Skip to main content

Blocklist-Update.sh

Blocklist-Update.sh is a script that I wrote to manage blocklists from bluetack etc to be used in conjunction with Transmission torrent downloader in Linux/MacOS. The script can be taylored to work with Qbittorrent as well, but the placement of the blocklists means you'd have to redirect the blocklist to go somewhere locally manageable as Transmission uses its own blocklist directory in .config. I believe there are about 10 lists there now. It works well for my needs. It can be ran weekly using crontab in standard user profile.  To download:  blocklist-update.sh To download the others:  Github

HP DEVICES DISCOVERED WITH POTENTIALLY WORKING YET INACTIVE KEYLOGGERS INSTALLED

What is a keylogger? A keylogger is any software that actively monitors keystrokes on a device, a keyboard. A keylogger then has the potential to send that information back to a server somewhere. Recently a seemingly inactive keylogger was found inside of most recent models of HP devices. If you recall, back in May, there was a keylogger found in audio drivers as well, but this time it was found more directly in keyboard drivers. An update was issued to try to remove the keylogging code, but this could tarnish HP’s credibility. HP has been around since before the beginning of the Internet, a company so old and so trusted at making computers could do no wrong right? Wrong!

If we turn our eyes from HP alone, back in 2014, Lenovo was accused of bundling Superfish software with its PCs and laptops. The Superfish company was originally a software development company founded in Israel, but residing in Palo Alto, California. In 2015 the company further included a signed certificate with Superfish, but then Antivirus companies started to catch on to the issue and started devising definition packages to remove the offending software.

Toshiba, also a well known computer company, was found to harbor UEFI rootkits in its BIOS software. This was a Lo jack service for your computer, it was basically meant to be used as an anti-theft piece of software, however, it was vulnerable to outside attack. When users caught wind of this, Toshiba finally removed the rootkit from their future devices, but that damage to their name had already been done. Many people from that day continued to boycott such products.

In the case of the HP keylogger found recently, it was found in the keyboard driver and was assumed to be inactive by a researcher. The researcher was studying how the keyboard features worked when stumbling upon the string in the driver code. As with all of these mentioned bugs above, an update was issued for the keyboard driver and HP notebook owners have been urged to search the company’s website to see if there is an update available to them, but many are outraged, so we shall see how this plays out in favor of HP.

The original Article:


Urelated, shameless plug:

https://github.com/thedummy06/Helpful-Linux-Shell-Scripts

UPDATE: The best way to get around keyloggers when you know one is installed is to try and use an onscreen keypad as these aren't exactly considered clicked keys. These are sometimes suggested for using Bank and or paypal sites. 

Comments

Popular posts from this blog

NOSCRIPT CONFIGURATION FOR PALE MOON SPECIFICALLY

I wrote an article before about making Pale Moon more private. I covered a few of the settings and back end changes I make each time I install it. I mentioned Noscript, but I didn’t give any details about how I set it up. First though, you have to get the version already marked for your version of “Firefox” or in this case, Pale Moon. If you went to https://addons.palemoon.org/addon/noscript/ you would probably find the Pale Moon addons page devoted to the newest possible Noscript being marked specifically for Pale Moon. Other versions may work, but these are hybrid addons and the closer we get to Noscript 10, the less I trust it to work with Pale Moon specifically. I just opt to stick with 5.0.6. There have been people asking about what happens when Maone, the developer stops supporting the hybrid versions of Noscript, “Will it work with Pale Moon?” Why yes it will. Noscript blocks scripts, that’s its main function and it will do that as long as Java script exists on a page.

SSD PARTITION ALIGNMENT

I was searching for more information regarding SSDs last night as that is what I now use, I found an interesting little tip that most users will never have to worry about, but people using Arch Linux, Manjaro or Windows that was cloned from another drive may want to consider checking this. The Partition manager within Linux normally takes good care to ensure that you have some free space to be used by the SSD in the event that a cell becomes worn out or corrupted. Also, Linux generally ensures that a proper amount of unallocated drive space is set aside preceeding the partition. However, on my own image of Manjaro, I discovered that this was not the case. The partition was “out of alignment”. To fix this situation, I found an article on  Lifehacker that went into instructional detail about how to solve this from a live environment or an image of Gparted . Gparted is a separate live environment of Linux that is based on Debian and uses Gparted as the main tool to manage par

PALE MOON PRIVACY SETUP

I did a review of Pale Moon back when 27.6.2 came out in linux. I had mostly great things to say about the browser then and my feelings towards it have not changed. Pale Moon is a very useful tool for scowering the net. It has privacy at its core with a few implementations made by Moonchild, the lead developer, built in. I also mentioned the point that Pale Moon has a canvas poisoning feature in the backend, however, I wasn’t very clear about how to turn it on. I thought in this tutorial, I’d show with a series of screen shots, some of the useful settings and preferences that I change to make Pale Moon a bit more private. I also thought I’d take this time to rant a little more about some of the not so savory issues with Firefox which have recently come under scrutiny by various people in the the Linux world. First order of business, if you haven’t heard, Mozilla recently added an extension into their browser which gave people ads. That’s right, they were ads for a specific t