- wlug - list.wlug.org.nz

New Silex Malware is Bricking IoT Devices, Has Scary Plans
by Peter Reutemann 25 Jun '19

25 Jun '19

'A new strain of malware is wiping the firmware of IoT devices in attacks reminiscent of the old BrickerBot malware that destroyed millions of devices back in 2017. From a report: Named Silex, this malware began operating earlier today, about three-four hours before this article's publication. The malware had bricked around 350 devices when this reporter began investigating its operations, and the number quickly spiked to 2,000 wiped devices by the time we published, an hour later. Attacks are still ongoing, and according to an interview with the malware's creator, they are about to intensify in the coming days. According to Akamai researcher Larry Cashdollar, who first spotted the malware earlier today, Silex works by trashing an IoT device's storage, dropping firewall rules, removing the network configuration, and then halting the device. It's as destructive as it can get without actually frying the IoT device's circuits. To recover, victims must manually reinstall the device's firmware, a task too complicated for the majority of device owners' -- source: https://tech.slashdot.org/story/19/06/25/2018218 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu Reverses Decision, Says It Will Continue To Support 32-bit Packages
by Peter Reutemann 25 Jun '19

25 Jun '19

'Canonical has issued a statement on Ubuntu's 32-bit future, saying it will continue to build and maintain a 32-bit archive going forward. >From a report: Of course, there was some negativity surrounding the decision -- as is common with everything in the world today. In particular, developers of WINE were upset, since their Windows compatibility layer depends on 32-bit, apparently. In a statement, Canonical said: "Thanks to the huge amount of feedback this weekend from gamers, Ubuntu Studio, and the WINE community, we will change our plan and build selected 32-bit i386 packages for Ubuntu 19.10 and 20.04 LTS. We will put in place a community process to determine which 32-bit packages are needed to support legacy software, and can add to that list post-release if we miss something that is needed. Community discussions can sometimes take unexpected turns, and this is one of those. The question of support for 32-bit x86 has been raised and seriously discussed in Ubuntu developer and community forums since 2014. That's how we make decisions."' -- source: https://linux.slashdot.org/story/19/06/24/1826241 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Raspberry Pi 4 Featuring Faster CPU, Up To 4GB of RAM Launched
by Peter Reutemann 25 Jun '19

25 Jun '19

'Raspberry Pi today introduced a new version of its popular line of single-board computer. The Raspberry Pi 4 Model B is the fastest Raspberry Pi ever, with the company promising "desktop performance comparable to entry-level x86 PC systems." The specifications are: A 1.5GHz quad-core 64-bit ARM Cortex-A72 CPU (~3x performance); 1GB, 2GB, or 4GB of LPDDR4 SDRAM; full-throughput Gigabit; Ethernet; dual-band 802.11ac wireless networking; Bluetooth 5.0; two USB 3.0 and two USB 2.0 ports; dual monitor support, at resolutions up to 4K; VideoCore VI graphics, supporting OpenGL ES 3.x; 4Kp60 hardware decode of HEVC video; and complete compatibility with earlier Raspberry Pi products. It starts at $35.' -- source: https://hardware.slashdot.org/story/19/06/24/141229 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

Resilient?
by Ian Young 24 Jun '19

24 Jun '19

Alas several attempts to unzip the Resilient desktop file have failed - never got as far as trying to write a USB. Mostly failure was silent - Engampra and File Roller. Ark in KDE did condescend to say 'Failed to write data for entry'. ~ Ian Y

2 1

Potent Firefox 0-day used to install undetected backdoors on Macs
by Peter Reutemann 23 Jun '19

23 Jun '19

'Hackers exploited a pair of potent zero-day vulnerabilities in Firefox to infect Mac users with a largely undetected backdoor, according to accounts pieced together from multiple people. Mozilla released an update on Tuesday that fixed a code-execution vulnerability in a JavaScript programming method known as Array.pop. On Thursday, Mozilla issued a second patch fixing a privilege-escalation flaw that allowed code to break out of a security sandbox that Firefox uses to prevent untrusted content from interacting with sensitive parts of a computer operating system. Interestingly, a researcher at Google's Project Zero had privately reported the code-execution flaw to Mozilla in mid April. On Monday, as Mozilla was readying a fix for the array.pop flaw, unknown hackers deployed an attack that combined working exploits for both vulnerabilities. The hackers then used the attack against employees of Coinbase, according to Philip Martin, chief information security officer for the digital currency exchange.' -- source: https://arstechnica.com/information-technology/2019/06/potent-firefox-0day-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Re: [wlug] Chrome 'Has Become Surveillance Software. It's Time to Switch'
by mailinglist 23 Jun '19

23 Jun '19

I thought Chrome being an extension of Google was fairly obvious.The thing I don't understand is why duck duck go and Firefox are free.Sent from my Samsung Galaxy smartphone.-------- Original message --------From: Peter Reutemann <fracpete(a)waikato.ac.nz> Date: 23/06/2019 10:49 (GMT+12:00) To: wlug List <wlug(a)list.waikato.ac.nz> Subject: [wlug] Chrome 'Has Become Surveillance Software. It's Time to Switch' '"You open your browser to look at the Web. Do you know who is lookingback at you?" warns Washington Post technology columnist Geoffrey A.Fowler:Over a recent week of Web surfing, I peered under the hood of GoogleChrome and found it brought along a few thousand friends. Shopping,news and even government sites quietly tagged my browser to let ad anddata companies ride shotgun while I clicked around the Web. This wasmade possible by the Web's biggest snoop of all: Google. Seen from theinside, its Chrome browser looks a lot like surveillance software...My tests of Chrome vs. Firefox unearthed a personal data caper ofabsurd proportions. In a week of Web surfing on my desktop, Idiscovered 11,189 requests for tracker "cookies" that Chrome wouldhave ushered right onto my computer but were automatically blocked byFirefox. These little files are the hooks that data firms, includingGoogle itself, use to follow what websites you visit so they can buildprofiles of your interests, income and personality... And that's notthe half of it. Look in the upper right corner of your Chrome browser.See a picture or a name in the circle? If so, you're logged in to thebrowser, and Google might be tapping into your Web activity to targetads. Don't recall signing in? I didn't, either. Chrome recentlystarted doing that automatically when you use Gmail.Chrome is even sneakier on your phone. If you use Android, Chromesends Google your location every time you conduct a search. (If youturn off location sharing it still sends your coordinates out, justwith less accuracy.)The columnist concludes that "having the world's biggest advertisingcompany make the most popular Web browser was about as smart asletting kids run a candy shop," and argues that through itsDoubleclick and other ad businesses, Google "is the No. 1 cookie maker-- the Mrs. Fields of the web."He also reports that Firefox is now working on ways to block browser"fingerprintin'-- source: https://news.slashdot.org/story/19/06/21/1922233Cheers, Peter-- Peter ReutemannDept. of Computer ScienceUniversity of Waikato, NZ+64 (7) 858-5174http://www.cms.waikato.ac.nz/~fracpete/http://www.data-mining.co.nz/_______________________________________________wlug mailing list | wlug(a)list.waikato.ac.nzUnsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug

1 0

Chrome 'Has Become Surveillance Software. It's Time to Switch'
by Peter Reutemann 22 Jun '19

22 Jun '19

'"You open your browser to look at the Web. Do you know who is looking back at you?" warns Washington Post technology columnist Geoffrey A. Fowler: Over a recent week of Web surfing, I peered under the hood of Google Chrome and found it brought along a few thousand friends. Shopping, news and even government sites quietly tagged my browser to let ad and data companies ride shotgun while I clicked around the Web. This was made possible by the Web's biggest snoop of all: Google. Seen from the inside, its Chrome browser looks a lot like surveillance software... My tests of Chrome vs. Firefox unearthed a personal data caper of absurd proportions. In a week of Web surfing on my desktop, I discovered 11,189 requests for tracker "cookies" that Chrome would have ushered right onto my computer but were automatically blocked by Firefox. These little files are the hooks that data firms, including Google itself, use to follow what websites you visit so they can build profiles of your interests, income and personality... And that's not the half of it. Look in the upper right corner of your Chrome browser. See a picture or a name in the circle? If so, you're logged in to the browser, and Google might be tapping into your Web activity to target ads. Don't recall signing in? I didn't, either. Chrome recently started doing that automatically when you use Gmail. Chrome is even sneakier on your phone. If you use Android, Chrome sends Google your location every time you conduct a search. (If you turn off location sharing it still sends your coordinates out, just with less accuracy.) The columnist concludes that "having the world's biggest advertising company make the most popular Web browser was about as smart as letting kids run a candy shop," and argues that through its Doubleclick and other ad businesses, Google "is the No. 1 cookie maker -- the Mrs. Fields of the web." He also reports that Firefox is now working on ways to block browser "fingerprintin' -- source: https://news.slashdot.org/story/19/06/21/1922233 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Mattermost Raises $50 Million For Its Open Source Slack Alternative
by Peter Reutemann 22 Jun '19

22 Jun '19

'Mattermost, a startup developing what it characterizes as an open source messaging alternative to Google's Hangouts Chat, Atlassian's HipChat, Slack, and Microsoft Teams, today announced the closure of a $50 million series B funding round. The round was led by Y Combinator's Continuity Fund, with participation from new investor Battery Ventures, as well as existing investors Redpoint and S28 Capital. The capital infusion follows a $20 million series A in February and a $3.5 million seed round in February 2017 and brings the Palo Alto, California-based company's total raised to roughly $70 million. As part of the round, Twitter COO Ali Rowghani will join Mattermost as board director and Battery Ventures' Neeraj Agarwal will join as a board observer. The raise comes as monthly downloads of the open source project pass 10,000. To date, more than 1,000 contributors have helped translate Mattermost into 16 languages.' -- source: https://news.slashdot.org/story/19/06/22/0243233 Haven't even heard of Mattermost before... In terms of "Slack": "Should Slack-Like Chat Clients Replace Email?" https://tech.slashdot.org/story/19/06/21/2233229 Personally, I'm not a fan of chat, as it is even more disruptive than email. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

China Has Almost Half of The World's Supercomputers, Explores RISC-V and ARM
by Peter Reutemann 22 Jun '19

22 Jun '19

'Ten years ago, China had 21 systems on the Top500 list of the world's largest supercomputing systems. It now has 219, according to the biannual listing, which was updated just this week. At its current pace of development, China may have half of the supercomputing systems on the Top500 list by 2021.... U.S. supercomputers make up 116 of the latest Top500 list. Despite being well behind China in total system count, the U.S. leads in overall performance, as measured by the High Performance Linpack (HPL) benchmark. The HPL benchmark is used to solve linear equations. The U.S. has about 38% of the aggregate Top500 list performance. China is in second, at nearly 30% of the performance total. But this performance metric has flip-flopped between China and the U.S., because it's heavily weighted by the largest systems. The U.S. owns the top two spots on the latest Top500 list, thanks to two IBM supercomputers at U.S. national laboratories. These systems, Summit and Sierra, alone, represent 15.6% of the HPL performance measure. Nathan Brookwood, principal analyst at Insight 64, says China is concerned the U.S. may limit its x86 chip imports, and while China may look to ARM, they're also investigating the RISC-V processor architecture. Paresh Kharya, director of product marketing at Nvidia, tells Tech Target "We expect x86 CPUs to remain dominant in the short term. But there's growing interest in ARM for supercomputing, as evidenced by projects in the U.S., Europe and Japan. Supercomputing centers want choice in CPU architecture.' -- source: https://tech.slashdot.org/story/19/06/22/1617211 Looks like such sanctions would backfire for US companies, by losing major customers for their products. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Coincidence Of The Week (Or Not?)
by Lawrence D'Oliveiro 21 Jun '19

21 Jun '19

Just reading through this announcement <https://www.theregister.co.uk/2019/06/21/facebook_pyrobot/> of a new Python framework from Facebook called PyRobot, built on top of ROS (the Robot Operating System). Which led me to thinking of the origin of the word “robot”, which comes from a play by Karel Čapek, called “Rossum’s Universal Robots”, from 1920. And the original mastermind behind Python is named Guido van Rossum. And so another circle closes ...

1 0