January 2016 - wlug - list.wlug.org.nz

Bloat: How and Why UNIX Grew Up (and Out)
by Lawrence D'Oliveiro 31 Jan '16

31 Jan '16

The original versions of common utilities like “cat”, “grep” and “ls” on V6 Unix from 1976 could measure their disk and RAM usage in bytes in just five figures. A few decades later, and the corresponding programs on a modern Linux distro are orders of magnitude larger. Why? Here is a detailed (and technical) analysis from the 2012 Linux.conf.au <https://www.youtube.com/watch?v=Nbv9L-WIu0s> which takes you step by step through all the contributions to the difference. They isolated most of these by modifying the code, selectively taking out features, and building it in different ways. Conclusion: you may call it “bloat”, but if you want a modern system, it’s pretty much unavoidable.

1 0

High-severity bug in OpenSSL allows attackers to decrypt HTTPS traffic
by Peter Reutemann 28 Jan '16

28 Jan '16

"Maintainers of the OpenSSL cryptographic code library have fixed a high-severity vulnerability that made it possible for attackers to obtain the key that decrypts communications secured in HTTPS and other transport layer security channels. While the potential impact is high, the vulnerability can be exploited only when a variety of conditions are met. First, it's present only in OpenSSL version 1.0.2. Applications that rely on it must use groups based on the digital signature algorithm to generate ephemeral keys based on the Diffie Hellman key exchange. By default, servers that do this will reuse the same private Diffie-Hellman exponent for the life of the server process, and that makes them vulnerable to the key-recovery attack. DSA-based Diffie-Hellman configurations that rely on a static Diffie-Hellman ciphersuite are also susceptible." -- source: http://arstechnica.com/security/2016/01/high-severity-bug-in-openssl-allows… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

What’s The Cheapest Wi-Fi Access Point?
by Lawrence D'Oliveiro 27 Jan '16

27 Jan '16

Someone has hacked a cheapie wireless SD card reader to turn it into a wi-fi access point running OpenWRT: <http://phoronix.com/scan.php?page=news_item&px=Zsun-WiFI-With-OpenWRT>. The most obvious thing it lacks is any kind of wired network port...

1 0

Material for Monday's meeting
by Peter Reutemann 26 Jan '16

26 Jan '16

Hi everyone The material from Monday's meeting is now available from our github account: https://github.com/WLUG/meetings/tree/master/2016/2016-01-25 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux 4.5 Adds Raspberry Pi 2 Support, AMD GPU Re-Clocking, Intel Kaby Lake
by Peter Reutemann 24 Jan '16

24 Jan '16

"Linux 4.5 is set to bring many new features across the kernel's 20 million line code-base. Among the new/improved features are Raspberry Pi 2 support, open-source Raspberry Pi 3D support, NVIDIA Tegra X1 / Jetson TX1 support, an open-source Vivante graphics driver, AMDGPU PowerPlay/re-clocking support, Intel Kaby Lake enablement, a Logitech racing wheel driver, improvements for handling suspended USB devices, new F2FS file-system features, and better Xbox One controller handling." -- source: http://linux.slashdot.org/story/16/01/24/1329206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Atom-Based JaguarBoard To Take On Raspberry Pi
by Peter Reutemann 24 Jan '16

24 Jan '16

"The tiny single-board PC movement that's leading the Internet of Things (IoT) market is largely dominated by ARM-based processors, and for good reason — they're cheap, low power and capable. However, what if you prefer to work with the x86 architecture? JaguarBoard looks strikingly similar to Raspberry Pi, which is arguably the most popular single-board mini PC. But unlike Raspberry Pi, JaguarBoard allows users to develop for x86, courtesy of its Intel Atom Z3735G (Bay Trail) foundation. The chip is a quad-core part clocked at 1.33GHz to 1.83GHz with 2MB of L2 cache, offering a fair amount of horsepower for IoT applications. In addition to an Atom processor, JaguarBoard also boasts 1GB of DDR3L memory, 16GB of eMMC storage, three USB 2.0 ports, 10/100M LAN port, HDMI 1.4 output, SDIO 3.0 socket, two COM ports, four GPIO pins, and audio ports. It's an interesting device that you could use strictly as a mini PC for general purpose computing, as an embedded system, a learning or research tool, or for whatever DIY projects you can conjure up." -- source: http://hardware.slashdot.org/story/16/01/24/1729241 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Searching For Vulnerable Webcams
by Lawrence D'Oliveiro 23 Jan '16

23 Jan '16

Customers don’t understand and don’t care about the security of the devices they put online. And vendors are in no hurry to enlighten them, if it adds to costs and cuts profits. If anybody is in a position to intervene, it has to be a Government authority. <http://arstechnica.com/security/2016/01/how-to-search-the-internet-of-thing…>

1 0

Linux Filesystems On Windows
by Lawrence D'Oliveiro 22 Jan '16

22 Jan '16

Came across this <http://www.phoronix.com/forums/forum/phoronix/latest-phoronix-articles/8468…> rather informative posting about different filesystems for cross-platform use. One interesting possibility is UDF (“Universal Disk Format”), which is how DVDs are usually formatted. It turns out it is useful not just for read-only media but read/write as well. There is widespread built-in support for it on Linux, OS X and Windows, albeit with some limitations in the proprietary OSes (as usual). It can even work on flash drives, though there may be some issues with the hardware layout being optimized for FAT32 or other antiquated filesystems. Alternatively, the article mentions a number of choices for accessing Linux filesystems on Windows: <http://www.fs-driver.org/> <http://uranus.chrysocome.net/linux/ext2ifs.htm> <http://www.diskinternals.com/linux-reader/> <http://www.chrysocome.net/virtualvolumes> Disclaimer: I haven’t tried any of these.

1 0

Command-Line Options For CUPS
by Lawrence D'Oliveiro 20 Jan '16

20 Jan '16

I was looking for some options to tweak scaling and positioning of images printed with the CUPS “lp” command. This page <http://www.cups.org/documentation.php/doc-1.5/options.html> lists various keywords that can be used with the “-o” option, in particular “natural-scaling”, “ppi” and “position”. You’ll notice that section has a large banner at the top saying “Not Supported on Mac OS X”. Which is slightly ironic, given that CUPS is owned by Apple. Anyway, the description of those options has disappeared from versions of that page for CUPS 1.6 and later, e.g. <http://www.cups.org/documentation.php/doc-1.6/options.html>, <http://www.cups.org/documentation.php/doc-2.1/options.html>. This even though I have CUPS 2.1.2 on my system, and the “position” option, for example, does seem to do something.

1 0

Tracking Protection In Wi-Fi Networks Coming Soon To Linux
by Peter Reutemann 19 Jan '16

19 Jan '16

'Fedora contributor and NetworkManager developer Lubomir Rintel explains how your devices are being identified on a network by a unique number that most of us know by the name of MAC address. Same goes for mobile networking, as your laptop's or mobile phone's MAC address is, in most cases, broadcasted everywhere you go before you even attempt a connection to a wireless network. And that's a problem for your privacy. The solution? Randomization of the MAC address while scanning for Wi-Fi networks. Apple is already using this method on iOS 8 and later mobile operating systems, and so is Microsoft in Windows 10, so Linux users will ["likely"] get it in the upcoming NetworkManager 1.2 release.' -- source: http://tech.slashdot.org/story/16/01/19/1345210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1