- wlug - list.wlug.org.nz

Re: [wlug] FreeBSD's New Code of Conduct
by William Mckee 27 Feb '18

27 Feb '18

virtual contact! none of that. more sjw bs. cheers, william. On 21/02/2018 7:08 pm, "Lawrence D'Oliveiro" <ldo(a)geek-central.gen.nz> wrote: On Sun, 18 Feb 2018 11:25:31 +1300, Peter Reutemann quoted: > '> Physical contact and simulated physical contact (e.g., textual > descriptions like "hug" or "backrub") without consent or after a > request to stop.' From <http://www.theregister.co.uk/2018/02/21/freebsd_code_of_ conduct_controversy/>: OpenSUSE board member and YouTuber Bryan Lunduke has used his YouTube channel <https://www.youtube.com/watch?v=SxNdQJSlg54> to ask if FreeBSD also wants to regulate virtual high fives or fist bumps. Lunduke's video is a rather more polite expression of comments found in corners of the Internet where gender politics is derided and debate is sometimes infamously uncivil. _______________________________________________ wlug mailing list | wlug(a)list.waikato.ac.nz Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug

2 1

Mozilla Removes Individual Cookie Management in Firefox 60
by Peter Reutemann 26 Feb '18

26 Feb '18

'The most recent version of Firefox Nightly, currently at version 60, comes with changes to Firefox's cookie management. Mozilla merged cookie settings with site data in the web browser which impacts how you configure and manage cookie options. If you run Firefox 59 or earlier, you can load about:preferences#privacy to manage privacy related settings in Firefox. If you set the history to "use custom settings for history" or "remember history", you get an option manage cookie settings and to remove individual cookies from Firefox. A click on the link or button opens a new browser window in which all set cookies are listed. You can use it to find set cookies, look up information, remove selected or all cookies. Mozilla engineers changed this in recent versions of Firefox 60 (currently on the Nightly channel).' -- source: https://news.slashdot.org/story/18/02/26/1853203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Firefox - turning off processes per tab
by Peter Reutemann 26 Feb '18

26 Feb '18

Hi everyone In case you don't like Firefox's new feature of separating tabs into separate processes (far more resource hungry), change the following setting in "about:config" to "false": browser.tabs.remote.auto Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

OpenBSD Releases Meltdown Patch
by Peter Reutemann 25 Feb '18

25 Feb '18

'OpenBSD's Meltdown patch has landed, in the form of a Version 11 code update that separates user memory pages from the kernel's -- pretty much the same approach as was taken in the Linux kernel. From a report: A few days after the Meltdown/Spectre bugs emerged in January, OpenBSD's Phillip Guenther responded to user concerns with a post saying the operating system's developers were working out what to do. Now he's revealed the approach used to fix the free OS: "When a syscall, trap, or interrupt takes a CPU from userspace to kernel the trampoline code switches page tables, switches stacks to the thread's real kernel stack, then copies over the necessary bits from the trampoline stack. On return to userspace the opposite occurs: recreate the iretq frame on the trampoline stack, switch stack, switch page tables, and return to userspace." That explanation is somewhat obscure to non-developers, but there's a more readable discussion of what the project's developers had in mind from January, here.' -- source: https://it.slashdot.org/story/18/02/23/1519245 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Botched npm Update Crashes Linux Systems, Forces Users to Reinstall
by Peter Reutemann 22 Feb '18

22 Feb '18

'A bug in npm (Node Package Manager), the most widely used JavaScript package manager, will change ownership of crucial Linux system folders, such as /etc, /usr, /boot. Changing ownership of these files either crashes the system, various local apps, or prevents the system from booting, according to reports from users who installed npm v5.7.0. -- the buggy npm update. Users who installed this update -- mostly developers and software engineers -- will likely have to reinstall their system from scratch or restore from a previous system image.' -- source: https://it.slashdot.org/story/18/02/22/2034213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ricoh MP C3003 or similar wanted
by Gregory Machin 22 Feb '18

22 Feb '18

Hi, This is very off topic. I'm working on script (currently powershell, my port to python)to manage (backup and restore) the addess book on Ricoh printers. The idea is to be able to manage large number of printers address books. I'm looking for a printer I can use for my dev work. It I don't care if the printer or scanner are faulty just need to brains to be functional. If anyone has such I could have or loan for a couple of months, that would be great. If not all good. Many thanks G

1 0

Google To Cease “Offshoring” Local Revenue
by Lawrence D'Oliveiro 21 Feb '18

21 Feb '18

Wonder of wonders <http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11999548>: Government moves to crack down on tax avoidance by multinational firms are already bearing fruit, with Google telling Parliament it will no longer funnel New Zealand revenues via low-tax jurisdictions such as Singapore. ... The practice saw Google's New Zealand subsidiary provide only services as part of the sales process - paying just $356,000 in tax on only $12.2m in revenue. Estimates of Google's sales revenue from New Zealand range in the hundreds of millions of dollars annually.

1 0

uTorrent Client Affected by Some Pretty Severe Security Flaws
by Peter Reutemann 21 Feb '18

21 Feb '18

'A Google security researcher has found multiple security flaws affecting the uTorrent web and desktop client that allow an attacker to infect a victim with malware or collect data on the users' past downloads, reports BleepingComputer. From the report: The vulnerabilities have been discovered by Google Project Zero security researcher Tavis Ormandy, and they impact uTorrent Web, a new web-based version of the uTorrent BitTorrent client, and uTorrent Classic, the old uTorrent client that most people know. Ormandy says that both uTorrent clients are exposing an RPC server -- on port 10000 (uTorrent Classic) and 19575 (uTorrent Web). The expert says that attackers can hide commands inside web pages that interact with this open RPC server. The attacker only needs to trick a user with a vulnerable uTorrent client to access a malicious web page. Furthermore, the uTorrent clients are also vulnerable to DNS rebinding -- a vulnerability that allows the attacker to legitimize his requests to the RPC server.' -- source: https://it.slashdot.org/story/18/02/21/180206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Intel Has a New Spectre and Meltdown Firmware Patch For You To Try Out
by Peter Reutemann 21 Feb '18

21 Feb '18

'The Spectre/Meltdown debacle continues to rumble on, and now the chip manufacturer has announced the availability of a new 'microcode solution' to the vulnerability. The updated firmware applies to 6th, 7th and 8th Generation Intel Core devices, and the release sees the company crossing its fingers and hoping that everything works out this time. This is Intel's second attempt at patching the vulnerability, and this time around both the company and its customers will be praying that the fix for Skylake, Kaby Lake and Coffee Lake chips actually does the job.' -- source: https://it.slashdot.org/story/18/02/21/186257 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

FreeBSD's New Code of Conduct
by Peter Reutemann 21 Feb '18

21 Feb '18

'FreeBSD has a new code of conduct, which is making several people angry. From the blog post: This code of conduct applies to all spaces used by the FreeBSD Project, including our mailing lists, IRC channels, and social media, both online and off. Anyone who is found to violate this code of conduct may be sanctioned or expelled from FreeBSD Project controlled spaces at the discretion of the FreeBSD Code of Conduct Committee. Participants are responsible for knowing and abiding by these rules. Harassment includes but is not limited to: Comments that reinforce systemic oppression related to gender, gender identity and expression, sexual orientation, disability, mental illness, neurodiversity, physical appearance, body size, age, race, or religion. Unwelcome comments regarding a person's lifestyle choices and practices, including those related to food, health, parenting, drugs, and employment. Deliberate misgendering. Deliberate use of "dead" or rejected names. Gratuitous or off-topic sexual images or behaviour in spaces where they're not appropriate. Physical contact and simulated physical contact (e.g., textual descriptions like "hug" or "backrub") without consent or after a request to stop. Threats of violence. Incitement of violence towards any individual, including encouraging a person to commit suicide or to engage in self-harm. Deliberate intimidation. Stalking or following. Harassing photography or recording, including logging online activity for harassment purposes. Sustained disruption of discussion. Unwelcome sexual attention. Pattern of inappropriate social contact, such as requesting/assuming inappropriate levels of intimacy with others. Continued one-on-one communication after requests to cease. Deliberate "outing" of any private aspect of a person's identity without their consent except as necessary to protect vulnerable people from intentional abuse. Publication of non-harassing private communication without consent. Publication of non-harassing private communication with consent but in a way that intentionally misrepresents the communication (e.g., removes context that changes the meaning). Knowingly making harmful false claims about a person.' -- source: https://yro.slashdot.org/story/18/02/17/0826206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1