- wlug - list.wlug.org.nz

OpenBSD 6.0 Released
by Peter Reutemann 06 Sep '16

06 Sep '16

"Version 6.0 of the free operating system OpenBSD has just been released. This release features much improved hardware and armv7 support, a new tool called proot for building software ports in an isolated chroot environment, W^X that is now strictly enforced by default, and removal of official support for Linux emulation, usermount, and systrace." -- source: https://bsd.slashdot.org/story/16/09/01/2147233 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 4

mike Wolfe authors alliance
by William Mckee 06 Sep '16

06 Sep '16

Hi, Mike Wolfe is going to be in Hamilton to talk TPP and copyright http://creativecommons.org.nz/2016/09/mike-wolfe-of-the-authors-alliance-is… Cheers, William

1 0

SoftBank Completes $31 Billion Acquisition of ARM
by Peter Reutemann 06 Sep '16

06 Sep '16

'Roughly two months later, SoftBank announced today that it has completed its $31 billion acquisition of British chip designer ARM Holdings. The Verge reports: "SoftBank's purchase of ARM is the latest in a line of acquisitions in recent years for the Japanese company, including the $20 billion Sprint acquisition, and a $15 billion investment in Vodafone's Japanese division. ARM is well known for designing chips and licensing them to companies like Apple and Samsung, and ARM-designed chips dominate mobile computing in phones and tablets. 15 billion ARM-designed chips shipped last year alone, and around half of those were in mobile devices. SoftBank is expected to use the ARM deal to bolster its Internet of Things plans." ' -- source: https://news.slashdot.org/story/16/09/05/2215217 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Adobe Resurrects Flash Player On Linux
by Peter Reutemann 06 Sep '16

06 Sep '16

'Four years ago, Adobe made a decision to stop updating the Flash Player package (NPAPI) on Linux, aside from delivering security patches. It has made an about turn on this decision in the last week and has said that it will keep it in sync with the modern release branch going forward. In its announcement, Adobe wrote: "In the past, we communicated that NPAPI Linux releases would stop in 2017. This is no longer the case and once we have performed sufficient testing and received community feedback, we will release both NPAPI and PPAPi Linux builds with their major version numbers in sync and on a regular basis." Although this is great news for Linux users who don't want to struggle to watch Flash content online, there also a few drawbacks. Adobe writes: "Because this change is primarily a security initiative, some features (like GPU 3D acceleration and premium video DRM) will not be fully implemented. If you require this functionality we recommend that you use the PPAPI version of Flash Player." ' -- source: https://linux.slashdot.org/story/16/09/05/2052256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

When Smart TVs Hit Their IQ Limits...
by rowan schischka 06 Sep '16

06 Sep '16

“The symptoms being experienced are not a failure of the TV, but are as a result of specification changes made by YouTube that exceed the capability of the TV’s hardware.” Youtube's API terms state they will give 6 months warning before rolling out changes that affect compatibility of older devices; but I can't find any announcement on the youtube developer site. I'm wondering what this change is. -- Kind Regards Rowan Schischka

1 0

When Smart TVs Hit Their IQ Limits...
by Lawrence D'Oliveiro 05 Sep '16

05 Sep '16

If you bought a 2012-vintage Sony Bravia smart TV, it is going to lose its ability to play YouTube videos. “The symptoms being experienced are not a failure of the TV, but are as a result of specification changes made by YouTube that exceed the capability of the TV’s hardware.” “As a result, Sony have decided to remove the YouTube icon for the 2012 Bravia TVs on 30th September 2016.” <http://www.theregister.co.uk/2016/09/05/youtube_breaks_sony_bravias/>

1 0

OpenOffice Could Shut Down
by Lawrence D'Oliveiro 02 Sep '16

02 Sep '16

<http://arstechnica.com/information-technology/2016/09/openoffice-after-year…> Does anybody still care? Use LibreOffice instead.

1 0

New Intel and AMD Chips Will Only Support Windows 10
by Peter Reutemann 02 Sep '16

02 Sep '16

'Buried in the announcement of the new Kaby Lake (seventh-generation) processors and a rash of incoming notebooks set to use them is the confirmation that they will have a Windows 10 future. Microsoft has been warning people for ages that Kaby Lake will not run on anything older than Windows 10, and it looks like AMD's upcoming Zen chip will be going the same way. Microsoft said, "As new silicon generations are introduced, they will require the latest Windows platform at that time for support. This enables us to focus on deep integration between Windows and the silicon, while maintaining maximum reliability and compatibility with previous generations of platform and silicon." "We are committed to working with Microsoft and our ecosystem partners to help ensure a smooth transition given these changes to Microsoft's Windows support policy," an Intel spokesperson said. "No, Intel will not be updating Win 7/8 drivers for 7th Gen Intel Core [Kaby Lake] per Microsoft's support policy change." An AMD representative was equally neutral. "AMD's processor roadmap is fully aligned with Microsoft's software strategy," AMD chief technical officer Mark Papermaster said, via a company spokeswoman.' -- source: https://hardware.slashdot.org/story/16/09/01/2031247 Or just use a Linux distro flavor of your choice... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

ubuntu: unattended-upgrades
by Peter Reutemann 02 Sep '16

02 Sep '16

Finally came across a commandline way for configuring unattended upgrades: http://askubuntu.com/questions/9/how-do-i-enable-automatic-updates/204#204 Here are the commands: sudo apt-get install unattended-upgrades sudo dpkg-reconfigure unattended-upgrades Very useful for servers... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

ubuntu devices
by rowan schischka 01 Sep '16

01 Sep '16

this recent social media post by canonical indicates new ubuntu phones/tablets coming out soon. it would explain the phones out of stock for the last three months. Am I right? https://plus.google.com/+Ubuntu/posts/iXKQoj4k7QZ -- Kind Regards Rowan Schischka

2 1

New cloud attack takes full control of virtual machines with little effort
by Peter Reutemann 31 Aug '16

31 Aug '16

'The world has seen the most unsettling attack yet resulting from the so-called Rowhammer exploit, which flips individual bits in computer memory. It's a technique that's so surgical and controlled that it allows one machine to effectively steal the cryptographic keys of another machine hosted in the same cloud environment. Cutting-edge hack gives super user status by exploiting DRAM weakness Until now, Rowhammer has been a somewhat clumsy and unpredictable attack tool because it was hard to control exactly where data-corrupting bit flips happened. While previous research demonstrated that it could be used to elevate user privileges and break security sandboxes, most people studying Rowhammer said there was little immediate danger of it being exploited maliciously to hijack the security of computers that use vulnerable chips. The odds of crucial data being stored in a susceptible memory location made such hacks largely a matter of chance that was stacked against the attacker. In effect, Rowhammer was more a glitch than an exploit. Now, computer scientists have developed a significantly more refined Rowhammer technique they call Flip Feng Shui. It manipulates deduplication operations that many cloud hosts use to save memory resources by sharing identical chunks of data used by two or more virtual machines. Just as traditional Feng Shui aims to create alignment or harmony in a home or office, Flip Feng Shui can massage physical memory in a way that causes crypto keys and other sensitive data to be stored in locations known to be susceptible to Rowhammer.' -- source: http://arstechnica.com/security/2016/08/new-attack-steals-private-crypto-ke… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Building a new Tor that can resist next-generation state surveillance
by Peter Reutemann 31 Aug '16

31 Aug '16

'Since Edward Snowden stepped into the limelight from a hotel room in Hong Kong three years ago, use of the Tor anonymity network has grown massively. Journalists and activists have embraced the anonymity the network provides as a way to evade the mass surveillance under which we all now live, while citizens in countries with restrictive Internet censorship, like Turkey or Saudi Arabia, have turned to Tor in order to circumvent national firewalls. Law enforcement has been less enthusiastic, worrying that online anonymity also enables criminal activity. Tor's growth in users has not gone unnoticed, and today the network first dubbed "The Onion Router" is under constant strain from those wishing to identify anonymous Web users. The NSA and GCHQ have been studying Tor for a decade, looking for ways to penetrate online anonymity, at least according to these Snowden docs. In 2014, the US government paid Carnegie Mellon University to run a series of poisoned Tor relays to de-anonymise Tor users. A 2015 research paper outlined an attack effective, under certain circumstances, at decloaking Tor hidden services (now rebranded as "onion services"). Most recently, 110 poisoned Tor hidden service directories were discovered probing .onion sites for vulnerabilities, most likely in an attempt to de-anonymise both the servers and their visitors.' -- source: http://arstechnica.com/security/2016/08/building-a-new-tor-that-withstands-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

“Hacbook”: Refurbished HP EliteBooks
by Lawrence D'Oliveiro 31 Aug '16

31 Aug '16

For US$329 <http://www.theregister.co.uk/2016/08/30/329_for_a_macbook_well_really_a_hac…>: ““It's optimized to run OS X, but you can install Linux or Windows on it and use it however you want - that's completely up to the user.”

2 1

Cool Linux Command-Line Image Management Hacks
by Peter Reutemann 30 Aug '16

30 Aug '16

"Feh and the identify command are two of the tools I use for viewing and managing images on Linux. They are fast, flexible, and can be stuffed into scripts for automating operations, which is especially valuable when you work with artists or marketing people who have large image galleries to maintain. For me, they are faster and better for managing large numbers of images than graphical image managers, which tend to require too much clicking and poking through nested menus to find what I want, if they even have it." -- source: https://www.linux.com/learn/cool-linux-command-line-image-management-hacks Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Maru OS: Marrying the Phone and the PC
by Peter Reutemann 30 Aug '16

30 Aug '16

"In case you haven't heard of Preetam D’Souza, he is noted in developer circles for exploring how to bring full-blown PC capabilities to smartphones and mobile devices. Maru OS is an operating system that he has created toward that end, and now this interesting platform has gone open source. Have you followed Canonical's efforts to marry computing and smartphone capabilities with its Ubuntu Unity phone OS that can dock into a monitor? Maru OS is in a similar space. Maru marries an Android base on a phone and Debian Linux on the desktop." -- source: http://ostatic.com/blog/maru-os-marrying-the-phone-and-the-pc Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Android Nougat Arrives on the Raspberry Pi
by Peter Reutemann 30 Aug '16

30 Aug '16

"As we've noted here before, when it comes to top open source stories of the past couple of years, it's clear that one of the biggest is the proliferation of tiny, inexpensive Linux-based computers at some of the smallest form factors ever seen. The diminutive, credit card-sized Raspberry Pi, which has been priced at only $25 and $35, has grabbed most of the headlines in this space. And, just a few months ago, code repositories started appearing online that showed that the Android operating system would be heading for the Pi. Now, Android 7.0 Nougat has been ported to the Pi, which potentially opens up a whole ecosystem of new apps and applications. Google's latest mobile OS is shown running on the $35 Pi in this YouTube video. " -- source: http://ostatic.com/blog/android-nougat-arrives-on-the-raspberry-pi Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Researching information on local body candidates
by Roderick Aldridge 30 Aug '16

30 Aug '16

Hi everybody I am researching information on local body election candidates, concentrating on sustainable environmental and social policies. I am particularly interested in the track record of councillors who are standing again. It is proving difficult to extract information from the Waikato Regional Council website, though the Hamilton City Council one is much better. Would anybody like to share their expertise on ferreting information from websites, and for gathering relevant information from public sources on websites, social media and anywhere. Or do you know anybody who ma be willing to share their skills. Any help much appreciated. Rod

4 7

Fedora 24 review: The year’s best Linux distro is puzzlingly hard to recommend
by Peter Reutemann 30 Aug '16

30 Aug '16

"Fedora 24 is very near the best Linux distro release I've used, and certainly the best release I have tested this year. Considering 2016 has welcomed new offerings like Mint 18 and Ubuntu 16.04 LTS, that says a great deal about the Fedora project's latest work. But like many Fedora releases before it, even Fedora 24 got off to a rocky start." -- source: http://arstechnica.com/information-technology/2016/08/fedora-24-review-the-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Re: [wlug] Researching information on local body candidates
by Wayne Luxton 29 Aug '16

29 Aug '16

I would suggest the way forward is to get the list of key words that would capture the essence of the vision statement and maybe the converse "development" type phrases used in meeting or public announcements and try and list or count them in relation to the participant. This alone is a research project. Maybe government bodies could be encouraged to prepare minutes in ways to enable this? Wayne

1 0

Linus Loves GPL, But Hates GPL Lawsuits
by Peter Reutemann 28 Aug '16

28 Aug '16

'During LinuxCon, Torvalds was full of praise for GNU GPL: "The GPL ensures that nobody is ever going to take advantage of your code. It will remain free and nobody can take that away from you. I think that's a big deal for community management... FSF [Free Software Foundation] and I don't have a loving relationship, but I love GPL v2. I really think the license has been one of the defining factors in the success of Linux because it enforced that you have to give back, which meant that the fragmentation has never been something that has been viable from a technical standpoint." And he thinks the BSD license is bad for everyone: "Over the years, I've become convinced that the BSD license is great for code you don't care about," Torvalds said. But Linus also addressed the issue of enforcing the GPL on the Linux foundation mailing list when someone proposed a discussion of it at Linuxcon. "I think the whole GPL enforcement issue is absolutely something that should be discussed, but it should be discussed with the working title 'Lawyers: poisonous to openness, poisonous to community, poisonous to projects'... quite apart from the risk of loss in a court, the real risk is something that happens whether you win or lose, and in fact whether you go to court or just threaten: the loss of community, and in particular exactly the kind of community that can (and does) help. You lose your friends."' -- source: https://linux.slashdot.org/story/16/08/27/1943246 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

New SWEET32 Crypto Attacks Speed Up Deprecation of 3DES, Blowfish
by Peter Reutemann 27 Aug '16

27 Aug '16

"New attacks revealed today against 64-bit block ciphers push cryptographic ciphers such as Triple-DES (3DES) and Blowfish closer to extinction. The attacks, known as SWEET32, allow for the recovery of authentication cookies from HTTPS traffic protected by 3DES, and BasicAUTH credentials from OpenVPN traffic protected by default by Blowfish. In response, OpenSSL is expected to remove 3DES from its default bulid in 1.1.0, and lower its designation from High to Medium 1.0.2 and 1.0.1. OpenVPN, meanwhile, is expected to release a new version as well with a warning about Blowfish and new configuration advice protecting against the SWEET32 attacks. The researchers behind SWEET32 said this is a practical attack because collisions begin after a relatively short amount of data is introduced. By luring a victim to a malicious site, the attacker can inject JavaScript into the browser that forces the victim to connect over and over to a site they're authenticated to. The attacker can then collect enough of that traffic -- from a connection that is kept alive for a long period of time -- to recover the session cookie." -- source: https://tech.slashdot.org/story/16/08/27/186213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

ReactOS 0.4.2 Released: Supports Linux Filesystems, .NET Applications, and Doom 3
by Peter Reutemann 27 Aug '16

27 Aug '16

'Continuing its rapid release cycle, ReactOS has unveiled version 0.4.2 of its free "open-source binary-compatible Windows re-implementation." Slashdot reader jeditobe reports that this new version can now read and write various Linux/Unix file systems like Btrfs and ext (and can read ReiserFS and UFS), and also runs applications like Thunderbird and 7-Zip. ReactOS 0.4.2 also features Cygwin support, .NET 2.0 and 4.0 application support, among other updated packages and revised external dependencies such as Wine and UniATA. The team also worked to improve overall user experience... ReactOS is free. You can boot your desktop or laptop from it. It looks like Windows (a 10-year-old version, anyway), so you already know how to use it. And it'll run some Windows and DOS applications, maybe including DOS games that regular 64-bit Windows can no longer touch.' -- source: https://games.slashdot.org/story/16/08/27/1724217 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu Linux 16.10 'Yakkety Yak' Beta 1 Now Available For Download
by Peter Reutemann 27 Aug '16

27 Aug '16

'Today, the first beta of Ubuntu Linux 16.10 sees release. Once again, a silly animal name is assigned, this time being the letter "Y" for the horned mammal, "Yakkety Yak." This is also a play on the classic song "Yakety Yak" by The Coasters. Please be sure not to "talk back" while testing this beta operating system! "Pre-releases of the Yakkety Yak are not encouraged for anyone needing a stable system or anyone who is not comfortable running into occasional, even frequent breakage. They are, however, recommended for Ubuntu flavor developers and those who want to help in testing, reporting and fixing bugs as we work towards getting this bos grunniens ready. Beta 1 includes a number of software updates that are ready for wider testing. These images are still under development, so you should expect some bugs," says Set Hallstrom, Ubuntu Studio project lead. He adds: "While these Beta 1 images have been tested and work, except as noted in the release notes, Ubuntu developers are continuing to improve the Yakkety Yak. In particular, once newer daily images are available, system installation bugs identified in the Beta 1 installer should be verified against the current daily image before being reported in Launchpad. Using an obsolete image to re-report bugs that have already been fixed wastes your time and the time of developers who are busy trying to make 16.10 the best Ubuntu release yet. Always ensure your system is up to date before reporting bugs."' -- source: https://linux.slashdot.org/story/16/08/26/2318219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Has Science Become Infected With Microsoft Excel Syndrome?
by Lawrence D'Oliveiro 25 Aug '16

25 Aug '16

Seems like Microsoft Excel has become an accepted tool for researchers to crunch numbers with, in spite of its obvious pitfalls. I thought it was only economists who fell into this trap <https://www.techdirt.com/articles/20130417/02263922736/intellectual-bulwark…>. But it turns out other scientists do, too <http://www.theregister.co.uk/2016/08/25/excel_hell_messes_up_20_per_cent_of…>. What’s worse is that this is hardly a new observation <https://www.techdirt.com/articles/20140727/03133828025/using-spreadsheets-b…>. I thought science was a process of learning from experience?

1 0

PowerShell is Microsoft’s latest open source release, coming to Linux, OS X
by Peter Reutemann 23 Aug '16

23 Aug '16

"Microsoft today released its PowerShell scripting language and command-line shell as open source. The project joins .NET and the Chakra JavaScript engine as an MIT-licensed open source project hosted on GitHub." -- source: http://arstechnica.com/information-technology/2016/08/powershell-is-microso… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2