- wlug - list.wlug.org.nz

Linux Foundation Announces the OpenWallet Foundation To Develop Interoperable Digital Wallets
by Peter Reutemann 14 Sep '22

14 Sep '22

'The Linux Foundation has announced plans for a new collaborative initiative designed to support interoperability across digital wallets, built on an open source bedrock. From a report: The OpenWallet Foundation (OWF), as the new effort is called, is the brainchild of Daniel Goldscheider, CEO of open banking startup Yes.com, though today's announcement reveals a broad gamut of buy-ins from multiple industry players including Okta, Ping Identity, Accenture, CVS Health, OpenID Foundation, among several other public and private bodies. With the Linux Foundation serving as the project's host, this gives OWF sizeable clout as it strives to enable what Goldscheider calls a "plurarity of wallets based on a common core," according to a press release. The news also comes as regulatory bodies across the globe are moving to support competition through enforcing interoperability across systems, including Europe which is currently trying to make messaging interoperability a thing.' -- source: https://news.slashdot.org/story/22/09/13/1350232 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Raspberry Pi OS improves menus, networking, camera possibilities
by Peter Reutemann 14 Sep '22

14 Sep '22

'The latest Raspberry Pi OS version adds menu search, a more mainstream network and VPN manager, and plenty of camera and machine learning possibilities through a new open source camera package.' -- source: https://arstechnica.com/gadgets/2022/09/raspberry-pi-os-adds-easier-network… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Article: 10 Best Self-Hosted Apps for Your Raspberry Pi
by Peter Reutemann 12 Sep '22

12 Sep '22

It's actually 10 categories with several applications listed for each: 1. Media Server 2. File Sync Server 3. Virtualization Platform 4. Ads Blocker 5. Image Hub 6. Home Automation 7. Security Center 8. News Aggregator 9. Password Manager 10. Gaming Console Full details in the following article: https://linuxiac.com/best-self-hosted-raspberry-pi-apps/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New Linux malware combines unusual stealth with a full suite of capabilities
by Peter Reutemann 11 Sep '22

11 Sep '22

'Researchers this week unveiled a new strain of Linux malware that's notable for its stealth and sophistication in infecting both traditional servers and smaller Internet-of-things devices. Dubbed Shikitega by the AT&T Alien Labs researchers who discovered it, the malware is delivered through a multistage infection chain using polymorphic encoding. It also abuses legitimate cloud services to host command-and-control servers. These things make detection extremely difficult. "Threat actors continue to search for ways to deliver malware in new ways to stay under the radar and avoid detection," AT&T Alien Labs researcher Ofer Caspi wrote. "Shikitega malware is delivered in a sophisticated way, it uses a polymorphic encoder, and it gradually delivers its payload where each step reveals only part of the total payload. In addition, the malware abuses known hosting services to host its command and control servers."' -- source: https://arstechnica.com/information-technology/2022/09/new-linux-malware-co… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Android 13 Raises Minimum System Requirement To 2GB of RAM, 16GB of storage
by Peter Reutemann 10 Sep '22

10 Sep '22

'Android 13 has recently hit the streets, and with it, Google is raising the minimum requirements for Android phones. From a report: Google's latest blog post announced that the minimum amount of RAM for Android Go, the low-end version of Android, is now 2GB for Android 13, whereas previously, it was 1GB. Esper's Mishaal Rahman and Google Product Expert Jason Bayton also claim the minimum storage requirements have been bumped up to 16GB, though Google doesn't seem to have publicly documented this anywhere. The increase in system requirements means any phone that doesn't meet the minimum specs won't be able to update to Android 13. New phones launching with Android 13 will need to meet the minimum requirements to be eligible for Play Store licensing, though launching with an older version of Android (with lower requirements) will still be an option for a while. Technically, anyone can grab the Android source code and build anything with it, but if you want to license the Google apps and have access to the Google-trademarked brand "Android," you'll need to comply with Google's rules.' -- source: https://tech.slashdot.org/story/22/09/09/1742200 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New Zealand programming contest
by Peter Reutemann 09 Sep '22

09 Sep '22

Hi everyone I just got notified that the New Zealand programming contest is on tomorrow. More information on the Hamilton event is available from here: https://www.cs.waikato.ac.nz/~tl108/nzpc-hamilton/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New wave of data-destroying ransomware attacks hits QNAP NAS devices
by Peter Reutemann 08 Sep '22

08 Sep '22

'Network hardware-maker QNAP is urging customers to update their network-attached storage devices immediately to protect them from a new wave of ongoing ransomware attacks that can destroy terabytes of data in a single stroke. Singapore-based QNAP said recently that it has identified a new campaign from a ransomware group known as DeadBolt. The attacks take aim at QNAP NAS devices that use a proprietary feature known as Photo Station. The advisory instructs customers to update their firmware, suggesting there is a vulnerability that’s under exploit, but the company makes no explicit mention of a CVE designation that security professionals use to track such security flaws.' -- source: https://arstechnica.com/information-technology/2022/09/new-wave-of-data-des… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

NASA Going RISC-V
by Lawrence D'Oliveiro 07 Sep '22

07 Sep '22

NASA’s space probes have been using a PowerPC-based computing architecture going back over two decades, so it’s about time for a refresh. So now SiFive <https://www.theregister.co.uk/2022/09/06/nasas_spaceflight_computer_risc_v/> is going to supply NASA with a new computing platform based on its X280 RISC-V CPU. “RISC” is supposed to stand for “Reduced Instruction Set Computing”. However, many current RISC architectures (including ARM and POWER/PowerPC) have seen a large blowout of their instruction-set size when they started adding SIMD vector operations. These instructions operate on fixed-length sets of around 4, 8 or 16 operands, performing the same operation on all operands simultaneously (hence “SIMD”, standing for “Single Instruction, Multiple Data”). Trouble is, you need a lot of different variants of each instruction for coping with different data types. While vector operations are important for many uses, RISC-V takes a different approach, harking back to the old supercomputers designed by the legendary Seymour Cray: instead of having to operate on all operands simultaneously, the instructions operate elementwise on variable-length arrays (the original Cray-1 design allowed for arrays of up to 64 elements at a time), with operands being processed sequentially through a multi-stage pipeline. This should help keep things simpler, while still making it fast.

1 0

Google Chrome Emergency Update Fixes New Zero-Day Used in Attacks
by Peter Reutemann 07 Sep '22

07 Sep '22

'Google has released Chrome 105.0.5195.102 for Windows, Mac, and Linux users to address a single high-severity security flaw, the sixth Chrome zero-day exploited in attacks patched this year. From a report: "Google is aware of reports that an exploit for CVE-2022-3075 exists in the wild," the company said in a security advisory published on Friday. This new version is rolling out in the Stable Desktop channel, with Google saying that it will reach the entire user base within a matter of days or weeks. It was available immediately when BleepingComputer checked for new updates by going into the Chrome menu > Help > About Google Chrome. The web browser will also auto-check for new updates and automatically install them after the next launch.' -- source: https://it.slashdot.org/story/22/09/06/1424200 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Slick new phishing-as-a-service kit emerges
by Peter Reutemann 06 Sep '22

06 Sep '22

'itnews reports: Security researchers at Resecurity have detailed a new phishing-as-a-service kit, EvilProxy, that provides an easy to use interface to attack users with accounts for major online brands, and the ability to bypass multifactor authentication (MFA). Reverse proxies to attack multifactor authentication, such as Modlishka, have been available for several years, but EvilProxy makes it it possible to easily create and deliver advanced phishing links through a graphical user interface, Resecurity said. EvilProxy sits between a victim and the real site the user is trying to connect to, capturing their valid session cookies, to bypass the need to authenticate with user names, passwords, and / or two-factor authentication tokens, the security vendor explained. This includes accounts that have MFA enabled with short messaging text service, or application tokens.' -- source: https://www.itnews.com.au/news/slick-new-phishing-as-a-service-kit-emerges-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0