- wlug - list.wlug.org.nz

Linux Mint Developers Will Force Updates on Users Like Microsoft Does with Windows 10
by Peter Reutemann 02 Mar '21

02 Mar '21

'Last month, the Linux Mint team published a post on the organization's official blog about the importance of installing security updates on machines running the Linux distribution. The essence of the post was that a sizeable number of Linux Mint devices was running outdated applications, packages or even an outdated version of the operating system itself. A sizeable number of devices run on Linux Mint 17.x, according to the blog post, a version of Linux Mint that reached end of support in April 2019. A new blog post, published yesterday, provides information on how the team plans to reduce the update reluctance of Linux Mint users. Next to showing reminders to users, Linux Mint's Update Manager may enforce some of the updates according to the blog post. "In some cases the Update Manager will be able to remind you to apply updates. In a few of them it might even insist." Upcoming versions will provide information on the implementation, how the "insisting" part may look like, and whether the installation of updates will be enforced. All of this boils down to a single question: how far should operating system developers go when it comes to updates? BetaNews adds: "And now, it seems the Linux Mint developers are taking a page out of Microsoft's playbook by planning to force some updates on its users. Yes, folks, Linux Mint is becoming more like Windows 10."' -- source: https://linux.slashdot.org/story/21/03/01/2032216 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Exploring the Open Source That Really Goes Into a RISC-V Chip
by Peter Reutemann 01 Mar '21

01 Mar '21

'"Maker Andreas Spiess talks about the Open Source that really goes into a RISC-V chip and the ESP32-C3," writes Slashdot reader nickwinlund77 — sharing a link to this article from Hackaday: It's an exciting time in the world of microprocessors, as the long-held promise of devices with open-source RISC-V cores is coming to fruition. Finally we might be about to see open-source from the silicon to the user interface, or so goes the optimistic promise. In fact the real story is considerably more complex than that, and it's a topic [Andreas Speiss] explores in a video that looks at the issue with a wide lens... nickwinlund77 writes: The YouTube video starts out with a good general history of competition between large businesses over architectures and embracing the standards for tech which many of us have depended on throughout the years. The video then gets into the technical specifics of the ESP32-C3. Hackaday adds: His conclusion is that while a truly open-source RISC-V chip is entirely possible (as demonstrated with a cameo Superconference badge appearance), the importance of the RISC-V ISA is in its likely emergence as a heavyweight counterbalance to ARM's dominance in the sector. ' -- source: https://hardware.slashdot.org/story/21/02/28/195212 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Red Hat Introduces Free RHEL for Open-Source Organizations
by Peter Reutemann 01 Mar '21

01 Mar '21

'ZDNet brings an update about the future of Red Hat Enterprise Linux: When Red Hat, CentOS's Linux parent company, announced it was "shifting focus from CentOS Linux, the rebuild of Red Hat Enterprise Linux (RHEL), to CentOS Stream," CentOS users were not happy. Now, in an effort to mollify them and to keep its promise to open-source organizations, Red Hat is introducing a new, free RHEL for Open Source Infrastructure. If your non-profit organization, project, standard body, or foundation is "engaged with open source," you can get a free RHEL subscription via this program. Earlier this year, Red Hat introduced no-cost RHEL for small production workloads and for customer development teams... Jason Brooks, a Red Hat Open Source Program Office Manager explained: Supporting the open-source software ecosystem is a core objective for Red Hat... We know that we are part of a larger, interdependent ecosystem that we benefit from and which we do our best to foster and support. This support comes in many forms, but often includes helping open source software projects, foundations, and standards bodies access enterprise technologies for development and testing. We frequently provide no-cost access to RHEL to these groups, but the process isn't as formalized, consistent, accessible, or transparent as we'd like it to be. With the announcement that we will be shifting our resources to CentOS Stream at the end of 2021, we want to make sure that those organizations engaged with open source have access to RHEL as they build and test the future of open-source software... The GNOME Foundation's executive director Neil McGovern, said: As a non-profit, we rely on donations to help us achieve our goal of a world where everyone is empowered by technology they can trust. RHEL subscriptions are an essential part of this. With full operating system management and security updates, we can concentrate on the services we provide to GNOME users and developers without having to worry about the underlying systems. Red Hat has generously provided these services to GNOME at zero cost for years, and we look forward to continuing our relationship for a long time to come. GNOME is also the default desktop in RHEL Workstation.' -- source: https://linux.slashdot.org/story/21/02/27/0235247 Chdeers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Kali Linux 2021.1 Released: Tweaked DEs and Terminals, New Tools, Silicon Macs
by Peter Reutemann 01 Mar '21

01 Mar '21

'Offensive Security has released Kali Linux 2021.1, the latest version of its popular open source penetration testing platform. You can download it or upgrade to it. Kali NetHunter, the distro's mobile pentesting platform, now has an upgraded BusyBox engine and tools updated to the latest version (or, in some cases, completely rewritten). There are two new Kali ARM images: one that can be used with VMs on Apple Silicon Macs (Apple M1) and the other for the Raspberry Pi 400's wireless card.' -- source: https://linux.slashdot.org/story/21/02/27/043218 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Brave Privacy Bug Exposed Tor Onion URLs To Your DNS Provider
by Peter Reutemann 01 Mar '21

01 Mar '21

'Brave Browser had a privacy issue that leaked the Tor onion URL addresses you visited to your locally configured DNS server, "exposing the dark web websites you visit...", writes Bleeping Computer. Long-time Slashdot reader AmiMoJo quotes their report: To access Tor onion URLs, Brave added a "Private Window with Tor" mode that acts as a proxy to the Tor network. When you attempt to connect to an onion URL, your request is proxied through volunteer-run Tor nodes who make the request for you and send back the returned HTML. Due to this proxy implementation, Brave's Tor mode does not directly provide the same level of privacy as using the Tor Browser. When using Brave's Tor mode, it should forward all requests to the Tor proxies and not send any information to any non-Tor Internet devices to increase privacy. However, a bug in Brave's "Private window with Tor" mode is causing the onion URL for any Tor address you visit to also be sent as a standard DNS query to your machine's configured DNS server. This bug was first reported in a Reddit post and later confirmed by James Kettle, the Director of Research at PortSwigger. BleepingComputer has also verified the claims by using Wireshark to view DNS traffic while using Brave's Tor mode. Brave has since released an update which fixes the bug.' -- source: https://yro.slashdot.org/story/21/02/27/221208 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Introducing Crowdsec: a Modernized, Collaborative Massively Multiplayer Firewall
by Peter Reutemann 01 Mar '21

01 Mar '21

'CrowdSec is a massively multiplayer firewall designed to protect Linux servers, services, containers, or virtual machines exposed on the Internet with a server-side agent. It was inspired by Fail2Ban and aims to be a modernized, collaborative version of that intrusion-prevention tool. CrowdSec is free and open-source (under an MIT License), with the source code available on GitHub. It uses a behavior analysis system to qualify whether someone is trying to hack you, based on your logs. If your agent detects such aggression, the offending IP is then dealt with and sent for curation. If this signal passes the curation process, the IP is then redistributed to all users sharing a similar technological profile to 'immunize' them against this IP. The goal is to leverage the power of the crowd to create a real-time IP reputation database. As for the IP that aggressed your machine, you can choose to remedy the threat in any manner you feel appropriate. Ultimately, CrowdSec leverages the power of the community to create an extremely accurate IP reputation system that benefits all its users. It was clear to the founders that Open Source was going to be one of the main pillars of CrowdSec. The project's founders have been working on open-source projects for decades — they didn't just jump on the train. Rather, they are strong Open Source believers. They believe that the crowd is key to the mass hacking plague we are experiencing, and that Open Source is the best lever to create a community and have people contribute their knowledge to the project, ultimately make it better and more secure. The solution recently turned 1.x, introducing a major architectural change: the introduction of a local REST API.' -- source: https://linux.slashdot.org/story/21/02/27/2215223 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox's Total Cookie Protection Aims To Stop Tracking Between Multiple Sites
by Peter Reutemann 24 Feb '21

24 Feb '21

'As part of its war on web tracking, Mozilla is adding a new tool to Firefox aimed at stopping cookies from keeping tabs on you across multiple sites. From a report: The "Total Cookie Protection" feature is included in the web browser's latest release -- alongside multiple picture-in-picture views -- and essentially works by keeping cookies isolated between each site you visit. Or, in Mozilla's words: "By creating a separate cookie jar for every website." Firefox's new feature pares with last month's network partitioning tool, which works by splitting the Firefox browser cache on a per-website basis to prevent tracking across the web, itself targeted at blocking more stubborn "supercookies." According to Mozilla, these types of cookies are more difficult to delete and block as they are stored in obscure parts of the browser, including in Flash storage, ETags, and HSTS flags. Both tools are available as part of Firefox's enhanced tracking protection suite in "strict mode" on desktop and Android.' -- source: https://news.slashdot.org/story/21/02/23/1513219 -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New TLD For Spammers
by Lawrence D'Oliveiro 21 Feb '21

21 Feb '21

Normally I get only a handful of spam e-mails per day -- greylisting is that effective at keeping most of them out. But over the past couple of days, this moved closer to being a flood like the bad old days, with several dozen coming in over the last 24 hours or so. Doing a quick check, all the ones I looked at were being sent from *.cyou domains. Yes, there really is such a top-level domain now. But given that it seems to be used entirely for spam, it’s easy enough to add a line to my block_sender file: /^.+(a).+\.cyou$/ REJECT

1 0

The world’s second-most popular desktop operating system isn’t macOS anymore
by Peter Reutemann 21 Feb '21

21 Feb '21

'For ages now, every annual report on desktop operating system market share has had the same top two contenders: Microsoft's Windows in a commanding lead at number one and Apple's macOS in distant second place. But in 2020, Chrome OS became the second-most popular OS, and Apple fell to third. That's according to numbers from market data firm IDC and a report on IDC's data by publication GeekWire. Chrome OS had passed macOS briefly in individual quarters before, but 2020 was the first full year when Apple's OS took third place. Despite the fact that macOS landed in third, viewing this as an example of Google beating out Apple directly might not be accurate. Rather, it's likely that Chrome OS has been primarily pulling sales and market share away from Windows at the low end of the market. Mac market share actually grew from 6.7 percent in 2019 to 7.5 percent in 2020. Meanwhile, Chrome OS skyrocketed from 6.4 percent in 2019 to 10.8 percent in 2020. Windows fell from 85.4 percent to 80.5 percent.' -- source: https://arstechnica.com/gadgets/2021/02/the-worlds-second-most-popular-desk… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New browser-tracking hack works even when you flush caches or go incognito
by Peter Reutemann 21 Feb '21

21 Feb '21

'The prospect of Web users being tracked by the sites they visit has prompted several countermeasures over the years, including using Privacy Badger or an alternate anti-tracking extension, enabling private or incognito browsing sessions, or clearing cookies. Now, websites have a new way to defeat all three. The technique leverages the use of favicons, the tiny icons that websites display in users’ browser tabs and bookmark lists. Researchers from the University of Illinois, Chicago said in a new paper that most browsers cache the images in a location that’s separate from the ones used to store site data, browsing history, and cookies. Websites can abuse this arrangement by loading a series of favicons on visitors’ browsers that uniquely identify them over an extended period of time. [...] The attack works against Chrome, Safari, Edge, and until recently Brave, which developed an effective countermeasure after receiving a private report from the researchers. Firefox would also be susceptible to the technique, but a bug prevents the attack from working at the moment.' -- source: https://arstechnica.com/information-technology/2021/02/new-browser-tracking… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Top Banks Join Linux and Open-Source Patent Protection Group
by Peter Reutemann 21 Feb '21

21 Feb '21

'ZDNet reports: When it comes to defending the intellectual property (IP) rights of Linux and open-source software, global leading banks aren't the first businesses to come to mind. Things have changed. Barclays, the London-based global corporate and investment bank, and the TD Bank Group, with its 26-million global customers, have joined the leading open-source IP defense group, the Open Invention Network (OIN). For years, the OIN, the largest patent non-aggression consortium, has protected Linux from patent attacks and patent trolls. Recently, it expanded its scope from core Linux programs and adjacent open-source code by expanding its Linux System Definition. In particular, that means patents relating to the Android Open Source Project (AOSP) 10 and the Extended File Allocation Table exFAT file system are now protected... Besides joining the OIN, Barclay is also joining the LOT Network. This is another fast-growing nonprofit group of companies that aims to stop patent trolls in their tracks. It has more than 1,100 member companies and covers over 2 million patent assets. Why? The "IP and Patentable Innovations Lead" at TD noted that activity from so-called patent assertion entities "continues to trend upward in the banking industry," according to ZDNet. He argues they "have become a tax on business and we're willing to explore any reasonable means to address such risks..."' -- source: https://news.slashdot.org/story/21/02/20/0244211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Is Now on Mars, Thanks to NASA's Perseverance Rover
by Peter Reutemann 21 Feb '21

21 Feb '21

'"When NASA's Perseverance rover landed on Mars this week, it also brought the Linux operating system to the Red Planet," reports PC Magazine: The tidbit was mentioned in an interview NASA software engineer Tim Canham gave to IEEE Spectrum. The helicopter-like drone on board the Perseverance rover uses a Linux-powered software framework the space agency open-sourced a few years ago. "This the first time we'll be flying Linux on Mars. We're actually running on a Linux operating system," Canham said. It also might be the first time NASA has brought a Linux-based device to Mars. "There isn't a previous use of Linux that I'm aware of, definitely on the previous rovers," Canham told PCMag in an email. Past Mars rovers have used proprietary OSes, largely from the software company Wind River Systems. The same is true for the Perseverance rover itself; the machine has been installed with Wind River's VxWorks, which was used on past Mars missions. The article also notes that the helicopter-like drone Ingenuity "was built using off-the-shelf parts, including Qualcomm's Snapdragon 801 processor, a smartphone chip." "Ingenuity is purely a technology demonstration," notes ZDNet. "It's not designed to support the Perseverance mission, which is searching for signs of ancient life and collecting rock and dirt samples for later missions to return to Earth. Its mission is to show that it's possible to fly on Mars using commercial off-the-shelf hardware and open-source software."' -- source: https://science.slashdot.org/story/21/02/20/1830240 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Re: wlug Digest, Vol 356, Issue 12
by tom butz 20 Feb '21

20 Feb '21

I'll be away for a week, Tom Butz. On 20/02/2021, wlug-request(a)list.waikato.ac.nz <wlug-request(a)list.waikato.ac.nz> wrote: > Send wlug mailing list submissions to > wlug(a)list.waikato.ac.nz > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > wlug-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > wlug-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of wlug digest..." > > Today's Topics: > > 1. WLUG meeting (Peter Reutemann) > > > ---------------------------------------------------------------------- > > Date: Fri, 19 Feb 2021 14:28:33 +1300 > From: Peter Reutemann <fracpete(a)gmail.com> > Subject: [wlug] WLUG meeting > To: wlug List <wlug(a)list.waikato.ac.nz> > Message-ID: <0C32B561-3ED3-4525-970F-7C0CACAEAE1F(a)gmail.com> > Content-Type: text/plain; charset=utf-8 > > Hi everyone > > We have a meeting next Monday: > "Roger Hardy and Lawrence D'Oliveiro will talk about experiences of a small > business with locally hosted server virtualisation using open source Xen > based hypervisors." > > Details: > https://www.meetup.com/WaikatoLinuxUsersGroup/events/274861044/ > > Cheers, Peter > -- > Peter Reutemann > Dept. of Computer Science > University of Waikato, NZ > +64 (7) 577-5304 > http://www.cms.waikato.ac.nz/~fracpete/ > http://www.data-mining.co.nz/ > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > wlug mailing list -- wlug(a)list.waikato.ac.nz > To unsubscribe send an email to wlug-leave(a)list.waikato.ac.nz > > > ------------------------------ > > End of wlug Digest, Vol 356, Issue 12 > ************************************* >

1 0

WLUG meeting
by Peter Reutemann 19 Feb '21

19 Feb '21

Hi everyone We have a meeting next Monday: "Roger Hardy and Lawrence D'Oliveiro will talk about experiences of a small business with locally hosted server virtualisation using open source Xen based hypervisors." Details: https://www.meetup.com/WaikatoLinuxUsersGroup/events/274861044/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

LastPass' Free Tier Will Become a Lot Less Useful Next Month
by Peter Reutemann 17 Feb '21

17 Feb '21

'LastPass is adding new restrictions to its free subscription tier starting March 16th that'll only allow users to view and manage passwords on one category of devices: mobile or computer. From a report: Mobile users will be limited to iOS and Android phones, iPads, Android tablets, and smartwatches. Computer subscribers will be able to use their passwords from Windows, macOS, and Linux desktops and laptops, the LastPass browser extension, and Windows tablets. Users on LastPass' free tier will be asked to pick between the two options the first time they log in after March 16th, and the company says they'll be able to switch between categories up to three times after they've picked. Although customers are restricted to a single category of devices on the free tier, they'll still be able view and manage passwords from an unlimited number of devices within either the mobile or computer category. LastPass says no users will be locked out of their accounts or lose access to their passwords as a result of the changes. As well as restricting its device types, LastPass is also changing the kinds of customer support free tier users will be able to access. From May 17th, free users will lose access to email support, the company announced.' -- source: https://tech.slashdot.org/story/21/02/16/166221 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Dev creeped out after he fired up Ubuntu VM on Azure, was immediately approached by Canonical sales rep
by Peter Reutemann 16 Feb '21

16 Feb '21

'An Azure customer was outraged after finding himself on the receiving end of an unexpected LinkedIn message from Ubuntu maker Canonical last night. The user, Luca Bongiorni, had spun up an instance of the Linux distro on an Azure corporate subscription in order to evaluate some tooling. Sensibly, the subscription is used as a sandbox for the purpose of testing. Upon clicking "Add new VM", the first option was Ubuntu 18.04, according to Bongiorni, which he selected in order to get his Linux kicks. Shortly after, however, a message turned up from an Enterprise Development representative at Ubuntu with the ominous phrase: "I saw that you spun up an Ubuntu image in Azure," and offering to be a point of contact.' -- source: https://www.theregister.com/2021/02/11/microsoft_azure_ubuntu_data_sharing/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Happy ENIAC Day
by Lawrence D'Oliveiro 16 Feb '21

16 Feb '21

75 years ago today, the University of Pennsylvania launched ENIAC, the first non-classified programmable digital computer <https://www.theregister.com/2021/02/15/eniac_day/>. (The UK Colossus preceded it, but the existence of that was kept secret for a few more decades.) This was not a “stored-program” machine, at least not at first: programming was initially done using patch cords and switches. You may also like this interview <https://www.youtube.com/watch?v=buAYHonF968> with the late Jean Jennings Bartik, about some of the fun she and her colleagues had programming the ENIAC, and the innovations they came up with. The electronics engineers who built the first computers didn’t think of programming as a very interesting activity, so they left it to women.

1 0

History Of VLC
by Lawrence D'Oliveiro 15 Feb '21

15 Feb '21

Found this <https://www.protocol.com/vlc-history-open-source> linked from a report on the new version of VLC, describing the history of the project back to its beginnings. Once upon a time there was “VideoLAN Server” and “VideoLAN Client”, but today everything has been rolled into a single “VLC” program. Of course it’s been in the sights of Intellectual Property lawyers for a long time: VLC's success also put it on the radar of patent lawyers, who started to send the VideoLAN team a growing number of legal threats, looking to extract licensing fees. Over the years, the VLC team received hundreds such legal threats over alleged patent violations. Virtually all of them were without merit, according to Kempf. Many were based on U.S. software patents that weren't easily enforceable in Europe. Others were citing technology that VLC was using even before companies tried to patent it. "No one is checking whether these patents are valid," Kempf said. "It's a complete mafia; it's protection money." The open-source x264 codec implementation was also an offshoot of VLC. And Jean-Baptiste Kempf says he could have done those software-bundling deals where unwary users get all kinds of things installed on their PCs in addition to the package they thought they were installing, and thereby earned tens of millions of dollars, but he didn’t want to. The project gets money from donations, but also from companies employing developers to build custom implementations for their set-top boxes.

3 8

Why NVidia Really Wants To Buy ARM
by Lawrence D'Oliveiro 13 Feb '21

13 Feb '21

From <https://arstechnica.com/gadgets/2021/02/nvidia-wants-to-buy-cpu-designer-ar…>: Owning Arm outright would also allow Nvidia much greater leeway to innovate upon the design. We've spoken to several vendors who described the sort of innovation that the RISC-V architecture allows as effectively impossible with Arm; the vendors have said "they just won't let you" make changes, like adjustments to the instruction set. If Nvidia owns Arm, it will no longer face such restrictions. And it will be the only company in such a position with respect to ARM. That may make it more competitive with RISC-V, but it will likely just drive other vendors away from ARM ... and towards RISC-V.

1 0

Hauwei router source code.
by Ian Stewart 10 Feb '21

10 Feb '21

Hi, I recently searched for the User Manual for a Huawei Model HG253s V2 Home Gateway. I found the document which is dated 2015. Google also found the HG253s V2 open source code.zip file from February 04, 2015 @117MB. Featuring the Linux kernel version 2.6.30 this file was available from huawei.com at... https://consumer-tkb.huawei.com/weknow/servlet/download/public?contextNo=S1… So, based on what I've heard from the CIA, MI6, GCSB and Five-Eyes, I'm now looking through the source code for the functions that send the messages back to the mothership in China 😉 ...Haven't found any code that does this so far ! In summary. I was surprised that Huawei release their source code. Admittedly it's for a device that's at least five years old and, for all I know, it may be the same code that OpenWRT use. I guess I'll still have to wait a while for the source code for the Huawei 5G routers. cheers, Ian.

2 2

Most Anti-Zoombombing Measures Are Futile
by Lawrence D'Oliveiro 05 Feb '21

05 Feb '21

How do you keep unwanted busybodies out of your videoconference meetings? This analysis <https://arstechnica.com/information-technology/2021/02/zoombombing-counterm…> concludes that common measures like password-protected meetings and waiting rooms are ineffective because they guard against the wrong threats. One thing that does help is giving each invited participant a unique join link. Ideally this link can only be used once. But even if not, it still allows organizers to identify the source of a leak to a zoombomber.

1 0

Firefox 85 Hammers the Final Nail Into the Adobe Flash Coffin
by Peter Reutemann 03 Feb '21

03 Feb '21

'With Mozilla's release of Firefox 85 on Tuesday, Adobe's once ubiquitous Flash technology is really gone for good. The software had been widely used to expand gaming, video and animation on the web, though Adobe stopped supporting it at the end of 2020. Firefox was the last major browser to support Flash. From a report: Apple, whose late boss Steve Jobs helped sink Flash by banning it from iPhones and iPads, ditched Flash with Safari 14 in September 2020. Google Chrome, the most widely used browser, completely excised it on Jan. 19 with version 88. Microsoft's Edge 88 followed suit on Jan. 21. The schedule of removals shows just how hard it is to advance technology foundations as widely used as the web. Browser makers for years wanted to remove Flash, replacing it with more advanced standards built directly into the web. Jobs' "Thoughts on Flash" letter in 2010 solidified the opposition, and Adobe started recognizing the software's doom by scrapping the Android version of Flash in 2011. It's taken years of effort to drop Flash completely. Adobe took until 2017 to announce that Flash would be completely unsupported at the end of 2020, and still some are willing to jump through lots of hoops to keep Flash around a little longer.' -- source: https://it.slashdot.org/story/21/01/26/1618254 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

ActiveX All Over Again?
by Lawrence D'Oliveiro 02 Feb '21

02 Feb '21

Is Google repeating history, by pushing new browser features regardless of their security implications, like Microsoft did in the bad old days? This article <https://www.theregister.com/2021/02/01/chrome_89_beta_brings_desktop/> reports on Chrome adding some new capabilities that other browser developers (like Mozilla and Apple) feel are far too dangerous to allow, at least in their current form. The problem is, will most users fail to appreciate the security issues, see this feature omission as a bug in those browsers, and reinforce the dominance of Chrome as a result?

1 0

The End Of Itanium
by Lawrence D'Oliveiro 02 Feb '21

02 Feb '21

The latest Linux kernel will no longer include support for Intel/HP’s Itanium processors <https://www.theregister.com/2021/02/01/linux_pulls_itanium_support/>. Of course, prior Linux kernels up to 5.10 from December presumably still include such support, while the last version of HP’s own HP-UX 11i for its Itanium-based Integrity servers was v3 from 2007 <https://en.wikipedia.org/wiki/HP-UX#Release_history>. The last working version of Microsoft’s Windows Server for that platform, 2008 R2, came out just a couple of years later, and already dropped some features compared to editions for other platforms <https://en.wikipedia.org/wiki/Windows_Server_2008_R2#Editions>. Intel officially claims to be shipping new Itanium processors up to July this year, but it seems pretty clear the order book is empty. So it looks like the last OS still standing for that platform will be Linux.

1 0

Google Threatens To Remove Search in Australia as Spat Escalates
by Peter Reutemann 01 Feb '21

01 Feb '21

'Google has threatened to disable its search engine in Australia if it's forced to pay local publishers for news, a dramatic escalation of a months-long standoff with the government. From a report: The proposed law, intended to compensate publishers for the value their stories generate for the company, is "unworkable," Mel Silva, managing director for Australia and New Zealand, told a parliamentary hearing Friday. She specifically opposed the requirement that Google pay media companies for displaying snippets of articles in search results. The threat is Google's most potent yet as the digital giant tries to stem a flow of regulatory action worldwide. At least 94% of online searches in Australia go through the Alphabet unit, according to the local competition regulator. "We don't respond to threats," Australia Prime Minister Scott Morrison said Friday. "Australia makes our rules for things you can do in Australia. That's done in our parliament. It's done by our government. And that's how things work here in Australia."' -- source: https://tech.slashdot.org/story/21/01/22/0339236 However, in related news: "Google Agrees To Pay French News Sites To Send Them Traffic" -- source: https://tech.slashdot.org/story/21/01/21/2316209 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1