Friday Security Brief

This release is trial for a weekly security brief compiled from trusted sources that encourage a general awareness of cyber security issues. I'm still not sure about how to do this so any thoughts or feedback will be appreciated.

Brexit deal mandates a limit to security standards

"In what is surely an unthinking cut-and-paste issue, page 921 of the Brexit deal mandates the use of SHA-1 and 1024-bit RSA:"

Brexit Deal Mandates Old Insecure Crypto Algorithms ~ Schneier on Security

FBI Warns of Hijacked Security Devices being exploited for Swatting

"Stolen email passwords are being used to hijack smart home security systems to “swat” unsuspecting users, the Federal Bureau of Investigation warned this week. The announcement comes after concerned device manufacturers alerted law enforcement about the issue."

FBI Warn Hackers are Using Hijacked Home Security Devices for Swatting ~ Threatpost

A look back at some email attacks of 2020

"In 2020, our spam folders bulged with malware-laced emails, phishing lures linking to ransomware schemes, impersonation attacks, spoofed brand and fake domain missives, and dubious requests from legit-sounding companies. So, what defined 2020 in spam?"

Inbox Attacks: The Miserable Year (2020) That Was ~ Threatpost

SolarWinds hackers accessed Microsoft source code

"The hackers behind the SolarWinds supply chain attack managed to escalate access inside Microsoft's internal network and gain access to a small number of internal accounts, which they used to access Microsoft source code repositories, the company said on Thursday."

SolarWinds hackers accessed Microsoft source code ~ Zdnet

CISA updates SolarWinds guidance

"The US Cybersecurity and Infrastructure Security Agency has updated its official guidance for dealing with the fallout from the SolarWinds supply chain attack.

In an update posted late last night, CISA said that all US government agencies that still run SolarWinds Orion platforms must update to the latest 2020.2.1HF2 version by the end of the year."

CISA updates SolarWinds guidance, tells US govt agencies to update right away

What have you been listening to this week? You don't need to do a 6000 word review if you don't want to, but please write something! If you've just picked up some music, please update on that as well, we'd love to see your hauls :)

Feel free to give recs or discuss anything about each others' listening habits.

You can make a chart if you use last.fm:

http://www.tapmusic.net/lastfm/

Remember that linking directly to your image will update with your future listening, make sure to reupload to somewhere like imgur if you'd like it to remain what you have at the time of posting.

As part of a weekly series, these topics are a place for users to casually discuss the things they did — or didn't do — during their week. Did you accomplish any goals? Suffer a failure? Do nothing at all? Tell us about it!

Thats all the languages I know. Please expand! I wish you all a happy new years and that next year is gonna be (even) better ;-)

I'm really greatful to be part of this community, one of the brigtest spots of friendlyness and respect in the wide internet :-) thank you all!

Important: This will be a noisy thread. If you do not wish to see it in your feed, please use the "Ignore" feature to hide it!

2021

Enough has been said about 2020 — let’s put some good out into the world in the form of game giveaways as we welcome a new and hopefully brighter year!

Gifters

Post your available games, the platform and method of delivery, rules for your giveaways (e.g. first-come first-serve, random draw, etc.), and any additional info or requirements. Feel free to get creative!

Giftees

Request giveaways according to the gifter's guidelines!

Rules

Anyone can choose to be a gifter, giftee, or both! Giveaway rules are set by individual gifters, but there are handful of guidelines everyone should follow:

• No grey market keys! Only giveaway games from reputable sources. If you're not sure what this means, please ask.

• Requests for games should be done in the thread, but if the gift is a key, those should be delivered by PMs only. Please don't post keys publicly, even obfuscated ones.

What have you been doing lately for your own fitness? Try out any new programs or exercises? Have any questions for others about your training? Want to vent about poor behavior in the gym? Started a new diet or have a new recipe you want to share? Anything else health and wellness related?

I think we are all looking to 2021 as a bright spot after the last year has disrupted normal life for basically everyone. Is there anything you learned, or discovered about yourself, or found in the your lockdown routine that you wish to carry forward? Perhaps something that you intend to leave in the "old" way of the world? I'll share my reflections below.

This year has given me ample opportunity to reflect on the things that are valuable to me, particularly because of how much time I spent doing nothing. That isn't to say I wasted my time --- I moved to a across the US, started a new job working full time, spent 10 months of the year researching and writing my Master's thesis and subsequently defending, and started planning a wedding. It was a hectic year, and the downtime was critical.

All of this culminates to the last few weeks, where I have gained tremendous clarity in two places. One, I was gifted this modern and straightforward Bible and another book about craftsmanship. I have found myself reading little sections of both each day. This is a practice I aim to continue through the New Year:

• Reading something in a book, no matter how much or how little, and reflecting on it.

The second item of clarity is that I really miss playing music. So,

• I have decided to learn the piano.

I was deeply steeped in concert music during high school, where my school's band played in national showcases and competitions. I practiced on average around 4-6 hours each day. I let that practice go in college, and am now keen to rekindle it. It helps that during the holiday season I am with my parents, who have an upright piano (that no one ever plays), so I can practice a bit before buying a keyboard of my own.

So, with these intentions, I am not seeking to make radical changes in my life, but rather to spend 30-60 minutes on something that is deeply meaningful to me.

What have you been watching and reading this week? You don't need to give us a whole essay if you don't want to, but please write something! Feel free to talk about something you saw that was cool, something that was bad, ask for recommendations, or anything else you can think of.

If you want to, feel free to find the thing you're talking about and link to its pages on Anilist, MAL, or any other database you use!

It's been a hell of a year but we've just about made it, even managing to keep some sports going through it all. How about we look back at the best, the worst, the biggest, the weirdest stories of 2020? Even with keeping my eye on the weekly round-up threads, I know I've missed more than a few.

This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?