TECH TALK
Hackers Exploit Meltdown/Spectre Vulnerabilities with Malicious “Patches”
January 17, 2018 Kayla Thrailkill (Posted here 8:50 A.M., 01/ 21/ 2018)
Cyber Criminals Use Processor Vulnerabilities to Spread Malware
Once security issues go global, cyber criminals tend to exploit them for their own gain. It happened with the global ransomware treats, NotPetya, BadRabbit and WannaCry. Hackers used fraudulent decryption keys to spread malware. Now, they’re using malicious Meltdown/Spectre “patches” to spread malware. According to Tech Republic, the malicious patches have been targeting Germany; however, it won’t be long until they’re spread globally.
The malicious patch is being sent via phishing scams, claiming that the installation of the patch is critical. Within the email, users are asked to go to a certain website to download the patch. Interesting enough, the website they’re asked to go to is an https:// page. Often times users believe clicking on https:// links are safe because the “s” stands for secure. Although, the data transmitting from the computer to the website is secure, it does not mean the content within the page is safe and not malicious.
Avoid scams such as these by keeping two things in mind. First, valid security patches will not be distributed to users individually. Secondly, any email or website that is urging users to implement patches or updates are signs of red flags. Instead patches will be launched within an automatic update. Unless of course the user has opted out of automatic updates, in which case the patch will launch at the time the software update is manually launched, which can be done through the Settings feature within the operating systems.
Have seen where some complain about quality of "live stream" from City on 18th Council Meeting. Others telling me that they were surprised that confrontation between Mr. Conley and Mr. Rapp was streamed. Said they had no choice, too many people there and since City Council has little credibility now, censoring so soon would be the end of whatever is left.
Meeting started with Ms. Stover of Sam's Club made a cash presentation for Neale Cemetery. Seems that is never going to finish. Ms. Kern that did her gushing routine on how without Sam's, so many events would not go well. Wonder how the thousands laid off at those 60+ Sam's would think about the generosity shown here? And again, Mr. Rapp is on the hot seat so roll out another goodie to fool the folks.
Then Mr. Metz noted the $25,000. spent on snow removal. We only had like 3 inches, Seems a lot of money for this effort? Maybe broken truck needed new engine?
Than Mr. Harris got up and began his story on what he wants for the upcoming year. Not sure it will meet the past couple or so that ran in excess of a $1,000.000., plus, but seems to be a bit less. No Splash park or Astro Turfed Soccer Field this year.
(As an aside if I may, the has just received the Sales Tax Distribution Payment for the Oct- Dec 2017 period. It being $884,389.12. This combined with the First Quarter Fiscal Year payment for Jul- Sep 2017 period of $833,188.78= A year to date for 1/2 of Fiscal Year= $1,717,599.90. That is right folks One Million, seven hundred and seventeen, five hundred and ninety nine dollars and ninety cents. $1,717,599.90. And still nothing to give back to YOU. For a comparative, in the same period a year earlier, the City received$834,403.47, $49,985.65 LESS. Pretty much on track for $180K to $200K more this year than last).
So what does this say. Bet Mr. Harris will get his new Maintenance Building at about $175,000.; plus his new Vehicle?
He began his story on the fields needing aerating and his not going deep enough Says needs $5K to rent aerator, but can handle $2K out of his budget so only needs $3K. Already admitting he has a slush fund to pull out off? If this is a legitimate need, why is he renting this machine instead of buying a new one? With supposedly five (5) fields, he can do one deep each year and use his short one for the other ones? To me, considering how much the City is into these programs, this would be a good investment- maybe deep aerate two fields a year, but could not leave one to fallow, but could at least give a deep aerate? And of course with the intent to build another Field at Johns Manville, the need will only grow. Do we also aerate the Field at Jackson Park that we use?
Find it very hard to believe he cannot find someone to go up on those light Poles and do the needed Maintenance? I understand being a bit off on heights, pretty sure I could not do it now. But remember, we have 20+ VFD guys who are supposed to be able to climb up a 100' Ladder? Now some of them could want to make some extra bucks working on those poles? Something comes up where Mr. Rapp wants a huge Flag hanging down somewhere, just recall the Truck.
Mr. Rapp noted City pays for Back Ground checks on Volunteers. What Department pays for them? Again, why not Human Resource Director? Seems too much done that City should be doing? Already seems we have Schwendeman doing Employees?
I did find out by listening what it is that the Human Resource Director is doing at least part of the time. She does Mr. Rapp's typing and office needs. This way, he keeps tens of thousands in his Mayor account for a Secretary that he does not need, but can hire if he wants. I would call that a "slush fund"? Seems a few years back he hired an Administrative Assistant. Person went by the name of Linda Kern. Now is part of Economic Development Team too. Doesn't part of her salary come out of his accounts? Seems some folks are NOT doing what hired to do, and what needs doing is done by outside groups?
Now I am not very smart and will be the first one to admit it, but with Schwendeman increasing the cost of Back Ground Checks and the VRIA seeming to be doing Back Ground Checks, maybe the H/R Department should pick up this instead? And someone give Mr. Rapp a six week course on Microsoft Word in how to type/ print / save documents.
Now as I have went too long again, and before I get more into Mr. Rapp's Budget, I will stop for today. Tuesday maybe the Town Hall Meeting or back to Budget Meeting. 'nuff said'.