August 2019 - wlug - list.wlug.org.nz

Knoppix 8.6 - anyone have the iso?
by Ian Young 26 Aug '19

26 Aug '19

I have not so far been able to download the 4.3 gig DVD iso file after a number of attempts from various mirrors - I have not found any in New Zealand. Anyone have the iso? Professor Knopper has it seems removed systemd from Knoppix. "The still controversial startup systemd, which has been a little outrageous due to security vulnerabilities just recently <https://www.zdnet.com/article/new-linux-systemd-security-holes-uncovered/>, has been integrated in Debian since Jessie [8.0], and has been removed since Knoppix 8.5. I bypass hard dependencies on the boot system with my own packages. To still get a systemd-like session management, and thus retain the ability to shut down and restart the system as a normal user, I run the session manager "elogind" instead. This bypasses systemd's interference with many system components and reduces the complexity of the overall system. If you want to start your own services at startup, you do not need to create any systemd units, but simply enter them in the text file */etc/rc.local*, which contains explanatory examples."

3 2

KDE Konsole v19
by Lawrence D'Oliveiro 24 Aug '19

24 Aug '19

Just did my roughly-monthly Debian Unstable upgrade. The most noticeable change so far (apart from Linux kernel 5.2) is a new version of the KDE Konsole terminal emulator, going from version 18 to version 19. This one has close icons by default on each tab, which I have decided (after closing one tab I didn’t mean to) are too dangerous to click accidentally, so I have turned them off. Another change is that the shortcuts for moving tabs left/right have changed from ctrl-shift-left/right to ctrl-alt-left/right. This means I have to move my fingers slightly from the ctrl-shift-T shortcut that creates a new tab, to the ones for reordering it. On the other hand, I don’t do that too often ...

1 0

Google Chrome Proposes 'Privacy Sandbox' To Reform Advertising Evils
by Peter Reutemann 24 Aug '19

24 Aug '19

'Google's Chrome team proposed a "privacy sandbox" Thursday that's designed to give us the best of both worlds: ads that publishers can target toward our interests but that don't infringe our privacy. From a report: It's a major development in an area where Chrome, the dominant browser, has lagged competitors. Browsers already include security sandboxes, restrictions designed to confine malware to limit its possible damage. Google's proposed privacy sandbox would similarly restrict tracking technology, according to proposal details Google published. The privacy sandbox is "a secure environment for personalization that also protects user privacy," said Justin Schuh, a director of Chrome Engineering focused on security matters, in a privacy sandbox blog post. "Our goal is to create a set of standards that is more consistent with users' expectations of privacy." For example, Chrome would restrict some private data to the browser -- an approach rival Brave Software has taken with its privacy-focused rival web browser. And it could restrict sharing personal data until it's shared across a large group of people using technologies called differential privacy and federated learning.' -- source: https://yro.slashdot.org/story/19/08/22/1453220 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

How The National Library Preserves New Zealand’s Digital Heritage
by Lawrence D'Oliveiro 24 Aug '19

24 Aug '19

A nice overview <https://www.stuff.co.nz/national/115118698/how-the-national-library-preserv…> of what it means to preserve historical documents in the digital online age. What happens when the legal obligations of the National Library collide with the terms and conditions of overseas-run sites hosting content posted by New Zealanders? How do you deal with private/defamatory/pornographic material? Proprietary file formats? Some people are even donating their e-mail archives to the Library.

1 0

Fwd: [NZLUG] Windows rebate?
by Peter Reutemann 23 Aug '19

23 Aug '19

Apologies for cross-posting, but this will be of interest to this group as well. Cheers, Peter ---------- Forwarded message --------- From: Atom Smasher <atom(a)smasher.org> Date: Fri, Aug 23, 2019 at 10:49 AM Subject: Re: [NZLUG] Windows rebate? To: NZ Linux Users Group <nzlug(a)lists.nzoss.org.nz> I was hoping this battle had already been fought, but apparently not. After some phone calls, it seems the best course of action now is to contact The Commerce Commission of New Zealand and file a complaint pursuant to the Fair Trading Act. They don't handle these complaints individually, but they will consider them in aggregate. So the more people complain, the more likely that it will be taken seriously. * 0800 943 600 * contact(a)comcom.govt.nz * https://comcom.govt.nz/make-a-complaint Relevant points seem to be that Microsoft has effectively created a monopoly whereby purchasers of new computers are forced to purchase a copy of, and non-transferable license for, their Windows operating system (approx retail price of OEM Windows 10 is $160). Building ones own computer from parts, or purchasing a computer from specialty retailers may be an option in some cases, but this severely limits consumer choices and they're not viable options for a lot of people. While it may not be practical to "force" retailers to stock Windows-free PC hardware, there should be a standard process for obtaining a fair refund for unused and unwanted Windows operating system licenses. -- ...atom ________________________ http://atom.smasher.org/ 762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808 ------------------------------------------------- "Sometimes I think we're alone in the universe, and sometimes I think we're not. In either case the idea is quite staggering." -- Arthur C. Clarke _______________________________________________ NZLUG mailing list NZLUG(a)lists.nzoss.org.nz http://lists.nzoss.org.nz/mailman/listinfo/nzlug -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 6

Security Researchers Find Several Bugs In Nest Security Cameras
by Peter Reutemann 23 Aug '19

23 Aug '19

'Hackers could have logged into your Nest Cam IQ Indoor and watch whatever was happening in your home by taking advantage of a vulnerability found by security researchers. The hackers could have also prevented you from using the camera, or use access to it to break into your home network. Researchers Lilith Wyatt and Claudio Bozzato of Cisco Talos discovered the vulnerabilities and disclosed them publicly on August 19. The two found eight vulnerabilities that are based in the Nest implementation of the Weave protocol. The Weave protocol is designed specifically for communications among Internet of Things or IoT devices. Nest has provided a firmware update that the company says will fix the vulnerabilities. The vulnerabilities apply to version 4620002 of the Nest Cam IQ indoor device. You can check the version of your camera on the Nest app. Nest says that the updates will happen automatically if your camera is connected to the internet. "We've fixed the disclosed bugs and started rolling them out to all Nest Camera IQs," Google said in a statement to ZDNet. "The devices will update automatically so there's no action required from users."' -- source: https://it.slashdot.org/story/19/08/22/2134208 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Backdoor found in Webmin, a popular web-based utility for managing Unix servers
by Peter Reutemann 22 Aug '19

22 Aug '19

'A backdoor mechanism was found in Webmin, a popular web-based application used by system administrators to manage remote Unix-based systems, such as Linux, FreeBSD, or OpenBSD servers. The backdoor mechanism would allow a remote attacker to execute malicious commands with root privileges on the machine running Webmin. Once this machine is compromised, an attacker could then use it to launch attacks on the systems managed through Webmin. [...] According to one of the Webmin developers, the vulnerability was not the result of a coding mistake, but was actually "malicious code injected into compromised build infrastructure."' -- source: https://www.zdnet.com/article/backdoor-found-in-webmin-a-popular-web-based-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Android Ditches Desserts as Q Becomes 10
by Peter Reutemann 22 Aug '19

22 Aug '19

'The next version of the Android operating system (OS) will not be named after a dessert or sweet treat, ending a tradition that started in 2009. From a report: Following the pattern, the name of the new version would have started with Q. But Google said it had ditched the naming scheme because it made it difficult for consumers to know which version of the OS was the latest. The new edition, which will be released later this year, will be called Android 10. Previous versions of the mobile operating system have been nicknamed Jellybean, Kitkat and Lollipop' -- source: https://tech.slashdot.org/story/19/08/22/187243 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The Planet Needs a New Internet
by Peter Reutemann 22 Aug '19

22 Aug '19

'When climate change comes for our coffee and our wine, we'll moan about it on Twitter, read about it on our favorite websites, and watch diverting videos on YouTube to fill the icy hole in our hearts. We'll do all this until the websites go dark and the networks go down because eventually, climate change will come for our internet, too. That is, unless we can get the web ready for the coming storms. Huge changes will be needed because right now, the internet is unsustainable. On the one hand, rising sea levels threaten to swamp the cables and stations that transmit the web to our homes; rising temperatures could make it more costly to run the data centers handling ever-increasing web traffic; wildfires could burn it all down. On the other, all of those data centers, computers, smartphones, and other internet-connected devices take a prodigious amount of energy to build and to run, thus contributing to global warming and hastening our collective demise. To save the internet and ourselves, we'll need to harden and relocate the infrastructure we've built, find cleaner ways to power the web, and reimagine how we interact with the digital world. Ultimately, we need to recognize that our tremendous consumption of online content isnâ(TM)t free of consequences -- if we're not paying, the planet is. You probably don't think about it when you're liking a photo or reading an article, but everything you do online is underpinned by a globe-spanning labyrinth of physical infrastructure. There are the data centers hosting the web and managing enormous flows of information on the daily. There are the fiber cables transmitting data to into our homes and offices, and even across oceans. There are cell towers sending and receiving countless calls and texts on the daily.' -- source: https://tech.slashdot.org/story/19/08/22/1733253 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

KNOPPIX Live GNU/Linux System Is Now Based on Debian GNU/Linux 10 "Buster"
by Peter Reutemann 21 Aug '19

21 Aug '19

'KNOPPIX 8.6 is now available based on the software repositories of the recently released Debian GNU/Linux 10 "Buster" operating system series, but also packing some elements from the Debian Uunstable (Sid) repos. It's powered by the latest Linux 5.2 kernel series and X.Org Server 7.7 display server to support newer graphics cards and computer hardware. Best of all, Knoppix 8.6 is shipping with both 32-bit and 64-bit kernels to support old and new computers. The 64-bit version of KNOPPIX 8.6 supports machines with more than 4GB of RAM (system memory), as well as chroot into 64-bit installations for system rescue tasks. Moreover, the bootloader starts the 64-bit kernel automatically whenever a 64-bit CPU is detected.' -- source: https://news.softpedia.com/news/knoppix-live-gnu-linux-system-is-now-based-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0