Thursday, August 17, 2017

Marcus (@MalwareTech) Hitchins pleads not guilty, is allowed to go back to work saving the internet

The US Justice system ( a court in Wisconsin ) has allowed Marcus Hutchins to plead not guilty, wear a GPS tracker, have limited travel, and has changed his release conditions to be allowed on the internet, according to numerous sources.

They also state:
 Assistant U.S. Attorney Michael Chmelar described Hutchins' alleged crimes as "historic," in an apparent admission that Hutchins does not represent a threat anymore.
 So 1 guy, acting alone beat out the worldwide cyberdefense community in fighting one of the biggest malware attacks in its day, infecting, according to Wikipedia - 230,000 computers in 150 countries.

Then, when traveling to DEFCON, he's arrested for writing some software that someone else used in a virus.  Oh and "firing a weapon" which was going to a shooting gallery with friends.  In Vegas. Where prostitution is legal.

In court, prosecutor Dan Cowhig said that Hutchins had been identified as part of an undercover law enforcement operation aimed at the darknet marketplace AlphaBay after officers purchased malware from him and an unnamed co-defendant, Sky News reports.
In court on Friday, Cowhig argued that Hutchins posed a danger to the public because he'd attended a gun range and fired a number of weapons while visiting Las Vegas. He said that it's illegal for foreign nationals to use a firearm on U.S. soil.
Oh and according to the same article, he donated a $10,000 bug bounty to charity, but did keep a pizza reward.

Humorously, and I submit ironically, according to Motherboard:
"the only restriction is he will no longer be allowed to access the 'sinkhole' he used to stop the outbreak of the WannaCry ransomware."

DO these people have any sense or shame?  At all?

Wednesday, August 2, 2017

It's really time to turn off SMB V1

According to Slashdot, they really let the cat out of the bag at DEFCON AND Blackhat, so users MUST disable SMBV1 on all machines.

The easiest way to do it on Windows is to go to the control panel, choose programs feature, and disable "SMB V1/CIFS" - that's enough

There are a few other ways to do it, but I think this is best and easiest.

For more information, go here: http://www.thewindowsclub.com/disable-smb1-windows