- wlug - list.wlug.org.nz

HTTP/3 Is Officially An IETF Spec
by Lawrence D'Oliveiro 07 Jun '22

07 Jun '22

QUIC is now officially HTTP/3, as described in RFC 9114 <https://www.theregister.com/2022/06/07/http3_rfc_9114_published/>. Not everybody is keen on it: there still seem to be some concerns over privacy, as well as over the claimed performance boost. Actually, a previous spec (RFC9000) had “Proposed Standard” status over a year ago, but it wasn’t (officially) being referred to as “HTTP/3” back then.

1 0

LastPass No Longer Requires a Password To Access Your Vault
by Peter Reutemann 07 Jun '22

07 Jun '22

'LastPass says they're now the first password manager with a passwordless sign-in feature. Engadget reports: Grant permission through the LastPass Authenticator mobile app and you can update account info on the web without entering your master password. The approach relies on FIDO-compliant password-free technology. The feature is available to both personal and business users. LastPass is also promising options beyond the Authenticator app in the future, such as relying on biometric scans or hardware security keys. ' -- source: https://it.slashdot.org/story/22/06/06/2111206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

GNOME Shell is Being Ported to Phones
by Peter Reutemann 05 Jun '22

05 Jun '22

'"As part of the design process for what ended up becoming GNOME 40 the design team worked on a number of experimental concepts," reports a blog post at Gnome.org's shell-dev blog, "a few of which were aimed at better support for tablets and other smaller devices." "Ever since then, some of us have been thinking about what it would take to fully port GNOME Shell to a phone form factor." It's an intriguing question because post-GNOME 40, there's not that much missing for GNOME Shell to work on phones, even if not perfectly.... On top of that, many of the things we're currently working towards for desktop are also relevant for mobile, including quick settings, the notifications redesign, and an improved on-screen keyboard. Given all of this synergy, we felt this is a great moment to actually give mobile GNOME Shell a try. Thanks to the Prototype Fund, a grant program supporting public interest software by the German Ministry of Education (BMBF), we've been working on mobile support for GNOME Shell for the past few months. We're not expecting to complete every aspect of making GNOME Shell a daily driveable phone shell as part of this grant project. That would be a much larger effort because it would mean tackling things like calls on the lock screen, PIN code unlock, emergency calls, a flashlight quick toggle, and other small quality-of-life features. However, we think the basics of navigating the shell, launching apps, searching, using the on-screen keyboard, etc. are doable in the context of this project, at least at a prototype stage. Of course, making a detailed roadmap for this kind of effort is hard and we will keep adjusting it as things progress and become more concrete... There's a lot of work ahead, but going forward progress will be faster and more visible because it will be work on the actual UI, rather than on internal APIs. Now that some of the basics are in place we're also excited to do more testing and development on actual phone hardware, which is especially important for tweaking things like the on-screen keyboard. Their blog post includes a video showing "what this currently looks like on laptops" and then one showing it running "on actual phone hardware." And someone has also posted a video on Twitter showing it running on a OnePlus 6 smartphone.' -- source: https://tech.slashdot.org/story/22/06/04/228254 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Freeing Up of Hundreds of Millions of IPv4 Addresses Mooted
by Peter Reutemann 03 Jun '22

03 Jun '22

'Work is afoot to free up several internet protocol version 4 (IPv4) address ranges which have been unroutable as reserved, invalid or used for loopback networks since the 1980s. Reader Bismillah shares a report: Seth Schoen, who co-founded the free transport layer security digital certificate provider Let's Encrypt is working on an IPv4 clean-up project that would take address currently not routed on the public Internet, and make them generally usable. Presenting on the IPv4 Unicast Extensions Project at the Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT), Schoen said decisions taken during the 1980s to keep several IPv4 address ranges as "special", has led to a substantial amount of numbering resources going to waste. This "even though the reasons behind the those decisions has not been borne out," Schoen said. Taking the 240/4, 0/8, 127/8, 225/8-232/8 ranges, and making them available as ordinary unicast numbering resources for networks would add some 419 million IPv4 addresses. Due to the rapid growth of the Internet, the number of 32-bit IPv4 addresses has become scarce, with some regional registries being unable to allocate additional blocks to networks. The scarcity has caused IPv4 address hoarding, high prices for sub-allocations and even fraud to get more space.' -- source: https://tech.slashdot.org/story/22/05/31/1958213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

4 5

Have an old iPad lying around? You might be able to make it run Linux soon
by Peter Reutemann 03 Jun '22

03 Jun '22

'If you have a 2013- or 2014-era iPad sitting around unused because it's not getting updates from Apple anymore and has stopped running the apps you need, some developers are working on an alternative software solution for you. Developer Konrad Dybcio and a Linux enthusiast going by "quaack723" have collaborated to get Linux kernel version 5.18 booting on an old iPad Air 2, a major feat for a device that was designed to never run any operating system other than Apple's. The project appears to use an Alpine Linux-based distribution called "postmarketOS," a relatively small but actively developed distribution made primarily for Android devices. Dybcio used a "checkm8" hashtag in his initial tweet about the project, strongly implying that they used the "Checkm8" bootrom exploit published back in 2019 to access the hardware. For now, the developers only have Linux running on some older iPad hardware using A7 and A8-based chips—this includes the iPad Air, iPad Air 2, and a few generations of iPad mini. But subsequent tweets imply that it will be possible to get Linux up and running on any device with an A7 or A8 in it, including the iPhone 5S and the original HomePod.' -- source: https://arstechnica.com/gadgets/2022/06/developers-get-linux-up-and-running… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

AROS One x86 v1.7 and MorphOS 3.17 PPC Released
by Peter Reutemann 02 Jun '22

02 Jun '22

'Version 1.7 of AROS One for x86 has just been released and it's a distro of the "AROS Research Operating System," originally "Amiga Research Operating System." It's a standalone, free and open-source multi-media centric operating system that's designed to be portable, flexible, efficient and lightweight and can be seen dual booting with Windows 10 on an Acer laptop here. The most popular AROS specific community portal is AROS Exec. Parts of AROS were used to create the commercial PowerPC based Amiga-like operating system MorphOS, which has recently seen a new release as well, version 3.17. The most popular MorphOS specific community portal is MorphZone.' -- source: https://tech.slashdot.org/story/22/06/01/218219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Improving Your Relationship With Social Media May Call For A Targeted Approach
by Lawrence D'Oliveiro 02 Jun '22

02 Jun '22

Results of a self-experiment <https://freedom-to-tinker.com/2022/06/01/improving-your-relationship-with-s…> conducted by participants in a social networks course to find ways to improve their relationship with social media. The students split into three groups, each trying a different strategy, with the details left up to them, grouped into targeted limitation of participation in social media, targeted increase (yes, really), or elimination of participation altogether. Targeted increase involved actual posting and interaction with others on particular networks, rather than mere “doom-scrolling”. Two out of the three groups saw clear increases in well-being, and reduction in stress and loneliness. Limitation in use also improved sleep patterns. The strategy that seemed least effective was elimination: seems either limitation in use or more active participation will lead to benefits, not walking away altogether. Of course everybody is different, and as always, more research is needed. But maybe there are some ideas there you can try for yourself.

1 0

FairEmail Developer Calls It Quits After Google Falsely Flags App As Spyware
by Peter Reutemann 01 Jun '22

01 Jun '22

'"The developer of the open source email client FairEmail pulled all of his applications from Google Play and announced that he would stop development," reports gHacks. The announcement comes shortly after the developer received an email from Google stating that they believed the app was spyware. From the report: FairEmail was a popular email client for Google's Android operating system that was free to use. It was privacy-friendly, had no limitations in regards to email accounts that users could set up in the app, supported unified inbox, conversation threading, two-way synchronizing, support for OpenPGP, and a lot more. Marcel Bokhorst, the developer of the application, announced major changes to the project yesterday on XDA Developers. Earlier that week, Bokhorst received a policy violation email from Google stating that Google believed that the FairEmail application was spyware. The full statement has not been published, but Bokhorst believes that Google might have misinterpreted the use of favicons in the app. He resubmitted a new version of the application that had the use of favicons removed. The appeal he received as a response "resulted in a standard answer". While the content of the answer is unclear, it appears to have been a generic answer that Google Play Store developers have been frustrated with for a long time. Bokhorst decided to pull the application and all of his other applications from the Google Play Store. The apps won't be maintained and supported anymore according to the info. Other factors played a role in Bokhorst's decision, including the discrepancy between answering thousands of support questions per month and the application's revenue, and the inability to do something against unfair reviews in the Google Play Store. He considered keeping the applications on GitHub, but this would result in an 98% loss of audience. Google also recently forced Total Commander's developer to remove the ability to install APKs from the File Manager. If you're looking for an alternative email client, gHacks recommends the open-source app K-9 Mail.' -- source: https://tech.slashdot.org/story/22/05/19/2033249 Oh no, I just switched from K-9 to FairEmail a couple of months ago, as my K-9 was getting extremely slow with syncing mails... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

Murena, the Privacy-First Android Smartphone, Arrives
by Peter Reutemann 01 Jun '22

01 Jun '22

'The /e/OS-powered Murena One is the first smartphone from Murena that does its best to free you from Google without sacrificing too many core features. There are no Google apps, Google Play Services, or even the Google Assistant. It's all been replaced by open-source software alternatives with privacy-respecting features. ZDNet's Steven Vaughan-Nichols reports: Murena and Mandrake Linux founder Gael Duval was sick of it by 2017. He wanted his data to be his data, and he wanted open-source software. Almost five years later, Duval and his co-developers launched the Murena One X2. It's the first high-end Android phone using the open-source /e/OS Android fork to arrive on the market. The privacy heart of the Murena One is /e/OS V1. There have been many attempts to create an alternative to Google-based Android and Apple's iOS -- Ubuntu One, FirefoxOS, and Windows Mobile -- but all failed. Duval's approach isn't to reinvent the mobile operating system wheel, but to clean up Android of its squeaky Google privacy-invading features and replace them with privacy-respecting ones. To make this happen, Duval started with LineageOS -- an Android-based operating system, which is descended from the failed CyanogenMod Android fork. It also blends in features from the Android Open Source Project (AOSP) source-code trees. In the /e/OS, most (but not all) Google services have been removed and replaced with MicroG services. MicroG replaces Google's libraries with purely open-source implementations without hooks to Google's services. This includes libraries and apps which provide Google Play, Maps, Geolocation, and Messaging services for Android applications. In addition, /e/OS does its best to free you from higher-level Google services. For instance, Google's default search engine has been replaced with Murena's own meta-search engine. Other internet-based services, such as Domain Name Server (DNS) and Network Time Protocol (NTP), use non-Google servers. Above the operating system, you'll find Google-free applications. This includes a web browser; an e-mail client; a messaging app; a calendar; a contact manager; and a maps app that relies on Mozilla Location Service and OpenStreetMap. While it's not here yet, Murena is also working on its own take on Google Assistant, Elivia-AI. You can also run many, but not all Android apps. You'll find these apps on the operating system's App Lounge. [...] There's still one big problem: the App Lounge still relies on you logging in with your Google account. In short, the App Lounge is mainly a gateway to Google Store apps. Munera assures me that the Lounge anonymizes your data -- except if you use apps that require payment. Still, this is annoying for people who want to cut all their ties with Google. The fundamental problem is this: Muena does all it can to separate its operating system and applications from Google, but it can't -- yet -- replace Google's e-commerce and software store system. As for hardware specs, the $379 Murena One features a 6.5-inch IPS LCD display, eight-core MediaTek Helio P60 processor, side-mounted fingerprint scanner, three rear cameras (48MP + 8MP + 5MP) and 25MP front camera, and 4,500mAh battery. It also features a microSD card slot for expandable storage and headphone port.' -- source: https://mobile.slashdot.org/story/22/05/31/229225 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Python Is Getting Faster: Major Performance Tweaks On Horizon
by Lawrence D'Oliveiro 01 Jun '22

01 Jun '22

This report <https://www.theregister.com/2022/05/16/python_is_getting_faster/> on what is coming in CPython 3.11 and subsequent versions talks a lot about speed improvements. Several people have looked at removing the “GIL” (“Global Interpreter Lock”), which is the single biggest obstacle to improving multithreading performance. But some kind of lock is essential to maintain reference counting of dynamically-allocated objects. Get rid of these reference counts and you move to a Java-style pure-garbage-collected model, where you can end up consuming endless amounts of RAM unless you impose explicit limits on application size. But there is this new project called “nogil” (linked in the article). Their design overview document (hosted on Google Docs) talks about, not getting rid of reference counting, but implementing a more decentralized version of it, to minimize concurrency bottlenecks. This sounds quite hopeful.

1 1