Hello, welcome to the Thursday, June 15th, 2017 edition of the Sands and a storm center's

Stormcast. My name is Johannes Ulrich, and today I am recording from Jacksonville, Florida.

Looks like some users discovered somewhat of an annoyance when it comes to network settings and

System D. System D is a recent addition to Linux and it is used to start various

services like for example the networking subsystem.

Turns out that if you do not configure your DNS server or NTP server it does fall back to not well documented defaults. Now,

typically that's not a huge issue. The defaults for the DNS server are the Google DNS server,

which are quite often used. Anyway, the NTP server is a little bit more tricky because it also uses a Google server

that actually should no longer be used.

But the overall problem may be that, for example, if you're using DNS queries to unauthorize

DNS servers to identify infected systems, this may lead to false positives.

Also, DNS changers often have set the DNS settings to the Google DNS servers in order

to bypass some filters. So overall, if you seize Linux systems all of a sudden connecting to Google DNS

servers, it may not be malicious, it may just be this default configuration. And researchers at

P1 security took a closer look at voice over LTE. And now with LTE networks, what's happening is that pretty much data is the only thing being sent.

And if you're running voice over LTE, what you're actually doing is you're running voice over IP.

And with that, of course, voice over LTE inherited all the favorite voice over IP

protocols like for example SIP and associated vulnerabilities so for example SIP invites can be used in order to enumerate users just like it has been done for normal voice over IP networks. In addition, once Malware infects

an endpoint like a phone, it's able to listen in on the call. The calls, for example, on Android,

are just terminated on a special interface. So just like any other network interface, you could

run T-Svied-up on it in order to record the call.

The encryption with voice over LTE is done by LTE, so the actual voice over LTE channel does not add any additional encryption.

...