Hello, welcome to the Wednesday, January 4th, 2017 edition of the Sands and Storms anders Stormcast. My name is Johannes Ulrich,

and the I'm recording from Jacksonville, Florida. Just before Christmas, we had a story about LG TVs,

apparently getting affected by ransomware. Well, in this case, it was a certain type of TV that actually ran

Android and these TVs were infected by the same ransomware as all other Android devices

if you install a malicious app. In this particular case, the owner installed an app that promised free

videos. Now, the problem with these TVs is that there are no published factory reset instructions.

So essentially, you're stuck with this TV. The only thing it will display after the ransomware runs is a fake FBI notice, essentially

asking you to pay a ransom to have your TV unlocked, which actually in the case of a TV isn't actually all that easy to do.

A user affected by this contacted LG and initially got a rather expensive repair estimate,

but eventually LG went ahead and now published the factory reset instructions for this TV.

In case this ever happens to you or one of your relatives' friends, I'll link to a video showing these instructions in the

show notes. And then we got an update for LipPNG. Now, this is one of the basic graphic libraries

for Linux as the name implies it's used for PNG images and the vulnerability is

triggered by first adding a text structure to an image removing it and then adding another

one now as the note about the bug explains this is rather unlikely to happen but as I

say it has happened not clear if this

was actually exploited as part of an attack or if just someone ran into this vulnerability while

writing some png related code updated versions of this library should already be available for all common Linux distributions,

so apply the patch as soon as you get to it.

And then we have yet another vulnerability related to security software intercepting SSL traffic.

Now, this has become more and more standard that personal security software that

you install on your system does intercepts SL traffic. It does this by installing a trusted

...