2021-W45 update from anDREa

2021-W45 update from anDREa

Production deployment moved to week 46

Due to an unforeseen issue we were unable to deploy scripts to all the VMs that is needed to separate Inbox and the Share. This will happen over de weekend of the 2021-11-12, you won't notice this. If everything is good to go, we deploy all the improvements and bug fixes (including the hyperlink updates) by early coming week. The complete list of improvements and bug fixes can be found here. 

Be Aware of using Google Play and iTunes Applications

We have all become accustomed to using applications that make our lives easier. Many of the business and productivity applications, but also other types, require permissions to contacts, emails, calendar, etc. Sometimes just only read access.  Of course they all promise to take good care, not abuse it, encrypt.

Recently we learned about an elaborate phishing attack using the token of an app.

You have to give credit to the commitment and ingenuity. The offenders downloaded some email history, went through it and pieced down an interaction from at least 4 different emails with people who were part in this process but never were mentioned together in any of the emails. Compliments on the effort.

Next they registered a domain that looked very much like one of the parties involved, used pieces of text and real attachments to request to make some requests. 

Suggestion:
  1. Go through your authorized applications
  2. Examine if you really need them
  3. Revoke everything you don't use (on a regular basis)
  4. Use a 'fake' user account for all the applications that don't offer you benefits for your productivity or interaction with others


    • Related Articles

    • 2021-W51 anDREa Update

      Last weekly update from anDREa in 2021 The current year has been an exciting year for anDREa. Quite some researchers have been using the platform since the researchenvironment.org days, the DRE on the Radboudumc Azure cloud. In March 2021, mydre.org ...

    • 2021-W33 Update from anDREa

      This should be the first of many where we will update you on released and upcoming features, things that are happening at anDREa, etc. Recently added features/improvements Type Description Bug Daily snapshot missing on some of the new and migrated ...

    • 2021-W34 Update from anDREa

      General Holidays affect the development capacity, but we're moving nicely forward. The good thing is that Microsoft sent us an Azure Sponsorship Offer that will help to move some backend improvements forward. One such thing is multi-region support. ...

    • 2021-W51 anDREa Update

      We have published a new weekly update with the following topics: Last weekly update of anDREa in 2021 *** DRE support out-of-office during holiday period *** Spot Virtual Machines are available *** Bug fix Read more at: 2021-W51 anDREa Update.

    • 2021-W50 anDREa Update

      We have published a new weekly update:  myDRE NOT vulnerable for CVE-2021-4428 - Apache Log4J2 *** Issues reported regarding resizing VMs *** anDREa FAQ ***  Bug fixes Read more at: 2021-W49 anDREa Update.