February 2015 - wlug - list.wlug.org.nz

Kali Linux 1.1.0 Released
by Paul Wilson 12 Feb '15

12 Feb '15

"After almost two years of public development (and another year behind the scenes), we are proud to announce our first point release of Kali Linux - version 1.1.0. This release brings with it a mix of unprecedented hardware support as well as rock-solid stability. For us, this is a real milestone as this release epitomizes the benefits of our move from BackTrack to Kali Linux over two years ago." http://www.linuxscreenshots.org/?release=Kali%20Linux%201.1.0 For all those "Security Testers" out there this could be interesting.... Regards Paul Wilson

4 4

Firefox To Mandate Extension Signing
by Peter Reutemann 12 Feb '15

12 Feb '15

'In a recent blog post, Mozilla announced its intention to require extensions to be signed in Firefox, without any possible user override. From the post: "For developers hosting their add-ons on AMO, this means that they will have to either test on Developer Edition, Nightly, or one of the unbranded builds. The rest of the submission and review process will remain unchanged, except that extensions will be automatically signed once they pass review. For other developers, this is a larger change. For testing development versions, they’ll have the same options available as AMO add-on developers. For release versions, however, we’re introducing the required step of uploading the extension file to AMO for signing. For most cases, this step will be automatic, but in cases where the extension doesn’t pass these tests, there will be the option to request a manual code review."' -- source: http://tech.slashdot.org/story/15/02/11/210247 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Show your love for Free Software
by Peter Reutemann 12 Feb '15

12 Feb '15

'Every year on 14th February, the Free Software Foundation Europe asks all Free Software users to think about the hard-working people in the Free Software community and to show them their appreciation individually on this "I love Free Software"-Day. Like last year the campaign is dedicated to the people behind Free Software because they enable us to use, study, share and improve the software which enables us to work in freedom. This time the focus especially lies on the small contributions to the big picture of the Free Software community.' -- source: http://fsfe.org/news/2015/news-20150209-01.html Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

VLC Acquiring Lots of New Features
by Peter Reutemann 11 Feb '15

11 Feb '15

"Two weekends ago an update for VLC media player was shared during a presentation in Brussels at FOSDEM. Lead developer Jean-Baptiste Kempf covered VLC's continued vibrant development, as well as features that are coming for VLC 2.2 and VLC 3.0. VLC 2.2.0 will feature automatic, GPU-accelerated video rotation support, extension improvements, resume handling, support for new codecs/formats and rewrites to some of the existing formats, VDPAU GPU zero-copy support, x265 encoder support, etc. Further out is VLC 3.0.0, which is planned to have Wayland support, GPU zero-copy support for OpenMAX IL, ARIB subtitle support, HEVC / VP9 hardware decoding on Android, a rework of the MP4 and TS demuxers, and browsing improvements. The VLC FOSDEM 2015 presentation is available in PDF form. The VLC Git shortlog can be used to follow the development of the project." -- source: http://news.slashdot.org/story/15/02/11/0515244 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Is Modern Linux Becoming Too Complex?
by Peter Reutemann 11 Feb '15

11 Feb '15

'Debian developer John Goerzen asks whether Linux has become so complex that it has lost some of its defining characteristics. "I used to be able to say Linux was clean, logical, well put-together, and organized. I can’t really say this anymore. Users and groups are not really determinitive for permissions, now that we have things like polkit running around. (Yes, by the way, I am a member of plugdev.) Error messages are unhelpful (WHY was I not authorized?) and logs are nowhere to be found. Traditionally, one could twiddle who could mount devices via /etc/fstab lines and perhaps some sudo rules. Granted, you had to know where to look, but when you did, it was simple; only two pieces to fit together. I've even spent time figuring out where to look and STILL have no idea what to do."' -- source: http://linux.slashdot.org/story/15/02/11/0444232 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Elementary OS: Why We Make You Type "$0"
by Peter Reutemann 11 Feb '15

11 Feb '15

'Open source software can always be acquired without charge, but can still incur significant development costs. Elementary OS wants to make people aware of this, and have changed their website to suggest donating when downloading, and make users explicitly enter "$0" if they want a free download. This is the same strategy Canonical has used when offering Ubuntu. The Elementary OS blog explains: "Developing software has a huge cost. Some companies offset that cost by charging hundreds of dollars for their software, making manufacturers pay them to license the software, or selling expensive hardware with the OS included. Others offset it by mining user data and charging companies to target ads to their users. [...] If we want to see the world of open source software grow, we should encourage users to pay for its development; otherwise it'll be underfunded or developers will have to resort to backdoor deals and advertising. And nobody wants that future." Currently the only people who have received money for working on Elementary OS have been community members through their bounty program.' -- source: http://news.slashdot.org/story/15/02/11/1753219 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

libregraphicsworld.org
by Lawrence D'Oliveiro 11 Feb '15

11 Feb '15

For those who don’t know about this site, but who make frequent use of open-source graphics software (GIMP, Inkscape, Blender etc), you will find all kinds of informative news articles here. There seems to be a new item about once a week. Some recent items: * Inkscape 0.91 released <http://libregraphicsworld.org/blog/entry/inkscape-0-91-released> * Blender 2.73 as a 2D animation powerhouse (to add to all the other arrows in its quiver) <http://libregraphicsworld.org/blog/entry/blender-2-73-grease-pencil> * A follow-up to the item Peter posted a few weeks back about Paris-8 University moving from Photoshop to Krita and other Free Software <http://libregraphicsworld.org/blog/entry/the-complete-story-of-paris-8-univ…>

2 2

Stuff seems to run Ubuntu/nginx
by Peter Reutemann 10 Feb '15

10 Feb '15

What http errors can tell you about a website ;-) Stuff seems to use Ubuntu/nginx as you can see in the attachment. Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

New Multi-Purpose Backdoor Targets Linux Servers
by Peter Reutemann 09 Feb '15

09 Feb '15

'A new multi-purpose Linux Trojan that opens a backdoor on the target machine and can make it participate in DDoS attacks has been discovered and analyzed by Dr. Web researchers, who believe that the Chinese hacker group ChinaZ might be behind it. "First, Linux.BackDoor.Xnote.1 sends information about the infected system to the server. It then goes into standby mode and awaits further instructions. If the command involves carrying out some task, the backdoor creates a separate process that establishes its own connection to the server through which it gets all the necessary configuration data and sends the results of the executed task," the researchers explained.' -- source: http://linux.slashdot.org/story/15/02/09/1829255 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linux Versus Linux
by Lawrence D'Oliveiro 09 Feb '15

09 Feb '15

Another long-heralded Android competitor, Tizen, gets a head-to-head comparison gallery here <http://arstechnica.com/gadgets/2015/02/tizen-versus-android-in-pictures/>.

1 0