https://www.aparat.com/v/Umlw9
on aparat

Yet Another Sudo Vulnerability!

When 'pwfeedback' is enabled, a new Sudo bug could let low privileged Linux & macOS users (or malicious programs) execute arbitrary commands with 'root' privileges.

Details for CVE-2019-18634 ➤ https://thehackernews.com/2020/02/sudo-linux-vulnerability.html

Less Love for FOSS Qt Users

From Qt 5.15, The Qt Company make their offering a bit more inconvenient for FOSS users. They announced three changes:

A Qt account is mandatory to download binary Qt packages. The offline installer is not available to FOSS users any more.
LTS (long-term support) releases are not available to FOSS users, once the next minor or major release is out.
Small business pay 499 USD per year, if their yearly revenue is less than 100,000 USD and they have less than five employees.

What do these changes mean for the development of Qt embedded Linux systems under LGPLv3?

https://www.embeddeduse.com/2020/02/02/less-love-for-foss-qt-users/

Murphy's law. Whatever can go wrong will go wrong.

A "technical error" in Google Takeout service accidentally shared private videos (uploaded to Google Photos) of some users with other accounts.

https://thehackernews.com/2020/02/google-photos-videos.html

And here's a time-lapse of how you can mess everything up so you'll have something to fix for tomorrow!

Full video is being uploaded, you can find it in the playlist soon.

WhatsApp for Web and Desktop contained multiple vulnerabilities, which, when combined together, could have even allowed remote attackers to read files from a victim's local file-system just by sending messages.

Read details: https://thehackernews.com/2020/02/hack-whatsapp-web.html

This man fooled Google Map to think there's traffic in Berlin by putting 99 cellphones in a basket.

@webpp

Join @webpp_discuss if you have any questions.

Interesting! Researchers demonstrated a new clever technique to covertly exfiltrate sensitive data from a targeted Air-Gapped computer using the brightness of an LCD screen.

Read details: https://thehackernews.com/2020/02/hacking-air-gapped-computers.html

Yesterday was 3hrs of coding with no result. Hope it was a building blocks of today's work.

Air-Gapped Popular Data Exfiltration Techniques

The only way to make sure your data is safe, is not to create the data in the first place.

https://thehackernews.com/2020/02/hacking-air-gapped-computers.html

3hours video of the live coding. It seems aparat only shown first 30 mins for some unknown reason!

https://www.aparat.com/v/kPq2n

Here's the full video in youtube:
https://youtu.be/W9qYYFHcm2k

And here's another one:
Runtime vs. Compile-time
https://www.aparat.com/v/84dbZ

I remember wanting to make something like asciinema, then I found out someone already made it.
Next video is being recorded in asciinema and will be released soon.

https://asciinema.org/

Here's today's session, but you have to use asciinema to play it. The file is too big to be able to convert it into gif or svg; even though it's just 18MiB for about 48mins.

You could use this command (after you installed asciinema) to play it:

asciinema play -s 3 LiveCoding-webpp-2020-Feb-8.cast

Change the "-s 3" for changing the speed.

And make sure to play it in full screen and if it's messy, try to make your terminal's font smaller until it fits.