S2E16: "Playin' Cornhole"

Posted 2017-09-25 03:59
Modified 2017-10-11 22:55
Comments 0

In this episode we discuss some LinkedIn open-source software, a TON of system metrics tools, and the huge Equifax fail. The birth of the “Amir” inside joke.

• News
• Notes
• Sysbadministration Award
• Errata
• Music

News

• You’ve probably (hopefully) heard of BlueBorne by now.
• We found a demonstration of breaking the x86 instruction set.
• It finally happened someone was imprisoned for selling VPNs in China. We mentioned China and VPNs in S1E5.
  • Note that some of the terminology, language, etc. is mangled in the article; either due to mistranslation or to avoid being indexed and detected by China’s content filtering crawlers.
• Some of the legal action against Lenovo is coming to a head.
  • You can hear us talk about Lenovo’s “fish-y” (pun intended) practices in the following: S0E14, S0E16, and S1E17.
• There has been a largescale phishing at MacEwan University (better source).
• Jeremy Pournell has passed.

Notes

Starts at 15m34s.

I was drinking Bulleit 10-year bourbon (again). Paden was drinking Glenlivet again. Jthan was drinking Denver Brewing Company’s Princess Yum-Yum.

• Apparently LinkedIn has F/OSS. who knew?

• System Metrics (18m22s)
  • Idea for topic came from this thread (my post) and this thread too (relavant posts: 1, 2)
  • mtr
    • Jthan uses smokeping, and I also mention httping.
  • iptraf and iptraf-ng
  • iftop
  • speedtest-cli
  • ntop-ng
  • iperf2 and iperf3 (if you need a iperf target server, I run both an iperf2 and iperf3 instance on my mirror)
  • sysdig
  • iostat (part of sysstat)
  • iotop
  • glances
    • Paden/Jthan: Hey, knuckleheads – according to a shownotes search, we have not talked about glances on the show ever.
  • htop
  • bonnie++
  • There’s also netdata, nethogs, and nmon.

• I also talk about my mirror (47m25s)

Sysbadministration Award

In this segment, we highlight system administration mistakes. Think of them as the IT equivalent of the Darwin Awards. (40m56s)

Equifax is just a cacophany of fail. We don’t even know where to begin, so here’s a link dump:

• www.bloomberg.com/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack
• rehmann.co/blog/email-russian-equifax-hackers/
• techcrunch.com/2017/09/07/equifax-data-leak-could-involve-143-million-consumers/
• mashable.com/2017/09/08/equifax-hackers-bitcoin-ransom/
• www.reddit.com/r/sysadmin/comments/6z2y4d/the_pin_issued_by_equifax_when_you_freeze_your/
• www.reddit.com/r/sysadmin/comments/6zep7z/equifax_are_now_sued_for_70_billion_dollars_i/
• www.zdnet.com/article/equifax-freeze-your-account-site-is-also-vulnerable-to-hacking/
• www.grc.com/sn/SN-628-Notes.pdf
• www.theregister.co.uk/2017/09/11/equifax_incident_response_omnishambles/

Additionally, Netscape Navigator is even mentioned on their site. Netscape. Navigator.

Errata

• When talking about speedtest-cli, I thought it might provide XML output. It does not, but it DOES indeed offer CSV or JSON results output.
• I didn’t even bother including Jthan’s paste
• I said it was “mirror.square-r00t.com” – it’s actually mirror.square-r00t.NET, oops. :)

Music

Author r00t^2
Categories Season Two