#wgetNoSatisfaction

The video is the Rolling Stones singing (I Can't Get No) Satisfaction, for those who can't see the iframe.

We have another corker of a Linux bug to patch on all our systems this morning, this time in the nearly-ubiquitous GNU wget. In light of the fact all vulnerabilities need catchy names now, I'm dubbing this one #wgetNoSatisfaction. You're welcome.

From MITRE:

Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.

Wget 1.16 patches this. If you can't update, enforce the --retr-symlinks option in the relevent place(s) for your system, such as:

# echo 'retr-symlinks=on' >> /usr/local/etc/wgetrc

From the Wget manpage:

Usually, when retrieving FTP directories recursively and a symbolic link is encountered, the linked-to file is not downloaded. Instead, a matching symbolic link is created on the local filesystem. The pointed-to file will not be downloaded unless this recursive retrieval would have encountered it separately and downloaded it anyway.

When --retr-symlinks is specified, however, symbolic links are traversed and the pointed-to files are retrieved. At this time, this option does not cause Wget to traverse symlinks to directories and recurse through them, but in the future it should be enhanced to do this.

As with Shellshock, FreeBSD is unaffected unless you've pulled wget from ports.


Decorations

Calm down with the decorations. It's October!


Keyloggers

Travis on the GRC Security newsgroup:

The question still is "Do you trust Microsoft?" Every OS ever made has/had a keylogger built it, [sic] it's called a keyboard driver.

And Steve's response:

Keyboard drivers don't keep a log.


Gough Whitlam 1916–2014

Gough Whitlam in 1957

Ladies and gentleman, we may well say "God save the Queen", because nothing will save the Governor-General!

One one the great progressive Prime Ministers in Australian history. Both my parents, but especially my mum, loved what he did.

At the time, he granted exemptions for military conscription, ended Australian involvement in the Vietnam War, abolished university fees and voted for sanctions against apartheid South Africa. Thanks to his 1970s cabinet, Australia has universal healthcare, recognises Australian Aboriginal land titles, abolished the death penalty, allows for no-fault divorce, has some of the world's strongest consumer protections, and a managed national parks system.

As Lindsay Tanner so eloquently wrote in 2011:

Whitlam and his government changed the way we think about ourselves. The curse of sleepy mediocrity and colonial dependency, so mercilessly flayed in 1964 by Donald Horne in The Lucky Country, was cast aside. Outdated social attitudes were brutally confronted. The tribal conservatism of the ’50s that had been slowly eroded by prolonged prosperity was unable to withstand this concerted assault. The Australia in which Indigenous people were seen as subhuman, women were second-class citizens, censorship of artistic work was commonplace, nature was solely for exploitation, electoral laws were rigged and community leaders were rewarded with knighthoods was relegated to the history books.

It's hard to imagine a modern Australia without Mr Whitlam's contributions. RIP.

News coverage and articles


Oktoberfest

This afternoon, Clara and I met with our family friends in Normanhurst for a belated Oktoberfest celebration. Real beer, amazing home cooked German food, and the warmest, nicest people I know. Sydney also did its bit with stunningly beautiful weather, a nice change from what we had yesterday!

On account of my dad's job, we never spent more than few years in the same house, and rarely in the same city. Growing up, Elke and I clung to whatever stability we could find. Throughout the years, we knew that whenever we came back to Sydney to visit, Bem and Erna Adolphs would be there with open arms in their beautiful home.

I have memories of climbing their trees, of the room where their youngest daughter (my age) and sister would dress up to put on plays for the parents. The artwork, their backyard, that impenetrable hallway that seemed a little smaller each time I went back. Mostly though, I remember the people.

It got me thinking about what memories with friends I'm forming here now. My dad met the Adolphs while he was studying in Germany in the 1970s. If I ever have kids, will they remember the friends I made while I was studying here?

Food for thought. Gute Nacht~