S1E21: "Seedy End"

Posted 2016-12-04 21:48
Modified 2017-01-29 01:45
Comments 0

We talk about CDNs for a bit (and the Mandela Effect), but mostly we argue about whether companies should be held responsible for compromises/leaks.

• News
• Notes
• Sysbadministration Award
• Errata
• Music

News

Starts at 4m33s.

• Shitshow recording date/time: December 7, 2016 2100EST
  • See our events page for more info!
• Vic from our IRC channel won the challenge we presented in S1E18
• A video is crashing iOS
  • Speaking of iOS, there’s a new auth bypass exploit
• Dyn was acquired by Oracle
• A new end-to-end encrypted chat implementation using Matrix has come out, Riot
• Microsoft does some weird things to GNU userspaces.
• Crysis ransomware: ineffective. The keys are leaked!
  • But just as one falls, another takes its place – Blacknurse brought an entire business down.
• Another variant of the “acoustic keylogger” concept, this one actually uses radio signal.
• GNU/Linux is running on 498 of the 500 fastest supercomputers in the world (99.6%). Suck it, Microsoft, Apple, and BSDs.
• Adult Friend Finder had a leak. Of course.

Notes

Starts at 19m33s.

Both myself and Jthan were drinking Knob Creek. Paden was drinking a Dr. Pepper.

• CDNs (Content Delivery Networks)!
  • Handy for storing static files so you don’t need to serve the bandwidth yourself
  • Good for widespread distribution of files to many people, especially if those people are spread across a wide landscape
  • Amazon does indeed have their own CDN offering. But you can use S3 as well.
  • Cloudflare (what we commonly think of as “Cloudflare”) is not a CDN. It is a reverse caching proxy. They do offer CDN services, though.
  • Bandwidth is the biggest benefit, in my eyes- specifically, not needing to serve your content yourself.
  • Another benefit is the use of Anycast- your website visitors would automatically load the content from a location closer to them than your webserver is.
  • Remember, though- when you load content onto a CDN, you lose control over access to that data.

• Around 30m in, however, we sort of morph into a discussion about legal recourse for company’s suffering digital attacks/compromises/etc.

• I do mention HAProxy though.

Sysbadministration Award

In this segment, we highlight system administration mistakes. Think of them as the IT equivalent of the Darwin Awards. (47m46s)

A neglect of responsible disclosure reporting led to multiple Indian embassies being compromised.

Errata

• None!

Music

Author r00t^2
Categories Season One