September 2020 - wlug - list.wlug.org.nz

Mozilla WebThings IoT Platform Spun Out As an Independent Open Source Project
by Peter Reutemann 22 Sep '20

22 Sep '20

'Following a round of layoffs at Mozilla, their WebThings IoT platform is being spun out as an independent open source project by former employees, with a new commercial sponsor. WebThings is an open platform for monitoring and controlling devices over the web, built on W3C Web of Things standards. It includes WebThings Gateway which is a software distribution for smart home gateways focused on privacy, security and interoperability and the WebThings Framework which is a collection of re-usable software components to help developers build their own web things. The project will be renamed from "Mozilla WebThings" to "WebThings" and will move to a new home at https://webthings.io/ Users will be able to opt-in to receive software updates from the new community run update servers and be offered the opportunity to transition to a replacement remote tunnelling service before Mozilla servers are shut down at the end of the year.' -- source: https://tech.slashdot.org/story/20/09/21/185236 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Could Open Source Licensing Stop Big Pharma Profiteering On Taxpayer-Funded Covid-19 Vaccines?
by Peter Reutemann 21 Sep '20

21 Sep '20

'Two professors at the University of Massachusetts have co-authored a new essay explaining how open source licensing "could keep Big Pharma from making huge profits off taxpayer-funded research" in the international, multi-billion-dollar race for a Covid-19 vaccine: The invention of the "General Public License," sometimes referred to as a viral or reciprocal license, meant that should an improvement be made, the new software version automatically inherits the same license as its parent. We believe that in a time of a global pandemic, a safe and effective COVID-19 vaccine should be licensed with General Public License-like properties... Fortunately, some pharmaceutical companies, national governments, nonprofits like the Bill & Melinda Gates Foundation and international organizations like the Coalition for Epidemic Preparedness Initiatives — which supports vaccine development — are putting policies in place that embrace openness and sharing rather than intellectual property protection. Coalition for Epidemic Preparedness Initiatives officials have stated that all of their funding agreements require that "appropriate vaccines are first available to populations when and where they are needed to end an outbreak or curtail an epidemic, regardless of ability to pay." That's an important start. However, when there is a safe, effective COVID-19 vaccine, the U.S. and other national governments need to create contractual agreements with firms that provide fair and reasonable funding to cover their costs or even some reasonable profit margin while still mandating the open sharing of the processes for vaccine production, quality assurance and rapid global distribution.' -- source: https://science.slashdot.org/story/20/09/20/2359229 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Browser Extension uMatrix Ends Active Development
by Peter Reutemann 21 Sep '20

21 Sep '20

'Raymond Hill, known online as gorhill, has set the status of the uMatrix GitHub repository to archived; this means that it is read-only at the time and that no updates will become available. The uMatrix extension is available for several browsers including Firefox, Google Chrome, and most Firefox and Chromium-based browsers. It is a privacy and security extensions for advanced users that provides firewall-like capabilities when it is installed... Hill suggests that developers could fork the extension to continue development under a new name. There is also the chance that Hill might resume development in the future but there is no guarantee that this is going to happen. For now, uMatrix is no longer in active development. ' -- source: https://yro.slashdot.org/story/20/09/20/2124248 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

DuckDuckGo Is Growing Fast
by Peter Reutemann 18 Sep '20

18 Sep '20

'DuckDuckGo, the privacy-focused search engine, announced that August 2020 ended in over 2 billion total searches via its search platform. While Google remains the most popular search engine, DuckDuckGo has gained a great deal of traction in recent months as more and more users have begun to value their privacy on the internet. DuckDuckGo saw over 2 billion searches and 4 million app/extension installations, and the company also said that they have over 65 million active users. DuckDuckGo could shatter its old traffic record if the same growth trend continues. Even though DuckDuckGo is growing rapidly, it still controls less than 2 percent of all search volume in the United States. However, DuckDuckGo's growth trend has continued throughout the year, mainly due to Google and other companies' privacy scandal.' -- source: https://yro.slashdot.org/story/20/09/17/2036241 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Patient Dies After Hospital Hit By Ransomware Attack
by Peter Reutemann 18 Sep '20

18 Sep '20

'A patient died after a German hospital was hit by ransomware attack, when hackers thought they were targeting a university. German authorities said that what appears to have been a misdirected hacker attack impacted systems at a major hospital in Duesseldorf, and a woman who needed urgent admission died after she had to be taken to another city for treatment. Duesseldorf police established contact and told the attacker that the hospital, and not the university, had been affected, endangering patients. The attacker then withdrew the extortion attempt and provided a digital key to decrypt the data.' -- source: https://tech.slashdot.org/story/20/09/17/144257 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

YouTube's Recommendation System is Criticized as Harmful. Mozilla Wants To Research It
by Peter Reutemann 18 Sep '20

18 Sep '20

'YouTube's video recommendation system has been repeatedly accused by critics of sending people down rabbit holes of disinformation and extremism. Now Mozilla, the nonprofit that makes the Firefox browser, wants YouTube's users to help it research how the controversial algorithms work. From a report: Mozilla on Thursday announced a project that asks people to download a software tool that gives Mozilla's researchers information on what video recommendations people are receiving on the Google-owned platform. YouTube's algorithms recommend videos in the "What's next" column along the right side of the screen, inside the video player after the content has ended, or on the site's homepage. Each recommendation is tailored to the person watching, taking into account things like their watch history, list of channel subscriptions or location. The recommendations can be benign, like another live performance from the band you're watching. But critics say YouTube's recommendations can also lead viewers to fringe content, like medical misinformation or conspiracy theories. ' -- source: https://tech.slashdot.org/story/20/09/17/150228 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Cloudflare and the Wayback Machine, Joining Forces For a More Reliable Web
by Peter Reutemann 18 Sep '20

18 Sep '20

'Cloudflare and the Internet Archive are now working together to help make the web more reliable. Websites that enable Cloudflare's Always Online service will now have their content automatically archived, and if by chance the original host is not available to Cloudflare, then the Internet Archive will step in to make sure the pages get through to users. From a report: Cloudflare has become core infrastructure for the Web, and we are glad we can be helpful in making a more reliable web for everyone."The Internet Archive's Wayback Machine has an impressive infrastructure that can archive the web at scale," said Matthew Prince, co-founder and CEO of Cloudflare. "By working together, we can take another step toward making the Internet more resilient by stopping server issues for our customers and in turn from interrupting businesses and users online." For more than 20 years the Internet Archive's Wayback Machine has been archiving much of the public Web, and making those archives available to journalists, researchers, activists, academics and the general public, in total to hundreds of thousands of people a day. To date more than 468 billion Web pages are available via the Wayback Machine and we are adding more than 1 billion new archived URLs/day. We archive URLs that are identified via a variety of different methods, such as "crawling" from lists of millions of sites, as submitted by users via the Wayback Machine's "Save Page Now" feature, added to Wikipedia articles, referenced in Tweets, and based on a number of other "signals" and sources, such multiple feeds of "news" stories. An additional source of URLs we will preserve now originates from customers of Cloudflare's Always Online service. As new URLs are added to sites that use that service they are submitted for archiving to the Wayback Machine. In some cases this will be the first time a URL will be seen by our system and result in a "First Archive" event.' -- source: https://tech.slashdot.org/story/20/09/17/1544222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Mozilla Shuts Down Firefox Send and Firefox Notes Services
by Peter Reutemann 18 Sep '20

18 Sep '20

'Mozilla is shutting down two of its legacy products, Firefox Send and Firefox Notes, the company announced today. From a report: "Both services are being decommissioned and will no longer be a part of our product family," a Mozilla spokesperson told ZDNet this week. Of the two, the most beloved was Firefox Send, a free file-sharing service, and one of the few that supported sharing files in encrypted formats. Launched in March 2019, the service gained a dedicated fanbase but Send was taken offline earlier this summer after ZDNet reported on its constant abuse by malware groups. At the time, Mozilla said that Send's shutdown was temporary and promised to find a way to curb the service's abuse in malware operations. But weeks later, things changed after Mozilla leadership laid off more than 250 employees as part of an effort to re-focus its business on commercial products.' -- source: https://tech.slashdot.org/story/20/09/17/1923240 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Billions of Devices Vulnerable To New 'BLESA' Bluetooth Spoofing Attack
by Peter Reutemann 17 Sep '20

17 Sep '20

'"Billions of smartphones, tablets, laptops, and IoT devices are using Bluetooth software stacks that are vulnerable to a new security flaw disclosed over the summer," reports ZDNet. Named BLESA (Bluetooth Low Energy Spoofing Attack), the vulnerability impacts devices running the Bluetooth Low Energy (BLE) protocol, and affects the reconnection process that occurs when a device moves back into range after losing or dropping its pairing. A successful BLESA attack allows bad actors to connect with a device (by getting around reconnection authentication requirements) and send spoofed data to it. In the case of IoT devices, those malicious packets can convince machines to carry out different or new behavior. For humans, attackers could feed a device deceptive information. BLESA impacts billions of devices that run vulnerable BLE software stacks. Vulnerable are BLE software libraries like BlueZ (Linux-based IoT devices), Fluoride (Android), and the iOS BLE stack. Windows' BLE stack is not impacted.' -- source: https://it.slashdot.org/story/20/09/16/220211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft To Open-Source Windows Security-Testing Tool
by Lawrence D'Oliveiro 16 Sep '20

16 Sep '20

Ever wondered how Microsoft manages to keep Windows so secure? You won’t have to wonder for much longer, as it is planning to open-source OneFuzz <https://www.theregister.com/2020/09/16/microsoft_open_sources_fuzzing_tool/>, a key tool it uses to probe its OS for vulnerabilities. Yes, third-party developers! Soon you, too, will be able to achieve truly Microsoftian levels of code quality!

1 0