- wlug - list.wlug.org.nz

Inside the DNSpionage hacks that hijack domains at an unprecedented scale
by Peter Reutemann 18 Feb '19

18 Feb '19

'Since the beginning of the year, the US government and private security companies have been warning of a sophisticated wave of attacks that’s hijacking domains belonging to multiple governments and private companies at an unprecedented scale. On Monday, a detailed report provided new details that helped explain how and why the widespread DNS hijackings allowed the attackers to siphon huge numbers of email and other login credentials. The article, published by KrebsOnSecurity reporter Brian Krebs, said that, over the past few months, the attackers behind the so-called DNSpionage campaign have compromised key components of DNS infrastructure for more than 50 Middle Eastern companies and government agencies. Monday’s article goes on to report that the attackers, who are believed to be based in Iran, also took control of domains belonging to two highly influential Western services—the Netnod Internet Exchange in Sweden and the Packet Clearing House in Northern California. With control of the domains, the hackers were able to generate valid TLS certificates that allowed them to launch man-in-the-middle attacks that intercepted sensitive credentials and other data.' -- source: https://arstechnica.com/information-technology/2019/02/inside-the-dnspionag… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

SGM next Monday
by Peter Reutemann 18 Feb '19

18 Feb '19

Hi society members For those paying/active society members that are not on meetup.com, here is the link to our SGM next week: https://www.meetup.com/WaikatoLinuxUsersGroup/events/258276544/ It is just a very short one, before the actual WLUG meeting, to go through some charter stuff. (Apologies, I thought I sent out a reminder last month, but I can't seem to find that email, so probably got lost in work stress) Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Meeting next Monday
by Peter Reutemann 18 Feb '19

18 Feb '19

Hi everyone We have a meeting coming up next Monday: 'Ian Stewart will talk about his experience of attempting to give an old Huawei router a new lease of life using OpenWRT (https://openwrt.org/)' https://www.meetup.com/WaikatoLinuxUsersGroup/events/257884258/ Cheers Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Researcher Scans All IP Addresses of Austria, Finds a Ton of Things That Shouldn't Be Online
by Peter Reutemann 18 Feb '19

18 Feb '19

'Christian Haschek scanned the entire Austrian IP space and found IP cameras, printers, and industrial control systems and a range of other devices that should not be online.' -- source: https://yro.slashdot.org/story/19/02/18/0017246 -- blog: https://blog.haschek.at/2019/i-scanned-austria.html Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Re: [wlug] RNZ Mediawatch--Geeks’ Gathering Goes Under The Radar
by Ian Stewart 17 Feb '19

17 Feb '19

In the Mediawatch Radio NZ broadcast Geeks' gathering goes under the media radar, David Lane, president of the NZ Open Source Society<https://nzoss.org.nz/>, stated that all the talks [given at the Linux Conference in Christchurch] are all available for anyone to watch on youtube right now. The following link takes you to the youtube summary page with the links to videos of all the presentations... https://www.youtube.com/user/linuxconfau2019/videos There are over 160 videos, and the average video is about 40 minutes, so there is over one hundred hours of viewing. An alternative to using youtube is to go to... http://mirror.linux.org.au/pub/linux.conf.au/2019/ ... select the presentation room, the day of the week, and the presentation can be downloaded in either mp4 or webm format. It's good to see in the list of credits<http://mirror.linux.org.au/pub/linux.conf.au/2019/README.md> for the core team that helped to make the videos there is a Waikato man that we haven't seen for a while, William McKee. cheers, Ian.

1 0

RNZ Mediawatch--Geeks’ Gathering Goes Under The Radar
by Lawrence D'Oliveiro 15 Feb '19

15 Feb '19

Did you know that the annual linux.conf.au gathering was held in Christchurch last month? And that Linus Torvalds was there, wandering around the Canterbury University campus? Neither did I. Radio New Zealand’s Mediawatch program from a couple of weeks ago goes into the reasons why there was no media coverage of the event. Partly they might have been put off by some of the more esoteric and technical subjects being discussed. But in among them were some topics that should be considered more relevant to the “mainstream”, such as how automation could be doing away with many jobs being done by humans, leaving only the low-paying ones. The item includes an interview with NZOSS president Dave Lane, in which he incidentally mentions that Radio New Zealand’s online presence is built on Open Source, and that stuff.co.nz was, until recently, doing the same, and was also the one part of the Fairfax online media empire that was making money. Until that system was replaced with one based on expensive and proprietary Adobe products. And now they are not making nearly as much money. Coincidence? You be the judge. <https://www.radionz.co.nz/national/programmes/mediawatch/audio/2018680533/g…> By the way, it seems they have stopped making Ogg versions of items like these available for playback or download -- the links for the above one are only for an MP3 version. Also, I don’t agree that the distinction between “artificial intelligence” and “machine learning” is that clear-cut. I did a graduate course on AI back in the day, and it was already a pretty fuzzy concept back then. Except for one quite concise, mathematically-based definition I came across that appealed to me: “solving NP problems in polynomial time”.

2 2

Open Source Project Aims To Make Ubuntu Usable on Arm-Powered Windows Laptops
by Peter Reutemann 14 Feb '19

14 Feb '19

'A group of programmers and device hackers are working to bring proper support for Ubuntu to Arm-powered Windows laptops, starting with first-generation Snapdragon 835 systems, like the HP Envy x2 and Asus NovaGo. From a report: The aarch64-laptops project provides prebuilt images for the aforementioned notebook PCs, as well as the Lenovo Miix 630. Although Ubuntu and other Linux distributions support aarch64 (ARMv8) by default, various obstacles including the design and configuration of Qualcomm Snapdragon processors make these default images not practically usable. The aarch64-laptops project developers are aiming to address these difficulties, though work is still ongoing. Presently, the TouchPad does not work properly on the Asus, with all three lacking proper support for on-board storage and Wi-Fi, which rely on UFS support. According to their documentation, this is being worked on upstream.' -- source: https://news.slashdot.org/story/19/02/14/1448221 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

R-Pi manufacturing moving out of UK.
by Ian Stewart 14 Feb '19

14 Feb '19

David Cleevely is an entrepreneur based in Cambridge, England. In 2014 he became Chairman of the Raspberry Pi Foundation and of Raspberry Pi Trading. Earlier this week he sent out the twitter: With a heavy heart I have sent the first email laying the ground for moving manufacturing out of the UK because of Brexit and the tariff and certification problems it will cause. Real businesses. Real employment. Real taxes. Lost. The twitter discussion is here<https://twitter.com/DavidCleevely/status/1094916009276919808>. ...Your next R-Pi may be Irish or Dutch. cheers, Ian.

2 1

The BuzzFeed Bubble Bursts: Mass Layoffs Across Digital Media
by Lawrence D'Oliveiro 14 Feb '19

14 Feb '19

Facebook and Google are not only sucking the oxygen out of advertising revenues for newspapers, they are also doing the same for online news outlets, such as BuzzFeed, the Huffington Post, and Vice. <https://www.aljazeera.com/programmes/listeningpost/2019/02/buzzfeed-bubble-…>

1 0

The Second Navstar GPS Rollover Approaches
by Lawrence D'Oliveiro 12 Feb '19

12 Feb '19

The US GPS* protocol represents times using a 10-bit field for the week number. This has already rolled over once, from 1023 back to 0, back in 1999, which broke some devices that hadn’t been designed to cope with it. A second rollover is now approaching, as of April 6th (the first Saturday in April). Guess what’s going to happen this time ... <https://www.theregister.co.uk/2019/02/12/current_gps_epoch_ends/> *Seems the original official name “Navstar” has been dropped, and “GPS”, instead of being a generic term for such satellite-based navigation systems, is now the specific name of the US one.

1 0