cex.io emails database went to spammers

I went over my spam folder on gmail and found out that there are couple of emails with the same subject line, both email addresses used on one and only website – cex.io (I know that for sure, as I use catch all on multiple domains, all forwarded to my main gmail account), keeping in mind that history repeats itself and mtgox had some security problems, I was surprised to see that spam body contained  a message promoting a forum filled up with credit card database trading threads, ‘unbelievably’ cheap hot selling merchandise with strictly non-refundable and mostly anonymous methods of payment and ‘hax0rz’ style design.

I’m sure that cex.io email database was leaked, it could be a result of actual attack or maybe an employee, abusing access to database dumped the whole thing, as they have enough sources of income. In between writing these lines I ran a google search and realized that those are not news, that people assume that cex.io themselves are selling the db to spammers and it couldn’t be true, ghash.io is the biggest mining pool on the interwebs, so they have stable income for sure, also, reputation is more important than couple of grand just once.

In other words, if you use cex.io for trading or ghash.io (they are the same company) – you’re screwed and will probably lose your coins.

Be safe, use two factors or notifications to stay on the healthy side.

Security Vulnerability CVE-2014-0160 (Heartbleed)

         CVE-2014-0160 – Heartbleed got us all with pants down, there’s a new vulnerability found in a pretty recent version of openssl, it affects all versions starting 1.0.1 and fixed in 1.0.1g, it got a name debian vendors claim that the fixed version is 1.0.1e-2+deb7u5, but while I was writing this post openssl-1.0.1e-2+deb7u5 was gone and openssl-1.0.1e-2+deb7u6 replaced it, Debian announcement  did not update on this one.

Here’s how you patch CVE-2014-0160 on debian/ubuntu:

Debian:

Squeeze – unaffected

Wheezy  –

apt-get update

apt-get install openssl=1.0.1e-2+deb7u6

Ubuntu:

for example on 12.04

apt-get update

apt-get install openssl=1.0.1-4ubuntu5.12

other versions – check yourself,

when you finished fixing it, don’t forget to  /etc/init.d/ssh restart

and keep security in your sources list!

Primecoin client for OSX 10.9 Mavericks

Many people are looking for the solution for running a PrimeCoin wallet on Mac OSX 10.9 (Mavericks), myself running it on my macbook I had to spend some hours of finding out a way, downloaded it from github and compiled, so here it is
just download and it works.

P.S.
yes, it is possible to mine with this client, it’s just it’s not HP version (high performance) of the miner, but it can mine almost the same

Donations are appreciated, XPM: AUJMpUojaGfFkJYMfn11xfFmziBvSRHUC8

הדרך המהירה ביותר בעולם להטעין את הטלפון

על מנת להטעין את הסמארטפון עד מאה אחוז סוללה מספיק

קול חי וכיכר השבת

קול חי וכיכר השבת הם שני הדברים שהסעירו את האינטרנט בישראל, אבל מה הם ישאל הקורא הסקרן? הם המדיה החרדית, אם לדבר בקצרה. אותםהאנשים בני הכתות שאומרים שאינטרנט בא מהשטן ועוד כל מיני אגדות פרי הזיותם. אבל ברצינות, שם לרדיו – קול חי, שמשדר בעזרת טכנולוגיה – זה לא חי! למה הם משלים את עצמם? למה להתלבש ולהתנהג כמו במאה ה19 ופתאום לאמץ אינטרנט להפצת התכנים? למה לא להעמיד את יענקל בכיכר השבת שיצעק ויספר מה חדש? זה גם היה. וואו, יצא לי קצת פוסט שנאת חרדים או לא בדיוק שנאה, אני פשוט לא מבין את הצביעות הזאת.