January 2019 - wlug - list.wlug.org.nz

Linux For Cars: Tesla Isn't The Only Automaker Running Linux Under the Hood
by Peter Reutemann 06 Jan '19

06 Jan '19

'ZDNet reports that by 2020, "many, if not most, new cars will be running with Linux." While some companies, like Tesla, run their own homebrew Linux distros, most rely on Automotive Grade Linux (AGL). AGL is a collaborative cross-industry effort developing an open platform for connected cars with over 140 members... Its membership includes Audi, Ford, Honda, Mazda, Nissan, Mercedes, Suzuki, and the world's biggest automobile company: Toyota. Why? "Automakers are becoming software companies, and just like in the tech industry, they are realizing that open source is the way forward," said Dan Cauchy, AGL's executive director, in a statement. Car companies know that while horsepower sells, customers also want smart infotainment systems, automated safe drive features, and, eventually, self-driving cars. Linux and open-source company can give them all of that. The AGL's goal is to develop an open-source, common platform for infotainment systems: The Unified Code Base (UCB). This is a Linux distribution and open-source software platform for car infotainment, telematics, and instrument cluster applications... The AGL's hope is that this will serve as a de facto industry standard. It's well on its way. Yesterday Hyundai announced that they were also joining both the AGL effort and the Linux Foundation.' -- source: https://tech.slashdot.org/story/19/01/05/1928205 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Eben Upton Remembers The Years Before the First Raspberry Pi
by Peter Reutemann 06 Jan '19

06 Jan '19

'Tech Republic re-visits the story of the earliest attempts to build the Raspberry Pi, and the dramatic launch of a quest "to rekindle the curiosity about computing in a generation immersed in technology but indifferent to how it worked." [T]he dominant computers -- games consoles and later tablets and smartphones -- no longer offered an invitation to create, but rather to consume. Eben Upton recalls a bonfire party in 2007 where an 11-year-old boy told him he wanted to be an electrical engineer, and his disappointment at realizing the boy didn't have access to a computer he could program on. "I said, 'Oh, what computer have you got?'. He said, 'I've got a Nintendo Wii'. And there was just that awful feeling about there being a kid who was excited, a kid who was showing concrete interest in our profession, and who didn't have access to a programmable computer, a computer of any sort. He just had a games console." At this time Upton was working as a system-on-a-chip architect at chip designer Broadcom, and realized he had the skills to try to halt this drift away from computers that encouraged users to code. Upton describes the Raspberry Pi as "a very conscious attempt" to bring back the easily programmable home computers that he remembered as a child in the 1980s -- and he was gratified at its success. "Even early on you started to see those pictures of kids lying on the living room floor, looking up at the TV with Raspberry Pi plugged into it, the same way we used to." It was named "Pi" because it booted into a version of Python, and Raspberry because "There's a lot of fruit-named computer companies, and the 'blowing a raspberry' thing was also deliberate." It's gone on to become the world's third best-selling general-purpose computer.' -- source: https://developers.slashdot.org/story/19/01/05/2031219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux commands for measuring disk activity
by Peter Reutemann 04 Jan '19

04 Jan '19

'Linux systems provide a handy suite of commands for helping you see how busy your disks are, not just how full. In this post, we examine five very useful commands for looking into disk activity. Two of the commands (iostat and ioping) may have to be added to your system, and these same two commands require you to use sudo privileges, but all five commands provide useful ways to view disk activity.' -- source: https://www.networkworld.com/article/3330497/linux/linux-commands-for-measu… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

DCP – Transfer Files Between Linux Hosts Using Peer-to-Peer Network
by Peter Reutemann 04 Jan '19

04 Jan '19

'People often need to copy or share files over the network. Many of us are used to using tools such as rsync or scp to transfer files between machines. In this tutorial, we are going to review another tool that can help you copy files between hosts in a network – Dat Copy (dcp). Dcp does not require SSH to be used or configured in order to copy your files. Furthermore it does not require any configuration to securely copy your files.' -- source: https://www.tecmint.com/dcp-copy-files-between-linux-servers/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Mickey Mouse Will Be Public-Domain Soon; But What Will It Mean?
by Lawrence D'Oliveiro 03 Jan '19

03 Jan '19

Wonder of wonders, there has been no followup to the Sonny Bono Copyright Term Extension Act of 1998 <https://arstechnica.com/tech-policy/2019/01/a-whole-years-worth-of-works-ju…>. That means more and more interesting things are going to fall into the public domain from this year onwards. However, things are not going to be simple: the original incarnation of Walt Disney’s Mickey Mouse will be in the public domain after 2024, but later versions will still be under copyright, and the trademarks will also continue to be in effect. How will that work? Probably in the same way that “intellectual property” usually works: the one with the biggest legal budget wins.

1 0

Examples Of How Not To Code
by Lawrence D'Oliveiro 03 Jan '19

03 Jan '19

Presenting the “Damn Vulnerable Serverless Application” <https://www.theregister.co.uk/2019/01/03/damn_vulnerable_serverless_applica…>, the latest in a line of “damn vulnerable” apps that are chock-full of deliberately-introduced security vulnerabilities. My worry about this sort of thing is the mindless-copy-and-paste crowd. We already see the effects of posting sample code with error-checking omitted “just to keep things simple”, along with exhortations to use it only as a guide, not to be slavishly copied; such exhortations are routinely ignored. From there, it seems only a small step to completely miss the context of such counterexample code, and actually use it as something to be followed.

1 0

Mozilla Thunderbird Outlines Plans For 2019: Addressing UI Lags, Performance Issues; Improved 3rd-Party Email Integration, Encryption Usability
by Peter Reutemann 02 Jan '19

02 Jan '19

'For years, Mozilla has largely neglected development of Thunderbird, an email client it owns. But the company, which grew its team to eight staff last year, says it plans to address most of the issues that users have complained about and add six more people to Thunderbird staff this year, it said in a blog post. In the blog post Wednesday, the company said: Our hires are already addressing technical debt and doing a fair bit of plumbing when it comes to Thunderbird's codebase. Our new hires will also be addressing UI-slowness and general performance issues across the application. This is an area where I think we will see some of the best improvements in Thunderbird for 2019, as we look into methods for testing and measuring slowness -- and then put our engineers on architecting solutions to these pain points. Beyond that, we will be looking into leveraging new, faster technologies in rewriting parts of Thunderbird as well as working toward a multi-process Thunderbird. [...] For instance, one area of usability that we are planning on addressing in 2019 is integration improvements in various areas. One of those in better Gmail support, as one of the biggest email providers it makes sense to focus some resources on this area. We are looking at addressing Gmail label support and ensuring that other features specific to the Gmail experience translate well into Thunderbird. We are looking at improving notifications in Thunderbird, by better integrating with each operating system's built-in notification system. By working on this feature Thunderbird will feel more "native" on each desktop and will make managing notifications from the app easier. The UX/UI around encryption and settings will get an overhaul in the coming year, whether or not all this work makes it into the next release is an open question â" but as we grow our team this will be a focus. It is our hope to make encrypting Email and ensuring your private communication easier in upcoming releases, we've even hired an engineer who will be focused primarily on security and privacy.' -- source: https://tech.slashdot.org/story/19/01/02/165204 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

GIMP Developers Outline Plan For 2019
by Peter Reutemann 02 Jan '19

02 Jan '19

'The GIMP developers on Wednesday published a blog post in which they look back at the year 2018 (release of GIMP 2.10) and outline the things that they intend to get around this year. From the post: We expect to be shipping 2.10.x updates throughout 2019, starting with the version 2.10.10 currently expected in January/February. This version will feature faster layer groups rendering, smart colorization with the Bucket Fill tool, and various usability improvements. We are also planning the first unstable release of GIMP that will have version 2.99.2, eventually leading up to version 3.0. The prerequisite for releasing that version will be the completion of the space invasion. ZeMarmot project (which can be supported on Patreon or Tipeee) is also planning to focus a bit more on better canvas interactions, as well as animation support improvements, starting from merging existing work. On the GEGL and babl front, we expect to continue working towards better CMYK support and performance.' -- source: https://developers.slashdot.org/story/19/01/02/1655210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

USB Type-C Authentication Program Launched
by Peter Reutemann 02 Jan '19

02 Jan '19

'With the arrival of USB-C a few years back, plugging into laptops, tablets and smartphones became even easier than before. But there are potential security risks. The USB Type-C Authentication Program launched today aims to address such issues. From a report: The new protocol from the USB Implementers Forum (USB-IF) can be used to validate the authenticity of a cable, charger or hardware at the moment of connection, and stop attacks in their tracks. The USB-IF has chosen DigiCert to operate registrations and certificate authority services for the new specification, which makes use of 128-bit cryptographic-based authentication for certificate format, digital signing, hash and random number generation. "USB Type-C Authentication gives OEMs the opportunity to use certificates that enable host systems to confirm the authenticity of a USB device or USB charger, including such product aspects as the descriptors, capabilities and certification status," said DigiCert in a press release. "This protects against potential damage from non-compliant USB chargers and the risks from maliciously embedded hardware or software in devices attempting to exploit a USB connection."' -- source: https://it.slashdot.org/story/19/01/02/2025207 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

wget Command Stores Extended Attributes
by Lawrence D'Oliveiro 02 Jan '19

02 Jan '19

Here’s something I didn’t know: the “wget” command saves the URL where it got a downloaded file as an extended attribute of the file. This behaviour isn’t mentioned anywhere in the man page or in the info file, that I can find. Unfortunately, this can lead to a security issue where the URL includes confidential password details. And it appears other apps, like Chrome, do a similar thing. <https://www.theregister.co.uk/2019/01/02/wget_bug_fix/>

1 0