ChatOps

It's just come to light that there's a $300 ransom you have to pay because ransomware targeting Microsoft Windows has encrypted your data. What steps do Linux users need to protect from this if for example they are using wine? This ransomware is widely reported to be based on a tool developed by...

I wanna cry malware!

Get it!^

It's a joke.

Tensibai

indeed

well, not a joke for thoose infected

Henry WH Hack v2.0

@Tensibai You are a DevOps at the NSA?

Tensibai

2:19 PM

@HenryWHHackv2.0 Absolutely not :)

Out of joke, working for an insurance broker

Henry WH Hack v2.0

Oh yes the best thing to do for a ransomware is to have a secure backup of your data. (Before the ransomware infects you that is.)

What

Backup!

This malware seems big.

Tensibai

Well, this one works with a reversable key to crypt the datas, but the key itself is then crypted with pirate's public key, hence you need the pirate's private key to decrypt the data

Henry WH Hack v2.0

I heard it was a worm+ransomware.

Tensibai

That's it

Henry WH Hack v2.0

So it's more automatic.

Tensibai

2:23 PM

The ransomware in itself is 'new', the real problem is its spread using one of the NSA tools

Henry WH Hack v2.0

You know what I mean?

Tensibai

(the worm part)

Henry WH Hack v2.0

Yes

Hi! :)

Is anyone here.

Basic Security Tips:
Use a strong password
Install all the security updates
Get a anti virus
Get a on demand  secondary malware scanner
Use a firewall
Backup
Common Sense

Tensibai

I'd put common sense first

All of the rest derives from there

Henry WH Hack v2.0

Ah

Tensibai

2:31 PM

Most of the problem is people opening attachement of mails not thinking about the impact

Henry WH Hack v2.0

That's what I meant by common sense.

Think Before You Click.

TBYC!

Tensibai

Tell them it's like opening a letter on a stage with a camera showing the letter to the public and that it can be a blatant porn, they'll think twice before opening the thing

Henry WH Hack v2.0

There is a tool call Glass wire that works with your Windows firewall it alerts you when a makes it's program first network connection.

Tensibai

That's super annoying on mid/long term

Henry WH Hack v2.0

mid/long?

Tensibai

2:36 PM

Yep, after 4 or 5 program askig for 4 or 5 ports each, you stop reading and just click yes

Too much analisys asked to end user

Henry WH Hack v2.0

Ok.

I find it seems cool.

Tensibai

It's counter productive, as was the UAC on Windows Vista, asking for confiration on each privilege escalation

Henry WH Hack v2.0

Another security tip is to Use a limited user account.

Tensibai

Yep, but that doesn't protect every space this user has write access

Henry WH Hack v2.0

You know a Standard User Account.

Tensibai

2:39 PM

Best bet is to teach curiosity

So before opening a link or attached thing he user will ask him/herself:

Do I know 'Sender'

Would he/she send me a link about 'whatever' or a file about 'This Thing'

Could it be a fake ?

Henry WH Hack v2.0

@Tensibai I love you.

Malware

Tensibai

Once your users are trained to this, you have an internal system with a better security than half what is existing today ;) (my company included)

Henry WH Hack v2.0

That one is famous.

Black Hat Hacker and Malware get's in famous sometimes.

I love you.
Morris Worm
Storm Worm
Etc

Melisa Virus.

I know I spelled it wrong.

Tensibai

I had worked with white hats to audit our own systems (I'm not alone of course), so I'm sure a nicely crafted email will be opened, there's few to do against it if users are not self aware

Henry WH Hack v2.0

Henry WH Hack v2.0, Stack Exchange

730 8 20

privacy protection virus antivirus firewalls linux malware

Tensibai

2:46 PM

If the blocks (macro ask, etc.) are not understood, then the best firewall or AV won't be able to block it

Henry WH Hack v2.0

The DMZ

A serious place where infosec is discussed PS we don't do hard...

3

Tensibai

my rep on security.se is quite low, not enough time to answer properly :)

Henry WH Hack v2.0

Still waiting on the great @Aurora0001.

Henry WH Hack v2.0

4:14 PM

@Tensibai?

Tensibai

Yes ?

Henry WH Hack v2.0

@Tensibai How about finding a catchy room description?

Tensibai

I assume this could be done along with the site's elevator pitch

Henry WH Hack v2.0

Ok

Tensibai

We (mods) still have to post this meta question

Henry WH Hack v2.0

4:17 PM

Ok

Tensibai

But if you have an idea and wish to propose it, feel free to open a Meta post, mods are here to support the community, the most came from users the better :)

Henry WH Hack v2.0

Ok

Since I2P.SE got closed no site since then has gotten closed.

Sitecore.SE almost got closed

Henry WH Hack v2.0

5:49 PM

0

A: What should the name of our main chatroom be called?

I may be out of synch a bit, but how about UserFriendly? Can't not have some humour in there...

Ammm

Wait what?

Tensibai

8:16 PM

Haha, I do like it

Henry WH Hack v2.0

This chat room is very UserFriendly.

Tensibai

I hope so

Even if we had some arguments in the early days :)

Henry WH Hack v2.0

I have some of my rules for the post:

18

Q: What should the name of our main chatroom be called?

Every Stack Exchange site (Not all) main chatroom has a unique name that is related to the main site itself. for Example: SuperUser: Root Acess Gaming: The Bridge IOT: Chat of Things Unix & Linux: /dev/chat and etc What should our main chat room be named? The Real Essential Questions of Ev...

discussion featured chat

An answer must have 15+ votes to be applied.

Tensibai

Sounds legit

Henry WH Hack v2.0

No 20+

Let's leave it to 15+

Tensibai

8:24 PM

For now I'd stay with Chatops, and see how it evolves. I've the feeling we don't have enough people reading Meta right now

Henry WH Hack v2.0

@Aurora0001 What do you say?

Good bye @Aurora0001! :)

Tensibai

ROFL

Henry WH Hack v2.0

Ok

We posted at the same time.

Tensibai

I must admit I'm lazy to switch to full site theme on phone to revert to devops name right now :)

And Dan has a point with Chatops being a media used in devops practices

Henry WH Hack v2.0

devops.meta.stackexchange.com/review

After all that time I'm still in the reviews.

Tensibai

8:31 PM

Not much review on meta

Henry WH Hack v2.0

Yeah

Tensibai

Few posts, few flags also

Henry WH Hack v2.0

I think that's because the site is a kind of new site.

Tensibai

Yep but I was expecting a higher rate of growth, we're roughly steady on around 215 visits per day according to area51 stats

Henry WH Hack v2.0

I only voted to closed one post on the main site:

-8

Q: What is the origin of "Release early and often"?

There is a popular DevOps phrase: "Release early and often." (see web results). Where does this phrase come from?

release

Tensibai

8:35 PM

Since 2 or 3 weeks now, I had bet the rate would have been higher with some questions share

Well I agree with the comment beside it, but the question may worth being developed a little for context

Henry WH Hack v2.0

This room also doesn't have very much users.

Sitecore

General discussion for sitecore.stackexchange.com

This room is very silent.

Because the users already Sitecore users uses Slack Chat

Tensibai

Indeed, I'm advertising it when I feel it appropriate but that's obvisouly not a success

Henry WH Hack v2.0

I will go in the next 15 minutes.

And come back tomorrow

I mainly do flagging on SE.

Tensibai

It's starting to be late here alsl

Henry WH Hack v2.0

4:46 here.

Tensibai

8:47 PM

10:46 pm here

Henry WH Hack v2.0

Oh

I go to bed at 12:00-3:00 AM.

Tensibai

Watching ' loopers '

Henry WH Hack v2.0

no

Tensibai

I was speaking for me :)

Henry WH Hack v2.0

Ok

computergraphics.stackexchange.com/users/5555

LOL I'm user number 5555 on Computer Graphics.

Tensibai

8:50 PM

WH for? White Hat?

Henry WH Hack v2.0

in IOT News Room, yesterday, by Henry WH Hack v2.0

Also Henry WH Hack means Henry Winston Helmar Hackintosh.

@Tensibai yes it's a bit werid

Tensibai

:)

@HenryWHHackv2.0 Not more than Tensibai

Henry WH Hack v2.0

Henry the White Hat Hacker

Before it was: Henry White Hat Hacker

But I added the the part.

I know it's silly.

But

Tensibai

I didn't compromised anything for years now :/ Was fun to test systems

Henry WH Hack v2.0

But not as bad as:

MODSupreme, Stack Exchange

101 4

Which is not as bad as:

The Moderator, Stack Exchange

101 2

Tensibai

8:57 PM

Lol

Henry WH Hack v2.0

2 more minutes.

1 more minute.

0 more minute.

Goodbye until later! :)

Tensibai

Good evening

The DMZ

Sitecore

Transcript for