Δεκέμβριος 2010 – Don't fear the penguin

Write a regular expression to match a MAC address. Go.

Take 1: ([0-9a-f]{2}:){5}[0-9a-f]{2}
Matches: 00:19:db:d0:8e:3c

Take 2: ([0-9a-fA-F]{1,2}[:-]){5}[0-9a-fA-F]{1,2}
Matches: 00-c-DB-a0-8E-f

RT @_argp: BugTraq Shutdown, end of an era: "At this time, resources for the BugTraq mailing list have not been prioritized, and this will… 2 months ago

RT @jpmens: IT WASN’T DNS twitter.com/atoonk/status/… 7 months ago

RT @fanf: “For the first time, nginx is in use by more web-facing computers than any other web server, including Apache” https://t.co/rscQy… 7 months ago

RT @skaragiannis: In case you missed it https://t.co/X3FUqYZYqZ 1 year ago

RT @QuinnyPig: The best part about this question is that (aside from the third answer's "single digit millisecond latency") I can make it d… 1 year ago

RT @ripencc: Today, at 15:35, we made our final /22 IPv4 allocation from the last remaining addresses in our available pool. We have now ru… 1 year ago

RT @hellasdirect: Sotiris Tsimbonis, our infrastructure and automation lead, has been with us from day 1. Today, we are proud to see him ex… 1 year ago

#WWDC19 1 year ago

RT @RedHatSummit: Let’s keep the excitement going! 🎉Join us in the Ecosystem Expo Hall to celebrate the general release of #RHEL8 https://t… 1 year ago

RT @hellasdirect: Best Workplace για μία ακόμη φορά η @hellasdirect στα φετινά βραβεία @GPTW_GR 😃 #rethink #BestWorkplaces #proud https://t… 2 years ago

Follow @stsimb

Linux Weekly News

Stable kernels for the weekend

There is another set of stable kernel updates out: 5.11.13, 5.10.29, 5.4.111, 4.19.186, 4.14.230, 4.9.266, and 4.4.266. Each contains another set of important fixes.

corbet

HPVM v1.0 released

HPVM ("heterogeneous parallel virtual machine") is a compiler for targets like GPUs and FPGAs based on LLVM; the 1.0 release is available now. "This release is a major addition to our first release (version 0.5), adding support for linear algebra tensor operations, Pytorch and Keras frontends, approximations for convolution operators, and an e […]

corbet

[$] Seccomp user-space notification and signals

The seccomp() mechanism allows the imposition of a filter program (expressed in "classic" BPF) that makes policy decisions on whether to allow each system call invoked by the target process. The user-space notification feature further allows those decisions to be deferred to another process. As this recent patch set from Sargun Dhillon shows, thoug […]

corbet

Security updates for Friday

Security updates have been issued by Debian (lib3mf, php-pear, and python-django), Fedora (perl-Net-Netmask), openSUSE (flatpak, libostree, xdg-desktop-portal,, fwupd, fwupdate, and hostapd), Oracle (kernel, libldb, nettle, and squid), Red Hat (nettle), and SUSE (fwupdate, tpm2-tss-engine, and umoci).

jake

[$] Debian votes on a statement — and a leader

Richard Stallman's return to the Free Software Foundation's board of directors has provoked a flurry of responses, and many organizations in the free-software community have expressed their unhappiness with that appointment. In almost every case, the process leading up to that expression has been carried out behind closed doors. The Debian project, […]

corbet

Security updates for Thursday

Security updates have been issued by Fedora (chromium, libldb, rpm, samba, and seamonkey), openSUSE (isync), Oracle (kernel), Red Hat (openssl and squid), SUSE (ceph, flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk, fwupd, fwupdate, and openexr), and Ubuntu (curl, linux-lts-trusty, and lxml).

jake

[$] LWN.net Weekly Edition for April 8, 2021

The LWN.net Weekly Edition for April 8, 2021 is available.

corbet

[$] Resurrecting DWF

Five years ago, we looked at an effort to assist in the assignment of Common Vulnerabilities and Exposures (CVE) IDs, especially for open-source projects. Developers in the free-software world have often found it difficult to obtain CVE IDs for the vulnerabilities that they find. The Distributed Weakness Filing (DWF) project was meant to reduce the friction […]

jake

[$] Scanning for secrets

Projects, even of the open-source variety, sometimes have secrets that need to be maintained. They can range from things like signing keys, which are (or should be) securely stored away from the project's code, to credentials and tokens for access to various web-based services, such as cloud-hosting services or the Python Package Index (PyPI). These cre […]

jake

A set of stable kernels

Stable kernels 5.11.12, 5.10.28, 5.4.110, 4.19.185, 4.14.229, 4.9.265, and 4.4.265 have been released with the usual set of important fixes. Users should upgrade.

ris

SANS Internet Storm Center

Building an IDS Sensor with Suricata & Zeek with Logs to ELK, (Sat, Apr 10th) 10 Απριλίου, 2021

No Python Interpreter? This Simple RAT Installs Its Own Copy, (Fri, Apr 9th) 9 Απριλίου, 2021

For a while, I&#39;m keeping an eye on malicious Python code targeting Windows environments[1][2]. If Python looks more and more popular, attackers are facing a major issue: Python is not installed by default on most Windows operating systems. Python is often available on developers, system/network administrators, or security teams. Like t […]

ISC Stormcast For Friday, April 9th, 2021 https://isc.sans.edu/podcastdetail.html?id=7450, (Fri, Apr 9th) 9 Απριλίου, 2021

Simple Powershell Ransomware Creating a 7Z Archive of your Files, (Thu, Apr 8th) 8 Απριλίου, 2021

If some ransomware families are based on PE files with complex features, it&#39;s easy to write quick-and-dirty ransomware in other languages like Powershell. I found this sample while hunting. I&#39;m pretty confident that this script is a proof-of-concept or still under development because it does not contain all the r […]

ISC Stormcast For Thursday, April 8th, 2021 https://isc.sans.edu/podcastdetail.html?id=7448, (Thu, Apr 8th) 8 Απριλίου, 2021

WiFi IDS and Private MAC Addresses, (Wed, Apr 7th) 7 Απριλίου, 2021

I recently came across "nzyme" [1], a WiFi Intrusion Detection System (IDS). Nzyme does focus on WiFi-specific attacks, so it does not care about payload but inspects the 802.11 headers that escape traditional, wired IDSs. It was not terribly hard to get it running on a Raspberry Pi using a Panda USB WiFi adapter.

ISC Stormcast For Wednesday, April 7th, 2021 https://isc.sans.edu/podcastdetail.html?id=7446, (Wed, Apr 7th) 7 Απριλίου, 2021

Malspam with Lokibot vs. Outlook and RFCs, (Tue, Apr 6th) 6 Απριλίου, 2021

Couple of weeks ago, my phishing/spam trap caught an interesting e-mail carrying what turned out to be a sample of the Lokibot Infostealer.

ISC Stormcast For Tuesday, April 6th, 2021 https://isc.sans.edu/podcastdetail.html?id=7444, (Tue, Apr 6th) 6 Απριλίου, 2021

ISC Stormcast For Monday, April 5th, 2021 https://isc.sans.edu/podcastdetail.html?id=7442, (Mon, Apr 5th) 5 Απριλίου, 2021

	Michail στη Ελληνικά ή Αγγλικά;
	adamo στη Ελληνικά ή Αγγλικά;
	Michail στη Ελληνικά ή Αγγλικά;
	Michail στη Ελληνικά ή Αγγλικά;
	cvi going distribute… στη version control for important…
	bilias στη It’s a girl!
	Sotiris Tsimbonis στη It’s a girl!
	kioan στη It’s a girl!
	kzorba στη It’s a girl!
	Sotiris Tsimbonis στη It’s a girl!

Μήνας: Δεκέμβριος 2010

Now we know where sudo reports

A regular expression to match MAC Addresses

IPv6 Certified Sage