Interferometry

xkcd # 1922

## Friday, December 1st - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - They end Tuesday, but we expect to have a few more next week - [HW 11: format print attack](../hws/hw11-format.html) is due next Tuesday, December 5th - UVa prevents us from extending the deadline past next Tuesday, so we won't do that. No exceptions! - However, everybody now gets three free "late days" to use on future assignments - These are handled after the fact, so it will still report as "late" on Wednesday - Grading! - HWs 5-7 and 9 have been returned (all but HW 8: RSA); grading guidelines on Colalb - Regrades are open for only 7 days! - The final is now moving to the last day of class -- next Monday! - More on this on the next slide - Today we will finish with the [course reflection](../slides/course-reflection.html#/) ## Final exam - It's next Monday, December 4th, during class time - That mean's it's a 50 minute exam - We will not have daily announcements or anything else then - Just the taking of the final - While it's cumulative, them vast majority will be on the content since the midterm - I expect the length to be about the same as the midterm - Thus, you may have to write quickly... - There will be a word limit - The questions are asking if you can answer them *concisely* - We hope to have it graded later in the week

The Moon and the Great Wall

xkcd # 1921

## Wednesday, November 29th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - [HW 11: format print attack](../hws/hw11-format.html) is due next Tuesday, December 5th - UVa prevents us from extending the deadline past next Tuesday, so we won't do that. No exceptions! - However, everybody now gets three free "late days" to use on future assignments - These are handled after the fact, so it will still report as "late" on Wednesday - Grading! - HWs 5-7 and 9 have been returned (all but HW 8: RSA); grading guidelines on Colalb - Regrades are open for only 7 days! - The final is now moving to the last day of class -- next Monday! - Today we will wrap up [exploits](../slides/15-exploits.html#/) - Friday will be the last day of actual lecture (since the final is next Monday)

Emoji Sports

xkcd # 1920

## Monday, November 27th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - He will have them also from 11-12 today (room ...) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - [HW 10: buffer overflow](../hws/hw10-buffer-overflow.html) is due today, Monday, November 27th - [HW 11: format print attack](../hws/hw11-format.html) is due next Tuesday, December 5th - Grading! - HWs 5-7 and 9 have been returned (all but HW 8: RSA); grading guidelines on Colalb - Regrades are open for only 7 days! - The final is now moving to the last day of class -- next Monday! - Today we will continue with [exploits](../slides/15-exploits.html#/), starting [here](../slides/15-exploits.html#/4/16)

How To Make Friends

xkcd # 1917

## Monday, November 20th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - We won't have them Wednesday through Friday of this week - We are looking into extra office hours the Monday after Thanksgiving - [HW 10: buffer overflow](../hws/hw10-buffer-overflow.html) is due Monday, November 27th - [HW 11: format print attack](../hws/hw11-format.html) is due ??? - Grading! - HWs 1-4 have been returned previously - We are aiming to have HWs 5-9 returned once we get back from Thanksgiving - The final is now moving to the last day of class - Today we will start on [exploits](../slides/15-exploits.html#/) - A bit of news from the last lecture: [Windows 8 and Later Fail To Properly Apply ASLR](https://it.slashdot.org/story/17/11/17/207239/windows-8-and-later-fail-to-properly-apply-aslr)

Temperature Preferences

xkcd # 1915

## Friday, November 17th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - We won't have them Wednesday through Friday of next week - We are looking into extra office hours the Monday after Thanksgiving - [HW 10: buffer overflow](../hws/hw10-buffer-overflow.html) is due Monday, November 27th - There will be a HW 11, also... - Grading! - HWs 1-4 have been returned previously - We are aiming to have HWs 5-9 returned once we get back from Thanksgiving - The final is now moving to the last day of class - Today we will continue with [Buffer overflows](../slides/14-buffer-overflows.html#/), starting [here](../slides/14-buffer-overflows.html#/3/6) - Next up: [Exploits](../slides/15-exploits.html#/)

<h2>Temperature Preferences</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/temperature_preferences.png" title="There's a supposed Mark Twain quote, "The coldest winter I ever spent was a summer in San Francisco." It isn't really by Mark Twain, but I don't know who said it—I just know they've never been to McMurdo Station." alt="Temperature Preferences" srcset="http://imgs.xkcd.com/comics/temperature_preferences_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1915/">xkcd # 1915</a></p> ## Wednesay, November 15th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 9: Hashes](../hws/hw9-hashes.html) is out, and due today (Nov 15th) - One task in this homework takes many hours to run on your PC, so don't wait until the last minute! - [HW 10: buffer overflow](../hws/hw10-buffer-overflow.html) is out -- when should it be due? - Keep in mind that there will be one more homework! - Grading! - HWs 1-4 have been returned previously - HWs 5-8 are being graded - The midterm has been returned, grading guidelines on Collab, regrades open until November 13th - The final is now moving to the last day of class - Today we will continue with [Stuxnet](../slides/13-stuxnet.html#/), starting [here](../slides/13-stuxnet.html#/4) - Next up: [buffer overflows](../slides/14-buffer-overflows.html#/)

<h2>Twitter Verification</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/twitter_verification.png" title="When we started distributing special status tokens that signify which people are important enough to join an elite group, we never could have imagined we might be creating some problems down the line." alt="Twitter Verification" srcset="http://imgs.xkcd.com/comics/twitter_verification_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1914/">xkcd # 1914</a></p> ## Monday, November 13th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 9: Hashes](../hws/hw9-hashes.html) is out, and due this Wednesday (Nov 15th) - One task in this homework takes many hours to run on your PC, so don't wait until the last minute! - HW 10 will be out by Wednesday, and due before Thanksgiving - Grading! - HWs 1-4 have been returned previously - HWs 5-8 are being graded - The midterm has been returned, grading guidelines on Collab, regrades open until November 13th - The final is now moving to the last day of class - Today we will continue with [rootkits](../slides/12-rootkits.html#/), starting [here](../slides/12-rootkits.html#/3/14) - Next up: [Stuxnet](../slides/13-stuxnet.html#/)

<h2>A �</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/i.png" title="If you want in on the fun, map a key on your keyboard to the sequence U+0041 U+0020 U+FFFD (or U+0021 U+0020 U+FFFD for the exclamation point version), and then no update can never take this away from you." alt="A �" srcset="http://imgs.xkcd.com/comics/i_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1913/">xkcd # 1913</a></p> ## Friday, November 10th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 9: Hashes](../hws/hw9-hashes.html) is out, and due next Wednesday (Nov 15th) - One task in this homework takes many hours to run on your PC, so don't wait until the last minute! - Grading! - HWs 1-4 have been returned previously - HWs 5-7 (and, shortly, 8) are being graded - The midterm has been returned, grading guidelines on Collab, regrades open until November 13th - The final is now moving to the last day of class - Today we will start on [rootkits](../slides/12-rootkits.html#/)

<h2>Thermostat</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/thermostat.png" title="Your problem is so terrible, I worry that, if I help you, I risk drawing the attention of whatever god of technology inflicted it on you." alt="Thermostat" srcset="http://imgs.xkcd.com/comics/thermostat_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1912/">xkcd # 1912</a></p> ## Wednesday, November 8th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - A few additional [randomness slides](../11-encryption.html#/randomness) were added since Friday's lecture... - [HW 8: RSA](../hws/hw8-rsa.html) is out, and due today (Wednesday, Nov 6th) - [HW 9: Hashes](../hws/hw9-hashes.html) is out, and due next Wednesday (Nov 15th) - One task in this homework takes many hours to run on your PC, so don't wait until the last minute! - Grading! - HWs 1-4 have been returned previously - HWs 5-7 (and, shortly, 8) are being graded - The midterm has been returned, grading guidelines on Collab, regrades open until November 13th - The final is now moving to the last day of class - Today we will likely finish with [encryption](../slides/11-encryption.html#/), starting [here](../slides/11-encryption.html#/7/8) - [An interesting source of randomness](https://it.slashdot.org/story/17/11/07/1927239/how-cloudflare-uses-lava-lamps-to-encrypt-the-internet) for encryption... - Next up: [rootkits](../slides/12-rootkits.html#/) ## Badness of the day: RSA algorithm vulnerability - A company called [Infineon](https://www.infineon.com/) develops smart cards that can generate RSA keys - They also have develped a [RSA library](https://www.commoncriteriaportal.org/files/epfiles/0782V2a_pdf.pdf) to run on that smart card (and other hardware) - The prime generation code has a weakness - To boost performance, they "construct the keys' underlying prime numbers in a way that makes the keys prone to" factorization - How long would that take on a commercial cloud service? - $38 and 25 minutes to break a vulnerable 1024-bit key - $20,000 and nine days for a 2048-bit key - These keys are used by companies and governments - Estonia abruptly [suspended 760,000 national ID cards](https://medium.com/e-residency-blog/digital-id-cards-will-only-work-with-new-certificates-from-midnight-tonight-6e4db59658b8) used for voting, filing taxes, and encrypting sensitive documents - This weakness is in the prime number generation algorithm used, not in the RSA algorithm itself - Reference: [Millions of high-security crypto keys crippled by newly discovered flaw](https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/)

<h2>Defensive Profile</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/defensive_profile.png" title="NO DRAMA ZONE -> If I've made you sad, you'd better not tell me, because I am TERRIFIED of that situation and have NO IDEA how to handle it." alt="Defensive Profile" srcset="http://imgs.xkcd.com/comics/defensive_profile_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1911/">xkcd # 1911</a></p> ## Monday, November 6th - My office hours are M/W 1:00-2:30 - Lawrence has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - A few additional [randomness slides](../11-encryption.html#/randomness) were added since Friday's lecture... - [HW 8: RSA](../hws/hw8-rsa.html) is out, and due today (Monday, Nov 6th) - [HW 9: Hashes](../hws/hw9-hashes.html) is out, and due next Monday (Nov 13th) - One task in this homework takes many hours to run on your PC, so don't wait until the last minute! - Grading! - HWs 1-4 have been returned previously - HWs 5-7 (and, shortly, 8) are being graded - The midterm has been returned, grading guidelines on Collab, regrades open until November 8th - Look in the course gradebook (under Collab's Course Tools) to see your score - The average was 45.9, (76.5%), with a standard deviation of 6.5 (10.9 when the score is scaled out of 100) - The final is now moving to the last day of class - Today we will likely finish with [encryption](../slides/11-encryption.html#/), starting [here](../slides/11-encryption.html#/7) - Next up: [rootkits](../slides/12-rootkits.html#/)

<h2>Sky Spotters</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/sky_spotters.png" title="Where I live, one of the most common categories of sky object without a weird obsessive spotting community is "lost birthday party balloons," so that might be a good choice—although you risk angering the marine wildlife people, and they have sharks." alt="Sky Spotters" srcset="http://imgs.xkcd.com/comics/sky_spotters_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1910/">xkcd # 1910</a></p> ## Friday, November 3rd - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 8: RSA](../hws/hw8-rsa.html) is out, and due Monday (Nov 6th) - Grading! - HWs 1-3 have been returned previously - HW 4 returned, grading guidelines on Collab, regrades open for 10 days (until Nov 6) - HWs 5 through 7 should be back "soon" - The midterm has been returned, grading guidelines on Collab, regrades open until November 8th - Look in the course gradebook (under Collab's Course Tools) to see your score - The average was 45.9, (76.5%), with a standard deviation of 6.5 (10.9 when the score is scaled out of 100) - The final is now moving to the last day of class - Today we will continue with [encryption](../slides/11-encryption.html#/), starting [here](../slides/11-encryption.html#/5/53)

<h2>Digital Resource Lifespan</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/digital_resource_lifespan.png" title="I spent a long time thinking about how to design a system for long-term organization and storage of subject-specific informational resources without needing ongoing work from the experts who created them, only to realized I'd just reinvented libraries." alt="Digital Resource Lifespan" srcset="http://imgs.xkcd.com/comics/digital_resource_lifespan_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1909/">xkcd # 1909</a></p> ## Wednesday, November 1st - My office hours are M/W 1:00-2:30 - ... but the are ending at 2:00 today... - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 8: RSA](../hws/hw8-rsa.html) is out, and due next Monday (Nov 6th) - Grading! - HWs 1-3 have been returned previously - HW 4 returned, grading guidelines on Collab, regrades open for 10 days (until Nov 6) - HWs 5 through 7 should be back "soon" - The midterm has been returned, grading guidelines on Collab, regrades open until November 1th - Look in the course gradebook (under Collab's Course Tools) to see your score - The average was 45.9, (76.5%), with a standard deviation of 6.5 (10.9 when the score is scaled out of 100) - The final is now moving to the last day of class - Today we will continue with [encryption](../slides/11-encryption.html#/), starting [here](../slides/11-encryption.html#/5/37)

<h2>Credit Card Rewards</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/credit_card_rewards.png" title="I should make a list of all the things I could be trying to optimize, prioritized by ... well, I guess there are a few different variables I could use. I'll create a spreadsheet ..." alt="Credit Card Rewards" srcset="http://imgs.xkcd.com/comics/credit_card_rewards_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1908/">xkcd # 1908</a></p> ## Monday, October 30th - My office hours are M/W 1:00-2:30 - ... but the are ending at 2:00 today... - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 8: RSA](../hws/hw8-rsa.html) is out, and due next Monday (Nov 6th) - Grading! - HWs 1-3 have been returned previously - HW 4 returned, grading guidelines on Collab, regrades open for 10 days (until Nov 6) - HWs 5 through 7 should be back "soon" - The midterm has been returned -- look in the course gradebook (under Collab's Course Tools) to see your score - The average was 45.9, (76.5%), with a standard deviation of 6.5 (10.9 when the score is scaled out of 100) - We'll have grading guidelines ready later today, at which point regrades will open - The final is now moving to the last day of class - Today we will continue with [encryption](../slides/11-encryption.html#/), starting [here](../slides/11-encryption.html#/5/9)

<h2>Immune System</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/immune_system.png" title="It also helps with negotiation. 'Look, if it were up to me, *I'd* accept your offer, but my swarm of autonomous killer cells literally can't be reasoned with. It's out of my hands!'" alt="Immune System" srcset="http://imgs.xkcd.com/comics/immune_system_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1907/">xkcd # 1907</a></p> ## Friday, October 27th - My office hours are M/W 1:00-2:30 - ... but the are ending at 1:45 today... - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 7: SQL & XSS](../hws/hw7-sql-xss.html) is out, and due today - [HW 8: RSA](../hws/hw8-rsa.html) is out, and due Monday, November 6th - Grading! - HWs 1-3 have been returned previously - HW 4 just returned, grading guidelines on Collab, regrades open for 10 days (until Nov 6) - HWs 5 through 7 should be back soon - The midterm has been returned -- look in the course gradebook (under Collab's Course Tools) to see your score - The average was 45.9, (76.5%), with a standard deviation of 6.5 (10.9 when the score is scaled out of 100) - We'll have grading guidelines ready in a few days, at which point regrades will open - About the curve (or lack thereof)... - The final is now moving to the last day of class - Today we will continue with [encryption](../slides/11-encryption.html#/), starting [here](../slides/11-encryption.html#/3/16)

<h2>Making Progress</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/making_progress.png" title="I started off with countless problems. But now I know, thanks to COUNT(), that I have "#REF! ERROR: Circular dependency detected" problems." alt="Making Progress" srcset="http://imgs.xkcd.com/comics/making_progress_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1906/">xkcd # 1906</a></p> ## Wednesday, October 25th - My office hours are M/W 1:00-2:30 - ... but the are ending at 1:45 today... - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 7: SQL & XSS](../hws/hw7-sql-xss.html) is out, and due Friday - The next few homeworks are ready in the repo: - [HW 8: RSA](../hws/hw8-rsa.html) is due Monday, November 6th - [HW 9: Hashes](../hws/hw9-hashes.html) is due Monday, November 13th - Grading! - HWs 1-3 have been returned, grading guidelines on Collab, regrades enabled - HWs 4 through 6 should be back soon - The midterm has been returned -- look in the course gradebook (under Collab's Course Tools) to see your score - The average was 45.9, (76.5%), with a standard deviation of 6.5 (10.9 when the score is scaled out of 100) - We'll have grading guidelines ready in a few days, at which point regrades will open - The final is now moving to the last day of class - Today we will start on [encryption](../slides/11-encryption.html#/), which will take us through much of next week

<h2>Cast Iron Pan</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/cast_iron_pans.png" title="If you want to evenly space them, it's easiest to alternate between the Arctic and Antarctic. Some people just go to the Arctic twice, near the equinoxes so the visits are almost 6 months apart, but it's not the same." alt="Cast Iron Pan" srcset="http://imgs.xkcd.com/comics/cast_iron_pans_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1905/">xkcd # 1905</a></p> ## Monday, October 23rd - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 7](../hws/hw7-sql-xss.html) is out, and due Friday - HWs 8 will be out this Friday, and is on RSA; HW 9 will be out next week, and is on Hashing - Grading! - HWs 1-3 have been returned, grading guidelines on Collab, regrades enabled - HWs 4 & 5 should be back this week; HW 6 next week - Midterm is being graded; currently aiming to return it today? - The final is now moving to the last day of class - Today we will finish with [SQL & XSS](../slides/10-sql-and-xss.html#/) (starting [here](../slides/10-sql-and-xss.html#/sqlinject)) - Then we'll start on [encryption](../slides/11-encryption.html#/)

<h2>Research Risks</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/research_risks.png" title="The 1919 Great Boston Molasses Flood remained the deadliest confectionery containment accident until the Canadian Space Agency's 2031 orbital maple syrup delivery disaster." alt="Research Risks" srcset="http://imgs.xkcd.com/comics/research_risks_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1904/">xkcd # 1904</a></p> ## Friday, October 20th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - HW 6 is out, and due today - HWs 7-9 are: SQL & XSS, RSA, and Hashing - HW 7 should be out this weekend, but you may need to wait until Monday to start it - Grading! - HWs 1-3 have been returned, grading guidelines on Collab, regrades enabled - HWs 4 & 5 should be back *next* week - At that point, we'll be all caught up - Midterm is being graded; currently aiming to return it today? - The final is now moving to the last day of class - Today we will finish with [advanced virus coding techniques](../slides/09-adv-code-tech.html#/), starting [here](../slides/09-adv-code-tech.html#/5/20) - Then we'll start on [SQL & XSS](../slides/10-sql-and-xss.html#/) - Then onto [encryption](../slides/11-encryption.html#/)

<h2>Bun Trend</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/bun_trend.png" title="Our experts have characterized the ecological impact of this trend as "adorable."" alt="Bun Trend" srcset="http://imgs.xkcd.com/comics/bun_trend_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1903/">xkcd # 1903</a></p> ## Wednesday, October 18th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - HW 6 is out, and due this Friday - Grading! - HWs 1-3 have been returned, grading guidelines on Collab, regrades enabled - HWs 4 & 5 should be back *next* week - At that point, we'll be all caught up - Midterm is being graded; currently aiming to return it this Friday - The final is now moving to the last day of class - Today we will work through (and possibly finish) with [advanced virus coding techniques](../slides/09-adv-code-tech.html#/), starting [here](../slides/09-adv-code-tech.html#/metamorphic) ## Badness of the day: KRACK (page 1 of 2) - WPA2 is the "secure" version of WiFi encryption - Called [KRACK](https://en.wikipedia.org/wiki/KRACK), it was just revealed - But had been discovered in 2016 - It's a weakness with the protocol - So all valid implementations will be vulnerable -- which is pretty much everybody - How WPA2 should work: - The AP (access point -- the router) has a "master key" for it's encryption - When a device connects, the AP and device generate [nonces](https://en.wikipedia.org/wiki/Cryptographic_nonce) - A secret and large number to be used just this once - From the nonces, a secret key specific to the device/AP combination - The nonces are discarded - This is a 4-way handshake; see [here](http://www.wi-fiplanet.com/img/2007/03/wpafigure1.gif) for an image ## Badness of the day: KRACK (page 2 of 2) - How KRACK works: - WiFi can occassionally disconnect, and that was anticipated into this protocol - A disconnect for handshake 3 (of 4) allows a reconnection with the same key (nonce) - Thus, a client can repeatedly "disconnect", then reconnect using the same key - This allows sending of arbitrary data, which can be used (in many small steps) to decrypt the entire keychain - At that point, the "master key" is known - Sources: slashdot [1](https://mobile.slashdot.org/story/14/03/22/0048220/wpa2-wireless-security-crackable-with-relative-ease), [2](https://it.slashdot.org/story/17/10/16/149251/wpa2-security-flaw-puts-almost-every-wi-fi-device-at-risk-of-hijack-eavesdropping), [wikipedia](https://en.wikipedia.org/wiki/KRACK), [CCS paper](https://papers.mathyvanhoef.com/ccs2017.pdf) - Patches are already coming out - [Microsoft has already patched it](https://mobile.slashdot.org/story/17/10/16/166220/microsoft-has-already-fixed-the-wi-fi-attack-vulnerability-android-will-be-patched-within-weeks), so update now - Android patch should be out within "weeks" - But much longer due to manufacturer delays in patching - [See a list of known patches](https://mobile.slashdot.org/story/17/10/16/2136238/every-patch-for-krack-wi-fi-vulnerability-available-right-now) as of 10-16-17 @ 7:40 p.m. - How many people will be updating their router firmware, though?

<h2>Jet Lag</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/jet_lag.png" title="I had some important research to do on proposed interstellar space missions, basketball statistics, canceled skyscrapers, and every article linked from "Women in warfare and the military in the 19th century."" alt="Jet Lag" srcset="http://imgs.xkcd.com/comics/jet_lag_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1900/">xkcd # 1900</a></p> ## Monday, October 16th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - HW 6 is out, and due this Friday - Midterm is being graded - Grading! - HWs 1-3 have been returned, grading guidelines on Collab, regrades enabled - HWs 4 & 5 should be back this week - At that point, we'll be all caught up - We are a bit behind in our lecture progress, so I'm going to hold off on the "badness of the day" for a bit... - The final is now moving to the last day of class - Today we will continue with [advanced virus coding techniques](../slides/09-adv-code-tech.html#/), starting [here](../slides/09-adv-code-tech.html#/oligomorphic) - I believe I promised you all a picture...

<h2>State Borders</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/state_borders.png" title="A schism between the pro-panhandle and anti-panhandle factions eventually led to war, but both sides spent too much time working on their flag designs to actually do much fighting." alt="State Borders" srcset="http://imgs.xkcd.com/comics/state_borders_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1902/">xkcd # 1902</a></p> ## Friday, October 13th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - HW 6 will be out today, due next Friday (or Thursday?) - Midterm - How was it? - We'll go over it today ([local link](../../../work/dada/exams/midterm.pdf)) - Grading! - HWs 1-3 have been returned, grading guidelines on Collab, regrades due in 10 days - We are working through the exam grading - HWs 4 & 5 should be back next week - At that point, we'll be all caught up - I am looking for a volunteer note taker for somebody who has SDAC accomodations... - The final is now moving to the last day of class - Today we will start on [advanced virus coding techniques](../slides/09-adv-code-tech.html#/)

## Wednesday, October 11th Today was the midterm

<h2>Ears</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/ears.png" title="My theory is that most humans have been colonized with alien mind-control slugs that hold the earbuds for them, and the ones who can't wear earbuds are the only surviving free ones." alt="Ears" srcset="http://imgs.xkcd.com/comics/ears_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1899/">xkcd # 1899</a></p> ## Monday, October 9th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - They may be canceled later this week; it will be posted on Piazza if they are - [HW 5: obfuscations](../hws/hw5-obfuscation.html): how did it go? - HW 6 will be out later this week (likely Friday) - HW grades for 1 & 3 returned, regrades open for 10 days - We hope to have HWs 2 & 4 returned early this week - The midterm is in class on this Wednesday, October 11th - We will have a Q&A review session today - I am looking for a volunteer note taker for somebody who has SDAC accomodations... - The final is now moving to the last day of class - Today we will finish with [advanced viruses](../slides/08-advanced-viruses.html#/), starting [here](../slides/08-advanced-viruses.html#/9/9) ## Badness of the day: Chief of Staff Phone Hack - [Someone hacked the White House chief of staff’s personal phone](https://www.theverge.com/2017/10/5/16433214/john-kelly-phone-hacked-compromised) - Yes, really; this is John Kelly - For months! - This was not the *secure* phone that the White House issues; it was his personal phone - Although not all the administration uses these "secure" phones: President Trump famously uses his normal phone - "The White House told Politico that Kelly rarely used the device since joining the administration, although even occasional use could have exposed sensitive government information to attackers" - Yeah...

<h2>October 2017</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/october_2017.png" title="And yet I have no trouble believing that the start of the 2016 election was several decades ago." alt="October 2017" srcset="http://imgs.xkcd.com/comics/october_2017_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1898/">xkcd # 1898</a></p> ## Friday, October 11th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 5: obfuscations](../hws/hw5-obfuscation.html) is out, and due today by midnight - All homeworks are due by midnight on the date specified - The submission system is open - Compilation will be with `make` - A few updates were recently made: file naming, register usage, grading, and execution - Is `make run` causing you issues? If so, put an `@` before the run command - HW grades for 1 & 3 returned, regrades open for 10 days - We hope to have HWs 2 & 4 returned early next week - The midterm is in class on Wednesday, October 11th - We will have a Q&A review session on Monday - Today we will continue with [advanced viruses](../slides/08-advanced-viruses.html#/), starting [here](../slides/08-advanced-viruses.html#/7/2) ## Final exam - I propose to move the final exam to the last day of class (Monday, December 4th) - The scheudled time is the very last final exam day (Friday, December 15th) - If it's on the last day of classes, it will be a much shorter final, since we only have 50 minutes instead of 3 hours... - Thoughts? ## Badness of the day: [Kaspersky Antivirus](https://en.wikipedia.org/wiki/Kaspersky_Anti-Virus) (KAV) - One of the leading anti-virus softare vendors, they are based in Russia - This was the one that was [banned from all gov't computers](http://www.normantranscript.com/opinion/columns/feds-ban-kaspersky-antivirus/article_d00fd114-9994-597c-9abe-20dc96a63c4e.html) a week or so ago - In the spring of 2015, "hackers" used KAV to steal sensitive documents from an NSA contractor - But was only discovered in the spring of 2017 - The documents "detailed how the U.S. penetrates foreign computer networks and defends against cyberattacks" - This is considered by experts to be one of the most significant security breaches in recent years - Sources: [slashdot.org](https://news.slashdot.org/story/17/10/05/1732255/russian-hackers-exploited-kaspersky-antivirus-to-steal-nsa-data-on-us-cyber-defense-wsj), [The Hill](http://thehill.com/policy/cybersecurity/354068-russian-hackers-stole-nsa-hacking-tools-using-kaspersky-antivirus-report), and most major news sources at this point

<h2>Self Driving</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/self_driving.png" title=""Crowdsourced steering" doesn't sound quite as appealing as "self driving."" alt="Self Driving" srcset="http://imgs.xkcd.com/comics/self_driving_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1897/">xkcd # 1897</a></p> ## Wednesday, October 4th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 5: obfuscations](../hws/hw5-obfuscation.html) is out - All homeworks are due by midnight on the date specified - The submission system will open later week - It's due this Friday (Oct 6) by midnight - Compilation will be with `make` - A few updates were just made: file naming, register usage, grading, and execution - Is `make run` causing you issues? - HW grades will be out this week for HWs 1-3 (and possibly 4) - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Thus, there won't be a HW 6 before the midterm - Today we will continue with [advanced viruses](../slides/08-advanced-viruses.html#/), starting [here](../slides/08-advanced-viruses.html#/5/2) ## Badness of the day: Exquifax updates - These stories are all from [slashdot](https://slashdot.org/) - [Former Equifax CEO Blames Breach On One Individual Who Failed To Deploy Patch](https://it.slashdot.org/story/17/10/03/2012232/former-equifax-ceo-blames-breach-on-one-individual-who-failed-to-deploy-patch) (10/3) - [Equifax Says 2.5 Million More Americans May Be Affected By Hack](https://it.slashdot.org/story/17/10/02/2127259/equifax-says-25-million-more-americans-may-be-affected-by-hack) (10/2) - [Equifax CEO: All Companies Get Breached](https://news.slashdot.org/story/17/09/30/2036215/equifax-ceo-all-companies-get-breached) (10/1) - [Squabble With Contractor Delayed Equifax's Response To Data Breach](https://news.slashdot.org/story/17/09/30/207200/squabble-with-contractor-delayed-equifaxs-response-to-data-breach]) (9/30) - [Equifax Board Forms Panel To Review Executives' Stock Sales After Data Breach](https://news.slashdot.org/story/17/09/30/0256244/equifax-board-forms-panel-to-review-executives-stock-sales-after-data-breach) (9/30) - [Equifax CEO Richard Smith Who Oversaw Breach To Collect $90 Million](https://news.slashdot.org/story/17/09/29/143209/equifax-ceo-richard-smith-who-oversaw-breach-to-collect-90-million) (9/30) - [Equifax Will Offer Free Credit Locks for Life, New CEO Says](https://news.slashdot.org/story/17/09/28/0349200/equifax-will-offer-free-credit-locks-for-life-new-ceo-says) (9/28) - [Equifax CEO Steps Down Amid Hacking Scandal](https://yro.slashdot.org/story/17/09/27/0653207/equifax-ceo-steps-down-amid-hacking-scandal) (9/27)

Worrying Scientist Interviews

xkcd # 1895

## Friday, September 29th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 5: obfuscations](../hws/hw5-obfuscation.html) is out - All homeworks are due by midnight on the date specified - The submission system will open next week - It's due next Friday (Oct 6) by midnight - Compilation will be with `make` - A few updates were just made: file naming, register usage, grading, and execution - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will continue with [advanced viruses](../slides/08-advanced-viruses.html#/), starting [here](../slides/08-advanced-viruses.html#/3/9) ## Badness of the day: [Stoned virus](https://en.wikipedia.org/wiki/Stoned_(computer_virus)) - This was a 1987 DOS virus, and one of the first viruses - It was multi-partite: - Infected the *master boot record* - Stayed resident in memory (used the upper 2Kb) - Hooked the disk interrupt - Thus, the AV software had to remove all three, else the system would be re-infected - It printed out "You've been stoned" every 8th boot - When it infected the MBR, it wrote the orignal to the end of the disk - But it was designed for 360 Kb floppies, so it wrote it to sector 361 (sic) - Which was right in the middle of the data when floppies went to 1.2 Mb - Thus, it was *accidentally destructive*

<h2>Real Estate</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/real_estate.png" title="I tried converting the prices into pizzas, to put it in more familiar terms, and it just became a hard-to-think-about number of pizzas." alt="Real Estate" srcset="http://imgs.xkcd.com/comics/real_estate_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1894/">xkcd # 1894</a></p> ## Wednesday, September 27th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 4: lex](../hws/hw4-lex.html) is out, and is due today - All homeworks are due by midnight on the date specified - The submission system is open - Compilation will be with `make`, and it must produce an executable named `a.out` - I updated the text file format of the input file; please `git pull` and re-check! - [HW 5: obfuscations](../hws/hw5-obfuscation.html) is out - It's due next Friday (Oct 6) by midnight - Compilation will also be with `make` - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will continue with [assembly obfuscations](../slides/07-obfuscations.html#/), starting [here](../slides/07-obfuscations.html#/2/7) - Next up: [advanced viruses](../slides/08-advanced-viruses.html#/) ## Badness of the day: ...

<h2>Thread</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/thread.png" title="Since the current Twitter threadfall kicked off in early 2016, we can expect it to continue until the mid 2060s when the next Interval begins." alt="Thread" srcset="http://imgs.xkcd.com/comics/thread_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1893/">xkcd # 1893</a></p> ## Monday, September 25th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 4: lex](../hws/hw4-lex.html) is out, and is due this Wednesday - All homeworks are due by midnight on the date specified - The submission system is open - Compilation will be with `make`, and it must produce an executable named `a.out` - [HW 5: obfuscations](../hws/hw5-obfuscations.html) is out - But when should it be due? The next Wednesday is right after fall break. - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will continue with [file viruses](../slides/06-file-viruses.html#/), starting [here](../slides/06-file-viruses.html#/5/9) - Next up: [assembly obfuscations](../slides/07-obfuscations.html#/) ## Badness of the day: Experian problems - This is not Equifax, but another of the three credit agencies - Remember when it was suggested to place credit freezes with the three credit agencies? Yeah, about that... - It turns out that it is [very easy to remove one from Experian](https://www.theverge.com/2017/9/21/16345422/experian-credit-freeze-equifax-breach-vulnerable) - To reset one, you need: name, address, dob, and ssn - All info released by Equifax's security breach! - And a few questions that are likely Google-able - Then they will do a "scan" of the "dark web" for you - But read their [17,600 word terms of service](http://www.latimes.com/business/lazarus/la-fi-lazarus-experian-dark-web-20170922-story.html) - You are giving "acceptance of 'advertisements or offers' from financial products companies" - And "an arbitration clause preventing you from suing the company"

<section> <h2>Obsolete Technology</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/usb_cables.png" title="Tag yourself, I'm "frayed."" alt="USB Cables" srcset="http://imgs.xkcd.com/comics/usb_cables_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1892/">xkcd # 1892</a></p> </section> ## Friday, September 22nd - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - [HW 4: lex](../hws/hw4-lex.html) is out, and is due next Wednesday - All homeworks are due by midnight on the date specified - The submission system opened today - Compilation will be with `make`, and it must produce an executable named `a.out` - HW 5 will be out early next week - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will continue with [file viruses](../slides/06-file-viruses.html#/), starting [here](../slides/06-file-viruses.html#/overwrite) ## Badness of the day: [new Locky variant](https://blog.barracuda.com/2017/09/19/barracuda-advanced-technology-group-monitoring-aggressive-ransomware-threat/) ransomware - Recall that the [Ranson.Lukitus](https://www.symantec.com/security_response/writeup.jsp?docid=2017-090111-1559-99) from a few weeks ago was another Locky variant - Locky encrypts files with an identifier; given the identifier, and a paid ransom, those behind it will send along a decryptor - But this only uses one identifier - So will one decryptor work for anybody? - Or, more likely, they are they not bothering to send along a decryptor - Originating mostly from Vietnam, but other countries as well; likely not a nation-state, since the motives are financial - The emails are either a Herbalife order receipt or a copier scan delivery - But the email (and possibly the payload) are mutating, preventing easy scanning for it - 20 million attacks in a 24 hour period!

<section> <h2>Obsolete Technology</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/obsolete_technology.png" title="And I can't believe some places still use fax machines. The electrical signals waste so much time going AROUND the Earth when neutrino beams can go straight through!" alt="Obsolete Technology" srcset="http://imgs.xkcd.com/comics/obsolete_technology_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1891/">xkcd # 1891</a></p> </section> ## Wednesday, September 20th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - How did HW 3 go? - [HW 4: lex](../hws/hw4-lex.html) is out, and is due next Monday - All homeworks are due by midnight on the date specified - The submission system will open on Friday - Compilation will be with `make`, and it must produce an executable named `a.out` - Do we want a different HW due date? - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will finish [regular expressions and lex](../slides/05-re-and-lex.html#/) (starting [here](../slides/05-re-and-lex.html#/lex)), and then starting on [file viruses](../slides/06-file-viruses.html#/) ## Badness of the day: ...

<h2>What to Bring</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/what_to_bring.png" title="I always figured you should never bring a gun to a gun fight because then you'll be part of a gun fight." alt="What to Bring" srcset="http://imgs.xkcd.com/comics/what_to_bring_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1890/">xkcd # 1890</a></p> ## Monday, September 18th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - HW 3 is out: [HW 3: binary tricky jump](../hws/hw3-tricky.html) is due next Monday - All homeworks are due by midnight on the date specified - The submission system is now open - Compilation will be with `make`, and it must produce an executable named `a.out` - We will put the specified `target.exe` in the same directory as the `a.out` executable, and we will expect the result to be a file named `target-infected.exe` - HW 4 will be out on Wednesday - Do we want a different HW due date? - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will continue with [regular expressions and lex](../slides/05-re-and-lex.html#/) (starting [here](../slides/05-re-and-lex.html#/nfas2dfas)), and then starting on [file viruses](../slides/06-file-viruses.html#/) ## Badness of the day: Python's official repository - The Slovak National Security Office (NBU) identified 10 malicious Python apps - They performed all the regular functions, plus had a (relatively benign) payload - They all had similar names ('urlib' instead of 'urllib'), so a typo would install it - There is no approval or security checks to put software in the PyPI (Python Package Index) - The `pip` command does not do any checking, either - The apps have been removed...

<h2>xkcd Phone 6</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/xkcd_phone_6.png" title="We understand your privacy concerns; be assured that our phones will never store or transmit images of your face." alt="xkcd Phone 6" srcset="http://imgs.xkcd.com/comics/xkcd_phone_6_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1889/">xkcd # 1889</a></p> ======================================== ## Friday, September 15th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - HW 3 is out: [HW 3: binary tricky jump](../hws/hw3-tricky.html) is due next Monday - All homeworks are due by midnight on the date specified - The submission system is now open - Compilation will be with `make`, and it must produce an executable named `a.out` - We will put the specified `target.exe` in the same directory as the `a.out` executable, and we will expect the result to be a file named `target-infected.exe` - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will continue with [regular expressions and lex](../slides/05-re-and-lex.html#/) ================================================= ## Equifax data breach, part 2 - Recall that the information on an estimated *143 million* people was compromised because they had a crappy excuse for enterprise security - New developments: - The FTC is investigating (and they confirmed it, which is unusual ([source](https://yro.slashdot.org/story/17/09/14/1430235/in-a-highly-unusual-move-ftc-confirms-it-is-investigating-equifax)) - Their login for Equifax in Argentina? username: admin, password: admin ([source](https://news.slashdot.org/story/17/09/13/1840258/equifax-had-admin-as-login-and-password-in-argentina)) - They lobbied for easier regulartion before the data breach ([source](https://politics.slashdot.org/story/17/09/12/1339211/equifax-lobbied-for-easier-regulation-before-data-breach)) - Their app has "disappeared" from Google Play and the iTunes store ([source](https://tech.slashdot.org/story/17/09/12/043246/equifaxs-app-has-disappeared-from-apples-app-store-and-google-play)) - Chatbot Lets You Sue Equifax For Up To $25,000 Without a Lawyer ([source](https://yro.slashdot.org/story/17/09/12/074253/chatbot-lets-you-sue-equifax-for-up-to-25000-without-a-lawyer)) - Equifax Blames Open-Source Software For Its Record-Breaking Security Breach ([source](https://news.slashdot.org/story/17/09/11/2048245/equifax-blames-open-source-software-for-its-record-breaking-security-breach)) - To find out if you are affected, see https://www.reddit.com/r/personalfinance/comments/6ysxxf/how_to_tell_if_you_got_equifaxd_and_what_to_do/ - But beware -- if you click on the wrong equifax button, you are agreeing not to sue them (read the reddit page for details) - That reddit page also talks about how to lock your accounts with all three credit agencies - It costs $10 each in Virginia; the amount varies by state

<h2>Still in Use</h2> <img class="stretch" src="http://imgs.xkcd.com/comics/still_in_use.png" title="'Which one?' 'I dunno, it's your house. Just check each object.' 'Check it for *what*?' 'Whether it looks like it might have touched a paper towel at some point and then forgotten to let go.' '...' 'You can also Google to learn how to check which things are using which resources.' 'You know, I'll just leave the towel there and try again tomorrow.'" alt="Still in Use" srcset="http://imgs.xkcd.com/comics/still_in_use_2x.png 2x"> <p class="center"><a href="http://xkcd.com/1888/">xkcd # 1888</a></p> ======================================== ## Wednesday, September 13th - My office hours are M/W 1:00-2:30 - Lawrence Hook has them Thu 1-3, Fri 2-3 (both in Rice 514) - Martin Simpkins has them Tu/Thu 11-12:15 (Tuesdays in Rice 204; Thursdays in Rice 514) - These are listed in the Collab workspace (on the landing page) - HW 3 is out: [HW 3: binary tricky jump](../hws/hw3-tricky.html) is due next Monday - All homeworks are due by midnight on the date specified - The submission system will open later this week - Compilation will be with `make`, and it must produce an executable named `a.out` - We will put the specified `target.exe` in the same directory as the `a.out` executable, and we will expect the result to be a file named `target-infected.exe` - The midterm is in class on Wednesday, October 11th; the [syllabus](syllabus.html) has been updated - Today we will start on [regular expressions and lex](../slides/05-re-and-lex.html#/) ================================================= ## Badness of the day: [BlueBorne](https://www.armis.com/blueborne/) - You know about Bluetooth? Well, funny thing about that... - Virtually *all* Bluetooth devices are vulnerable to being hacked - This means your phone! And iPad, and IoT devices, and ... - This affects Bluetooth implementations in Android, iOS, Microsoft, and Linux - From the link above: "BlueBorne is an attack vector by which hackers can leverage Bluetooth connections to penetrate and take complete control over targeted devices" - It's a problem - It does not require downloading a file, clicking on a link, or being connected to the Internet - This works through errors in the pairing protocol - In theory, a worm could spread through this via people with unknowingly infected devices - [YouTube video link](https://www.youtube.com/watch?v=LLNtZKpL0P8) - So what to do? - If you have Android, install the "BlueBorne scanner" app - Turn off Bluetooth unelss you are actively using it, unless you know your machine is not vulnerable - Either because of that app, or because of a system update that fixes this issue - More references: [here](https://www.bleepingcomputer.com/news/security/blueborne-vulnerabilities-impact-over-5-billion-bluetooth-enabled-devices/) and [here](https://mobile.slashdot.org/story/17/09/12/2030213/blueborne-vulnerabilities-impact-over-5-billion-bluetooth-enabled-devices) and [here](http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Paper.pdf)

Two Down, One To Go

xkcd # 1887

Typing Notifications

xkcd # 1886

Ensemble Model

xkcd # 1885

Computers vs Humans

xkcd # 1879

Eclipse Review

xkcd # 1880

Supervillian Plan

xkcd # 1883

Color Models

xkcd # 1882

Drone Training

xkcd # 1881