- wlug - list.wlug.org.nz

WireGuard for Windows 0.3.1 is the release you’ve been waiting for
by Peter Reutemann 26 Nov '20

26 Nov '20

'This Monday, WireGuard founder and lead developer Jason Donenfeld announced a new WireGuard release for the Windows platform. The release is something of a godsend for administrators hoping to implement WireGuard as a replacement for more traditional end-user VPNs in a business environment, adding several new features that will make their lives easier—or simply make its implementation possible, in environments where it otherwise would not. If you haven't heard about WireGuard yet, it's a relatively new VPN protocol featuring advanced cryptography. It's implemented from the ground up as an exercise in cleanly written, minimalist, maximally secure and performant code—and it succeeded at those goals well enough to get Linus Torvalds' own rarely-seen stamp of approval. ' -- source: https://arstechnica.com/gadgets/2020/11/wireguard-for-windows-0-3-1-is-the-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Linus Torvalds Would Like To Use An M1 Mac For Linux, But...
by Peter Reutemann 25 Nov '20

25 Nov '20

'Yes, Torvalds said he'd love to have one of the new M1-powered Apple laptops, but it won't run Linux and, in an exclusive interview he explains why getting Linux to run well on it isn't worth the trouble. Steven J. Vaughan-Nichols writes via ZDNet: Recently, on the Real World Technologies forum, Linux's creator Linus Torvalds was asked what he thought of the new M1-powered Apple laptops. Torvalds replied, "I'd absolutely love to have one if it just ran Linux." You may think, "what's the problem? Doesn't Linux run on practically every processor on the planet from 80386s to IBM s390x to the ARM family of which Apple's M1 chip is a child?" Well, yes, yes it does. But it takes more than a processor to run a computer. Torvalds would like to run Linux on these next-generation Macs. As he said, "I've been waiting for an ARM laptop that can run Linux for a long time. The new Air would be almost perfect, except for the OS. And I don't have the time to tinker with it, or the inclination to fight companies that don't want to help." Aye, there's the rub. In an exclusive interview, Torvalds expanded on why he can't see porting Linux to the M1-based Macs. "The main problem with the M1 for me is the GPU and other devices around it, because that's likely what would hold me off using it because it wouldn't have any Linux support unless Apple opens up." Still, while Torvalds knows Apple opening up their chipsets "seems unlikely, but hey, you can always hope." Even if that "wasn't an issue," Torvalds continued, "My personal hope would be more cores. Even in a laptop, I don't care about 20-hour battery life (and I wouldn't get it building kernels anyway). I'd rather plug it in a bit more often, and have 8 big cores." As for the Mac's limited RAM -- no more than 16GBs on current models -- he can live with that. "16GBs is actually ok by me because I don't tend to do things that require a lot more RAM. All I do is read email, do git and kernel compiles. And yes, I have 64GB in my desktop, but that's because I have 32 cores and 64 threads, and I do hugely parallel builds. Honestly, even then 32GB would be sufficient for my loads." That said, other developers and power users may want more from the new Macs, Torvalds thinks. "The people who really want tons of memory are the ones doing multiple VMs or huge RAW file photography and video." ' -- source: https://hardware.slashdot.org/story/20/11/24/2225209 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Fwd: [NZLUG] CFP: LCA2021 Systems Administration Miniconf
by Peter Reutemann 25 Nov '20

25 Nov '20

Apologies for cross-posting, but since the event is down-under/online some people on this list might want to present/attend. Cheers, Peter ---------- Forwarded message --------- From: Ewen McNeill Date: Wed, Nov 25, 2020 at 11:33 AM Subject: [NZLUG] CFP: LCA2021 Systems Administration Miniconf To: NZ Linux Users Group <nzlug(a)lists.nzoss.org.nz> linux.conf.au 2021 is being held in an "Online Only" format from 23-25 January 2021 (Saturday through Monday!), starting with a Miniconf day on Saturday 2021-01-23. Based in UTC+11 (AEDT), it makes for a "sleep in" schedule for attending from New Zealand! Tickets are extra affordable this year (AU $125/$70/$30), and on sale now: https://lca2021.linux.org.au/attend/tickets/ (Sadly NZers don't get the electronic badge option :-( ) The Systems Administration Miniconf is one of four Miniconfs being held on Saturday 2021-01-23, and would welcome your presentation proposals now (closes 2020-12-18 AoE). For details see: https://sysadmin.miniconf.org/cfp21.html or read on, as the CFP is repeated below for your convenience. Ewen -=- cut here -=- LCA2021 Systems Administration Miniconf: Call for Presentations Saturday 2021-01-23 10:45-17:30 UTC+11 at Linux.conf.au 2021, Online Virtualisation has won! As of 2021, they have even virtualised our Systems Administration Miniconf! TL;DR: If you know our Miniconf, and know online presenting, you can propose your 15-20 minute Linux-related operations talk via the LCA2021 Dashboard *before* 2020-12-18: https://linux.conf.au/dashboard We'd particularly love your 2020 War Stories! Read on to find out more :-) Introduction ============ The linux.conf.au Systems Administration Miniconf returns for the 15th time as part of the very online linux.conf.au 2021, to be held without a venue (Venueless!), online on Saturday 2021-01-23, based in UTC+11 (AEDT -- Australian Eastern Daylight Time). The Systems Administration Miniconf focuses on tips, tricks, tools, and best practices used to manage real-world Linux environments both large and small. From single small servers through to 2,000 node Kubernetes Clusters. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. We are open to presentations from speakers anywhere in the world, but please be mindful of the need to present during daytime in UTC+11 which may not be daytime in your local timezone (presenting late at night or very early in your morning is tricky!). More information and details of previous presentations at the Miniconf can be found at the website: https://sysadmin.miniconf.org/ Presentation Topics =================== 2020 has been a surprising year, and not the least for systems administration -- remote *everything* came with a rush, leaving many officeless, and dependent on the Internet and video conferencing. We would be particularly interested in talks about how 2020 has gone for your systems, how you dealt with the rapid changes in operating environment, and what your plans look like for a world where touching physical hardware frequently seems increasingly unlikely. Tell us your war stories :-) We would be very interested in retrospectives and "lessons learned" from the past year. We of course also welcome the usual range of talks on systems technology, automation, monitoring, troubleshooting, best current practices and so on. Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in professional Linux administration (many in the audience will have decades of experience). Format of Presentations ======================= Due to the online only format, and its increased demands on the AV team, we have to fit into a more fixed structure within the LCA2021 Miniconf day. So we have less flexibility in our choice of presentations, that usual. We have openings for 15 and 20 minute short presentations (ie, each approximately half of a 45-minute "session", with a 10 minute gap in between). LCA2021 have indicated they have a strong preference for presentations to be given live, which will be easier if your local time zone is close to UTC+11 and you have an Internet connection with good upload speeds. For accepted Miniconf speakers the LCA2021 AV Team will want to check in with you *early* January 2021 to help ensure your presentation audio and visuals come across as well as possible. You may wish to watch the AV Team advice from PyConline AU 2020 to get some advanced hints on small changes you could make to help your presentation look and sound great: https://www.youtube.com/watch?v=C1TBqdULp4E Submitting talks ================ Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Either for the full conference (Sat/Sun/Mon), or at least for the Miniconf day (Saturday 2021-01-23). As a one off "online only, LCA2021 only" special we have access to a small pool of "Miniconf Speaker" tickets, so if your employer will not pay for your ticket and the conference cost makes it difficult for you to attend/present please get in touch and we will see if we can help. To submit a talk to the LCA2021 Sysadmin Miniconf, create an account on the LCA2021 website: https://linux.conf.au/dashboard create a speaker profile, and then select "Systems Administration Miniconf Talk" (in the "New Proposal" section of the Dashboard), or while logged into the LCA2021 site, go directly to: https://linux.conf.au/proposals/submit/sysadmin-miniconf/ Questions should be sent to: lca2021 at sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 (AoE -- ie any time zone) on Sunday 6 December 2020. If you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. 2020-12-06 - Deadline for early submissions 2020-12-11 - early acceptances 2020-12-18 - Deadline for all submissions 2020-12-21 - final acceptances 2020-12-24 - LCA2021 Sysadmin Miniconf initial programme published 2021-01-21 - LCA2021 Sysadmin Miniconf held (Online, UTC+11) Contact and Questions ===================== Please see our website at https://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2021 at sysadmin.miniconf.org -=- cut here -=- _______________________________________________ NZLUG mailing list NZLUG(a)lists.nzoss.org.nz http://lists.nzoss.org.nz/mailman/listinfo/nzlug -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

LISP presentation uploaded to WLUG github.
by Ian Stewart 25 Nov '20

25 Nov '20

Hi Folks, For last night's LISP presentation, the slide show file and the LISP demonstration programs have been uploaded to: https://github.com/WLUG/meetings/tree/master/2020/2020-11-23 The slide show is available in both .odp and .pdf formats. The demonstration programs all have shebangs for CLISP, but these may be changed to be for SBCL. The programs have been tested to work under both CLISP and SBCL. Note that SBCL seems to be fussier than CLISP and, for example, requires (defvar) functions before the variable could be loaded via a (setf) function. At the meeting Jake demonstrated the apropos function to help with finding symbols. An appendix slide has been added to the presentation to show this function. I have also added my first attempt at something resembling a real a LISP program, package-symbols.lisp. This program will list packages that are available to either SBCL or CLISP. Upon selecting a package, it will display all the symbols the package has. If the command line argument "function" is used (E.g., $ sbcl --script package-symbols function) then the symbols displayed will be filtered to only displaying symbols that are functions. cheers, Ian.

1 1

Gimp Turns 25
by Peter Reutemann 24 Nov '20

24 Nov '20

'The General Image Manipulation Program, GIMP, has turned 25. A brief celebration post detailed how the package started life as a July 1995 Usenet thought bubble by then-student Peter Mattis, who posted the following to several newsgroups: Suppose someone decided to write a graphical image manipulation program (akin to photoshop). Out of curiosity (and maybe something else), I have a few (2) questions: What kind of features should it have? (tools, selections, filters, etc.) What file formats should it support? (jpeg, gif, tiff, etc.)" Four months later, Mattis and fellow University of California Berkeley student Spencer Kimball delivered what they described as software "designed to provide an intuitive graphical interface to a variety of image editing operations." The software ran on Linux 1.2.13, Solaris 2.4, HPUX 9.05, and SGI IRIX. The answer to the file format support question turned out to be GIF, JPEG, PNG, TIFF, and XPM. The rest is history. Richard Stallman gave Mattis and Kimball permission to change the "General" in its name to "GNU", reflecting its open-source status. Today the program is released under the GNU General Public License. As the program added features such as layers, it grew more popular and eventually became a byword for offering a FOSS alternative to Photoshop even though the project pushes back against that description. The project's celebration page says volunteers did their "best to provide a sensible workflow to users by using common user interface patterns. That gave us a few questionable monikers like 'Photoshop for Linux', 'free Photoshop', and 'that ugly piece of software'. We still can wholeheartedly agree with the latter one only!"' -- source: https://it.slashdot.org/story/20/11/23/1946252 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Mass-Produced, Librem 5 Linux Smartphone Begins Shipping to Customers
by Peter Reutemann 23 Nov '20

23 Nov '20

'This week Purism began shipping its mass-produced Librem 5 phone to customers, according to announcement from the company: The Librem 5 is a one-of-a-kind general-purpose computer in a phone form-factor that Purism has designed and built from scratch following a successful crowdfunding campaign that raised over $2.2 million. Both the hardware and software design is focused on respecting the end user's freedom and giving them control over their privacy and security. The Librem 5 doesn't run Android nor iOS but instead runs the same PureOS operating system as Purism's laptops and mini PC. The Librem 5 has unique hardware features including a user-removable cellular modem, WiFi card, and battery. Like with Librem laptops, the Librem 5 also features external hardware kill switches that cut power to the cellular modem, WiFi/Bluetooth, and front and back cameras and microphone so that the user can control when these devices are in use. All hardware switches can also be triggered together to enable "lockdown mode" which also disables the GPS, accelerometer and all other sensors... Another unique feature of the Librem 5 is convergence: the ability to connect the Librem 5 to a monitor or laptop dock and use it as a desktop computer running the same full-sized desktop applications as on Librem laptops. When in a phone form-factor, applications behave much like "responsive websites" and change their appearance for the smaller screen. This allows you to use the Librem 5 as a phone, a desktop, or a laptop with the same applications and same files. Their announcement notes their work on software making desktop applications "adaptive" to phone form factors, adding "This suite of software has now become the most popular software stack to use on other handheld Linux hardware." And they close with an appreciative comment from Purism's founder and CEO Todd Weaver: "Shipping the Librem 5 has been an immense multi-year developmental effort. It is the culmination of people's desire to see an alternative to Android and iOS and fund it, coupled with dedication from a team of experts addressing hardware, kernel, operating system, and applications that has turned a lofty near-impossible goal into reality. We have built a strong foundation and with the continued support of customers, the community, and developers, we will continue to deliver revolutionary products like the Librem 5 running PureOS."' -- source: https://mobile.slashdot.org/story/20/11/23/025228 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

'Ubuntu Web Remix' Distro Offers Firefox-Based Chrome OS Alternative
by Peter Reutemann 23 Nov '20

23 Nov '20

'Rudra Saraswat is the creator of the Ubuntu Unity distro (which uses the Unity interface in place of Ubuntu's GNOME shell). But this week they released Ubuntu Web Remix, "a privacy-focused, open source alternative to Google Chrome OS/Chromium OS" using Firefox instead of Google Chrome/Chromium. Liliputing reports: If the name didn't give it away, this operating system is based on Ubuntu, but it's designed to offer a Chrome OS-like experience thanks to a simplified user interface and a set of pre-installed apps including the Firefox web browser, some web apps from /e/, and Anbox, a tool that allows you to run Android apps in Linux... You don't get the long battery life, cloud backup, and many other features that make Chromebooks different from other laptops (especially other cheap laptops). But if you're looking for a simple, web-centric operating system that isn't made by a corporate giant? Then I guess it's nice to have the option. Rudra Saraswat writes: An easy web-app (wapp) format has been created to package web-apps for the desktop. You can now create your own web apps using web technologies, package them for the desktop and install them easily. An experimental wapp store can be found at store.ubuntuweb.co, for distributing web apps. Developers and packagers can do pull requests at gitlab.com/ubuntu-web/ubuntu-web.gitlab.io to contribute wapps. ' -- source: https://news.slashdot.org/story/20/11/22/0226213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

How Firefox Boosted Its JavaScript Performance
by Peter Reutemann 23 Nov '20

23 Nov '20

'InfoWorld reports: Firefox users can expect improved JavaScript performance in the Firefox 83 browser, with the Warp update to the SpiderMonkey JavaScript engine enabled by default. Also called WarpBuilder, Warp improves responsiveness and memory usage and speeds up page loads by making changes to JiT (just-in-time) compilers... Warp has been shown to be faster than Ion, SpiderMonkey's previous optimizing JiT, including a 20 percent improvement on Google Docs load time. Other JavaScript-intensive websites such as Netflix and Reddit also have shown improvement... Warp has replaced the front end — the MIR building phase — of the IonMonkey JiT... Mozilla also will continue to incrementally optimize the back end of the IonMonkey JiT, as Mozilla believes there is still room for improvement for JavaScript-intensive workloads.' -- source: https://news.slashdot.org/story/20/11/22/0412232 I agree, 83 feels snappier when browsing. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

After Restoring YouTube-dl, GitHub Revamps Its Copyright Takedown Policy
by Peter Reutemann 22 Nov '20

22 Nov '20

'On October 23rd GitHub initially complied with a takedown request for the open-source project youtube-dl — and then after 24 days, reinstated it. "If there's a silver lining to the episode, it's that GitHub is implementing new policies to avoid a repeat of a repeat situation moving forward," reports Engadget: First, it says a team of both technical and legal experts will manually evaluate every single section 1201 claim. In instances where there's any ambiguity to a claim, the company says it will err on the side of developers and leave their repository online. If the company's technical and legal teams ultimately find any issues with a project, GitHub will give its owners the chance to address those problems before it takes down their work. Following a takedown, it will continue to give people the chance to recover their data — provided it doesn't include any offending code. GitHub is also establishing a $1 million defense fund to provide legal aid to developers against suspect section 1201 claims, as well as doubling down on its lobbying work to amend the DMCA and other similar copyright laws across the world. ' -- source: https://yro.slashdot.org/story/20/11/21/0554250 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Fearing Drama, Mozilla Opens Public Consultation Before Worldwide Firefox DoH Rollout
by Peter Reutemann 20 Nov '20

20 Nov '20

'Mozilla has opened today a public comment and consultation period about the ways it could enable support for the controversial privacy-centric DNS-over-HTTPS (DoH) protocol inside Firefox. From a report: The browser maker's decision to open a rare public consultation period comes after the organization faced criticism last year in the UK for its plans to support DoH inside Firefox. UK government officials, law enforcement agencies, and local internet service providers criticized Mozilla for developing and wanting to roll out DoH, a feature they said could have helped suspects bypass enterprise firewalls and parental controls blocklists -- even earning the browser maker a nomination for an "Internet Villain" award from a local ISP. All last year's hoopla was caused by DoH, a web protocol developed as an alternative to the classic DNS (Domain Name System). DoH works by encrypting DNS queries (which are normally sent out in clear text) and hiding them inside normal-looking HTTPS web traffic.' -- source: https://tech.slashdot.org/story/20/11/19/1711200 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

OpenStreetMap is Having a Moment
by Peter Reutemann 20 Nov '20

20 Nov '20

'Joe Morrison: The first time I spoke with Jennings Anderson, I couldn't believe what he was telling me. I mean that genuinely -- I did not believe him. He was a little incredulous about it himself. I felt like he was sharing an important secret with me that the world didn't yet know. The open secret Jennings filled me in on is that OpenStreetMap (OSM) is now at the center of an unholy alliance of the world's largest and wealthiest technology companies. The most valuable companies in the world are treating OSM as critical infrastructure for some of the most-used software ever written. The four companies in the inner circle -- Facebook, Apple, Amazon, and Microsoft -- have a combined market capitalization of over six trillion dollars. In almost every other setting, they are mortal enemies fighting expensive digital wars of attrition. Yet they now find themselves eagerly investing in and collaborating on OSM at an unprecedented scale (more on the scale later). What likely started as a conversation in a British pub between grad students in 2004 has spiraled out of control into an invaluable, strategic, voluntarily-maintained data asset the wealthiest companies in the world can't afford to replicate. I will admit that I used to think of OSM as little more than a virtuous hobby for over-educated Europeans living abroad -- a cutesy internet collectivist experiment somewhere on the spectrum between eBird and Linux. It's most commonly summarized with a variant of this analogy: OSM is to an atlas as Wikipedia is to an encyclopedia. OSM acolytes hate this comparison in the much same way baseball players resent when people describe the sport as "cricket for fat people." While vaguely truthful, it doesn't quite get to the spirit of the thing. OSM is incomparable. Over 1.5M individuals have contributed data to it. It averages 4.5M changes per day. The stats page on the OSM Wiki is a collection of hockey sticks. [...] ' -- source: https://slashdot.org/story/20/11/19/1935221 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google is Rolling Out End-To-End Encryption for RCS in Android Messages Beta
by Peter Reutemann 20 Nov '20

20 Nov '20

'After two long, complicated years, every Android user worldwide (outside China) now has access to the next-gen texting standard that is replacing SMS. Google is directly offering RCS chat services through its Android Messages app to anybody who installs it and uses it as their default texting app, which partly bypasses a carrier rollout that, at times, has ranged from sluggish to incoherent to broken. From a report Just as importantly, Google has announced that it's finally beginning to enable a key privacy feature: end-to-end encryption. For Android users who use Android Messages, one-on-one chats will eventually be end-to-end encrypted by default, meaning neither carriers nor Google will be able to read the content of those messages. Even though encryption is only beginning to roll out to people who sign up for the public beta for Android Messages, turning on encryption for RCS is a very big deal. It's a massive privacy win, as it could mean that the de facto replacement for SMS will, by default, be private on the smartphone platform used by the vast majority of people worldwide. As for the people who use that other smartphone platform -- the iPhone -- we have no word on whether Apple intends to adopt the RCS standard. But as every carrier worldwide gets on board, and now that there is a clearer path to ensuring private communication with RCS, the pressure on Apple to participate is likely to build. Unfortunately, SMS becoming fully deprecated and replaced by RCS will only happen if all goes to plan for Google. Since initially announcing plans to transition to RCS as the primary texting platform for Android, the standard's rollout has been mired in confusion. In attempting to be neutral and make Android's texting a standard shared by carriers worldwide, Google set itself up with the job of herding multibillion-dollar cats -- with sadly predictable results.' -- source: https://tech.slashdot.org/story/20/11/19/1528230 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

BBC Releases Doctor-Who-Themed RISC-V-Based Programming Kit
by Lawrence D'Oliveiro 20 Nov '20

20 Nov '20

The BBC has created a miniature computer, the “Doctor Who HiFive Inventor”, aimed at young ’uns trying to learn programming <https://www.theregister.com/2020/11/19/bbc_doctor_who_sifive/>. This uses a RISC-V processor from SiFive, includes quite a range of I/O interfaces, and comes with lessons narrated by Jodie “Thirteenth Doctor” Whittaker. Pricing looks comparable to Raspberry-π-based products, too.

1 0

Apple Silicon Performance
by Lawrence D'Oliveiro 20 Nov '20

20 Nov '20

You may have seen reports popping up everywhere as Apple’s new Macs running its ARM-based “Apple Silicon” chips get into the hands of the first buyers. They seem to offer remarkable performance while still managing good battery life, even while a lot of the software they are running is still written for x86 processors and being translated on the fly through the “Rosetta 2” emulator layer. One of the secrets to that performance is that the system RAM is integrated into the CPU chipset <https://www.theregister.com/2020/11/19/apple_m1_high_bandwidth_memory_perfo…>. Yup, that means RAM is not upgradeable on these machines.

1 0

Microsoft’s “Project Reunion” Leads To More Fragmentation
by Lawrence D'Oliveiro 20 Nov '20

20 Nov '20

If you thought the Microsoft Windows development landscape was already confusing enough, consider this update <https://www.theregister.com/2020/11/19/microsoft_winui_windows/> on “Project Reunion” ... which [Windows Developer VP] Gallo described as “a common platform for new apps and APIs so that they will work down-level across supported versions of Windows.” A developer asked: “For a new desktop app what is your recommendation, UWP? WinUI, WPF or WinForm?” To which there was no simple answer. Indeed, while the presentation introduced WinUI version 3, it appears WinUI 2.x will also continue to be developed. Instead, Gallo talked about no longer having binary choices, but being able to mix and match in the brave new Reunion world. I wonder if anybody at Microsoft really understands what “Reunion” means ...

1 0

Google's Native Version of Chrome For Apple's ARM Macs Is Out Now
by Peter Reutemann 19 Nov '20

19 Nov '20

'According to Chrome product manager Mark Chang, Google's version of Chrome that support ARM Macs is now available to download. The Verge reports: In theory, a native version of the notoriously resource-hungry browser might run more efficiently on Apple's Arm-based computers. In our reviews of the MacBook Air, MacBook Pro, and Mac mini equipped with the new M1 chip, though, we found that the version of Chrome built for Intel chips already runs well on Apple's new Macs, so hopefully this native version runs even better. You'll be able to pick which version of Chrome to download from the browser's website. Google began rolling out a new version of Chrome on Tuesday, touting the "the largest gain in Chrome performance in years" thanks to some under-the-hood changes. The company's blog about the new release didn't mention anything about a version optimized for Apple's Arm-based Macs.' -- source: https://apple.slashdot.org/story/20/11/18/2239226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Massive, China-State-Funded Hack Hits Companies Around the World, Report Says
by Peter Reutemann 19 Nov '20

19 Nov '20

'Ars Technica: Researchers have uncovered a massive hacking campaign that's using sophisticated tools and techniques to compromise the networks of companies around the world. The hackers, most likely from a well-known group that's funded by the Chinese government, are outfitted with both off-the-shelf and custom-made tools. One such tool exploits Zerologon, the name given to a Windows server vulnerability, patched in August, that can give attackers instant administrator privileges on vulnerable systems. Symantec uses the code name Cicada for the group, which is widely believed to be funded by the Chinese government and also carries the monikers of APT10, Stone Panda, and Cloud Hopper from other research organizations. The group has been active in espionage-style hacking since at least 2009 and almost exclusively targets companies linked to Japan. While the companies targeted in the recent campaign are located in the United States and other countries, all of them have links to Japan or Japanese companies. The attacks make extensive use of DLL side-loading, a technique that occurs when attackers replace a legitimate Windows dynamic-link library file with a malicious one. Attackers use DLL side-loading to inject malware into legitimate processes so they can keep the hack from being detected by security software. The campaign also makes use of a tool that's capable of exploiting Zerologon. Exploits work by sending a string of zeros in a series of messages that use the Netlogon protocol, which Windows servers use to let users log into networks. People with no authentication can use Zerologon to access an organization's crown jewels -- the Active Directory domain controllers that act as an all-powerful gatekeeper for all machines connected to a network. Microsoft patched the critical privilege-escalation vulnerability in August, but since then attackers have been using it to compromise organizations that have yet to install the update. Both the FBI and Department of Homeland Security have urged that systems be patched immediately. Among the machines compromised during attacks discovered by Symantec were domain controllers and file servers. Company researchers also uncovered evidence of files being exfiltrated from some of the compromised machines.' -- source: https://it.slashdot.org/story/20/11/19/0124204 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

$6 Billion Linux Deal? SUSE IPO Rumored
by Peter Reutemann 18 Nov '20

18 Nov '20

'ZDNet: According to Bloomberg, EQT is planning an IPO for German Linux and enterprise software company SUSE. EQT is a Swedish-based private equity firm with 50 billion euros in raised capital. SUSE is the leading European Union (EU) Linux distributor. Over the years, SUSE has changed owners several times. First, it was acquired by Novell in 2004. Then, Attachmate, with some Microsoft funding, bought Novell and SUSE in 2010. This was followed in 2014 when Micro Focus purchased Attachmate and SUSE was spun off as an independent division. Then, EQT purchased SUSE from Micro Focus for $2.5 billion in March 2019. With an IPO of approximately $6 billion, EQT would do very well for itself in very little time. Bloomberg states that the IPO talks are in a very preliminary stage. Nothing may yet come of these conversations. As for SUSE, a company representative said, "As a company, we are constantly exploring ways to grow. But as a matter of corporate policy, we do not comment on rumor or speculation in the market."' -- source: https://linux.slashdot.org/story/20/11/17/2148202 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox 83 Arrives With HTTPS-Only Mode and Faster Performance
by Peter Reutemann 18 Nov '20

18 Nov '20

'Mozilla today launched Firefox 83 for Windows, Mac, and Linux. An anonymous reader shares a report: Firefox 83's highlight feature is HTTPS-Only Mode, in which the browser attempts to establish fully secure connections to every website (just like the EFF's HTTPS Everywhere). If it can't, Firefox asks for your permission before connecting to a website that doesn't support secure connections. To enable HTTPS-Only Mode, click on Firefox's menu button, hit Preferences, then Privacy & Security, scroll down to HTTPS-Only Mode, and choose "Enable HTTPS-Only Mode in all windows." [...] Firefox 83 also brings performance improvements (improved page load performance by up to 15%, page responsiveness by up to 12%, and reduced memory usage by up to 8%). Firefox 83 is also the penultimate version of the web browser that will run Flash software; Firefox 85 will completely disable it when it arrives on Jan. 12, 2021.' -- source: https://news.slashdot.org/story/20/11/17/1725230 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Chrome 87 Released With Fix for NAT Slipstream Attacks, Broader FTP Deprecation
by Peter Reutemann 18 Nov '20

18 Nov '20

'Google has released today version 87 of its Chrome browser, a release that comes with a security fix for the NAT Slipstream attack technique and a broader deprecation of the FTP protocol. From a report: Todays' release is available for Windows, Mac, Linux, Chrome OS, Android, and iOS. Users can update to the new version via Chrome's built-in update utility. While in previous versions, Google has shipped some changes to Chrome settings and UI elements, almost all the major new Chrome 87 features are aimed at web developers. In Chrome 87, we have new APIs and updates to Chrome's built-in Developer Tools, such as: Support for the new Cookie Store API; new features to allow easier modification of web fonts via CSS; a new feature to let websites enumerate all the locally installed fonts; support for pan, tilt, and zoom controls on webcam streams; and, support for debugging WebAuthn operations via the Chrome DevTools.' -- source: https://slashdot.org/story/20/11/17/1810248 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

meeting next Monday
by Peter Reutemann 18 Nov '20

18 Nov '20

Hi everyone We have a meeting coming up next Monday: "Introduction to the LISP programming language will be presented by Jake Waas and Ian Stewart. They will focus on the open source CLISP and SBCL dialects of the LISP language and the use of functions in the COMMON-LISP package. By the end of the presentation you will be able to write simple LISP programs." -- details: https://www.meetup.com/WaikatoLinuxUsersGroup/events/266792044/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Interview With KDE Developers
by Lawrence D'Oliveiro 17 Nov '20

17 Nov '20

Talk with a couple of the KDE “maintainers” (?) <https://www.theregister.com/2020/11/16/kde_maintainers_speak_on_why/> on the origins of KDE and where it stands today. The fact that it is built on Qt, which is heavily used in many commercial projects, means “Qt has to work well with a small footprint because of embedded systems, and that means KDE’s Plasma desktop has had a fundamental change since the mindset of KDE 3 days, when it was considered bloated and heavy,” said Riddell. “Now it’s a really fast, lightweight desktop.” Some other worthwhile info there, including discussions of working with Wayland and systemd.

1 0

GitHub Reinstates YouTube-dl Library After EFF Intervention
by Peter Reutemann 17 Nov '20

17 Nov '20

'GitHub has reinstated today the youtube-dl open-source project, a Python library that lets users download the source audio and video files behind YouTube videos. From a report: GitHub, a code-hosting repository, had previously removed the library from its portal after it received a controversial DMCA takedown request from the Recording Industry Association of America (RIAA) on October 23. In a DMCA takedown letter, RIAA argued that the library was being used to "circumvent the technological protection measures used by authorized streaming services such as YouTube" and to allow users to "reproduce and distribute music videos and sound recordings [...] without authorization." RIAA also noted that the project's source code "expressly suggests its use to copy and/or distribute the following copyrighted works." More specifically, RIAA used Section 1201 of the Digital Millennium Copyright Act (DMCA) to claim that the youtube-dl library was breaking copyright by providing a tool to circumvent copyrighted material -- even if the youtube-dl library didn't contain copyright-infringing code itself. But in a blog post today, GitHub said the library did not actually break Section 1201 of the DMCA, citing a letter it received from Electronic Frontier Foundation lawyers, who to take up the youtube-dl project's case. In the letter, the EFF team explained that Google does not have any technical measures in place to prevent the download of its videos -- all of which need to be made freely available to all kinds of apps, browsers, smart TVs, and more. Hence, EFF lawyers argued that the library could never be taken down under Section 1201 of the DMCA since the library doesn't actually circumvent any sort of copyright protection system in the first place.' -- source: https://yro.slashdot.org/story/20/11/16/1730250 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ok Google: Please Publish Your DKIM Secret Keys
by Peter Reutemann 17 Nov '20

17 Nov '20

'Matthew Green, a cryptographer and professor at Johns Hopkins University, writes: The Internet is a dangerous place in the best of times. Sometimes Internet engineers find ways to mitigate the worst of these threats, and sometimes they fail. Every now and then, however, a major Internet company finds a solution that actually makes the situation worse for just about everyone. Today I want to talk about one of those cases, and how a big company like Google might be able to lead the way in fixing it. This post is about the situation with Domain Keys Identified Mail (DKIM), a harmless little spam protocol that has somehow become a monster. My request is simple and can be summarized as follows: Dear Google: would you mind rotating and publishing your DKIM secret keys on a periodic basis? This would make the entire Internet quite a bit more secure, by removing a strong incentive for criminals to steal and leak emails. The fix would cost you basically nothing, and would remove a powerful tool from hands of thieves.' -- source: https://tech.slashdot.org/story/20/11/16/1932234 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

There’s Open Source, And There’s Open Source
by Lawrence D'Oliveiro 13 Nov '20

13 Nov '20

Vendors open-sourcing a bunch of code isn’t enough, if that code remains under the de-facto control of the vendor. It needs to be possible for a community to influence its development direction, rather than passively waiting for the next code drop from the vendor, according to Dave Airlie <https://www.theregister.com/2020/11/12/intel_igc_mesa/>. He says: “A warning then to anyone wishing for more vendor code sharing between OSes it generally doesn't end with Linux being better off, it ends up with Linux being more fragmented, harder to support and in the long run unsustainable.”

1 0