November 2019 - wlug - list.wlug.org.nz

The File /var/lib/dbus/machine-id Matters For Your Privacy (and Devuan Fixed It)
by Peter Reutemann 01 Dec '19

01 Dec '19

'A few days ago Devuan ASCII 2.1 was announced and one update has been overlooked by most media outlets: our dbus patch to re-generate machine-id at every boot. This patch matters for everyone's privacy and I hope more distributions will follow our example, let alone Debian. We are dealing with important privacy implications: non-consensual user tracking is illegal in many countries and is not even mentioned in the machine-id documentation so far. "In theory, the machine-id should be a persistent identifier of the current host," explains the README documentation. "In practice, this causes some privacy concerns...' -- source: https://linux.slashdot.org/story/19/11/30/0538211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu 19.10: It’s fast, like “make old hardware feel new” fast
by Peter Reutemann 28 Nov '19

28 Nov '19

'Leaves are turning. Temperatures have dipped. These are sure signs—if you live in the Northern Hemisphere, at least—that Canonical's Autumn release is upon us. Things are a bit different in 2019, however. Not only is Ubuntu 19.10 nicknamed Eoan Ermine (no, I don't know how you pronounce it either), but it's the best non-LTS Ubuntu release Canonical has ever put out. I should qualify that statement somewhat, because really, as the newest version, it had damn well better be the best Ubuntu ever. But there's more than recency bias behind the sentiment. I've been reviewing Ubuntu for 10 years now, and I was using and interacting with this distro in some form or another for another three or four years before that. After spending recent weeks with Ubuntu 19.10, I can say confidently it is quite simply the best Ubuntu Canonical has ever released. The first reason I like 19.10 so much is that it feels insanely fast. Everyday tasks like opening applications, dragging windows, activating the search interface, and even just moving the cursor around are all noticeably faster than in 19.04. The speed boost is immediately noticeable from the minute you pop in the live CD, and it's even faster once you have 19.10 installed. I happened to be testing a top-of-the-line MacBook around the time I first installed the 19.10 beta on my aging Lenovo x240, and it instantly made the Mac feel like a sloth. Ubuntu 19.10 ran circles around the Mac even on much, much less powerful hardware, and nothing says success during testing like software that makes old hardware feel newer. Even if that were all you got out of Ubuntu 19.10, I'd call it a win.' -- source: https://arstechnica.com/gadgets/2019/11/ubuntu-19-10-quite-simply-the-best-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

tagging arbitrary files (not just mp3s) under Linux
by Peter Reutemann 26 Nov '19

26 Nov '19

Hi everyone After last night's AGM, I had a conversation with Rod regarding any Linux applications that allow tagging of arbitrary files (not just mp3s) to improve organizing them, similar to what Gmail introduced all those years ago. In the following reddit discussion: https://www.reddit.com/r/linux/comments/3mjwn5/do_any_popular_linux_file_sy… I came across the "TagSpaces" application (open source, AGPL), which seems to fit that bill: https://www.tagspaces.org/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

The strange tale of OneCoin
by Ian Young 26 Nov '19

26 Nov '19

Sorry if this is too wildly off topic but I was taken back by a story on the BBC from a day or two ago. https://www.bbc.com/news/stories-50435014

2 1

Passive-Cooling A Raspberry π 4
by Lawrence D'Oliveiro 26 Nov '19

26 Nov '19

Just came across this video <https://www.youtube.com/watch?v=VJC6OpGpq0Y>, latest in a series on cooling solutions for a Raspberry π 4. This instalment looks at a couple of purely passive, fanless products that use the case as a heat sink (or vice versa). But on top of that, a recent firmware update from Broadcom has made a massive difference to the running temperature in all the configurations. Summary: passive cooling worked quite well before the update, and now works even better.

1 0

The Librem 5 has been “shipping” for a month—but not to backers
by Peter Reutemann 26 Nov '19

26 Nov '19

'Purism announced that shipping of its Librem 5 open source smartphone began in late September. Two months later, nobody outside the company has a Librem 5, and people are getting restless. The Librem 5 is a crowdfunded project—and an ambitious one—so it wasn't much surprise or cause for concern when it missed its original January 2019 delivery target—or the April 2019 target set after January slipped. Both date changes were announced well ahead of time, and the company continued to post progress reports, commit code upstream, and assure backers of its commitment to transparency. (Full disclosure: I am a Librem 5 backer myself and am scheduled to receive a phone in the Evergreen batch.) The new delays are more troubling. On September 5, CEO Todd Weaver announced that the Librem 5 would ship in six iterative batches, codenamed Aspen, Birch, Chestnut, Dogwood, Evergreen, and Fir. The first three batches would effectively be usable prototypes of decreasing roughness; Evergreen would be the first entirely finished hardware production run, and Fir would be a relatively unspecified next-generation design.' -- source: https://arstechnica.com/gadgets/2019/11/the-librem-5-has-been-shipping-for-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Mozilla's Annual Buyer's Guide Rates Amazon and Google Security Cameras 'Very Creepy'
by Peter Reutemann 26 Nov '19

26 Nov '19

'"Be Smart. Shop Safe," warns Mozilla's annual buyer's guide for secure connected products. Based on their conversations with developers and dozens of privacy experts, they've awarded smiley faces with different expressions to rate products from "Not Creepy" up to "Super Creepy". "While the variety of smart devices on offer is rapidly increasing, so are the number of products that pay no heed to even basic security measures..." notes the editor of Mozilla's Internet Health Report. "Now that more and more companies collect personal data about you, including audio and video of your family, and sensitive biometric and health information, like your heart rate and sleeping habits, it's worrying that more are not upfront about the privacy and security of their products." Or, as The Next Web writes, "god bless Mozilla for having our lazy backs." And, well, if you're a user of any Ring camerasâ¦ we're sorry. Basically, there are five things that every product must do: - Have automatic security updates, so they're protected against the newest threats - Use encryption, meaning bad actors can't just snoop on your data - Include a vulnerability management pathway, which makes reporting bugs easy and, well, possible - Require users to change the default password (if applicable), because that makes devices far harder to access - Privacy policies -- ones that relate to the product specifically, and aren't just generic Doesn't seem too much to ask right...? Well, of the 76 devices Mozilla selected, 60 of them passed this test... And what devices didn't meet the criteria? There were nine of them overall (including the Artie 3000 Coding Robot and the Wemo Wifi Smart Dimmer), but the real loser in this test is the Amazon-owned Ring. Three of the company's products (which is effectively all of their major devices) didn't meet Mozilla's criteria. Yes, that's right, the Ring Video Doorbell, Ring Indoor Cam, and Ring Security Cam all didn't meet minimum standards for security.... The main reasons for not meeting this criteria is due Ring's history with poor encryption policies, and vulnerability management. To be fair, Nest Cam's Indoor and Outdoor Security Cameras and Google Home also fell into the "Very Creepy" category -- and so did Amazon's Echo smart speakers. (The Amazon Echo Show even made it into Mozilla's highest "Super Creepy" category, where the only other product was Facebook Portal.) But at least the Nest Hello Video doorbell only appears in Mozilla's "Somewhat Creepy" category. "Just because something on your wishlist this year connects to the internet, doesn't mean you have to compromise on privacy and security..." warns the editor of Mozilla's Internet Health Report. And in addition, "Fitness trackers designed for kids as young as 4 years old, raise questions about what we are teaching our children about how much digital surveillance in their lives is normal." Going forward, they suggest that we push for better privacy regulations -- and that whenever we rate products on performance and price, we should also rate them on their privacy and security. But in the meantime, as Mozilla explained on Twitter, "Friends don't let friends buy creepy gifts."' -- source: https://yro.slashdot.org/story/19/11/25/0415202 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Web Creator Tim Berners-Lee Launches Plan To 'Fix' the Internet
by Peter Reutemann 26 Nov '19

26 Nov '19

'Tim Berners-Lee, the creator of the World Wide Web, is officially launching his plan to "fix" the internet. From a report: The World Wide Web Foundation, a non-profit campaign group set up by Berners-Lee, has secured the backing of tech giants Facebook, Google and Microsoft for the scheme, dubbed the "contract for the web." The British computer scientist first outlined his vision to overhaul organizations' approach to the internet at the Web Summit event last year. At the time, he said the web was "at a tipping point." The contract calls on companies to respect consumers' data privacy and urges governments to ensure everyone has access to the internet. "Never before has the web's power for good been more under threat," Adrian Lovett, CEO of the World Wide Web Foundation, told CNBC in an interview Friday. He added that the rise of hateful content and fake news being propagated online meant something had to change. "We're launching the contract for the web for the world's first-ever global action plan to protect the web as a force for good, bringing together companies, governments and citizens from around the world to say these are the things that need to be done to put things back on the right track." Other organizations backing the contract include DuckDuckGo, Reddit, GitHub and Reporters Without Borders. One major component of the pledge is the requirement that the web remains an accessible tool for all users. Lovett said that, "despite the progress we've seen in getting the world connected, half the world doesn't have access." He said the contract comes with nine core principles, while underneath them is a total of 76 clauses. "Not every organization has to abide by all of them," he insisted. "A good number of those 76 will be relevant." Berners-Lee will deliver a speech in Berlin, Germany, on Monday where he is due to say the contract will serve as a blueprint for governments, companies and citizens to safeguard the web as a force for good. The World Wide Web Foundation says it is working with partners to develop tools that can measure progress on the contract's various clauses' -- source: https://yro.slashdot.org/story/19/11/25/1347233 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Zorin OS 15 Lite Linux Distro Can Rejuvenate Your Aging Windows PC
by Peter Reutemann 26 Nov '19

26 Nov '19

'Called "Zorin OS 15 Lite," it is not only lightweight, but thanks to the Xfce desktop environment and integrated Flatpak support, it should be quite familiar to those switching from Windows. In fact, the developers are intentionally targeting existing Windows 7 users, as Microsoft's operating system will be unsupported beginning January 2020. Zorin OS 15 Lite, in comparison, is based on Ubuntu 18.04 LTS and supported until 2023! It even comes with the very modern Linux kernel 5.0. "With Zorin OS 15 Lite, weâ(TM)ve condensed the full Zorin OS experience into a streamlined operating system, designed to run fast on computers as old as 15 years. With version 15, we've gone the extra mile to make the XFCE 4.14-based desktop feel familiar and user-friendly to new users, especially those moving away from Windows 7 leading up to the end of its support in January 2020. By pairing the most advanced and efficient software with a user-friendly experience, we've made it possible for anyone to extend the lifespan of their computers for years to come," explains the Zorin OS developers.' -- source: https://linux.slashdot.org/story/19/11/25/179256 Maybe worth a demo next year? Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The RIPE NCC Has Run Out of IPv4 Addresses
by Peter Reutemann 26 Nov '19

26 Nov '19

'The RIPE NCC, the regional internet registry for Europe, West Asia, and the former USSR, has allocated the final /22 remaining in their address pool, and has stated that they have now run out of IPv4 addresses. RIPE will continue to recover IPv4 addresses from organisations that go out of business, close, or that return them due to lack of need, but expects these small amounts of recovered IPv4 addresses to fall well short of demand: RIPE will now only assign IPv4 addresses to entities that have never received any IPv4 allocation in the past, and even then will assign no more than a /24. RIPE puts out a call to action for IPv6 migration: This event is another step on the path towards global exhaustion of the remaining IPv4 addressing space. In recent years, we have seen the emergence of an IPv4 transfer market and greater use of Carrier Grade Network Address Translation (CGNAT) in our region. There are costs and trade-offs with both approaches and neither one solves the underlying problem, which is that there are not enough IPv4 addresses for everyone. Without wide-scale IPv6 deployment, we risk heading into a future where the growth of our Internet is unnecessarily limited — not by a lack of skilled network engineers, technical equipment or investment -- but by a shortage of unique network identifiers. There is still a long way to go, and we call on all stakeholders to play their role in supporting the IPv6 roll-out.' -- source: https://tech.slashdot.org/story/19/11/25/1841256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0