New malware found using Google Drive as its command-and-control server
backdoor Trojan, called RogueRobin, which infects victims' computers by tricking them into opening a Microsoft Excel document containing embedded VBA macros, instead of exploiting any Windows zero-day vulnerability.

Enabling the macro drops a malicious text (.txt) file in the temporary directory and then leverages the legitimate 'regsvr32.exe' application to run it, eventually installing the RogueRobin backdoor written in C# programming language on the compromised system

The new malware campaign suggests that the APT hacking groups are shifting more towards abusing legitimate services for their command-and-control infrastructure to evade detection.

It should be noted that since VBA macros is a legitimate feature, most antivirus solutions do not flag any warning or block MS Office documents with VBA code.
cybersecurity  google  threathunting  malware  c2  backdoor  macro 
4 hours ago
WhiteHat Security: Top 10 Application Security Vulnerabilities of 2018
Magecart breaches systems and replaces the JavaScript that handles payments with malicious code to send payment details to the hackers completely unbeknownst to the end user.
cybersecurity  api  vulnerability  2018  webapp 
5 hours ago
USPS Site Exposed Data on 60 Million Users — Krebs on Security
The API in question was tied to a Postal Service initiative called “Informed Visibility,” which according to the USPS is designed to let businesses, advertisers and other bulk mail senders “make better business decisions by providing them with access to near real-time tracking data” about mail campaigns and packages.

In addition to exposing near real-time data about packages and mail being sent by USPS commercial customers, the flaw let any logged-in usps.com user query the system for account details belonging to any other users, such as email address, username, user ID, account number, street address, phone number, authorized users, mailing campaign data and other information.

Many of the API’s features accepted “wildcard” search parameters, meaning they could be made to return all records for a given data set without the need to search for specific terms. No special hacking tools were needed to pull this data, other than knowledge of how to view and modify data elements processed by a regular Web browser like Chrome or Firefox.
usps  api  cybersecurity  vulnerability  databreach 
5 hours ago
Inverter choice for Van Conversions | FreedomVans
inverter: 2000 watts is as high as you want to go on a 12V battery bank, 1200 watt inverter uses 1.2 amps/ hour, while the same company’s 2000 watt inverter uses 1.7 amps/hour. 1.2ah x 24h = 29 amps/ day. 1.7ah x 24h = 40.8 amps/ day. As you can see, a larger inverter will use a bit more power each day.

We like to use the 2000watt pure sine Renogy inverter in our builds
vanlife  advice  electronics  inverter 
5 days ago
What to Know About Vent Fans in a Van
recommend the Maxxair fan 6200k. This is the manual option, as we have found the computer in the deluxe, remote version is a little bit more temperamental- and when you need your fan, that’s not something you want to worry about
vanlife  fan  advice 
5 days ago
How to Win the Battle with Condensation | FreedomVans
complete vapor barrier - on warm side of insulation
proper ventilation - crack windows or vent out the floor
diesel heater snugger heater) to avoid dew point
airflow - ventilation fan
limit exposed metal - carpet reduces condensation
vanlife  advice  fan  heater  condensation 
5 days ago
Bellingham Area Van Living- Freedom Vans
ou can drive up a forest service road (check if your suspension can handle it) and park there to sleep. You can stay in this spot up to 16 days, after which you must move your vehicle to a new location no less than 5 miles away from the previous encampment. Dispersed camping must be at least 100 feet from any water source. If you are sleeping on the forest road, this should not be a problem because roads are supposed to be built at least 100 feet from water sources anyway.

Purchase an annual Northwest Forest Pass (~$40) and hang the tag from your mirror. This notifies the forest service rangers that you have recognized the regulations.
camping  vanlife  offroad  washington  forest  mtbaker  cascades 
5 days ago
FACT CHECK: Four Things You Didn't Know About Martin Luther King, Jr.
No records documenting a formal name change for either King yet have been uncovered, so in a strict legal sense one might say that Martin Luther King, Jr.’s name officially remained “Michael” until his death. However, what constitutes a “legal name” can be quite fluid
mlk  history  civilrights  politics 
6 days ago
About advanced XML - Splunk Documentation
Important notice: The Advanced XML dashboard framework is officially deprecated. For more information, see Advanced XML Deprecation.
splunk  dashboard  xml 
8 days ago
Large Format Photo Gear B/S/T group - Heidelberg scanner
Heidelberg Tango Special Offer
Atlanta, Georgia
We have a four Tango Scanners strategically positioned for quick delivery and set up (Seattle, Dallas, Atlanta, and NYC). which we'd like to find new homes for as soon as possible within the Continental 48 States:

--->Special Offer: $8900 USD through January, 2019<---

50% down payment gets the wheels in motion
-finance the remaining balance 15 months ($300 / mo)
-free SCSI-equipped Mac G4 MDD with these four units
-2 drums and a mounting station are always included along with delivery, installation, and a 6 month parts/labor warranty
heidelberg  scanner  shopping 
8 days ago
Fresnel lenses and ground glass focusing screens your worries answered
Most fresnel lenses are plastic and can be bought on ebay. These are designed as reading aids and have a focal length between 5 and 10cm. They can easily be cut to size using scissors or a craft knife.
There has been much speculation on this topic. After much experimentation trying all four possible posiitions,
1) Camera lens side. Grooves facing back of camera lens smooth side touching screen.
2) Camera lens side. Grooves touching screen smooth side facing camera lens.
fresnel  reference  groundglass  debate 
8 days ago
What exactly does a fresnel and ground glass screen do? | Photo.net Photography Forums
On the 4x5 Speed graphic here GG with Fresnel is very accurate; it is what I use to scan artwork with our 35 and 50 Megapixel Phase One scan backs; where never the RF is used.
The GG with Fresnel also works well with the old 178mm F2.5 wide open; a lens that I have used for astro work for about 3+ decades.
On a properly settup Speed Graphic the GG and Fresnel is designed and built from the factory to focus spot on; ie it includes the (N-1)/N shift. This shift was known 400 years ago; thus it would be a total blunder for a person in Optics to not know this and thus compensate for it. The Graflok " frame's reference to seat where the GG/Fresnel combo sits" is different than if only a GG is used.
The only reason a Speed Graphic's GG-Fresnels should be off is if a doofus/Kilroy was in the loop; ie one who screwed up the precision settup. This is actually quite common; folks combine cameras; replace screens and then one gets a focus error; ie the Kilroy/ goober factor.
In my own Many Speed Graphics I have bought some off of Ebay that did have a focus error because somebody just had a GG' or had the GG/Fresnel sandwitch in wrong.

On a modern 4x5 film holder the reference surface to film I believe is 5mm; ie 0.197 inches. The Graflok frame to its reference is something like 1/8" ; 0.125 ( from memory) then one has the Ektalite Fresnel; plus the GG. The Fresnel and GG are roughly 1/16". The Optical stack of (1) machined surface; (2) Fresnel; (3) N-1/N times Fresnel thickness makes the focus be correct on GG; which faces the subject.
If one removes the Fresnel on one of these properly setup GG-Fresnel combos; the GG has to be shimmed out about 1/16 inch.
A common thrown around tolerance is that the film plane to GG error on some LF cameras is can be +/- .007 inches on some folks cameras. On a press camera the; the tolerance really has to be tighter; one is using faster lenses like my 210mm F3.5 Xenar and focusing on the back screen; ie the GG/Fresnel combo; it NOT tiny apertures but big ones.
fresnel  optics  largeformat  groundglass  graflok 
8 days ago
FS: RPT (Photobackpacker) Cascade 8x10 Film Holder Bag
Since I sold my 8x10 film holders, I don't need this Photobackpacker film holder bag. It holds three 8x10 film holders. It's in good condition.

Asking $60.00. Price includes USPS shipping. Paypal gladly accepted.
rpt  renaissancephototech  8x10  largeformat  photobackpacker 
8 days ago
Hacienda HealthCare birth: 911 call reveals nurse's surprise — ‘We had no idea’ - The Washington Post
In most cases, a patient going into labor at a health-care facility in a room full of nurses would be a stressful but manageable situation.

But the 29-year-old new mother at the center of the crisis unfolding at Hacienda HealthCare a few days after Christmas was a special — and especially dangerous — case: She had been in a persistent vegetative state since 1992.
pregnancy  medical  news 
10 days ago
Rodenstock Large Format Lenses
Rodenstock APO-Ronar-CL 240/9 #10590979, barrel, single coated, flange, Ex++/Mint- $195.
Rodenstock Sironar-N 150/5.6 #10425329, MC, older Copal #0, front cap, Ex/Ex- $195.

Rodenstock APO Sironar-S 150/5.6 #11160593, 75*, MC, black Copal #0, caps, Mint $875.

Rodenstock APO-MACRO-Sironar 120/5.6 #11332149, 70*, 150mm image circle, Copal #0, caps, Mint/Mint- $895
shopping  lenses  largeformat  rodenstock 
10 days ago
North Magnetic Pole Shifts, Forcing a Navigation Update | Fortune
First measured in 1831 in the Canadian Arctic, the pole moved slowly northward. By the 1990s, the change accelerated from about 10 miles a year to 30 miles a year. That’s led to a total shift of 600 miles over 150 years. It’s now in the Arctic Ocean and heading for Siberia.
northpole  earth  gps 
10 days ago
Stan Jorstad - Photographer - These Rare Lands
Stan Jorstad was born in New York in 1922, and passed at the age of 91 in 2013. His passion for taking pictures of the natural world began in his early childhood. At age ten, he received an Ansco folding camera from his father, beginning a quest that lasted for more than 70 years.

After attending Temple University, Stan enlisted in the 10th Mountain Division Ski Troops. During World War II, he served in North Africa and Italy, and received the Purple Heart. Living and training in the mountains greatly deepened his desire to work with nature and the environment.

"Keep close to nature’s heart… and break clear away, once in a while, and climb a mountain or spend a week in the woods. Wash your spirit clean."
John Muir quoted by Samuel Hall Young in Alaska Days With John Muir (1915).
stanjorstad  nationalparks  panorama  photographer  inspiration  landscape  quote  johnmuir 
11 days ago
How Cities Make Money by Fining the Poor - The New York Times
No government agency comprehensively tracks the extent of criminal-justice debt owed by poor defendants, but experts estimate that those fines and fees total tens of billions of dollars. That number is likely to grow in coming years, and significantly: National Public Radio, in a survey conducted with the Brennan Center for Justice and the National Center for State Courts, found that 48 states increased their civil and criminal court fees from 2010 to 2014. And because wealthy and middle-class Americans can typically afford either the initial fee or the services of an attorney, it will be the poor who shoulder the bulk of the burden
criminaljustice  jail  fines  poor  poverty 
11 days ago
New RPT single lens cases for lenses mounted on 4x4 boards
They are for lenses mounted on 4x4 boards (actually designed to take the 110mm square Toyo board which is 4.3 x 4.3")
ls-225-4 case is for lenses with lens-cap-to-lens-cap length of 2 3/8”
ls-300-4 is for lenses with lens-cap-to-lens-cap length greater than 2 3/8” up to 3 1/8”
ls-400-4 is for lenses with lens-cap-to-lens-cap length greater than 3 1/8” up to 4 1/4”
ls-525-4 is for lenses with lens-cap-to-lens-cap length greater than 4 ¼” up to 5 3/8”
Each case comes with lens focal length labels, 3 double-sided hook fasteners and the alternative closure tab.

These are priced at $25.00 each plus shipping.
rpt  photobackpacker  cases  shopping  largeformat  lens 
11 days ago
Brand new Cascade Film Holder Cases Available for 4x5, 5x7 and 8x10.
I have 16 of the 4x5, 6 of the 5x7 and 4 of the 8x10 priced at $49.95 each.
photobackpacker  rpt  largeformat  case  8x10  4x5 
11 days ago
Political trouble was ‘baked into the cake’ of Seattle’s sweeping upzoning plan | The Seattle Times
The sweeping plan to upzone 27 Seattle neighborhoods to create taller, denser housing has been given the green light, and is almost certain now to sail through City Hall in March after more than a four-year fight.


But some tidbits of insider testimony from a recent challenge to the city’s Housing Affordability and Livability Agenda (HALA) plan give some clues as to why it has been such a struggle. And also why the fight won’t likely end this spring, as the city hopes.
seattle  zoning  housing  community  neighborhood 
12 days ago
WSDOT digs up five-year-old tunnel onramp as opening day approaches - Curbed Seattle
Starting this past weekend, WSDOT started the process of unearthing those ramps to prepare to connect roadways through the tunnel. The viaduct closes permanently on January 11 to allow for three weeks of rearranging those road entrances, but WSDOT got a head start by closing the viaduct ramps closest to the new onramp the weekend before.
seattle  viaduct  bridge  history  tunnel 
12 days ago
Revisiting WSDOT’s terrifying Alaskan Way Viaduct earthquake simulation - Curbed Seattle
There’s been a lot of nostalgia around the Alaskan Way Viaduct lately. It’s been up for more than 60 years, and most of us either can’t remember or can barely remember a Seattle without it. For those that travel by car, the viaduct has some of the most gorgeous views of Elliott Bay in the public right-of-way.

But between the fraught history of choosing the viaduct’s replacement, years of delays, and nine figures of cost overruns, it’s sometimes easy to forget what got us into our present condition: earthquakes
seattle  history  viaduct  highway  construction  city  earthquake 
12 days ago
Eighteen-hundred-and-froze-to-death: 1816, The Year Without a Summer | ConnecticutHistory.org
Today, scientists point to volcanic eruptions as the reason for “the year without a summer.” Four volcanoes erupted in these years, but the fifth, Tambora, on Sumbawa, Indonesia, which erupted between April 7 and April 12, 1815, was the largest. Over 10,000 persons died as a result. The sound of the eruption was heard one thousand miles away. The ashes and cinders created darkness for three days for hundreds of miles around the volcano, and the winds carried these ashes and cinders around the earth.

Scientists also confirm that, during increased sunspot activity, the earth’s temperature is reduced. The combination of increased sunspot activity, heightened volcanic activity, and cooler water temperatures (ice on the Great Lakes and in the Atlantic Ocean) in these years combined to create an agricultural disaster, especially in New England and northern Europe.
climate  weather  history  volcano 
12 days ago
15 Facts About 'The Year Without a Summer' | Mental Floss
During the April 1815 eruption, the volcano ejected billions of tons of gas and debris into the atmosphere.
volcano  history  winter  climate  weather 
12 days ago
5.25 Million Unencrypted Passport Numbers Accessed in Starwood Breach
In November 2018, Marriott announced a data breach where there was unauthorized access to their Starwood Preferred Guest reservation system and that the data for up to 500 million guests had been compromised. In an update today, Marriott has stated that the amount of affected customers is lower than expected at 383 million, but that 5.25 million unencrypted password numbers were accessed.

- access to data such as passport numbers, Starwood Preferred Guest (SPG) account details, date of birth, gender, arrival and departure information, reservation date, and communication preferences.
databreach  cybersecurity  passport  marriott 
13 days ago
OXO Breach Involved MageCart Attack That Targeted Customer Data
A MageCart attack is when attackers inject an script into a site's checkout page in order to steal data, such as credit card details and addresses, that a customer inputs into the page's forms. This data is then sent to a remote site so that it can be collected by the attackers.

In a Archive.org snapshot from June 9th 2017, the source code of the checkout page shows that a JavaScript script was being loaded into the page from https://js-cloud.com/js/static.js.
databreach  magecart  russia  javascript 
13 days ago
» Lessons From Losing a Week of Photos to Memory Card Failure - from QT Luong's Blog
The PhotoRescue software installed on my computer had been successful at rescuing files from a corrupted card in the past, however, it did not uncover a single file this time. Hoping for better luck with Lexar’s own Image Rescue software that came with the card, without the activation code handy, I contacted Lexar’s customer support. They were quick in providing me a download, but it did not help
memorycard  forensics  photography  photorescue  backup  sdcard  lexar 
13 days ago
» Visiting the Hanford Site: Inside the World’s First Nuclear Reactor - from QT Luong's Blog
The dual side of Hanford Reach, and reason for the accidental existence of Hanford Reach National Monument, is the Hanford Site (Hanford Nuclear Reservation) the former top secret Manhattan Project plutonium production facility established in 1943, which is almost entirely surrounded by the national monument.

More notably, the largest environmental Superfund cleanup effort in the country takes place there. The site is considered to be the most toxic place in America and has been dubbed “America’s Chernobyl”, with estimates by the Government Accountability Office for the clean up reaching more than $100 billion. The reactor tours are conducted by the Department of Energy in partnership with the NPS (information and advance reservations here), daily or twice a day except on Sundays from the end of May to mid-November. In addition, there is an annual tour of the cleanup process ran by the Department of Energy.
nuclear  washington  park  tour 
13 days ago
San Jose photographer captures images of all 59 national parks
Each one was shot using a large-format camera and the trained eye of QT Luong. The Paris-born photographer got his start about 30 years ago after climbing Mont Blanc in the Graian Alps flanked by Italy and France. Once the expedition was a memory, he found he couldn’t leave behind what he’d seen. He wished he’d had a camera with him to capture the scenery.

Today, the 53-year-old San Jose resident is the only photographer who has captured all 59 national parks in large-format photographs.

Luong came to the Bay Area in the early 1990s after landing a job at UC-Berkeley as a researcher in artificial intelligence. He said he stayed for the parks, starting with his very first trip to Yosemite in 1993, when he went cross-country skiing and camping in the snow with a group of colleagues from the university. It was there, he said, where he first learned how to use the large-format camera preferred by renowned photographers such as Richard Avedon and Ansel Adams. At the same time, he was falling in love with Yosemite, a site he’d return to hundreds of times over the next two decades.
largeformat  photographer  nationalparks  nature  yosemite  ai 
13 days ago
fb: Large Format Photography - clean shutter blades with Naphtha
Can anyone point me toward instructions for how to service the shutter for this lens?

Naphtha just on blades did little to effect change, so I dropped a couple drops into the slot where the shutter cocking arm slides, and that freed it up quickly!
largeformat  shutter  service  cleaning  howto  advice 
13 days ago
About Bill Moretz — ProCamera
Electronics engineer, builds pro systems with Bill Maxwell (physicist)
knowledgeable, precise, fix focus problems, reasonably priced, incredibly quick. Can modify the Deardorff camera or other backs to have the proper focus for addition of Maxwell screen

repair  service  camera  lenses  filmphotography  maxwellscreen 
13 days ago
Analyzing 150+ Million Network Flows in Real-Time with nProbe and ElasticSketch
The goal was for us to have aggregate data per destination AS (Autonomous System) for all the source IPs connecting to this AS, and output these stats into a nice JSON file.
netflow  ntop  elasticsearch 
18 days ago
Troy Hunt: Here's Why Your Static Website Needs HTTPS
adversaries / govs / business / ISP / etc - will inject content into website connections, including ads, malware, cryptomining, etc
https  tls  ssl  cybersecurity  http  spoofing  mitm 
18 days ago
The Insect Apocalypse Is Here - The New York Times
In the United States, scientists recently found the population of monarch butterflies fell by 90 percent in the last 20 years, a loss of 900 million individuals; the rusty-patched bumblebee, which once lived in 28 states, dropped by 87 percent over the same period

The current worldwide loss of biodiversity is popularly known as the sixth extinction: the sixth time in world history that a large number of species have disappeared in unusually rapid succession, caused this time not by asteroids or ice ages but by humans.

The German study found that, measured simply by weight, the overall abundance of flying insects in German nature reserves had decreased by 75 percent over just 27 years. If you looked at midsummer population peaks, the drop was 82 percent.

What we’re losing is not just the diversity part of biodiversity, but the bio part: life in sheer quantity. While I was writing this article, scientists learned that the world’s largest king penguin colony shrank by 88 percent in 35 years, that more than 97 percent of the bluefin tuna that once lived in the ocean are gone.
insects  nature  science  bugs  extinction  biology 
19 days ago
« earlier      
abortion adventure advertising advice apple architecture art article audio automobile awesome backup baltimore beauty blackandwhite blog book books business california camera camping canon catholic chasejarvis china climbing code collab compsci copyright crypto culture cybersecurity darkroom dc death design development diy dod download eats editorial edu education election08 email europe events exercise facebook fashion film filmphotography firefox flash flickr food forensics foss free friends fuji gallery gear german germany google gps guns hack hacking hacks hawaii health hiking history home hotel howto humor inspiration international internet interview iphone iran iraq italy java landscape language laptop largeformat law legal lens life lighting lightroom linux magazine map maps maryland md microsoft military mobile model money monterey motorcycle movie mp3 music nature networking news norway npr nude nyc obama omaha outdoors panorama pdf people perl petapixel philosophy photo photographer photography photos photoshop php plugin polaroid politics portfolio portrait postprocessing printing privacy productivity programming psychology quote quotes radio realestate ref reference relationships religion rental research review ronpaul running sailing science search seattle security server service shopping society software ssl strobist studio stuttgart switzerland tech techsupport threathunting tips todo tools toread training trance travel tutorial tv vanlife video vimeo visualization volunteer war web web2.0 website wedding wifi windows windoze wireless women wordpress youtube

Copy this bookmark: