[PLUG] 8 yr old vuln, fd, air-gapped leak

[jeffv via plug <plug@lists.phillylinux.org>]

ETHERLED: Air-gapped systems leak data via network card LEDs

https://www.bleepingcomputer.com/news/security/etherled-air-gapped-systems-leak-data-via-network-card-leds/

leverage a covert ultrasonic channel to leak sensitive information from 
isolated, air-gapped computers to a nearby smartphone that doesn't even 
require a microphone to pick up the sound waves.
New Air-Gap Attack Uses MEMS Gyroscope Ultrasonic Covert Channel to Leak 
Data

https://thehackernews.com/2022/08/new-air-gap-attack-uses-mems-gyroscope.html



"As Nasty as Dirty Pipe" — 8 Year Old Linux Kernel Vulnerability Uncovered

https://thehackernews.com/2022/08/as-nasty-as-dirty-pipe-8-year-old-linux.html

"DirtyCred is a kernel exploitation concept that swaps unprivileged 
kernel credentials with privileged ones to escalate privilege," 
researchers Zhenpeng Lin, Yuhang Wu, and Xinyu Xing noted. "Instead of 
overwriting any critical data fields on kernel heap, DirtyCred abuses 
the heap memory reuse mechanism to get privileged."



fd – A Simple and Fast Alternative to Find Command

https://www.tecmint.com/fd-alternative-to-find-command/



Universal Unix tool AWK gets Unicode support

https://www.theregister.com/2022/08/23/universal_unix_tool_awk_gets/




Computers vs. TV: Which is less likely to promote dementia?

https://arstechnica.com/science/2022/08/using-a-computer-may-be-a-somewhat-better-form-of-being-sedentary/

[it will eventually be shown that non-sedentary living shortens lifespan]

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug