- wlug - list.wlug.org.nz

Rocky Linux gets a parent company, with $4m Series A funding
by Peter Reutemann 29 Jan '21

29 Jan '21

'Gregory Kurtzer, co-founder of the now-defunct CentOS Linux distribution, has founded a new startup company called Ctrl IQ, which will serve in part as a sponsoring company for the upcoming Rocky Linux distribution. Rocky Linux is to be a beneficiary of Ctrl IQ's revenue, not its source—the company describes itself in its announcement as the suppliers of a "full technology stack integrating key capabilities of enterprise, hyper-scale, cloud and high-performance computing."' -- source: https://arstechnica.com/gadgets/2021/01/rocky-linux-gets-a-parent-company-w… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

GitLab Reshuffles Its Paid Subscription Plans, Drops Its Bronze/Starter Tier
by Peter Reutemann 28 Jan '21

28 Jan '21

'GitLab, the increasingly popular DevOps platform, today announced a major update to its subscription model. The company is doing away with its $4/month Bronze/Starter package. Current users will be able to renew one more time at the existing price or move to a higher tier (and receive a significant discount for the first three years after they do so). The company's free tier, it is worth noting, is not going away and GitLab argues that it includes "89% of the features in Bronze/Starter." To ease the pain, Bronze users will be able to renew their existing subscription before January 26, 2022 for an additional year at the existing price. They can also opt to move to the Premium tier at a discounted price for the next three years, starting at $6/user/month in Year 1, but that price then goes up to $9/user/month and $15/user/month in Year 2 and 3 respectively. For new users, the Bronze package is no longer available, starting now. With this change, GitLab now offers three tiers: Free, Premium and Ultimate (it's also doing away with the "Silver/Premium" and "Gold/Ultimate" naming). "The Bronze tier, we were selling at a loss," GitLab founder and CEO Sid Sijbrandij told TechCrunch. "We were just losing money every time we sold it -- just on hosting and support. To be a sustainable business, this was a move we had to make. It's a big transition for our customers but we want to make sure we're a sustainable company and we can keep investing."' -- source: https://tech.slashdot.org/story/21/01/27/215226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Reddit 1: Wall Street 0
by Lawrence D'Oliveiro 28 Jan '21

28 Jan '21

Something very peculiar happened last week: a group of small-time stock traders who hang out on Reddit took on a well-funded Wall Street money manager, and won. What happened was, a company called Melvin Capital took out a “short position” on shares in GameStop--that is, they put money on a bet that the stock value would go down. The Redditors (part of a subreddit called “wallstreetbets”) figured out that this position was vulnerable, and bet against it by buying up GameStop shares. This drove up the price, forcing Melvin to either put up or shut up--put up a bunch of money to back up their position, or give up and lose an even bigger bunch of money. In other words, Melvin was caught in a “short squeeze”, which drove it to the verge of bankruptcy. A good, clear intro to the whole story is here <https://arstechnica.com/gaming/2021/01/the-complete-morons-guide-to-gamesto…>. A less-easy-to-understand analysis, with links to further articles, is here <https://www.aljazeera.com/economy/2021/1/27/bbgamestop-how-day-trader-reddi…>.

1 0

10-year-old Sudo Bug Lets Linux Users Gain Root-Level Access
by Peter Reutemann 28 Jan '21

28 Jan '21

'A major vulnerability impacting a large chunk of the Linux ecosystem has been patched today in Sudo, an app that allows admins to delegate limited root access to other users. From a report: The vulnerability, which received a CVE identifier of CVE-2021-3156, but is more commonly known as "Baron Samedit," was discovered by security auditing firm Qualys two weeks ago and was patched earlier today with the release of Sudo v1.9.5p2. In a simple explanation provided by the Sudo team today, the Baron Samedit bug can be exploited by an attacker who has gained access to a low-privileged account to gain root access, even if the account isn't listed in /etc/sudoers -- a config file that controls which users are allowed access to su or sudo commands in the first place.' -- source: https://linux.slashdot.org/story/21/01/27/1820205 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google Play Bans Video App For Standard “.ass” Subtitle Support
by Lawrence D'Oliveiro 27 Jan '21

27 Jan '21

libass <https://github.com/libass/libass> is an open-source library for decoding the .ass/.ssa subtitle formats for video files. However, the automated censor-bot in the Google Play Store decided that an app supporting this format was violating the “Sexual Content and Profanity Policy”, and suspended it. The app was only reinstated after an appeal. <https://arstechnica.com/gadgets/2021/01/googles-bots-decide-ass-subtitle-su…>

1 0

Browser Makers Launch New Project For Writing Documentation For Web APIs
by Peter Reutemann 26 Jan '21

26 Jan '21

'A coalition of tech companies announced today the launch of Open Web Docs, a new initiative to help write documentation for Web APIs, JavaScript, and other web tooling and platforms. From a report: The new project does not view itself as a replacement for MDN Web Docs, a website hosted by Mozilla, where all browser makers agreed to move the official Web API documentation back in October 2017, and stop developing their own, often diverging, documentation sites. Instead, in a press release and FAQ today, the Open Web Docs team said their role is to fund, coordinate, and contribute to MDN Docs going forward. The new initiative comes after Mozilla laid off 250 employees last summer, including many of its MDN Web Docs staff. Open Web Docs comes to fill this void and provide the labor force needed to continue updating the MDN Web Docs portal.' -- source: https://tech.slashdot.org/story/21/01/25/216208 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Hacker Leaks Data of 2.28 Million Dating Site Users
by Peter Reutemann 26 Jan '21

26 Jan '21

'ZDNet: A well-known hacker has leaked the details of more than 2.28 million users registered on MeetMindful.com, a dating website founded in 2014, ZDNet has learned this week from a security researcher. The dating site's data has been shared as a free download on a publicly accessible hacking forum known for its trade in hacked databases. The leaked data, a 1.2 GB file, appears to be a dump of the site's users database. The content of this file includes a wealth of information that users provided when they set up profiles on the MeetMindful site and mobile apps. Some of the most sensitive data points included in the file include: Real names; Email addresses; City, state, and ZIP details; Body details; Dating preferences; Marital status; Birth dates; Latitude and longitude; IP addresses; Bcrypt-hashed account passwords; Facebook user IDs; and Facebook authentication tokens. Messages exchanged by users were not included in the leaked file; however, this does not make the entire incident less sensitive. The data leak, which is still available for download, was released by a threat actor who goes by the name of ShinyHunters. They also were responsible for leaking the details of millions of users registered on Teespring. ' -- source: https://yro.slashdot.org/story/21/01/25/2124226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Fedora’s Chromium Maintainer Suggests Switching To Firefox
by Lawrence D'Oliveiro 26 Jan '21

26 Jan '21

Google is withdrawing access to certain of its service APIs that were formerly available to open-source Chromium builds, reserving them for its own proprietary Chrome product. In response, the maintainer for Fedora’s Chromium package says he is no longer sure of the value of Chromium, and is recommending users switch to Firefox instead. But then again, some are seeing the removal of Google APIs as an improvement. <https://www.theregister.com/2021/01/25/use_firefox_fedora_chromium_maintain…>

1 0

AGM minutes
by Peter Reutemann 26 Jan '21

26 Jan '21

Hi everyone The minutes of last night's AGM are now available: http://wiki.wlug.org.nz/MeetingTopics.2021-01-25 Thanks everyone for attending and the lively discussions. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Back To School: Technology, Stationery Costs Can Leave Parents In Debt
by Lawrence D'Oliveiro 26 Jan '21

26 Jan '21

Time was, you just needed to make sure your child had exercise books for school. Now they have to have a Chromebook, or maybe an Apple Mac or Ipad if that’s what their school uses. <https://www.nzherald.co.nz/nz/back-to-school-technology-stationery-costs-ca…>

1 0