September 2016 - wlug - list.wlug.org.nz

Krebs On Security Back Online
by Lawrence D'Oliveiro 26 Sep '16

26 Sep '16

The “Krebs On Security” blog was knocked offline recently by a massive DDoS attack. Akamai stepped in to shield it for awhile, until the malicious traffic grew too much for it to bear. So Brian Krebs had to take his blog offline. But now it is back, courtesy of Google taking over the shield. <http://www.theregister.co.uk/2016/09/26/google_shields_krebs/>

1 0

Fwd: [NZLUG] Linux.Conf.Au 2017: Miniconfs announced; Sysadmin Miniconf CFP
by Peter Reutemann 26 Sep '16

26 Sep '16

Apologies for cross-posting, but I thought some of you might be interested in this. Cheers, Peter ---------- Forwarded message ---------- From: Ewen McNeill Date: Tue, Sep 27, 2016 at 10:12 AM Subject: [NZLUG] Linux.Conf.Au 2017: Miniconfs announced; Sysadmin Miniconf CFP To: nzlug(a)lists.nzoss.org.nz Linux.Conf.Au 2017, being held in Hobart, Tasmania, Australia, in January 2017, has announced the Miniconfs selected for the first two days of the conference: https://linux.conf.au/about/news/announcing-miniconfs/ https://linux.conf.au/schedule/miniconfs/list/ The Systems Administration Miniconf is pleased to have been selected again for LCA2017 -- our eleventh year at Linux.Conf.Au. Our Call for Presentations at the LCA2017 Sysadmin Miniconf is now open: https://sysadmin.miniconf.org/cfp17.html (A copy of the CFP text is included below for your convenience.) Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. This is our 11th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website: https://sysadmin.miniconf.org/ -=+ Presentation Topics +=- We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments large and small. Topics for presentations could include (but are not limited to): * Systems Administration Best Practice * Virtualisation and Cloud Computing * Containers and orchestration * Sysadmin Administration in a "serverless" environment (FAAS) * TLS everywhere * Monitoring and metrics: Collection, storage and presentation * Infrastructure/Platform/Software as a Service (IAAS, PAAS, SAAS) * Networkng: IPv6, SDN (Software Defined Networking), performance * DevOps, Configuration Management and provisioning * Bootstrapping systems, Lifecycle Management * Dealing with BYOD * Backups in a virtual/distributed world * Troubleshooting techniques * Buying Decisions * Web and Email management * Keeping legacy systems functioning * War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. -=+ Format of Presentations +=- We are now seeking proposals for presentations at the mini-conference. We have openings for: 15-25 minute short presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA keynote before morning tea), we expect the majority of available timeslots to be 20 minutes or less, with possibly 1-2 slightly longer talks if there is space in the schdule. We have a general policy of accepting a high proportion of proposals but handing out relatively short timeslots. Please see previous years Miniconf schedules for examples of how the programme is organised. -=+ Submitting talks +=- Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor to priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. To submit a talk to the LCA2017 Sysadmin Miniconf, create an account on the LCA2017 website: https://linux.conf.au/dashboard create a speaker profile, and then select "New Proposal" and "System Administration Miniconf Presentation", or while logged into the LCA2017 site, go directly to: https://linux.conf.au/proposals/submit/sysadmin-miniconf/ If you have a preferred length of your Short Presentation (15/20/25 minutes) or Lightning Talk (5/10 minutes) please use the Private Abstract field to describe what would work best for your talk. Otherwise we will pick a length that best suits the gaps in the programme as we put the final programme together. In some cases we maybe able to add a few extra minutes to a few Short Presentations if there is any spare time left in the programme. -=+ Dates and Deadlines +=- To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 UTC on the 23rd of October 2016. If you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. Please indicate if you need an early confirmation to aid you in arranging time off work or travel; we will do our best to assist. 2016-10-23 - Deadline for early submissions 2016-11-01 - Early submissions confirmation 2016-11-21 - Deadline for submissions 2016-11-30 - Confirmation of all presentations 2016-12-07 - Miniconf programme published 2017-01-16 - Sysadmin Miniconf held -=+ Contact and Questions +=- Please see our website at https://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2017 @ sysadmin.miniconf.org Ewen McNeill and Simon Lyall LCA2017 Sysadmin Miniconf Conveeners _______________________________________________ NZLUG mailing list NZLUG(a)lists.nzoss.org.nz http://lists.nzoss.org.nz/mailman/listinfo/nzlug -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Permanent job in Tokyo, Japan
by James Tobin 25 Sep '16

25 Sep '16

Hello, I’m working with an employer that is looking to hire someone to fulfil a permanent DevOps-type position at their office in Tokyo. Japanese language is not required; only English. Consequently I had hoped that some members of this LUG may like to discuss further; off-list. I can be reached using "JamesBTobin (at) Gmail (dot) Com". Kind regards, James

1 0

free and open internet -- includes politics in the USA
by Ian Young 24 Sep '16

24 Sep '16

I always wanted to be an entity, albeit a tiny one. What about 'We the people'? http://www.latimes.com/opinion/opinion-la/la-ol-icann-ted-cruz-20160923-sna… But the federal government hasn’t run IANA for years. Instead, it hired the Internet Corp. for Assigned Names and Numbers (ICANN) to do that, with a minimum of supervision. ICANN was formed to make sure the entities with the largest stakes in the Internet — telecommunications companies, online service providers, researchers, equipment makers and, yes, governments — would jointly have a say in the creation and management of domains.

1 0

SolidRun x86 Braswell MicroSoM Runs Linux and Full
by rowan schischka 24 Sep '16

24 Sep '16

I'm afraid this embedded machine will not be competing with raspberry at a total price of $157 (I'm assuming thats USD). something to compare it to in the x86 space: ASUS N3050I-C Motherboard, Mini-ITX retails for around $100NZD; comes with CPU soldered; does not come with PSU, ram, HDD, case. but altogether much more practical considering you're getting a real computer for the price. power consumption is around 6W. i guess its not as small considering it needs an ATX power supply, http://www.ascent.co.nz/productspecification.aspx?itemID=433649 -- Kind Regards Rowan Schischka

1 0

Computer Security And The Ford Pinto Formula
by Lawrence D'Oliveiro 24 Sep '16

24 Sep '16

With security breaches of company data happening so often nowadays, why aren’t these companies taking more effort to defend themselves? Could it be because the cost of doing so outweighs the cost of simply putting up with these breaches? <http://www.theregister.co.uk/2016/09/23/if_your_company_has_terrible_it_sec…>

2 2

double commander
by Peter Reutemann 23 Sep '16

23 Sep '16

Hi everyone Since I'm quite often dealing with 100s of thousands of files in single directories, I've always been on the lookout for a file manager that can handle that properly. The Midnight Commander, which is cross-platform, works perfectly. However, if your users aren't well accustomed to file manager that runs within a terminal, then you might want to give "Double Commander" a whirl: http://doublecmd.sourceforge.net/ Don't mind the slightly dated looking website. The file manager is where they spend their time on! ;-) Not as fast as the Midnight Commander, but when you turn off some eye candy (namely icons), you get pretty close. It also offers multiple tabs for each half of the dual pane setup, which is quite nice. And it beats Nautilus, Caja and Sunflower FM in performance by a few magnitudes. But wait! What about Gnome Commander? Well, it doesn't integrate that nicely into MATE (I'm running Linux Mint/MATE). Double Commander does a much better job at this. You can install the Commander's GTK interface like this on a Debian/Ubuntu system: sudo apt-get install doublecmd-gtk Or, if you prefer the QT interface: sudo apt-get install doublecmd-qt Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

SolidRun x86 Braswell MicroSoM Runs Linux and Full Windows 10, Destroys Raspberry Pi
by Peter Reutemann 23 Sep '16

23 Sep '16

'BetaNews has a report today about a company called SolidRun, which has announced an Intel Braswell-based MicroSoM. Unlike the ARM-powered Raspberry Pi, this is x86 compatible, meaning it can run full Windows 10. Plus, if you install a Linux distro, there will be far more packages available, such as Google Chrome, which is not available for Pi. Heck, it can probably serve as a secondary desktop, Brian with the site writes. From the report: At 53mm by 40mm, these new MicroSoMs provide unheard of design flexibility while also eliminating the headache of having to design complicated power-delivery subsystems thanks to its single power input rail design. SolidRun's Braswell MicroSoM also offers flexibility in RAM options, ranging from 1GB to 8GB configurations, and offers on-board support of eMMC storage up to 128GB. Its robust design and unsurpassed HD Edge surveillance, event detection, and statistical data-extraction capabilities makes it the platform of choice for mission-critical applications requiring guaranteed reliability," says Solidrun. It starts at $117, the website has more details on specifications.' -- source: https://hardware.slashdot.org/story/16/09/22/2044237 It's also a bit pricier... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

Yahoo Confirms Massive Data Breach, 500 Million Users Impacted [Updated]
by Peter Reutemann 22 Sep '16

22 Sep '16

'Update: 09/22 18:47 GMT by M :Yahoo has confirmed the data breach, adding that about 500 million users are impacted. Yahoo said "a copy of certain user account information was stolen from the company's network in late 2014 by what it believes is a state-sponsored actor." As Business Insider reports, this could be the largest data breach of all time. In a blog post, the company said: Yahoo is notifying potentially affected users and has taken steps to secure their accounts. These steps include invalidating unencrypted security questions and answers so that they cannot be used to access an account and asking potentially affected users to change their passwords. Yahoo is also recommending that users who haven't changed their passwords since 2014 do so. The Intercept reporter Sam Biddle commented, "It took Yahoo two years to announce that info on half a billion user accounts was stolen." Amid its talks with Verizon for a possible acquisition -- which did happen -- Yahoo knew about the attack, but didn't inform Verizon about it, Business Insider reports. Original story, from earlier today, follows. Last month, it was reported that a hacker was selling account details of at least 200 million Yahoo users. The company's service had apparently been hacked, putting several hundred million users accounts at risk. Since then Yahoo has remained tight-lipped on the matter, but that could change very soon. Kara Swisher of Recode is reporting that Yahoo is poised to confirm that massive data breach of its service. >From the report: While sources were unspecific about the extent of the incursion, since there is the likelihood of government investigations and legal action related to the breach, they noted that it is widespread and serious. Earlier this summer, Yahoo said it was investigating a data breach in which hackers claimed to have access to 200 million user accounts and was selling them online. "It's as bad as that," said one source. "Worse, really." The announcement, which is expected to come this week, also possible larger implications on the $4.8 billion sale of Yahoo's core business -- which is at the core of this hack -- to Verizon. The scale of the liability could be large and bring untold headaches to the new owners. Shareholders are likely to worry that it could lead to an adjustment in the price of the transaction.' -- source: https://it.slashdot.org/story/16/09/22/095255 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Some Lenovo laptops won't install Linux it seems
by Ian Young 22 Sep '16

22 Sep '16

Maybe don't buy that shiny laptop from Lenovo just yet .... http://www.bbc.com/news/technology-37431299

2 1