Hello, welcome to the Wednesday, May 4, 2020 edition of the Sands and its Storm Center's

Stormcast. My name is Johannes Ulrich, and I'm recording from Jacksonville, Florida.

Let me start today with a big shoutout to the teams of sands.edu students who took part in the National Cyber League competition.

First of all, we got number one in the individual player category as well as the number

one too, but that's not it. We also got number three and number five, I believe, and a total of 10 teams among the top 100

teams out of, I believe, something like a thousand teams and 3,000 plus individuals. So,

congratulations to all the sands.edu sentinels who participated in the competition.

And if you're using our Honeypot, first of all, thanks for contributing data, and we do have some updates, first of all, if you're not running it on a Raspberry Pi, but instead on an

Ubuntu virtual machine, please make sure you update because there is an important update

for the firewall rules without the update.

You will not actually report any data.

Now, we also updated the overall installation process,

the instructions for that. So if you had problems with

this in the past, actually a Raspberry Pi now has a new immature tool that makes it a lot easier

to do the initial setup. We also do have an Azure install. So if you want to run it in like

a free Azure virtual machine, you can do

this as well. AWS should also work. And please let me know if you run into any problems.

And then we got an update to the TLS storm or TIL Storm vulnerabilities that Armas talked about in March.

This time, TIL Storm 2 affects the same TILS library

that we had in TILS Storm 1, I guess,

nano-s-SSSl, but different types of devices.

The initial vulnerability mostly affected smart UPSs from a PC or Schneider.

...