- wlug - list.wlug.org.nz

Anypaste – Share And Upload Files To Compatible Hosting Sites Automatically
by Peter Reutemann 30 Oct '17

30 Oct '17

'A while ago, we have written a guide about Transfer.sh which allows you to share files over Internet from command-line. Today, we will see yet another file sharing utility called Anypaste. It is a simple script to share and upload files to compatible hosting sites depending upon the type of the files, automatically. You don’t need to manually log in to the hosting sites and upload or share your files. Anypaste will pick the right hosting sites depends upon the type of the file you want to upload. To put this simply, photos will get uploaded to image hosting sites, videos to video sites, code to pastebins. Cool, yeah? Anypaste is completely free, open source and light-weight script and you can do everything from command line. You don’t need to depend on any heavy, memory-consuming GUI apps to upload and share files.' -- source: https://www.ostechnix.com/anypaste-share-upload-files-compatible-hosting-si… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Purism Now Offers Laptops with Intel's 'Management Engine' Disabled
by Peter Reutemann 29 Oct '17

29 Oct '17

' "San Francisco company Purism announced that they are now offering their Librem laptops with the Intel Management Engine disabled," writes Slashdot reader boudie2. Purism describes Management Engine as "a separate CPU that can run and control a computer even when powered off." HardOCP reports that Management Engine "is widely despised by security professionals and privacy advocates because it relies on signed and secret Intel code, isn't easily alterable, isn't fully documented, and has been found to be vulnerable to exploitation... In short, it's a tiny potentially hackable computer in your computer that you cannot totally control, nor opt-out of, but it can totally control your system." Purism writes: Disabling the Management Engine is no easy task, and it has taken security researchers years to find a way to properly and verifiably disable it. Purism, because it runs coreboot and maintains its own BIOS firmware update process, has been able to release and ship coreboot that disables the Management Engine from running, directly halting the ME CPU without the ability of recovery... "Disabling the Management Engine, long believed to be impossible, is now possible and available in all current Librem laptops. It is also available as a software update for previously shipped recent Librem laptops," says Todd Weaver, Founder & CEO of Purism.' -- source: https://hardware.slashdot.org/story/17/10/29/0324201 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Mint Is Killing the KDE Edition
by Peter Reutemann 27 Oct '17

27 Oct '17

'While both the Cinnamon and Mate versions of Linux Mint are decent choices for computer users, there was one version that was always utterly bizarre -- the KDE Edition. Don't get me wrong, KDE is a fine environment, but Kubuntu already exists. Having a version of Mint using KDE was redundant and confusing. Thankfully, today, the Linux Mint team announces it is finally killing the KDE edition. "In continuation with what's been done in the past, Linux Mint 18.3 will feature a KDE edition, but it will be the last release to do so. I would like to thank Kubuntu for the amazing work they have done. The quality of Plasma 5 in Xenial made backports a necessity. The rapid pace of development upstream from the KDE project made this very challenging, yet they managed to provide a stable flow of updates for us and we were able to ship good KDE editions thanks to that. I don't think this would have been possible without them," says Clement Lefebvre, Linux Mint. Lefebvre further says, "KDE is a fantastic environment but it's also a different world, one which evolves away from us and away from everything we focus on. Their apps, their ecosystem and the QT toolkit which is central there have very little in common with what we're working on. We're not just shipping releases and distributing upstream software. We're a product distribution and we see ourselves as a complete desktop operating system. We like to integrate solutions, develop whatâ(TM)s missing, adapt what's not fitting perfectly, and we do a great deal of that not only around our own Cinnamon desktop environment but also thanks to cross-DE frameworks we put in place to support similar environments, such as MATE and Xfce."' -- source: https://linux.slashdot.org/story/17/10/26/0325221 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 2

How to Install Mycroft AI Assistant On Raspberry Pi
by Peter Reutemann 27 Oct '17

27 Oct '17

'Personal assistants like Alexa and Google Home are extremely popular right now, and interest is only growing. It’s not too hard to envision a near future where just about every home has its own AI assistant. What if you don’t want a huge corporation having a direct line into your home? Maybe you want to build your own to understand how they work? Mycroft is the solution. Mycroft is an open-source AI assistant that aims to compete with the likes of Alexa and Google. No, Mycroft isn’t entirely there yet, but the project is still in active development. Mycroft is based on the hugely popular Raspberry Pi, so you can actually set up your own with a Pi and test it out.' -- source: https://www.maketecheasier.com/install-mycroft-on-raspberry-pi/ Apparently, you can use it without creating an account: https://github.com/MycroftAI/mycroft-core#using-mycroft-without-home Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Who's building Linux in 2017?
by Peter Reutemann 27 Oct '17

27 Oct '17

'It's 2017 and Linux rules the computing world. Don't believe me? The Linux Foundation reports that Linux runs 90 percent of the public cloud workload, 82 percent of the world's smartphones, 62 percent of the embedded market, oh and a mere 99 percent of the supercomputer market. All that rests on the Linux kernel. In its 2017 Linux Kernel Development Report, Jonathan Corbet, Linux kernel developer and editor of LWN.net, and Greg Kroah-Hartman, stable Linux kernel maintainer, report on Linux's recent evolution. This report was released at the invitation-only Linux Kernel Summit in Prague, Czech Republic. Since 2005 and adoption of Git version control system, 15,637 developers from over 1,400 companies have contributed to the Linux kernel. Since last year, over 4,300 developers from more than 500 companies have contributed to the kernel. Of these, 1,670 contributed for the first time, or about a third of contributors' -- source: http://www.zdnet.com/article/whos-building-linux-in-2017/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Are “Enterprise-Quality” Hard Drives Worth It?
by Lawrence D'Oliveiro 26 Oct '17

26 Oct '17

Another quarter, another report from backups outfit Backblaze on hard disk reliability <https://arstechnica.com/gadgets/2017/10/big-hard-disks-may-be-breaking-the-…>: In aggregate, the company has now accumulated 3.7 million drive days for the consumer disks and 1.4 million for the enterprise ones. Over this usage, the annualized failure rates are 1.1 percent for the consumer disks and 1.2 percent for the enterprise ones. At least for now, then, the enterprise disks aren't doing anything to justify their longer warranty; their reliability is virtually identical.

1 0

How To Protect A Small Organization Against Electronic Adversaries
by Lawrence D'Oliveiro 25 Oct '17

25 Oct '17

About to have a look at the document posted here <https://freedom-to-tinker.com/2017/10/25/howto-protect-your-small-organizat…>. Unfortunately, for a document that’s about security, wget tells me the link is (currently) not secure: WARNING: The certificate of ‘www.cs.rice.edu’ is not trusted. WARNING: The certificate of ‘www.cs.rice.edu’ hasn't got a known issuer. WARNING: The certificate of ‘www.cs.rice.edu’ was signed using an insecure algorithm.

1 0

Why Computing Devices Slow Down Over Time
by rowan schischka 25 Oct '17

25 Oct '17

> So trying to speed things up can make things slower?? Its a repost from another outlet. This is just filler article in the tech section. Stuff has one today about mobile battery advice that contradicts last months article about mobile batteries.

1 0

When You Have To Have An Entire Conference On Software Licensing...
by Lawrence D'Oliveiro 24 Oct '17

24 Oct '17

Choice quotes from <http://www.theregister.co.uk/2017/10/24/oracle_users_meets_behind_closed_do…>: The emphasis on anonymity comes from firms’ fear that vendors are always poised to launch an audit or bump up fees. Sessions will offer advice on ... why customers shouldn’t be too reliant on licensing tools.

1 0

Why Did Ubuntu Drop Unity? Mark Shuttleworth Explains
by Peter Reutemann 24 Oct '17

24 Oct '17

Since we talked about Canonical ditching Mir/Unity on Monday night, here's some more insight from Shuttleworth himself: 'Ubuntu's decision to ditch Unity took many of us by surprise earlier this year. Now Ubuntu founder Mark Shuttleworth shares more details about why Ubuntu chose to drop Unity. From a report: Shuttleworth says he, along with the other 'leads' at Canonical, came to a consensual view that they should put the company on the path to becoming a public company. And to appear attractive to potential investors the company has to focus on its areas of profitability -- something Unity, Ubuntu phone, Unity 8 and convergence were not part of: "[The decision] meant that we couldn't have on our books (effectively) very substantial projects which clearly have no commercial angle to them at all. It doesn't mean that we would consider changing the terms of Ubuntu for example, because it's foundational to everything we do. And we don't have to, effectively," he said. Money may have meant Unity's demise but the wider Ubuntu project is in rude health. as Shuttleworth explains: "One of the things I'm most proud of is in the last 7 years is that Ubuntu itself became completely sustainable. I could get hit by a bus tomorrow and Ubuntu could continue. It's kind of magical, right? Here's a platform that is a world class enterprise platform, that's completely freely available, and yet it is sustainable. Jane Silber is largely to thank for that." While it's all-too-easy for desktop users to focus on, well, the desktop, there is far more to Canonical (the company) than the 6-monthly releases we look forward to. Losing Unity may have been a big blow for desktop users but it helped to balance other parts of the company: "There are huge possibilities for us in the enterprise beyond that, in terms of really defining how cloud infrastructure is built, how cloud applications are operated, and so on. And, in IoT, looking at that next wave of possibility, innovators creating stuff on IoT. And all of that is ample for us to essentially put ourselves on course to IPO around that." Dropping Unity wasn't easy for Mark, though: "We had this big chunk of work, which was Unity, which I really loved. I think the engineering of Unity 8 was pretty spectacularly good, and the deep ideas of how you bring these different form factors together was pretty beautiful.' -- source: https://news.slashdot.org/story/17/10/24/1854254 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Install Let's Encrypt and Secure Nginx with SSL/TLS in Debian 9
by Peter Reutemann 24 Oct '17

24 Oct '17

'This tutorial will show you how to install and secure a Nginx web server on Debian 9 with a TLS certificate issued for free by the Let’s Encrypt Certificate Authority. Furthermore, we will configure automatic renewal of Lets’ Encrypt TLS certificates using a cron job before the certificates expire.' -- source: https://www.howtoforge.com/tutorial/install-letsencrypt-and-secure-nginx-in… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Librem 5 Privacy-Focused Linux Phone Crowdfunding Campaign Ends with $2 Million
by Peter Reutemann 24 Oct '17

24 Oct '17

Since we talked about this phone last night... 'Librem 5 was successfully crowdfunded about two weeks ago when it surpassed its goal of $1.5 million, but the campaign continued to run, and now it appears to have gathered half million dollars more, ending with $2 million, which we believe is more than enough to build world's first truly free mobile device. Powered by PureOS, Purism's own GNU/Linux distribution based on the popular Debian GNU/Linux operating system, but focused on offering users a privacy-focused and more secure desktop solution, Librem 5 will be using KDE's Plasma Mobile and GNOME's GNOME Shell user interfaces, along with powerful open source software. During its crowdfunding campaign, Librem 5 saw an amazing feedback from the Open Source community as Purism partnered not only with big names like KDE and GNOME, but also with Nextcloud, which will bring its end-to-end encrypted file sync, sharing and cloud-based storage solution by default to the Linux smartphone.' -- source: http://news.softpedia.com/news/librem-5-privacy-focused-linux-phone-crowdfu… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

3 Simple, Excellent Linux Network Monitors
by Peter Reutemann 24 Oct '17

24 Oct '17

'You can learn an amazing amount of information about your network connections with these three glorious Linux networking commands. iftop tracks network connections by process number, Nethogs quickly reveals what is hogging your bandwidth, and vnstat runs as a nice lightweight daemon to record your usage over time.' -- source: https://www.linux.com/learn/intro-to-linux/2017/10/3-simple-excellent-linux… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

4 Reasons Building A Gaming PC Sucks Right Now
by Lawrence D'Oliveiro 23 Oct '17

23 Oct '17

Just saw this video on the current high prices of GPUs, RAM and variable-refresh monitors <https://www.youtube.com/watch?v=Vh8tZ_qkY1o>. What’s surprising to me is the reason why GPU prices are currently high: because they are being snapped up for cryptocurrency mining.

1 0

Why Computing Devices Slow Down Over Time
by Lawrence D'Oliveiro 23 Oct '17

23 Oct '17

Entertaining opinion piece <http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11935838>: To make their apps run faster, some designers make them store copies of things in RAM ... Known as cacheing, this makes things work much faster - until your system starts to run out of memory. For cacheing to be effective, the amount of space devoted to it must be carefully managed by the application and the device's operating system. Some app developers don't put the effort that they should into doing this well, and their applications not only slow down over time, but can drag the rest of the system down with them too. So trying to speed things up can make things slower??

1 0

Android getting “DNS over TLS” support to stop ISPs from knowing what websites you visit
by Peter Reutemann 23 Oct '17

23 Oct '17

'DNS (Domain Name Server) is what translates a website address from a URL that you enter to an IP address which your computer actually connects to. For example, when you type “www.xda-developers.com” into your browser, your computer queries a DNS which looks up and returns the IP address “209.58.128.90” to the client. This process is hidden from the user, but every website you visit (so long as it has a human-readable URL) will go through this same process. The problem for those security conscious out there is that these requests are done in plain text through UDP or TCP protocols which are readable by anyone that can see your connection, including your ISP. This is where DNS over TLS comes in.' -- source: https://www.xda-developers.com/android-dns-over-tls-website-privacy/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Microsoft Chastises Google Over Chrome Security
by Peter Reutemann 22 Oct '17

22 Oct '17

'In a Wednesday blog post, Redmond examined Google's browser security and took the opportunity to throw some shade at Chrome's security philosophy, while also touting the benefits of its own Edge browser. The post, written by Microsoft security team member Jordan Rabet, noted that Google's Chrome browser uses "sandboxing" and isolation techniques designed to contain any malicious code. Nevertheless, Microsoft still managed to find a security hole in Chrome that could be used to execute malicious code on the browser. The bug involved a Javascript engine in Chrome. Microsoft notified Google about the problem, which was patched last month. The company even received a $7,500 reward for finding the flaw. However, Microsoft made sure to point out that its own Edge browser was protected from the same kind of security threat. It also criticized Google for the way it handled the patching process. Prior to the patch's official rollout, the source code for the fix was made public on GitHub, a software collaboration site that hosts computer code. That meant attentive hackers could have learned about the vulnerability before the patch was pushed out to customers, Microsoft claimed. "In this specific case, the stable channel of Chrome remained vulnerable for nearly a month," the blog post said. "That is more than enough time for an attacker to exploit it." In the past Google has also disclosed vulnerabilities found in Microsoft products -- including Edge.' -- source: https://it.slashdot.org/story/17/10/22/010235 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Security Upgraded For NetBSD-amd64 with Kernel ASLR Support
by Peter Reutemann 22 Oct '17

22 Oct '17

'24 years after its release, NetBSD is getting a security upgrade -- specifically, Address Space Layout Randomization (ASLR). An anonymous reader writes: Support for Kernel ASLR was added on NetBSD-amd64 a few weeks ago. KASLR basically randomizes the address of the kernel, and makes it harder to exploit several classes of vulnerabilities [including privilege escalations and remote code execution]. It is still a work-in-progress, but it's already fully functional, and can be used following the instructions on this post from the NetBSD blog. It will be available starting from NetBSD 9, but may be backported to NetBSD 8 once it is stabilized. NetBSD says they're the first BSD system to support ASLR.' -- source: https://bsd.slashdot.org/story/17/10/21/0118226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Bloody Stupid Linux
by Lawrence D'Oliveiro 21 Oct '17

21 Oct '17

That’s the name of the distro <http://bloodystupid.clockwatching.org/>: Why go to all this trouble? The BSL kernel is basically a life support system for ram and network cards, since it wget's support for everything else on the machine the kernel is very small. The initial aim was to fit it on a single floppy, then PXE booting became attractive, and really, since the kernel doesn't need to support whatever it just booted from in order to have its root filesystem, its very flexible. Yeah, I know an initrd can do the same thing, but its more fun this way. As it stands, BSL makes for an excellent repair system, the framework for a bulk installer, a neat toy, and an alright thin client ( as long as you've got a gob of RAM handy.) OK, so it hasn’t been updated in over a decade. But the mascot image is cute. ;)

1 0

The Ultimate In Terminal Emulators?
by Lawrence D'Oliveiro 20 Oct '17

20 Oct '17

Brian Lunduke continues his Command-Line Week with a look at a couple of quite amazing terminal emulators: <https://www.youtube.com/watch?v=-vm7B6bLbLg>. So you think “command line” and “eye candy” can’t go together?

1 0

Yet another distro - Q4OS - meeting topic
by Ian Young 20 Oct '17

20 Oct '17

Some may be surprised to learn that a few diehards are still running a fork of KDE 3.5 on a Debian Base. The Trinity desktop. Could give it a quick run through on Monday night if there is time. May be of interest to those who wonder sometimes why KDE 3 was dropped once it actually became usable.

3 2

Meet CudaText: A Cross-Platform Open Source Code Editor
by Peter Reutemann 20 Oct '17

20 Oct '17

'CudaText is a cross-platform open source code editor based on Lazarus. It has extensive support for most of the popular programming languages. I cannot call it one of the best open source code editors because it is too early for that. I cannot even call it Notepad++ alternative for Linux because it’s more like a lightweight IDE like Geany. Though the default interface reminds me of Eclipse IDE.' -- source: https://itsfoss.com/cudatext-code-editor/ Great to see that Object Pascal is still thriving, though I haven't programmed in Pascal for years. Lazarus is an IDE for Object Pascal, a free alternative to (originally Borland's) Delphi. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Desktop Recorder App Green Recorder 3.0 Released
by Peter Reutemann 19 Oct '17

19 Oct '17

'Green Recorder is a simple desktop recorder for Linux distributions. You can use it to record audio and video on almost every Linux interface. Released under GPL 3, it now also supports Wayland. Green Recorder 3.0 supports avi, mkv, mp4 nut and gif. Wayland’s GNOME session supports only WebM. The user can choose the audio input source from a list as well as can set default values from the preference window.' -- source: https://itsfoss.com/green-recorder-3/ Just tried it and it works! Previously, I had used recordMyDesktop (GTK UI), which only supported Ogg Video. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Canada's 'Super Secret Spy Agency' Is Releasing a Malware-Fighting Tool To the Public
by Peter Reutemann 19 Oct '17

19 Oct '17

'Canada's electronic spy agency says it is taking the "unprecedented step" of releasing one of its own cyber defence tools to the public, in a bid to help companies and organizations better defend their computers and networks against malicious threats. The Communications Security Establishment (CSE) rarely goes into detail about its activities -- both offensive and defensive -- and much of what is known about the agency's activities have come from leaked documents obtained by U.S. National Security Agency whistleblower Edward Snowden and published in recent years. But as of late, CSE has acknowledged it needs to do a better job of explaining to Canadians exactly what it does. Today, it is pulling back the curtain on an open-source malware analysis tool called Assemblyline that CSE says is used to protect the Canadian government's sprawling infrastructure each day. "It's a tool that helps our analysts know what to look at, because it's overwhelming for the number of people we have to be able to protect things," Scott Jones, who heads the agency's IT security efforts, said in an interview with CBC News. On the one hand, open sourcing Assemblyline's code is a savvy act of public relations, and Jones readily admits the agency is trying to shed its "super secret spy agency" reputation in the interest of greater transparency.' -- source: https://news.slashdot.org/story/17/10/19/1837236 Let's see, whether anybody finds bits in the code that report home to the agency... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

AGM next month
by Peter Reutemann 19 Oct '17

19 Oct '17

Hi everyone The Annual General Meeting (AGM) of the Waikato Linux Users Group Society will be held on November 27th this year. Agenda (preliminary) - President's Report - Treasurer's Report - Election of 2017 Committee - General business - Consumption of pizza https://www.meetup.com/WaikatoLinuxUsersGroup/events/237234897/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0