Oh, the Who-manity: ‘Grinch’ security bug wreaks havoc on Linux

grinch security bug wreaks havoc on linux systems
A glitch called “Grinch” after the perennially loathed yet beloved Dr. Seuss cartoon character has recently been found laying low in the depths of Linux source code. It has the catastrophic potential to let bad guys to seize remote control of any and all devices based on the platform. Including Android mobiles, which at their core have Linux roots planted in their software.

By “remote control” IT network security provider Alert Logic means total, unrestricted command over any data stored on liable systems, plus the ability to install and execute trojans and other malware contents from a distance.

The way Grinch works is by allowing access to the su (aka super user) command, and letting unauthorized individuals manipulate the wheel group assigned by default to the legit admin of the system. This results in privilege escalation which ultimately gives the attacker full access to all system functions.

That sounds a lot like Shellshock’s mischievous capacity. However, according to Stephen Coty, Alert Logic’s Chief Security Evangelist, Linux admins and users can dodge attacks and remove all risk by implementing stronger methods of authentication and authorization.

Users can do this through PolKit, a policy management tool in Linux. To be frank, the settings users need to change to thwart to the Grinch are a bit over our heads, so we recommend you check out this recently broadcasted webinar about the “Grinch” flaw.

If you take authorization one step forward, and switch the default wheel assignment, you should stay clear of the green baddie with a heart two sizes too small, and enjoy your holidays in peace. Probably. Most likely. Hopefully.

Photography

The Loupedeck Plus custom keyboard will make you feel like a pro video editor

With recently added support for Final Cut Pro X, the Loupedeck Plus improves speed and accuracy for video editors. With a collection of customizable buttons and dials, the Loupedeck can almost completely replace a mouse and keyboard setup.
Computing

Don’t call it retro. Atari’s VCS is a modern console for PC gamers

You might think the Atari VCS is another retro console like the Nintendo SNES Classic or Sega Genesis Mini. You'd be wrong. Atari's VCS is actually a modern console that runs PC hardware. Yes, it can play Atari games, but it does much more.
Computing

Mac Pro vs. iMac Pro: Apple's incredibly powerful beasts square off

Apple’s Mac Pro and iMac Pro are both incredibly powerful machines, but there are some key differences between them. Which one is best, and which one should you buy? Our guide lays it out.
Home Theater

Powerful but pricey, Roon is what Apple’s iTunes should have been

Now that Apple has killed iTunes, it's time to take a good look at Roon. With its unique music-discovery features and the ability to stream audio to any speaker, the only question is whether the app can justify its steep price.
Deals

Amazon cuts prices on Microsoft Surface Pro 6 and Surface Go

The Microsoft Surface series is an excellent alternative to other tablets if you're a dedicated Windows user, and the superb Surface Pro 6 (our favorite 2-in-1) and its cheaper sibling, the Surface Go, are both on sale right now.
Deals

Amazon sale drops deals on Microsoft Surface laptops

Despite an increasingly crowded market, the sleek Microsoft Surface laptops have left their mark. Both the Microsoft Surface Laptop 2 and Surface Book 2 are discounted on Amazon right now, too, with deals that can save you up to $300.
Computing

AMD’s Ryzen one-two punch will end with a 64-core Threadripper in 2019

AMD's Threadripper may be set to deliver the killing blow to Intel in Q4 2019, with a rumor suggesting a new Zen 2-based Threadripper line is coming down the pipe with a top chip that has as many as 64 cores.
Computing

If you need your laptop to be large, these ones are most in charge

Whether you're in the market for a mobile workstation or a gaming behemoth, there's probably something in the 15-inch form factor that can fit the bill. Here, we've rounded up the best 15-inch laptops available.
Computing

Need more pixels? These 4K laptops have the eye-popping visuals you crave

If you're looking for the best 4K laptops, you need to find one that has powerful internal hardware, and doesn't scrimp on weight and battery life. All of these 4K notebooks are great options, but which one is the right one for you?
Photography

What’s the difference between Lightroom CC and Lightroom Classic?

Lightroom CC has evolved into a capable photo editor, but is it enough to supplant Lightroom Classic? We took each program for a test drive to compare the two versions and see which is faster, more powerful, and better organized.
Computing

HP's Spectre x360 is a better 2-in-1 than Microsoft's Surface Laptop 2 is a clamshell

The Microsoft Surface Laptop 2 is a refresh of Microsoft's clamshell option, an oddity given Microsoft's creation of the modern 2-in-1. The HP Spectre x360 13 is, therefore, an interesting comparison.
Deals

Amazon deal drops prices on Asus VivoBook laptops and 2-in-1s

Asus is one of the premier PC brands cranking out Windows ultrabooks today with its sleek VivoBook series, and these Amazon deals let you score one for $700 or less. Read on to find out what we love about these laptops and how you can save.
Deals

The best Amazon Prime Day 2019 deals: Leaked date and what you need to know

Amazon Prime Day 2019 is still a month away, but it's never too early to start preparing. We've been taking a look at the best discounts from previous Prime Days to give you our predictions of what to expect this year.
Computing

Air, Pro, or just a MacBook? Here's our guide to finding the right Apple laptop

Apple's lineup of MacBooks has started to swell, leaving fans a bit confused about which laptop they should buy. Depending on what you're looking for, we'll point you in the right direction.