Monday, December 13

Geek

Daily News Stuff 13 December 2021

On Beyond Quagga Edition

Top Story

  • Hmm.  Remarkably little news today.  Nothing new has exploded and ruined the lives of sysadmins around the globe.  I think everyone is sleeping off the chaos of last week.

    I wish I was.


  • Looks like that Log4j vulnerability first surfaced on December 1, a full week before anyone noticed.  (ZDNet)

    The idiot script kiddies using every server they can breach to mine crypto actually serve a useful purpose, in the same way that...  404 Analogy not found.  In the same way that Billy the mailboy showing up to work with a thousand bucks worth of bling alerts you to audit your system before Svetlana disappears with a couple of mill.



Tech News

  • Little JNDI Tables.



    A researcher hacked Apple - just a little bit - simply by changing the name of his iOS device.  The logs show that Apple's servers dialed out to his research server when his connection was logged, which would have let him run arbitrary code within Apple's datacenter.

    That's how bad this was.  That's how easy it was to exploit.  And it was everywhere.

    It could be that Apple's logging servers are isolated and can't do anything, but they're not as isolated as Cloudflare's, which were configured so they couldn't dial out at all.


  • On the upside, there's this.



    Someone exploited a bug in a logging library to make a Minecraft server run Doom.


  • New keyboard arrived.  Accidental jellybeans too.  Desktop shelving is now due next Monday rather than today, but whatever.  The second Dell laptop is now stuck in between "shipped" and "on its way" - I think systems bound for Australia are assembled in Singapore, so there's a period where they go into stealth mode where they've been shipped from the factory but tracking just doesn't update.

    Won't have time to do anything with it this week anyway.


Party Like It's 1979 Video of the Day



(Replaced the original music video with a later live performance because video not available in your location.)



Disclaimer: Not all that hot on Tuesdays either.  Wednesdays I can deal with.

Posted by: Pixy Misa at 06:01 PM | Comments (2) | Add Comment | Trackbacks (Suck)
Post contains 354 words, total size 3 kb.

1 Weren't the Accidental Jellybeans the opening act for Anthony's Wiener?

Posted by: Tim Turner at Tuesday, December 14 2021 12:40 AM (n+R81)

2 "I think systems bound for Australia are assembled in Singapore, so there's a period where they go into stealth mode where they've been shipped from the factory but tracking just doesn't update."
Every time I order trinkets from Aliexpress, they disappear off the tracking radar for anywhere from a couple of days to a couple of weeks, sometimes  more than once.  Usually they get stuck in customs, sometimes the seller just sits on them for a week or two before actually shipping, and they're really bad about tracking once stuff hits the local carrier (UPS or whoever)--I guess $1.50 to ship from China isn't enough to pay for domestic tracking.

Posted by: Rick C at Tuesday, December 14 2021 01:15 AM (Z0GF0)

Hide Comments | Add Comment




Apple pies are delicious. But never mind apple pies. What colour is a green orange?




50kb generated in CPU 0.0211, elapsed 0.1344 seconds.
58 queries taking 0.1202 seconds, 328 records returned.
Powered by Minx 1.1.6c-pink.