Security Advisory / Vulns / 0day

[MYstIC G]

It depends tho, innit - Ideally yes, your clients should be able to digest x265/x264 and mkv container, and avoid having to transcode alltogether. But it's not like that in most cases - you have a mix of clients (TV, tablet, phone, etc), some capable enough to direct play, some not.

Therefor, transcoding capability on the NAS / media server side should exist.

Plus, media comes in wildly different combos of resolution, bitrate, codec, container - you'd be hard pressed to be in a situation where your clients can seamlessly direct play everything you throw at them.

Additionally, if you stream content to friends / relatives, it gets even more complicated.

The basic and simple transcoding capability would be with a QSV Intel cpu, not an option in my case, as I have old Xeon cpu in my nas - so I just threw in a dedicated nvidia gpu (P400 originally, now P2000), which does the job with ease. Not to mention re-encoding takes a _lot_ of time and power consumption.

Don't agree to be honest, will say I meant encode not re-encode, better to pick right first

 

[Embattle]

In my system I just pick the most supported format, probably except a few 4k MKV's it works on everything in the house.

 

[old.Osy]

Intel discloses 34 security holes in firmware and software — Thunderbolt, XTU, chipset drivers, and more

All but one have been patched.

www.tomshardware.com

 

[Deebs]

Fucking hell. Does management still ignore their security teams?

 

[old.Osy]

Power Toys: Conflict Zone Edition.

 

[old.Osy]

Epic Games Allegedly Hacked - Targeted for Ransomware

Unconfirmed reports suggest that Epic Games, the company behind Fortnite, may be the target of a ransomware attack by a relatively unknown hacker group called Mogilvich.

www.guru3d.com

 

[old.Osy]

oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise

And context: Very annoying - the apparent author of the backdoor was in communication with me... | Hacker News

 

[Deebs]

oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise

And context: Very annoying - the apparent author of the backdoor was in communication with me... | Hacker News

Thank fuck I still use telnet so not impacted by this

 

[old.Osy]

Over 92,000 exposed D-Link NAS devices have a backdoor account

A threat researcher has disclosed a new arbitrary command injection and hardcoded backdoor flaw in multiple end-of-life D-Link Network Attached Storage (NAS) device models.

www.bleepingcomputer.com

 

[old.Osy]

Fuck you none the less, Broadcom:

https://blogs.vmware.com/cloud-foundation/2024/05/14/vmware-desktop-hypervisor-pro-apps-now-available-for-personal-use/

 

[Scouse]

Noice. But unfortunately, I've no more use cases for a personal PC than games n browsin'. So I uninstalled my cracked wankstation pro a while back

 

[old.Osy]

MSN

 

[old.Osy]

New Linux malware is controlled through emojis sent from Discord

A newly discovered Linux malware dubbed 'DISGOMOJI' uses the novel approach of utilizing emojis to execute commands on infected devices in attacks on government agencies in India.

www.bleepingcomputer.com

 

[Embattle]

High-severity vulnerabilities affect a wide range of Asus router models

Many models receive patches; others will need to be replaced.

arstechnica.com

 

[GReaper]

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

A couple of bits of good news though - it's harder to exploit on 64 bit systems, and older systems won't be impacted.

 

[old.Osy]

Microsoft tackles catastrophic global IT outage as 'CrowdStrike' security blames update bug for grounded flights and more

Bugs in 'CrowdStrike' security software updates trigger Blue-Screen-of-Death (BSOD) issues for airlines, TV networks, and more.

www.windowscentral.com

 

[Jupitus]

Microsoft tackles catastrophic global IT outage as 'CrowdStrike' security blames update bug for grounded flights and more

Bugs in 'CrowdStrike' security software updates trigger Blue-Screen-of-Death (BSOD) issues for airlines, TV networks, and more.

www.windowscentral.com

I've had a painful day

 

[Embattle]

I've had a painful day

Did an ant take your lunch money

 

[Jupitus]

Did an ant take your lunch money

Fuck you!

 

[Deebs]

@Embattle don't be silly, an ant accidentally stepped on @Jupitus ' left foot.

 

[Deebs]

Knew he sent me a pic of him with some friends.

 

[Jupitus]

Twat

 

[old.Osy]

Did you have loads of barebones, or mostly VMs?

 

[Jupitus]

Did you have loads of barebones, or mostly VMs?

Ours were mainly supporting systems, we're mostly Linux, but the fucked us up...

 

[MYstIC G]

Did an ant take your lunch money

Those power buttons are pretty far up on tower cases...

 

[old.Osy]

https://routerkb.asuscomm.com/?page_id=14282&lang=en

 

[Embattle]

https://routerkb.asuscomm.com/?page_id=14282&lang=en

Hopefully the XT12 will get it.

 

[old.Osy]

Well, shit.

End of the Road: An AnandTech Farewell

www.anandtech.com

 

[MYstIC G]

Well, shit.

End of the Road: An AnandTech Farewell

www.anandtech.com

Suppose it's hard to justify them both if they've also got Tom's Hardware in the portfolio

 

[old.Osy]

Malware infiltrates Pidgin messenger’s official plugin repository

The Pidgin messaging app removed the ScreenShareOTR plugin from its official third-party plugin list after it was discovered that it was used to install keyloggers, information stealers, and malware commonly used to gain initial access to corporate networks.

www.bleepingcomputer.com