June 2023 - wlug - list.wlug.org.nz

Analysis Of The GMail Fake Email Exploit
by Lawrence D'Oliveiro 15 Jun '23

15 Jun '23

You may have heard about an interesting hack a few days ago <https://www.theregister.com/2023/06/09/google_bimi_email_authentication/>, where some low-lifes figured out how to send fraudulent emails to GMail users that showed a “verified” blue BIMI checkmark, indicating that the recipient could trust the from-address as authentic. But of course it was not. The details of how the hack was perpetrated are quite intricate, and involve some subtle interplay between the mail-processing policies of GMail (where the recipients had their accounts, and which implements the BIMI check), Microsoft (which ran the Exchange servers where the fraudsters got accounts, and from which the fraudulent messages were sent) and UPS (the purported sender of the fake emails). Of course, all three parties have since taken action to ensure this particular scenario will not happen again. ThioJoe offers up a good explanation of how it all worked here <https://www.youtube.com/watch?v=Czc0F_A82rE>. If your eyes glaze over at the mention of SPF versus DKIM versus DMARC--well, you’re not alone. When I looked at whether I should implement something like this on my own mail server to try to ensure that spammers could not send out fake emails under my name, I felt the same way. So I just decided not to bother. For now ...

1 0

Question re: Desktop computer running Ubuntu is slow, mouse and keyboard missing commands
by Michael James 14 Jun '23

14 Jun '23

Can anyone please assist with this Ubuntu desktop severely slowed down, mouse and keyboard severely delayed, skipping and or typing multiple letters/numbers with the problem progressively getting worse. Internet speed is at standard mark. Thanks, Noho ora mai, All the best, Michael James __________________________________________________________________________________________ MICHAEL JAMES PASTROFF phone: inside New Zealand 021 115 3713 outside New Zealand 64 21 115 3713

2 2

Edge Sends Images You View Online To Microsoft
by Peter Reutemann 13 Jun '23

13 Jun '23

'Not so long ago, Microsoft Edge ended up in hot waters after users discovered a bug leaking your browser history to Bing. Now you may want to toggle off another feature to ensure Edge is not sending every picture you view online to Microsoft. Edge has a built-in image enhancement tool that, according to Microsoft, can use "super-resolution to improve clarity, sharpness, lighting, and contrast in images on the web." Although the feature sounds exciting, recent Microsoft Edge Canary updates have provided more information on how image enhancement works. The browser now warns that it sends image links to Microsoft instead of performing on-device enhancements.' -- source: https://yro.slashdot.org/story/23/06/12/182216 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Debian 12 'Bookworm' Released
by Peter Reutemann 12 Jun '23

12 Jun '23

'Slashdot reader e065c8515d206cb0e190 shared the big announcement from Debian.org: After 1 year, 9 months, and 28 days of development, the Debian project is proud to present its new stable version 12 (code name bookworm). bookworm will be supported for the next 5 years thanks to the combined work of the Debian Security team and the Debian Long Term Support team... This release contains over 11,089 new packages for a total count of 64,419 packages, while over 6,296 packages have been removed as obsolete. 43,254 packages were updated in this release. The overall disk usage for bookworm is 365,016,420 kB (365 GB), and is made up of 1,341,564,204 lines of code. bookworm has more translated man pages than ever thanks to our translators who have made man-pages available in multiple languages such as: Czech, Danish, Greek, Finnish, Indonesian, Macedonian, Norwegian (Bokmål), Russian, Serbian, Swedish, Ukrainian, and Vietnamese. All of the systemd man pages are now completely available in German. The Debian Med Blend introduces a new package: shiny-server which simplifies scientific web applications using R. We have kept to our efforts of providing Continuous Integration support for Debian Med team packages. Install the metapackages at version 3.8.x for Debian bookworm. The Debian Astro Blend continues to provide a one-stop solution for professional astronomers, enthusiasts, and hobbyists with updates to almost all versions of the software packages in the blend. astap and planetary-system-stacker help with image stacking and astrometry resolution. openvlbi, the open source correlator, is now included. Support for Secure Boot on ARM64 has been reintroduced: users of UEFI-capable ARM64 hardware can boot with Secure Boot mode enabled to take full advantage of the security feature. 9to5Linux has screenshots, and highlights some new features: Debian 12 also brings read/write support for APFS (Apple File System) with the apfsprogs and apfs-dkms utilities, a new tool called ntfs2btrfs that lets you convert NTFS drives to Btrfs, a new malloc implementation called mimalloc, a new kernel SMB server called ksmbd-tools, and support for the merged-usr root file system layout... This release also includes completely new artwork called Emerald, designed (once again) by Juliette Taka. New fonts are also present in this major Debian release, along with a new fnt command-line tool for accessing 1,500 DFSG-compliant fonts. Debian 12 "bookworm" ships with several desktop environments, including: - Gnome 43, - KDE Plasma 5.27, - LXDE 11, - LXQt 1.2.0, - MATE 1.26, - Xfce 4.18' -- source: https://linux.slashdot.org/story/23/06/11/0333242 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft Excel Has Become A Threat To Democracy
by Lawrence D'Oliveiro 07 Jun '23

07 Jun '23

Austria’s Social Democratic Party recently held an election for a new leader, according to <https://www.theregister.com/2023/06/06/austria_election_excel_blunder/>. Trouble was, two days after announcing the result had gone one way, they then had to report that in fact it was the other way round, owing to a stuffup involving an Excel spreadsheet. I suppose the only good news is that this was strictly an in-party election, not something involving any level of Government.

1 0

The State Of Fibre Broadband In The USA
by Lawrence D'Oliveiro 07 Jun '23

07 Jun '23

Came across this report <https://arstechnica.com/tech-policy/2023/06/internet-users-love-fiber-servi…>, which is interesting to compare with conditions in NZ: In terms of availability, the Federal Communications Commission broadband map indicates that about 38 percent of US residents can get fiber. The percentage drops to 29 percent when including only fiber services that offer gigabit download speeds and at least 100Mbps upload speeds. Basically, US broadband is dominated by companies with heavy investments in cable (and some ADSL), who have no interest in obsoleting that investment any sooner than they have to. Moral: there are places where a free market works, but strategic infrastructure buildouts is not one of them.

1 0