OpenWRT is Vulnerable to Remote Code Execution Attacks

For three years, router firmware OpenWRT has been vulnerable to remote code execution attacks.

The researcher also found that it was trivial for attackers with moderate experience to bypass digital-signature checks that verify a downloaded update as the legitimate one offered by OpenWTR maintainers. The combination of those two lapses makes it possible to send a malicious update that vulnerable devices will automatically install.

This is especially concerning because OpenWRT is commonly recommend by privacy advocates as an alternative to built-in proprietary router firmware.

SiriusXM Premier is Free Through May 15

Announced by Howard Stern, Sirius XM is giving people free access to Premier content through May 15, starting today.

Listeners will have free access to more than 300 channels of dynamic programming, featuring the acclaimed The Howard Stern Show , hundreds of exclusive ad-free music channels, and vital news and information sources.  SiriusXM is also adding entirely new curated content, and bringing back some beloved music channels by top artists.

Zoom Meetings Aren’t Encrypted End-to-End, Despite Marketing

Along with recent news that Zoom sent your data to Facebook (although it stopped) now we learn that its video calls don’t use end-to-end encryption, despite the company marketing it as such.

…But despite this misleading marketing, the service actually does not support end-to-end encryption for video and audio content, at least as the term is commonly understood. Instead it offers what is usually called transport encryption, explained further below.

It just keeps getting worse for Zoom. It’s unfortunate the company has chosen such tactics, because it really is one of the better video calling apps out there.