Δεκέμβριος 2010 – Don't fear the penguin

Write a regular expression to match a MAC address. Go.

Take 1: ([0-9a-f]{2}:){5}[0-9a-f]{2}
Matches: 00:19:db:d0:8e:3c

Take 2: ([0-9a-fA-F]{1,2}[:-]){5}[0-9a-fA-F]{1,2}
Matches: 00-c-DB-a0-8E-f

RT @jpmens: IT WASN’T DNS twitter.com/atoonk/status/… 1 month ago

RT @fanf: “For the first time, nginx is in use by more web-facing computers than any other web server, including Apache” https://t.co/rscQy… 2 months ago

RT @skaragiannis: In case you missed it https://t.co/X3FUqYZYqZ 6 months ago

RT @QuinnyPig: The best part about this question is that (aside from the third answer's "single digit millisecond latency") I can make it d… 9 months ago

RT @ripencc: Today, at 15:35, we made our final /22 IPv4 allocation from the last remaining addresses in our available pool. We have now ru… 11 months ago

RT @hellasdirect: Sotiris Tsimbonis, our infrastructure and automation lead, has been with us from day 1. Today, we are proud to see him ex… 11 months ago

#WWDC19 1 year ago

RT @RedHatSummit: Let’s keep the excitement going! 🎉Join us in the Ecosystem Expo Hall to celebrate the general release of #RHEL8 https://t… 1 year ago

RT @hellasdirect: Best Workplace για μία ακόμη φορά η @hellasdirect στα φετινά βραβεία @GPTW_GR 😃 #rethink #BestWorkplaces #proud https://t… 1 year ago

Woohoo! Our copy of Ship It: The Game of Product Management by @PostlightStudio has arrived! Time to play and… twitter.com/i/web/status/1… 1 year ago

Follow @stsimb

Linux Weekly News

Kernel prepatch 5.10-rc1

Linus has released 5.10-rc1 and closed the merge window for this development cycle. "This looks to be a bigger release than I expected, and while the merge window is smaller than the one for 5.8 was, it's not a *lot* smaller. And 5.8 was our biggest release ever."

corbet

GDB 10.1 released

Version 10.1 of the GDB debugger is out. Changes include support for debugging BPF programs, GDBserver support on the RISC-V architecture, and support for "debuginfod", which is "an HTTP server for distributing ELF/DWARF debugging information as well as source code."

corbet

[$] Rejuvenating Autoconf

GNU Autoconf, a widely used build tool that shines at compatibility with a variety of Unixes, has accumulated many improvements since its last release in 2012 — and there are patches awaiting review. While many projects have switched to other build systems, interest in Autoconf remains. Now, a small team (disclaimer: including article author Sumana Harihares […]

jake

Security updates for Friday

Security updates have been issued by Gentoo (freetype), openSUSE (mailman), Red Hat (firefox, java-11-openjdk, OpenShift Container Platform 3.11.306 jenkins, and rh-maven35-jackson-databind), SUSE (kernel, mercurial, openldap2, python-pip, and xen), and Ubuntu (firefox, netty-3.9, and python-pip).

coogle

Ubuntu 20.10 (Groovy Gorilla) released

The Ubuntu 20.10 release is out. "The Ubuntu kernel has been updated to the 5.8 based Linux kernel, and our default toolchain has moved to gcc 10 with glibc 2.32. Additionally, there is now a desktop variant of the Raspberry Pi image for Raspberry Pi 4 4GB and 8GB. Ubuntu Desktop 20.10 introduces GNOME 3.38, the fastest release yet with significant perf […]

corbet

[$] Constant-action bitmaps for seccomp()

The seccomp() system call allows user space to load one or more (classic) BPF programs to be run whenever the calling process invokes a system call. Those programs can examine (to an extent) the arguments to each call and inform the kernel whether the call should be allowed to proceed or not. This feature is used in a number of containerization solutions (an […]

corbet

Security updates for Thursday

Security updates have been issued by Arch Linux (freetype2), Debian (bluez, firefox-esr, and freetype), Fedora (firefox), openSUSE (chromium), Oracle (kernel), Red Hat (java-11-openjdk), Slackware (kernel), SUSE (freetype2, gnutls, kernel, php7, and tomcat), and Ubuntu (flightgear, italc, libapache2-mod-auth-mellon, libetpan, and php-imagick). […]

coogle

[$] LWN.net Weekly Edition for October 22, 2020

The LWN.net Weekly Edition for October 22, 2020 is available.

corbet

[$] What is coming in PHP 8

Recently, PHP 8 release candidate 2 was posted by the project. A lot of changes are coming with this release, including a just-in-time compiler, a good number of backward-compatibility breaks, and new features that developers have been requesting for years. Now that the dust has settled, and the community is focusing on squashing bugs for the general-availab […]

coogle

Security updates for Wednesday

Security updates have been issued by Arch Linux (kdeconnect, kernel, kpmcore, lib32-freetype2, linux-hardened, linux-lts, linux-zen, lua, and powerdns-recursor), Debian (mariadb-10.1 and mariadb-10.3), Fedora (thunderbird), Mageia (claw-mail, freetype2, geary, kernel, and tigervnc), Oracle (nodejs:12), Red Hat (python27, rh-postgresql96-postgresql, and rh-py […]

ris

SANS Internet Storm Center

ISC Stormcast For Monday, October 26th 2020 https://isc.sans.edu/podcastdetail.html?id=7224, (Mon, Oct 26th) 26 Οκτωβρίου, 2020

Video: Pascal Strings, (Sun, Oct 25th) 25 Οκτωβρίου, 2020

Programs written in the Object Pascal (Delphi) programming language, have their strings stored in the executable file as Pascal strings. A Pascal string (or P-string) is a string that is internally stored with a length-prefix: an integer that counts the number of characters inside the string.

An Alternative to Shodan, Censys with User-Agent CensysInspect/1.1, (Sat, Oct 24th) 24 Οκτωβρίου, 2020

I have well over 2 years of honeypot logs and only started seeing CensysInspect user-agent in my logs about 2 months ago. Most of us are familiar with Shodan and often use it to find what is or was exposed to the Internet. This is an alternative site to search the same data with 3 available search options, by IPv4, websites and certificates.

Russian State-Sponsored APT Actor Compromises U.S. Gov Targets https://us-cert.cisa.gov/ncas/alerts/aa20-296a, (Fri, Oct 23rd) 23 Οκτωβρίου, 2020

Sooty: SOC Analyst's All-in-One Tool, (Fri, Oct 23rd) 23 Οκτωβρίου, 2020

Sooty was developed with the intent of helping SOC analysts automate parts of their work flow. Sooty serves to perform the more mundane and routine checks SOC analysts typically undertake with the hope of freeing the analyst to conduct deeper analysis in a more efficient and timely manner.

ISC Stormcast For Friday, October 23rd 2020 https://isc.sans.edu/podcastdetail.html?id=7222, (Fri, Oct 23rd) 23 Οκτωβρίου, 2020

BazarLoader phishing lures: plan a Halloween party, get a bonus and be fired in the same afternoon, (Thu, Oct 22nd) 22 Οκτωβρίου, 2020

Phishing messages distributing BazarLoader have come to be commonplace in the past six months, but in the last couple of weeks I&#x27ve been seeing more and more e-mails spreading this malware caught in my quarantine. Although contents of these messages differ, their appearance is usually similar â€“ they all contain a fairly long link to Googl […]

ISC Stormcast For Thursday, October 22nd 2020 https://isc.sans.edu/podcastdetail.html?id=7220, (Thu, Oct 22nd) 22 Οκτωβρίου, 2020

20 new Cisco security advisories for ASA and Firepower with CVSS>7: https://tools.cisco.com/security/center/publicationListing.x, (Wed, Oct 21st) 21 Οκτωβρίου, 2020

Shipping dangerous goods, (Wed, Oct 21st) 21 Οκτωβρίου, 2020

For the past several months, I&#39;ve been tracking a campaign that sends rather odd-looking emails like this

	Michail στη Ελληνικά ή Αγγλικά;
	adamo στη Ελληνικά ή Αγγλικά;
	Michail στη Ελληνικά ή Αγγλικά;
	Michail στη Ελληνικά ή Αγγλικά;
	cvi going distribute… στη version control for important…
	bilias στη It’s a girl!
	Sotiris Tsimbonis στη It’s a girl!
	kioan στη It’s a girl!
	kzorba στη It’s a girl!
	Sotiris Tsimbonis στη It’s a girl!

Μήνας: Δεκέμβριος 2010

Now we know where sudo reports

A regular expression to match MAC Addresses

IPv6 Certified Sage