Hacker Public Radio

By Hacker Public Radio

Hacker Public Radio is an podcast that releases shows every weekday Monday through Friday. Our shows are produced by the community (you) and can be on any topic that are of interest to hackers and hob... more

4.2

3434 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Hacker Public Radio:

How many episodes does Hacker Public Radio have?

The podcast currently has 2,559 episodes available.

Hacker Public Radio episodes:

November 15, 2022 HPR3727: Expanding your filesystem with LVM
Synopis
I installed a new 1TB Crucial MX500 SSD into my work computer. While
we are mostly a Windows based business, as the IT guy I do get a bit of
discretion when updating my own machine (i.e. I get to solve all the
problems I create). Last year, I decided to run the Pop!_OS distribution
of Linux on my work computer and run Windows in a VM on it. Recently the
Windows image had grown and was causing disk space notifications. This
prompted the additional hard drive.
During the initial installation of Pop!_OS, I remember deciding not
to bother with installing Linux Volume Management (LVM). I have used it
in the past, but I am still much more comfortable with the old style
device mapping and mounting disk partitions to directories. I even
rationalized that if I needed to add more space, I will just add a new
disk with one big partition and map it to the home directory.
Now a year later I am adding a new HD and thinking, I really hate all
the space that is most likely going to be wasted once I move the Windows
image to the new drive. Ok, I guess I should figure out how to install
LVM, and use it to manage the space on both drives. Luckily there a
number of good blogs to be found on adding LVM to an existing system.
The following are the steps and commands I used to accomplish my
goal.
Commands
Most of the following commands need to be run as root. I decided to
change to root user instead of typing sudo before every command. The
basic steps to creating a single filesystem sharing the storage space
between two physical disk partitions are:
Let LVM know about the new disk.
In my case, create a volume group and add the new disk and its full
storage space to it.
Copy the disk partition with the root filesystem from the origin
disk to the new volume group
Expand the root filesystem on the volume group to the full size of
the volume group.
Update system configuration to boot with the root filesystem on the
new volume group.
Let LVM know about the old root disk partition.
Add the old root partition to the volume group.
Expand the root filesystem on the volume group to include the new
space in the volume group.
root@work# pvcreate /dev/sdb
root@work# pvdisplay
"/dev/sdb" is a new physical volume of "931.51 GiB"
--- NEW Physical volume ---
PV Name /dev/sdb
VG Name
PV Size 931.51 GiB
Allocatable NO
PE Size 0
Total PE 0
Free PE 0
Allocated PE 0
PV UUID wRBz38-xxxx-xxxx-xxxx-xxxx-xxxx-xxxxxx
root@work# vgcreate workvg /dev/dsb
No device found for /dev/dsb.
root@work# vgcreate workvg /dev/sdb
Volume group "workvg" successfully created
root@work# vgdisplay
--- Volume group ---
VG Name workvg
System ID
Format lvm2
Metadata Areas 1
Metadata Sequence No 1
VG Access read/write
VG Status resizable
MAX LV 0
Cur LV 0
Open LV 0
Max PV 0
Cur PV 1
Act PV 1
VG Size 931.51 GiB
PE Size 4.00 MiB
Total PE 238467
Alloc PE / Size 0 / 0
Free PE / Size 238467 / 931.51 GiB
VG UUID 67DSwP-xxxx-xxxx-xxxx-xxxx-xxxx-xxxxxx
root@work# pvdisplay
--- Physical volume ---
PV Name /dev/sdb
VG Name workvg
PV Size 931.51 GiB / not usable 1.71 MiB
Allocatable yes
PE Size 4.00 MiB
Total PE 238467
Free PE 238467
Allocated PE 0
PV UUID wRBz38-xxxx-xxxx-xxxx-xxxx-xxxx-xxxxxx
root@work# lvcreate -n root -L 931.51 workvg
Rounding up size to full physical extent 9
...more
27min
November 14, 2022 HPR3726: Breaches ever reaching
A short episode about the reaching effects of breaches and accounts you may have forgotten about.
New Marriot Breach:
https://techcrunch.com/2022/07/06/marriott-breach-again/
Privacy Fix: How to Find Old Online Accounts from Consumer Reports:
https://www.consumerreports.org/digital-security/how-to-find-old-online-accounts-a1266305698/
Has you email or phone number been in a breach?
https://haveibeenpwned.com/
Cool Shit:
Realtime Global Cyber Attack Map
https://threatmap.checkpoint.com/
...more
6min
November 11, 2022 HPR3725: How to use OSMAnd with Public Transport
Map of Dublin showing the Temple Bar tourist area. A red arrow points to where you can change the profile.
With the Configure Map > Profile selection menu open, a red square surrounds the Bus icon to indicate the "public transport" profile is now selected.
The map now opens to show more information about public transport is now displayed on the map. This is highlighted with a red square.
Clicking the bustop (highlighted with a red circle ) will show more information about the routes available at this location.
Once the transport stop is selected, a list of all the routes that service this location are displayed. Along with other routes that are available within a short distance.
Clicking any of the routes numbers/names will give a zoomed out map showing in red the route many of the stops towards it's source and destination.
...more
4min
November 10, 2022 HPR3724: My top Android apps
My most used apps
AIO Launcher
AIO Launcher
Termux: Terminal
emulator with packages
Termux: Terminal
emulator with packages
Connect to the home network
Start a video encoding, or rip a DVD
Vim editor
Secure files
pwgen -y 30 3: Generate three 30 character passwords with
symbols
Other confidential info
hpr3484 :: My vim setup with GnuPG
My vim setup with GnuPG
QKSMS Messaging
QKSMS Messaging: F-droid
QKSMS Messaging: Github
Firefox browser
Firefox browser
Opera browser
Opera browser
Brave browser
Brave browser
Clear Scanner PDF scanner and
OCR
Clear Scanner PDF scanner and
OCR
OCR: Optical character recognition
Multiple folders
Donation option
Antennapod
Antennapod
Tusky
Tusky for Mastodon
K-9 mail client
K-9 mail client
Viber
Viber
Android and Fedora/Ubuntu desktop app
App image
Audio recorder
Audio recorder: F-droid
Audio recorder: Gitlab
X-plore dual-pane file
manager
X-plore dual-pane file
manager
Librera E-book Reader: for
PDF, EPUB
...more
11min
November 09, 2022 HPR3723: HPR News
HPR News.
Threat Analysis;
your attack surface.
Wireless
key fobs compromised in European nations (France, Spain, and
Latvia). On October 10, 2022, European authorities arrested 31
suspects across three nations. The suspects are believed to be related
to a cybercrime ring that allegedly advertised an “automotive diagnostic
solution” online and sent out fraudulent packages to their victims. The
fraudulent packages contained malware and once installed onto the
victims vehicle, the attackers were able to unlock the vehicle, start
the ignition, then steal the vehicle without the physical key fob.
European authorities confiscated over €1 million in criminal assets
(malicious software, tools, and an online domain).
Microsoft
Office 365 has a broken encryption algorithm. Microsoft Office 365
uses an encryption algorithm called “Office 365 Message Encryption” to
send and receive encrypted email messages. The messages are encrypted in
an Electronic Codebook (ECB). The U.S. National Institute of Standards
and Technology (NIST) reported, "ECB mode encrypts plaintext blocks
independently, without randomization; therefore, the inspection of any
two ciphertext blocks reveals whether or not the corresponding plaintext
blocks are equal". Emails can be harvested today then decrypted later
for future attacks.
User Space.
Netflix
crackdown on freeloaders. Netflix is testing in Argentina, the
Dominican Republic, El Salvador, Guatemala, and Honduras Chile, Costa
Rica and Peru different
efforts to crackdown on freeloaders. The term “freeloaders” covers
the multiple users sharing a single Netflix account from different
locations. Netflix plans to charge an additional $3.00 - $4.00 per
subaccount.
Samsung
implements private blockchain to link user devices. While claiming
the private blockchain, “has nothing to do with cryptomining”, the Knox
Matrix security system links all your devices together in a private
blockchain instead using a server based group verification system. The
system, Knox Matrix, is suppose to allow devices to “manage themselves”
by auto updating, caching updates for other devices then distributing
the updates to other devices on the private blockchain.
Toys for Techs.
Juno
Tablet:
whois
lookup
DNS
Twister Report
Juno Tablet is a Beta product; overall it works with a few bugs. This
is a non-refundable product, you will only get store credit.
Price: $429.00 USD.
Screen Size: 10.1”
Screen Type: Full HD IPS screen 1920×1200 Capacitive touch,
Capacitive (10-Point) MIPI-DSI.
Refresh Rate: 60 Hz.
CPU: Intel
Jasper Lake Intel Celeron N5100 (4 Cores / 4 Threads) – 1.10GHz
(Turbo 2.80 GHz)
Graphics: Intel UHD Graphics, Frequency:
...more
14min
November 08, 2022 HPR3722: Bash snippet - plurals in messages
Overview
Have you ever written a Bash script (or any shell script) where you
generate a message like 'Found 42 files' and the day comes
when it reports 'Found 1 files'?
Have you been irritated by this? I have, and I go to lengths to deal
properly with (English) plurals in my Bash scripts.
Method 1
The simplest solution would be to use an 'if'
statement:
if [[ $fcount -eq 1 ]]; then
echo "Found 1 file"
else
echo "Found $fcount files"
fi
This works, but to have to do it for every message would be a
pain!
Method 2
The next approach to this problem might be to write a Bash
function.
pluralise () {
local singular="${1}"
local plural="${2}"
local count="${3}"
if [[ $count -eq 1 ]]; then
echo "$singular"
else
echo "$plural"
fi
}
This can be called as follows:
$ i=1; echo "Found $i $(pluralise "file" "files" $i)"
Found 1 file
$ i=42; echo "Found $i $(pluralise "file" "files" $i)"
Found 42 files
The string being displayed with echo contains a command
substitution ('$(command)') which returns
'file' or 'files' depending on the value
given.
The first two arguments can be more complex than plain strings:
$ i=1; echo "There $(pluralise "is 1 light" "are $i lights" $i)"
There is 1 light
$ i=4; echo "There $(pluralise "is 1 light" "are $i lights" $i)"
There are 4 lights
The pluralise
function is available for download.
Method 3
The GNU project has developed a set of utilities called the GNU
gettext utilities consisting of tools and documentation for
translation. This is a large subject which is not suitable for a short
HPR episode such as this one.
Among the tools is 'ngettext' which performs the
function we have been discussing - choosing among plural forms. It also
implements translations if desired (and translation files are provided
as part of the software being developed).
We will not discuss the translation topic here, but the choice of
plurals is something that can be used in Bash scripts.
The 'ngettext' tool takes three mandatory
parameters:
MSGID - the singular form of the text
MSGID-PLURAL - the plural form of the text
COUNT - the value used to make the singular/plural
choice
There are other optional parameters and options but they are not
relevant here.
The tool can be used in exactly the same way as the
'pluralise' example above.
$ i=1; echo "There $(ngettext "is 1 light" "are $i lights" $i)"
There is 1 light
$ i=4; echo "There $(ngettext "is 1 light" "are $i lights" $i)"
There are 4 lights
Whether you use this or a Bash function is your choice.
Conclusion
I have been using ngettext in my scripts since I
discovered it. If you also need to provide messages in your projects in
other languages then this might be a good idea.
I admit that my understanding of the GNU gettext project
is superficial, so, on reflection it might be better to use a Bash
function, since I don’t currently need all of the features GNU
gettext provides.
Links
...more
10min
November 07, 2022 HPR3721: HPR Community News for October 2022
table td.shrink {
white-space:nowrap
}
New hosts
Welcome to our new hosts:
Paul J,
m0dese7en,
CCHits.net Team.
Last Month's Shows
Id
Day
Date
Title
Host
3696
Mon
2022-10-03
HPR Community News for September 2022
HPR Volunteers
3697
Tue
2022-10-04
Mis-information, Dis-information, and Fake News. You are a product and target for all of it.
Lurking Prion
3698
Wed
2022-10-05
Spectrogram
Klaatu
3699
Thu
2022-10-06
Old and new videogames/board games with guest binrc
Celeste
3700
Fri
2022-10-07
Introduction to Batch Files
Ahuka
3701
Mon
2022-10-10
ReiserFS - the file system of the future
Paul J
3702
Tue
2022-10-11
Easter Ogg
Dave Morriss
3703
Wed
2022-10-12
McCurdy House Tour
operat0r
3704
Thu
2022-10-13
Follow up to hpr3685 :: B
...more
56min
November 04, 2022 HPR3720: Practicing Batch Files With ECHO
This continues our look at batch files by demonstrating the use of the ECHO command. This command can be used to display things on the screen, or hide them, as you wish.
Links:
https://www.ahuka.com/dos-lessons-for-self-study-purposes/dos-lesson-16-practicing-batch-files-with-echo/
...more
14min
November 03, 2022 HPR3719: HPR News
InfoSec; the language of
security.
What
is Typosquatting and How Do Scammers Use it?
Typosquatting, as an attack, uses modified or misspelled domain
names to trick users into visiting fraudulent websites; the heart of
this attack is domain name registration. Typosquatting is deployed by
scammers to defraud unaware users. Attackers will attempt to: mimic
login pages, redirect traffic, download malware, and extort users.
Past Known Typosquatting Attacks.
Several
Malicious Typosquatted Python Libraries Found On PyPI
Repository
Over
700 Malicious Typosquatted Libraries Found On RubyGems
Repository
Security
advisory: malicious crate rustdecimal
This
Week in Malware-Malicious Rust crate, 'colors' Typosquats
Solutions to Typosquatting.
How
to stop typosquatting attacks
What
Is a Checksum (and Why Should You Care)?
PiHole
Ubuntu font
family
DNS monitoring services.
Link to dnstwister: https://dnstwister.report/
Link to whois: https://www.whois.com/whois
Password Managers.
Link to bitwarden: https://bitwarden.com/
Link to keepassxc: https://keepassxc.org/
Two-factor and
Multifactor Authentication.
First, authentication. This is the process of verifying the
validity of something; in our case, user credentials/identity. The most
common way to authenticate is: USERNAME and PASSWORD.
This is just a single layer (single-factor authentication) and isn’t
enough to discourage attackers.
Second, 2FA (Two-factor Authentication). 2FA increases the
difficulty for attackers by providing users an additional layer of
security to accomplish authentication. Common 2FA methods are: TOTP/OTP
(the One Time Password), Authenticator
Applications (Bitwarden, KeePassXC,...), and Security Keys (Yubikey). This works similar to ATMs;
to authenticate the user must provide both knowledge (account
PIN) and a physical object (bank card).
Last, but not least, MFA (Multifactor Authentication). Similar to
2FA, MFA offers users security with the addition of biometrics
(fingerprint scan, retina scan, facial recognition, and voice
recognition). Attackers must overcome the knowledge factor, Possession
factor, Inherence/Biometric factor, Time factor, and sometimes Location
factor.
MORE helpful security information.
FIDO Alliance
Specifications.
Field
Guide to Two-Step Login.
...more
12min
November 02, 2022 HPR3718: Making Ansible playbooks to configure Single Sign On for popular open source applications
This is a recording of a short introduction into my latest
project.
To help sysadmins everywhere the Onestein organization (an
organization specialized in Odoo implementations) invested 4 month of
research to create a set of easy to use Ansible playbooks to configure
single sign on (SSO) for popular open source applications to enable them
to authenticate to a Keycloak server as the central identity
provider.
These playbooks have been published on https://github.com/onesteinbv/project_single_sign_on.
The list of supported applications are currently:
Bitwarden
Jenkins
Gitlab
Keycloak (not SSO, but the identity provider)
Nextcloud
Odoo
Xwiki
Zabbix
All playbooks and servers are for Ubuntu servers and are meant to be
used as a starting point.
5 minute YouTube talk at the 2022 Nextcloud conference about this
project:
https://www.youtube.com/watch?v=pDPKzo8Bi10
...more
6min

FAQs about Hacker Public Radio:

How many episodes does Hacker Public Radio have?

The podcast currently has 2,559 episodes available.

More shows like Hacker Public Radio

The Changelog: Software Development, Open Source by Changelog Media

The Changelog: Software Development, Open Source

289 Listeners

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

373 Listeners

LINUX Unplugged by Jupiter Broadcasting

LINUX Unplugged

268 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

653 Listeners

Curious Cases by BBC Radio 4

Curious Cases

826 Listeners

The Strong Towns Podcast by Strong Towns

The Strong Towns Podcast

422 Listeners

Late Night Linux by The Late Night Linux Family

Late Night Linux

164 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,046 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

181 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

189 Listeners

TechCrunch Daily Crunch by TechCrunch

TechCrunch Daily Crunch

42 Listeners

Strict Scrutiny by Crooked Media

Strict Scrutiny

5,809 Listeners

2.5 Admins by The Late Night Linux Family

2.5 Admins

98 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

140 Listeners

What the Hack? by DeleteMe

What the Hack?

221 Listeners