January 2024 - wlug - list.wlug.org.nz

Unix Pioneer Ken Thompson Has Abandoned Apple For Linux
by Lawrence D'Oliveiro 28 Jan '24

28 Jan '24

Something I didn’t hear about, which happened earlier last year <https://forums.freebsd.org/threads/unix-pioneer-ken-thompson-announces-hes-…>. Ken Thompson, one of the original Bell Labs crew that created Unix, now 80 years old, was asked what OS he uses, and he replied: I have, for most of my life — because I was sort of born into it — run Apple. Now recently, meaning within the last five years, I've become more and more depressed, and what Apple is doing to something that should allow you to work is just atrocious. But they are taking a lot of space and time to do it, so it's okay. And I have come, within the last month or two, to say, even though I've invested, you know, a zillion years in Apple — I'm throwing it away. And I'm going to Linux. To Raspbian in particular.

1 0

OpenWrt, now 20 years old, is crafting its own future-proof reference hardware
by Peter Reutemann 24 Jan '24

24 Jan '24

'OpenWrt, the open source firmware that sprang from Linksys' use of open source code in its iconic WRT54G router and subsequent release of its work, is 20 years old this year. To keep the project going, lead developers have proposed creating a "fully upstream supported hardware design," one that would prevent the need for handling "binary blobs" in modern router hardware and let DIY router enthusiasts forge their own path. OpenWRT project members, 13 of which signed off on this hardware, are keeping the "OpenWrt One" simple, while including "some nice features we believe all OpenWrt supported platforms should have," including "almost unbrickable" low-level firmware, an on-board real-time clock with a battery backup, and USB-PD power. The price should be under $100 and the schematics and code publicly available. But OpenWrt will not be producing or selling these boards, "for a ton of reasons." The group is looking to the Banana Pi makers to distribute a fitting device, with every device producing a donation to the Software Freedom Conservancy earmarked for OpenWrt. That money could then be used for hosting expenses, or "maybe an OpenWrt summit."' -- source: https://arstechnica.com/gadgets/2024/01/openwrt-now-20-years-old-is-craftin… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Easy Relative Symbolic Links
by Lawrence D'Oliveiro 23 Jan '24

23 Jan '24

You probably know about the “ln” command to create a new link to an existing file. You probably know about “ln -s” to create a symbolic link. But did you know about “ln -rs” to easily create relative symbolic links? Relative links are often preferable to absolute ones, because that way they stay valid if the whole containing directory tree is moved to a different location (e.g. as the result of a bind mount). But typing the right number of “../” prefixes can get quite fiddly. And if you want to rely on autocomplete to help, you have to change directory to the destination where the symlink is to be created. Instead, a simpler way is to use “ln -rs”, then use autocomplete from wherever you are to get to the right source file/directory, and the ln command will automatically convert the resulting path, whatever it might be (either absolute or relative to your current working directory) to a suitable relative one based on the destination for the link. <https://manpages.debian.org/ln.1.en.html>

1 1

HP Says The Quiet Part Out Loud
by Lawrence D'Oliveiro 23 Jan '24

23 Jan '24

You’d think, if you were buying a printer, you were the one making the investment, and expecting an outcome of suitable print quality (and quantity) in return. But not, it seems, if you buy an HP printer. Company boss Enrique Lores has made it quite clear <https://www.theregister.com/2024/01/19/hps_ceo_spells_it_out/>: "Every time a customer buys a printer, it's an investment for us. We are investing in that customer, and if that customer doesn't print enough or doesn't use our supplies, it's a bad investment." If you think this is some offhand remark, taken out of context or something, how about this statement from December, by their CFO of the time: "We absolutely see when you move a customer from that pure transactional model ... whether it's Instant Ink, plus adding on that paper, we sort of see a 20 percent uplift on the value of that customer because you're locking that person, committing to a longer-term relationship." In short, they are going to squeeze you for as much ink revenue as they can. Third-party ink cartridges are obviously a threat to this business model, that must be exterminated. I wonder, if they could figure out how to make you get the paper from them as well, they wouldn’t do that ... oh wait ... she already mentioned paper ...

2 2

Timezone Data Changes
by Lawrence D'Oliveiro 23 Jan '24

23 Jan '24

The maintainers of the timezone database (tzdata) have been cleaning up some things lately. Namely, removing all the alias names that are not of the common IANA «region»/«city» form, but refer to specific countries, from the core package. NZ’s two timezones, “NZ” and “NZ-CHAT” were among these special cases. Also the ones beginning “US/” for the various timezones in the USA. <https://tracker.debian.org/news/1451157/accepted-tzdata-2023c-8-source-into…> <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040997> <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056908> These latter names are still available if you install the “tzdata-legacy” package. So you need to have that installed if you want to continue setting “TZ=NZ”. Either that, or learn to start saying “TZ=Pacific/Auckland” instead.

1 0

All This AI Stuff Costs A Lot Of Money
by Lawrence D'Oliveiro 21 Jan '24

21 Jan '24

According to this article <https://arstechnica.com/gadgets/2024/01/alexa-is-in-trouble-paid-for-alexa-…> (based on anonymous sources), Amazon is on a struggle to make money out of its Alexa service, particularly a new, “Generative-AI”-based version coming out at some non-yet-publicly-disclosed point. I was flabbergasted at this: Amazon has to do something to turn Alexa into a viable revenue source. In late 2022, Insider reported that Alexa was on track to lose Amazon $10 billion that year. The following months were filled with numerous layoffs at Amazon ... $10 billion!? I wonder how much of that is *not* the electricity bills for running all the servers ...

1 0

Rust-Written Linux Scheduler Continues Showing Promising Results For Gaming
by Peter Reutemann 21 Jan '24

21 Jan '24

'"A Canonical engineer has been experimenting with implementing a Linux scheduler within the Rust programming language..." Phoronix reported Monday, "that works via sched_ext for implementing a scheduler using eBPF that can be loaded during run-time." The project was started "just for fun" over Christmas, according to a post on X by Canonical-based Linux kernel engineer Andrea Righi, adding "I'm pretty shocked to see that it doesn't just work, but it can even outperform the default Linux scheduler (EEVDF) with certain workloads (i.e., gaming)." Phoronix notes the a YouTube video accompanying the tweet shows "a game with the scx_rustland scheduler outperforming the default Linux kernel scheduler while running a parallel kernel build in the background." "For sure the build takes longer," Righi acknowledged in a later post. "This scheduler doesn't magically makes everything run faster, it simply prioritizes more the interactive workloads vs CPU-intensive background jobs." Righi followed up by adding "And the whole point of this demo was to prove that, despite the overhead of running a scheduler in user-space, we can still achieve interesting performance, while having the advantages of being in user-space (ease of experimentation/testing, reboot-less updates, etc.)" Wednesday Righi added some improvements, posting that "Only 19 lines of code (comments included) for ~2x performance improvement on SMT isn't bad... and I spent my lunch break playing Counter Strike 2 to test this patch..." And work seems to be continuing, judging by a fresh post from Righi on Thursday. "I fixed virtme-ng to run inside Docker and used it to create a github CI workflow for sched-ext that clones the latest kernel, builds it and runs multiple VMs to test all the scx schedulers. And it does that in only ~20min. I'm pretty happy about virtme-ng now."' -- source: https://developers.slashdot.org/story/24/01/20/0716232 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Network Time Man's Time Has Ended
by Lawrence D'Oliveiro 20 Jan '24

20 Jan '24

Dave Mills, creator of NTP, the Network Time Protocol that keeps all our computer clocks synced to within hundredths of a second, has passed away at the age of 85 <https://arstechnica.com/gadgets/2024/01/inventor-of-ntp-protocol-that-keeps…>.

1 0

Just 10 lines of code can steal AI secrets from Apple, AMD, and Qualcomm GPUs
by Peter Reutemann 18 Jan '24

18 Jan '24

'As more companies ramp up development of artificial intelligence systems, they are increasingly turning to graphics processing unit (GPU) chips for the computing power they need to run large language models (LLMs) and to crunch data quickly at massive scale. Between video game processing and AI, demand for GPUs has never been higher, and chipmakers are rushing to bolster supply. In new findings released today, though, researchers are highlighting a vulnerability in multiple brands and models of mainstream GPUs—including Apple, Qualcomm, and AMD chips—that could allow an attacker to steal large quantities of data from a GPU’s memory. The silicon industry has spent years refining the security of central processing units, or CPUs, so they don’t leak data in memory even when they are built to optimize for speed. However, since GPUs were designed for raw graphics processing power, they haven’t been architected to the same degree with data privacy as a priority. As generative AI and other machine learning applications expand the uses of these chips, though, researchers from New York-based security firm Trail of Bits say that vulnerabilities in GPUs are an increasingly urgent concern. “There is a broader security concern about these GPUs not being as secure as they should be and leaking a significant amount of data,” Heidy Khlaaf, Trail of Bits’ engineering director for AI and machine learning assurance, tells WIRED. “We’re looking at anywhere from 5 megabytes to 180 megabytes. In the CPU world, even a bit is too much to reveal.” To exploit the vulnerability, which the researchers call LeftoverLocals, attackers would need to already have established some amount of operating system access on a target’s device. Modern computers and servers are specifically designed to silo data so multiple users can share the same processing resources without being able to access each others’ data. But a LeftoverLocals attack breaks down these walls. Exploiting the vulnerability would allow a hacker to exfiltrate data they shouldn’t be able to access from the local memory of vulnerable GPUs, exposing whatever data happens to be there for the taking, which could include queries and responses generated by LLMs as well as the weights driving the response.' -- source: https://arstechnica.com/security/2024/01/new-attack-steals-ai-secrets-from-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Generating PDF Files From man Pages
by Lawrence D'Oliveiro 17 Jan '24

17 Jan '24

I’ve been writing documentation for some of my published scripts in the form of man pages. The troff/groff markup is not hard to get to grips with--the man pages for the relevant tools have a lot of useful info. And it’s easy to view the results without any special installation step, since the man(1) command includes the “-l” option to treat its argument as a file name. But if the topic name has any slashes in it, such treatment is automatic without even needing this option. Thus, in my project source directory, I can type something as simple as man ./render-batch.1 to view the man page I wrote for the “render-batch” command. Conversion to PDF is easy, too, using the underlying groff command that man itself uses to format the page, just specifying a different output “device” (i.e. format), e.g. groff -man -Tpdf «troff-file» >«output-file» Or, if I don’t want to save the output PDF file, but just pipe it straight to a viewer like Okular, this works: groff -man -Tpdf «troff-file» | okular - This is particularly useful, for example, for debugging the difference between dashes and hyphens. You are supposed to use “\-” for the hyphen-minus character (as used to prefix command-line options, for example), while hyphens in regular text should be written as “-”. The two look the same in a normal man-page view, but they get rendered differently in PDF files. However, I found that groff does not correctly render various Unicode UTF-8 characters when generating PDF output. For example, I like to use curly quotes “”. These look OK in regular man output, but get turned into junk in PDF output. After some searching online, it appears this is a known limitation of groff, because it uses various 8-bit byte codes internally for its own purposes, precluding their use as part of UTF-8 encoding. But there is a tool called “preconv” that can convert various encodings into a more groff-friendly text representation. For example preconv -e utf-8 «troff-file» | groff -man -Tpdf | okular - Since my locale is set to a UTF-8 one by default, I don’t even need the “-e” option: preconv «troff-file» | groff -man -Tpdf | okular - Or, if you want to save the output: preconv «troff-file» | groff -man -Tpdf >«output-file» Going back to the example filename I used before, these translate to something like preconv render-batch.1 | groff -man -Tpdf | okular - preconv render-batch.1 | groff -man -Tpdf >render-batch.pdf Another variation is to use preconv «troff-file» | groff -man -Tpdf | { okular - & } This spawns the Okular part of the pipeline in the background, so it comes back to the shell prompt immediately that starts running. This is convenient with a GUI tool like Okular, because I can run other commands while continuing to view the output PDF file. So how is it that groff is capable of handling these characters just fine when invoked via man? That I haven’t figured out yet ...

1 2