Skip to main content

Blocklist-Update.sh

Blocklist-Update.sh is a script that I wrote to manage blocklists from bluetack etc to be used in conjunction with Transmission torrent downloader in Linux/MacOS. The script can be taylored to work with Qbittorrent as well, but the placement of the blocklists means you'd have to redirect the blocklist to go somewhere locally manageable as Transmission uses its own blocklist directory in .config. I believe there are about 10 lists there now. It works well for my needs. It can be ran weekly using crontab in standard user profile.  To download:  blocklist-update.sh To download the others:  Github
Post a Comment

A NEW REMOTE SPECTRE FLAW FOUND

A new spectre flaw dubbed NetSpectre has been found. This nasty flaw works in the same way that regular Spectre works by going through cached resources in the CPU and reading important user data. This flaw, however, doesn’t require physical access to your device. NetSpectre leverages the CPU’s natural architecture to execute possible remote code against an unpatched microcode or set of instructions built into the chip. Many operating systems including Windows and Linux have attempted to correct much of this malicious code execution by altering the way their kernels access RAM and CPU. After this you can probably expect even more changes. This is not to be confused with Meltdown which uses the same technique to gain access to the entire system. Spectre itself can only access Kernel memory. Google Chrome and many other apps that use passwords and other login data, have patched their applications already. Many of these patches included altering the timing of the application. Manjaro has a bulletin displaying their ongoing efforts to mitigate this in their kernels. The problem is that some users of Windows and the Like on Intel devices have noticed slight system slow downs. If this continues, you may have to expect more. Some newer AMD chips are unaffected. Newer chips already have a sort of wall up for this type of attack in place, if you run manjaro, some of the kernels on these devices will show that in an attempt to mitigate spectre, some things could not be implemented so it goes back to default retpoline. Pale Moon browser was also not affected by this sort of attack, but the author went ahead and planned for it anyway by changing the timing of and patching his application.

The original article explaining the new attack vector can be found here.
More about the original Meltdown and Spectre here.
And here.
A way you can check Linux for these vulnerabilities is here.
Shameless plug here.

Comments

Post a Comment

Popular posts from this blog

NOSCRIPT CONFIGURATION FOR PALE MOON SPECIFICALLY

I wrote an article before about making Pale Moon more private. I covered a few of the settings and back end changes I make each time I install it. I mentioned Noscript, but I didn’t give any details about how I set it up. First though, you have to get the version already marked for your version of “Firefox” or in this case, Pale Moon. If you went to https://addons.palemoon.org/addon/noscript/ you would probably find the Pale Moon addons page devoted to the newest possible Noscript being marked specifically for Pale Moon. Other versions may work, but these are hybrid addons and the closer we get to Noscript 10, the less I trust it to work with Pale Moon specifically. I just opt to stick with 5.0.6. There have been people asking about what happens when Maone, the developer stops supporting the hybrid versions of Noscript, “Will it work with Pale Moon?” Why yes it will. Noscript blocks scripts, that’s its main function and it will do that as long as Java script exists on a page.
Post a Comment
Read more

SSD PARTITION ALIGNMENT

I was searching for more information regarding SSDs last night as that is what I now use, I found an interesting little tip that most users will never have to worry about, but people using Arch Linux, Manjaro or Windows that was cloned from another drive may want to consider checking this. The Partition manager within Linux normally takes good care to ensure that you have some free space to be used by the SSD in the event that a cell becomes worn out or corrupted. Also, Linux generally ensures that a proper amount of unallocated drive space is set aside preceeding the partition. However, on my own image of Manjaro, I discovered that this was not the case. The partition was “out of alignment”. To fix this situation, I found an article on  Lifehacker that went into instructional detail about how to solve this from a live environment or an image of Gparted . Gparted is a separate live environment of Linux that is based on Debian and uses Gparted as the main tool to manage par
Post a Comment
Read more

PALE MOON PRIVACY SETUP

I did a review of Pale Moon back when 27.6.2 came out in linux. I had mostly great things to say about the browser then and my feelings towards it have not changed. Pale Moon is a very useful tool for scowering the net. It has privacy at its core with a few implementations made by Moonchild, the lead developer, built in. I also mentioned the point that Pale Moon has a canvas poisoning feature in the backend, however, I wasn’t very clear about how to turn it on. I thought in this tutorial, I’d show with a series of screen shots, some of the useful settings and preferences that I change to make Pale Moon a bit more private. I also thought I’d take this time to rant a little more about some of the not so savory issues with Firefox which have recently come under scrutiny by various people in the the Linux world. First order of business, if you haven’t heard, Mozilla recently added an extension into their browser which gave people ads. That’s right, they were ads for a specific t
Post a Comment
Read more