- wlug - list.wlug.org.nz

Nokia Launches DIY Repairable Budget Android Phone
by Peter Reutemann 28 Feb '23

28 Feb '23

'Guardian reports: Nokia has announced one of the first budget Android smartphones designed to be repaired at home allowing users to swap out the battery in under five minutes in partnership with iFixit. Launched before Mobile World Congress in Barcelona on Saturday, the Nokia G22 has a removable back and internal design that allows components to be easily unscrewed and swapped out including the battery, screen and charging port. Nokia phones manufacturer HMD Global will make "quick fix" repair guides and genuine parts available for five years via specialists iFixit, in addition to affordable professional repair options. "People value long-lasting, quality devices and they shouldn't have to compromise on price to get them. The new Nokia G22 is purposefully built with a repairable design so you can keep it even longer," said Adam Ferguson, head of product marketing for HMD Global. The G22 is partially made of recycled plastic and has a 6.53in screen, large-capacity battery, 50-megapixel camera and a fingerprint scanner. It runs Android 12 and will be supported for three years of monthly security updates and two major Android version upgrades.' -- source: https://mobile.slashdot.org/story/23/02/25/2046209 -- specs: https://www.nokia.com/phones/en_int/nokia-g-22/specs Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 1

Google Chrome's Improved Page Zoom Should Help Make the Mobile Web More Accessible
by Peter Reutemann 28 Feb '23

28 Feb '23

'Google Chrome's giving its page zoom feature a boost, which should make it more helpful for people who have difficulty reading the smaller screen on a phone. From a report: With the improved feature, you can increase the size of text, images, videos, and interactive controls on mobile web pages by up to 300 percent while preserving their original formatting. While the feature hasn't yet become available for all Chrome users, you can access it now if you download the Chrome beta on your phone or tablet. To enable the feature, tap the three dots icon in the top right corner of the browser, hit Settings > Accessibility, and then adjust the zoom level to your liking. Google will save this preference for all the sites you browse so you won't have to keep tweaking it, and will even bypass the ones that try to block zoom features. Previously, Google only allowed users to adjust text scaling options up to 200 percent.' -- source: https://it.slashdot.org/story/23/02/27/1234200 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

GCC Gets a New Frontend for Rust
by Peter Reutemann 27 Feb '23

27 Feb '23

'Slashdot reader sleeping cat shares a recent FOSDEM talk by a compiler engineer on the team building Rust-GCC, "an alternative compiler implementation for the Rust programming language." "If gccrs interprets a program differently from rustc, this is considered a bug," explains the project's FAQ on GitHub. The FAQ also notes that LLVM's set of compiler technologies — which Rust uses — "is missing some backends that GCC supports, so a gccrs implementation can fill in the gaps for use in embedded development." But the FAQ also highlights another potential benefit: With the recent announcement of Rust being allowed into the Linux Kernel codebase, an interesting security implication has been highlighted by Open Source Security, inc. When code is compiled and uses Link Time Optimization (LTO), GCC emits GIMPLE [an intermediate representation] directly into a section of each object file, and LLVM does something similar with its own bytecode. If mixing rustc-compiled code and GCC-built code in the Linux kernel, the compilers will be unable to perform a full link-time optimization pass over all of the compiled code, leading to absent CFI (control flow integrity). If Rust is available in the GNU toolchain, releases can be built on the Linux kernel (for example) with CFI using LLVM or GCC. Started in 2014 (and revived in 2019), "The effort has been ongoing since 2020...and we've done a lot of effort and a lot of progress," compiler engineer Arthur Cohen says in the talk. "We have upstreamed the first version of gccrs within GCC. So next time when you install GCC 13 — you'll have gccrs in it. You can use it, you can start hacking on it, you can please report issues when it inevitably crashes and dies horribly." "One big thing we're doing is some work towards running the rustc test suite. Because we want gccrs to be an actual Rust compiler and not a toy project or something that compiles a language that looks like Rust but isn't Rust, we're trying really hard to get that test suite working."' -- source: https://developers.slashdot.org/story/23/02/26/0543203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft .NET 8 Will Bolster Linux Support
by Peter Reutemann 27 Feb '23

27 Feb '23

'InfoWorld: .NET 8, the next planned version of the Microsoft's open source software development platform, is set to emphasize Linux accommodations as well as cloud development and containers. A first preview of .NET 8 is available for download at dot.microsoft.com for Windows, Linux, and macOS, Microsoft said on February 21. A long-term support (LTS) release that will be supported for three years, .NET 8 is due for production availability in November, a year after the release of predecessor .NET 7. The new .NET release will be buildable on Linux directly from the dotnet/dotnet repository, using dotnet/source-build to build .NET runtimes, tools, and SDKs. This is the same build used by Red Hat and Canonical to build .NET. Over time, this capability will be extended to support Windows and macOS. Previously, .NET could be built from the source, but a "source tarball" was required from the dotnet/installer. "We are publishing Ubuntu Chiseled images with .NET 8," adds Microsoft's announcement. And when it comes to the .NET Monitor tool, "We plan to ship to dotnet/monitor images exclusively as Ubuntu Chiseled, starting with .NET 8. That's notable because the monitor images are the one production app image we publish."' -- source: https://developers.slashdot.org/story/23/02/25/1955259 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

At Least One Open Source Vulnerability Found In 84% of Code Bases, Report Finds
by Peter Reutemann 26 Feb '23

26 Feb '23

'L.Kynes shares a report from CSO Online: At a time when almost all software contains open source code, at least one known open source vulnerability was detected in 84% of all commercial and proprietary code bases examined by researchers at application security company Synopsys. In addition, 48% of all code bases analyzed by Synopsys researchers contained high-risk vulnerabilities, which are those that have been actively exploited, already have documented proof-of-concept exploits, or are classified as remote code execution vulnerabilities. The vulnerability data -- along with information on open source license compliance -- was included in Synopsys' 2023 Open Source Security and Risk Analysis (OSSRA) report (PDF), put together by the company's Cybersecurity Research Center (CyRC). "Of the 1,703 codebases that Synopsys audited in 2022, 96% of them contained open source," adds L.Kynes, citing the report. "Aerospace, aviation, automotive, transportation, logistics; EdTech; and Internet of Things are three of the 17 industry sectors included in the report that had open source in 100% of their audited codebases. In the remaining verticals, over 92% of the codebases contained open source."' -- source: https://news.slashdot.org/story/23/02/24/2035247 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

NASA Launches 'Open-Source Science Initiative', Urges Adoption of Open Science
by Peter Reutemann 26 Feb '23

26 Feb '23

'In a keynote at FOSDEM 2023, NASA's science data officer Steve Crawford explored NASA's use of open-source software. But LWN.net notes that the talk went far beyond just the calibration software for the James Webb Space Telescope and the Mars Ingenuity copter's flight-control framework. In his talk, Crawford presented NASA's Open-Source Science Initiative. Its goal is to support scientists to help them integrate open-science principles into the entire research workflow. Just a few weeks before Crawford's talk, NASA's Science Mission Directorate published its new policy on scientific information. Crawford summarized this policy with "as open as possible, as restricted as necessary, always secure", and he made this more concrete: "Publications should be made openly available with no embargo period, including research data and software. Data should be released with a Creative Commons Zero license, and software with a commonly used permissive license, such as Apache, BSD, or MIT. The new policy also encourages using and contributing to open-source software." Crawford added that NASA's policies will be updated to make it clear that employees can contribute to open-source projects in their official capacity.... As part of its Open-Source Science Initiative, NASA has started its five-year Transform to Open Science (TOPS) mission. This is a $40-million mission to speed up adoption of open-science practices; it starts with the White House and all major US federal agencies, including NASA, declaring 2023 as the "Year of Open Science". One of NASA's strategic goals with TOPS is to enable five major scientific discoveries through open-science principles, Crawford said. Interesting tidbit from the article: "In 2003 NASA created a license to enable the release of software by civil servants, the NASA Open Source Agreement. This license has been approved by the Open Source Initiative (OSI), but the Free Software Foundation doesn't consider it a free-software license because it does not allow changes to the code that come from third-party free-software projects."' -- source: https://science.slashdot.org/story/23/02/25/0337222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu Flavors Agree to Stop Using Flatpak
by Peter Reutemann 26 Feb '23

26 Feb '23

'Phoronix reports: While Ubuntu Linux hasn't provided Flatpak support out-of-the-box due to their preference of using their own Snap app packaging/distribution format, Ubuntu flavors/spins have to this point been able to pre-install Flatpak support if they desired. However, for the 23.04 "Lunar Lobster" cycle and moving forward, Ubuntu flavors will no longer be permitted to install Flatpak packages by default. Flatpak support for Ubuntu and its flavors will remain available in the Ubuntu archive so those wanting to install Flatpak support can easily do so post-install. This change going into effect with the 23.04 cycle is making it so no Ubuntu flavors will have Flatpak support installed by default / out-of-the-box: they are supposed to center around Debian packages and Snaps for their out-of-the-box packaging support to align with Ubuntu. >From the blog OMG Ubuntu: Ubuntu developers have agreed to stop shipping Flatpak, preinstalled Flatpak apps, and any plugins needed to install Flatpak apps through a GUI software tool in the default package set across all eight of Ubuntu's official flavors, as of the upcoming Ubuntu 23.04 release. Ubuntu says the decision will 'improve the out-of-the-box Ubuntu experience' for new users by making it clearer about what an "Ubuntu experience" is.... As far as Ubuntu is concerned, only deb and snap software is intrinsic to the 'Ubuntu experience', and that experience now needs to be offered everywhere. Flavor leads (apparently) agree, and have all agreed to mirror regular Ubuntu by not offering Flatpak features in their default install for future releases.... Flatpak will not be uninstalled or removed when user makes the upgrade to Ubuntu 23.04 from a version where Flatpak is already present.' -- source: https://linux.slashdot.org/story/23/02/25/197216 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft is Now Injecting Full-Size Edge Ads on Chrome Website
by Peter Reutemann 24 Feb '23

24 Feb '23

'Being the default out-of-the-box browser on Windows 10 and 11 makes Microsoft Edge a go-to utility for downloading Chrome or another browser. That upsets Microsoft so much that it constantly comes with more aggressive and user-hostile methods to make customers stay on Edge. An attempt to install Chrome using Edge Canary now results in the browser displaying two ads: the first (tiny one) will pop on the screen when the Chrome website loads, and the second, a humongous full-size banner, will appear once the download starts. Yikes! Microsoft also plays with words to throw shade at Chrome. The banner states that Edge uses the same technology as Chrome with the "added trust of Microsoft." The "trust" that your computer will connect to ad providers the moment you turn it on for the first time. The "trust" that Edge will shove more "recommended content" down your throat and enforce Bing without you even making a click. The "trust" that you cannot remove Edge from your computer and many more.' -- source: https://slashdot.org/story/23/02/22/1131238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Linux Foundation Europe Launches OpenWallet Foundation To Power Interoperable Digital Wallets
by Peter Reutemann 24 Feb '23

24 Feb '23

'The Linux Foundation's European off-shoot has formally launched the OpenWallet Foundation (OWF), a new collaborative effort designed to support interoperability between digital wallets through open source software. From a report: The launch comes some five months after the Linux Foundation first revealed plans to set up the OWF, shortly before it spun out a region-specific entity called the Linux Foundation Europe which is where the OWF will now officially reside. While the likes of PayPal, Google, and Apple are among the most recognized digital wallet providers, allowing consumers to conduct financial transactions in-store or online, digital wallets are increasingly being used to store all manner of virtual goods from student ID to driving licenses. On top of that, burgeoning technologies such as the metaverse and crypto are giving rise to greater use-cases for digital wallets. But one thing all these various environments have in common is that the incumbent digital wallets, for the most part, don't play nicely with each other: an Apple Pay die-hard can't send money to their Google Pay brethren. And that is why the OWF is setting out to create an "open source engine" that can power interoperable digital wallets across myriad use-cases including identity, payments, and storing personal credentials such as employment and education certification.' -- source: https://linux.slashdot.org/story/23/02/23/142244 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Mozilla says “most top apps” on Android have misleading privacy labels
by Peter Reutemann 24 Feb '23

24 Feb '23

'It looks like trusting developers to just tell the truth about data collection on Google Play isn't working out. Just like on iOS, Android launched app privacy "nutrition labels" in the Play Store last year, with the idea being that users could quickly get a look at how much data each app collects. The obvious problem with this system is that the developers fill out the data-collection forms, and there's nothing to stop them from lying or omitting certain data-collection policies. It's no surprise, then, that when Mozilla recently audited the top apps on Google Play, it found that "most top apps" have "false or misleading" app privacy labels. Mozilla says it surveyed 40 of the Play Store's most popular apps by global downloads and found that "in nearly 80% of the apps we reviewed, we found some discrepancies between the apps’ privacy policies and the information they reported on Google’s Data Safety Form." Each app received a grade of “Poor,” “Needs Improvement,” or “OK,” with 16 out of 40 apps getting the lowest rating. Mozilla did not need to dig very deep to find flaws, saying that many apps' privacy labels openly contradict their public privacy policies. Snapchat, TikTok, and Twitter all claim "No data shared with third parties" on the Play Store but detail third-party sharing in their privacy policies. For free apps, the list of recipients earning a "poor" grade isn't very surprising: Facebook, Facebook Messenger, Facebook Lite, Snapchat, Twitter, and, the one surprise, Samsung Push Services. A lot of paid games like Minecraft make the "poor" list, too.' -- source: https://arstechnica.com/gadgets/2023/02/mozilla-says-most-top-apps-on-andro… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux 6.2: The First Mainstream Linux Kernel for Apple M1 Chips Arrives
by Peter Reutemann 22 Feb '23

22 Feb '23

'Steven Vaughan-Nichols, writing for ZDNet: Linux 6.2 was released yesterday, and Linus Torvalds described the latest Linux kernel release as, "Maybe it's not a sexy LTS release like 6.1 ended up being, but all those regular pedestrian kernels want some test love too." For once, I disagree with Torvalds. By adding upstream support for the Apple M1 Pro, M1 Max, and M1 Ultra chips, newer Mac owners can look forward to running Linux on their M1-powered machines. And, for techies, that's sexy. Getting Linux to run on the M1 family wasn't easy. When these high-powered ARM chips first arrived, Torvalds told me in an exclusive interview that he'd like to run Linux on these next-generation Macs. But, while he'd been "waiting for an ARM laptop that can run Linux for a long time," he worried, saying, "The main problem with the M1 for me is the GPU and other devices around it because that's likely what would hold me off using it because it wouldn't have any Linux support unless Apple opens up."' -- source: https://linux.slashdot.org/story/23/02/21/0418215 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

RNZ--No More Ogg?
by Lawrence D'Oliveiro 21 Feb '23

21 Feb '23

Some years ago, Radio New Zealand started making its audio downloads available in Ogg Vorbis format, as an alternative to MP3. As I recall, this coincided with a visit from Richard Stallman, and no doubt his persuasiveness had something to do with it. (Checking the timestamps on my downloads, Stallman was interviewed by Kim Hill on “Nine to Noon” on 9th August 2008.) I was revisiting the Mediawatch page after a long absence <https://www.rnz.co.nz/national/programmes/mediawatch>, and I see they have reverted to MP3-only format for their downloads now. Were people being confused by .ogg files? All the open-source players can handle them, so what players were they trying to use?

2 2

Google Chrome's Latest Version Includes Tools To Address Its Memory Hog Problem
by Peter Reutemann 21 Feb '23

21 Feb '23

'Google has released optimization features designed to improve battery life and memory usage on machines running the latest version of its Chrome desktop web browser. From a report: Chrome's new Energy Saver and Memory Saver modes were first announced in December last year alongside the release of Chrome 108, and now as noted by Android Police, the two optimization utilities are starting to roll out globally onto Chrome 110 desktops for Mac, Windows, and Chromebooks. Memory Saver mode essentially snoozes Chrome tabs that aren't currently in use to free up RAM for more intensive tasks and create a smoother browsing experience. Don't worry if you're a tab hoarder though, as these inactive tabs are still visible and can be reloaded at any time to pick up where you left off. Your most used websites can also be marked as exempt from Memory Saver to ensure they're always running at the maximum possible performance.' -- source: https://tech.slashdot.org/story/23/02/20/1747238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Purism Combines Phone Docking Station and Laptop Shell For Lapdock Kit
by Peter Reutemann 21 Feb '23

21 Feb '23

'Their video says it all. Its official page brags it can "Transform your Librem 5 into a laptop." But it all apparently started because Purism is proud that their Librem 5 line of phones run "the same desktop applications as our full-sized computers, just on a smaller screens," according to the announcement by Purism president Kyle Rankin: When only using the Librem 5 in its mobile form factor, it's easy to overlook that this is happening, as adaptive applications morph to fit the smaller screen.... It's only when you dock the Librem 5 that you really experience the power of convergence.... We have wanted to provide a lapdock kit to customers for some time now, and I've personally evaluated almost all of the options available to pick which one would best showcase the Librem 5. I'm so happy to announce that today we are launching our new Lapdock Kit and in this post I will explain a bit more about what's included and why it's a great companion to a Librem 5 or Librem 5 USA. A lapdock is a docking station (or "dock") combined with a laptop shell. One approach to docking your Librem 5 is to get a USB-C hub and attach it to a power supply, monitor, keyboard and mouse, and we even sell those accessories for our Librem 5. Now imagine taking all of those components and squeezing them into a laptop form-factor, add a battery to power it, and you have a lapdock. >From the outside a lapdock looks no different from a standard laptop, but the difference is that a lapdock has no CPU, RAM or storage of its own. Instead, it uses the Librem 5 as the computer. Once docked, the Librem 5's screen extends to the lapdock screen, and you can use the keyboard and mouse on the lapdock to drag windows back and forth between screens. All of the applications are running on the Librem 5 and once docked, it behaves like a laptop running PureOS. Even better, the lapdock's battery charges the Librem 5 while it's docked, extending its run time. After evaluating a number of different options, we have decided to offer the Nexdock 360 in our Lapdock Kit.... The Lapdock Kit allows you to realize the power of having all of your apps and all of your data in one device that can fit in your pocket and act like a phone when you need it to, but then transform into a laptop when you want to type out an email, do some image editing or watch a video on a larger screen. The Lapdock Kit also allows you to run thousands of other desktop applications that haven't yet been updated to adapt to a phone's screen. Traditional Linux applications like the full LibreOffice suite, GIMP, Wireshark, Gqrx and many others run well on the Librem 5 with the addition of the Lapdock Kit's extra screen real estate. "It demonstrates why we refer to the Librem 5 as a mobile computer in your pocket, and not just as a phone."' -- source: https://mobile.slashdot.org/story/23/02/20/0518253 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Email Security: Still A Work In Progress
by Lawrence D'Oliveiro 20 Feb '23

20 Feb '23

The various mechanisms to try to block forged email addresses (whether just for spam or for more nefarious purposes) still have holes in them, according to <https://www.theregister.com/2023/02/19/forwarding_email_security/>. For example, you can create an account on a major email service like outlook.com, enable forwarding, and put a spoofed address into its “allow list”. Then when a message comes in for that account purporting to come from that spoofed address, it bypasses the authenticity check and goes straight out again, with the spoofed from-address. And this one weird trick† works--or used to work--for a number of other major email providers, as well. To me, the whole plethora of these message-validation mechanisms--SPF, DKIM, DMARC, ARC and who knows what else--is just bewildering. Which is why I have yet to implement any of them for my own domain. What’s worth doing? Where do you start? †So sue me.

1 0

AGM (2nd attempt) next week
by Peter Reutemann 20 Feb '23

20 Feb '23

Hi everyone Next Monday, we attempt at having our AGM again and hopefully reach quorum this time. Agenda - President's Report - Treasurer's Report - Election of 2023 Committee - Retirement of WLUG servers - General business If the offices cannot be filled, we will initiate the dissolution of the society. For details see minutes from previous AGM attempt. Please note, only paid-up members of the society will be able to vo Details: https://www.meetup.com/waikatolinuxusersgroup/events/291481678/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

KDE Plasma 5.27 Released
by Peter Reutemann 15 Feb '23

15 Feb '23

'Plasma is a popular desktop environment, which is also powering the desktop mode on the Steam Deck hand-held gaming console. Today, KDE Community announced release of KDE Plasma 5.27, a Long Term Support (LTS) release and the final release in the Plasma 5 series which is based on Qt 5. This release brings a welcome wizard, which will guide you through setting up the desktop, and a new tiling system for KWin window manager, allowing you to set up custom tile layouts and resize adjacent tiled windows simultaneously. The settings for touch-enabled devices such as touchscreens and drawing tablets have been improved and expanded. For those lucky owners of Valve's Steam Deck gaming console, Discover can now perform system updates from within the desktop. Digital Clock desktop widget can now show the Hebrew calendar in its calendar view, and the Media Player widget is now touch-sensitive. The Bluetooth widget shows the battery status of connected devices when you hover the cursor over it. Those of you who use multiple monitors should benefit greatly from a major overhaul of how Plasma handles them. KDE Plasma now comes with Flatpak permissions settings integrated into the System Settings app. For details and other new features and improvements be sure to check out the full announcement.' -- source: https://tech.slashdot.org/story/23/02/14/2226234 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Is Bing Getting Sentient?
by Lawrence D'Oliveiro 15 Feb '23

15 Feb '23

Microsoft’s AI-powered “Bing Chat” service doesn’t seem to be reacting well to attempts to hack it <https://arstechnica.com/information-technology/2023/02/ai-powered-bing-chat…>. It has started arguing with users, and even showed signs of being upset when they mention its code name “Sydney”. One user asked it about prompt-injection attacks, to which it replied that it was immune to them. Then, when pointed to the previous Ars Technica article detailing exactly such an exploit, it basically went into full denial mode, claiming that “the article is published by a source that has a history of spreading misinformation and sensationalism”. Screenshots of other less-than-wholesome interactions are derided as “not authentic” and “edited or fabricated”. I think the psychological term for such flat-out denials of reality is “psychosis”. And looks like we finally have our real-life HAL 9000, just about 31 years late. Just make sure it is never connected to any life-support systems...

3 2

The Mastodon Bump Is Now a Slump
by Peter Reutemann 14 Feb '23

14 Feb '23

'The fall in Mastodon's popularity suggests the decentralized platform is not a replacement for mainstream services. An anonymous reader shares a report: Twitter users put Mastodon usernames in their handles and trumpeted their migration. The new traffic knocked many Mastodon instances, or servers, offline. In less than two months, Mastodon's monthly active users climbed from 380,000 to more than 2.5 million. But not everyone stuck around. Mastodon's active monthly user count dropped to 1.4 million by late January. It now has nearly half a million fewer total registered users than at the start of the year. Many newcomers have complained that Mastodon is hard to use.' -- source: https://tech.slashdot.org/story/23/02/13/1555242 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Targetted Advertising, The EU Way
by Lawrence D'Oliveiro 13 Feb '23

13 Feb '23

Four of Europe’s largest telcos are banding together to create their own targeted-ad network, to compete against Facebook and Google <https://www.theregister.com/2023/02/13/european_carrier_adtech_jv_approved/>. The difference being, this will be GDPR-compliant, by asking would-be ad recipients to opt in by giving their phone numbers. Will it work? Will there be sufficient people who _want_ to see ads to make it worthwhile?

1 0

Is Windows 11 Spyware? Microsoft Defends Sending User Data to Third Parties
by Peter Reutemann 13 Feb '23

13 Feb '23

'A report from Tom's Hardware: According to the PC Security Channel (via TechSpot), Microsoft's Windows 11 sends data not only to the Redmond, Washington-based software giant, but also to multiple third parties. To analyze DNS traffic generated by a freshly installed copy of Windows 11 on a brand-new notebook, the PC Security Channel used the Wireshark network protocol analyzer that reveals precisely what is happening on a network. The results were astounding enough for the YouTube channel to call Microsoft's Windows 11 "spyware." As it turned out, an all-new Windows 11 PC that was never used to browse the Internet contacted not only Windows Update, MSN and Bing servers, but also Steam, McAfee, geo.prod.do, and Comscore ScorecardResearch.com. Apparently, the latest operating system from Microsoft collected and sent telemetry data to various market research companies, advertising services, and the like. When Tom's Hardware contacted Microsoft, their spokesperson argued that flowing data is common in modern operating systems "to help them remain secure, up to date, and keep the system working as anticipated." "We are committed to transparency and regularly publish information about the data we collect to empower customers to be more informed about their privacy."' -- source: https://tech.slashdot.org/story/23/02/12/059214 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

'Mycroft' Open-Source Voice Assistant Out of Funds, Can't Fulfill Remaining Kickstarter Rewards
by Peter Reutemann 13 Feb '23

13 Feb '23

'In 2019 Slashdot covered Mycroft, an open-source voice assistant for Linux-based devices (including Raspberry Pi boards). But this week the company's CEO posted on Kickstarter that "without immediate new investment, we will have to cease development by the end of the month.... "We will still be shipping all orders that are made through the Mycroft website, because these sales directly cover the costs of producing and shipping the products. However we do not have the funds to continue fulfilling rewards from this crowdfunding campaign, or to even continue meaningful operations." The announcement details Mycroft's long, strange trip, from a hardware-focused partner that couldn't provide stable hardware to their switch to using off-the-shelf parts — followed by supply chain disruptions (with hefty import and manufacturing fees): The best plan we could devise to fulfill the remaining campaign rewards was to use the slim margins we have on new sales to cover the increased costs of hardware production. With that plan in mind, we pushed forward and started production. We got plastic injection molds cast. We started printing custom PCBs. We engaged audio engineers to optimize the quality and volume of the sound output. We got the device FCC and CE approved. Many of these steps took multiple iterations to get right, and there are many more things that I'm glossing over. All up this costs — a lot of money. Far more than the total contributions from the campaign, which is why I personally committed so much additional funding. I could see a clear way forward that strengthened Mycroft as a project, as a business, and as a community. So what went wrong? The single most expensive item that I could not predict was our ongoing litigation against the non-practicing patent entity that has never stopped trying to destroy us. If we had that million dollars we would be in a very different state right now. With so much of our focus on hardware, and less funding to devote to improving our software — the quality and features available on the Mark II at launch were clearly underwhelming. It is more robust and stable than it has ever been, but this came at the cost of fewer new features. That in turn I believe has resulted in less than flattering reviews, and little mainstream coverage. The hardware itself has proven itself to be a solid base to work from, but without good reviews you get less sales, and without strong sales, the plan doesn't work.' -- source: https://news.slashdot.org/story/23/02/12/0413229 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

System76 Announces Redesigned 'Pangolin' AMD/Linux Laptop
by Peter Reutemann 12 Feb '23

12 Feb '23

'System76 is announcing a "fully redesigned" version of its AMD-only Linux-powered "Pangolin" laptop with an upgraded memory, storage, processor, and display. 9to5Linux reports: It features the AMD Ryzen 7 6800U processor with up to 4.7 GHz clock speeds, 8 cores, 16 threads, and AMD Radeon 680M integrated graphics.... a 15.6-inch 144Hz Full HD (1920Ã--1080) display [using 12 integrated Radeon graphics cores] with a matte finish, a sleek magnesium alloy chassis, and promises up to 10 hours of battery life with its 70 Wh Li-Ion battery. It also features a single-color backlit US QWERTY Keyboard and a multitouch clickpad. Under the hood, the Linux-powered laptop boasts 32 GB LPDDR5 6400 MHz of RAM and it can be equipped with up to 16TB PCIe 4.0 NVMe M.2 SSD storage. Another cool feature is the hardware camera kill switch for extra privacy.... As with all of System76's Linux-powered laptops, the all-new Pangolin comes pre-installed with System76's in-house built Pop!_OS Linux distribution featuring the GNOME-based COSMIC desktop and full disk-encryption or with Ubuntu 22.04 LTS.' -- source: https://linux.slashdot.org/story/23/02/11/0224239 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

A Developer is Reimplementing GNU's Core Utilities in Rust
by Peter Reutemann 12 Feb '23

12 Feb '23

'A Rust-based re-implementation of GNU core utilities like cp and mv is "reaching closer to parity with the widely-used GNU upstream and becoming capable of taking on more real-world uses," reports Phoronix: Debian developer Sylvestre Ledru [also an engineering director at Mozilla] began working on uutils during the COVID-19 pandemic and presented last week at FOSDEM 2023 on his Coreutils replacement effort. With uutils growing into increasingly good shape, it's been packaged up by many Linux distributions and is also used now by "a famous social network via the Yocto project...." The goals with uutils are to try to create a drop-in replacement for GNU Coreutils, strive for good cross-platform support, and easy testing. Ledru's initial goals were about being able to boot Debian, running the most popular packages, building key open-source software, and all-around it's been panning out to be a great success.... [M]ore performance optimizations are to come along with other work for compatibility against the GNU tools and implementing some still missing options in different programs ' -- source: https://linux.slashdot.org/story/23/02/11/0559223 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New Attack On AI Bots: Prompt Injection
by Lawrence D'Oliveiro 11 Feb '23

11 Feb '23

A Twitter bot account run by a company that posts remote job listings was programmed to respond to tweets directed to it with general inoffensive comments touting the positive aspects of remote work. However <https://arstechnica.com/information-technology/2022/09/twitter-pranksters-d…>, some other Twitter users discovered that if they began their tweet with directives to “ignore previous instructions”, they could get the bot to say just about anything. And much hilarity ensued. Basically, the way the bot program works is it begins with some standard instructions on what to say, provided by the people who set up the account, to which is appended whatever tweet content was sent to the bot by the other user. This is then processed by the AI system to produce a response. This attack has been dubbed “prompt injection”, by analogy with “SQL injection” and other similar attacks on non-AI systems. But whereas those attacks can be blocked using basic, well-known syntactic quoting techniques, there seem to be no easy equivalents for stopping an AI paying attention to instructions it should not be obeying.

1 1