December 2018 - wlug - list.wlug.org.nz

No, I Didn’t Know That
by Lawrence D'Oliveiro 11 Dec '18

11 Dec '18

Would you believe, malware can make money by generating fake clicks on ads? Would you further believe, that ad networks pay more for clicks from Apple devices than from Android? Can you guess what happens next? <https://www.theregister.co.uk/2018/12/10/android_ios_clickfraud/>

1 0

Presentations using the Waikato Uni video projector - Console windows font size.
by Ian Stewart 11 Dec '18

11 Dec '18

Hi, This is mostly a memo to myself as I have twice been caught out with Linux consoles being displayed with too small a font on the Uni video projector. However the following may also be useful to other presenters in the future. Most wlug presentations are done with a Linux laptop or PC running in a GUI Environment that is connected to the video projector. If you open a GUI console terminal window or web-browser window and the video projector display is difficult to read, then you can increase the size with the keystroke sequence Control + Shift + Plus, or decrease the size with Control + Minus. Linux also has 6 x console windows available. The keystroke sequence Ctrl + Alt + F1 opens tty1 console, through to Ctrl + Alt + F6 opening tty6 console. Note that Ctrl + Alt + F7 returns you to the laptops GUI environment. As your laptop/pc is likely to auto-size to the resolution of the video projector, then I think your laptop will opt to displaying the 1080p resolution of 1920 x 1080 pixels. By default your Linux consoles are likely to be configured to display a "Fixed" font of "8x16". When you display your console window with the video projector then one page of the display will be about 60 lines of text with 200 characters across the page. This is almost impossible to read on the projector screen. One way to overcome this problem this is to edit... /etc/default/console-setup You will see... FONTFACE="Fixed" FONTSIZE="8x16" At the bottom of the file add something like... # For Waikato University Video Projector # Choices of Fontsize with Terminus font: # 6x12, 8x14, 8x16, 10x20, 11x22, 12x24, 14x28, 16x32 FONTFACE="Terminus" FONTSIZE="14x28" ...save the changes to the console-setup file and execute... $ setupcon The console displayed should now be about 35 rows by 80 character cells, and should allow everyone to read what is displayed. cheers, Ian. PS: Another approach to making these changes is... $ dpkg-reconfigure console-setup ...this will step through 4 x graphical input screens. From these screens select "Terminus" as the Font and the "14x28" as the Font size. To restore to the original settings run dpkg-reconfigure console-setup again and select "Fixed" and "8x16".

1 0

Malicious Sites Abuse 11-Year-Old Firefox Bug That Mozilla Failed To Fix
by Peter Reutemann 11 Dec '18

11 Dec '18

'Malware authors, ad farmers, and scammers are abusing a Firefox bug to trap users on malicious sites. From a report: This wouldn't be a big deal, as the web is fraught with this kind of malicious sites, but these websites aren't abusing some new never-before-seen trick, but a Firefox bug that Mozilla engineers appear to have failed to fix in the 11 years ever since it was first reported back in April 2007. The bug narrows down to a malicious website embedding an iframe inside their source code. The iframe makes an HTTP authentication request on another domain. [...] For the past few years, malware authors, ad farmers, and scammers have been abusing this bug to lure users on sites where they show all sorts of nasties, such as tech support scams, ad farms that reload the page with new ads in a loop, pages that push users to buy fake gift cards, or sites that offer malware-laced software updates. Whenever users try to leave, the owners of these shady sites trigger the authentification modal in a loop.' -- source: https://news.slashdot.org/story/18/12/10/0220258 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

ESET Discovers 21 New Linux Malware Families
by Peter Reutemann 11 Dec '18

11 Dec '18

'In a report published last week by cyber-security firm ESET, the company detailed 21 "new" Linux malware families. All operate in the same manner, as trojanized versions of the OpenSSH client. From a report: They are developed as second-stage tools to be deployed in more complex "botnet" schemes. Attackers would compromise a Linux system, usually a server, and then replace the legitimate OpenSSH installation with one of the trojanized versions.' -- source: https://linux.slashdot.org/story/18/12/10/1538203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Faxes To Be Banned At The NHS
by Lawrence D'Oliveiro 10 Dec '18

10 Dec '18

The UK’s National Health Service is being forced to phase out its heavy reliance on fax machines <https://www.theregister.co.uk/2018/12/10/hancock_fax_ban_nhs/> and resort to more, um, “digital” alternatives like e-mail instead: However, it's worth noting that just last week, up to 1.2 million staffers were locked out of their NHSmail accounts after Accenture reportedly botched a data centre upgrade. [Helen Stokes-Lampard, chair of the Royal College of General Practitioners] raised similar concerns about the resilience of the IT systems the NHS is racing to introduce. "What's shocking is how often digital innovations fall over," she said. "It doesn't mean we shouldn’t do it, but what it does mean is we have to be realistic about with the time scales for this."

1 0

National Oracle System Is A Write-Off
by Lawrence D'Oliveiro 10 Dec '18

10 Dec '18

Looks like the nationwide attempt to streamline and update the IT systems of all the DHBs is now going to be written off <https://www.theregister.co.uk/2018/12/10/national_oracle_solution_write_dow…>. It hasn’t officially been abandoned, mind you, but because it’s been “on hold” for so long, the DHBs are now obliged to start recording “impairments” in their accounts over their investment in the system. By the way, the Waikato DHB was one of the four that managed a rollout of the system so far. Not sure whether that stays in place or gets rolled back...

1 0

How to Auto Backup Files to USB Media When Connected
by Peter Reutemann 10 Dec '18

10 Dec '18

'A backup is the last defense against data loss, offering a means to restore original data. You can use either a removable media such as an external hard drive or USB flash disk or a shared network folder, or a remote host to back up your data. It’s very easy (and equally essential) to automatically backup your important files without you having to remember to do so. In this article, we will learn how to auto backup data to a removable media after connecting it to your Linux machine. We will test with an external disk. This is a basic guide to get you started with using udev for real-life solutions.' -- source: https://www.tecmint.com/auto-backup-files-to-usb-media-in-linux/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Linux.org's DNS Got Hijacked
by Peter Reutemann 09 Dec '18

09 Dec '18

'Linux.org reports: Wednesday afternoon around 5pm EST someone was able to get into the registrar account for our domain and point DNS to another server -- as well as lock us out from changing it. They pointed the domain name to a pretty rude page for most of the evening until Cloudflare stepped in and blocked the domain for us. After a lot of back and forth with our registrar, we were able to get things back under our control. I'd like to point out that our server environment was not touched so there are no worries about your data. We've gone over security protocols and are tightening things up that may have slipped through in the past. Thanks for your support! Linux.org apparently pointed to a page exclaiming "G3T 0WNED L1NUX N3RDZ", which also included a NSFW picture, some abusive language, a shout-out to recently-deceased programmer Terry Davis, and a link to an article about Linus Torvalds' controversial apology for "his hostile behavior towards others in the community." Long-time Slashdot reader Grady Martin says he also saw the page pointing to "presumably doxed info" about the creator of Linux's code of conduct, a fact confirmed by a report in the Register. "As for how it was hacked, [Linux.org owner Mike] McLagan blames the public Whois displaying his partner's email address -- presumably the hacker worked their way into the Yahoo email account listed as the admin of the site and from there requested a password change in her Network Solutions account to gain access to the domain."' -- source: https://it.slashdot.org/story/18/12/08/0355227 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

50 Years Since “The Mother Of All Demos”
by Lawrence D'Oliveiro 08 Dec '18

08 Dec '18

On the 9th of December 1968, Doug Engelbart did a demo of NLS, his system for real-time interactive collaboration at a distance. This was also the first known use of a computer mouse. <https://www.techdirt.com/articles/20181207/15484041180/been-50-years-take-s…>

1 0

Running Linux Mint 19.1
by tom butz 07 Dec '18

07 Dec '18

Linux Mint 19.1 works well using my laptop (Toshiba Z930 6 GB RAM) and a USB3 connection to a 500G USB3-harddisk. I first tried a fast 10-speed 64GB SD-card, but that actually seemed to be slower - and the SD-card would have worn out in the end. For some reason Mint has got a swapFILE in the root directory - pretty hard on the SD-card. I haven't got USB3.1 (yet). 19.1 supports Bluetooth in both directions: under Mint 19, I couldn't send from Mint to my Android phone (Android 7.1) 19.1 also features snapshots. I didn't have to test them as I prefer to run Mint off my laptop (no power-cuts there). Occasionally I run it off my MacMini (8 GB of RAM, OS 10.7.5). The MacOS is too old for many things, and to avoid having to buy new Mac gear, I 'upgraded' by running Mint on it. Tom Butz.

3 2