consulting

We were asked about the implications of poor Bluetooth security on an e-bike.

Monitor Traffic With Wireless Travel Time Sensors

DeepBlue Sensor

Bluetooth Pedestrian and Vehicle Tracking

 

 

 

 

The Traceroute Podcast

Check out the new season of the Traceroute Podcast on Apple, Spotify, or wherever you get your podcasts.  Visit the website.

 

Kolide

Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today to see how it works at kolide.com/25a

 

 

 

 

See our contact page for ways to get in touch.

 

2.5 Admins 166: 20 Second Cheque

What Google should do to prevent malware sites in their ads, why you might want to avoid using multiple profiles on Android devices, a speculative execution vulnerability in Apple Silicon, and the pros and cons of TP-Link Omada and Ubiquiti Unifi.

 

Plugs

Support us on patreon

 

News

Clever malvertising attack uses Punycode to look like KeePass’s official website

pixel 6 can’t access storage with multiple profiles after updating to android 14

Hackers can force iOS and macOS browsers to divulge passwords and much more

 

Free Consulting

We were asked about the pros and cons of TP-Link Omada and Ubiquiti Unifi.

 

 

 

 

 

See our contact page for ways to get in touch.