Telecom and Networking

http://arstechnica.com/security/2016/08/linux-bug-leaves-usa-today-other-top-sites-vulnerable-to-serious-hijacking-attacks/ There is a serious problem in new TCP feature designed to prevent hacking: it makes possible to make easily man-in-the-middle type attacks from anywhere. Feature is built into Linux kernel 3.6-4.7 (patch on newest version available). https://www.rt.com/usa/355558-linux-vulnerability-websites-attacks/ At the symposium, the researchers demonstrated the exploit by injecting code into a live USA Today page →

https://www.linkedin.com/pulse/understanding-ssl-usage-country-john-matherly?trk=hp-feed-article-title-like Nice report on SSL usage situation in real world. →

https://www.linkedin.com/pulse/why-trusted-interfaces-should-mandatory-critical-sergiu?trk=hp-feed-article-title-like Check out this article to understand Network of Things security. →

http://www.geek.com/news/comcast-says-privacy-is-a-premium-feature-you-should-pay-for-1664668/ Some ISPs seem to want to spy users for profit from collected information – if you want to opt out from that they think you should pay extra. →

http://securityaffairs.co/wordpress/47179/hacking/hacking-ss7-protocol.html This article shows how to abuse SS7 to hack SMS authentication. →

http://fortune.com/2016/08/02/telegram-hackers-iran/ The use of SMS verification seems to be the weak link here. The SMS messages are not secure enough. →

http://www.zdnet.com/article/nist-blog-clarifies-sms-deprecation-in-wake-of-media-tailspin/ NIST wants two-factor-authentication to be widely used – but does not want SMS to be a factor in this. There are good reasons for both recommendations. →

http://spectrum.ieee.org/tech-talk/telecom/internet/how-charles-kao-beat-bell-labs-to-the-fiberoptic-revolution?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+IeeeSpectrum+%28IEEE+Spectrum%29&utm_content=FaceBook Interesting article on the history of fiber optics. →

http://www.open-electronics.org/track-internet-dropouts-monitor-adsl-bandwidth-and-notify-your-isp-with-rpi/?utm_content=buffer2f63f&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer Nice project that shows how you can monitor the quality of your Internet connection and automatically report problems. →

I have earlier written about Lightning protection and ADSL overvoltages and protection in this blog. And I have published several surge protection documents at ePanorama.net documents section. What about Ethernet line surge protection? Ethernet ports as they are are pretty well protected as they are compared to many other computer ports: Ethernet ports are transformer →