Episode 379: SegmentSmack is Whack
Take down a Linux or FreeBSD box with just 2kpps of traffic, own Homebrew in 30 minutes, and infiltrate an entire network via the Inkjet printers.
\n\nIt\u2019s a busy TechSNAP week.
Sponsored By:
- Ting: Save $25 off a device, or get $25 in service credits! Promo Code: Visit techsnap.ting.com
- iXSystems: Get a system purpose built for you. Promo Code: Tell them we sent you!
- Digital Ocean: Apply our promo snapocean after you create your account, and get a $10 credit. Promo Code: snapocean
Links:
- HP Inkjet Printers Buffer Overflows in Processing Files Let Remote Users Execute Arbitrary Code
- Black Hat 2018: Update Mechanisms Allow Remote Attacks on UEFI Firmware | The first stop for security news
- How I gained commit access to Homebrew in 30 minutes
- Reconnaissance tool for GitHub organizations
- TruffleHog: Searches through git repositories for high entropy strings and secrets, digging deep into commit history
- BFG Repo-Cleaner by rtyley
- TCP implementations vulnerable to Denial of Service
- SegmentSmack: kernel: tcp segments with random offsets may cause a remote denial of service [CVE-2018-5390]
- Merge branch 'tcp-robust-ooo' \xb7 torvalds/linux
- New Sysadmin dealing with stress.
- Microsoft\u2019s undersea data center now has a webcam with fish swimming past 27.6 petabytes of data