August 2015 - wlug - list.wlug.org.nz

Multics vs Unix
by Lawrence D'Oliveiro 12 Nov '15

12 Nov '15

I’ve been reading the introductory “Multics Concepts and Utilization” book <http://bitsavers.trailing-edge.com/pdf/honeywell/multics/F01_multicsIntroCo…> over at Bitsavers. Multics (the “MULTiplexed Information and Computing Service”) was, for its time, an extremely ambitious operating system project. It was first introduced in 1965, in the form of a series of papers at the AFIPS Fall Joint Computer Conference of that year <http://www.computer.org/csdl/proceedings/afips/1965/5066/00/index.html>. Of course, it took far too long (7 years) to reach production quality. In that time, a small group of researchers at AT&T Bell Labs grew tired of waiting, and decided to create their own, less ambitious system, which they called “UNIX” as a tongue-in-cheek homage to “Multics”. And the rest, as they say, is history. But, nevertheless, Multics remained an influential system. There are even some present-day fans of it gathered at <http://multicians.org/>. Apparently they have got the OS booting on an emulator of the original GE 645 hardware. Though it was mostly written in a high-level language (PL/I), Multics was never a portable OS; to support its advanced virtual-memory and security features, it required special processor hardware support which was not common in those days. Even today, Multics has some features which can be considered innovative and uncommon. It may be true that, for example, SELinux can match all of its security capabilities and more. But some aspects of its file-protection system seem, to me, to make sharing of data between users a bit easier than your typical Linux/POSIX-type system. For a start, there seems to be no concept of file “ownership” as such. Or even of POSIX-style file protection modes (read/write/execute for owner/group/world). Instead, all file and directory access is controlled via access-control lists (ACLs). Directories have a permission called “modify”, which effectively gives a matching entity (user, group, process) owner-type rights over that directory; except that more than one entity can have that permission at once. Thus, a group of users working on a common project can all be given this “modify” access to a shared directory for that project, allowing them all to put data there, read it back again, control access to it, delete it etc on a completely equal basis. Contrast this with POSIX/Linux, where every file has to have exactly one owner; even if they create that file in a shared directory, it still gives the creating user a special status over that file, that others with write access to the containing directory do not have. (Multics also offers a separate “append” permission, that allows the possessor to create an item in a directory, without having the ability to remove an item once it’s there.) One radical idea introduced in Unix was its profligate use of multiple processes. Every new command you executed (except for the ones built into the shell) required the creation of a new process, often several processes. Other OSes tended to look askance at this; it seemed somehow wasteful, perhaps even sinful to spawn so many processes so readily and discard them so casually. The more conventional approach was to create a single process at user login, and execute nearly all commands within the context of that. There were special commands for explicitly creating additional processes (e.g. for background command execution), but such process creation did not simply happen as a matter of course. Gradually, over time, the limitations of the single-process approach became too much to ignore, and the versatility of the Unix approach won over (nearly) everybody. Multics, however, is of the old school. More than that, the process even preserves global state, including static storage, in-between runs of programs, and this applies across different programs, not just reruns of the same one. For example, in FORTRAN, there is the concept of a “common block”. If you run two different programs that both refer to the same common block, then the second one will see values left in the block by the first one. To completely reinitialize everything, you need to invoke the “new_proc” command, which effectively deletes your process and gives you a fresh one. One common irritation I find on POSIX/Linux systems is the convention that every directory has to have an entry called “.”, pointing to itself, and one called “..”, pointing to its parent. This way these names can be used in relative pathnames to reach any point in the directory hierarchy. But surely it is unnecessary to have explicit entries for these names cluttering up every directory; why not just build their recognition as a special case into the pathname-parsing logic in the kernel, once and for all? That way, directory-traversal routines in user programs don’t have to be specially coded to look for, and skip these entries, every single time. Multics doesn’t seem to have this problem. An absolute pathname begins with “>” (which is the separator for pathname components, equivalent to POSIX “/”), while a relative pathname doesn’t. Furthermore, a relative pathname can begin with one or more “<” characters, indicating the corresponding number of steps up from the current working directory. Unlike POSIX “..”, you can’t have “<” characters in the middle of the pathname, which is probably not a big loss. It is interesting to see other features which are nearly, but not quite, the same as, corresponding features in Unix. For example, there is a search path for executables, to save you typing the entire pathname to run the program. However, this does not seem as flexible as the $PATH environment-variable convention observed by Unix/POSIX shells. In particular, it does not seem possible to remove the current directory from the search path, which we now know can be a security risk. Another one is the concept of “active functions” and “active strings”. These allow you to perform substitutions of dynamically-computed values into a command line. However, they are not as general as the Unix/POSIX concept of “command substitution”, where an entire shell command can supply its output to be interpolated into another command. Instead of having a completely separate vocabulary of “active functions” which can only be used for such substitutions, Unix/POSIX unifies this with the standard set of commands, any of which can be used in this way. There are other features of Multics that others more familiar with it might want to see mentioned (the single-level store concept, where “everything is a memory segment”, versus Unix “everything is a file”? I/O redirection based on “switches”—symbolic references to files, versus Unix integer “file descriptors”?). But then, this long-winded essay would become even longer-winded :). So if you are interested in this particular piece of computing history, feel free to follow up the links above. In summary, Multics is very much a museum piece, not something you would want to use today for regular work—not in its original form. But I think there are still one or two ideas there that we could usefully copy and adapt to a present-day OS, particularly a versatile one like Linux.

1 1

LILO Development Coming To An End
by Lawrence D'Oliveiro 01 Sep '15

01 Sep '15

<http://phoronix.com/scan.php?page=news_item&px=LILO-Bootloader-EOY> Is anybody still using LILO (the “LInux LOader”)? That was the Linux-specific bootloader from the early days, before GRUB (the “GRand Unified Bootloader”) came on the scene. I remember one difference was that LILO compiled its configuration into the bootloader binary at installation time. That way, if you made any errors in the configuration, you usually discovered that immediately. Whereas with GRUB, you only found this out when your machine failed to boot. Though with GRUB 2 commonplace nowadays, I haven’t felt the need to configure anything as yet. It seems smart enough to figure it out all by itself. :)

1 0

"Hack" Typeface Is Open Source, Easy On the IDEs
by Peter Reutemann 31 Aug '15

31 Aug '15

"Ars Technica writes that "At SourceFoundry.org this week, programmer Chris Simpkins debuted the 2.0 version of Hack, an open-source typeface designed specifically for use in source code." The revamped font is" characterized by a large x-height, wide aperture, and low contrast design in order to be "highly legible" at common coding text sizes," and the font specimen shows how legible it is right down to downright tiny sizes, though Simpkins says the sweet spot is between 8 and 12 pixels. " -- source: http://developers.slashdot.org/story/15/08/30/1733217 Very subtle differences in comparison to "monospace", from a quick comparison: - the dash "-" is longer - the "*" has five points rather than six - the "i" looks more like an "l" (not so sure about this change, though) - the stroke inside the zero is more pronounced Using Hack in a terminal seems a bit clearer than monospace. Here's a howto for Mint on installing a new font: http://community.linuxmint.com/tutorial/view/29 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

4 10

Fake EFF site serving espionage malware was likely active for 3+ weeks
by Peter Reutemann 31 Aug '15

31 Aug '15

"A spear-phishing campaign some researchers say is linked to the Russian government masqueraded as the Electronic Frontier Foundation in an attempt to infect targets with malware that collects passwords and other sensitive data." -- source: http://arstechnica.com/security/2015/08/fake-eff-site-serving-espionage-mal… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

THE MAGPI ISSUE 37 - SEPTEMBER 2015
by Peter Reutemann 30 Aug '15

30 Aug '15

Featured in The MagPi Issue 37: * Build a Raspberry Pi digital home Eight projects to build tomorrow’s home, today * Stream live from your PC Use the hottest PC software anywhere in your house * Build a fridge monitor Everyday engineering brought to life with your Pi * Build a computer vision sequencer Mike Cook continues his Pi Bakery project series * The Fallout Pip-Boy How one man made sci-fi fact, just in time for Fallout 4! -- source: https://www.raspberrypi.org/magpi/issues/37/ PDF can be downloaded for free. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The NZ Herald’s Data Blog
by Lawrence D'Oliveiro 30 Aug '15

30 Aug '15

Discovered this through a mention on the “Media Watch” program on RNZ National <http://www.radionz.co.nz/national/programmes/mediawatch/audio/201762824/min…>. Harkanwal Singh is a “data journalist”, who uses data analysis techniques to put together news stories. His group has already published some interesting analyses, such as broadband affordability, school deciles, traffic crashes and other things. <http://www.nzherald.co.nz/data-blog/news/headlines.cfm?c_id=1503710>

2 1

Linux Kernel 4.2 Released
by Peter Reutemann 30 Aug '15

30 Aug '15

"The Linux 4.2 kernel is now available. This kernel is one of the biggest kernel releases in recent times and introduces rewrites of some of the kernel's Intel Assembly x86 code, new ARM board support, Jitter RNG improvements, queue spinlocks, the new AMDGPU kernel driver, NCQ TRIM handling, F2FS per-file encryption, and many other changes to benefit most Linux users." -- source: http://linux.slashdot.org/story/15/08/30/1949211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

KDE Is Broken In Debian Unstable
by Lawrence D'Oliveiro 29 Aug '15

29 Aug '15

Looks like KDE is in the middle of a major transition in Debian Unstable at the moment. Yesterday I did an update on my backup machine, and found that I had no window manager after logging into the GUI. This morning I did another update, and was presented with a new “flat” look after a GUI login. Checking my package versions, I believe I have some parts of KDE 5, but not all (yet). I might do another update this evening. Luckily my backup machine can still fulfil most of its functions without a GUI...

3 10

Learn FPGAs With a $25 Board and Open Source Tools
by Peter Reutemann 27 Aug '15

27 Aug '15

"Hackaday has a 3 part tutorial with videos of using open source tools with a cheap ($25) FPGA board. The board isn't very powerful, but this could be the 'gateway drug' to FPGAs for people who don't want to spend hundreds of dollars and install 100s of megabytes of software and license keys just to get their feet wet. The videos are particularly good--like watching them over their shoulder. As far as I know, this is the only totally open source FPGA toolchain out there." -- source: http://hardware.slashdot.org/story/15/08/27/226232 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ddrescue-GUI: Front-End for Ddrescue Command-line Tool
by Peter Reutemann 27 Aug '15

27 Aug '15

"DDRescue-GUI is a simple GUI application written in Python 2 and designed to provide users with an easy-to-use GUI (Graphical User Interface) front-end for the awesome GNU ddrescue command-line tool which dedicated to recovering data from hard drive, USB flash drive, cd, dvd corrupt." -- source: http://ubuntuportal.com/2015/08/ddrescue-gui-ubuntu.html Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

was: Engaging Newbies In Email Encryption and Network Privacy
by Peter Reutemann 26 Aug '15

26 Aug '15

Hi everyone Great to see people discussing topics on the mailing list! How about we have a discussion about email encryption (incl signing) and network privacy at the next meeting? If I remember correctly, Hieu's Pi presentation will be relatively short, so we should have plenty of time. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 2

Happy Birthday, Linux! An OS At 24
by Peter Reutemann 26 Aug '15

26 Aug '15

"It has been 24 long years since the first ever release of the Linux project on August 25, 1991, which is the core component of any GNU/Linux distribution. With this occasion we want to remind everyone that Linux is everywhere, even if you don't see it. You use Linux when you search on Google, when you use your phone, when buy metro tickets, actually the whole Internet is powered by Linux. Happy Birthday, Linux!" -- source: http://linux.slashdot.org/story/15/08/25/1333201 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Major Android remote-access vulnerability is now being exploited
by Peter Reutemann 25 Aug '15

25 Aug '15

"Based on anonymized data collected from users of an app designed to check for a newly revealed vulnerability in many Android devices, Check Point discovered that one application in the Google Play store is exploiting the vulnerability to gain a high level of access to the Android OS, bypassing user permissions—and bypassing Google’s security scans of Play applications to do so. Update: A Google spokesperson told Ars that the offending app has been suspended in the Play store. While the app was discovered installed on an infinitesimal percentage of devices checked by Check Point, it shows that the vulnerability caused by insecure OEM and cell carrier software meant to provide remote access to devices for customer service engineers has already been exploited by “legitimate” phone applications—and the method used to bypass Google’s security checks could be used for more malicious purposes on millions of devices. And there’s no easy way for Google or phone manufacturers alone to patch the problem." -- source: http://arstechnica.com/security/2015/08/major-android-remote-access-vulnera… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Engaging Newbies In Email Encryption and Network Privacy
by Peter Reutemann 25 Aug '15

25 Aug '15

"All six parts of my series introducing beginners to PGP encryption and network privacy are now freely available. I hope it's useful for Slashdot readers to share with their less-technical acquaintances. There's an introduction to PGP, a guide to email encryption on the desktop, smartphone and in the browser, an introduction to the emerging key sharing and authentication startup, Keybase.io, and an intro to VPNs. There's a lot more work for us to do in the ease of use of communications privacy but this helps people get started more with what's available today." -- source: http://it.slashdot.org/story/15/08/20/2041235 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

5 11

Which Other OS...
by Lawrence D'Oliveiro 25 Aug '15

25 Aug '15

After my latest laptop update: ldo(a)vodell:~> conv-date now '' Asia/Seoul Asia/Pyongyang Pacific/Auckland........: Tue Aug 25 17:58:22 NZST 2015 Asia/Seoul..............: Tue Aug 25 14:58:22 KST 2015 Asia/Pyongyang..........: Tue Aug 25 14:28:22 KST 2015 North Korea only announced its new time zone two weeks ago. What other OS could be this quick without any actual code patches?

1 0

Mozilla sets plan to dump Firefox add-ons, move to Chrome-like extensions
by Peter Reutemann 23 Aug '15

23 Aug '15

"Back in July, Mozilla disclosed plans to modernize its Firefox browser. Today, the organization made those plans more concrete, with a tentative timeline for introducing long-desired improvements such as the creation of a process per tab—and with it, a timeline for the end of support for traditional Firefox add-ons. Mozilla has been working on a multi-process architecture for years. Called the Electrolysis project, work started in 2009, but was put on hold in 2011. Work was resumed in 2013, and it's finally getting near to a release. Over the next few months, Mozilla plans to flip the switch and enable Electrolysis in its various release channels. Tentatively, it'll be an opt-in feature in the beta channel from September 22nd, on-by-default in the beta channel from November 3rd, and on-by-default in the release channel from December 15th." -- source: http://arstechnica.com/information-technology/2015/08/mozilla-sets-plan-to-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu Core Gets Support For Raspberry Pi 2 GPIO and I2C
by Peter Reutemann 23 Aug '15

23 Aug '15

"Ubuntu Core is a tiny Ubuntu distribution aimed at the Internet of Things, using a new transactional packaging format called Snappy rather than the venerable Debian packaging format. It recently gained support for I2C and GPIO on the Raspberry Pi 2, and a quick demo is given here." "Ubuntu's Core support site says that the support for Raspberry Pi 2 isn't yet official, but provides some handy tips for anyone who wants to try it out." -- source: http://build.slashdot.org/story/15/08/22/2214256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Please, OpenOffice, Die Already
by Lawrence D'Oliveiro 20 Aug '15

20 Aug '15

Well, maybe not in so many words, but some are saying <http://lwn.net/Articles/654776/> that OpenOffice has reached (i.e. declined) to the stage where it is getting in the way of people looking for a powerful Free Software office suite. They never hear of LibreOffice, find OpenOffice instead, and are disappointed with its (lack of) capabilities.

1 1

Why Linux-Based Steam Machines Won’t Have A “Suspend” Function
by Lawrence D'Oliveiro 19 Aug '15

19 Aug '15

Current proprietary game consoles typically have a “sleep” mode, to allow faster startups than booting from a complete power-off. It turns out <http://arstechnica.com/gaming/2015/08/steam-machines-wont-have-a-suspend-fu…> that Valve’s Steam machines are unable to offer such a facility, for quite a subtle technical reason <http://games.slashdot.org/comments.pl?sid=7855261&cid=50329207>: it’s because, when the Linux kernel wakes up from sleep, it forgets about all the USB devices it saw before, and rediscovers them all as though for the first time. This prevents applications (i.e. games) from preserving the state of devices like game controllers.

1 0

No Meeting On 24th?
by Lawrence D'Oliveiro 19 Aug '15

19 Aug '15

Is there a WLUG meeting on the fourth Monday of this month?

2 3

IBM’s New “LinuxONE” Ubuntu Mainframe
by Lawrence D'Oliveiro 18 Aug '15

18 Aug '15

<http://arstechnica.com/information-technology/2015/08/ubuntu-coming-to-main…> ... can "scale up to 8,000 virtual machines or hundreds of thousands of containers—currently the most of any single Linux system" ... And it won’t be limited to 26 drive letters.

1 0

Windows 10 From a Linux User's Perspective
by Peter Reutemann 13 Aug '15

13 Aug '15

"I've spent quite a bit of time testing out Windows 10 on a secondary computer. And like any operating system upgrade, the change takes a bit to get used to. Since I feel more comfortable with Linux distributions than with Windows, I thought it would be interesting to see what Microsoft has done since Windows 7 and 8. In this article, I'll walk you through how I see Windows 10. What it did well, where it falls flat on its face and how this appears to a hardcore Linux enthusiast." -- source: http://www.linuxtoday.com/infrastructure/windows-10-from-a-linux-users-pers… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Te Whare O Te ATA (Fairfield) computer lab
by Roderick Aldridge 11 Aug '15

11 Aug '15

Disappointing news about the computer lab in the annexe at Te Whare O Te Ata Fairfield/Chartwell Community House. The trustees have decided to use the annexe as a classroom. Manager Mike Rarere says the only practical option for the lab machines is for some of them (probably 6 or fewer) to be in the main lounge. The lounge schedule means that we could only have regular scheduled sessions on Monday and Friday mornings. Do you want to be involved in running this? It should be easier to do, although it is only a fraction of the former setup. Roderick Aldridge.

3 2

LibreOffice under the hood: progress to 5.0
by Peter Reutemann 08 Aug '15

08 Aug '15

"Today we release LibreOffice 5.0.0, a new foundation for ongoing work over the next months and years. It also has a fine suite of new features for people to enjoy - you can read and enjoy all the great news about the user visible features from so many great hackers, but there are, as always, many contributors whose work is primarily behind the scenes, and a lot of work that is more technical than user-facing. That work is, of course, still vitally important to the project." -- source: https://people.gnome.org/~michael/blog/2015-08-05-under-the-hood-5-0.html Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 2

EFF Releases Privacy Badger an Addon That Algorithmically Blocks Online Trackers
by Peter Reutemann 07 Aug '15

07 Aug '15

"Online tracking has become a pervasive invisible reality of the modern web. Most sites you load are likely to be full of ads, tracking pixels, social media share buttons, and other invisible trackers all harvesting data about your web browsing. These trackers use cookies and other methods to read unique IDs associated with your browser, the result being that they record all the sites you visit as you browse around the internet. This sort of tracking is invisible to most web users, meaning they never get the option to agree to or opt-out of it. Today the EFF has launched the 1.0 version of Privacy Badger, an extension designed to prevent these trackers from accessing unique info about you and your browsing." -- source: http://yro.slashdot.org/story/15/08/07/0139241 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0