Posts


Mar. 24, 2018

Deep dive on the most severe Kubernetes vulnerabilities to date – CVE-2017-1002101 and CVE-2017

Deep dive on the most severe Kubernetes vulnerabilities to date – CVE-2017-1002101 and CVE-2017

Two vulnerabilities were reported and fixed in Kubernetes two weeks ago. The GitHub issues discussing the vulnerabilities and fixes were vague, so in this post I will review the bugs in additional detail and suggest remediation methods.

Source: twistlock.com

Mar. 24, 2018

Tracking ransomware end-to-end

Tracking ransomware end-to-end

You get two for the price of one with today’s paper! Firstly, it’s a fascinating insight into the ransomware business and how it operates, with data gathered over a period of two years. Secondly, since ransomware largely transacts using Bitcoin, the methods used by the research team to uncover and trace ransomware activity are also of interest in their own right.

Source: acolyer.org

Mar. 23, 2018

South Korea Planning to Formally Allow ICOs

South Korea Planning to Formally Allow ICOs

Regional news sources report South Korea’s financial authorities are working on legislation to formally allow initial coin offerings (ICOs) in an effort to appear more welcoming to the larger financial technology community.

Source: bitcoin.com

Mar. 23, 2018

France to create legal framework for ICOs

France to create legal framework for ICOs

France plans to create a legal framework for raising funds via cryptocurrencies and aims to become a leading center for offerings in bitcoin-style digital currencies, its finance minister wrote on a news website.

Source: reuters.com

Mar. 23, 2018

Behavioral Crypto-Economics: The challenge and promise of blockchain incentive design

Behavioral Crypto-Economics: The challenge and promise of blockchain incentive design

In 2009, Satoshi Nakamoto designed Bitcoin to align the incentives of computers. In 2018, we are building multi-billion dollar blockchain projects, incentivizing humans using the same principles. We are assuming the efficient market hypothesis and the wisdom of the crowds.

But what happens when the crowds are not thatwise?

Source: medium.com

Mar. 23, 2018

Responsibility Deflected, the CLOUD Act Passes

Responsibility Deflected, the CLOUD Act Passes

Because of this failure, U.S. and foreign police will have new mechanisms to seize data across the globe. Because of this failure, your private emails, your online chats, your Facebook, Google, Flickr photos, your Snapchat videos, your private lives online, your moments shared digitally between only those you trust, will be open to foreign law enforcement without a warrant and with few restrictions on using and sharing your information. Because of this failure, U.S. laws will be bypassed on U.S. soil.

Mar. 23, 2018

Atlanta city government systems down due to ransomware attack

Atlanta city government systems down due to ransomware attack

According to a report from Atlanta NBC affiliate WXIA, a city employee sent the station a screen shot of a ransomware message demanding a payment of $6,800 to unlock each computer or $51,000 to provide all the keys for affected systems. Employees received emails from the city’s information technology department instructing them to unplug their computers if they noticed anything suspicious. An internal email shared with WXIA said that the internal systems affected include the city’s payroll application.

Mar. 23, 2018

Pablo Escobar’s Brother Says He Met an FBI Agent Posing As Satoshi Nakamoto

Pablo Escobar’s Brother Says He Met an FBI Agent Posing As Satoshi Nakamoto

In it, Roberto claims that he had a close encounter with a US government agent posing as the pseudonymous creator of Bitcoin, Satoshi Nakamoto. This encounter led Roberto to conclude that the US government created Bitcoin and will one day crash the market by selling all of Nakamoto’s stashed bitcoins.

Source: vice.com

Mar. 23, 2018

Survey: Americans Spent $1.4B on Credit Freeze Fees in Wake of Equifax Breach

Survey: Americans Spent $1.4B on Credit Freeze Fees in Wake of Equifax Breach

Almost 20 percent of Americans froze their credit file with one or more of the big three credit bureaus in the wake of last year’s data breach at Equifax, costing consumers an estimated $1.4 billion, according to a new study. The findings come as lawmakers in Congress are debating legislation that would make credit freezes free in every state.

Mar. 22, 2018

Ransomware Takes Open-Source Path, Encrypts With GNU Privacy Guard

Ransomware Takes Open-Source Path, Encrypts With GNU Privacy Guard

McAfee Labs has recently observed a new variant of ransomware that relies on the open-source program GNU Privacy Guard (GnuPG) to encrypt data. GnuPG is a hybrid-encryption software program that uses a combination of conventional symmetric-key cryptography for speed and public-key cryptography to ease the secure key exchange. Although ransomware using GnuPG to encrypt files is not unique, it is uncommon.

Mar. 22, 2018

There’s a New Cold War Brewing in Space

There’s a New Cold War Brewing in Space

Much of the push to formalize an off-planetbranch of the U.S. armed forces is motivated by space investment by Russia and China, the latter of which is eager to establish itself as a superpower with plans for an orbiting space station and a permanent outpost on the moon. Meanwhile, Russiaunder President Vladimir Putinhas become increasingly aggressive, annexing Crimea, deploying more sophisticated nuclear weapons and waging conventional warfarein eastern Ukraine and Syria. But he, too, has aspirations, albeit troubled ones, up above.

Mar. 22, 2018

Best Buy will stop selling Huawei smartphones

Best Buy will stop selling Huawei smartphones

Huawei was widely expected to announce a partnership with AT&T in January at CES to carry the Mate 10 Pro smartphone, but the carrier reportedly backed out because of political pressure. A few days later, Verizon reportedly nixed its own plans to sell Huawei phones. Instead, Richard Yu, CEO of the company’s consumer business, spent his time talking about the phones, which were already in the market elsewhere, as well as touting the Porsche Design variant of the smartphone.

Mar. 22, 2018

Non-Lethal Weapon: DOD seeks to use lasers to create shouting will-o-the-wisp

Non-Lethal Weapon: DOD seeks to use lasers to create shouting will-o-the-wisp

The Non-Lethal Laser-Induced Plasma Effect (NL-LIPE) system can be used to manipulate air molecules, creating a ball of plasma that oscillates to create sound waves with a stream of femtosecond-long laser bursts. A first laser creates the plasma ball, and a second then oscillates the plasma ball to create the sound. As Defense One’s Patrick Tucker reports, the current Laser-Induced Plasma Effect implementation can only manage an indistinguishable mumble—though it can create a wide variety of very distinguishable sounds, as demonstrated in the video below.

Mar. 22, 2018

Best bad idea ever? Why Putin’s nuclear-powered missile is possible… and awful

Best bad idea ever? Why Putin’s nuclear-powered missile is possible… and awful

Russia’s advanced arms are based onthecutting-edge, unique achievements ofour scientists, designers, andengineers. One ofthem is asmall-scale, heavy-duty nuclear energy unit that can be installed inamissile like our latest X-101 air-launched missile ortheAmerican Tomahawk missile—asimilar type but with arange dozens oftimes longer, dozens—basically anunlimited range. It is alow-flying stealth missile carrying anuclear warhead, with almost anunlimited range, unpredictable trajectory andability tobypass interception boundaries.

Mar. 22, 2018

Google is working on their own Blockchain

Google is working on their own Blockchain

By using the blockchain as a layer over its cloud infrastructure for providing data integrity and protection, Google would seek to gain an advantage over its cloud competitors such as AWS, Azure etc and eliminate the risks that appear by being one of the largest data centers in the world.

Source: blockmanity.com

Mar. 22, 2018

What is a DAPP?

What is a DAPP?

A DAPP (Decentralized Application) consists of back-end code that runs on a decentralized peer-to-peer network. A DAPP can also have a user interface, created by front end code that makes calls to the back end. DAPPs do not require a central authority to function: they allow for direct interaction between users and providers.

Source: towardsdatascience.com

Mar. 22, 2018

Multiversum: This is What a 4th-Generation Blockchain Looks Like

Multiversum: This is What a 4th-Generation Blockchain Looks Like

The 4th generation of blockchain is at our doorsteps and it promises to bring us closer to mass adoption than ever before. But before we delve into that, let’s quickly look at the 3 evolutionary phases blockchain technology has gone through since 2008.

Source: medium.com

Mar. 22, 2018

SXSW 2018: 10 Crypto & Blockchain Takeaways

SXSW 2018: 10 Crypto & Blockchain Takeaways

As you may know, SXSW is a conference and festival that celebrates the convergence of the interactive, film, and the music industry. This year SXSW took place March 9th through 18th and attracted 300,000 people to Austin, TX. And, let me tell you, a big chunk of them were blockchain enthusiasts.

Source: hackernoon.com

Mar. 21, 2018

YouTube’s fake views economy

YouTube’s fake views economy

Views are the currency of YouTube. More views often translates into a higher ranking in user search results, or better circulation numbers in the sidebar, both of which affect the amount of money YouTubers make via ad impressions. What’s more, they’re the measure by which the outside world assigns worth, a credential that makes them more visible to vulnerable populations with malleable views.

A high view count carries with it an air of legitimacy — approval from both YouTube and its users alike. It’s what users are supposed to strive for.

Mar. 21, 2018

FBI raids home of spy sat techie over leak of secret comms source code on Facebook

FBI raids home of spy sat techie over leak of secret comms source code on Facebook

On Monday, the Feds confirmed to The Register they have executed a search warrant at the Virginia home of John Glenn Weed, who worked for the National Reconnaissance Office – which runs Uncle Sam’s spy satellite fleet. The NRO called in the g-men after a screenshot of its classified source code was posted in 2017 on a Facebook profile belonging to one William Amos.