Miscellaneous Tech News
-
@Dashrender Because all of these outside organizations used and relied on Solarwinds, and when Solarwinds was compromised everyone who relied on SolarWinds was also compromised.
Everything looks great from the top down "we manage everything for you with magic" but in reality these organizations were farming out their work to third parts such as SolarWinds.
Causing a large cascade of failures all the way up to the US government.
-
So you're saying that no one anywhere should use centralized anything.. pretty sure that's not what you are saying...but maybe.
-
@Dashrender said in Miscellaneous Tech News:
So you're saying that no one anywhere should use centralized anything.. pretty sure that's not what you are saying...but maybe.
No, I'm not saying that. I'm saying that these services need to be vetted and have backup systems outside of a single source, such as SolarWinds.
-
Covid-19: Amazon offers to help with US vaccine delivery
Amazon has offered to help distribute Covid-19 vaccines in the US, in a letter to new president Joe Biden.
The letter, penned by the firm's chief executive Dave Clark, said that the e-commerce giant stood "ready to assist you in this effort". Amazon has come in for criticism about its handling of the pandemic, with some staff claiming conditions in its warehouses were not safe. But it is also asking for vaccines for its workers to be prioritised. The firm has signed an agreement with an unnamed healthcare provider to administer vaccines on site at its warehouses around the US. It has requested that its 800,000 workers around the world be among the first to receive the doses, because they are unable to work from home. President Biden has vowed to deliver 100 million Covid-19 vaccinations to US citizens in the first 100 days of his administration. In the letter, Mr Clark wrote: "We are prepared to move quickly once vaccines are available." -
Microsoft Remote Desktop Protocol (RDP) Reflection/Amplification DDoS Attack Mitigation Recommendations - January 2021
... just in case you know of anyone with 3389 exposed. Apologies if someone has already posted this elsewhere
" When enabled on UDP/3389, the Microsoft Windows RDP service may be abused to launch UDP reflection/amplification attacks with an amplification ratio of 85.9:1. The amplified attack traffic consists of non-fragmented UDP packets sourced from UDP/3389 and directed towards the destination IP address(es) and UDP port(s) of the attacker’s choice. In contrast to legitimate RDP session traffic, the amplified attack packets are consistently 1,260 bytes in length, and are padded with long strings of zeroes. Approximately 14,000 abusable Windows RDP servers have been identified, to date. "
from Netscout
-
@warren-stanley only 14,000? Seems low..
-
@DustinB3403 agreed!
-
@DustinB3403 said in Miscellaneous Tech News:
@warren-stanley only 14,000? Seems low..
That's probably 90% of them though lol
-
@Obsolesce haha are you being serious?
-
Don't remember seeing this posted here. Doesn't seem like the licensing changes would affect anyone here.
Changes to Elasticsearch and Kibana licensing - https://www.elastic.co/blog/licensing-change
-
Could Google really leave Australia?
Google has threatened to pull out of the Australian market if a new law governing its relationship with news publishers goes ahead.
The government is introducing a law to address a long-bubbling row over whether tech giants should pay for news that appears in search or is shared on their platforms. The proposed law would mandate that Google has commercial agreements with every news organisation - or enter forced arbitration, something Google says is "unworkable". "If this version of the code were to become law, it would give us no real choice but to stop making Google Search available in Australia," the regional director, Mel Silva, said. Australian Prime Minister Scott Morrison told Google: "We don't respond to threats". -
@mlnews said in Miscellaneous Tech News:
Could Google really leave Australia?
Google has threatened to pull out of the Australian market if a new law governing its relationship with news publishers goes ahead.
The government is introducing a law to address a long-bubbling row over whether tech giants should pay for news that appears in search or is shared on their platforms. The proposed law would mandate that Google has commercial agreements with every news organisation - or enter forced arbitration, something Google says is "unworkable". "If this version of the code were to become law, it would give us no real choice but to stop making Google Search available in Australia," the regional director, Mel Silva, said. Australian Prime Minister Scott Morrison told Google: "We don't respond to threats".Seems realistic. If they are going to make it too expensive to operate there, why not leave?
-
-
@Danp said in Miscellaneous Tech News:
https://www.zdnet.com/article/sonicwall-says-it-was-hacked-using-zero-days-in-its-own-products/
I'm not surprised by this.
-
@mlnews as someone who is subject to the un-qualified whims, continual mis-steps and hamstringing of the Australian Govt on all things IT related, I can only shake my head. I used to use Dogpile back in the day, surely that still works
-
@scottalanmiller said in Miscellaneous Tech News:
@mlnews said in Miscellaneous Tech News:
Could Google really leave Australia?
Google has threatened to pull out of the Australian market if a new law governing its relationship with news publishers goes ahead.
The government is introducing a law to address a long-bubbling row over whether tech giants should pay for news that appears in search or is shared on their platforms. The proposed law would mandate that Google has commercial agreements with every news organisation - or enter forced arbitration, something Google says is "unworkable". "If this version of the code were to become law, it would give us no real choice but to stop making Google Search available in Australia," the regional director, Mel Silva, said. Australian Prime Minister Scott Morrison told Google: "We don't respond to threats".Seems realistic. If they are going to make it too expensive to operate there, why not leave?
Well considering they've been getting it for free, of course it's going to seem unreasonable.
That being said, it's the media moguls vs the Internet... possibly over simplifying it -
@warren-stanley said in Miscellaneous Tech News:
@mlnews as someone who is subject to the un-qualified whims, continual mis-steps and hamstringing of the Australian Govt on all things IT related, I can only shake my head. I used to use Dogpile back in the day, surely that still works
They seem a bit clueless about anything more technical than pen and paper.
IMO it's an ass kissing exercise becuase the governemnt will be targets of smear campaigns by the organisations that stand to benefit from the arrangement... as in it'll hurt their re-election chances. -
@warren-stanley said in Miscellaneous Tech News:
I used to use Dogpile back in the day, surely that still works
I swapped to DuckDuckGo a while ago. So if Google decide to bail on us, my day to day habits are less impacted.
-
@nadnerB said in Miscellaneous Tech News:
@warren-stanley said in Miscellaneous Tech News:
@mlnews as someone who is subject to the un-qualified whims, continual mis-steps and hamstringing of the Australian Govt on all things IT related, I can only shake my head. I used to use Dogpile back in the day, surely that still works
They seem a bit clueless about anything more technical than pen and paper.
IMO it's an ass kissing exercise becuase the governemnt will be targets of smear campaigns by the organisations that stand to benefit from the arrangement... as in it'll hurt their re-election chances.WHOA - slow down there with your "Pen" talk..... that's at least a decade away
-
AWS, as predicted, is forking Elasticsearch
Amazon Web Services, however, isn't the only one who dislikes Elastic's move to relicense Elasticsearch under the non-open-source Server Side Public License.
When Elastic, makers of the open-source search and analytic engine Elasticsearch, went after Amazon Web Services' (AWS) by changing its license from the open-source Apache 2.0-license ALv2) to the non-open-source friendly Server Side Public License (SSPL), I predicted "we'd soon see AWS-sponsored Elasticsearch and Kibana forks." The next day, AWS tweeted it "will launch new forks of both Elasticsearch and Kibana based on the latest Apache 2.0 licensed codebases." Well, that didn't take long!
In a blog post, AWS explained that since Elastic is no longer making its search and analytic engine Elasticsearch and its companion data visualization dashboard Kibana available as open source, AWS is taking action. "In order to ensure open source versions of both packages remain available and well supported, including in our own offerings, we are announcing today that AWS will step up to create and maintain an ALv2-licensed fork of open-source Elasticsearch and Kibana."
