- wlug - list.wlug.org.nz

GParted Live Now Supports Microsoft's New Filesystem, ReFS
by Peter Reutemann 29 Jan '15

29 Jan '15

"GParted Live is a small bootable GNU/Linux distribution that has a lot of features and that can be used in operations like creating, reorganizing, and deleting disk partitions on a variety of filesystems. A new stable update has been made available and the operating system is now at version 0.21.0." -- source: http://news.softpedia.com/news/GParted-Live-Now-Supports-MIcrosoft-s-New-Fi… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

FSF-Endorsed Libreboot X200 Laptop Comes With Intel's AMT Removed
by Peter Reutemann 29 Jan '15

29 Jan '15

'"The Free Software Foundation has announced its endorsement of the Libreboot X200, a refurbished Lenovo ThinkPad X200 sold by Gluglug. The laptop ships with 100% free software and firmware, including the FSF's endorsed Trisquel GNU/Linux and Libreboot. One of the biggest challenges overcome in achieving FSF's Respects Your Freedom certification was the complete removal of Intel's ME and AMT firmware. The AMT is a controversial proprietary backdoor technology that allows remote access to a machine even when it is powered off. Quoting from the press release: "The ME and its extension, AMT, are serious security issues on modern Intel hardware and one of the main obstacles preventing most Intel based systems from being liberated by users. On most systems, it is extremely difficult to remove, and nearly impossible to replace. Libreboot X200 is the first system where it has actually been removed, permanently," said Gluglug Founder and CEO, Francis Rowe."' -- source: http://hardware.slashdot.org/story/15/01/29/2241214 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Georgia Institute of Technology Researchers Bridge the Airgap
by Peter Reutemann 29 Jan '15

29 Jan '15

"Hacked has a piece about Georgia Institute of Technology researchers keylogging from a distance using the electromagnetic radiation of CPUs. They can reportedly do this from up to 6 meters away. In this video, using two Ubuntu laptops, they demonstrate that keystrokes are easily interpreted with the software they have developed. In their white paper they talk about the need for more research in this area so that hardware and software manufacturers will be able to develop more secure devices. For now, Farraday cages don't seem as crazy as they used to, or do they?" -- source: http://it.slashdot.org/story/15/01/29/141243 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Mozilla Dusts Off Old Servers, Lights Up Tor Relays
by Peter Reutemann 29 Jan '15

29 Jan '15

"According to The Register, "Mozilla has given the Tor network a capacity kick with the launch of 14 relays that will help distribute user traffic. Engineers working under the Foundation's Polaris Project inked in November pulled Mozilla's spare and decommissioned hardware out of the cupboard for dedicated use in the Tor network. It included a pair of Juniper EX4200 switches and three HP SL170zG6 (48GB ram, 2*Xeon L5640, 2*1Gbps NIC) servers, along with a dedicated existing IP transit provider (2 X 10Gbps). French Mozilla engineer Arzhel Younsi (@xionoxfr) said its network was designed to fall no lower than half of its network capacity in the event of maintenance or failure. The Polaris initiative was a effort of Mozilla, the Tor Project and the Centre for Democracy and Technology to help build more privacy controls into technology." -- source: http://hardware.slashdot.org/story/15/01/29/192215 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Ubuntu 15.04 Is The Easy Path To Better Performance For Ubuntu Users On Intel Broadwell
by Peter Reutemann 29 Jan '15

29 Jan '15

"Unless you manually upgrade your kernel and other system packages from your Ubuntu 14.10 installation, Ubuntu 15.04 Vivid Vervet is an important release for users of new Intel Broadwellsystems for ensuring your hardware reaches its maximum performance potential." -- source: http://www.phoronix.com/scan.php?page=article&item=ubuntu-1504-5600u&num=1 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Serious Network Function Vulnerability Found In Glibc
by Peter Reutemann 28 Jan '15

28 Jan '15

"A very serious security problem has been found and patched in the GNU C Library (Glibc). A heap-based buffer overflow was found in __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() function calls. A remote attacker able to make an application call to either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the program. The vulnerability is easy to trigger as gethostbyname() can be called remotely for applications that do any kind of DNS resolving within the code. Qualys, who discovered the vulnerability (nicknamed "Ghost") during a code audit, wrote a mailing list entry with more details, including in-depth analysis and exploit vectors." -- sources: http://news.slashdot.org/story/15/01/27/1925208 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 4

Opera Founder Is Back, WIth a Feature-Heavy, Chromium-Based Browser
by Peter Reutemann 27 Jan '15

27 Jan '15

"Almost two years ago, the Norwegian browser firm Opera ripped out the guts of its product and adopted the more standard WebKit and Chromium technologies, essentially making it more like rivals Chrome and Safari. But it wasn't just Opera's innards that changed; the browser also became more streamlined and perhaps less geeky. Many Opera fans were deeply displeased at the loss of what they saw as key differentiating functionality. So now Jon von Tetzchner, the man who founded Opera and who would probably never have allowed those drastic feature changes, is back to serve this hard core with a new browser called Vivaldi." -- source: http://tech.slashdot.org/story/15/01/27/1733259 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 3

EFF Unveils Plan For Ending Mass Surveillance
by Peter Reutemann 27 Jan '15

27 Jan '15

'The Electronic Frontier Foundation has published a detailed, global strategy for ridding ourselves of mass surveillance. They stress that this must be an international effort — while citizens of many countries can vote against politicians who support surveillance, there are also many countries where the citizens have to resort to other methods. The central part of the EFF's plan is: encryption, encryption, encryption. They say we need to build new secure communications tools, pressure existing tech companies to make their products secure against everyone, and get ordinary internet-goers to recognize that encryption is a fundamental part of communication in the surveillance age. They also advocate fighting for transparency and against overreach on a national level. "[T]he more people worldwide understand the threat and the more they understand how to protect themselves—and just as importantly, what they should expect in the way of support from companies and governments—the more we can agitate for the changes we need online to fend off the dragnet collection of data." The EFF references a document created to apply the principles of human rights to communications surveillance, which they say are "our way of making sure that the global norm for human rights in the context of communication surveillance isn't the warped viewpoint of NSA and its four closest allies, but that of 50 years of human rights standards showing mass surveillance to be unnecessary and disproportionate."' -- source: http://yro.slashdot.org/story/15/01/27/042212 Cheers, Pete -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linus Fixes Kernel Regression Breaking Witcher 2
by Peter Reutemann 24 Jan '15

24 Jan '15

'There has been quite a debate around the Linux version of The Witcher 2: Assassins of Kings and the fact that it wasn't really a port. A special kind of wrapper was used to make the Windows version of the game run on Linux systems, similar to Wine. The performance on Linux systems took a hit and users felt betrayed because they thought that they would get a native port. However, after the gamestopped launching properly at some point, the reason was actually found to be a Linux regression.Linus quickly took care of the issue on an unofficial Witcher 2 issue tracker on GitHub: "It looks like LDT_empty is buggy on 64-bit kernels. I suspect that the behavior was inconsistent before the tightening change and that it's now broken as a result. I'll write a patch. Serves me right for not digging all the way down the mess of macros." This one goes to the bin "don't break userspace". Linus also reminds of QA: "And maybe this is an excuse for somebody in the x86 maintainer team to try a few games on steam. They *are* likely good tests of odd behavior.."' -- source: http://games.slashdot.org/story/15/01/24/1528232 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Accidentally Deleting Directories
by Lawrence D'Oliveiro 21 Jan '15

21 Jan '15

I suppose every seasoned Linux user has been there (I know I have): done “rm -rf” (or equivalent) to wipe out a directory, only to realize--too late--that it was the wrong one. There’s a discussion currently raging <http://www.theregister.co.uk/2015/01/17/scary_code_of_the_week_steam_cleans…> over a bug just like this in the Steam client for Linux. There is a script that contains the line rm -rf "$STEAMROOT/"* However, as a result of certain (unusual) user actions, the value of the STEAMROOT variable could end up empty, in which case the script proceeds to wipe out every file on the system that your userid has privilege over. What’s the best way to handle this? On the one hand, when setting up a new installation/preferences directory, you want to ensure there is no leftover rubbish in it. But on the other, you want to ensure that any existing directory you delete/replace is in fact an old installation/preferences directory. I’m leaning towards the solution--discussed in the GitHub issue entry--of checking for some distinctive file in the existing directory. If that doesn’t exist, then the directory is not what the script thinks it is. For example, my wipetree script <https://github.com/ldo/git-useful/blob/master/wipetree> checks that there is a .git subdirectory in the directory you want to wipe. It also helps to use “set -e”, so bash aborts the script on an error, instead of barrelling on.

2 1

Canonical Launches Internet-of-Things Version of Ubuntu Core
by Peter Reutemann 21 Jan '15

21 Jan '15

'Ubuntu Linux isn't just for desktops, servers and the cloud anymore. Mark Shuttleworth wants Ubuntu to be the operating system of choice for the Internet of Things too. The new Snappy Ubuntu Core is targeted at device developers and it's the basis for an entire new division of Canonical Inc. The promise of Snappy Ubuntu Core is also one of security, protecting the devices of the world, by keeping them updated. "With Snappy there is also a division of responsibilities for updating that can also help protect IoT devices and users. So we could deliver an update for a Heartbleed or Shellshock vulnerability, completely independently of the lawnmower control app that would come from the lawnmower company," Shuttleworth said.' -- source: http://news.slashdot.org/story/15/01/20/2347214 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 6

The current state of video editing for Linux
by Peter Reutemann 21 Jan '15

21 Jan '15

"I often ask myself what the current state of video editing is for free and open source software (FOSS). Here are my thoughts. I've spent many years in the visual effects (VFX) industry from the perspective of being either an artist, compositor, video editor, or systems engineer. (I've even got film creds on IMDB!) In the past, I had the pleasure of cutting on, training people on, setting up, and supporting Avid Media Composer, the cream of the crop of professional real-time video editing tools for film and TV alike—at least before things like Final Cut Pro and Adobe Premiere became useful enough to professionals." Tested: Pitivi, OpenShot, Lightworks, Avidemux, Cinelerra, KDEnlive, Blender The winner (spoiler): Blender -- source: http://opensource.com/life/15/1/current-state-linux-video-editing Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 3

dates for meetings
by Peter Reutemann 21 Jan '15

21 Jan '15

Hi everyone I've talked to the Bernhard Pfahringer, head of the computer science department, and he's willing to sponsor our meetings (WLUG and Python) again this year. Therefore, I booked the following dates for WLUG: Feb 23 Mar 23 Apr 27 May 25 Jul 27 Aug 24 Sep 28 Nov 23 NB: Some months are unavailable due to exam periods (these periods start already during study week, when the rooms get prepared and cannot be disturbed anymore). This brings me also to the next question: who's up for presenting at the first meeting in February? Any new, funky distros that anyone has taken for a spin? Any Linux-related projects tackled during the summer break? Feel free to contact me off-list and I'll add you to the meeting on meetup.com. As a reminder, our meetings get scheduled here: http://www.meetup.com/WaikatoLinuxUsersGroup/ Thanks and see you in February. Hope you all had a good summer break (at the least the folks in the southern hemisphere)! Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Adobe's Photoshop Ditched for Krita at French University Due to Lack of Support
by Peter Reutemann 19 Jan '15

19 Jan '15

"The ATI (Art and Technology of Image) department at University Paris 8 is switching to Krita this year. This department has the double aim to train students both to use graphic software (2D,3D,VFX and Compositing) and to code their own (Python, C#, C++). Until recently the classes used only Adobe Photoshop, but because of inadequate support from the company the department decided to replace that." -- source: https://krita.org/item/goodbye-photoshop-and-hello-krita-at-university-pari… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

Fwd: [NZOSS-Openchat] LCA'15
by Peter Reutemann 19 Jan '15

19 Jan '15

Apologies if you've received this already. Cheers, Peter ---------- Forwarded message ---------- From: Jaco Date: Mon, Jan 19, 2015 at 9:05 AM Subject: [NZOSS-Openchat] LCA'15 To: NZOSS Open Discussion List Thanks to everyone who attended, participated or helped in the Linux Conference last week. Video's should be available online now: * http://www.youtube.com/user/linuxconfau2015 * http://mirror.linux.org.au/linux.conf.au/2015/ * Local ‪NZ‬ mirror at http://mirror.slingshot.co.nz/pub/linux.conf.au/2015/ thanks to SlingshotNZ! Was good to see many familiar faces, but I was also hoping to see others. OTOH I was running around so much & attention focused on the above, I doubt I would've noticed anyway. Looking forward to working at the next one (this counts as doing my bit for the community, right?) cheers - Jaco _______________________________________________ Openchat mailing list Openchat(a)lists.nzoss.org.nz http://lists.nzoss.org.nz/mailman/listinfo/openchat -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

4 3

Tails 1.2.3 is out
by Peter Reutemann 18 Jan '15

18 Jan '15

"Tails, The Amnesic Incognito Live System, version 1.2.3, is out. This release fixes numerous security issues and all users must upgrade as soon as possible. On January 3rd, the SSL certificate of our website hosting provider, boum.org, expired. This means that if you still are running Tails 1.2.1 or older, you will not get any update notification. Please help spreading the word!" -- source: https://tails.boum.org/news/version_1.2.3/index.en.html Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Security Products Are Wasting Our Time
by Lawrence D'Oliveiro 18 Jan '15

18 Jan '15

Apparently 4 out of 5 alerts reported by malware-detection products are false alarms <http://arstechnica.com/security/2015/01/survey-says-security-products-waste…>. And of course the result is predictable: In 2013, for example, when cybercriminals broke into Target’s systems and loaded malware, the company’s FireEye security system issued an alert for the activity, but the company ignored the alerts. As a result, a District Court judge in Minnesota has given the go-ahead for banks to sue the retailer.

1 0

How Many Weeks Has “The Spectator” Been Publishing?
by Lawrence D'Oliveiro 16 Jan '15

16 Jan '15

Any other readers of “New Scientist” on this list? In the issue of 3rd Jan, the “Feedback” column tried to work out how many weeks various magazines that are still in existence had been publishing. The oldest they could find was “The Spectator”, which first came out on 6th July 1828. Unfortunately they were using Microsoft Excel to do their calculations, with predictably nonsensical results. :) Here’s what I came up with, using the good old “date” command, together with the arithmetic facilities built into bash. Taking it step by step: date +%s prints out the number of seconds since midnight 1st January 1970 to the present time. date -d "6-Jul-1828" +%s does the same for 6th July 1828. Of course this is a very small negative number. It computes and displays fine on my 64-bit system, but might overflow on 32-bit ones. echo $(($(date +%s) - $(date -d "6-Jul-1828" +%s))) prints out the subtraction of the above two numbers, giving the number of seconds from the founding of “The Spectator” to the present time. And finally, echo $(($(($(date +%s) - $(date -d "6-Jul-1828" +%s))) / $((86400 * 7)))) divides that number of seconds by the number of seconds in a week, giving the number of weeks from the founding of “The Spectator” to the present time. Which, by my reckoning, is 9732.

1 0

Run Your Choice Of Linux/Android On A Chromebook
by Lawrence D'Oliveiro 15 Jan '15

15 Jan '15

Google has posted details <http://www.theinquirer.net/inquirer/news/2390180/google-will-now-allow-andr…> of how to boot up your choice of Linux distro (including Android) on a Chromebook, as an alternative to its built-in ChromeOS. This is still extremely fiddly, risk-prone and not for the faint-of-heart.

1 0

Australia Bans Crypto Research
by Lawrence D'Oliveiro 15 Jan '15

15 Jan '15

A law currently being phased in in Australia <http://www.theregister.co.uk/2015/01/14/australia_tries_to_ban_crypto_resea…> would seem to mean serious jail time for those trying to discuss certain advanced crypto technologies with those outside the country: “Was the government warned that it was making a mistake? Apparently so...” Other countries have exemptions for academic researchers. But why should they be treated differently from ordinary people, anyway?

1 0

Microsoft Offers Ubuntu Image with Docker Engine in Azure Marketplace
by Peter Reutemann 15 Jan '15

15 Jan '15

"Microsoft CEO Satya Nadella (seen here) made big headlines late last year when he sang the praises of open source and Linux. Reversing what was long perceived to be a hostile stance for open source, Nadella said that he "loves Linux" and also claimed that 20 percent of Microsoft's Azure cloud is already Linux-based. Furthermore, Microsoft seems to remain committed to providing support for popular Linux distributions in its public cloud offerings. Now, the company has announced Azure Marketplace's first Docker image: Docker on Ubuntu Server by Canonical and Microsoft Open Tech." -- source: http://ostatic.com/blog/microsoft-offers-ubuntu-image-with-docker-engine-in… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 3

Fun With Fontconfig
by Lawrence D'Oliveiro 15 Jan '15

15 Jan '15

Fontconfig <http://www.freedesktop.org/wiki/Software/fontconfig/> is a set of command-line utilities, as well as an API for programs to use. It allows matching of fonts by names and other characteristics, rather than having to hard-code paths to font file names, or having to embed fonts into every document. For example, you format some text in a LibreOffice document. In the GUI, you will see a popup menu of all the fonts available on your system. Having chosen a font to use and saved your document, you send a copy to a friend. But they don’t have the same font installed, so LibreOffice uses Fontconfig to find the next best available font. As another example, Web pages commonly specify fonts by names like “serif” or even “Arial” (actually the name of a Microsoft-created clone of the original “Helvetica” font). While those who really care about typography and layout will use CSS font specifications to get the exact font they want from some server, the rest of us will muddle through with the common names, and expect the Web browser to find a suitable match on the user’s local machine. The command-line utilities allow you to observe this process in action. Given a reasonably vague font name, the fc-match command will show you the exact font file that will be chosen; thus, on my system: ldo(a)theon:~> fc-match -f "%{file}\n" arial /usr/share/fonts/truetype/liberation/LiberationSans-Regular.ttf (You will likely get a different result, depending on what fonts you have installed.) Sometimes the file names are not so explanatory: ldo(a)theon:~> fc-match -f "%{file}\n" palatino /usr/share/fonts/type1/gsfonts/p052003l.pfb in which case, the fc-query command will give you more info about what exactly is in that font file: ldo(a)theon:~> fc-query -f "%{family}\n" /usr/share/fonts/type1/gsfonts/p052003l.pfb URW Palladio L Or, you could have combined both steps into one: ldo(a)theon:~> fc-match -f "%{family} %{file}\n" palatino URW Palladio L /usr/share/fonts/type1/gsfonts/p052003l.pfb The list of what information item names you can put in those “%{...}” format specifiers is not mentioned in any of the man pages, but you can look in /usr/include/fontconfig/fontconfig.h, which is part of the libfontconfig1-dev package. Be warned, though: not all the items listed there will work with all fonts.

1 0

SystemD Gains New Networking Features
by Peter Reutemann 15 Jan '15

15 Jan '15

"A lot of development work is happening on systemd with just the recent couple of weeks seeing over 200 commits. With the most recent work that has landed, the networkd component has been improved with new features. Among the additions are IP forwarding and masquerading support (patch). This is the minimal support needed and these settings get turned on by default for container network interfaces. Also added was minimal firewall manipulation helpers for systemd's networkd. The firewall manipulation helpers (patch) are used for establishing NAT rules. This support in systemd is provided by libiptc, the library used for communicating with the Linux kernel's Netfilter and changing iptables firewall rulesets. Those wishing to follow systemd development on a daily basis and see what is actually happening under the hood, can keep tabs via the systemd Git viewer." -- source: http://linux.slashdot.org/story/15/01/14/2030259 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Samsung Launches Tizen Phone In India
by Peter Reutemann 15 Jan '15

15 Jan '15

"After plenty of speculation and an abort launch in Russia last year, Samsung has finally managed to release its first phone powered by the Tizen operating system. The Samsung Z1 is coming to India initially, where it is available to buy for 5,700 INR — that’s around $92 — from today. The Z1 is an affordable device, both in price and specs. It packs a four-inch WVGA PLS screen, and is powered by a 1.2 GHz dual-core processor and 768 MB RAM. There’s a 3.1-megapixel camera on the rear, and a limited VGA camera on the front. The phone runs version 2.3 of the Tizen operating system, and comes with 4GB of on-device storage which can be expanded by up to 64GB via a micro SD card. It supports dual SIMs, as is commonplace with devices in India." -- source: http://mobile.slashdot.org/story/15/01/14/2023220 Cheers, peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Make a Handheld Linux Terminal with a Raspberry Pi
by Peter Reutemann 14 Jan '15

14 Jan '15

"Robinson's build uses a Raspberry Pi A+, a USB hub, battery, touchscreen, charger, backlit keyboard, and a few other random parts. The whole thing is housed inside of two, 2.5-inch plastic hard drive enclosures that are connected with a piano hinge. You'll need some extra tools like a drill, a soldering iron, and some wire cutters, but otherwise Robinson's guide is pretty straight-forward. " -- source: http://lifehacker.com/make-a-handheld-linux-terminal-with-a-raspberry-pi-16… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0