June 2023 - wlug - list.wlug.org.nz

Weta Digital’s Technology Division Sold To US Firm
by Lawrence D'Oliveiro 01 Aug '25

01 Aug '25

Let me see if I understand this article <https://www.nzherald.co.nz/business/sir-peter-jackson-to-sell-weta-digital-…> correctly: the part of Weta Digital that used to develop the in-house 3D graphics/effects tools that they use in all those movies is being sold to US-based Unity Software. The part that is left will be called “WetaFX”, and will become a customer of Unity for the use of those tools, no longer doing its own development in-house. By the way, I’ve been looking at the Unity site <https://unity.com/>, and it looks like all their products are rentware (subscription-based).

1 2

List Of IPTV Resources
by Lawrence D'Oliveiro 22 Sep '24

22 Sep '24

This user <https://github.com/iptv-org> just popped up in my GitHub feed. One repo <https://github.com/iptv-org/iptv> claims to be a list of links to over 8000 streaming TV channels from nations all over the world, while the other is a list of tools*, providers and other resources. Do be aware it’s a bit of a mixed bag: yes, there are legitimate channels (no encryption so far that I have noticed), but also some dubious-looking links. *Oddly, FFmpeg and youtube-dl aren’t in the list.

2 5

Enabling Case-Insensitive Filenames On Linux
by Lawrence D'Oliveiro 06 Feb '24

06 Feb '24

The ext4 filesystem has had the “casefold” option for a while now <https://lwn.net/Articles/784041/>. This allows you to specify, when you initialize a new filesystem, that you want file/directory names to be treated as case-insensitive. At the same time, you have to specify that the filenames are to be interpreted as UTF-8 encoding; normally the kernel doesn’t care, it only singles out ASCII slash and NUL bytes for special interpretation, and simply passes through any other byte values in the names. I was able to create such a filesystem, but I wasn’t able to mount it in my last-upgraded-just-a-few-days-ago Debian Unstable setup. When I try, it fails, and in the dmesg log I see Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE Turns out the Debian 5.10 kernel has not been built with this CONFIG_UNICODE option enabled. However, this situation looks set to change shortly, according to <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985689>.

2 3

Brave aims to curb practice of websites that port scan visitors
by Peter Reutemann 30 Jun '23

30 Jun '23

'The Brave browser will take action against websites that snoop on visitors by scanning their open Internet ports or accessing other network resources that can expose personal information. Starting in version 1.54, Brave will automatically block website port scanning, a practice that a surprisingly large number of sites were found engaging in a few years ago. According to this list compiled in 2021 by a researcher who goes by the handle G666g1e, 744 websites scanned visitors’ ports, most or all without providing notice or seeking permission in advance. eBay, Chick-fil-A, Best Buy, Kroger, and Macy's were among the offending websites.' -- source: https://arstechnica.com/security/2023/06/brave-will-soon-control-which-site… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

A Comprehensive Analysis of the GPL Issues With the Red Hat Enterprise Linux (RHEL) Business Mode
by Peter Reutemann 30 Jun '23

30 Jun '23

'For approximately twenty years, Red Hat (now a fully owned subsidiary of IBM) has experimented with building a business model for operating system deployment and distribution that looks, feels, and acts like a proprietary one, but nonetheless complies with the GPL and other standard copyleft terms. Software rights activists, including SFC, have spent decades talking to Red Hat and its attorneys about how the Red Hat Enterprise Linux (RHEL) business model courts disaster and is actively unfriendly to community-oriented Free and Open Source Software (FOSS). These pleadings, discussions, and encouragements have, as far as we can tell, been heard and seriously listened to by key members of Red Hat's legal and OSPO departments, and even by key C-level executives, but they have ultimately been rejected and ignored — sometimes even with a “fine, then sue us for GPL violations” attitude. Activists have found this discussion frustrating, but kept the nature and tenure of these discussions as an “open secret” until now because we all had hoped that Red Hat's behavior would improve. Recent events show that the behavior has simply gotten worse, and is likely to get even worse.' -- source: https://sfconservancy.org/blog/2023/jun/23/rhel-gpl-analysis/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

A Potted History Of 60 Years Of Computer Networking
by Lawrence D'Oliveiro 29 Jun '23

29 Jun '23

These guys, Larry Peterson and Bruce Davie, have done a whole series of open-source books all around the common theme of “A Systems Approach”. Here <https://www.theregister.com/2023/06/28/60_years_of_networking/> one of them offers a summary of the origins of the Internet, going back to the invention of packet switching and “best effort” delivery, and how that turned out to be such an important change from the traditional telephone network. He also takes the credit/blame for a long-standing myth about the Internet: I feel obligated to point out that there is no mention in this paper of the internet being designed to withstand nuclear attack. Unfortunately, I was responsible for perpetuating that misconception in an early edition of Computer Networks: A Systems Approach. Leiner et al debunk this myth and explain its origins in their paper, but it’s a remarkably persistent one. “[C]ontinue despite loss of networks or gateways” is as close as it gets. But now, cracks are starting to show in the trend toward centralization of popular Internet services. Not only is the “Fediverse” providing alternatives to Twitter and Facebook, but it is now also offering choices to those fed up with recent developments at Reddit, as well.

1 0

The ReactOS Project Suddenly Shows Signs of Life
by Peter Reutemann 29 Jun '23

29 Jun '23

'ReactOS is an open-source operating system that aims to replicate Microsoft Windows, and can already run many Windows applications without modification. ReactOS published a new (infrequent) newsletter to outline recent work. It reveals that progress has slowed down recently, but the project definitely isn't dead. The newsletter also acknowledges the team hasn't put out a new version since the end of 2021, although progress continues. Due to shifting focuses to quality releases, they are no longer on a quarterly release cadence. The date of the next release is not set yet, but according to a huge list of already-implemented changes they aim for it to be a substantial update. The last update to ReactOS was version 0.4.14, released on December 2021. While developers were previously committed to releasing updates every three months, that has since changed and updates will now be focused on quality rather than quantity. For the ReactOS team to be confident enough to release something, it needs to have less than 20 known unfixed regressions while adding new features and functions. Behind the scenes, it looks like things are spinning well. The team specifically highlighted its progress on the x64 port of ReactOS, which went from being a non-booting mess to an operating system that boots up and mostly works. It doesn't run any x86 programs since it doesn't have WoW64, but it's going well.' -- source: https://tech.slashdot.org/story/23/06/28/212238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Microsoft's GitHub Under Fire For DDoSing Crucial Open Source Project Website
by Peter Reutemann 29 Jun '23

29 Jun '23

'The servers used by the GMP project, an open source arithmetic library at the heart of GCC and other programs, slowed to a crawl earlier this month due to a large amount of network traffic originating from Microsoft servers. The Register reports: Torbjorn Granlund, principal author of GMP, raised the alarm in a note to the project's mailing list. "The GMP servers are under attack by several hundred IP addresses owned by Microsoft Corporation," he wrote. "We do not know if this is made with malice by Microsoft, if it is some sort of mistake, or if [it is one] of their cloud customers ... running the attack. The attack targets the GMP repo, with thousands of identical requests. The requests are cleverly chosen as to cause heavy system load. "We're firewalling off all of Microsoft's IP addresses as an emergency response." The following day, Mike Blacker, director of threat hunting, operations, and response at Microsoft's GitHub, had identified the culprit: a GitHub Actions Workflow that clones a Mercurial repo and has been forked more than 700 of times. "Microsoft and GitHub have investigated the issue and determined that a GitHub user updated a script within the FFmpeg-Builds project that pulled content from https://gmplib.org," explained Blacker. "This build was configured to run parallel simultaneous tests on 100 different types of computers/architectures. This activity does not appear to be nefarious. [GMP] appears to have limited infrastructure that could not sustain the limited, yet simultaneous requests." [...] As of last week, the excessive traffic was still an issue. "Our servers are fully available again, but that's the result of us adding all participating Microsoft network ranges to our firewall," the GMP project explains on its webpage. "We understand that we are far from the first project to take such measures against Github." The Register asked Granlund whether he was satisfied with Microsoft-GitHub's response, and he told us he had only heard once from Blacker. "I blocked about 40 IP ranges from accessing our web server," he explained. "A week after this started, there was still intensive traffic from the same IP addresses, perhaps 100 different Microsoft addresses all in all, belonging to about 40 ranges. The difference was that that traffic just caused minuscule load, and a log line in the firewall." "Problem solved. I cannot care less if they no longer can access gmplib.org. I find it interesting how little responsibility Github/Microsoft assume here. They seem to think that they are entitled to bash away at smaller sites." ' -- source: https://tech.slashdot.org/story/23/06/28/2045228 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Let’s Encrypt Outage--Did Anybody Notice?
by Lawrence D'Oliveiro 29 Jun '23

29 Jun '23

Just noticed a mention in passing in this article <https://www.theregister.com/2023/06/28/microsofts_github_gmp_project/> that Let’s Encrypt was issuing bad certificates over a period of about an hour earlier this month <https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/648b3…>. An explanation of what went wrong (from a third party who does monitoring of CA (mis)behaviour as part of his job) is here <https://www.agwa.name/blog/post/last_weeks_lets_encrypt_downtime>. Seems like many of the people affected were still using their bad certificates a week after the incident. Did you have one of the bad certificates? That article mentions a new addition to the ACME auto-renewal protocols that would allow clients to resolve a glitch like this in future without any manual intervention.

1 0

The Linux coders turning the ROG Ally and other handhelds into Steam Deck clones
by Peter Reutemann 28 Jun '23

28 Jun '23

'As soon as I was done with my review of the Asus ROG Ally, I grabbed my best USB stick and started looking for ISOs to download. Windows is, of course, the main highway to most PC gaming, but it's also (as detailed in the review) not yet built to work well on a 7-inch gaming handheld. The ROG Ally ships with Windows (Home) installed and a bunch of Asus software, but it is still, at heart, a PC. With effort, you can get into the BIOS, disable Secure Boot, plug in a USB stick, and boot a USB stick with a live Linux distribution on it. [...] With Ubuntu 23.04 installed, I could run the Phoronix Test Suite and run glxgears, which showed that at least some kind of 3D acceleration was happening. I installed Cyberpunk 2077 through Steam's Proton compatibility tool, benchmarked it, and got, well, very sad numbers. Cyberpunk saw that my GPU was the Ally's key feature—an AMD Ryzen Z1 Extreme. But it ran at 17 and 23 frames per second averages on "Medium" and "Steam Deck" settings, respectively (at 720p resolution and 60 Hz refresh rate). With nothing to lose, I installed the latest AMD Linux drivers, ran those benchmarks again, and lo and behold, improvement: 30.8 and 27.32 fps on "Medium" and "Steam Deck." That's notably shy of the 38 and 34 frames per second I clocked on the same benchmark in Windows. Then again, I'm guessing at drivers, and I can't do much to control thermals or power draw.' -- source: https://arstechnica.com/gadgets/2023/06/the-linux-coders-turning-the-rog-al… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Kart - git for geospatial data
by Peter Reutemann 27 Jun '23

27 Jun '23

Hi everyone Just came across this interesting project on my Mastodon feed (https://cloudisland.nz/@dznz/110613146633504731) Kart - Distributed version-control for geospatial and tabular data "stores geospatial and tabular data in Git, providing version control at the row and cell level." https://kartproject.org/ Is being developed by local company Koordinates and released under GPLv2 with linking exception. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Linux Foundation Celebrates Zephyr Project's Small Real-Time Operating System
by Peter Reutemann 27 Jun '23

27 Jun '23

'This week the Linux Foundation shared an update on the Zephyr Project, a small real-time operating system for connected, resource-constrained and embedded devices: The project recently achieved several milestones including surpassing 80,000 commits since it was released in open source in 2015. This is an average of almost 2 commits per hour, which was made recently by 490 individuals, including 166 first-timers, who contributed to the 3.4 release. Zephyr RTOS supports over 450 boards running embedded microcontrollers from Arm and RISC-V to Tensilica, NIOS, ARC and x86 as single and multicore systems... Zephyr RTOS has a growing set of software libraries that can be used across various applications and industry sectors such as Industrial IoT, wearables, machine learning and more. It is built with an emphasis on broad chipset support, security, dependability, long-term support releases and a growing open source ecosystem... The Zephyr community will be at the Zephyr Developer Summit, which takes place on June 27-30 in Prague, Czech Republic, and virtually as part of the first-ever Embedded Open Source Summit. [Register here for virtual attendance.] Arduino will be joining Zephyr's Technical Steering Committee, along with Technology Innovation Institute and the American multinational semiconductor company Analog Devices (or ADI, who will also be joining its governing board). Arduino's CEO said "We believe that Zephyr OS is a truly special project that will play a significant role in the Arduino ecosystem and will be a big priority for us." As a "Platinum"-level sponsor, ADI joins Antmicro, Baumer, Google, Intel, Meta, Nordic Semiconductor, NXP, Oticon, Qualcomm Innovation Center and T-Mobile.' -- source: https://news.slashdot.org/story/23/06/26/0234245 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

GCC Steering Committee Announces a Code of Conduct
by Peter Reutemann 26 Jun '23

26 Jun '23

'GCC is the GNU project's free and open-source cross-platform compiler collection. Now an anonymous reader shared this announcement from the mailing list for GCC: The GCC Steering Committee has decided to adopt a Code of Conduct for interactions in GCC project spaces, including mailing lists, bugzilla, and IRC. The vast majority of the time, the GCC community is a very civil, cooperative space. On the rare occasions that it isn't, it's helpful to have something to point to to remind people of our expectations. It's also good for newcomers to have something to refer to, for both how they are expected to conduct themselves and how they can expect to be treated... At this time the CoC is preliminary: the code itself should be considered active, but the CoC committee (and so the reporting and response procedures) are not yet in place. There's also an official FAQ, and GCC's Code of Conduct begins with this introduction. "Like the free software community as a whole, the GCC community is made up of a mixture of professionals and volunteers from all over the world, working on every aspect of the project — including mentorship, teaching, and connecting people." Where this leads to issues and unhappiness, "we have a few ground rules that we ask people to adhere to... [T]ake it in the spirit in which it's intended — a guide to make it easier to enrich all of us, the project, and the broader communities in which we participate."' -- source: https://news.slashdot.org/story/23/06/25/2255253 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

PipeWire Versus PulseAudio+JACK
by Lawrence D'Oliveiro 25 Jun '23

25 Jun '23

Came across this PipeWire FAQ <https://gitlab.freedesktop.org/pipewire/pipewire/-/wikis/FAQ>, which among other things explains why there is a need to replace both PulseAudio and JACK. Briefly, it started from a wish to manage video inputs and outputs in a similar way to audio inputs and outputs, and also fix some performance/configuration limitations in the older specs. And if you are wondering why all your sound devices have suddenly acquired a “Pro Audio” option in their settings, this explains that as well. Also, for those complaining that Wayland’s stricter security model breaks basic functionality like screen recording and sharing, it appears PipeWire is the basis for the solution to that problem.

1 0

DuckDuckGo browser beta for Windows bakes in a lot of privacy tools
by Peter Reutemann 23 Jun '23

23 Jun '23

'Privacy-focused firm DuckDuckGo has released a public beta of its browser for Windows, offering more default privacy protections and an assortment of Duck-made browsing tools. More than a year after debuting its browser for Mac in private beta, the search engine and tracking antagonist offers many of those same features to a much wider audience. Like its Mac browser, DuckDuckGo (DDG) uses "the underlying operating system rendering API" rather than its own forked browser code. That's "a Windows WebView2 call that utilizes the Blink rendering engine underneath," according to DuckDuckGo's blog post. Fittingly, the browser reports itself as Microsoft Edge at most header-scanning sites.' -- source: https://arstechnica.com/gadgets/2023/06/duckduckgo-offers-its-privacy-cente… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The Art Of Refurbishing Old Computers
by Lawrence D'Oliveiro 22 Jun '23

22 Jun '23

Interesting report <https://www.theregister.com/2023/06/21/pc_officina_positive_trashware/> on an Italian organization, which mentions some points which could be useful to those doing the same thing here: how to salvage and refurbish old PCs for donation to those who can’t afford something new. Note that they won’t take any old rubbish: they will no longer accept 32-bit machines or those needing DDR2 RAM, for example. Their current recommended OS is Linux Mint 21 with XFCE, but they will source Microsoft Windows for those who really want it (at what cost?).

1 0

Latest SUSE Linux Enterprise Goes All in With Confidential Computing
by Peter Reutemann 21 Jun '23

21 Jun '23

'SUSE's latest release of SUSE Linux Enterprise 15 Service Pack 5 (SLE 15 SP5) has a focus on security, claiming it as the first distro to offer full support for confidential computing to protect data. From a report: According to SUSE, the latest version of its enterprise platform is designed to deliver high-performance computing capabilities, with an inevitable mention of AI/ML workloads, plus it claims to have extended its live-patching capabilities. The release also comes just weeks after the community release openSUSE Leap 15.5 was made available, with the two sharing a common core. The Reg's resident open source guru noted that Leap 15.6 has now been confirmed as under development, which implies that a future SLE 15 SP6 should also be in the pipeline. SUSE announced the latest version at its SUSECON event in Munich, along with a new report on cloud security issues claiming that more than 88 percent of IT teams have reported at least one cloud security incident over the the past year. This appears to be the justification for the claim that SLE 15 SP5 is the first Linux distro to support "the entire spectrum" of confidential computing, allowing customers to run fully encrypted virtual machines on their infrastructure to protect applications and their associated data. Confidential computing relies on hardware-based security mechanisms in the processor to provide this protection, so enterprises hoping to take advantage of this will need to ensure their servers have the necessary support, such as AMD's Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) and Intel's Trust Domain Extensions (TDX).' -- source: https://linux.slashdot.org/story/23/06/20/1846203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

PostgreSQL Reconsiders Its Process-Based Model
by Peter Reutemann 20 Jun '23

20 Jun '23

'Jonathan Corbet, writing at LWN: In the fast-moving open-source world, programs can come and go quickly; a tool that has many users today can easily be eclipsed by something better next week. Even in this environment, though, some programs endure for a long time. As an example, consider the PostgreSQL database system, which traces its history back to 1986. Making fundamental changes to a large code base with that much history is never an easy task. As fundamental changes go, moving PostgreSQL away from its process-oriented model is not a small one, but it is one that the project is considering seriously. A PostgreSQL instance runs as a large set of cooperating processes, including one for each connected client. These processes communicate through a number of shared-memory regions using an elaborate library that enables the creation of complex data structures in a setting where not all processes have the same memory mapped at the same address. This model has served the project well for many years, but the world has changed a lot over the history of this project. As a result, PostgreSQL developers are increasingly thinking that it may be time to make a change.' -- source: https://tech.slashdot.org/story/23/06/19/1723259 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

KDE Plasma 6 Is Now 'Fairly Livable'
by Peter Reutemann 20 Jun '23

20 Jun '23

'Prominent KDE developer Nate Graham believes that Plasma 6 is now "fairly livable" and recommends KDE developers and power users / enthusiasts start giving it a try. Phoronix reports: He characterized Plasma 6 as: "Basically everything in Plasma compiles with Qt 6, and at this point Plasma 6 is fairly livable. To give you a sense of how livable, it's good enough that over the past 2 months, I've gone on three KDE-related trips from the USA to Europe, with my only computer running Plasma 6 in "current git master" state, with work-in-progress merge requests applied! Its stability has been good enough that this has caused me no apprehension, and indeed, it's been totally fine on each trip. So seriously, if you're a KDE developer or an adventurous user, start living on Plasma 6! Jump right in, the water's fine. :)" He went on to write more about the current development activities around Plasma 6. He also shared his personal beliefs around Plasma 6.0 release timing although no official release schedule is yet to be determined. Nate's belief is that Plasma 6.0 will likely be ready for release sometime between December and March.' -- source: https://developers.slashdot.org/story/23/06/19/212256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The State Of Linux Music Production
by Lawrence D'Oliveiro 17 Jun '23

17 Jun '23

Been messing about with my old MIDI keyboard again, after a long while putting it aside. It now complains about a “low battery” warning, but I think that only affects the onboard sound settings, which I’m not particularly fussed about. I got a USB-MIDI interface a few years back, and I can use that with the keyboard to drive sound sources on my main machine. But things have changed in the Linux music world since the last time I tried this (at least on Debian). JACK and PulseAudio have both been replaced by this new thing, PipeWire, which is supposed to handle video, audio and MIDI routing through a common architecture. So I no longer have to start up jackd when I want to switch to music-production mode (in fact, trying to run jackd under PipeWire will screw up your audio something awful). Instead, patching between sources and sinks is done via WirePlumber, for which a convenient GUI frontend is available in the form of qpwgraph. All the main PipeWire-related processes are managed as user-level services via systemd. One thing hasn’t changed, and that is the incompatibility between ALSA MIDI ports and JACK MIDI ports: that USB-MIDI interface only appears to the system as ports of the ALSA kind, whereas JACK-aware apps want to accept MIDI data via ports of the JACK kind. So I still have to start up the old “a2jmidid” program to provide a bridge between these two. qpwgraph shows all these different kinds of entities, each labelled with its type: “ALSA”, “PW” (PipeWire) or “JACK”. The latter two can be connected directly to one another, while ALSA ports can only be connected to ALSA ports. The colour-coding--purple for ALSA MIDI ports, red for JACK/PipeWire MIDI, green for JACK/PipeWire audio--is a hint that you can only connect matching colours. Some JACK-aware apps still have trouble running under PipeWire; for these, there is the “pw-jack” tool, which substitutes the JACK dynamic libraries with ones that hook directly into PipeWire before launching the specified app. E.g. I had to run a2jmidid with pw-jack a2jmidid Also, the command pw-jack zynaddsubfx -O jack tells ZynAddSubFX to run with its JACK interface active, and I can route events from my keyboard to it via the intermediary nodes automatically created by a2jmidid. Don’t forget to hook up its audio output terminals to the box representing my speakers, and voilà, I can make sound.

1 0

Analysis Of The GMail Fake Email Exploit
by Lawrence D'Oliveiro 15 Jun '23

15 Jun '23

You may have heard about an interesting hack a few days ago <https://www.theregister.com/2023/06/09/google_bimi_email_authentication/>, where some low-lifes figured out how to send fraudulent emails to GMail users that showed a “verified” blue BIMI checkmark, indicating that the recipient could trust the from-address as authentic. But of course it was not. The details of how the hack was perpetrated are quite intricate, and involve some subtle interplay between the mail-processing policies of GMail (where the recipients had their accounts, and which implements the BIMI check), Microsoft (which ran the Exchange servers where the fraudsters got accounts, and from which the fraudulent messages were sent) and UPS (the purported sender of the fake emails). Of course, all three parties have since taken action to ensure this particular scenario will not happen again. ThioJoe offers up a good explanation of how it all worked here <https://www.youtube.com/watch?v=Czc0F_A82rE>. If your eyes glaze over at the mention of SPF versus DKIM versus DMARC--well, you’re not alone. When I looked at whether I should implement something like this on my own mail server to try to ensure that spammers could not send out fake emails under my name, I felt the same way. So I just decided not to bother. For now ...

1 0

Question re: Desktop computer running Ubuntu is slow, mouse and keyboard missing commands
by Michael James 14 Jun '23

14 Jun '23

Can anyone please assist with this Ubuntu desktop severely slowed down, mouse and keyboard severely delayed, skipping and or typing multiple letters/numbers with the problem progressively getting worse. Internet speed is at standard mark. Thanks, Noho ora mai, All the best, Michael James __________________________________________________________________________________________ MICHAEL JAMES PASTROFF phone: inside New Zealand 021 115 3713 outside New Zealand 64 21 115 3713

2 2

Edge Sends Images You View Online To Microsoft
by Peter Reutemann 13 Jun '23

13 Jun '23

'Not so long ago, Microsoft Edge ended up in hot waters after users discovered a bug leaking your browser history to Bing. Now you may want to toggle off another feature to ensure Edge is not sending every picture you view online to Microsoft. Edge has a built-in image enhancement tool that, according to Microsoft, can use "super-resolution to improve clarity, sharpness, lighting, and contrast in images on the web." Although the feature sounds exciting, recent Microsoft Edge Canary updates have provided more information on how image enhancement works. The browser now warns that it sends image links to Microsoft instead of performing on-device enhancements.' -- source: https://yro.slashdot.org/story/23/06/12/182216 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Debian 12 'Bookworm' Released
by Peter Reutemann 12 Jun '23

12 Jun '23

'Slashdot reader e065c8515d206cb0e190 shared the big announcement from Debian.org: After 1 year, 9 months, and 28 days of development, the Debian project is proud to present its new stable version 12 (code name bookworm). bookworm will be supported for the next 5 years thanks to the combined work of the Debian Security team and the Debian Long Term Support team... This release contains over 11,089 new packages for a total count of 64,419 packages, while over 6,296 packages have been removed as obsolete. 43,254 packages were updated in this release. The overall disk usage for bookworm is 365,016,420 kB (365 GB), and is made up of 1,341,564,204 lines of code. bookworm has more translated man pages than ever thanks to our translators who have made man-pages available in multiple languages such as: Czech, Danish, Greek, Finnish, Indonesian, Macedonian, Norwegian (Bokmål), Russian, Serbian, Swedish, Ukrainian, and Vietnamese. All of the systemd man pages are now completely available in German. The Debian Med Blend introduces a new package: shiny-server which simplifies scientific web applications using R. We have kept to our efforts of providing Continuous Integration support for Debian Med team packages. Install the metapackages at version 3.8.x for Debian bookworm. The Debian Astro Blend continues to provide a one-stop solution for professional astronomers, enthusiasts, and hobbyists with updates to almost all versions of the software packages in the blend. astap and planetary-system-stacker help with image stacking and astrometry resolution. openvlbi, the open source correlator, is now included. Support for Secure Boot on ARM64 has been reintroduced: users of UEFI-capable ARM64 hardware can boot with Secure Boot mode enabled to take full advantage of the security feature. 9to5Linux has screenshots, and highlights some new features: Debian 12 also brings read/write support for APFS (Apple File System) with the apfsprogs and apfs-dkms utilities, a new tool called ntfs2btrfs that lets you convert NTFS drives to Btrfs, a new malloc implementation called mimalloc, a new kernel SMB server called ksmbd-tools, and support for the merged-usr root file system layout... This release also includes completely new artwork called Emerald, designed (once again) by Juliette Taka. New fonts are also present in this major Debian release, along with a new fnt command-line tool for accessing 1,500 DFSG-compliant fonts. Debian 12 "bookworm" ships with several desktop environments, including: - Gnome 43, - KDE Plasma 5.27, - LXDE 11, - LXQt 1.2.0, - MATE 1.26, - Xfce 4.18' -- source: https://linux.slashdot.org/story/23/06/11/0333242 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft Excel Has Become A Threat To Democracy
by Lawrence D'Oliveiro 07 Jun '23

07 Jun '23

Austria’s Social Democratic Party recently held an election for a new leader, according to <https://www.theregister.com/2023/06/06/austria_election_excel_blunder/>. Trouble was, two days after announcing the result had gone one way, they then had to report that in fact it was the other way round, owing to a stuffup involving an Excel spreadsheet. I suppose the only good news is that this was strictly an in-party election, not something involving any level of Government.

1 0