Security issues in auto updaters are a big problem. Most of them are prone to man in the middle attacks because they just don't use encryption and / or checksums.

Posts made by thwr
-
RE: KeePass dev refuses to patch security hole in favor of ad revenue
-
RE: KeePass dev refuses to patch security hole in favor of ad revenue
@JaredBusch said in KeePass dev refuses to patch security hole in favor of ad revenue:
@thwr said in KeePass dev refuses to patch security hole in favor of ad revenue:
Ok, checked the article, it's about the updater... Still a problem, but no need for an immediate switch IMHO.
As someone contemplating switching to it though, I no longer wish to.
Wouldn't do it either in this case, but there should be no real risk for existing users as long as you don't use the auto updater.
Anyway, please report back when you found something, FOSS preferred.
-
RE: KeePass dev refuses to patch security hole in favor of ad revenue
Ok, checked the article, it's about the updater... Still a problem, but no need for an immediate switch IMHO.
-
RE: KeePass dev refuses to patch security hole in favor of ad revenue
Seriously, are we talking about the same KeePass2? Never saw an advertisement in the application. Or is it something in the background, like usage tracking?
-
RE: What Are You Doing Right Now
You know what to do @JaredBusch. Software is a "bit" outdated but you will be able to let it run for a few more decades
-
RE: What Are You Doing Right Now
@scottalanmiller said in What Are You Doing Right Now:
Well honestly, it would be pretty shocking if they were running Netware 6.5 on new hardware
Never thought about this, but Netware is x86. So you could be able to virtualize it. NIC drivers might be a problem, but I guess it is possible for example with a AMD PCnet legacy vNIC, depending on your hypervisor.
The last version I had my hands on was Netware 3.1 I think. Is 6.5 still using IPX?
Edit: 16 bit OS might be another problem, Qemu could help. Not sure, but isn't at least ESXi able to run DOS VMs?
-
RE: What Are You Doing Right Now
@JaredBusch said in What Are You Doing Right Now:
I am currently working on a GroupWise 6 email server running on Netware 6.5 running on Dr DOS
https://lh3.googleusercontent.com/-Xncrl9Zg5XA/V1I7f1dvRPI/AAAAAAABLAY/jyWcQlriU_cjPpQ8tnkEI8cmUJK06d3agCK8B/s512/2016-06-03.pngRetro, cool
-
RE: New KVM recommendation
@scottalanmiller just saw that again a few years ago. Well, kind of. Fujitsu remote workstation portal or something like that. Add-on PCIe card and a thin client. Works at least with W and R series Celsius workstations. Use case was to put your high end (CAD) workstations into your server room and transport everything over IP.
-
RE: Congrats IRJ and Family!
Congrats man, wish you and your family all the best.
-
RE: Weekend Plans
@scottalanmiller said in Weekend Plans:
@thwr said in Weekend Plans:
@scottalanmiller said in Weekend Plans:
No weekend plans here. Literally no idea what we are going to be doing this weekend. Might be doig nothing. That's not a bad idea.
Staying home isn't that bad at all. Don't know what the weather is like where you are, but we are probably going to some lake maybe.
A month of rain here.
That was post #666 - A month of rain.
You should stay at home, just for safety reasons
-
RE: Weekend Plans
@scottalanmiller said in Weekend Plans:
No weekend plans here. Literally no idea what we are going to be doing this weekend. Might be doig nothing. That's not a bad idea.
Staying home isn't that bad at all. Don't know what the weather is like where you are, but we are probably going to some lake maybe.
-
RE: Weekend Plans
@JaredBusch said in Weekend Plans:
@thwr said in Weekend Plans:
@JaredBusch said in Weekend Plans:
- Packing the condo in prep for moving to our house.
- Packing the suitcases for the wife and kids heading to Japan on Monday for 7 weeks.
- Going to a local festival for the kids to have fun on rides and have carnival food.
- Getting billable hours in here somewhere because of #1
So the house is all yours for 7 weeks? Great
not quite.
My wife and kids leave on June 6th. We (well I + power of attorney for my wife) close on the house on June 17th. We do not get possession until June 28th. Our lease is up on our condo on June 30th. They come home form Japan on July 25th.
I have the time between June 28th and July 25th to rip out the carpet in the bedrooms and install hardwood. as well as fix and paint the walls.
Uhm, good luck.
-
RE: What Are You Doing Right Now
@gjacobse said in What Are You Doing Right Now:
This is my other desk right now.... Just some USB (powered) projects...
Radio I repaired (Realistic HTX-202) is behind the keyboard.
So many projects,.. so little time.
At the bottom is a single 18650 battery charging an iPhone 4 in a OtterBox case with battery (no longer offered).
Haha yeah,my desk is looking the same. But I try to clean it up before I leave. Seems stupid and redundant work, but it helps.
-
RE: What Are You Doing Right Now
@gjacobse thank you. To be honest, that takes most of the time in such projects. But I like it clean and safe.
-
RE: Weekend Plans
@JaredBusch said in Weekend Plans:
- Packing the condo in prep for moving to our house.
- Packing the suitcases for the wife and kids heading to Japan on Monday for 7 weeks.
- Going to a local festival for the kids to have fun on rides and have carnival food.
- Getting billable hours in here somewhere because of #1
So the house is all yours for 7 weeks? Great
-
RE: What Are You Doing Right Now
@dafyre In its previous life, it was just a poor D-Link 615 WiFi AP/Router combo. The Pi is hosting an AMQP Broker (RabbitMQ server).
I'm working on a blog post about this, hopefully finished on Sunday. Will post the link here.