- wlug - list.wlug.org.nz

Endless OS Is First Linux Distro to Support Flatpak Apps from Flathub by Default
by Peter Reutemann 13 Oct '17

13 Oct '17

'Flatpak has been around for some time now, and it's gaining more and more popularity among GNU/Linux distributions. Endless OS is the latest to announce that it brings support for Flatpak apps, though it's the first to offer support for this universal binary format directly from the Flathub repository, by default. Last month, the Flatpak developers over at Red Hat announced that their Flathub software repository received a modern, web-based frontend, which allows users to easily browse all available Flatpak apps at a glance, and developers to add their own Flatpaks to the list of more than 100 apps.' -- source: http://news.softpedia.com/news/endless-os-is-first-linux-distro-to-enable-s… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Purism Linux smartphone makes its $1.5 million crowdfunding goal
by Peter Reutemann 12 Oct '17

12 Oct '17

'Hundreds of millions are happy with Android smartphones and iPhones. But there are some users who want the maximum possible control over their smartphones. For those people, Purism now has the funding it needs for its free-software smartphone without a trace of proprietary code or firmware: The Purism Librem 5 smartphone. At first, it appeared Purism wouldn't make its $1.5-million goal. The Librem 5 crowdfunding campaign staggered forward at first. Them, when KDE and then GNOME threw their support behind the project, the project picked up steam.' -- source: http://www.zdnet.com/article/purism-linux-smartphone-makes-its-1-5-million-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

How to test internet speed in Linux terminal
by Peter Reutemann 12 Oct '17

12 Oct '17

'Most of us check the internet bandwidth speed whenever we connect to new network or wifi. So why not our servers! Here is a tutorial which will walk you through to test internet speed in Linux terminal. Everyone of us generally uses Speedtest by Ookla to check internet speed. Its pretty simple process for a desktop. Goto their website and just click GO button. It will scans your location and speed test with nearest server. If you are on mobile, they have their app for you. But if you are on terminal with command line interface things are little different. Lets see how to check internet speed from Linux terminal.' -- source: https://kerneltalks.com/tips-tricks/how-to-test-internet-speed-in-linux-ter… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Europe pledges support for open source government solutions
by Peter Reutemann 12 Oct '17

12 Oct '17

'Estonia has long been the digital envy of many European Union member states. An effective and open policy approach to digital government has yielded extraordinary results—from 90%+ uptake of electronic identification (E-ID) solutions to an open source e-government platform (X-Road) to meet the ever-growing expectations of IT-savvy citizens as well as other countries wanting to pool IT across borders. It was thus fitting that Estonia, the current EU presidency, brought together Ministers from 32 countries (under the umbrellas of the EU and European Free Trade Association) to adopt the Tallinn Declaration on E-Government, creating a renewed political dynamism coupled with legal tools to accelerate the implementation of a range of existing EU policy instruments (e.g., the e-Government Action Plan and ISA² program). Perhaps the most significant development for open source supporters is the explicit recognition of open source software (OSS) as a key driver towards achieving ambitious governmental digitisation goals by 2020.' -- source: https://opensource.com/article/17/10/eu-open-source Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

How to Enable Fractional Scaling in Gnome
by Peter Reutemann 12 Oct '17

12 Oct '17

'Fractional scaling is practically necessary if you’re running a HiDPI display, and you want your desktop to scale uniformly to match your display. It’s always been an issue on Linux, but the latest version of the GNOME desktop has implemented a true fractional scaling feature to keep your desktop looking good. Even though GNOME 3.26 does have fractional scaling support, it wasn’t mature enough to make the release. As a result, it’s still a testing feature that you need to enable yourself.' -- source: https://www.maketecheasier.com/enable-fractional-scaling-gnome/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Sonos Speakers: Refuse Updates, They Stop Working
by Lawrence D'Oliveiro 12 Oct '17

12 Oct '17

In August, when wireless speaker maker Sonos decided to update its privacy policy to allow it to gather more data on its customers from their devices, it characterized the consequences of refusing to accept the change as being left out of future feature upgrades. ... "If you choose not to provide the functional data, you won't be able to receive software updates," a Sonos spokesperson explained at the time. "It's not like if you don't accept it, we'd be shutting down your device or intentionally bricking it." ... However, the [spokesperson] acknowledged that a few people who have updated their apps, manually or through automatic updates, have ended up with software on their handsets that isn't compatible with their firmware – which did not update because they would not accept the privacy policy change. <http://www.theregister.co.uk/2017/10/11/sonos_privacy_speakers/>

1 0

Adventures In E-Mail
by Lawrence D'Oliveiro 11 Oct '17

11 Oct '17

I am currently messing about with a virtual private server at Rimu Hosting, with a view to have it take over my e-mail serving after Vodafone turns off its provision of that service. Eventually I will have an MX record for my domain pointing at that server, so it will receive all e-mail addressed to me. Next part is, I want to periodically suck all that mail back to my main office machine. Currently I have a cron task that periodically connects to Vodafone’s POP server, fetches all the mail, and delivers it locally. When I try to do the same thing with the VPS, my local Postfix bounces the attempt at local delivery, saying something like <user(a)domain> (expanded from <user>): mail forwarding loop for user(a)domain A bit of hunting around online found this <http://postfix.1071664.n5.nabble.com/What-is-causing-this-mail-forwarding-l…> likely discussion, where the problem seems to be that the incoming message already has a “Delivered-To:” header pointing at my e-mail address, so Postfix concludes that the message is stuck in a forwarding loop, and refuses to pass it on. The exchange ends with this response from Wietse Venema, “Mr Postfix” himself: You can use header_checks to remove the problem header, but I will not help with implementing such iodiocy. Hmm, looking at the local(8) man page, it says In order to stop mail forwarding loops early, the software adds an optional Delivered-To: header with the final envelope recipient address. If mail arrives for a recipient that is already listed in a Delivered-To: header, the message is bounced. The key being that word “optional”. So it looks like I simply have to disable the addition of “Delivered-To:” on the VPS. Stay tuned.

2 3

OpenBSD 6.2 Released
by Peter Reutemann 10 Oct '17

10 Oct '17

'OpenBSD 6.2 has now been released. Some of the new features and systems include improved hardware support, vmm(4)/ vmd(8) improvements, IEEE 802.11 wireless stack improvements, generic network stack improvements, installer improvements, routing daemons and other userland network improvements, security improvements and more.' -- source: https://linux.slashdot.org/story/17/10/09/2029219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Now Has its First Open Source RISC-V Processor
by Peter Reutemann 09 Oct '17

09 Oct '17

'"SiFive has declared that 2018 will be the year of RISC V Linux processors," writes Design News. An anonymous reader quotes their report: When it released its first open-source system on a chip, the Freeform Everywhere 310, last year, Silicon Valley startup SiFive was aiming to push the RISC-V architecture to transform the hardware industry in the way that Linux transformed the software industry. Now the company has delivered further on that promise with the release of the U54-MC Coreplex, the first RISC-V-based chip that supports Linux, Unix, and FreeBSD... This latest development has RISC-V enthusiasts particularly excited because now it opens up a whole new world of use cases for the architecture and paves the way for RISC-V processors to compete with ARM cores and similar offerings in the enterprise and consumer space... "The U54 Coreplexes are great for companies looking to build SoC's around RISC-V," Andrew Waterman co-founder and chief engineer at SiFive, as well as the one of the co-creators of RISC-V, told Design News. "The forthcoming silicon is going to enable much better software development for RISC-V." Waterman said that, while SiFive had developed low-level software such as compilers for RISC-V the company really hopes that the open-source community will be taking a much broader role going forward and really pushing the technology forward. "No matter how big of a role we would want to have we can't make a dent," Waterman said. "But what we can do is make sure the army of engineers out there are empowered." ' -- source: https://hardware.slashdot.org/story/17/10/09/0019212 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Review by many eyes does not always prevent buggy code
by Peter Reutemann 09 Oct '17

09 Oct '17

'There is a view that because open source software is subject to review by many eyes, all the bugs will be ironed out of it. This is a myth.' -- source: https://opensource.com/article/17/10/many-eyes Even if a project has many contributors, you will get a lot of contributors in areas that are easy to contribute in (eg spelling, expanding documentation, simple additions) and hardly anyone in the difficult areas. The less contributors in an area, the less likely they will overlap and therefore the less code review will happen. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 8

4 Best Modern Open Source Code Editors For Linux
by Peter Reutemann 09 Oct '17

09 Oct '17

According to the author of the article referenced below, these are: - Brackets - Atom - Light Table - Visual Studio Code -- source: https://itsfoss.com/best-modern-open-source-code-editors-for-linux/ No, not trying to start another flame war here. However, it doesn't hurt pointing out alternatives. After all, it is all about choice. ;-) Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

How to Install Multiple Linux Distributions on One USB
by Peter Reutemann 09 Oct '17

09 Oct '17

'MultiBootUSB is a free and open source cross-platform application which allows you to create a USB drive with multiple Linux distributions. It also supports uninstalling any distribution at any point in time, so you can reclaim space on your drive for another one.' -- source: https://itsfoss.com/multiple-linux-one-usb/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Licensing Pirate Sites
by Lawrence D'Oliveiro 07 Oct '17

07 Oct '17

Fun fact: pirating US-made movies is not a crime in Iran ... provided you have a licence from the Government. So *licensed* pirate sites get to dob in *unlicensed* pirate sites for breaking the law. Got that? <https://www.techdirt.com/articles/20171003/09314138334/iran-cracks-down-mov…>

1 0

How to install Sogo Groupware Server on Debian
by Peter Reutemann 06 Oct '17

06 Oct '17

'Today we talk about Sogo. SOGo is a fully supported and trusted groupware server with a focus on scalability and open standards, is released under the GNU GPL/LGPL v2 and above. SOGo provides a rich AJAX-based Web interface and supports multiple native clients through the use of standard protocols such as CalDAV, CardDAV, and GroupDAV, as well as Microsoft ActiveSync. In this tutorial we'll install on Debian 8, a new version will be available soon.' -- source: https://www.howtoforge.com/tutorial/how-to-install-sogo-on-debian-8/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

4 6

OpenVPN And systemd Service Templates
by Lawrence D'Oliveiro 06 Oct '17

06 Oct '17

The OpenVPN package on Debian comes with some systemd .service files to make VPN connections easier to manage. These (all located in /lib/systemd/system/) are named openvpn-client(a).service openvpn-server(a).service openvpn.service openvpn(a).service Note the @-signs in the names of three of them: these indicate “template” services, each of which can be “instantiated” any number of times, to create multiple service “instances”. There seem to be two alternative ways of defining your OpenVPN services here: the first two .service files let you define and manage client-end and server-end connections individually, and require you to start and stop them separately, while the latter two don’t bother distinguishing between client-end and server-end (this is purely up to the respective OpenVPN configurations), they are all defined by instantiating “openvpn(a).service”. The non-template file, “openvpn.service”, can then be used to start and stop all these instances at once. (It could be that the first two represent an older way of managing connections, while the latter two are a newer, unified, more flexible way. But hey...) To illustrate how template instantiations work, I have been setting up a VPN link between a virtual private server at Rimu Hosting and the Internet router machine in my office. The VPS (with the fixed IP address) is the server end, while my office end is the client. On the server, I create a config file named /etc/openvpn/server/office.conf that appropriately defines the server end of the connection. The name “office” now automatically becomes the name of the instance: to start this, I just type systemctl start openvpn-server(a)office and systemd automatically fills in the name “office” in place of the “%i” placeholder in the contents of the openvpn-server(a).service template file, and executes the appropriate openvpn command. (One of the occurrences of %i is in the name of the config file.) At the client end, I create a config file named /etc/openvpn/client/vps.conf that appropriately defines the client end of the connection. Here the instance name is “vps”, so the systemd command to launch openvpn at the client end is systemctl start openvpn-client(a)vps and as before, instances of “%i” in the template are replaced with the instance name, “vps”. (As before, %i is also used to produce the name of the config file.) Of course, manually starting and stopping OpenVPN instances may be fine for testing, but for production use you want this to happen automatically at boot time. Just change the systemctl “start” commands to “enable”, and it’s done.

1 0

Intel Versus AMD
by Lawrence D'Oliveiro 06 Oct '17

06 Oct '17

Comparing current high-end CPU offerings from the two x86 vendors <https://arstechnica.co.uk/gadgets/2017/09/intel-core-i9-7960x-review/>, it’s clear AMD has bounced back from many years in the “also-ran” back row with its “Ryzen” and “Threadripper” offerings: The difference is that AMD bet on a massively multicore future for consumers and prosumers, designing an architecture with dramatic scaling in mind, when Intel was still umming and ahhing whether to bring six-core chips to the mainstream. So if you make heavy use of multithreaded software, for example 3D rendering, video encoding, or large software builds, then AMD currently has a significant price/performance edge. Interesting that one of the benchmarks is “Blenchmark”, which involves using Blender to render a 3D BMW car model, while another builds Google’s Chromium browser from source.

1 0

How Bulletproof Hosting Works
by Lawrence D'Oliveiro 06 Oct '17

06 Oct '17

“Bulletproof” hosting providers tout their ability to stay online in spite of the efforts of law enforcement to shut them down. Here is a report <http://www.theregister.co.uk/2017/10/05/bulletproof_hosting/> into some research detailing how they manage to keep operating: One service cited by the work is a cloud proxy network that abuses the services of legitimate providers including AWS and TenCent. The product ... typically costs $250/month/domain and maintains operations by cycling through an enormous number of providers – 230 in just nine days, according to the researchers. ... Another provider ...is still in business despite being raided three times ... Operating out of political hotspots gives some BPH operations another shield against takedown attempts.

1 0

How Do Sysadmins Manage Patches?
by Lawrence D'Oliveiro 06 Oct '17

06 Oct '17

The infamous Equifax breach (which has compromised the personal information belonging to 140 million Americans) was down to a vulnerability in an application library which had already been discovered and a patch issued months before, but the patch was never applied at the company. Why does this sort of thing keep happening? Here is a research survey <https://freedom-to-tinker.com/2017/10/04/avoid-an-equifax-like-breach-help-…> being undertaken to try to better understand the real-world constraints under which companies operate, with a view to making the software update process more effective (i.e. more likely to be followed).

1 0

HP Shared ArcSight Source Code With Russians
by Lawrence D'Oliveiro 06 Oct '17

06 Oct '17

Bruce Schneier repeats a point that should be well-known about security and Open Source, but which some still have trouble grasping: This is one of the areas where open-source software has a security edge. If everyone has access to the source code -- and security doesn't depend on its secrecy -- then there's no advantage in getting a copy. As long as companies rely on obscurity for their security, these sorts of attacks are possible and profitable. <https://www.schneier.com/blog/archives/2017/10/hp_shared_arcsi.html>

1 0

Return Of The Algorithm Monster: YouTube Auto-Promoted Conspiracy Theory Videos
by Lawrence D'Oliveiro 06 Oct '17

06 Oct '17

During the [Wall Street Journal]'s Tuesday test, searches for hot-topic terms like "Las Vegas shooting" and "NFL anthem protest," along with the term "9/11," each brought up top-five video posts, specifically listed in the site's "Top News" box, whose titles and content were loaded with debunked and misleading content. The fifth result for "Las Vegas shooting" was titled "Proof Las Vegas Shooting Was a FALSE FLAG attack—Shooter on 4th Floor" and claimed that multiple shooters had been involved, in spite of Vegas officials stating otherwise. <https://arstechnica.com/gaming/2017/10/return-of-the-algorithm-monster-yout…>

1 0

“Your Account eStatement For February”
by Lawrence D'Oliveiro 05 Oct '17

05 Oct '17

It took me a few seconds to parse this one. Dear Customer Attached is your provisional statement with the new charges. For your security it has been encrypted. This means that you will need a decoder to view your statement. Before you can view your statement, you must Download the attachment and install the decoder. Read that far, and initially thought “for crying out loud, another bloody piece of Windows-only software”. Then a few seconds later, it dawned on me that, while it claimed to come from the right bank, the from-address <JOhnEdwarD011(a)gaea.ocn.ne.jp> couldn’t be that of any bank. It wasn’t until after I’d filed it as a scam that I noticed the most glaring thing: “February”??

1 0

World’s First 14TB Drive
by Lawrence D'Oliveiro 04 Oct '17

04 Oct '17

Western Digital has announced a drive using shingled media recording to push the capacity up to 14TB <http://www.theregister.co.uk/2017/10/03/wdc_14tb_disk_drive_hs14/>. Unfortunately, this recording technique complicates (and slows down) writing, so it is meant for applications where data is read a lot, and updated less frequently.

1 0

Timeshift A System Restore Utility Tool Review
by Peter Reutemann 03 Oct '17

03 Oct '17

'TimeShift is a system restore tool for Linux. It provides functionality that is quite similar to the System Restore feature in Windows or the Time Machine tool in MacOS. TimeShift protects your system by making incremental snapshots of the file system manually or at regular automated intervals. These snapshots can then be restored at a later point to undo all changes to the system and restore it to the previous state. Snapshots are made using rsync and hard-links and the tool shares common files amongst snapshots in order to save disk space' -- source: http://www.linuxandubuntu.com/home/timeshift-a-system-restore-utility-tool-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Quote Of The Week From UK Home Sec Amber Rudd
by Lawrence D'Oliveiro 03 Oct '17

03 Oct '17

"I don't need to understand how encryption works to understand how it's helping – end-to-end encryption – the criminals. I will engage with the security services to find the best way to combat that." <http://www.theregister.co.uk/2017/10/03/amber_rudd_still_does_not_understan…>

1 0

Asciinema – Record Terminal Sessions And Share Them On The Web
by Peter Reutemann 03 Oct '17

03 Oct '17

'I already know about recording the Terminal activities using “script” command in Unix-like systems. Today, I found out yet another similar utility called “asciinema” that can used to record Terminal sessions. Forget about the heavy screen-recording tools and/or apps. Asciinema is a fast, light-weight and open source Terminal recording tool. Unlike “script” command, Asciinema not just records our Terminal activities, but also helps us to share them on the web if necessary. You can share the recordings by copying its URL and sending it to a friend or posting it on a social network. It supports Linux, Mac OS X and *BSD.' -- source: https://www.ostechnix.com/asciinema-record-terminal-sessions-share-web/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0