Archive for May 23, 2018

500K Routers Worldwide Pwned By VPNFilter Malware

Posted in Commentary with tags on May 23, 2018 by itnerd

Cisco’s Talos Intelligence Group is sounding the alarm about a new type of malware called VPNFilter. The malware contains a killswitch for routers, can steal logins and passwords and can monitor industrial control systems. And an attack would have the potential to cut off internet access for all the devices connected to the router. Ukraine seems to be particularly hard hit, which combined with what has been discovered about the malware, implies that this is Russian in origin.

Routers from Linksys, MikroTik, Netgear and TP-Link are affected. Netgear has suggested to users everywhere to upgrade the firmware on their routers. Nobody else seems to have any specific advice for users of their products. Which is of course bad.

In terms of protecting yourself, here’s the best that from Cisco’s Talos Intelligence group:

  • Users of SOHO routers and/or NAS devices reset them to factory defaults and reboot them in order to remove the potentially destructive, non-persistent stage 2 and stage 3 malware.

And that’s pretty much all the average end user can do. Hopefully more robust advice comes in the days ahead as this is far from trivial.

#BatteryGate News: Apple Serving Up $50 USD Credit To Those Who Paid For iPhone 6 & Later Battery Replacements In 2017

Posted in Commentary with tags on May 23, 2018 by itnerd

#BatteryGate took a bit of a turn today with the posting of this document which details that Apple will be serving up a $50 USD credit, which is $64 CDN for those of us in the great white north, to anyone who had a out of warranty battery replacement at an Apple Store or authorized dealer on an iPhone 6, 6 Plus, SE, 6s, 6s Plus, 7, or 7 Plus during 2017. What’s interesting is that this program is international based on the fact that if you click on the US flag on the top right, you can change your country to see what you are eligible for in your corner of the planet. My guess it’s meant to blunt the influx of lawsuits and investigations coming from every corner of the planet.

If you’re eligible for this, Apple will contact you via email between May 23, 2018 and July 27, 2018 with instructions on how to obtain the credit.

Apple Sued AGAIN Over Dodgy MacBook Keyboards…… I’m Now Calling This #KeyboardGate

Posted in Commentary with tags on May 23, 2018 by itnerd

What I am now calling KeyboardGate, because if you tack the word “gate” to the end of another word it makes it sound really serious, is now spreading with the news of a second class action lawsuit. Unlike the first one, this one is different as it claims that Apple has violated five different laws and that remedies should be determined at trial, rather than demand that the machines be recalled and a better quality keyboard be provided to customers.

What’s likely to happen is that additional lawsuits will be filed and Apple at some point will have to deal with this. How they can deal with this will be interesting to see as this isn’t a company that likes to admit that it did something wrong.

Back Door Account Found in DLink DI-620 Routers Can Lead To Epic Pwnage

Posted in Commentary with tags , on May 23, 2018 by itnerd

Kaspersky Lab researchers have discovered a back door account on DLink DI-620 routers which if you have said router configured for admin access via the Internet, can lead a miscreant to pwn your router, and by extension your network. While this is an older device, there are a fair number of them floating around. Thus this discovery is not trivial. Because of that, Kaspersky is not disclosing the full details of this exploit to protect those who own this router, and are likely now considering using another router as we speak. For what it is worth, the best way to protect yourself is to ensure that the ability to log into this router from the Internet is disabled. I say that because DLink isn’t going to fix this as it is such an old device. Which I think says something about DLink.

Oh by the way, Kaspersky found three other security issues with this router. Which I think says something else about DLink.

Chinese Researchers Find Flaws In BMW Infotainment Systems….. And Fixes Are On The Way From BMW

Posted in Commentary with tags , on May 23, 2018 by itnerd

Chinese security firm Keen Labs have been looking at a variety of BMW vehicles over the last year and have released a 26-page technical report that details 14 vulnerabilities that allow a BMW to be pwned via the infotainment system. The researchers have released their findings to BMW who are working on updates to fix this. Likely when the cars come in for service. Now some of these flaws are hard to exploit. But it is possible which is why some details have been withheld in the report.

This highlights something that I have been saying for a while now. Car makers really need to up their game when it comes to the security of the cars that they make because they’re now rolling computers that people are going to try and hack. Thus automotive manufacturers have to be looking for vulnerabilities constantly, and when they find them, fix them quickly. Then roll them out in a manner that is easy for every car owner to get. That way we are all safer as a result.

Chatham-Kent Gets Bell’s All-Fibre Broadband Network…. That Is Right In Teksavvy’s Back Yard

Posted in Commentary with tags on May 23, 2018 by itnerd

I’ve been monitoring the progress of Bells new all-fibre broadband network which has rolled out in Toronto, Orillia, And a couple places east of Toronto. Up until now the clear target is Rogers as they seemingly have no answer for what Bell has to offer. But today it seems that Bell has now turned its attention to Chatham-Kent which is about three hours west of Toronto in terms of its next place to roll out their all-fibre broadband network. It’s also the HQ of Teksavvy which for years has offered far more affordable Internet and home phone services than either Bell or Rogers has been able to.

Service will initially be offered to Chatham and then it will be expanding to Blenheim, Ridgetown, Tilbury and Wallaceburg and Bell promises that the first customer connections will be in the fall. It will be interesting to see how both Rogers and Teksavvy react to this. Particularly the latter as this has to be seen as a direct threat to Teksavvy.

Review: 2018 Mazda6 Signature – Part 3

Posted in Products with tags on May 23, 2018 by itnerd

The interior of the 2018 Mazda6 Signature is simply a class above. Though I do have three very minor complaints, it’s a total winner. Let me walk you through it:

Ag1Zk9XgQI+tbHZIRaEQYQ

The drivers side door (not to mention the rest of the car) has a mix of Nappa leather, aluminum, Sen wood and Ultrasuede accents that really gives an upscale feel to the interior. Along with piano black accents around the buttons.

 

tQKqE2a8Sk2sQmMDkoWO8g

I’m zooming on the stitching, wood and aluminum accents that show how well this is all done.  Clearly a lot of time and attention went into this.

mqicXFS9QWGcfAaKJSWUkQ

Bose supplies the audio. I’ll talk about that more in tomorrow’s review of the technology in the vehicle.

XpKLGXtPTwSLrt9EHq+hUg

There are red puddle lights on all the doors for added safety.

TGyVDOQIRauEqVe7gWAH2g

Here on the drivers side of the Mazda6, there’s all the controls for the electronic overseers, the hood, gas cap, and trunk releases. Along with the pedals including a dead pedal. It’s all very functional, but if Mazda wanted to kick things up a notch, they could have included aluminum pedals to give it a bit of a sporty or upscale feel.

oHPmjjZjTvKj1CzkaYx0CA

The driver and passenger get 10 way adjustable nappa leather seats that are heated and cooled. The seats are very supportive as long as you dial it in to fit your body. Once you dial it in, it has memory settings to memorize those settings.

5oARGPK4S%qzggNqYAeLzg

The steering wheel is leather wrapped, heated, and has controls for the infotainment system and cruise controls. You can’t see them here, but there are paddle shifters on the back of the steering wheel. They’re plastic which works. But given the amount of detail that you’re going to see in the rest of the interior, aluminum paddle shifters might kick things up a notch.

 

togIjJ7vSf2qhrnvIItzfA

Though the picture isn’t straight, you can clearly see the gauges. Now the one in the center is completely digital and customizable. The outside gauges are analog.

psnODv8uTI+POdbNFSIctw

The 8″ Infotainment screen is mounted on top of the dash and is easy to read in any light. The start/stop button for the engine is to the left of it.

co0ySNg3Qc6Fz9lVfobLrg

There’s dual zone climate control below the infotainment screen. The display related to this is digital and easy to read in all lighting conditions.

LCcaRWr1T8CwO4GN+ocpiA

There’s a cubby that is below the HVAC controls that fit my iPhone 7 Plus.

eKsNnWcNQIeVGhe2k297Qw

Here you see the leather wrapped shifter, the sport switch, electronic parking brake, a button that holds the brakes on a hill, and the HMI commander switch for the infotainment system. There’s a door to the right of all of that….

5PyZjKOyRf66yPYlQ4XtkA

…..That has a pair of cupholders…..

65wmg2rs6ectnhem1kzgw.jpg

…..which holds a Venti sized Starbucks coffee with ease.

RjisjhvwQZ6XrvNi+v1Urw

There’s a very deep central storage area with a 12V outlet as well as 2 USB ports and a 3.5 mm audio jack. When this is closed, you have a handy arm rest.

3qabt5spRCewUbq72vIVDQ

Why am I showing you the rear view mirror? It’s frameless. What that does is give you a bit more in terms of viewable area. Which in turn gave me amazing amounts of rear visibility.

TUy21Q9PQhqdWFFIXwxo2A

The glovebox is average sized and was occupied the owners manuals.

X5RcaKhcQW+wGUoVkHkz%Q

You get a decent sized moonroof. The glass portion is powered, but the sunshade isn’t. My wife commented that having both powered would have been cool. I can see her point. But that’s really not a deal breaker.

MpwOupt+RDGQ4DL+ksHj7w

The rear seat will fit two adults with ease as I was able to “sit behind myself” which is no small feat as I am 6 feet tall. Three adults may be a stretch if the person who sits in the middle is tall. My wife is 5′ 6″ and her head almost touched the roof in that position. Three kids back here would be no issue.

PFfoecg7QgCB7%1G%wi0jQ

If you don’t need to seat three in the back, you can flip this down and get a couple of cupholders and the controls for the rear heated seats.

B3lvo2JITkyrC9sSfXqM4w

You can also open it for some storage as well as a pair of USB ports.

ltQY4zDfSiSUlcs0PvbsqA

There’s ventilation in the back.

DBmtutUiRrul46b7yrK%qQ

All the interior lighting is LED based which is very upscale and pleasing to the eye.

toW+UZJBSA2Hn3n6TKTyjw

The trunk is very large as well as having the hinges boxed in so that they don’t crush anything beneath them. On the left and right sides are recessed storage areas so that you can keep stuff in there and not have it slide around the trunk.

assXEwfAQda9EMI9yJS0cA

It held our weekly grocery shopping haul with lots of space left over.

EenHgxziTe2AfEy5q+rfmg

There’s a handle on the inside of the trunk that allows you to close it without getting your hands dirty.

This Signature trim level really is impressive. And any criticisms that I mentioned are really minor as these are areas where Mazda could have taken an impressive interior, and made it perfect. To be frank, I’ve been in luxury vehicles that aren’t as good as this. If you spend any time in it, you’ll be impressed as much as I was.

Tomorrow I will discuss the technology in the Mazda6, and there’s a lot of it. Stay tuned!

Zuckerberg’s Appearance In the EU Makes Many Want To #DeleteFacebook

Posted in Commentary with tags on May 23, 2018 by itnerd

If Facebook CEO Mark Zuckerberg was hoping to get an easy ride yesterday in the EU Parliament, it didn’t happen. Many members of Parliament thought he dodged questions and left them high and dry. If that’s true, then his EU charm offensive fell flat. And Facebook has a bit of a problem. Because if the EU wants to make life miserable for Facebook, it can do so easily. Just ask Google or Microsoft.

Perhaps as a bit of free advice to “Zuck” would be to play nice with these people. Answer their questions fully. And make sure they go home happy. Oh by the way, he may want to take a trip to London and answer questions there too. Because right now he needs to make friends and influence people. And he’s not doing a great job of that at the moment.

The FBI “Grossly Inflated” Stats On Investigations Stymied By Encrypted Smartphones

Posted in Commentary with tags on May 23, 2018 by itnerd

The Washington Post is reporting that the FBI who aren’t fans of encrypted smarphones provided Congress with “grossly inflated” statistics on the number of electronic devices it has been been unable to access due to encryption:

The FBI’s initial assessment is that programming errors resulted in significant over-counting of mobile devices reported,” the FBI said in a statement Tuesday. The bureau said the problem stemmed from the use of three distinct databases that led to repeated counting of the same phones. Tests of the methodology conducted in April 2016 failed to detect the flaw, according to people familiar with the work.

And that my friends is a problem because the FBI used those numbers to argue that companies like Apple and Google need to either do away with encryption entirely or create “back doors” for law enforcement. Now the FBI still says that encryption is a problem that needs to be addressed, but they’re going to get few people buying into that after this bit of news.