September 2021 - wlug - list.wlug.org.nz

Mozilla Experiment: Set Default Search Engine to Bing for 1% of Firefox Users
by Peter Reutemann 20 Sep '21

20 Sep '21

'"Mozilla is running an experiment on 1% of the Firefox desktop population currently, which sets the default search engine to Bing in the web browser," reports Ghacks: [I]n most regions, it is Google Search. Mozilla and Google extended the search deal in 2020 for another three years. Google is paying Mozilla "between $400 and $450 million per year" so that its search engine is the default in Firefox in most regions. Google has been Firefox's default search engine since 2017, when Mozilla ended its search deal with Yahoo early. Firefox users may change the default search engine to one of the other engines that are included by default, or an engine that is not included but can be added... The study started on September 6 and it will run until early 2022, likely January 2022. About 1% of Firefox desktop users may notice that the default search engine is changed when the installation of Firefox is picked for the experiment. Tip: load about:studies in the Firefox address bar to list the studies that the browser us currently taking part in and has completed already. Firefox users who don't want to participate in studies can disable the preference "Allow Firefox to install and run studies" on about:preferences#privacy. ' -- source: https://news.slashdot.org/story/21/09/18/1914227 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Is 2021 The Year of the Linux Desktop?
by Peter Reutemann 20 Sep '21

20 Sep '21

'"2021 Is the Year of Linux on the Desktop," writes PC Magazine. "No, really..." Walk into any school now, and you'll see millions of Linux machines. They're called Chromebooks. For a free project launched 30 years ago today by one man in his spare time, it's an amazing feat.... Linux found its real niche — not as a political statement about "free software," but as a practical way to enable capable, low-cost machines for millions... Chrome OS and Android are both based on the Linux kernel. They don't have the extra GNU software that distributions like Ubuntu have, but they're descended from Linus Torvalds' original work. Chromebooks are the fastest growing segment of the traditional PC market, according to Canalys. IDC points out that Canalys' estimates of 12 million Chromebooks shipped in Q1 2021 are only a fraction of the 63 million notebooks sold that quarter, but once again, they're where the growth is. Much of that is driven by schools, where Chromebooks dominate now. Schoolkids don't generally need a million apps' worth of generic computing power. They need inexpensive, rugged ways to log into Google Classroom. Linux came to the rescue, enabling cheap, light, easy-to-manage PCs that don't have the Swiss Army Knife cruft of Windows or the premium price of Macs... One great thing about open-source hacker projects is that they can be taken in unexpected directions. Linux isn't controlled, so it can adapt, Darwinian-style. It was a little scurrying mammal in the time of the dinosaurs, and then the mobile-computing asteroid hit. Linux could evolve. Windows couldn't. When you're building something that fits in your hand and has to sip battery, you can't just keep throwing processors and storage at it. Microsoft had a tough time adapting its monstrous megakernel OS to the new, tiny world. But *nix platforms thrive there: Android (based on Linux) and iOS. "Android and Chrome water down the Linux philosophy," the article argues, "but they are Linux..." Does this make any long-time geeks feel vindicated? In the original submission wiredog (Slashdot reader #43,288) looks back to 1995, remembering that "my first Linux was RedHat 2.0 in the beige box, running the 0.95(?) kernel and the F Virtual Window Manager... "It came with 2 books, a CD, and a boot floppy disk."' -- source: https://linux.slashdot.org/story/21/09/18/0050255 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Hi, I have parcels going missing. Does anyone know of technology to trace parcels?
by Michelle 18 Sep '21

18 Sep '21

It would presumably use GPS. It would involve a very small device put in the parcel that a thief would very possibly not even see when the parcel is scanned at customs. The icing on the cake would be if the route of the parcel was able to be recorded as evidence. I will give more details later like it going on for 3 months and involving parcels posted in NZ as well. But this is trial run email because I haven't posted in a long time and I want to make sure I am doing it right. I am hoping that if anyone replies to this that there is a convenient reply to button or link that I can reply back to. Oh well, after I send this email I want to go to the site and see if it has posted. Thanks for any help.

5 13

Ransomware Scammers Preying On Krita Users
by Lawrence D'Oliveiro 16 Sep '21

16 Sep '21

Some ne’er-do-wells are targeting users of the open-source paint app Krita, purporting to offer payment for advertising the app on their YouTube channels. But when they download the referenced media “asset” pack, they get a ransomware attack instead. <https://www.theregister.com/2021/09/14/krita_users_targeted_by_ransomware/>

1 0

UN Calls For Moratorium On AI That Threatens Human Rights
by Lawrence D'Oliveiro 16 Sep '21

16 Sep '21

The UN human rights office has released a report <https://www.aljazeera.com/economy/2021/9/15/warning-of-risk-un-rights-chief…> on the risks of AI technologies to human rights. Its head, Michelle Bachelet, wants safeguards against the abuse of such technologies before they get too widely deployed. Such technologies are increasingly being used for automated decision making by both companies and governments, in ways that can impact people’s lives in a major way: for example, to control access to social security benefits, health, education, or to identify criminal suspects for arrest. When mistakes are made in these areas, the consequences can be catastrophic for the individuals concerned. And the tendency to secrecy on the part of those using such technologies doesn’t help.

1 0

More On The NZ Reserve Bank Breach
by Lawrence D'Oliveiro 15 Sep '21

15 Sep '21

Seems hackers broke into a secure file-sharing service called Accellion, based in California. The RBNZ was using that to exchange documents with the likes of banks and insurance companies. <https://www.stuff.co.nz/business/123911764/reserve-bank-reveals-more-detail…>

2 5

Travis CI flaw exposed secrets of thousands of open source projects
by Peter Reutemann 15 Sep '21

15 Sep '21

'A security flaw in Travis CI potentially exposed the secrets of thousands of open source projects that rely on the hosted continuous integration service. Travis CI is a software-testing solution used by over 900,000 open source projects and 600,000 users. A vulnerability in the tool made it possible for secure environment variables—signing keys, access credentials, and API tokens of all public open source projects—to be exfiltrated. Worse, the dev community is upset about the poor handling of the vulnerability disclosure process and the brief "security bulletin" it had to force out of Travis.' -- source: https://arstechnica.com/information-technology/2021/09/travis-ci-flaw-expos… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Another Day, Another DDoS ...
by Lawrence D'Oliveiro 14 Sep '21

14 Sep '21

A bunch of NZ banks, also NZ Post and MetService, are currently having online trouble <https://www.nzherald.co.nz/business/live-cyber-attack-fears-kiwibank-anz-nz…>. For Kiwibank, this is about the second or third outage this week.

1 1

PHP maintains an enormous lead in server-side programming languages
by Peter Reutemann 14 Sep '21

14 Sep '21

'The venerable web programming language PHP is a source of frequent complaints and frustration, but according to a report W3Techs released today, it doesn't seem to be going away anytime soon. W3Techs' web server survey looks for technologies in use by sites in Alexa's top 10 million list; today's report includes a year-on-year chart beginning with January 2010, running all the way through 2021. The survey only includes top sites not out of elitism, but as one part of its effort to avoid data-skewing returns from domain-parking services and spammers, which would otherwise dominate legitimate websites through sheer volume. Within that dataset, the story told is clear. Apart from PHP—which held a 72.5 percent share in 2010 and holds a 78.9 percent share as of today—only one other server-side language ever broke a 10 percent share. That one competitor is ASP.NET, which held an impressive 24.4 percent share in 2010 but was down to 9.3 percent in January and 8.3 percent this month. Amongst the small fry, the only truly impressive growth to be seen is in Ruby—which at 5.2 percent this month is still seeing continued, uninterrupted growth in W3Techs' survey. This might come as a shock if you're mostly familiar with Ruby on Rails, which itself remains viable but seems to be on the decline in popularity.' -- source: https://arstechnica.com/gadgets/2021/09/php-maintains-an-enormous-lead-in-s… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

EU Study On Impact Of Open Source
by Lawrence D'Oliveiro 14 Sep '21

14 Sep '21

The European Commission’s Directorate-General for Communications Networks, Content and Technology has released a report <https://www.theregister.com/2021/09/13/eu_open_source_study_highlights/> on the economic impact of open source, both software and hardware, within the EU. The report’s authors talked to companies and developers, looked at existing research, surveyed repos on GitHub and ran economic analyses, among other things. Conclusion: there is economic value in open source, but corresponding business investment in it is lacking (though smaller companies tend to be better at this). Also adoption in the public sector can be quite difficult. Further conclusion: if businesses are happy to take but not so keen to give back, then it may be up to Government to give them a nudge in the right direction. One of the authors offered this encouragement: "There are companies that do see the value of contributing back, and some less so… those companies that contribute a lot and are very active in communities see that as an advantage, because when you contribute to it, you can also steer it, know how to fix it… if you have standing in that community, you are more likely to have the community respond to your need."

1 0