October 2017 - wlug - list.wlug.org.nz

Install Let's Encrypt and Secure Nginx with SSL/TLS in Debian 9
by Peter Reutemann 24 Oct '17

24 Oct '17

'This tutorial will show you how to install and secure a Nginx web server on Debian 9 with a TLS certificate issued for free by the Let’s Encrypt Certificate Authority. Furthermore, we will configure automatic renewal of Lets’ Encrypt TLS certificates using a cron job before the certificates expire.' -- source: https://www.howtoforge.com/tutorial/install-letsencrypt-and-secure-nginx-in… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Librem 5 Privacy-Focused Linux Phone Crowdfunding Campaign Ends with $2 Million
by Peter Reutemann 24 Oct '17

24 Oct '17

Since we talked about this phone last night... 'Librem 5 was successfully crowdfunded about two weeks ago when it surpassed its goal of $1.5 million, but the campaign continued to run, and now it appears to have gathered half million dollars more, ending with $2 million, which we believe is more than enough to build world's first truly free mobile device. Powered by PureOS, Purism's own GNU/Linux distribution based on the popular Debian GNU/Linux operating system, but focused on offering users a privacy-focused and more secure desktop solution, Librem 5 will be using KDE's Plasma Mobile and GNOME's GNOME Shell user interfaces, along with powerful open source software. During its crowdfunding campaign, Librem 5 saw an amazing feedback from the Open Source community as Purism partnered not only with big names like KDE and GNOME, but also with Nextcloud, which will bring its end-to-end encrypted file sync, sharing and cloud-based storage solution by default to the Linux smartphone.' -- source: http://news.softpedia.com/news/librem-5-privacy-focused-linux-phone-crowdfu… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

3 Simple, Excellent Linux Network Monitors
by Peter Reutemann 24 Oct '17

24 Oct '17

'You can learn an amazing amount of information about your network connections with these three glorious Linux networking commands. iftop tracks network connections by process number, Nethogs quickly reveals what is hogging your bandwidth, and vnstat runs as a nice lightweight daemon to record your usage over time.' -- source: https://www.linux.com/learn/intro-to-linux/2017/10/3-simple-excellent-linux… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

4 Reasons Building A Gaming PC Sucks Right Now
by Lawrence D'Oliveiro 23 Oct '17

23 Oct '17

Just saw this video on the current high prices of GPUs, RAM and variable-refresh monitors <https://www.youtube.com/watch?v=Vh8tZ_qkY1o>. What’s surprising to me is the reason why GPU prices are currently high: because they are being snapped up for cryptocurrency mining.

1 0

Why Computing Devices Slow Down Over Time
by Lawrence D'Oliveiro 23 Oct '17

23 Oct '17

Entertaining opinion piece <http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11935838>: To make their apps run faster, some designers make them store copies of things in RAM ... Known as cacheing, this makes things work much faster - until your system starts to run out of memory. For cacheing to be effective, the amount of space devoted to it must be carefully managed by the application and the device's operating system. Some app developers don't put the effort that they should into doing this well, and their applications not only slow down over time, but can drag the rest of the system down with them too. So trying to speed things up can make things slower??

1 0

Android getting “DNS over TLS” support to stop ISPs from knowing what websites you visit
by Peter Reutemann 23 Oct '17

23 Oct '17

'DNS (Domain Name Server) is what translates a website address from a URL that you enter to an IP address which your computer actually connects to. For example, when you type “www.xda-developers.com” into your browser, your computer queries a DNS which looks up and returns the IP address “209.58.128.90” to the client. This process is hidden from the user, but every website you visit (so long as it has a human-readable URL) will go through this same process. The problem for those security conscious out there is that these requests are done in plain text through UDP or TCP protocols which are readable by anyone that can see your connection, including your ISP. This is where DNS over TLS comes in.' -- source: https://www.xda-developers.com/android-dns-over-tls-website-privacy/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Microsoft Chastises Google Over Chrome Security
by Peter Reutemann 22 Oct '17

22 Oct '17

'In a Wednesday blog post, Redmond examined Google's browser security and took the opportunity to throw some shade at Chrome's security philosophy, while also touting the benefits of its own Edge browser. The post, written by Microsoft security team member Jordan Rabet, noted that Google's Chrome browser uses "sandboxing" and isolation techniques designed to contain any malicious code. Nevertheless, Microsoft still managed to find a security hole in Chrome that could be used to execute malicious code on the browser. The bug involved a Javascript engine in Chrome. Microsoft notified Google about the problem, which was patched last month. The company even received a $7,500 reward for finding the flaw. However, Microsoft made sure to point out that its own Edge browser was protected from the same kind of security threat. It also criticized Google for the way it handled the patching process. Prior to the patch's official rollout, the source code for the fix was made public on GitHub, a software collaboration site that hosts computer code. That meant attentive hackers could have learned about the vulnerability before the patch was pushed out to customers, Microsoft claimed. "In this specific case, the stable channel of Chrome remained vulnerable for nearly a month," the blog post said. "That is more than enough time for an attacker to exploit it." In the past Google has also disclosed vulnerabilities found in Microsoft products -- including Edge.' -- source: https://it.slashdot.org/story/17/10/22/010235 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Security Upgraded For NetBSD-amd64 with Kernel ASLR Support
by Peter Reutemann 22 Oct '17

22 Oct '17

'24 years after its release, NetBSD is getting a security upgrade -- specifically, Address Space Layout Randomization (ASLR). An anonymous reader writes: Support for Kernel ASLR was added on NetBSD-amd64 a few weeks ago. KASLR basically randomizes the address of the kernel, and makes it harder to exploit several classes of vulnerabilities [including privilege escalations and remote code execution]. It is still a work-in-progress, but it's already fully functional, and can be used following the instructions on this post from the NetBSD blog. It will be available starting from NetBSD 9, but may be backported to NetBSD 8 once it is stabilized. NetBSD says they're the first BSD system to support ASLR.' -- source: https://bsd.slashdot.org/story/17/10/21/0118226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Bloody Stupid Linux
by Lawrence D'Oliveiro 21 Oct '17

21 Oct '17

That’s the name of the distro <http://bloodystupid.clockwatching.org/>: Why go to all this trouble? The BSL kernel is basically a life support system for ram and network cards, since it wget's support for everything else on the machine the kernel is very small. The initial aim was to fit it on a single floppy, then PXE booting became attractive, and really, since the kernel doesn't need to support whatever it just booted from in order to have its root filesystem, its very flexible. Yeah, I know an initrd can do the same thing, but its more fun this way. As it stands, BSL makes for an excellent repair system, the framework for a bulk installer, a neat toy, and an alright thin client ( as long as you've got a gob of RAM handy.) OK, so it hasn’t been updated in over a decade. But the mascot image is cute. ;)

1 0

The Ultimate In Terminal Emulators?
by Lawrence D'Oliveiro 20 Oct '17

20 Oct '17

Brian Lunduke continues his Command-Line Week with a look at a couple of quite amazing terminal emulators: <https://www.youtube.com/watch?v=-vm7B6bLbLg>. So you think “command line” and “eye candy” can’t go together?

1 0