- wlug - list.wlug.org.nz

next lug meet
by Ian Young 20 Jun '19

20 Jun '19

Greets If required I may be able to find a few words about a new project on Distrowatch last week named Resilient Linux. Listed on GitHub. https://github.com/marco-buratto/resilientlinux Seems to have some interesting aspects. It would help if the iso image could unzip successfully. Should anyone obtain such let me know. ~ Ian Y

2 1

Microsoft’s Linux Strategy
by Lawrence D'Oliveiro 19 Jun '19

19 Jun '19

When Microsoft first embraced Docker and containers some years ago, no doubt people thought it was trying to nab some of that “virtualization-lite” action for its own Windows platform--at least I know I did. But with the release of WSL 2, which includes a full Linux kernel in Windows, it looks like this strategy has changed <https://www.theregister.co.uk/2019/06/18/the_future_of_docker_on_windows_is…>: The Docker news is of no interest to developers using Windows Containers, but there are not many of them. At Microsoft's Build conference last month, Gabe Monroy, lead program manager for the Azure Container Compute team, was asked whether Windows Containers are for legacy and Linux Containers for new projects. "I think that is a fair description," he said, demonstrating how the company's thinking on the subject has shifted. It seems Microsoft is now pushing the concept of develop on Windows, deploy on Linux. It is clearly hoping that those Linux deployments will happen on its Azure cloud, and so it still profits that way. Also, WSL 2 actually makes for worse Linux-Windows integration compared to WSL 1, which emulated the Linux APIs on top of Windows: Similarly, WSL 2 makes life better for developing Linux applications on Windows, but there are downsides. Running Linux in a VM as opposed to redirecting system calls is better for compatibility but inherently worse for integration. One aspect of this is that in WSL 2 I/O performance to files within the Linux VM is much faster, but I/O performance between Linux and the host is worse. Another is that WSL 2 has no access to serial or USB ports. Seems to me the obvious way to fix this, at least partially, is to flip things round, so instead of virtualizing Linux on top of Windows, you virtualize Windows on top of Linux. Then both your development and deployment platforms become fundamentally Linux-based. How long before that happens?

2 7

Birthplace Of BASIC Gets A Memorial Marker
by Lawrence D'Oliveiro 18 Jun '19

18 Jun '19

The US state of New Hampshire has added a marker <https://www.theregister.co.uk/2019/06/17/plaque_for_basic_birthplace_new_ha…> commemorating the creation of the BASIC programming language by professors Kemeny and Kurtz and a bunch of their students at Dartmouth College, back in 1964. The marker is not actually on College property, but on the nearest available state highway location.

1 0

Linux PCs, Servers, Gadgets Can Be Crashed by 'Ping of Death' Network Packets
by Peter Reutemann 17 Jun '19

17 Jun '19

'The Register reports that it is possible to crash network-facing Linux servers, PCs, smartphones and tablets, and gadgets, or slow down their network connections, by sending them a series of maliciously crafted packets. It is also possible to hamper FreeBSD machines with the same attack. Patches and mitigations are available, and can be applied by hand if needed, or you can wait for a security fix to be pushed or offered to your at-risk device. A key workaround is to set /proc/sys/net/ipv4/tcp_sack to 0. At the heart of the drama is a programming flaw dubbed SACK Panic aka CVE-2019-11477: this bug can be exploited to remotely crash systems powered by Linux kernel version 2.6.29 or higher, which was released 10 years ago.' -- source: https://linux.slashdot.org/story/19/06/17/2018227 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

RKWard on Linux Mint 19.1 fails to start up
by Peter Reutemann 17 Jun '19

17 Jun '19

Hi everyone In case you're trying to use RKWard (GUI environment for the R language) on Linux Mint 19.1 and you keep getting the following error message: "The KDE installation could not be found (kreadconfig5). When moving / copying RKWard, make sure to copy the whole application folder, or create a shorcut / link, instead." Then simply install the following package: libkf5config-bin For instance, you can do this using apt-get: sudo apt-get install libkf5config-bin -- source: https://rkward-devel.narkive.com/M5x9XHCk/rkward-0-7-0-is-available Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

A New Hidden Way of Web Browser Profiling, Identification and Tracking
by Peter Reutemann 17 Jun '19

17 Jun '19

'Researchers from Austria's Graz University of Technology "have devised an automated system for browser profiling using two new side channel attacks that can help expose information about software and hardware," reports The Register. The researchers recently presented a paper titled "JavaScript Template Attacks: Automatically Inferring Host Information for Targeted Exploits," which The Register says "calls into question the effectiveness of anonymized browsing and browser privacy extensions... " Long-time Slashdot reader Artem S. Tashkinov shared their report: One of the side-channel attacks developed for JavaScript Template Attacks involve measuring runtime differences between two code snippets to infer the underlying instruction set architecture through variations in JIT compiler behavior. The other involves measuring timing differences in the memory allocator to infer the allocated size of a memory region. The boffins' exploration of the JavaScript environment reveals not only the ability to fingerprint via browser version, installed privacy extension, privacy mode, operating system, device microarchitecture, and virtual machine, but also the properties of JavaScript objects. And their research shows there are far more of these than are covered in official documentation. This means browser fingerprints have the potential to be far more detailed -- have more data points -- than they are now. The Mozilla Developer Network documentation for Firefox, for example, covers 2,247 browser properties. The researchers were able to capture 15,709. Though not all of these are usable for fingerprinting and some represent duplicates, they say they found about 10,000 usable properties for all browsers.' -- source: https://yro.slashdot.org/story/19/06/16/232241 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

next meeting - topics?
by Peter Reutemann 14 Jun '19

14 Jun '19

Hi everyone At the moment, we don't have a speaker for this month's meeting (June 24th): https://www.meetup.com/WaikatoLinuxUsersGroup/events/257884282/ Any volunteers? I was thinking of quickly demoing how to generate .deb packages from your code - I've forked an unmaintained plugin, which does that for Maven projects (= java based), i.e., I know a teeny bit about the process. Apart from the command-line tools, there are also GUI tools available for achieving this. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

CERN Ditches Microsoft to 'Take Back Control' With Open Source Software
by Peter Reutemann 14 Jun '19

14 Jun '19

'CERN is best known for pushing the boundaries of science and understanding, but the famed research outfit's next major experiment will be with open-source software. From a report: The European Organization for Nuclear Research, better known as CERN, and also known as home of the Large Hadron Collider, has announced plans to migrate away from Microsoft products and on to open-source solutions where possible. Why? Increases in Microsoft license fees. Microsoft recently revoked the organisations status as an academic institution, instead pricing access to its services on users. This bumps the cost of various software licenses 10x, which is just too much for CERN's budget' -- source: https://news.slashdot.org/story/19/06/12/1839213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

The Unstoppable Rise Of The Machines
by Lawrence D'Oliveiro 14 Jun '19

14 Jun '19

Researchers at the University of Tokyo have developed a robot that will always beat a human at rock-paper-scissors: <https://www.schneier.com/blog/archives/2019/06/rock-paper-scis.html>.

1 0

Windows 10's Linux Kernel Is Now Available
by Peter Reutemann 13 Jun '19

13 Jun '19

'Microsoft released a new Windows 10 Insider Preview build this week featuring the Windows Subsystem for Linux 2. WSL 2 includes a real Linux kernel that lets you run more Linux software on Windows and with better performance than WSL 1. From a report: This is part of Windows 10 Insider Preview build 18917, released on June 12, 2019. It's part of the fast ring of updates. You can experiment with it today, although you'll have to join the Windows Insider program and get unstable builds of Windows 10 on your PC. Microsoft's Windows Command Line blog offers more information about WSL 2, complete with an install guide, list of user experience changes, and more documentation. To install WSL 2 on the latest insider build, run the following command in a PowerShell window launched with Administrator permissions: Enable-WindowsOptionalFeature -Online -FeatureName VirtualMachinePlatform.' -- source: https://linux.slashdot.org/story/19/06/13/1442201 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0