IT

Is Work Easier For 'Digital Nomads'? (forbes.com) 40

A digital nomad describes what no one ever warns you about after selling everything and then travelling to Singapore, Malaysia, Vietnam, and Thailand "before doing the Working Holiday Visa thing in Australia and New Zealand." It was the greatest solo travel adventure of my life and I loved it. That said, I've had some time to reflect on my experience and there are some things I wish I'd known before diving in headfirst... [I]n reality, you're working just as hard, only from a different place. You still have deadlines...and you still have to hound clients who take forever to pay you after your project is done.

Did I mention that this is all done in a completely different time zone from the people you're working with? This can also be tricky when it comes to conference calls but nothing you can't figure out and plan for.

While you may have given yourself a more beautiful backdrop to work with, you're still going to spend a decent amount of time behind your laptop wherever you go, though on the bright side, you will also have the opportunity to work alongside the locals, hear different accents, taste new and amazing food and check out your new surroundings whenever you're off, so it's all good...

I once spent six months living "on the road" as a digital nomad, which felt like a nice long extended trip (rather than settling for an exotic one-week vacation). But it'd be interesting to hear anecdotes from Slashdot's readers — so share your own thoughts and experiences in the comments.

And is work easier for digital nomads?
Databases

'Meow' Attack Has Now Wiped Nearly 4,000 Databases (arstechnica.com) 54

On Thursday long-time Slashdot reader PuceBaboon wrote: Ars Technica is reporting a new attack on unprotected databases which, to date, has deleted all content from over 1,000 ElasticSearch and MongoDB databases across the 'net, leaving the calling-card "meow" in its place.

Most people are likely to find this a lot less amusing than a kitty video, so if you have a database instance on a cloud machine, now would be a good time to verify that it is password protected by something other than the default, install password...

From the article: The attack first came to the attention of researcher Bob Diachenko on Tuesday, when he discovered a database that stored user details of the UFO VPN had been destroyed. UFO VPN had already been in the news that day because the world-readable database exposed a wealth of sensitive user information... Besides amounting to a serious privacy breach, the database was at odds with the Hong Kong-based UFO's promise to keep no logs. The VPN provider responded by moving the database to a different location but once again failed to secure it properly. Shortly after, the Meow attack wiped it out.
"Attacks have continued and are getting closer to 4,000," reports Bleeping Computer. "A new search on Saturday using Shodan shows that more than 3,800 databases have entry names matching a 'meow' attack. More than 97% of them are Elastic and MongoDB."
Encryption

State-of-the-Art Crypto Goes Post-Quantum (with Containerized TinySSH) (opensource.com) 40

emil (Slashdot reader #695) writes: The advent of quantum computing poses a well-recognized threat to RSA and other well-known asymmetric cryptosystems. It has been four years since NIST opened the post-quantum cryptography competition, and we are seeing extensive delays compared to AES.

A new and (hopefully) quantum-secure SSH key exchange, based on NTRU Prime, has been present in OpenSSH since January 2019, first implemented in TinySSH shortly before. This key exchange is marked by OpenSSH as experimental, and not enabled by default.

For those ready to evaluate NTRU Prime, or otherwise seeking an SSH server with "state-of-the-art crypto" (as described by TinySSH author Jan Mojí), a complete procedure for a Musl build and Busybox container deployment is presented, with additional focus on supplemental servers and key conversion.

Slashdot Top Deals