Trello: Asking For A Remote Work Policy? Pro Tips And Trends Of The Year To Reference

Remote work is growing in popularity, and more and more companies are adopting the mentality and practices of hybrid teams: Offering employees the option to work from the office, remotely, or alternate between the two. Working remotely is not only comfortable (can you say no commute?) but it also provides flexible hours, more ability to focus, and opens opportunities for people around the world to find interesting work regardless of their location.

REF: https://blog.trello.com/remote-work-policy-pro-tips-and-trends

TrendLabs: Cryptocurrency Miner Spreads via Old Vulnerabilities on Elasticsearch

Figure 1. GreyNoise marked the host as a known scanner

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/cryptocurrency-miner-spreads-via-old-vulnerabilities-on-elasticsearch/

NewTek: Celebro Makes Sure Broadcasters Have It All – Over IP With NDI

Celebro Makes Sure Broadcasters Have It All – Over IP With NDI®

REF: https://www.newtek.com/

TrendLabs: New Exploit Kit “Novidade” Found Targeting Home and SOHO Routers

Figure 1. Novidade infection chain

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/new-exploit-kit-novidade-found-targeting-home-and-soho-routers/

Trello: Why We Always Switch Productivity Methods Before They Stick, According To Science

Image Source: Cheezburger.com

REF: https://blog.trello.com/how-to-stick-with-a-productivity-method

All new Roku channel!

Our totally reimagined Roku channel makes it easier than ever to find and enjoy the media that matters most to you, giving you unparalleled flexibility and customizability. We’ve also added subtitles-on-demand as a preview for our beloved Plex Passsubscribers. No more searching high and low for the right subtitles–we’ll find them for you automagically. Lastly, if you use Plex Live TV on Roku, we’ve added DVR* capability so you can schedule recordings for your favorite shows, movies, and games right from your Roku device.

[USN-3840-1] OpenSSL vulnerabilities

---------- Forwarded message ---------
From: Marc Deslauriers
Date: 2018年12月7日 週五 上午4:49

Samuel Weiser discovered that OpenSSL incorrectly handled DSA signing. An
attacker could possibly use this issue to perform a timing side-channel
attack and recover private DSA keys. (CVE-2018-0734)

Samuel Weiser discovered that OpenSSL incorrectly handled ECDSA signing. An
attacker could possibly use this issue to perform a timing side-channel
attack and recover private ECDSA keys. This issue only affected Ubuntu
18.04 LTS and Ubuntu 18.10. (CVE-2018-0735)

Billy Bob Brumley, Cesar Pereida Garcia, Sohaib ul Hassan, Nicola Tuveri,
and Alejandro Cabrera Aldaya discovered that Simultaneous Multithreading
(SMT) architectures are vulnerable to side-channel leakage. This issue is
known as "PortSmash". An attacker could possibly use this issue to perform
a timing side-channel attack and recover private keys. (CVE-2018-5407)

References:
  https://usn.ubuntu.com/usn/usn-3840-1
  CVE-2018-0734, CVE-2018-0735, CVE-2018-5407