Technical

DavidR · 2016-07-10T13:29:14.000Z

Asyn post:1480:

Exploring and exploiting Lenovo firmware secrets
http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

Lenovo having a real hard time with one thing or another, the last two spyware incidents took Lenovo of my system replacement list. Looks like more work required to get their house in order before people are going to trust their system with their own data.

Pondus · 2016-07-11T09:07:52.000Z

Want to build your own computer ;D

Man Builds Giant 16-Bit ‘Megaprocessor’ in His Living Room
http://www.popularmechanics.com/technology/design/a21670/man-builds-giant-16-bit-megaprocessor/
http://www.bbc.com/news/technology-36711989

Asyn · 2016-07-11T09:22:28.000Z

DavidR post:1481:

Asyn post:1480:

Exploring and exploiting Lenovo firmware secrets
http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

Lenovo having a real hard time with one thing or another, the last two spyware incidents took Lenovo of my system replacement list. Looks like more work required to get their house in order before people are going to trust their system with their own data.

Agreed Dave, I also wouldn’t recommend Lenovo, atm.

Asyn · 2016-07-11T10:01:36.000Z

DroidJack Uses Side-Load…It’s Super Effective! Backdoored Pokemon GO Android App Found
https://www.proofpoint.com/us/threat-insight/post/droidjack-uses-side-load-backdoored-pokemon-go-android-app

bob3160 · 2016-07-11T12:12:24.000Z

Asyn post:1483:

DavidR post:1481:

Asyn post:1480:

Exploring and exploiting Lenovo firmware secrets
http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

Lenovo having a real hard time with one thing or another, the last two spyware incidents took Lenovo of my system replacement list. Looks like more work required to get their house in order before people are going to trust their system with their own data.

Agreed Dave, I also wouldn’t recommend Lenovo, atm.

Im certainly not planning to throw mine away…

Pondus · 2016-07-11T12:18:37.000Z

bob3160 post:1485:

Asyn post:1483:

DavidR post:1481:

Asyn post:1480:

Exploring and exploiting Lenovo firmware secrets
http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

Lenovo having a real hard time with one thing or another, the last two spyware incidents took Lenovo of my system replacement list. Looks like more work required to get their house in order before people are going to trust their system with their own data.

Agreed Dave, I also wouldn’t recommend Lenovo, atm.

Im certainly not planning to throw mine away…

Same here, my lenovo yoga 500 work like a dream

Asyn · 2016-07-11T12:23:22.000Z

Come on guys, nobody said to throw it away. :
Still, you should monitor your systems carefully, imo.

Asyn · 2016-07-12T05:29:14.000Z

Tools deliver false promises to YouTubers and Gamers
https://blog.avast.com/tools-deliver-false-promises-to-youtubers

Asyn · 2016-07-12T11:13:35.000Z

Experimenting with Post-Quantum Cryptography
https://security.googleblog.com/2016/07/experimenting-with-post-quantum.html

Asyn · 2016-07-13T08:58:21.000Z

When Paying Out Doesn’t Pay Off
http://blog.talosintel.com/2016/07/ranscam.html

DavidR · 2016-07-13T13:03:03.000Z

Asyn post:1490:

When Paying Out Doesn’t Pay Off
http://blog.talosintel.com/2016/07/ranscam.html

I have always been of the opinion that payment is no guarantee that the crooks will honour any promise to decrypt/restore files when you pay.

As mentioned a robust backup and recovery strategy is required.

bob3160 · 2016-07-13T22:00:47.000Z

DavidR post:1491:

Asyn post:1490:

When Paying Out Doesn’t Pay Off
http://blog.talosintel.com/2016/07/ranscam.html

I have always been of the opinion that payment is no guarantee that the crooks will honour any promise to decrypt/restore files when you pay.

As mentioned a robust backup and recovery strategy is required.

Repairing for a disaster needs to be done before the disaster happens. What David does, certainly qualifies as preparing for that disaster.
It is something I stress repeatedly at every presentation.