Tag Archives: This

Zoom security issues leave vendor scrambling

Zoom was caught flatfooted this week by the reaction to a security researcher’s report on the vulnerabilities of a web server it had quietly installed on Apple computers. The debacle raised broader questions on whether unified communications vendors were too quick to sacrifice privacy and security for ease of use.

The Zoom security issue stemmed from the use of the web server as a workaround for a privacy feature on version 12 of the Safari web browser, which Apple released for the Mac last fall. The feature forced users to consent to open Zoom’s video app every time they tried to join a meeting. In contrast, browsers like Chrome and Firefox let users check a box telling them to automatically trust Zoom’s app in the future.

Zoom felt the extra click in Safari would undermine its frictionless experience for joining meetings, so it installed the web server on Mac computers to launch a meeting immediately.

That left Mac users vulnerable to being instantly joined to a Zoom meeting by clicking on a spam link or loading a malicious website or pop-up advertisement. A similar risk still exists for all Mac and PC users who choose to have their web browsers automatically launch Zoom.

Another issue with the Mac web server was that it would remain in place even after users deleted the Zoom app, and would automatically reinstall Zoom upon receiving a request to join a meeting, according to the security researcher. It also created an avenue for denial-of-service attacks, a risk that Zoom released an optional patch for in May.

In a broader sense, the permanent installation of a web server on local devices troubled independent researcher Jonathan Leitschuh, who sparked this week’s events with a blog post Monday.

“First off, let me start off by saying having an installed app that is running a web server on my local machine with a totally undocumented API feels incredibly sketchy to me,” Leitschuh wrote in his public disclosure. “Secondly, the fact that any website that I visit can interact with this web server running on my machine is a huge red flag for me as a security researcher.”

Leitschuh’s disclosure forced Zoom to issue multiple statements as user outrage grew. The security threat received widespread international news coverage, with many headlines containing the chilling combination of “hacker” and “webcam.” In an interview Wednesday, Zoom’s chief information security officer, Richard Farley, said the news coverage caused “maybe some panic that was unnecessary.”

“Part of the challenge for us, of course, is controlling that message out there that this was not as big a deal as it’s been made out to be,” Farley said. “There’s a lot of misinformation that went out there. … People just didn’t understand it.”

Zoom initially tried to assuage fears about the Mac web server without removing it. The company pointed out that it would be obvious to users they had just joined a meeting because a window would open in the foreground and their webcam’s indicator light would flash on. Also, a hacker couldn’t gain access to a webcam in secret or retain access to that video feed after users exited a meeting.  

Ultimately, Zoom reversed its original position and released a software update Tuesday that removed the web server from its Mac architecture. The next day, Apple pushed out a software patch that wiped the web server from all Mac devices, even for users who had previously deleted Zoom.

“We misjudged the situation and did not respond quickly enough — and that’s on us,” Zoom CEO Eric Yuan wrote in a blog post. “We take full ownership, and we’ve learned a great deal.”

Zoom’s default preferences added fuel to the fire. Unless users go out of their way to alter Zoom’s out-of-the-box settings, their webcams will be on by default when joining meetings. Also, Zoom does not by default have a pre-meeting lobby in which users confirm their audio and video settings before connecting.

Zoom said it would release an update over the July 13 weekend to make it easier for new users to control video settings. The first time a user joins a meeting, they will be able to instruct the app to join them to all future sessions with their webcams turned off.

Zoom has also taken heat for allowing embedded IFrame codes to launch Zoom meetings. In a statement, the company said IFrames — a method for adding HTML content to webpages — was necessary to support its integrations.

Leitschuh first raised the security issues with Zoom in March. The company invited him to its private bug bounty program, offering money in exchange for Leitschuh agreeing not to disclose his research publicly. Leitschuh, who said the proposed bounty was less than $1,000, declined because of the demand for secrecy.

Despite clashing over whether to remove the web server, Leitschuh and Zoom were able to agree on the severity of the risk it posed. They gave it a Common Vulnerability Scoring System rating of 5.4 out of 10. That score is in the “medium” range — riskier than “low” but not as severe as “high” or “critical.”

Zoom’s response to Leitschuh’s concerns was an indicator that companies have to verify the security architectures of UC vendors, analysts said.

“This event should be a clear reminder to both vendors and customers using UC and collaboration tools that there are very real threats to their platforms,” said Michael Brandenburg, analyst at Frost & Sullivan. “We are long past the days of only having to worry about toll fraud, and businesses have to be as mindful of the security risks on their UC platforms as they are with any other business application.”

Go to Original Article
Author:

For Sale – MSI B450 Gaming Plus // 3570k, z77, 16gb ram, CPU cooler

Edited to add the MSI b450 Gaming Plus. This board is pretty much brand new with lots of warranty from ebuyer. Bought brand new from eBay a couple of weeks back. Selling because I stupidly bought the full ATX size rather than micro! Electronic receipt can be sent so you’ve got almost the full warranty

I put the processor and ram in before realising but it’s obviously never even been powered on. The board is compatible with Ryzen2 (3000 series) with a bios update. The update can be applied using a usb stick without having to have an older processor in.

£65 for the board + delivery

The original items are still for sale too

CPU: i5 3570k, never been overclocked as I didn’t get round to it
CPU cooler: Cooler Master Hyper 212 EVO
Motherboard: ASRock Z77 Pro4-M
RAM: Crucial 16GB (2x8GB) DDR3-1600

I really don’t want to split, and I’m not sure how I’d package up the CPU and its cooler for postage.

Motherboard comes with its original box.

Perfect bundle for someone wanting to make a good 1080p gaming system.

I’ve said collection only but I can drop it off within about 50 miles too.

Photos will be available after the weekend when I’ve swapped it out for my new stuff

Price and currency: 150
Delivery: Goods must be exchanged in person
Payment method: Bank transfer or cash
Location: Whitley Bay
Advertised elsewhere?: Advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

Go to Original Article
Author:

For Sale – WD My Book 10 TB Desktop Hard Drive – Black

Discussion in ‘Computer Classifieds‘ started by tairo, Jul 6, 2019.

  1. bought this 3 weeks ago and dont really need it right now ,so if it sells so be it

    https://www.amazon.co.uk/Western-Digital-Password-Protection-Software/dp/B07CRZK9BX

    Price and currency: 160
    Delivery: Delivery cost is not included
    Payment method: BT/PPG/Cash
    Location: City of London – Liverpool street station
    Advertised elsewhere?: Not advertised elsewhere
    Prefer goods collected?: I have no preference

    ______________________________________________________
    This message is automatically inserted in all classifieds forum threads.
    By replying to this thread you agree to abide by the trading rules detailed here.
    Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

    • Landline telephone number. Make a call to check out the area code and number are correct, too
    • Name and address including postcode
    • Valid e-mail address

    DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

  2. Jeffp571

    Well-known Member

    Joined:
    Aug 20, 2013
    Messages:
    3,843
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    106
    Location:
    Derry
    Ratings:
    +298

    Does it have warranty and receipt?

    Can offer £140 inc.

  3. yeah just bought it from amazon 3 weeks ago ,i can send it back and get money back so no thanks to £140.

  4. Jeffp571

    Well-known Member

    Joined:
    Aug 20, 2013
    Messages:
    3,843
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    106
    Location:
    Derry
    Ratings:
    +298

    No worries.

  5. Kanduru

    Kanduru

    Active Member

    Joined:
    Jun 11, 2007
    Messages:
    904
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    28
    Ratings:
    +26

    How long is it that you can get a refund for? I am interested but Im thinking of waiting until prime day to see if any interesting deals pop up for 8TB or 10TB

  6. The return window closed today so i opened it up yesterday to check hard drive sectors via hdd tune and all blocks are fine other wise i would have sent it back.
    I will keep it as it will come in handy in the future but i can still sell it if someone wants it if not will archive it over the weekend.

Share This Page

Loading…

Go to Original Article
Author:

For Sale – Transcend Jetdrive Lite 330 256GB SD card, unboxed

For sale is a 256GB Transcend Jetdrive Lite 330 SD card. This is the type that fits flush to the Mac body when fully inserted. Maximum speeds of Write 60MBs/Read 95MBs.

It was used with an early 2015 13″ MacBook Pro (now sold) and is in perfect working condition as well as being in excellent physical condition. I don’t know whether its compatible with any other model of Mac so please do your own research.

Unboxed but will be safely wrapped before posting or you’re welcome to come collect.

Price and currency: £30
Delivery: Delivery cost is included within my country
Payment method: BT or PPG
Location: North Essex
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

Go to Original Article
Author:

For Sale – iMac Pro 3.2GHz 8-core Intel Xeon W processor 64 GB Ram & 2TB Hard drive

Hi,

Before I put this on the bay I thought I would try here first as prefer to sell to a forum member whenever possible.

I bought this last week in an auction, it’s brand new but I have taken it out of the box and checked it out as I had planned to use on a job that has now altered and it’s no longer needed. The mouse and keyboard are still in packaging and completely unused.

Specs:

IMac Pro

  • 3.2GHz 8-core Intel Xeon W processor, Turbo Boost up to 4.2GHz
  • 64GB 2666MHz DDR4 ECC memory
  • Radeon Pro Vega 56 with 8GB of HBM2 memory
  • 2TB SSD storage
  • Magic Mouse 2 – Space Grey
  • Magic Keyboard with Numeric Keypad – British – Space Grey

It’s obviously still in warranty plus it has Apple Care + so it’s covered for three years as from a July 1st 2019.

To buy new from Apple it would cost £5799, I paid £4600 last week but looking for £3800 ono for a quick sale. Just to reiterate this item was brand new unopened last week and has only been opened to check and prepare for a job that then cancelled.

You can see from my feedback I have an excellent record plus I have been a member on here since 2001.

Collection would be best (I am in West Sussex) but could arrange delivery if that is only option.

Happy to answer any questions etc. Will give it a day or two and then advertise elsewhere. can upload photos tomorrow.

Screenshot 2019-07-08 at 08.44.12.png

Price and currency: 3800
Delivery: Delivery cost is not included
Payment method: Bank transfer
Location: West Sussex
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

Go to Original Article
Author:

For Sale – Transcend Jetdrive Lite 330 256GB SD card, unboxed

For sale is a 256GB Transcend Jetdrive Lite 330 SD card. This is the type that fits flush to the Mac body when fully inserted. Maximum speeds of Write 60MBs/Read 95MBs.

It was used with an early 2015 13″ MacBook Pro (now sold) and is in perfect working condition as well as being in excellent physical condition. I don’t know whether its compatible with any other model of Mac so please do your own research.

Unboxed but will be safely wrapped before posting or you’re welcome to come collect.

Price and currency: £35
Delivery: Delivery cost is included within my country
Payment method: BT or PPG
Location: North Essex
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

Go to Original Article
Author:

For Sale – SilverStone HTPC case, SST-LC13B-E in black

This is a stylish HTPC case with fold down front and loads of space for hard drives. This is a reluctant sale but it doesn’t fit in a new tv cabinet. The space inside this case is cavernous, but it does mean the case is huge so please check the dimensions carefully!

The case can house a full size ATX and micro-ATX boards, full size ATX PSU, 2 external 5.25” and 3.5” bays, and 4 internal 3.5” bays. Comes with 2 80mm fans at the rear with space for a further 80mm fan and at the front and on the side. The front panel includes 2 USB 3.0 and a IEEE1394 ports along side audio and mic connectors, all behind the front fold down cover. This case has it all and could easily house a gaming rig if required.

Now the important bit, dimensions: 430 x 171.5 x 439.6mm (W, H, D).

It will come in the original box with a bag of bolts and connectors.

Cost £60 collected from Bristol, postage will cost an additional £8.40 by My Hermes, fully insured

Price and currency: 60
Delivery: Delivery cost is not included
Payment method: cash on collection, bank transfer or PayPal
Location: Bristol
Advertised elsewhere?: Advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

Go to Original Article
Author:

How to Provide PaaS Services with Azure Stack

On this post, we’re going to be getting into some talk about PaaS with Azure Stack, but before we get into that, let’s see where we’ve been thus far!

Our Microsoft Azure Stack Series So Far

  1. An Introduction to the Microsoft Hybrid Cloud Concept and Azure Stack
  2. How to Install the Azure Stack Development Toolkit (ASDK)
  3. The Ultimate Azure Stack Post-Installation Checklist
  4. How to Provide IaaS Images with Azure Stack

What is PaaS (Platform as a Service)

Now that we’re diving deeper into cloud technologies, we can easily recognize that Infrastructure as a Service is not the best use-case for getting the most out of Azure Stack. With what we’ve covered so far, Azure Stack can really be seen as just more VM technology behind Virtual Machine Manager (VMM). But Platform as a Service can really bring a more dynamic and elasticity capabilities to services running in your cloud. There is no need to manage the underlying infrastructure and is highly available by default in general.

What is PaaS

Azure Stack PaaS is a special flavor because as of today the currently existing resource providers rely upon linking to an existing environment that could either be part of Azure Stack (if we talk about virtual machines that are responsible for the PaaS service itself) or a physical environment that sits outside of Azure Stack.

If you create a database “as a service” in Azure Stack, it will be deployed on this environment and you should take care to manage and back up the PaaS associated VMs themselves. They are not auto-deployed and self-managed like in Azure Public. So while they ARE providing PaaS services to those people and workloads connecting to them, you still need to manage them.

Another thing to keep in mind is that the PaaS solutions are not part of the default Azure Stack setup that is being deployed from the Hardware vendor (Remember that a true Azure Stack deployment will be handled by the hardware vendor), it is optional and needs to be ordered via separate SKUs.

PaaS Solutions in Azure Stack

Azure Stack as of today comes with the following PaaS solutions:

  1. Microsoft SQL Server
  2. MySQL Server
  3. App Services

If you deploy them using the Script from Matt McSpirit, they are part of the deployment by default. Please have in mind that the MS SQL and the MySQL resource providers have completely different APIs than the Azure ones. This means that your automation scripts behave completely different and consistency may be an issue currently.

Microsoft SQL Server on Azure Stack

Resource provider for Microsoft SQL

As you can see, the underlying SQL Server infrastructure is a set of SQL Servers (up to release 2017) on Windows Server or even on Linux (if you’d like) for placement of you PaaS databases.

The deployment itself is being done using the DeploySqlProvider.ps1 script (from the resource provider link above), that performs the following tasks:

  • Certificate and artifact upload to the Azure Stack storage account
  • Publishing gallery items to be able to deploy SQL using the gallery
  • Deploying the SQL resource provider VM which is a Windows Server 2016 core based one
  • Registers a local DNS record that maps to your resource provider VM.
  • Registers your resource provider with the local Azure Resource Manager for the operator account.

NOTE: Please keep in mind, that the registration of the SQL Server resource provider may take up to 75 min on the Azure Stack environment.

To double check if the deployment finished properly you should check this in the .system..sqladapter resource group in your Azure Stack Amin Portal:

Microsoft SQL Server on Azure Stack

Finally, we will need to connect to the existing SQL Server environment (so-called hosting servers) to define the location for the created databases via this resource provider. Basically, we’ll be telling Azure Stack where to put new Databases when Azure Stack users request a new one!

Microsoft SQL Server on Azure Stack 2

You will find the entry for the SQL Hosting Servers under administrative resources and add new server environments:

Microsoft SQL Server on Azure Stack

Fill out the form as shown above.

After having created the corresponding SKUs, it may take up to 30 min to recognize and be able to use them in a proper manner in the environment.

You should now be able to create a first PaaS database using the wizard in the Azure Stack!

MySQL on Azure Stack

The resource provider for MySQL is available in its most recent version here:

If you have a look into the deployment guide, you will shortly recognize that the deployment steps are quite like what we went through above for the Microsoft SQL Server resource provider. The name of the script meanwhile changed a little bit to DeployMySqlProvider.ps1 and even the deployment steps are the same.

Most of you know MySQL as a database environment sitting on a Linux operating system. This is where the resource provider is somehow different as it relies on Windows Server-based MySQL resources.

After having deployed the resource provider you could simply add the MySQL hosting server, define the SKUs and deploy the first databases on your MySQL server environment just like we showed for Microsoft SQL above.

App Services on Azure Stack

The App Services resource provider is one which should be quite familiar with what you may already know from public Azure.

The options with the App Services resource provider are:

  1. Web Apps
  2. Mobile Apps
  3. Function Apps

Therefore, the use-cases are a bit broader compared to the SQL options mention thus far.

Looking into the deployment guide, the setup is more GUI based and quite simple. You can run the deployment using the appservice.exe installer that collects all requirements and lets you define the required parameters before starting the installation itself.

The requirements besides a few basic parameters are:

  • Microsoft SQL Database (e.g. via the MS SQL resource provider)
  • Windows File Server

After the installation has finished, the appropriate resources will show up in the portal.

App Services on Azure Stack

Having this done, the resource provider for App Services is up and running and can be used in your environment.

PaaS Use Cases on Azure Stack

After having installed all available resource providers for Azure Stack, you will be able to provide these services to your tenants using Plans and Offers. They are now able to deploy e.g. a WebApp as their services frontend with a SQL server-based backend.

Looking into hybrid cloud environments using Azure and Azure Stack, one part of the solution architecture may reside on Azure Stack (e.g. database) and the frontend on public Azure to be nearer to the customer itself or vice versa depending on the solution requirements. The only requirement would be again to have networking connectivity between both environments.

One other thing to note, regarding the Azure Stack Update cycles, you should have in mind that Azure Stack updates do not include updates for PaaS solutions. These need to be done manually and based on their availability. As the last months showed, the updates always included new features. So, I would say it is mandatory to follow the cycle. Regarding the update tasks, see the corresponding resource provider download as mentioned in this article. They should include a description and will show you how the update has to take place.

Wrap-Up

How are you liking Azure Stack so far? Have you found it easy to use? Difficult? Have you run into anything not covered yet in this series? We’d love to know in the comments section below.

Thanks for reading!

Go to Original Article
Author: Markus Klein

For Sale – Asus GTX 1060 3GB and Zotac 1060 6gb and Corsair RM1000i Psu

Bought 12th Jan this year from amazon so still under warranty
Asus Gtx 1060 3gb
Excellent condition with original box £120
Also Zotac Gtx 1060 6gb bought from AWD IT on 11th Jan this year original box excellent condition £160
Also Corsair RM1000i Fully Modular Psu bought 15th Jan from Amazon
Original box and all leads excellent condition £110
Collection prefered but will post

Price and currency: 120,160,110
Delivery: Delivery cost is included within my country
Payment method: cash on collection or BT
Location: Sandbach
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – REDUCED – £260 – MacBook Pro 13.3″, Early-2011, 2.4GHz i5, 4GB, 320GB HDD

About time I got round to selling this! A trusty old MacBook Pro 13.3” with original charger but in excellent condition.

Its an Early-2011, 2.4GHz i5, 4GB RAM and 320GB HDD. Battery is “Normal” and at just 317 cycles – not been used a great deal!

Has been kept in a case when not in use but does have some minor scratches – pretty good considering its age. The screen is unmarked. Please see pics – if you require any more please ask.

Currently running a clean install of El Capitan with known Admin account and password but could be easily reset.

I thought about fitting an SSD and upping the RAM to transform it into a semi decent laptop but I never bothered – am always atttacted to shiny newer models!

Not looking to trade – straight sale.

Ideally you will collect so you can try it out but will consider posting at additional cost – RMSD would add around £28.

Was £375, then £300, then £275 – NOW £260 – but not too far off this please!

Price and currency: £260
Delivery: Delivery cost is not included
Payment method: PPG, BT or cash on collection
Location: Saffron Walden
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.