December 2019 - wlug - list.wlug.org.nz

Keybase Moves To Stop Onslaught of Spammers on Encrypted Message Platform
by Peter Reutemann 07 Dec '19

07 Dec '19

'Keybase started off as co-founder and developer Max Krohn's "hobby project" -- a way for people to share PGP keys with a simple username-based lookup. Then Chris Coyne (who also was cofounder of OkCupid and SparkNotes) got involved and along came $10.8 million in funding from a group of investors led by Andreesen Horowitz. And then things got increasingly more complicated. Keybase aims to make public-key encryption accessible to everyone, for everything from messaging to file sharing to throwing a few crypto-coins someone's way. But because of that level of accessibility, Keybase faces a very OkCupid kind of problem: after drawing in people interested in easy public-key crypto-based communications and then drawing in blockchain lovers with its partnership with (and funding from) Stellar.org, Keybase has also drawn in spammers and scammers. And that has brought a host of alerts and messages that have made what was once a fairly clear communications channel into one clogged with unwanted alerts, messages, and other unpleasantry -- raising a chorus of complaints in Keybase's open chat channel. It turns out there's a reason spell check keeps wanting to tell me that Keybase should be spelled "debase." Keybase's leadership is promising to do something to fix the spam problem -- or at least make it easier to report and block abusers. In a blog post, Krohn and Coynes wrote, "To be clear, the current spam volume isn't dire, YET. Keybase still works great. But we should act quickly." But the measures promised by Keybase won't completely eliminate the issue. And Keybase execs have no interest in getting involved with additional steps that they see as censorship. "Keybase is a private company and we do retain our rights to kick people out," the co-founders said in the blog post. "That hammer will not be used because someone is mostly disliked, as long as they're playing nicely on Keybase."' -- source: https://it.slashdot.org/story/19/12/06/1610259 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New Linux Vulnerability Lets Attackers Hijack VPN Connections
by Peter Reutemann 06 Dec '19

06 Dec '19

'Security researchers found a new vulnerability allowing potential attackers to hijack VPN connections on affected *NIX devices and inject arbitrary data payloads into IPv4 and IPv6 TCP streams. They disclosed the security flaw tracked as CVE-2019-14899 to distros and the Linux kernel security team, as well as to others impacted such as Systemd, Google, Apple, OpenVPN, and WireGuard. The vulnerability is known to impact most Linux distributions and Unix-like operating systems including FreeBSD, OpenBSD, macOS, iOS, and Android. A currently incomplete list of vulnerable operating systems and the init systems they came with is available below, with more to be added once they are tested and found to be affected: Ubuntu 19.10 (systemd), Fedora (systemd), Debian 10.2 (systemd), Arch 2019.05 (systemd), Manjaro 18.1.1 (systemd), Devuan (sysV init), MX Linux 19 (Mepis+antiX), Void Linux (runit), Slackware 14.2 (rc.d), Deepin (rc.d), FreeBSD (rc.d), and OpenBSD (rc.d). This security flaw "allows a network adjacent attacker to determine if another user is connected to a VPN, the virtual IP address they have been assigned by the VPN server, and whether or not there is an active connection to a given website," according to William J. Tolley, Beau Kujath, and Jedidiah R. Crandall, Breakpointing Bad researchers at University of New Mexico. "Additionally, we are able to determine the exact seq and ack numbers by counting encrypted packets and/or examining their size. This allows us to inject data into the TCP stream and hijack connections," the researchers said.' -- source: https://linux.slashdot.org/story/19/12/05/2022205 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Polo – A Modern Light-weight File Manager for Linux
by Peter Reutemann 06 Dec '19

06 Dec '19

'Polo is a modern, light-weight and advanced file manager for Linux, that comes with a number of advanced features that are not present in many commonly used file managers or file browsers on Linux distributions. It comes with multiple panes with multiple tabs in each pane, support for archive creation, extraction and browsing, support for cloud storage, support for running KVM images, support for modifying PDF documents and image files, support for writing ISO files to UDB drives and much more.' -- source: https://www.tecmint.com/polo-file-manager-for-linux/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Strange email
by john 06 Dec '19

06 Dec '19

I just received a email as follows: for something I did not order with what appears to be an invalid tracking number banner Hi John Thompson, A consignment has been dispatched from NZ LIFESTYLE CAMPING LTD, these will leave on our next courier cycle. Please click on the links below to track your parcels Shipping Information Receiver: *John Thompson* 2/22 Stokes Crescent Maeroa, 3200 Parcels Reference Label Number CQ0000465225 <http://www.fastway.co.nz/courier-services/track-your-parcel?l=CQ0000465225> *Visit our website at: www.fastway.co.nz <http://www.fastway.co.nz>* The headers appear a little dodgy to me could someone look at them and help me decide if this is bovine scatology? Return-path: <csc(a)nzlifestylecamping.com> Envelope-to: jaytee21(a)slingshot.co.nz Delivery-date: Thu, 05 Dec 2019 19:32:17 +1300 Received: from [10.253.37.139] (port=45902 helo=canit-scanner-1.slingshot.co.nz) by mda-2.slingshot.co.nz with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <csc(a)nzlifestylecamping.com>) id 1ickgR-0004iw-Gp for jaytee21(a)slingshot.co.nz; Thu, 05 Dec 2019 19:32:15 +1300 Received: from EX-VCLUST-03.FASTWAYTECH.local (smtp.fastway.org [103.61.69.250]) by canit-scanner-1.slingshot.co.nz (8.14.4/8.14.4/Debian-8+deb8u2) with ESMTP id xB56W9xu012445 for <jaytee21(a)slingshot.co.nz>; Thu, 5 Dec 2019 19:32:10 +1300 Received: from EX-VWEB-LB-01 ([192.168.32.164]) by EX-VCLUST-03.FASTWAYTECH.local with Microsoft SMTPSVC(7.5.7600.16601); Thu, 5 Dec 2019 19:32:08 +1300 MIME-Version: 1.0 From: csc(a)nzlifestylecamping.com To: jaytee21(a)slingshot.co.nz Date: 5 Dec 2019 19:32:08 +1300 Subject: New Consignment Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 Message-ID: <EX-VCLUST-03UYLqVpU001ab53e(a)EX-VCLUST-03.FASTWAYTECH.local> X-OriginalArrivalTime: 05 Dec 2019 06:32:08.0088 (UTC) FILETIME=[B7B31180:01D5AB35] X-Bayes-Prob: 0.0001 (Score 0, tokens from: jaytee21, base:default, @@RPTN) X-Spam-Score: -0.89 () [Hold at 5.00] HTML_FONT_LOW_CONTRAST:0.001,HTML_MESSAGE:0.001,MIME_HTML_ONLY:1.105,SPF(none:0),DKIM(none:0),CC(NZ:-2) X-CanIt-Geo: ip=103.61.69.250; country=NZ; latitude=-41.0000; longitude=174.0000; http://maps.google.com/maps?q=-41.0000,174.0000&z=6 X-CanItPRO-Stream: base:jaytee21 (inherits from base:default) X-Canit-Stats-ID: 031y6w9mF - 4fdbdb3d511b - 20191205 Received-SPF: none (canit-scanner-1.slingshot.co.nz: domain of csc(a)nzlifestylecamping.com does not designate permitted sender hosts) receiver=canit-scanner-1.slingshot.co.nz; client-ip=103.61.69.250; envelope-from=<csc(a)nzlifestylecamping.com>; helo=EX-VCLUST-03.FASTWAYTECH.local; identity=mailfrom X-Scanned-By: CanIt (www . roaringpenguin . com) X-Envelope-To: jaytee21(a)slingshot.co.nz PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNp dGlvbmFsLy9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwx LXRyYW5zaXRpb25hbC5kdGQiPg0KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3Jn LzE5OTkveGh0bWwiIHN0eWxlPSJoZWlnaHQ6IDEwMCU7IHdpZHRoOiAxMDAlIj4NCjxo ZWFkPg0KICAgIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PWlzby04ODU5LTEiIC8+DQogICAgPHRpdGxlPkVtYWls IG5vdGlmaWNhdGlvbjwvdGl0bGU+DQogICAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4N CiAgICAgICAgI2VtYWlsQm9keSB7DQogICAgICAgICAgICBtYXJnaW4tbGVmdDogMHB4 Ow0KICAgICAgICAgICAgbWFyZ2luLXRvcDogMHB4Ow0KICAgICAgICAgICAgbWFyZ2lu LXJpZ2h0OiAwcHg7DQogICAgICAgICAgICBtYXJnaW4tYm90dG9tOiAwcHg7DQogICAg ICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjM0QzRDNCOw0KICAgICAgICB9DQogICAg PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGlkPSJlbWFpbEJvZHkiPg0KICAgIDxkaXYg c3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IGZvbnQtc2l6ZTogOHB0OyI+DQogICAg ICAgIDx0YWJsZSB3aWR0aD0iMTAwJSIgYm9yZGVyPSIwIiBjZWxsc3BhY2luZz0iMCIg Y2VsbHBhZGRpbmc9IjAiIGhlaWdodD0iMTAwJSI+DQogICAgICAgICAgICA8dHIgdmFs aWduPSJ0b3AiPg0KICAgICAgICAgICAgICAgIDx0ZCB3aWR0aD0iMTAwJSIgaGVpZ2h0 PSIxMDAlIiBiZ2NvbG9yPSIjM0QzRDNCIj4NCiAgICAgICAgICAgICAgICAgICAgPGRp diBhbGlnbj0iY2VudGVyIj4NCiAgICAgICAgICAgICAgICAgICAgICAgIDx0YWJsZSB3 aWR0aD0iNTMwIiBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0i MCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRib2R5Pg0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA8dGQgd2lkdGg9IjEwIj4mbmJzcDsNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICA8dGQgd2lkdGg9IjUxMCIgY29sc3Bhbj0iMiIgc3R5bGU9InRl eHQtYWxpZ246Y2VudGVyOyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPGltZyBzcmM9Imh0dHA6Ly93d3cuZmFzdHdheWVucXVpcmllcy5jb20v RW1haWwvNi5qcGciIHN0eWxlPSJtYXgtd2lkdGg6IDUxMHB4OyBoZWlnaHQ6IGF1dG87 bWFyZ2luOjAgYXV0bzsiIGFsdD0iYmFubmVyIi8+DQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPHRkIHdpZHRoPSIxMCI+Jm5ic3A7DQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA8L3RyPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dHI+DQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQgd2lkdGg9IjEwIj4m bmJzcDsNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+DQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQgd2lkdGg9IjUxMCIg Ymdjb2xvcj0iI2ZmZmZmZiIgY29sc3Bhbj0iMiI+DQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPHRhYmxlIHdpZHRoPSIxMDAlIiBib3JkZXI9IjAi IGNlbGxzcGFjaW5nPSI4IiBjZWxscGFkZGluZz0iMCI+DQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0Ym9keT4NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQ+DQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IDx0YWJsZSB3aWR0aD0iMTAwJSIgYm9yZGVyPSIwIiBjZWxsc3BhY2luZz0iMCIgY2Vs bHBhZGRpbmc9IjAiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0ZD4NCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgPGRpdiBhbGlnbj0ibGVmdCI+DQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA8IS0tPHN0cm9uZz5NZXNzYWdlIGZyb20gTlogTElGRVNUWUxFIENBTVBJTkcg TFREPC9zdHJvbmc+LS0+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICA8L3RyPg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRyPg0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDx0ZCBhbGlnbj0ibGVmdCIgc3R5bGU9ImhlaWdodDoyNXB4OyI+DQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIDwhLS08aW1nIGhlaWdodD0iMiIgc3JjPSIyLmdpZiIgd2lkdGg9IjQ3 NSIgYWx0PSIiIC8+LS0+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+ DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIDwvdGFibGU+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQoNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQ+DQoNCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRp dj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEhpIEpvaG4gVGhvbXBzb24sPGJyIC8+PGJyIC8+QSBjb25zaWdu bWVudCBoYXMgYmVlbiBkaXNwYXRjaGVkIGZyb20gTlogTElGRVNUWUxFIENBTVBJTkcg TFRELCB0aGVzZSB3aWxsIGxlYXZlIG9uIG91ciBuZXh0IGNvdXJpZXIgY3ljbGUuPGJy IC8+PGJyIC8+UGxlYXNlIGNsaWNrIG9uIHRoZSBsaW5rcyBiZWxvdyB0byB0cmFjayB5 b3VyIHBhcmNlbHM8YnIgLz48YnIgLz48c3R5bGUgdHlwZT0ndGV4dC9jc3MnPg0KICAg ICAgICAuYm9yZGVyDQogICAgICAgIHsNCiAgICAgICAgICAgIGJvcmRlci1ib3R0b206 IDFweCBzb2xpZCBibGFjazsNCiAgICAgICAgfQ0KDQogICAgICAgIC50aXRsZQ0KICAg ICAgICB7DQogICAgICAgICAgICBmb250LXNpemU6IDEycHQ7DQogICAgICAgIH0NCg0K ICAgICAgICBib2R5DQogICAgICAgIHsNCiAgICAgICAgICAgIGNvbG9yOiAjMDAzMzk5 Ow0KICAgICAgICAgICAgZm9udC1mYW1pbHk6IEdlbmV2YSxBcmlhbCxIZWx2ZXRpY2Es c2Fucy1zZXJpZjsNCiAgICAgICAgICAgIGZvbnQtc2l6ZTogNzAlOw0KICAgICAgICB9 DQogICAgPC9zdHlsZT4NCjxwPsKgPC9wPg0KICAgIDx0YWJsZSB3aWR0aD0nMTAwJScg Y2VsbHNwYWNpbmc9JzAnPg0KICAgICAgICA8dHI+DQogICAgICAgICAgICA8dGQgY29s c3Bhbj0nMycgY2xhc3M9J2JvcmRlciB0aXRsZSc+DQogICAgICAgICAgICAgICAgU2hp cHBpbmcgSW5mb3JtYXRpb24NCiAgICAgICAgICAgIDwvdGQ+DQogICAgICAgIDwvdHI+ PHRyPg0KICAgICAgICAgICAgPHRkIGNvbHNwYW49JzMnPg0KICAgICAgICAgICAgICAg IDx0YWJsZSB3aWR0aD0nMTAwJSc+DQogICAgICAgICAgICAgICAgICAgIDx0ciB2YWxp Z249J3RvcCc+DQogICAgICAgICAgICAgICAgICAgICAgICA8dGQgd2lkdGg9JzYwcHgn IHN0eWxlPSdmb250LXNpemU6MTBwdCc+DQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgUmVjZWl2ZXI6DQogICAgICAgICAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAg ICAgICAgICAgICAgICAgICAgPHRkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg IDxzdHJvbmc+Sm9obiBUaG9tcHNvbjwvc3Ryb25nPjxiciAvPjIvMjIgU3Rva2VzIENy ZXNjZW50PGJyIC8+TWFlcm9hLCAzMjAwDQogICAgICAgICAgICAgICAgICAgICAgICA8 L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgPHRkIHdpZHRoPScyMHB4Jz7CoDwv dGQ+ICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAgICA8 L3RyPg0KICAgICAgICAgICAgICAgIDwvdGFibGU+DQogICAgICAgICAgICA8L3RkPg0K ICAgICAgICA8L3RyPiA8dHI+DQogICAgICAgICAgICA8dGQgY29sc3Bhbj0nMyc+DQog ICAgICAgICAgICAgICDCoA0KICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgPC90cj4N CiAgICAgICAgICA8dHI+DQogICAgICAgICAgICA8dGQgY29sc3Bhbj0nMycgY2xhc3M9 J2JvcmRlciB0aXRsZSc+DQogICAgICAgICAgICAgICBQYXJjZWxzDQogICAgICAgICAg ICA8L3RkPg0KICAgICAgICA8L3RyPg0KICAgICAgICA8dHI+DQogICAgICAgIDx0ZD5S ZWZlcmVuY2U8L3RkPg0KDQogICAgICAgIDx0ZCBjb2xzcGFuPScyJz5MYWJlbCBOdW1i ZXI8L3RkPg0KICAgICAgICA8L3RyPjx0cj48dGQ+PC90ZD4NCiAgICAgICAgPHRkIGNv bHNwYW49JzInPjxhIGhyZWY9J2h0dHA6Ly93d3cuZmFzdHdheS5jby5uei9jb3VyaWVy LXNlcnZpY2VzL3RyYWNrLXlvdXItcGFyY2VsP2w9Q1EwMDAwNDY1MjI1Jz5DUTAwMDA0 NjUyMjU8L2E+PC90ZD4NCiAgICAgICAgPC90cj48L3RhYmxlPg0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4N CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICA8L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgPC90cj4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDx0ZCBoZWlnaHQ9IjI1IiBiZ2NvbG9yPSIjMTc2NmEz Ij4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVyIiBzdHlsZT0iY29sb3I6IFdoaXRlOyI+ DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA8c3Ryb25nPlZpc2l0IG91ciB3ZWJzaXRlIGF0OiA8YSBzdHlsZT0i dGV4dC1kZWNvcmF0aW9uOiBub25lOyBjb2xvcjogI2ZmZmZmZjsiDQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgaHJlZj0iaHR0cDovL3d3dy5mYXN0d2F5LmNvLm56Ij53d3cuZmFzdHdheS5jby5u ejwvYT48L3N0cm9uZz4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGJvZHk+DQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90YWJsZT4NCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICA8dGQgd2lkdGg9IjEwIj4mbmJzcDsNCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIDwvdHI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDx0cj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0ZCBj b2xzcGFuPSI0IiB3aWR0aD0iNTMwIj4mbmJzcDsNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvdHI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90Ym9keT4NCiAg ICAgICAgICAgICAgICAgICAgICAgIDwvdGFibGU+DQogICAgICAgICAgICAgICAgICAg IDwvZGl2Pg0KDQogICAgICAgICAgICAgICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+ DQogICAgICAgICAgICAgICAgICAgICAgICAmbmJzcDsNCiAgICAgICAgICAgICAgICAg ICAgPC9kaXY+DQogICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgIDwvdHI+ DQogICAgICAgIDwvdGFibGU+DQogICAgPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= Hi John Thompson, A consignment has been dispatched from NZ LIFESTYLE CAMPING LTD, these will leave on our next courier cycle. Please click on the links below to track your parcels Label Number CQ0000465225 <http://www.fastway.co.nz/courier-services/track-your-parcel?l=CQ0000465225> *Visit our website at: www.fastway.co.nz <http://www.fastway.co.nz>*

2 1

Brother of Drug Lord Pablo Escobar Launches 'Unbreakable' Foldable Smartphone
by Peter Reutemann 05 Dec '19

05 Dec '19

'Roberto Escobar, brother of the late drug lord Pablo Escobar, has announced a foldable smartphone that is "very difficult to break" thanks to the screen's "special type of plastic." The Escobar Fold 1, as it is called, significantly undercuts Samsung's Galaxy Fold and Huawei Mate X with a price of only $349. Neowin reports: While all the foldable phones announced so far have a price tag of at least $1,500+, the Escobar Fold 1 will be available from only $349 which includes free shipping and a case as well. It will be sold unlocked and work on all compatible networks worldwide. This makes it cheaper than other non-foldable flagship smartphones available in the market right now. The drug lord's brother has been able to price the phone so low by cutting out the middlemen like networks and retailers. He is also preparing to file a $30 billion class-action lawsuit against Apple for scamming people and wants the company to "give some of their illegal profits back to the people." Like the Huawei Mate X, the Escobar Fold can be unfolded to turn it into a tablet with a screen size of 7.8-inches. The expanded AMOLED display has a 4:3 aspect ratio and an FHD+ resolution. The design language is different from the Samsung Galaxy Fold which features two separate displays, one of which folds. ' -- source: https://mobile.slashdot.org/story/19/12/03/2325235 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 2

The Rise and Fall of the PlayStation Supercomputers
by Peter Reutemann 04 Dec '19

04 Dec '19

'"On the 25th anniversary of the original Sony PlayStation, The Verge shares the story of the PlayStation supercomputers," writes Slashdot reader jimminy_cricket. From the report: Dozens of PlayStation 3s sit in a refrigerated shipping container on the University of Massachusetts Dartmouth's campus, sucking up energy and investigating astrophysics. It's a popular stop for tours trying to sell the school to prospective first-year students and their parents, and it's one of the few living legacies of a weird science chapter in PlayStation's history. Those squat boxes, hulking on entertainment systems or dust-covered in the back of a closet, were once coveted by researchers who used the consoles to build supercomputers. With the racks of machines, the scientists were suddenly capable of contemplating the physics of black holes, processing drone footage, or winning cryptography contests. It only lasted a few years before tech moved on, becoming smaller and more efficient. But for that short moment, some of the most powerful computers in the world could be hacked together with code, wire, and gaming consoles. "The game consoles entered the supercomputing scene in 2002 when Sony released a kit called Linux for the PlayStation 2," reports The Verge. Craig Steffen, senior research scientist at the National Center for Supercomputing Applications, and his group hooked up between 60 and 70 PlayStation 2s, wrote some code, and built out a library. "The PS3 entered the scene in late 2006 with powerful hardware and an easier way to load Linux onto the devices," the report adds. "Researchers would still need to link the systems together, but suddenly, it was possible for them to imagine linking together all of those devices into something that was a game-changer instead of just a proof-of-concept prototype."' -- source: https://hardware.slashdot.org/story/19/12/03/2214249 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox 71 Arrives With Better Lockwise and Tracker Blocking, Picture-in-Picture on Windows
by Peter Reutemann 04 Dec '19

04 Dec '19

'Mozilla today released Firefox 71 for Windows, Mac, Linux, Android, and iOS. Firefox 71 includes Lockwise password manager improvements, Enhanced Tracking Protection tweaks, and Picture-in-Picture video on Windows.' -- source: https://news.slashdot.org/story/19/12/03/1428206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

elementary OS 5.1 'Hera' Linux Distro is Here
by Peter Reutemann 04 Dec '19

04 Dec '19

'elementary OS has long been viewed by many as the future of Linux on the PC thanks to its beautiful desktop environment and overall polished experience. Development of the Ubuntu-based operating system has been frustratingly slow, however. This shouldn't be surprising, really, as the team of developers is rather small, and its resources are likely much less than those of larger distributions such as the IBM-backed Fedora or Canonical's Ubuntu. And that is what makes elementary OS so remarkable -- its developers can make magic on a smaller budget. Today, the latest version of the operating system is released. Code-named "Hera," elementary OS 5.1 is now available for download. Support for Flatpak is now baked in -- this is significant, as the developers explain it is "the first non-deb packaging format we've supported out of the box." The Linux kernel now sits at a very modern 5.0. One of the most important aspects of elementary OS, the AppCenter, is now an insane 10 times faster than its predecessor.' -- source: https://tech.slashdot.org/story/19/12/03/1538207 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Mozilla Removes Avast and AVG Extensions From Add-on Portal Over Snooping Claims
by Peter Reutemann 04 Dec '19

04 Dec '19

'Mozilla today removed four Firefox extensions made by Avast and its subsidiary AVG after receiving credible reports that the extensions were harvesting user data and browsing histories. From a report: The four extensions are Avast Online Security, AVG Online Security, Avast SafePrice, and AVG SafePrice. The first two are extensions that show warnings when navigating to known malicious or suspicious sites, while the last two are extensions for online shoppers, showing price comparisons, deals, and available coupons. Mozilla removed the four extensions from its add-ons portal after receiving a report from Wladimir Palant, the creator of the AdBlock Plus ad-blocking extension. Palant analyzed the Avast Online Security and AVG Online Security extensions in late October and found that the two were collecting much more data than they needed to work -- including detailed user browsing history, a practice prohibited by both Mozilla and Google.' -- source: https://yro.slashdot.org/story/19/12/03/1559248 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Vulnerability In Fully Patched Android Phones Under Active Attack By Bank Thieves
by Peter Reutemann 03 Dec '19

03 Dec '19

'A vulnerability in millions of fully patched Android phones is being actively exploited by malware that's designed to drain the bank accounts of infected users, researchers said on Monday. The vulnerability allows malicious apps to masquerade as legitimate apps that targets have already installed and come to trust, researchers from security firm Promon reported in a post. Running under the guise of trusted apps already installed, the malicious apps can then request permissions to carry out sensitive tasks, such as recording audio or video, taking photos, reading text messages or phishing login credentials. Targets who click yes to the request are then compromised. Researchers with Lookout, a mobile security provider and a Promon partner, reported last week that they found 36 apps exploiting the spoofing vulnerability. The malicious apps included variants of the BankBot banking trojan. BankBot has been active since 2017, and apps from the malware family have been caught repeatedly infiltrating the Google Play Market. The vulnerability is most serious in versions 6 through 10, which account for about 80% of Android phones worldwide. Attacks against those versions allow malicious apps to ask for permissions while posing as legitimate apps. There's no limit to the permissions these malicious apps can seek. Access to text messages, photos, the microphone, camera, and GPS are some of the permissions that are possible. A user's only defense is to click "no" to the requests. "The vulnerability is found in a function known as TaskAffinity, a multitasking feature that allows apps to assume the identity of other apps or tasks running in the multitasking environment," reports Ars Technica. While Google has removed the [unnamed] malicious apps from its Play Store, according to Promon, the vulnerability is still unfixed in all versions of Android. "Promon is calling the vulnerability 'StrandHogg,' an old Norse term for the Viking tactic of raiding coastal areas to plunder and hold people for ransom," the report adds. "Promon researchers said they identified StrandHogg after learning from an unnamed Eastern European security company for financial institutions that several banks in the Czech Republic reported money disappearing from customer accounts."' -- source: https://it.slashdot.org/story/19/12/02/230254 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0