JD Bungart - THE JDNEER (Page 3)

zerotier

[level zero] Chasing Performance in ZeroTier – VyOS on Minisforum

Level Zero Networking tests ZeroTier performance on VyOS running on Minisforum hardware. The author compares overlay options like Tailscale, NetBird, Nebula, and Twingate, and explains why ZeroTier is especially well suited to site-to-site networking, which is why the blog features it so often.

cloudflare

[Cloudflare] Making home Internet faster has little to do with “speed”

If the Internet is an information superhighway, bandwidth is the number of lanes on the road. The wider the road, the more traffic can fit on the highway at any time. Bandwidth is useful for downloading large files like operating system updates and big game updates.

cybersecurity

[NetworkSecurity] BGP Flaw Can Be Exploited for Prolonged Internet Outages #CVE-2023-38802

SecurityWeek reports on CVE-2023-38802, a flaw affecting major BGP implementations that attackers can exploit to cause prolonged internet outages. Several vendors had not patched it at the time of writing.

cyberbreach

[Mashable] Discord.io suffers massive data breach, announces closure

Discord.io, a service that let users create custom invite links for their Discord servers, is shutting down after a data breach in which hackers stole data belonging to 760,000 users. Mashable covers what happened.

vulnerability

[Ubuntu] USN-6250-1: Linux kernel vulnerabilities (severe!)

Ubuntu's USN-6250-1 fixes several serious Linux kernel vulnerabilities. They include an OverlayFS permission flaw that allows local privilege escalation (CVE-2023-2640), an IP-VLAN out-of-bounds write (CVE-2023-3090), and a netfilter use-after-free (CVE-2023-31248).

vulnerability

[tom's hardware] AMD 'Zenbleed' Bug Leaks Data From Zen 2 Ryzen, EPYC CPUs: Most Patches Coming Q4 (Updated)

Tavis Ormandy, a researcher with Google Information Security, posted today about a new vulnerability he independently found in AMD's Zen 2 processors. The 'Zenbleed' vulnerability spans the entire Zen 2 product stack, including AMD's EPYC data center processors and the Ryzen 3000/4000/5000 CPUs.

cybersecurity

[TheRegister] RIP Kevin Mitnick: Former most-wanted hacker dies at 59

Kevin Mitnick, once the most-wanted hacker in the US and later a writer, public speaker, and security consultant, has died of pancreatic cancer at 59. The Register looks back at the famed social engineer's path from rogue hacker to respected security professional.

cybersecurity

[Qualys] CVE-2023-38408: Remote Code Execution in OpenSSH’s forwarded ssh-agent

The Qualys Threat Research Unit (TRU) has discovered a remote code execution vulnerability in OpenSSH’s forwarded ssh-agent. This vulnerability allows a remote attacker to potentially execute arbitrary commands on vulnerable OpenSSH’s forwarded ssh-agent.

intel

[STH] Intel Exiting the PC Business as it Stops Investment in the Intel NUC

Intel has begun telling its partners that it will stop direct investment in the Next Unit of Compute (NUC) business. ServeTheHome reports on what the move means for Intel's pioneering and popular line of mini PCs.

technews

[9to5linux] Mozilla Thunderbird 115 Released with Supernova UI, OpenPGP Improvements

Mozilla Thunderbird 115 introduces the Supernova UI, with an intuitive app menu, sortable folder modes, a modern cards view, an improved Calendar design, and OpenPGP improvements. 9to5Linux's weekly roundup also covers SUSE forking RHEL and the end of life for Linux 6.3.

vyos

[VyOS] Project July 2023 Update

In June, there was a lot of work done on VyOS. Why is this update so short, then? One reason is that VyOS 1.4 is now on the way to becoming the new LTS release, and there's a lot of work on smoke tests and refactoring that is required to stabilize it.

cybersecurity

[THN] U.S. Government Agencies' Emails Compromised in China-Backed Cyber Attack

An unnamed Federal Civilian Executive Branch (FCEB) agency in the U.S. detected anomalous email activity in mid-June 2023, leading to Microsoft's discovery of a new China-linked espionage campaign targeting two dozen organizations.