Breaking NEWS (affecting all of us)

[MrSwiss]

Is it a Chinese, Government sponsored Attack, on the rest of the World?
Read the Article: The Big Hack
published: 2018-10-04, by Bloomberg Buisnessweek

[MrSwiss]

Tim Berners-Lee, Director of the World Wide Web Consortium (W3C).
On: the Internet, for everyone, titled: One Small Step for the Web …
published: 2018-09-29, on Medium

[dodicat]

Strangely enough I get a popup from one small step:
Medium uses browser cookies to give you the best possible experience. To make Medium work, we log user data and share it with processors. To use Medium, you must agree to our Privacy Policy, including cookie policy.
(To which I should agree?)
Which I didn't of course, so, back to square one.

[MrSwiss]

Strangely enough I get a popup ...

There is a simple remedy, to related problems:
Install: NoScript *browser plugin* (I'm using FireFox).
Thereafter, the script starting the popup is simply *not allowed* to run.
Problem solved. (default setting in NoScript)

[owen]

Just reading through the first post (only half through the read) i thought to mention a memory from the 80's.
I was a specom tech for the navy. At that time (mid 80's) there was a national security breech by an officer who sold crypto keys to bad guys.
He and is son were imprisoned for espionage. We (the crypto people of the navy) and i spose military wide) were all retrained on the TPC (two person control) concept which was supposed to be the effective approach to prevent compromise. It was kinda genius. I mean, i mean im a thousand feet below walking around on a submarine holding hands... little did that know it didnt matter cuz there was already a compromise in the crypto hardware.
i remember surfacing one time and throwing a computer over board. it wouldnt sink. so we shot at it till it did.

[MrSwiss]

Nowadays Threat tests

Read the summary online: Fake Company. Real Threats
Download Article (as PDF): Fake Company. Real Threats
Published: 2020-01-21, by Trend Micro (research)

[badidea]

We had VNC open and allowed no password for remote control. In the information security sector, this has long been known as a very risky configuration. Exposing any port to the internet indeed increases the risk of compromise.

That is like leaving your front door open for a few months with some interesting things in sight. That will attract a few visitors.
Hopefully a neighbour (with good intentions) will be the first one to check what is going on.

For those (like me) who don't want to read to full article, the time-line graph in the PDF is a nice summary of events.

I am waiting for the University of Maastricht (NL) to release the ‘Lessons learnt’ from the cyberattack end of 2019 (https://www.maastrichtuniversity.nl/updates-cyberattack).

[MrSwiss]

TCP replacement QUIC (RFC 9000 standard)

Written by: Jana Iyengar (fastly.com)
Title: QUIC is now RFC 9000 (IETF)
Associated other new RFC's 8999 - 9002 are LINKED in above document.