November 2022 - wlug - list.wlug.org.nz

A History Of ARM, Part 2
by Lawrence D'Oliveiro 22 Nov '22

22 Nov '22

Quite a nice article <https://arstechnica.com/gadgets/2022/11/a-history-of-arm-part-2-everything-…> covering the founding of ARM Ltd as parent company Acorn was hitting financial headwinds. Apple played an absolutely crucial part in keeping the company viable in its early days by being among its biggest customers: the Newton PDA sold 60,000 units in its first year, which was a flop for Apple but, at $20 a unit for royalties, a big boost for ARM Ltd at the time. In those early days, the company found it an uphill struggle to be taken seriously by the bigger players. Companies like Motorola and TI had trouble appreciating why they could not create their own in-house designs instead of licensing one from ARM, even when the latter could be done for a fraction of the cost of the former. But the boss was canny and persistent enough to make the right sort of deals to build a sound basis for the company: For Robin Saxby, the idea of working with rival chip companies was always part of the strategy. “Turn your enemies into friends,” he would say. “Why should they fight you if they can make more money for themselves by collaborating with you?” Unfortunately, big companies don’t always act rationally ...

1 0

AMD Finally Opens Up Its Radeon Raytracing Analyzer 'RRA' Source Code
by Peter Reutemann 22 Nov '22

22 Nov '22

'Michael Larabel, reporting for Phoronix: This summer AMD announced the Radeon Raytracing Analyzer "RRA" as part of their developer software suite for helping to profile ray-tracing performance/issues on Windows and Linux with both Direct3D 12 and the Vulkan API. Initially the RRA 1.0 release was binary-only but now AMD has made good on their "GPUOpen" approach and made it open-source. As noted back in my original article from July on the Radeon Raytracing Analyzer release: "Radeon Raytracing Analyzer is hosted on GitHub but the only content in the actual Git repository right now is documentation, so it would appear that at least initially this is a closed-source package though some documentation also says it's MIT licensed." Last week that was cleared up with the Radeon Raytracing Analyzer source code going public. There are build instructions for compiling the RRA 1.0 sources on both Microsoft Windows and Linux while the Linux instructions are tailoring to Ubuntu use. Building the Radeon Raytracing Analyzer depends upon the Qt 5.15 toolkit.' -- source: https://news.slashdot.org/story/22/11/21/1716219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

The Creator of Homebrew's Plan To Get Open Source Contributors Paid - Using Blockchain
by Peter Reutemann 21 Nov '22

21 Nov '22

'The creator of the Linux/macOS package manager Homebrew has a new package manager named Tea. But according to Stack Overflow's podcast, the software also "aims to solve the problem of providing funding for popular open source projects." While he is not a crypto bull, Max was inspired with a solution for the open source funding dilemma by his efforts to buy and sell an NFT. A contract written in code and shared in public enforced a rule sending a portion of his proceeds to the digital objects original creator. What if the same funding mechanism could be applied to open source projects?Â In March of 2022, Max and his co-founder launched Tea, a sort of spirtual successor to Homebrew. It has a lot of new features Max wanted in a package manager, plus a blockchain based approach to ensuring that creators, maintainers, and contributors of open source software can all get paid for their efforts. You can read Max's launch post on Tea here and yes, of course there is a white paper. The paper describes the proposed solution as "a decentralized system for fairly remunerating open-source developers based on their contributions to the entire ecosystem and enacted through the tea incentive algorithm applied across all entries in the tea registry." And the launch post calls tea "our revolution against a failing system," arguing "We're taking our knowledge of how to make development more efficient and throwing innovations nobody has ever really considered before. "Package managers haven't been sexy. Until now. Most importantly, we're moving the package registry on-chain (relax, we'll use a low-energy proof of stake chain). This has numerous benefits due to the inherent benefits of blockchain technology." For starters, decentralized storage will make the packages always-available and immutable, signed by maintainers themselves. But there's more: web3 has enabled novel new ways to distribute value, and with our system people who care about the health of the open source ecosystem buy some token and stake it. Periodically, we reward this staking because it is securing our token network. We give a portion of these rewards to the staker and a portion to packages of their choice along with all the dependencies of those packages. Note that no portion goes to us. We're not like the other app stores.... tea is the home to a DAO that will ensure the open source maintainers that keep the Internet running are rewarded as they deserve. An introduction to the white paper adds that in the spirit of the open source movement, "we're inviting developers, speculators, and enthusiasts alike to contribute to our white paper and help brew the future of the internet. This is our revolutionary undertaking to create equitable openâsource for web3, and we want you to be a part of laying its groundwork."' -- source: https://news.slashdot.org/story/22/11/19/2047223 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Can Mastodon Be A Twitter Alternative?
by Lawrence D'Oliveiro 18 Nov '22

18 Nov '22

This article <https://www.aljazeera.com/economy/2022/11/7/can-mastodon-be-a-twitter-alter…> says: With Twitter in disarray since the world’s richest person took control of it last week, Mastodon, a decentralised, open alternative from privacy-obsessed Germany, has seen a flood of new users. Nevertheless, this “flood” is a mere trickle compared to the torrent of users that is Twitter -- a million or so active monthly users on the one, versus over 200 times that on the other. The decentralization of Mastodon means that no single entity can take control of it. But it also makes it harder for users to find their way around. [Mastodon creator] Rochko, whose Mastodon foundation runs on a shoestring crowdfunded budget topped up with a modest grant from the European Commission, has found a particularly receptive audience among privacy-conscious European regulators. Germany’s data protection commissioner is waging a campaign to get government bodies to close their Facebook pages, since, he says, there is no way of hosting a page there that conforms to European privacy laws. Authorities should move to the federal government’s own Mastodon instance, he says. The European Commission also maintains a server for European Union bodies to toot from. Yeah ... “toot” ...

3 7

DuckDuckGo’s anti-tracking Android tool could be “even more powerful” than iOS
by Peter Reutemann 17 Nov '22

17 Nov '22

'Privacy-focused search site DuckDuckGo has added yet another way to prevent more of your data from going to advertisers, opening its App Tracking Protection for Android to beta testers. DuckDuckGo is positioning App Tracking Protection as something like Apple's App Tracking Transparency for iOS devices, but "even more powerful." Enabling the service in the DuckDuckGo app for Android (under the "More from DuckDuckGo" section) installs a local VPN service on your phone, which can then start automatically blocking trackers on DDG's public blocklist. DuckDuckGo says this happens "without sending app data to DuckDuckGo or other remote servers."' -- source: https://arstechnica.com/gadgets/2022/11/duckduckgos-android-anti-tracking-t… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Fedora 37 Now Available With GNOME 43 Desktop, Official Raspberry Pi 4 Support
by Peter Reutemann 17 Nov '22

17 Nov '22

'Fedora 37 is now officially released. From a report: Fedora 37 brings the GNOME 43 desktop to Fedora Workstation 37, updated toolchain components like Glibc 2.36 and LLVM 15 and Binutils 2.38, official support for the Raspberry Pi 4, retiring 32-bit ARMv7 support, Fedora CoreOS has been promoted to a Fedora Edition, Perl 5.36, Python 3.11, RPM 4.18, LXQt 1.1, and a wealth of other updated packages.' -- source: https://linux.slashdot.org/story/22/11/16/1744258 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

India Lifts Download Ban On VLC
by Peter Reutemann 15 Nov '22

15 Nov '22

'India has lifted the download ban on VLC, more than nine months after it mysteriously blocked the official website of the popular media playback software in the South Asian market. From a report: VideoLAN, the popular software's developer, filed a legal notice last month seeking an explanation from the nation's IT and Telecom ministries for the block order. The Ministry of Electronics and IT has removed its ban on the website of VLC media player, New Delhi-based advocacy group Internet Freedom Foundation, which provided legal support to VideoLAN, said on Monday. VideoLAN confirmed the order. Indian telecom operators began blocking VideoLAN's official website, where it lists links to downloading VLC, in February of this year, VideoLAN president and lead developer Jean-Baptiste Kempf told TechCrunch in an earlier interview. India is one of the largest markets for VLC.' -- source: https://news.slashdot.org/story/22/11/14/1130222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

OpenPrinting Keeps Old Printers Working -- Even On Windows
by Lawrence D'Oliveiro 12 Nov '22

12 Nov '22

This report from the Ubuntu Summit <https://www.theregister.com/2022/11/10/openprinting_keeps_old_printers_work…> I think nicely highlights the inevitable consequences of Microsoft allowing Linux into Windows with WSL2. Linux has long had better support for older printers and other hardware than Windows. Even after the vendors of the products drop support for their Windows drivers, others have found ways to create and maintain open-source drivers for those products. Now, the circle is turning back, with these same open-source drivers being offered back to Windows users, by running them on the Linux subsystem under WSL2. I don’t think it’s a coincidence that this offering is coming from Ubuntu/Canonical, given their increasingly cosy relationship with Microsoft. Sure, if you want to talk “Embrace, Extend, Extinguish”, just note that the platform being “embraced” and “extended” is not Linux being extended with formerly Windows-only capabilities, but Windows being extended with formerly Linux-only capabilities. As Microsoft and other vendors increasingly realize that, instead of developing proprietary Windows-only drivers, it is much less work to encourage the creation of open-source ones for Linux, that Windows can also use in this way via WSL2, where do you think this is going to lead?

1 0

Lenovo Driver Goof Poses Security Risk for Users of 25 Notebook Models
by Peter Reutemann 11 Nov '22

11 Nov '22

'More than two dozen Lenovo notebook models are vulnerable to malicious hacks that disable the UEFI secure-boot process and then run unsigned UEFI apps or load bootloaders that permanently backdoor a device, researchers warned on Wednesday. From a report: At the same time that researchers from security firm ESET disclosed the vulnerabilities, the notebook maker released security updates for 25 models, including ThinkPads, Yoga Slims, and IdeaPads. Vulnerabilities that undermine the UEFI secure boot can be serious because they make it possible for attackers to install malicious firmware that survives multiple operating system reinstallations. Short for Unified Extensible Firmware Interface, UEFI is the software that bridges a computer's device firmware with its operating system. As the first piece of code to run when virtually any modern machine is turned on, it's the first link in the security chain. Because the UEFI resides in a flash chip on the motherboard, infections are difficult to detect and remove. Typical measures such as wiping the hard drive and reinstalling the OS have no meaningful impact because the UEFI infection will simply reinfect the computer afterward. ESET said the vulnerabilities -- tracked as CVE-2022-3430, CVE-2022-3431, and CVE-2022-3432 -- "allow disabling UEFI Secure Boot or restoring factory default Secure Boot databases (incl. dbx): all simply from an OS." Secure boot uses databases to allow and deny mechanisms. The DBX database, in particular, stores cryptographic hashes of denied keys. Disabling or restoring default values in the databases makes it possible for an attacker to remove restrictions that would normally be in place.' -- source: https://it.slashdot.org/story/22/11/10/1610252 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

SPARK: A Competitor To Rust?
by Lawrence D'Oliveiro 09 Nov '22

09 Nov '22

Here’s another contender for a modern language that is low-level yet emphasizes minimization of bugs, to compete with the likes of Rust: it’s called SPARK <https://devclass.com/2022/11/08/spark-as-good-as-rust-for-safer-coding-adac…>. It’s not a completely new language, since according to the report it is a subset of Ada. The original Ada language came about in the 1980s out of a competition organized by the US Department of Defense, to create a language specifically designed for programming embedded and safety-critical systems. The most high-profile application of it that I know of is that the life-support systems on the International Space Station are written in Ada, and run on ancient (but well-tested) Intel 386 processors. So I would say that’s a good pedigree to start from.

1 0