https://exchange.xforce.ibmcloud.com/#/collection/705fd7c8cc1111e72979c5fc52611775
Kaiji - New Chinese Linux Malware
Summary
A new report from Intezer details a new Chinese malware, named Kaiji, that is brute forcing servers and IoT devices. Its name is based on function, the botnet was built from scratch using Golang programming language, a rare occurrence within the IoT botnet arena.
@scottalanmiller said in What Are You Watching Now:
@Grey said in What Are You Watching Now:
@scottalanmiller said in What Are You Watching Now:
The Three Caballeros
You'll be the boat that actually knows what's going on when you take the ride at Disneyworld.
That's one of my favourite rides (even before the updates, like back in the 80s) .... yeah it's funny how many people don't know the material for that pavilion. Sadly, they are removing it all and switching it to Coco themed.
I hadn't heard that! That's cool, though. I love the art style from Día de Muertos and some of the coolest tattoos are from that style. You and the kids need to watch Book of Life now.
@JaredBusch said in Weekend Plans:
More deck work.
If you cut the bushes back, it'll make your deck look bigger.
@scottalanmiller said in What Are You Watching Now:
The Three Caballeros
You'll be the boat that actually knows what's going on when you take the ride at Disneyworld.
@gjacobse Are you recreating the same shares from one server to the next or just restoring "drives" to an endpoint?
@WrCombs said in Unifi AP on unrouted Network - Issues:
@WrCombs said in Unifi AP on unrouted Network - Issues:
How do you Export/Import Sites into new controllers ?
Never mind I figured it out.
You should post your solution/discovery so the next person to google will see that.
@scottalanmiller said in What Are You Watching Now:
@popester said in What Are You Watching Now:
Thanks, mature/R rated. Acceptable, its a rough world out there, no need to sugar coat reality/fantasy.
Anime gets pretty violent and weird and adult. There's not too much getting around that.
DC's Harley Quinn is animated and mature, but not "hentai" and I highly recommend watching it.
The movie cats has naked cats and it's an egregious film. Just difficult to watch, and yet, when I educated @scottalanmiller about Plex, it was the first thing he watched. Perv!
@siringo said in What Are You Doing Right Now:
so i got mesh central working and it's pretty good.
when I did the install I didn't use the --install switch so I don't have Windows service.
How can I add a Windows service so it will auto start after a reboot??
If you know the service executable, use sc.
sc -?
ERROR: Unrecognized command
DESCRIPTION:
SC is a command line program used for communicating with the
Service Control Manager and services.
USAGE:
sc <server> [command] [service name] <option1> <option2>...
The option <server> has the form "\\ServerName"
Further help on commands can be obtained by typing: "sc [command]"
Commands:
query-----------Queries the status for a service, or
enumerates the status for types of services.
queryex---------Queries the extended status for a service, or
enumerates the status for types of services.
start-----------Starts a service.
pause-----------Sends a PAUSE control request to a service.
interrogate-----Sends an INTERROGATE control request to a service.
continue--------Sends a CONTINUE control request to a service.
stop------------Sends a STOP request to a service.
config----------Changes the configuration of a service (persistent).
description-----Changes the description of a service.
failure---------Changes the actions taken by a service upon failure.
failureflag-----Changes the failure actions flag of a service.
sidtype---------Changes the service SID type of a service.
privs-----------Changes the required privileges of a service.
managedaccount--Changes the service to mark the service account
password as managed by LSA.
qc--------------Queries the configuration information for a service.
qdescription----Queries the description for a service.
qfailure--------Queries the actions taken by a service upon failure.
qfailureflag----Queries the failure actions flag of a service.
qsidtype--------Queries the service SID type of a service.
qprivs----------Queries the required privileges of a service.
qtriggerinfo----Queries the trigger parameters of a service.
qpreferrednode--Queries the preferred NUMA node of a service.
qmanagedaccount-Queries whether a services uses an account with a
password managed by LSA.
qprotection-----Queries the process protection level of a service.
quserservice----Queries for a local instance of a user service template.
delete----------Deletes a service (from the registry).
create----------Creates a service. (adds it to the registry).
control---------Sends a control to a service.
sdshow----------Displays a service's security descriptor.
sdset-----------Sets a service's security descriptor.
showsid---------Displays the service SID string corresponding to an arbitrary name.
triggerinfo-----Configures the trigger parameters of a service.
preferrednode---Sets the preferred NUMA node of a service.
GetDisplayName--Gets the DisplayName for a service.
GetKeyName------Gets the ServiceKeyName for a service.
EnumDepend------Enumerates Service Dependencies.
The following commands don't require a service name:
sc <server> <command> <option>
boot------------(ok | bad) Indicates whether the last boot should
be saved as the last-known-good boot configuration
Lock------------Locks the Service Database
QueryLock-------Queries the LockStatus for the SCManager Database
EXAMPLE:
sc start MyService
QUERY and QUERYEX OPTIONS:
If the query command is followed by a service name, the status
for that service is returned. Further options do not apply in
this case. If the query command is followed by nothing or one of
the options listed below, the services are enumerated.
type= Type of services to enumerate (driver, service, userservice, all)
(default = service)
state= State of services to enumerate (inactive, all)
(default = active)
bufsize= The size (in bytes) of the enumeration buffer
(default = 4096)
ri= The resume index number at which to begin the enumeration
(default = 0)
group= Service group to enumerate
(default = all groups)
SYNTAX EXAMPLES
sc query - Enumerates status for active services & drivers
sc query eventlog - Displays status for the eventlog service
sc queryex eventlog - Displays extended status for the eventlog service
sc query type= driver - Enumerates only active drivers
sc query type= service - Enumerates only Win32 services
sc query state= all - Enumerates all services & drivers
sc query bufsize= 50 - Enumerates with a 50 byte buffer
sc query ri= 14 - Enumerates with resume index = 14
sc queryex group= "" - Enumerates active services not in a group
sc query type= interact - Enumerates all interactive services
sc query type= driver group= NDIS - Enumerates all NDIS drivers
Ex:
sc create
DESCRIPTION:
Creates a service entry in the registry and Service Database.
USAGE:
sc <server> create [service name] [binPath= ] <option1> <option2>...
OPTIONS:
NOTE: The option name includes the equal sign.
A space is required between the equal sign and the value.
type= <own|share|interact|kernel|filesys|rec|userown|usershare>
(default = own)
start= <boot|system|auto|demand|disabled|delayed-auto>
(default = demand)
error= <normal|severe|critical|ignore>
(default = normal)
binPath= <BinaryPathName to the .exe file>
group= <LoadOrderGroup>
tag= <yes|no>
depend= <Dependencies(separated by / (forward slash))>
obj= <AccountName|ObjectName>
(default = LocalSystem)
DisplayName= <display name>
password= <password>
I always look at pcper's hardware leaderboard for new or even upgrade plans. They update the leaderboard regularly, too.
The only difference between a regular gaming pc and one for flight sims is how realistic you want to get, which speaks to peripherals (you can get entire dashboards for IFR emulation), including pedals and more. One of the cooler items to get might be an ultra wide monitor (https://www.bhphotovideo.com/c/product/1457462-REG/lg_49wl95c_w_49_class_32_9_ultrawide.html) though that's likely outside the price range -- I did see a smaller one for $350 -- and you'll need to see how far this client wants to go. You could save a bit if you skip the flashy lights and/or water cooling.
@JaredBusch said in What Are You Doing Right Now:
@RojoLoco said in What Are You Doing Right Now:
@Grey said in What Are You Doing Right Now:
I mean, how far are you from the ocean?
More important, how far are you from the sushi place?
No. I don't care how close you are to the sushi place if you live in a place where fresh fish is not actually fresh.
/me glares at St Louis
This. Sushi in Seattle? Awesome. Sushi in Denver? Ehhhhh. Maybe not so much.
Is the OS updated? Are you running a solid AV program?
lofi hip hop beats, the space girl one.
After work, probably SeaQuest as I am rewatching them all. I haven't thought of that show since it was new, and it's fun to watch now with new eyes. So many actors in that that went on to do more stuff.
@RojoLoco said in Non-IT News Thread:
@scottalanmiller said in Non-IT News Thread:
Trump becomes the "tide pod" president after suggesting the possible efficacy of ingesting or injecting household cleaning products - copying the dangerous and laughable millenial trend that's so recently been big news.
Everyone needs to stop telling the stupid people to not do this. Let nature take its course.
On the one hand, I want to see them do it so scump has fewer voters in November. On the other hand, I think the ERs have enough to deal with and don't need idiots taking up time. I also want to know how republicans can put up barriers to voting, as they do, and yet the bleach drinking idiots still manage to do it. There's something fucked up right there.
Wishing that I had fewer house projects and financial plans so I could get this and try my usa 4 corners ride again. It's even in my color.
