Various ESET products suffer from a malformed archive bypass vulnerability. The parsing engine supports the ZIP archive format. The parsing engine can be bypassed by specifically manipulating an ZIP Archive Compression Information Field so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the container and gives the file a "clean" rating.

The ESET parsing engine can be bypassed by specifically manipulating a ZIP Archive Compression Information Field so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the container and gives the file a "clean" rating.

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a arbitrary setting writes, resulting in the unverified changes to any system setting. An attacker can make an authenticated HTTP request, or run the binary as any user, to trigger this vulnerability.

In this age of increasing hacks and cybercrime, the Norman Rockwell Museum has a lot of digital assets, museum operations data, and private patron data that need to be protected. Find out why Frank Kennedy, IT manager at the Rockwell museum, chose Veritas Backup Exec to be a key part of the museum's security strategy.

About the Museum

Norman Rockwell is one of the great iconic painters and illustrators of American life in the 20th century. His hundreds of covers for the Saturday Evening Post magazine alone are a national treasure. The Norman Rockwell Museum is located in Stockbridge, Massachusetts, where Rockwell spent the last part of his celebrated life. The museum started two years before Rockwell's death in 1978 and houses over 100,000 of his works and also those of other illustrators.

The museum now has 140,000 annual visitors, and 220,000 people view its traveling exhibitions each year. It also has an active website with more than 600,000 worldwide unique visitors per year.

The Museum's IT System

IT Manager Frank Kennedy is an IT department of one (plus an occasional contractor). He supports 90 staff and volunteers and is responsible for critical information security and data protection for the museum.

The museum's IT network consists of several large physical servers and many single-purpose virtual machines. The single-purpose virtual machines allow for emergency service without disrupting other departments.

Frank says, "Most of our enterprise software is procured via TechSoup, which makes it affordable to license so many servers! We do not have to make do with weak, low-budget software."

Digital Assets: Preserving Art over the Long Term

Frank Kennedy explains that digital assets are of increasing importance in the work of museums. There are high-resolution images or copies of art works that must be carefully stored to preserve work in its best condition. He says that digital versions are often irreplaceable, as when the original object is disintegrating or would be damaged by further handling.

The digital versions keep a faithful record of the art in its best state. The most sensitive objects of this museum include a collection of Rockwell's cellulose nitrate film negatives, which deteriorate over time.

The museum also has analog audio and video tape and motion picture film that deteriorates, as well as works on paper that degrade with exposure to light. Other crucial data for the museum includes databases for collection management, point of sale records, donor management, and email.

Frank's backup system is designed to be redundant on purpose. He says, "Protecting this data means keeping many copies in many places. Doing so becomes a big challenge when the size of the data becomes several terabytes. I use many layers of redundancy."

The Backup Crisis

As the museum's data got bigger and bigger, and server patches piled on, the museum's previous backup solution eventually became unstable. Frank reports that his backups were failing constantly and causing him stress in his careful, risk-based management approach. When he first went to get a new backup solution from TechSoup, he discovered that what he needed was not available.

He says, "The cost for the options I use would have been over $4,000 per year, unbudgeted. TechSoup responded to users' desperate cry and worked with Veritas to bring Backup Exec back to TechSoup! I can't even describe my relief. Veritas Backup Exec is better than ever. It is so stable that I get suspicious and have to go look just to be sure it's really working!"

Why the Norman Rockwell Museum Chose Backup Exec over Other Options

Frank told me that the license he gets from TechSoup includes every option his museum needs. These options and features include

• Exchange Server backup
• Unlimited media server backups
• Unlimited agents for specific applications like VMware, Windows, Linux, and so on
• Simplified disaster recovery
• Protection against accidental deletion, damage, or overwriting
• Storing backups to disk, network share, tape (any type), or cloud — or all four at once
• Virtual machine snapshots that are viewable directly from the host's agent
• A deduplication engine so backed-up data is as clean as possible
• Backup retention periods that can be defined per job and per media server
• An excellent graphical user interface
• The status of every backed-up resource available at a glance
• Sending an email to the admin when anything goes wrong
• Running several jobs simultaneously (depending on server horsepower)

Advice for Museums and Other Organizations Considering Veritas Backup Exec

• Backup Exec is powerful software geared toward backing up an entire network. It requires some study to do the installation and learn the software.
• You don't get phone support with the charity licensing, so you need to be comfortable Googling for answers and working in the Veritas community support forum.
• Frank recommends dedicating a strong server for running the software. He likes eight cores and 32 GB of RAM; hot-swappable, hot-growable RAID-5; fast network connectivity; and a very large uninterruptible power supply (UPS).
• Avoid the temptation to install other services or applications on what seems to be a machine that is often idle.

In a Nutshell

Frank's experience is that "Veritas Backup Exec is the best, most reliable, most flexible, and versatile backup software you can get. Commit the needed resources to operate it, and you will be rewarded with peace of mind and business continuity. Your donors will be pleased that you are protecting their investment so carefully."

Image: Norman Rockwell Museum / All rights reserved / Used with permission

spanhidden

The pandemic is likely to hit the Middle East’s more fragile countries hardest.

A sparsely populated Chinese province that’s home to the headwaters of the Yangtze and Yellow rivers is attempting to set a new record for clean energy use, serving as a test bed for the entire country.

The Massachusetts Department of Public Utilities has issued an order approving long-term contracts for 9,554,940 MWh annually of hydropower between H.Q. Energy Services (U.S.) Inc. and the Commonwealth’s electric distribution companies through the New England Clean Energy Connect 100% Hydro project (NECEC Hydro).

Clearway Energy Group, one of the U.S.’s largest clean power developers, is launching a pilot electronic marketplace for renewable energy credits as more states push for solar and wind projects.

Commercial property owners with existing energy storage systems, or owners considering implementing an energy storage system, may be able to benefit from a recent order by the Massachusetts Department of Public Utilities (DPU) allowing utility companies to pay customers who agree to rely upon their energy storage systems and dispatch the energy during peak events.

Saudi Arabia, the world’s biggest oil exporter, is poised to start generating wind power within three years as part of an effort to harness renewable energy to cut local demand for fossil fuels.

Finnish energy technology group Wärtsilä has signed an EPC contract for a 100 MW/100 MWh total capacity energy storage project in southeast Asia.

The global energy supply is turning greener.

Idaho Power unveiled a goal Tuesday to provide 100-percent clean energy by 2045 on the heels of an announcement that it will purchase 120-MW of solar energy through a PPA with Jackpot Holdings at a price of less than US $0.022 cents per kWh.

After announcing nearly a gigawatt of new clean-energy projects in February, APS is now seeking proposals to build two of them in different parts of the state. The first request for proposals (RFP) seeks partners to add batteries to existing APS solar plants in rural Arizona, storing their power for use after the panels stop producing each day. A second partner is being sought to develop a large (100-MW) solar plant paired with an equal amount of storage, to bring more clean energy to customers after dark. Both of these projects will provide APS customers with more solar after sunset, serving their evening energy needs with an even cleaner resource mix.

Yuba College, a community college part of the Yuba Community College District, this week completed a 1-MW solar carport installation that it says could result in $10 million of avoided utility costs over the life of the system. The District purchased the solar outright, which resulted in optimal savings.

San Francisco Mayor London Breed wants to use PG&E Corp.’s bankruptcy to take over some of the company’s assets for the city’s power needs, a move that would shake up California’s largest utility and remake the state’s energy landscape.

Bank asset management is known to be an opaque subject. Thankfully, Diana Weis and Sarah Disch, each co-heads of the Solar Asset Management groups at their organizations, U.S. Bank and Wells Fargo Bank respectively, shared their expertise with me at SAMNA 2019. They each have over a decade of experience in solar finance. Here are three key takeaways bank asset management experts Weis and Disch shared:

Developing carbon capture and storage technology and low-carbon hydrogen is “a necessity not an option” for the UK to achieve a net zero carbon economy by 2050.

This week, diversified real estate acquisition and development firm Commercial Development Company and transmission developer Anbaric said they plan to build a renewable energy center at Brayton Point Commerce Center in Somerset, Massachusetts. The site is the former home of the Brayton Point Coal Plant, the cooling towers for which were demolished two weeks ago. (video of demolition at the end of article at this link).

Prime Minister Scott Morrison’s surprise victory in Australia’s election was a win for the coal industry and ensures the debate about tackling climate change will continue to polarize the nation.

This week, Xcel Energy announced plans to retire its last two coal plants in the Upper Midwest a decade earlier than scheduled. The acceleration of the coal closures is part of the company’s clean energy transition that includes expanding wind and solar, using natural gas and operating its Monticello nuclear plant until at least 2040.

Renewables energy investment in Asia excluding China will overtake spending on upstream oil and gas projects in the region as soon as next year, according to Rystad Energy.

Clearway Energy Group, one of the U.S.’s largest clean power developers, is launching a pilot electronic marketplace for renewable energy credits as more states push for solar and wind projects.

Saudi Arabia, the world’s biggest oil exporter, is poised to start generating wind power within three years as part of an effort to harness renewable energy to cut local demand for fossil fuels.

The global energy supply is turning greener.

Almost ten years ago, Built Green, an environmentally-friendly residential building program of the Master Builders Association of King and Snohomish Counties, began a project to develop the first net energy townhome complex in the United States. The project was created to revolutionize green housing and prove that green building could be done affordably.

In 2017, Massachusetts was ranked No. 1 in energy efficiency by ACEEE for the seventh consecutive year. On the other side of the country, California was ranked a close second after tying with Massachusetts for the top spot in 2016.

Ontario plans to cut carbon gas emissions by 30 percent from 2005 levels by 2030, setting reduction targets for industries and encouraging private investments in clean technologies.

Last week, New York Governor Andrew M. Cuomo announced that the New York State Public Service Commission approved two initiatives to increase New York's energy efficiency and energy storage targets.

Developing carbon capture and storage technology and low-carbon hydrogen is “a necessity not an option” for the UK to achieve a net zero carbon economy by 2050.

This week, diversified real estate acquisition and development firm Commercial Development Company and transmission developer Anbaric said they plan to build a renewable energy center at Brayton Point Commerce Center in Somerset, Massachusetts. The site is the former home of the Brayton Point Coal Plant, the cooling towers for which were demolished two weeks ago. (video of demolition at the end of article at this link).

Prime Minister Scott Morrison’s surprise victory in Australia’s election was a win for the coal industry and ensures the debate about tackling climate change will continue to polarize the nation.

This week, Xcel Energy announced plans to retire its last two coal plants in the Upper Midwest a decade earlier than scheduled. The acceleration of the coal closures is part of the company’s clean energy transition that includes expanding wind and solar, using natural gas and operating its Monticello nuclear plant until at least 2040.

Herbert was joined by Mitsubishi Hitachi Power Systems (MHPS) and Magnum Development at the event to detail the Advanced Clean Energy Storage (ACES) project in central Utah. They called it the largest such energy storage project in the world.

Commercial property owners with existing energy storage systems, or owners considering implementing an energy storage system, may be able to benefit from a recent order by the Massachusetts Department of Public Utilities (DPU) allowing utility companies to pay customers who agree to rely upon their energy storage systems and dispatch the energy during peak events.

Saudi Arabia, the world’s biggest oil exporter, is poised to start generating wind power within three years as part of an effort to harness renewable energy to cut local demand for fossil fuels.

Praxis Precision Medicines has chosen Australia to be its Asia-Pacific headquarters and research and development (R&D) centre.

Learn how Canadian utility SaskPower integrated its hydro and non-hydro generating assets under one management system using Hatch's Vista Decision Support System.

Enel SpA is putting the final touches on a yieldco that would hold its U.S. renewable energy assets, making it the latest power-plant owner to opt for a structure that frees up capital.

Sweden and Norway will probably exceed a joint target for renewable energy production by the end of the decade, industry consultant Nena AS said.

Tidal power is set for growth in both the near and medium terms, according to new analysis.

Offshore Renewable Energy (ORE) Catapult and consultancy firm Frazer-Nash, both based in the UK, will perform a live demonstration of their marine hydrokinetics (MHK) energy project risk assessment tool during the International Tidal Energy Summit pre-conference risk and reliability workshop in London on Nov. 23.
 

The European Marine Energy Centre (EMEC) has signed Flemish wave energy developer Laminaria to test its marine hydrokinetic (MHK) energy device at EMEC’s grid-connected wave test site at Billia Croo, off the west coast of Orkney, Scotland.
 

Brazilian power regulator Agencia Nacional de Eneria Eletricqa (Aneel) has set wholesale cap prices for an upcoming power auction that includes more than 130 small hydroelectric plants.