- wlug - list.wlug.org.nz

Ubuntu 19.10: It’s fast, like “make old hardware feel new” fast
by Peter Reutemann 28 Nov '19

28 Nov '19

'Leaves are turning. Temperatures have dipped. These are sure signs—if you live in the Northern Hemisphere, at least—that Canonical's Autumn release is upon us. Things are a bit different in 2019, however. Not only is Ubuntu 19.10 nicknamed Eoan Ermine (no, I don't know how you pronounce it either), but it's the best non-LTS Ubuntu release Canonical has ever put out. I should qualify that statement somewhat, because really, as the newest version, it had damn well better be the best Ubuntu ever. But there's more than recency bias behind the sentiment. I've been reviewing Ubuntu for 10 years now, and I was using and interacting with this distro in some form or another for another three or four years before that. After spending recent weeks with Ubuntu 19.10, I can say confidently it is quite simply the best Ubuntu Canonical has ever released. The first reason I like 19.10 so much is that it feels insanely fast. Everyday tasks like opening applications, dragging windows, activating the search interface, and even just moving the cursor around are all noticeably faster than in 19.04. The speed boost is immediately noticeable from the minute you pop in the live CD, and it's even faster once you have 19.10 installed. I happened to be testing a top-of-the-line MacBook around the time I first installed the 19.10 beta on my aging Lenovo x240, and it instantly made the Mac feel like a sloth. Ubuntu 19.10 ran circles around the Mac even on much, much less powerful hardware, and nothing says success during testing like software that makes old hardware feel newer. Even if that were all you got out of Ubuntu 19.10, I'd call it a win.' -- source: https://arstechnica.com/gadgets/2019/11/ubuntu-19-10-quite-simply-the-best-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

tagging arbitrary files (not just mp3s) under Linux
by Peter Reutemann 26 Nov '19

26 Nov '19

Hi everyone After last night's AGM, I had a conversation with Rod regarding any Linux applications that allow tagging of arbitrary files (not just mp3s) to improve organizing them, similar to what Gmail introduced all those years ago. In the following reddit discussion: https://www.reddit.com/r/linux/comments/3mjwn5/do_any_popular_linux_file_sy… I came across the "TagSpaces" application (open source, AGPL), which seems to fit that bill: https://www.tagspaces.org/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

The strange tale of OneCoin
by Ian Young 26 Nov '19

26 Nov '19

Sorry if this is too wildly off topic but I was taken back by a story on the BBC from a day or two ago. https://www.bbc.com/news/stories-50435014

2 1

Passive-Cooling A Raspberry π 4
by Lawrence D'Oliveiro 26 Nov '19

26 Nov '19

Just came across this video <https://www.youtube.com/watch?v=VJC6OpGpq0Y>, latest in a series on cooling solutions for a Raspberry π 4. This instalment looks at a couple of purely passive, fanless products that use the case as a heat sink (or vice versa). But on top of that, a recent firmware update from Broadcom has made a massive difference to the running temperature in all the configurations. Summary: passive cooling worked quite well before the update, and now works even better.

1 0

The Librem 5 has been “shipping” for a month—but not to backers
by Peter Reutemann 26 Nov '19

26 Nov '19

'Purism announced that shipping of its Librem 5 open source smartphone began in late September. Two months later, nobody outside the company has a Librem 5, and people are getting restless. The Librem 5 is a crowdfunded project—and an ambitious one—so it wasn't much surprise or cause for concern when it missed its original January 2019 delivery target—or the April 2019 target set after January slipped. Both date changes were announced well ahead of time, and the company continued to post progress reports, commit code upstream, and assure backers of its commitment to transparency. (Full disclosure: I am a Librem 5 backer myself and am scheduled to receive a phone in the Evergreen batch.) The new delays are more troubling. On September 5, CEO Todd Weaver announced that the Librem 5 would ship in six iterative batches, codenamed Aspen, Birch, Chestnut, Dogwood, Evergreen, and Fir. The first three batches would effectively be usable prototypes of decreasing roughness; Evergreen would be the first entirely finished hardware production run, and Fir would be a relatively unspecified next-generation design.' -- source: https://arstechnica.com/gadgets/2019/11/the-librem-5-has-been-shipping-for-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Mozilla's Annual Buyer's Guide Rates Amazon and Google Security Cameras 'Very Creepy'
by Peter Reutemann 26 Nov '19

26 Nov '19

'"Be Smart. Shop Safe," warns Mozilla's annual buyer's guide for secure connected products. Based on their conversations with developers and dozens of privacy experts, they've awarded smiley faces with different expressions to rate products from "Not Creepy" up to "Super Creepy". "While the variety of smart devices on offer is rapidly increasing, so are the number of products that pay no heed to even basic security measures..." notes the editor of Mozilla's Internet Health Report. "Now that more and more companies collect personal data about you, including audio and video of your family, and sensitive biometric and health information, like your heart rate and sleeping habits, it's worrying that more are not upfront about the privacy and security of their products." Or, as The Next Web writes, "god bless Mozilla for having our lazy backs." And, well, if you're a user of any Ring camerasâ¦ we're sorry. Basically, there are five things that every product must do: - Have automatic security updates, so they're protected against the newest threats - Use encryption, meaning bad actors can't just snoop on your data - Include a vulnerability management pathway, which makes reporting bugs easy and, well, possible - Require users to change the default password (if applicable), because that makes devices far harder to access - Privacy policies -- ones that relate to the product specifically, and aren't just generic Doesn't seem too much to ask right...? Well, of the 76 devices Mozilla selected, 60 of them passed this test... And what devices didn't meet the criteria? There were nine of them overall (including the Artie 3000 Coding Robot and the Wemo Wifi Smart Dimmer), but the real loser in this test is the Amazon-owned Ring. Three of the company's products (which is effectively all of their major devices) didn't meet Mozilla's criteria. Yes, that's right, the Ring Video Doorbell, Ring Indoor Cam, and Ring Security Cam all didn't meet minimum standards for security.... The main reasons for not meeting this criteria is due Ring's history with poor encryption policies, and vulnerability management. To be fair, Nest Cam's Indoor and Outdoor Security Cameras and Google Home also fell into the "Very Creepy" category -- and so did Amazon's Echo smart speakers. (The Amazon Echo Show even made it into Mozilla's highest "Super Creepy" category, where the only other product was Facebook Portal.) But at least the Nest Hello Video doorbell only appears in Mozilla's "Somewhat Creepy" category. "Just because something on your wishlist this year connects to the internet, doesn't mean you have to compromise on privacy and security..." warns the editor of Mozilla's Internet Health Report. And in addition, "Fitness trackers designed for kids as young as 4 years old, raise questions about what we are teaching our children about how much digital surveillance in their lives is normal." Going forward, they suggest that we push for better privacy regulations -- and that whenever we rate products on performance and price, we should also rate them on their privacy and security. But in the meantime, as Mozilla explained on Twitter, "Friends don't let friends buy creepy gifts."' -- source: https://yro.slashdot.org/story/19/11/25/0415202 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Web Creator Tim Berners-Lee Launches Plan To 'Fix' the Internet
by Peter Reutemann 26 Nov '19

26 Nov '19

'Tim Berners-Lee, the creator of the World Wide Web, is officially launching his plan to "fix" the internet. From a report: The World Wide Web Foundation, a non-profit campaign group set up by Berners-Lee, has secured the backing of tech giants Facebook, Google and Microsoft for the scheme, dubbed the "contract for the web." The British computer scientist first outlined his vision to overhaul organizations' approach to the internet at the Web Summit event last year. At the time, he said the web was "at a tipping point." The contract calls on companies to respect consumers' data privacy and urges governments to ensure everyone has access to the internet. "Never before has the web's power for good been more under threat," Adrian Lovett, CEO of the World Wide Web Foundation, told CNBC in an interview Friday. He added that the rise of hateful content and fake news being propagated online meant something had to change. "We're launching the contract for the web for the world's first-ever global action plan to protect the web as a force for good, bringing together companies, governments and citizens from around the world to say these are the things that need to be done to put things back on the right track." Other organizations backing the contract include DuckDuckGo, Reddit, GitHub and Reporters Without Borders. One major component of the pledge is the requirement that the web remains an accessible tool for all users. Lovett said that, "despite the progress we've seen in getting the world connected, half the world doesn't have access." He said the contract comes with nine core principles, while underneath them is a total of 76 clauses. "Not every organization has to abide by all of them," he insisted. "A good number of those 76 will be relevant." Berners-Lee will deliver a speech in Berlin, Germany, on Monday where he is due to say the contract will serve as a blueprint for governments, companies and citizens to safeguard the web as a force for good. The World Wide Web Foundation says it is working with partners to develop tools that can measure progress on the contract's various clauses' -- source: https://yro.slashdot.org/story/19/11/25/1347233 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Zorin OS 15 Lite Linux Distro Can Rejuvenate Your Aging Windows PC
by Peter Reutemann 26 Nov '19

26 Nov '19

'Called "Zorin OS 15 Lite," it is not only lightweight, but thanks to the Xfce desktop environment and integrated Flatpak support, it should be quite familiar to those switching from Windows. In fact, the developers are intentionally targeting existing Windows 7 users, as Microsoft's operating system will be unsupported beginning January 2020. Zorin OS 15 Lite, in comparison, is based on Ubuntu 18.04 LTS and supported until 2023! It even comes with the very modern Linux kernel 5.0. "With Zorin OS 15 Lite, weâ(TM)ve condensed the full Zorin OS experience into a streamlined operating system, designed to run fast on computers as old as 15 years. With version 15, we've gone the extra mile to make the XFCE 4.14-based desktop feel familiar and user-friendly to new users, especially those moving away from Windows 7 leading up to the end of its support in January 2020. By pairing the most advanced and efficient software with a user-friendly experience, we've made it possible for anyone to extend the lifespan of their computers for years to come," explains the Zorin OS developers.' -- source: https://linux.slashdot.org/story/19/11/25/179256 Maybe worth a demo next year? Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The RIPE NCC Has Run Out of IPv4 Addresses
by Peter Reutemann 26 Nov '19

26 Nov '19

'The RIPE NCC, the regional internet registry for Europe, West Asia, and the former USSR, has allocated the final /22 remaining in their address pool, and has stated that they have now run out of IPv4 addresses. RIPE will continue to recover IPv4 addresses from organisations that go out of business, close, or that return them due to lack of need, but expects these small amounts of recovered IPv4 addresses to fall well short of demand: RIPE will now only assign IPv4 addresses to entities that have never received any IPv4 allocation in the past, and even then will assign no more than a /24. RIPE puts out a call to action for IPv6 migration: This event is another step on the path towards global exhaustion of the remaining IPv4 addressing space. In recent years, we have seen the emergence of an IPv4 transfer market and greater use of Carrier Grade Network Address Translation (CGNAT) in our region. There are costs and trade-offs with both approaches and neither one solves the underlying problem, which is that there are not enough IPv4 addresses for everyone. Without wide-scale IPv6 deployment, we risk heading into a future where the growth of our Internet is unnecessarily limited — not by a lack of skilled network engineers, technical equipment or investment -- but by a shortage of unique network identifiers. There is still a long way to go, and we call on all stakeholders to play their role in supporting the IPv6 roll-out.' -- source: https://tech.slashdot.org/story/19/11/25/1841256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux 5.4 Released
by Peter Reutemann 26 Nov '19

26 Nov '19

'Linux 5.4 has been released, featuring the new kernel lockdown mode, intended to strengthen the boundary between UID 0 and the kernel; virtio-fs, a high-performance virtio driver which allows a virtualized guest to mount a directory that has been exported on the host; fs-verity, for detecting file tampering, like dm-verity, but works on files rather than block devices; dm-clone, which allows live cloning of dm targets; two new madvise() flags for improved app memory management on Android, support for new Intel/AMD GPUs, support for the exfat file system and removing the experimental status of the erofs file system; a new haltpoll cpuidle driver and governor that greatly improves performance for virtualized guests wanting to do guest-side polling in the idle loop; and blk-iocost, a new cgroup controller that attempts to calculate more accurately the cost of IO. As always, many other new drivers and improvements can be found in the changelog.' -- source: https://tech.slashdot.org/story/19/11/25/1836212 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

NextCloud Linux Servers Targetted by NextCry Ransomware
by Peter Reutemann 25 Nov '19

25 Nov '19

'A new and particularly troublesome ransomware variant has been identified in the wild. Dubbed NextCry, this nasty strain of ransomware encrypts data on NextCloud Linux servers and has managed to evade the detection of public scanning platforms and antivirus engines. To make matters worse, there is currently no free decryption tool available for victims. Ransomware hunter and creator of ID Ransomware Michael Gillespie notes that the NextCry ransomware, which is a Python script compiled in a Linux ELF binary using pyInstaller, oddly uses Base64 to encode file names as well as the content of files which have already been encrypted. Gillespie has also confirmed that NextCry encrypts data using the AES algorithm with a 256-bit key. The ransom note that NextCry victims receive reads "READ_FOR_DECRYPT", and demands 0.025 BTC for a victim's files to be unlocked.' -- source: https://linux.slashdot.org/story/19/11/24/1845253 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New Tracking Prevention in Microsoft's Edge Will Hit Google the Hardest
by Peter Reutemann 25 Nov '19

25 Nov '19

'Microsoft's Edge browser is built on the same open source code as Google Chrome. But Ed Bott, writing for ZDNet, noticed something interesting: On January 15, 2020, Microsoft is scheduled to roll out a completely revamped Edge browser to the general public. That browser, which is available for beta testing now on all supported versions of Windows and MacOS, includes a feature called Tracking Prevention. If that name sounds familiar, you're not imagining things. Microsoft added a Tracking Protection feature to Internet Explorer 9, back in 2011; it used simple text files called Tracking Protection Lists (TPLs) to allow or block third-party requests from specific domains. That's the same general principle behind Tracking Prevention in the new Edge, but the implementation is more usable and more sophisticated, with multiple Trust Protection Lists taking the place of a single TPL. I've spent the past week looking closely at this feature... [A]lthough it's aimed at the online advertising and tracking industries in general, my tests suggest that its effects are likely to be felt most directly by one company: Google. Using the default Balanced setting, Tracking Prevention blocked a total of 2,318 trackers, or an average of 35 on each page. Of that total, 552 were from Google domains. That's a mind-boggling 23.8% of the total. To put that into perspective, the second entry on the list of blocked trackers was Facebook, which represented 3.8% of the total. Rather than an anti-Google conspiracy, the article suggests this is instead just a reflection of both Google's ubiquity and its business model. "Google Analytics and Google AdSense are embedded on a staggering number of web pages."' -- source: https://tech.slashdot.org/story/19/11/24/2055219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

AGM tomorrow
by Peter Reutemann 24 Nov '19

24 Nov '19

Hi everyone Just a friendly reminder that our AGM is on tomorrow: https://www.meetup.com/WaikatoLinuxUsersGroup/events/257884356/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Mint 19.2
by tom butz 23 Nov '19

23 Nov '19

Re: Linux Mint 19.2 The latest update ('new' package-manager) seems to disable Bluetooth. That also happened to me when I updated from 19.1 to 19.2 WITHOUT a complete reinstall. There are two workarounds: EITHER: back-up the whole system every night, and restore it if Bluetooth disappears again (=no icon in the panel after an update) - skipping updates. OR: use another system such as SparkyLinux, e.g. on a bootable sdcard for Bluetooth-transfers and stick with Mint 19.2 for anything else. I use this 'veteran' Linux because it features OpenShot 1.4 - my (favourite) moviemaker. My Toshiba laptop has 128 GB of RAM-HD, so copying/restoring to/from an image-file doesn't take all that long. Tom Butz

2 1

Server Management Recommendations
by Stu Meads 22 Nov '19

22 Nov '19

Hi all, I'm setting up a new Ubuntu 19.04LTS LAMP server in the next few months, I normally do it all myself, manage all the security myself etc, but I'm finding I don't have time and am looking for a reputable person or company to help me with initial setup, making sure everything is really secure, and be available for upgrades, security audits etc. My preference is a New Zealand based company in the hope that I will get a better quality service, easier communication etc, but will go for whatever's best for my employer Any recommendations either privately or via this list welcome

3 3

The Ad Tracker Arms Race Continues
by Lawrence D'Oliveiro 22 Nov '19

22 Nov '19

Web advertisers are resorting to a new technique <https://www.theregister.co.uk/2019/11/21/ublock_origin_firefox_unblockable_…> to bypass restrictions on third-party cookies for tracking users’ browsing behaviour: use first-party cookies instead. A detailed example can be found in this GitHub issue <https://github.com/uBlockOrigin/uBlock-issues/issues/780>: the site www.liberation.fr includes links to f7ds.liberation.fr, which is notionally under the same domain. However, that is actually a CNAME (alias) for the third-party tracker site liberation.eulerian.net. So cookies that are supposed to be restricted to *.liberation.fr are passed to that site as well. Just to be clear, this is not a browser “bug” by any means; it’s just part of how the DNS is supposed to work. The good news is, Firefox offers an API that adblocker addons can use to detect this sort of thing going on and stop it.

1 0

System76 Will Start Designing and Building Its Own Linux Laptops Beginning January 2020
by Peter Reutemann 21 Nov '19

21 Nov '19

'Denver-based PC manufacturer and Pop!_OS Linux developer System76 plans to follow-up its custom Thelio desktop PC with an in-house laptop beginning next year, according to founder and CEO Carl Richell. During a recent interview, Richell was quick to emphasize that the entire process of designing, prototyping and iterating the final product could take two to three years. But the company is eager to break into this market and put the same signature "stamp" on its laptop hardware that graces its custom-built Thelio desktop. System76 sells an extensive lineup of laptops, but the machines are designed by the likes of Sager and Clevo. The company doesn't merely buy a chassis and slap Pop!_OS on it, but Richell tells me he's confident that with the experience gained from developing Thelio -- and the recent investment into a factory at the company's Denver headquarters -- System76 is capable of building a laptop from the ground up that meets market needs and carries a unique value proposition. Richell says the company's first priority is locking down the aesthetic of the laptop and how various materials look and feel. It will simultaneously begin working on the supply chain aspects and speaking with various display and component manufacturers. System76 will design and build a U-class laptop first (basically an Ultrabook form factor like the existing Darter and Galago) and then evaluate what it might do with higher-end gaming and workstation notebooks with dedicated graphics.' -- source: https://hardware.slashdot.org/story/19/11/20/2241223 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

“Where the Wi-Fi sucks” is where a new wireless protocol does its magic
by Peter Reutemann 21 Nov '19

21 Nov '19

'Researchers at Brigham Young University have created a new RF protocol that runs on top of existing consumer Wi-Fi at significantly greater range. But before you get too excited, the protocol's bandwidth is extremely low—so much so that it makes LoRa look like an OC-24. The protocol, called ONPC—short for On-Off Noise Power Communication—currently only specifies a single bit per second. Although ONPC only conveys one bit per second of data, its range is 60m or more beyond Wi-Fi—and it runs in software alone, on unmodified Wi-Fi hardware. An ONPC device can connect to standard Wi-Fi when range permits, fall back to ONPC mode if the connection drops, and then re-connect to the Wi-Fi when it becomes available again.' -- source: https://arstechnica.com/gadgets/2019/11/where-the-wi-fi-sucks-is-where-a-ne… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google outlines plans for mainline Linux kernel support in Android
by Peter Reutemann 20 Nov '19

20 Nov '19

'It seems like Google is working hard to update and upstream the Linux kernel that sits at the heart of every Android phone. The company was a big participant in this year's Linux Plumbers Conference, a yearly meeting of the top Linux developers, and Google spent a lot of time talking about getting Android to work with a generic Linux kernel instead of the highly-customized version it uses now. It even showed an Android phone running a mainline Linux kernel. But first, some background on Android's current kernel mess.Currently, three major forks happen in between the "mainline" Linux kernel and a shipping Android device (note that "mainline" here has no relation to Google's own "Project Mainline"). First, Google takes the an LTS (Long Term Support) Linux kernel and turns it into the "Android Common kernel"—the Linux kernel with all the Android OS-specific patches applied. Android Common is shipped to the SoC vendor (usually Qualcomm) where it gets its first round of hardware-specific additions, first focusing on a particular model of SoC. This "SoC Kernel" then gets sent to a device manufacturer for even more hardware-specific code that supports every other piece of hardware, like the display, camera, speakers, usb ports, and any extra hardware. This is the "Device Kernel," and it's what actually ships on a device.' -- source: https://arstechnica.com/gadgets/2019/11/google-outlines-plans-for-mainline-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google and Samsung Fix Android Spying Flaw. Other Makers May Still Be Vulnerable
by Peter Reutemann 20 Nov '19

20 Nov '19

'Until recently, weaknesses in Android camera apps from Google and Samsung made it possible for rogue apps to record video and audio and take images and then upload them to an attacker-controlled server -- without any permissions to do so. Camera apps from other manufacturers may still be susceptible. From a report: The weakness, which was discovered by researchers from security firm Checkmarx, represented a potential privacy risk to high-value targets, such as those preyed upon by nation-sponsored spies. Google carefully designed its Android operating system to bar apps from accessing cameras and microphones without explicit permission from end users. An investigation published Tuesday showed it was trivial to bypass those restrictions. The investigation found that an app needed no permissions at all to cause the camera to shoot pictures and record video and audio. To upload the images and video -- or any other image and video stored on the phone -- to an attacker-controlled server, an app needed only permission to access storage, which is among one of the most commonly given usage rights. The weakness, which is tracked as CVE-2019-2234, also allowed would-be attackers to track the physical location of the device, assuming GPS data was embedded into images or videos. Google closed the eavesdropping hole in its Pixel line of devices with a camera update that became available in July. Checkmarx said Samsung has also fixed the vulnerability, although it wasn't clear when that happened. Checkmarx said Google has indicated that Android phones from other manufacturers may also be vulnerable. The specific makers and models haven't been disclosed.' -- source: https://tech.slashdot.org/story/19/11/19/1737219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The World's Fastest Supercomputers Hit Higher Speeds Than Ever With Linux
by Peter Reutemann 19 Nov '19

19 Nov '19

'In the latest Top 500 supercomputer ratings, the average speed of these Linux-powered racers is now an astonishing 1.14 petaflops. The fastest of the fast machines haven't changed since the June 2019 Top 500 supercomputer list. Leading the way is Oak Ridge National Laboratory's Summit system, which holds top honors with an HPL result of 148.6 petaflops. This is an IBM-built supercomputer using Power9 CPUs and NVIDIA Tesla V100 GPUs. In a rather distant second place is another IBM machine: Lawrence Livermore National Laboratory's Sierra system. It uses the same chips, but it "only" hit a speed of 94.6 petaflops. Close behind at No. 3 is the Sunway TaihuLight supercomputer, with an HPL mark of 93.0 petaflops. TaihuLight was developed by China's National Research Center of Parallel Computer Engineering and Technology (NRCPC) and is installed at the National Supercomputing Center in Wuxi. It is powered exclusively by Sunway's SW26010 processors. Sunway's followed by the Tianhe-2A (Milky Way-2A). This is a system developed by China's National University of Defense Technology (NUDT). It's deployed at the National Supercomputer Center in China. Powered by Intel Xeon CPUs and Matrix-2000 accelerators, it has a top speed of 61.4 petaflops. Coming at No. 5, the Dell-built, Frontera, a Dell C6420 system is powered by Intel Xeon Platinum processors. It speeds along at 23.5 petaflops. It lives at the Texas Advanced Computing Center of the University of Texas. The most powerful new supercomputer on the list is Rensselaer Polytechnic Institute Center for Computational Innovations (CCI)'s AiMOS. It made the list in the 25th position with 8.0 petaflops. The IBM-built system, like Summit and Sierra, is powered by Power9 CPUs and NVIDIA V100 GPUs. In closing, ZDNet's Steven J. Vaughan-Nichols writes: "Regardless of the hardware, all 500 of the world's fastest supercomputers have one thing in common: They all run Linux."' -- source: https://linux.slashdot.org/story/19/11/18/2128212 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Intel To Remove Old Drivers and BIOS Updates From Its Site
by Peter Reutemann 19 Nov '19

19 Nov '19

'By Friday this week, Intel plans to remove old drivers and BIOS updates from its official website. From a report: "This download, BIOS Update [BLH6710H.86A] 0163, will no longer be available after November 22, 2019 and will not be supported with any additional functional, security, or other updates," reads a message posted to the download page of one of the impacted components. "Intel recommends that users of BIOS Update [BLH6710H.86A] 0163 uninstall and/or discontinue use as soon as possible," the message continues. The downloads are drivers and BIOS updates for Intel desktop components and motherboards the company released in the 90s and early-to-mid 2000s. Downloads for hundreds of components are believed to have been impacted, from motherboards to NIC cards and graphics cards. Most of the drivers are for Windows versions like 98, ME, XP, and older Windows Server editions -- old Windows OS versions that have themselves reached end-of-life (EOL) All components and motherboards reached (EOL) years ago, and Intel stopped delivering firmware updates as a result. Its website was merely hosting the older files for convenience.' -- source: https://it.slashdot.org/story/19/11/18/1646210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft Announces Plan To Support DoH In Windows
by Peter Reutemann 19 Nov '19

19 Nov '19

'Microsoft's Core Network team just announced they plan on supporting DoH in the Windows resolver. In the blog post, the company writes: Providing encrypted DNS support without breaking existing Windows device admin configuration won't be easy. However, at Microsoft we believe that "we have to treat privacy as a human right. We have to have end-to-end cybersecurity built into technology." We also believe Windows adoption of encrypted DNS will help make the overall Internet ecosystem healthier. There is an assumption by many that DNS encryption requires DNS centralization. This is only true if encrypted DNS adoption isn't universal. To keep the DNS decentralized, it will be important for client operating systems (such as Windows) and Internet service providers alike to widely adopt encrypted DNS. With the decision made to build support for encrypted DNS, the next step is to figure out what kind of DNS encryption Windows will support and how it will be configured. Here are our team's guiding principles on making those decisions: Windows DNS needs to be as private and functional as possible by default without the need for user or admin configuration because Windows DNS traffic represents a snapshot of the user's browsing history. To Windows users, this means their experience will be made as private as possible by Windows out of the box. For Microsoft, this means we will look for opportunities to encrypt Windows DNS traffic without changing the configured DNS resolvers set by users and system administrators. Privacy-minded Windows users and administrators need to be guided to DNS settings even if they don't know what DNS is yet. Many users are interested in controlling their privacy and go looking for privacy-centric settings such as app permissions to camera and location but may not be aware of or know about DNS settings or understand why they matter and may not look for them in the device settings. Windows users and administrators need to be able to improve their DNS configuration with as few simple actions as possible. We must ensure we don't require specialized knowledge or effort on the part of Windows users to benefit from encrypted DNS. Enterprise policies and UI actions alike should be something you only have to do once rather than need to maintain. Windows users and administrators need to explicitly allow fallback from encrypted DNS once configured. Once Windows has been configured to use encrypted DNS, if it gets no other instructions from Windows users or administrators, it should assume falling back to unencrypted DNS is forbidden.' -- source: https://yro.slashdot.org/story/19/11/18/1929229 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

WLUG AGM next week
by Peter Reutemann 18 Nov '19

18 Nov '19

Hi everyone Just a friendly reminder that our AGM is on next week on Monday, with the current agenda: - President's Report - Treasurer's Report - Election of 2020 Committee - Move AGM to January (after financial year ends) to have a complete treasurer's report for AGM - Alternatives to meetup.com due to payment changes - General business - Consumption of pizza Details (location etc): https://www.meetup.com/WaikatoLinuxUsersGroup/events/257884356/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Why Firefox Fights for the Future of the Web
by Peter Reutemann 18 Nov '19

18 Nov '19

'"Mozilla is no longer fighting for market share of its browser: it is fighting for the future of the web," writes the Guardian, citing Mozilla Project co-founder Mitchell Baker: Baker's pitch is that only Mozilla is motivated, first and foremost, to make using the web a pleasurable experience. Google's main priority is to funnel user data into the enormous advertising engine that accounts for most of its revenue. Apple's motivation is to ensure that customers continue to buy a new iPhone every couple of years and don't switch to Android...." Firefox now runs sites such as Facebook in "containers", effectively hiving the social network off into its own little sandboxed world, where it can't see what's happening on other sites. Baker says: "It reduces Facebook's ability to follow you around the web and track you when you're not on Facebook and just living your life...." Mozilla has launched Monitor, a data-breach reporting service; Lockwise, a password manager; and Send, a privacy-focused alternative to services such as WeSendit. It's also beta-testing a VPN (virtual private network) service, which it hopes to market to privacy-conscious users... Apple's iOS (mobile operating system) is an acknowledged disaster for Mozilla. Safari is the default and, while users can install other browsers, they come doubly hindered: they can never be set as the default, meaning any link clicked in other applications will open in Safari; and they must use Safari's "rendering engine", a technical limitation that means that even the browsers that Firefox does have on the platform are technically just fancy wrappers for Apple's own browser, rather than full versions of the service that Mozilla has built over the decades... "Even if you do download a replacement, iOS drops you back into the default. I don't know why that's acceptable. Every link you open on a phone is the choice of the phone maker, even if you, as a user, want something else." Summarizing Baker's concerns, the Guardian writes that "It is perfectly possible to build a browser that prevents advertising companies from aggregating user data. But it is unlikely that any browser made by an advertising company would offer such a feature..." And an activist for the Small Technology Foundation tells them that Google "wants the web to go through Google. It already mostly does: with eyes on 70% to 80% of the web."' -- source: https://news.slashdot.org/story/19/11/17/1614222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0