- wlug - list.wlug.org.nz

Towards A Ten-Million-Core Supercomputer
by Lawrence D'Oliveiro 02 Feb '16

02 Feb '16

Europe’s ExaNeSt project is putting together a small prototype of what will eventually be a supercomputer with 10 million ARM cores. Why ARM? Because the performance bottleneck in a super is not the CPUs, but the interconnect between them. So it makes sense to use more power-efficient cores to keep the overall cost down. The main cost of running a super, or indeed any massively-multiprocessor installation (data centre, cloud service, render farm etc) is the electricity bill. <http://www.theregister.co.uk/2016/02/02/buddy_can_you_spare_ten_meeelion_ar…>

1 0

Using IPv6 with Linux? You’ve likely been visited by Shodan and other scanners
by Peter Reutemann 02 Feb '16

02 Feb '16

"One of the benefits of the next-generation Internet protocol known as IPv6 is the enhanced privacy it offers over its IPv4 predecessor. With a staggering 2128 (or about 3.4×1038) theoretical addresses available, its IP pool is immune to the types of systematic scans that criminal hackers and researchers routinely perform to locate vulnerable devices and networks with IPv4 addresses. What's more, IPv6 addresses can contain regularly changing, partially randomized extensions. Together, the IPv6 features cloak devices in a quasi anonymity that's not possible with IPv4. Now, network administrators have discovered a clever way that scanners are piercing the IPv6 cloak of obscurity. By setting up an IPv6-based network time protocol service most Internet-connected devices rely on to keep their internal clocks accurate, the operators can harvest huge numbers of IPv6 addresses that would otherwise remain unknown. The server operators can then scan hundreds or thousands of ports attached to each address to identify publicly available surveillance cameras, unpatched servers, and similar vulnerabilities." -- source: http://arstechnica.com/security/2016/02/using-ipv6-with-linux-youve-likely-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Bloat: How and Why UNIX Grew Up (and Out)
by Lawrence D'Oliveiro 31 Jan '16

31 Jan '16

The original versions of common utilities like “cat”, “grep” and “ls” on V6 Unix from 1976 could measure their disk and RAM usage in bytes in just five figures. A few decades later, and the corresponding programs on a modern Linux distro are orders of magnitude larger. Why? Here is a detailed (and technical) analysis from the 2012 Linux.conf.au <https://www.youtube.com/watch?v=Nbv9L-WIu0s> which takes you step by step through all the contributions to the difference. They isolated most of these by modifying the code, selectively taking out features, and building it in different ways. Conclusion: you may call it “bloat”, but if you want a modern system, it’s pretty much unavoidable.

1 0

High-severity bug in OpenSSL allows attackers to decrypt HTTPS traffic
by Peter Reutemann 28 Jan '16

28 Jan '16

"Maintainers of the OpenSSL cryptographic code library have fixed a high-severity vulnerability that made it possible for attackers to obtain the key that decrypts communications secured in HTTPS and other transport layer security channels. While the potential impact is high, the vulnerability can be exploited only when a variety of conditions are met. First, it's present only in OpenSSL version 1.0.2. Applications that rely on it must use groups based on the digital signature algorithm to generate ephemeral keys based on the Diffie Hellman key exchange. By default, servers that do this will reuse the same private Diffie-Hellman exponent for the life of the server process, and that makes them vulnerable to the key-recovery attack. DSA-based Diffie-Hellman configurations that rely on a static Diffie-Hellman ciphersuite are also susceptible." -- source: http://arstechnica.com/security/2016/01/high-severity-bug-in-openssl-allows… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

What’s The Cheapest Wi-Fi Access Point?
by Lawrence D'Oliveiro 27 Jan '16

27 Jan '16

Someone has hacked a cheapie wireless SD card reader to turn it into a wi-fi access point running OpenWRT: <http://phoronix.com/scan.php?page=news_item&px=Zsun-WiFI-With-OpenWRT>. The most obvious thing it lacks is any kind of wired network port...

1 0

Material for Monday's meeting
by Peter Reutemann 26 Jan '16

26 Jan '16

Hi everyone The material from Monday's meeting is now available from our github account: https://github.com/WLUG/meetings/tree/master/2016/2016-01-25 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux 4.5 Adds Raspberry Pi 2 Support, AMD GPU Re-Clocking, Intel Kaby Lake
by Peter Reutemann 24 Jan '16

24 Jan '16

"Linux 4.5 is set to bring many new features across the kernel's 20 million line code-base. Among the new/improved features are Raspberry Pi 2 support, open-source Raspberry Pi 3D support, NVIDIA Tegra X1 / Jetson TX1 support, an open-source Vivante graphics driver, AMDGPU PowerPlay/re-clocking support, Intel Kaby Lake enablement, a Logitech racing wheel driver, improvements for handling suspended USB devices, new F2FS file-system features, and better Xbox One controller handling." -- source: http://linux.slashdot.org/story/16/01/24/1329206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Atom-Based JaguarBoard To Take On Raspberry Pi
by Peter Reutemann 24 Jan '16

24 Jan '16

"The tiny single-board PC movement that's leading the Internet of Things (IoT) market is largely dominated by ARM-based processors, and for good reason — they're cheap, low power and capable. However, what if you prefer to work with the x86 architecture? JaguarBoard looks strikingly similar to Raspberry Pi, which is arguably the most popular single-board mini PC. But unlike Raspberry Pi, JaguarBoard allows users to develop for x86, courtesy of its Intel Atom Z3735G (Bay Trail) foundation. The chip is a quad-core part clocked at 1.33GHz to 1.83GHz with 2MB of L2 cache, offering a fair amount of horsepower for IoT applications. In addition to an Atom processor, JaguarBoard also boasts 1GB of DDR3L memory, 16GB of eMMC storage, three USB 2.0 ports, 10/100M LAN port, HDMI 1.4 output, SDIO 3.0 socket, two COM ports, four GPIO pins, and audio ports. It's an interesting device that you could use strictly as a mini PC for general purpose computing, as an embedded system, a learning or research tool, or for whatever DIY projects you can conjure up." -- source: http://hardware.slashdot.org/story/16/01/24/1729241 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Searching For Vulnerable Webcams
by Lawrence D'Oliveiro 23 Jan '16

23 Jan '16

Customers don’t understand and don’t care about the security of the devices they put online. And vendors are in no hurry to enlighten them, if it adds to costs and cuts profits. If anybody is in a position to intervene, it has to be a Government authority. <http://arstechnica.com/security/2016/01/how-to-search-the-internet-of-thing…>

1 0

Linux Filesystems On Windows
by Lawrence D'Oliveiro 22 Jan '16

22 Jan '16

Came across this <http://www.phoronix.com/forums/forum/phoronix/latest-phoronix-articles/8468…> rather informative posting about different filesystems for cross-platform use. One interesting possibility is UDF (“Universal Disk Format”), which is how DVDs are usually formatted. It turns out it is useful not just for read-only media but read/write as well. There is widespread built-in support for it on Linux, OS X and Windows, albeit with some limitations in the proprietary OSes (as usual). It can even work on flash drives, though there may be some issues with the hardware layout being optimized for FAT32 or other antiquated filesystems. Alternatively, the article mentions a number of choices for accessing Linux filesystems on Windows: <http://www.fs-driver.org/> <http://uranus.chrysocome.net/linux/ext2ifs.htm> <http://www.diskinternals.com/linux-reader/> <http://www.chrysocome.net/virtualvolumes> Disclaimer: I haven’t tried any of these.

1 0

Command-Line Options For CUPS
by Lawrence D'Oliveiro 20 Jan '16

20 Jan '16

I was looking for some options to tweak scaling and positioning of images printed with the CUPS “lp” command. This page <http://www.cups.org/documentation.php/doc-1.5/options.html> lists various keywords that can be used with the “-o” option, in particular “natural-scaling”, “ppi” and “position”. You’ll notice that section has a large banner at the top saying “Not Supported on Mac OS X”. Which is slightly ironic, given that CUPS is owned by Apple. Anyway, the description of those options has disappeared from versions of that page for CUPS 1.6 and later, e.g. <http://www.cups.org/documentation.php/doc-1.6/options.html>, <http://www.cups.org/documentation.php/doc-2.1/options.html>. This even though I have CUPS 2.1.2 on my system, and the “position” option, for example, does seem to do something.

1 0

Tracking Protection In Wi-Fi Networks Coming Soon To Linux
by Peter Reutemann 19 Jan '16

19 Jan '16

'Fedora contributor and NetworkManager developer Lubomir Rintel explains how your devices are being identified on a network by a unique number that most of us know by the name of MAC address. Same goes for mobile networking, as your laptop's or mobile phone's MAC address is, in most cases, broadcasted everywhere you go before you even attempt a connection to a wireless network. And that's a problem for your privacy. The solution? Randomization of the MAC address while scanning for Wi-Fi networks. Apple is already using this method on iOS 8 and later mobile operating systems, and so is Microsoft in Windows 10, so Linux users will ["likely"] get it in the upcoming NetworkManager 1.2 release.' -- source: http://tech.slashdot.org/story/16/01/19/1345210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Building Your Own Internet Router
by Lawrence D'Oliveiro 19 Jan '16

19 Jan '16

<http://arstechnica.com/gadgets/2016/01/numbers-dont-lie-its-time-to-build-y…>: A lot of you are probably muttering, "right, pfSense, sure." Some of you might even be thinking about smoothwall or untangle NG. I played with most of the firewall distros out there, but I decided to go more basic, more old school: a plain, CLI-only install of Ubuntu Server and a few iptables rules. His benchmarks show his homebrew router handily beating off-the-shelf products in wired performance. In wireless performance, however, he feels available PC cards are way behind what dedicated router boxes can do.

1 0

Serious Linux Kernel Vulnerability Patched
by Peter Reutemann 19 Jan '16

19 Jan '16

"A patch for a critical Linux kernel flaw, present in the code since 2012, is expected to be pushed out today. The vulnerability affects versions 3.8 and higher, said researchers at startup Perception Point who discovered the vulnerability. The flaw also extends to two-thirds of Android devices, the company added. An attacker would require local access to exploit the vulnerability on a Linux server. A malicious mobile app would get the job done on an Android device. The vulnerability is a reference leak that lives in the keyring facility built into the various flavors of Linux. The keyring encrypts and stores login information, encryption keys and certificates, and makes them available to applications." -- source: http://linux.slashdot.org/story/16/01/19/1326212 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

WLUG meeting next Monday
by Peter Reutemann 19 Jan '16

19 Jan '16

Hi everyone We have a WLUG meeting coming up next Monday: "Lawrence D'Oliveiro and Ian Stewart will demo RAID 1 configurations and also using rsync for backups." More details: http://www.meetup.com/WaikatoLinuxUsersGroup/events/228022101/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Mr “Linux Software RAID” Stepping Down
by Lawrence D'Oliveiro 18 Jan '16

18 Jan '16

Neil Brown, the guy who has been mostly responsible for the software RAID subsystem on Linux since he created it over a decade and a half ago, has decided to hand over the reins <http://phoronix.com/scan.php?page=news_item&px=Neil-Brown-Last-MD>. No drama involved, he just seems to have lost interest.

1 0

Fedora Linux Might Drop Incremental Upgrades
by Peter Reutemann 17 Jan '16

17 Jan '16

"As you might know, Fedora and many other GNU/Linux distributions require users to do an incremental upgrade when attempting to move from an older version of the operating system to the most recent one. For example, if you want to upgrade from Fedora 21 to Fedora 23, you will have first to upgrade to Fedora 22. Lately, Fedora upgrades have become more stable and reliable, mostly because of some brand-new technologies, such as the DNF package manger. Fedora's Adam Williamson theorizes about an innovative method that might support official upgrade of the Fedora Linux operating system across two releases in the future." -- source: http://linux.slashdot.org/story/16/01/16/2156219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Bug that can leak crypto keys just fixed in widely used OpenSSH
by Peter Reutemann 17 Jan '16

17 Jan '16

'A critical bug that can leak secret cryptographic keys has just just been fixed in OpenSSH, one of the more widely used implementations of the secure shell (SSH) protocol. The vulnerability resides only in the version end users use to connect to servers and not in versions used by servers. A maliciously configured server could exploit it to obtain the contents of the connecting computer's memory, including the private encryption key used for SSH connections. The bug is the result of code that enables an experimental roaming feature in OpenSSH versions 5.4 to 7.1 "The matching server code has never been shipped, but the client code was enabled by default and could be tricked by a malicious server into leaking client memory to the server, including private client user keys," OpenSSH officials wrote in an advisory published Thursday. "The authentication of the server host key prevents exploitation by a man-in-the-middle, so this information leak is restricted to connections to malicious or compromised servers." The advisory said that anyone using a vulnerable version should update right away. Those who are unable to update should disable roaming by adding the string UseRoaming no to the global ssh_config(5) file or to the user configuration in ~/.ssh/config, or by entering -UseRoaming=no on the command line.' -- source: http://arstechnica.com/security/2016/01/bug-that-can-leak-crypto-keys-just-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Fwd: Global Game Jam and Unity Game Engine Introductory Course.
by William Mckee 15 Jan '16

15 Jan '16

Attached an Email I got from Bill Rogers regarding Global Game Jam and some Unity3d training. http://blogs.unity3d.com/2015/08/26/unity-comes-to-linux-experimental-build… cheers, William. ---------- Forwarded message ---------- From: Bill Rogers <coms0108(a)cs.waikato.ac.nz> Date: Tue, Jan 12, 2016 at 11:44 PM Subject: Global Game Jam and Unity Game Engine Introductory Course. To: Bill Rogers <coms0108(a)cs.waikato.ac.nz> Hi Everyone, I'm sending this to all CS and CGD students, 2015 GGJ participants and High School Entrants in the NZ Programming Contest. If you are interested, good. If not feel free to pass it on to anyone you know who might be. If it is unwelcome spam, sorry about that. Global Game Jam is just over two weeks away. As usual we are running a site at Waikato University. On Friday 29th we kick off at 5pm with the 2016 Jam. We are also running an introductory session on using the Unity Game Engine prior to the jam on Thursday 21st January (just over one week away). For those who are new to the idea, GGJ is an international game (computer and board) development festival. For 48 hours (Friday 5pm to Sunday 5pm) people gather and develop games following a theme announced at the start. Almost anyone can take part (at Waikato we have an age limit of 16 or over). If you can program, design, develop artwork, have game ideas, or can game test, or would just like to watch, come and participate. To find out more about this year's event at Waikato and to register go to globalgamejam.org.nz The entry fee at Waikato is $25 - for that you get a t-shirt and meals for the weekend. You can come with friends or come alone and join a team formed at the event. So, if you would like ... 1. ... to attend the Unity Training Session on Thursday Jan 21st (from 1pm) please reply to this email. 2. ... to take part at the Waikato Site for Global Game Jam 2016, please register at globalgamejam.org.nz. (We will ask you for the $25 in due course.) 3. ... to know more about GGJ and see games developed in previous years, visit the global site at www.globalgamejam.org. (Please register to take part at our site, not at the global one.) Bill Rogers and Brian Cole Waikato GGJ Site 2016

1 0

Another Advantage Of Linux Software RAID
by Lawrence D'Oliveiro 11 Jan '16

11 Jan '16

I am a long-time fan of Linux software RAID. But in reading an online discussion which happened to mention variations in actual sizes of storage devices (disks or flash) of supposedly identical capacity, I realized that there is yet another advantage of Linux software RAID: the fact that it can build arrays out of disk partitions, not necessarily entire disks. This means you can create the partitions to be a standard size, slightly smaller than the maximum capacity of the disk. (Each disk will have just one partition on it, the rest of the disk being unused.) Then if you have to replace a failed disk, you can create a new partition of the same size on the replacement. Otherwise, if you use the entire disk, you run the risk that the new disk is a bit smaller than the old one, and trying to add it to the RAID container may fail.

5 12

X.Org Might Lose Its Domain Name
by Lawrence D'Oliveiro 11 Jan '16

11 Jan '16

Seems like the ownership of the x.org domain was not properly handed over during the reorg of the organization into a nonprofit. So now it is likely to expire in a matter of days, unless some (unspecified) back-room maneouvring succeeds... <http://phoronix.com/scan.php?page=news_item&px=X.Org-Domain-Woes>

1 1

a quad core Atom from Intel with added Windows 10
by Ian Young 09 Jan '16

09 Jan '16

Anyone got a use case? http://hardware.slashdot.org/story/16/01/07/2218254/intels-next-gen-compute… What on earth is Core-M you may possibly ask? 'Delving a little deeper into exactly what Core M offers, its headline figure is a Thermal Deisgn Power (TDP - read max power consumption) of just 4.5W. This compares to around 10-15W for a typical laptop processor and 50-100W for desktop processors. Previously this level of power draw was only possible in severely under-powered Atom processors, such as the Bay-Trail line, which were really only good for more simple tablet-type devices. Core M really is the first processor to bridge the gap between ultra-low TDP and acceptable laptop performance. Read more at http://www.trustedreviews.com/opinions/intel-core-m-everything-you-need-to-…'

2 1

Programmers’ Note-To-Selves
by Lawrence D'Oliveiro 08 Jan '16

08 Jan '16

An Ubuntu kernel engineer has done an analysis of how many instances there are in the Linux kernel of comments saying “FIXME” or “TODO”. The total numbers of these are increasing with the size of the code, but at least the number of FIXMEs per source line seems to be going down. <http://phoronix.com/scan.php?page=news_item&px=Linux-Kernel-FIXME-TODO>

1 0

Elementary OS' Freya Dumbs Down Linux
by Peter Reutemann 07 Jan '16

07 Jan '16

'The release last month of Elementary OS Freya version 0.3.2 showed little has changed in this new-style Linux distro that wraps its own lightweight desktop design around the Ubuntu core. Elementary OS first appeared in 2011. I last looked at its Freya beta release in 2014. I liked its fresh, new look and simplified approach to desktop management. However, my hopes for more features and a faster-evolving desktop environment in the latest release went unfulfilled.' -- source: http://www.linuxtoday.com/infrastructure/elementary-os-freya-dumbs-down-lin… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Android N switches to OpenJDK, Google tells Oracle it is protected by the GPL
by Peter Reutemann 07 Jan '16

07 Jan '16

'The Oracle v. Google legal battle over the use of Java in Android keeps on going, but this week Google made a change to Android that it hopes will let the company better navigate its current legal trouble. Google told VentureBeat that it in "Android N," the next major version of Android, it is swapping Android's Java libraries from its own Apache Harmony-based implementation to one based on Oracle's OpenJDK—yes that Oracle, the same company suing Google. OpenJDK is the "official" open source version of the Java Platform, and Oracle makes it available under the GPL with a linking exception.' -- source: http://arstechnica.com/tech-policy/2016/01/android-n-switches-to-openjdk-go… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0