- wlug - list.wlug.org.nz

pop linux reviewed on distrowatch
by Ian Young 30 May '18

30 May '18

https://distrowatch.com/weekly.php?issue=20180528 By a strange coincidence the Sys 76 Linux version gets a look over this week on Distrowatch about the same time as our last meeting. A range of interesting comments amidst the dross. ~ Ian Y

3 3

Sonic and Ultrasonic Attacks Damage Hard Drives and Crash OSes
by Peter Reutemann 30 May '18

30 May '18

'Attackers can cause potentially harmful hard drive and operating system crashes by playing sounds over low-cost speakers embedded in computers or sold in stores, a team of researchers demonstrated last week. The attacks use sonic and ultrasonic sounds to disrupt magnetic HDDs as they read or write data. The researchers showed how the technique could stop some video-surveillance systems from recording live streams. Just 12 seconds of specially designed acoustic interference was all it took to cause video loss in a 720p system made by Ezviz. Sounds that lasted for 105 seconds or more caused the stock Western Digital 3.5 HDD in the device to stop recording altogether until it was rebooted. The device uses flash storage to house its firmware, but by default it uses a magnetic HDD to store the large quantities of video it records. The attack used a speaker hanging from a ceiling that rested about four inches above the surveillance system's HDD. The researchers didn't remove the casing or otherwise tamper with the surveillance system. The technique was also able to disrupt HDDs in desktop and laptop computers running both Windows and Linux. In some cases, it even required a reboot before the PCs worked properly. ' -- source: https://hardware.slashdot.org/story/18/05/30/0349202 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Windows 10 Spring Update Improves Linux On WSL With Unix Sockets and More
by Peter Reutemann 29 May '18

29 May '18

'Windows 10 build 1803 has come out this month, but with some problems. AnandTech has a deep-dive with the review examing many new features including the much better support for Linux. WSL (Windows Subsystem for Linux) now has native Curt and Tar from the command prompt as well as a utility to convert Unix to Windows pathnames called WSLpath.exe which is documented here. In addition it was mentioned on Slashdot in the past about OpenSSH being ported natively to Win32 in certain early builds. It now seems the reason was for Linux interoperability with this Spring Update 2. Unix sockets mean you can run Kali Linux on Windows 10 for penetration testing or run an Apache server in the background with full Linux networking support. Deemons now run in the background even with the command prompt closed. [...]' -- source: https://tech.slashdot.org/story/18/05/29/0244210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Satya Nadella: “I Believe Right Now Microsoft Is Probably On The Right Side Of History”
by Lawrence D'Oliveiro 27 May '18

27 May '18

Interview of the Microsoft boss by the Daily Telegraph <https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=120597…>: ... Nadella's four years in charge cannot be described as anything but a success. Under his watch, its share price has increased by 170 per cent, finally overtaking the levels from the peak of the dotcom boom. Except that share price seems a somewhat short-sighted way of measuring a company’s success. Look at HP. "I always make this case, which is if it was not for Microsoft's openness, the web wouldn't have happened. I was talking to [web creator Sir] Tim Berners-Lee yesterday and I sort of said: 'Think about the current ecosystems and how closed and how walled gardened and riddled with all kinds of ways they've rigged it, [compared] to where we were.' Talk about rewriting history. The Web was growing by leaps and bounds long before Microsoft even noticed it (remember how the first edition of Bill Gates’ book “The Road Ahead” didn’t even mention it?). Netscape was the leader and de-facto setter of standards, until Microsoft belatedly entered the race, and took over by giving away their product for free. Then we had the long period of stagnation under Internet Explorer 6, until Firefox came in to jolt them out of their complacency, followed by Apple’s Safari and Google’s Chrome. So to say that “Microsoft’s openness” had anything to do with it is just shamelessly false.

1 0

There Are Real Reasons For Linux To Replace ifconfig, netstat and Other Classic Tools
by Peter Reutemann 27 May '18

27 May '18

'One of the ongoing system administration controversies in Linux is that there is an ongoing effort to obsolete the old, cross-Unix standard network administration and diagnosis commands of ifconfig, netstat and the like and replace them with fresh new Linux specific things like ss and the ip suite. Old sysadmins are generally grumpy about this; they consider it yet another sign of Linux's 'not invented here' attitude that sees Linux breaking from well-established Unix norms to go its own way. Although I'm an old sysadmin myself, I don't have this reaction. Instead, I think that it might be both sensible and honest for Linux to go off in this direction. There are two reasons for this, one ostensible and one subtle. The ostensible surface issue is that the current code for netstat, ifconfig, and so on operates in an inefficient way. Per various people, netstat et al operate by reading various files in /proc, and doing this is not the most efficient thing in the world (either on the kernel side or on netstat's side). You won't notice this on a small system, but apparently there are real impacts on large ones. Modern commands like ss and ip use Linux's netlink sockets, which are much more efficient. In theory netstat, ifconfig, and company could be rewritten to use netlink too; in practice this doesn't seem to have happened and there may be political issues involving different groups of developers with different opinions on which way to go. (Netstat and ifconfig are part of net-tools, while ss and ip are part of iproute2.) However, the deeper issue is the interface that netstat, ifconfig, and company present to users. In practice, these commands are caught between two masters. On the one hand, the information the tools present and the questions they let us ask are deeply intertwined with how the kernel itself does networking, and in general the tools are very much supposed to report the kernel's reality. On the other hand, the users expect netstat, ifconfig and so on to have their traditional interface (in terms of output, command line arguments, and so on); any number of scripts and tools fish things out of ifconfig output, for example. As the Linux kernel has changed how it does networking, this has presented things like ifconfig with a deep conflict; their traditional output is no longer necessarily an accurate representation of reality.' -- source: https://linux.slashdot.org/story/18/05/27/1448211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Mystery Donor Pledges $1 Million To The GNOME Foundation
by Peter Reutemann 27 May '18

27 May '18

'This week, The GNOME Foundation made a shocking revelation: a mystery donor has pledged $1 million dollars. We don't know who is promising the money -- it could be a rich man or woman, but more likely -- and this is pure speculation -- it is probably a company that benefits from GNOME, such as Red Hat or Canonical. "An anonymous donor has pledged to donate up to $1,000,000 over the next two years, some of which will be matching funds. The GNOME Foundation is grateful for this donation and plans on using these funds to increase staff to streamline operations and to grow its support of the GNOME Project and the surrounding ecosystem. While the GNOME Foundation has maintained its position as a proponent of the GNOME Project, growth has been limited. With these funds, the GNOME Foundation will be able to expand and lead in the free software space," says The GNOME Foundation.' -- source: https://linux.slashdot.org/story/18/05/27/1653225 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

New speculative-execution vulnerability strikes AMD, ARM, and Intel
by Peter Reutemann 22 May '18

22 May '18

'A new attack that uses processors' speculative-execution capabilities to leak data, named Speculative Store Bypass (SSB), has been published after being independently discovered by Microsoft's Security Response Center and Google Project Zero. Processors from Intel and AMD, along with some of those using ARM's designs, are all affected.' -- source: https://arstechnica.com/gadgets/2018/05/new-speculative-execution-vulnerabi… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

meeting next Monday
by Peter Reutemann 22 May '18

22 May '18

Hi everyone We have a meeting next Monday: 'Carsten will give a short introduction to their FOSS project "DiLer" which is a LMS and school administration software and how they made it a business model. Some details are available at https://digitale-lernumgebung.de in English. Lawrence D'Oliveiro will show off Pop!_OS, the Ubuntu-derivative that System76 uses on their computers that they sell (https://system76.com/pop)' More details: https://www.meetup.com/WaikatoLinuxUsersGroup/events/246737153 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ask Slashdot: Some Good Linux Desktop Option For Kids?
by Peter Reutemann 17 May '18

17 May '18

'I'm looking to re-purpose some of the older hardware that I've held onto to create something of a starter machine for my kids (both aged below 10). At this point it's still just a few shortcut icons I can setup on the desktop for them, primarily to web tools/sites they use, but I'd like some flexibility; everything I've read suggests options that haven't had any activity since 2015. Is there an option out there or is this just a custom job' -- source: https://ask.slashdot.org/story/18/05/17/1425203 See the discussion in the comments of that article. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu - Upgrading to 18.04
by Ian Stewart 17 May '18

17 May '18

Hi, Ubuntu users are probably aware that about three weeks ago version 18.04.0 was released. This is a Long Term Support (LTS) release. If you are running version 17.10, and your "Software & Updates" --> "Updates" --> "Notify me of a new Ubuntu version:" is set to either "For any new version" or "For long-term support versions", then you will probably have received a GUI pop-up screen asking you if you wanted to do an on-line upgrade to 18.04. I had no problems when performing the on-line upgrade with Ubuntu/Mate 17.10 to 18.04. (Which is better that when I did the 17.04 to 17.10, where I struck an application dependency problem.) I also have a 16.04 LTS Ubuntu/Mate laptop, and I was expecting a pop-up and to get prompted to do the software upgrade to 18.04 LTS, but all I could get was a message to say my 16.04 version was up-to-date. In reading this askubuntu posting: https://askubuntu.com/questions/1028624/not-able-to-upgrade-from-16-04-lts-… ...I found someone has posted the following comment: Upgrades from LTS releases are scheduled after the first patch - 18.04.1 which is usually a month after the first release. They need to make sure everything goes smoothly and then the software manager will allow it. If you're anxious, which based on my experience you shouldn't be cause there are probably tons of bugs, you can still force that upgrade, but that's not recommended. sudo do-release-upgrade -d ...despite it not being recommended I did the "sudo do-release-upgrade -d" and it upgraded my laptop from 16.04 to 18.04, and it seems to be booting and working fine. However, if you read the posting, then be aware that not everyone has had the same level of success: "I did a sudo do-release-upgrade -d on an ASUS SonicMaster with Ubuntu 16.04 LTS on it. After the upgrade, I restarted the machine, and the computer couldn't boot due to some infinite loops while showing messages regarding PCI bus." cheers, Ian.

1 1

Fedora-Based Linux Distro Korora Halts Development
by Peter Reutemann 16 May '18

16 May '18

'Korora, a Fedora-based Linux distro, halted its development this month, BetaNews' Brian Fagioli spotted Wednesday. The announcement would irk many, as Korora consistently received positive feedback from critics and users alike. News outlet ZDNet once described Korora as "Fedora++", while Slashdot readers, too, spoke highly of the distro. At the same time, the announcement should come as little surprise to anyone who has been tracking Korora's work. In a blog post, Korora team wrote: Korora for the forseeable future is not going to be able to march in cadence with the Fedora releases. In addition to that, for the immediate future there will be no updates to the Korora distribution. Our team is infinitesimal (currently 1 developer and 2 community managers) compared to many other distributions, we don't have the luxury of being able to dedicate the amount of time we would like to spend on the project and still satisfy our real life obligations. So we are taking a little sabbatical to avoid complete burn out and rejuvenate ourselves and our passion for Korora/Fedora and wider open source efforts. The team had expressed similar concerns earlier this year: For the past few years Korora has released a new version in line with each Fedora version. That means that approximately twice a year we prepare, test and create 5 different ISO versions. This is as well as, among other things, developing new projects, supporting existing releases and planning the future versions. As each team member has different skills some tasks, such as development, can only be done by one person. All this is done in our spare time along side our job, family and personal responsibilities. For a very small team, currently 3 people plus the occasional input from others, this is a lot of work. It means that often Korora has to take a back seat when real life intrudes. This isn't the first time Korora had to abruptly pause its development. In 2007, Christopher Smart, who kickstarted Korora (at the time based on Gentoo Linux), had discontinued the project -- only to revive it three years later.' -- source: https://linux.slashdot.org/story/18/05/16/1352245 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu - Upgrading to 18.04
by rowan schischka 16 May '18

16 May '18

My Ubuntu 18.04 upgrade story from 17.10, originally 16.04. I had to re-install xserver-xorg-input-all to get my mouse and keyboard working I also had to reinstall gnome, for some reason only Unity desktop was installed. Other than that it is working fine.

1 0

It Doesn't Take a Genius to See That Microsoft Still Attacks GNU/Linux With Patents to Make Billions of Dollars in 'Protection' Money
by Peter Reutemann 14 May '18

14 May '18

'Intellectual Ventures, Finjan, RPX, and other Microsoft-connected trolls cannot be countered by LOT Network and the likes of it (notably OIN); Microsoft continues to shrewdly distribute patents to trolls, offering 'protection' from them (for a fee) and pressuring OEMs to bundle Microsoft 'apps' or risk retaliatory patent lawsuits' -- source: http://techrights.org/2018/05/14/microsoft-still-attacks-with-patents/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Attention PGP Users: New Vulnerabilities Require You To Take Action Now
by Peter Reutemann 14 May '18

14 May '18

'A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. From a report: EFF has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages. The full details will be published in a paper on Tuesday at 07:00 AM UTC (3:00 AM Eastern, midnight Pacific). In order to reduce the short-term risk, we and the researchers have agreed to warn the wider PGP user community in advance of its full publication. Our advice, which mirrors that of the researchers, is to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email. Until the flaws described in the paper are more widely understood and fixed, users should arrange for the use of alternative end-to-end secure channels, such as Signal, and temporarily stop sending and especially reading PGP-encrypted email.' -- source: https://it.slashdot.org/story/18/05/14/149222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Malware Found In the Ubuntu Snap Store
by Peter Reutemann 14 May '18

14 May '18

'Oh, snap! Just because some packages are available to install directly from the Ubuntu Software Center doesn't make them safe. This is proved by a recent discovery of malware in some snap packages from the Ubuntu Snaps Store. At least two of the snap packages, 2048buntu and hextris, uploaded to the Ubuntu Snaps Store by user Nicolas Tomb, contained malware. All packages by Nicolas have since been removed from the Ubuntu Snaps Store, "pending further investigations." The report comes from a bug which mentions that the 2048buntu snap package (and other packages by Nicolas Tomb) contains a hidden cryptocurrency miner inside. ' -- source: https://news.slashdot.org/story/18/05/12/2140252 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Same IP Address For Wired And Wireless Connections
by Lawrence D'Oliveiro 10 May '18

10 May '18

I did something I thought was a little dodgy in my DHCP server config, namely I assigned the same IP address to both the Ethernet and Wi-Fi MAC addresses for my laptop. I figured this was OK so long as I turned one off before turning on the other. Today, I tried breaking that rule. I started a large rsync transfer over wi-fi, decided it was too slow, and plugged in an Ethernet cable. And it worked! After a few seconds, I was able to turn off the wi-fi, and the transfer continued without a hiccup. Has anyone else tried this?

1 0

A first look at Ubuntu 18.04 LTS desktop
by Peter Reutemann 10 May '18

10 May '18

'Last week, Canonical released Ubuntu 18.04 LTS (codenamed "Bionic Beaver"), the latest long-term support version of the Ubuntu Linux distribution. Ars is working on a full review of the release, but I wanted to share some first impressions of the desktop, which is a major advance over the last LTS version.' -- source: https://arstechnica.com/information-technology/2018/04/bionic-beaver-a-firs… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

System76 Oryx Pro Linux laptop is now thinner and faster, putting Apple MacBook Pro to shame
by Peter Reutemann 10 May '18

10 May '18

'Last week, System76 started to share details about its refreshed Linux-powered Oryx Pro laptop. It would be thinner and more powerful, while adding twice the battery life of its predecessor. Unfortunately, we did not yet know exactly what the laptop looked like. Today, we finally have official images. This new Oryx Pro is quite breathtaking, as it is a true Pro machine -- with the USB Type-A, Ethernet, and HDMI ports you expect -- while being just 19mm thin. It has the horsepower that power-users need, thanks to its 8th Gen Intel Core i7 processor and NVIDIA GeForce GTX 10-Series GPU. Hey, Apple, this is what a "Pro" laptop should be...' -- source: https://betanews.com/2018/05/09/system76-oryx-pro-linux-laptop/ The video is fun to watch, too. :-) Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

Multiple OS Vendors Release Security Patches After Misinterpreting Intel Docs
by Peter Reutemann 09 May '18

09 May '18

'Almost all major OS vendors released security patches yesterday after a researcher discovered that some OS makers have misinterpreted an Intel CPU debug feature and left their systems open to attacks. From a report: The vulnerability is in how the OS vendors implemented a hardware debug mechanism for Intel x86-64 architectures -- and more specifically the MOV SS and POP SS instructions. "In certain circumstances after the use of certain Intel x86-64 architecture instructions, a debug exception pointing to data in a lower ring (for most operating systems, the kernel Ring 0 level) is made available to operating system components running in Ring 3," the CERT/CC team explained in an advisory published yesterday. Explained in layman's terms, "this may allow an attacker to utilize operating system APIs to gain access to sensitive memory information or control low-level operating system functions." Operating systems that mishandle this debug exception and had their systems open to attacks include Apple, Microsoft, FreeBSD, Red Hat, Ubuntu, SUSE Linux, and other Linux distros based on the Linux Kernel -- which is also affected.' -- source: https://it.slashdot.org/story/18/05/09/1724220 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox Moves Browsers Into Post-Password Future With WebAuthn Tech
by Peter Reutemann 09 May '18

09 May '18

'Today, Mozilla released Firefox 60 for Windows, Mac, Linux and Android, and with it arrives Web Authentication API for desktop browsers. From a report: Firefox 60 supports technology called Web Authentication, or WebAuthn for short, that can be used to grant you access to websites with a physical authentication device like a YubiKey dongle, biometric identity proof using an Android phone's fingerprint reader or the iPhone's Face ID, and some other alternatives to passwords. Passwords are a particular problem on the web. Fake websites can coax you to type in credentials that then can be used to steal money from your bank account or snoop your email -- a problem called phishing. Even if you pick hard-to-guess passwords, never reuse them on multiple sites and always remember them, passwords still aren't that strong a foundation for security these days. We're still a long way away from a post-password future, but WebAuthn is an important step, if nothing else, in making sites more secure.' -- source: https://news.slashdot.org/story/18/05/09/1932232 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Cloudflare Embraces ARM As Qualcomm Might Leave
by Lawrence D'Oliveiro 09 May '18

09 May '18

Seems like Qualcomm might be giving up <http://www.theregister.co.uk/2018/05/08/arm_server_cpus_why_are_they_going_…> on trying to offer ARM servers for the data centre. But in that same article, one of the comments linked to this item <http://www.datacenterknowledge.com/design/cloudflare-bets-arm-servers-it-ex…> which says that Cloudflare is going all in on using ARM servers to expand its CDN worldwide. I suppose content delivery is a market segment where sheer CPU grunt is less important than I/O throughput, power efficiency etc.

1 0

Chrome 66 Arrives With Autoplaying Content Blocked By Default
by Peter Reutemann 09 May '18

09 May '18

'Google today launched Chrome 66 for Windows, Mac, Linux, and Android. The desktop release includes autoplaying content muted by default, security improvements, and new developer features. You can update to the latest version now using the browser's built-in silent updater or download it directly from google.com/chrome. In our tests, autoplaying content that is muted still plays automatically. Autoplaying content with sound, whether it has visible controls or not, and whether it is set to play on loop or not, simply does not start playing. Note that this is all encompassing -- even autoplaying content you are expecting or is the main focus of the page does not play. YouTube videos, for example, no longer start playing automatically. And in case that's not enough, or if a page somehow circumvents the autoplaying block, you can still mute whole websites.' -- source: https://tech.slashdot.org/story/18/04/18/0410202 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 1

Gimp 2.10.0 release
by Peter Reutemann 09 May '18

09 May '18

'The long-awaited GIMP 2.10.0 is finally here! This is a huge release, which contains the result of 6 long years of work (GIMP 2.8 was released almost exactly 6 years ago!) by a small but dedicated core of contributors. The Changes in short: - Image processing nearly fully ported to GEGL, allowing high bit depth processing, multi-threaded and hardware accelerated pixel processing, and more. - Color management is a core feature now, most widgets and preview areas are color-managed. - Many improved tools, and several new and exciting tools, such as the Warp transform, the Unified transform and the Handle transform tools. - On-canvas preview for all filters ported to GEGL. - Improved digital painting with canvas rotation and flipping, symmetry painting, MyPaint brush support… - Support for several new image formats added (OpenEXR, RGBE, WebP, HGT), as well as improved support for many existing formats (in particular more robust PSD importing). - Metadata viewing and editing for Exif, XMP, IPTC, and DICOM. - Basic HiDPI support: automatic or user-selected icon size. - New themes for GIMP (Light, Gray, Dark, and System) and new symbolic icons meant to somewhat dim the environment and shift the focus towards content (former theme and color icons are still available in Preferences). - And more, better, more, and even more awesome!' -- source: https://www.gimp.org/news/2018/04/27/gimp-2-10-0-released/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Drupal Sites Fall Victims To Cryptojacking Campaigns
by Peter Reutemann 08 May '18

08 May '18

'After the publication of two severe security flaws in the Drupal CMS, cybercrime groups have turned their sights on this web technology in the hopes of finding new ground to plant malware on servers and make money through illegal cryptocurrency mining. [...] Now, as time passes by, more malware campaigns targeting Drupal sites are getting off the ground -- and two of them have been spotted the past week. The most recent of these campaigns has been discovered by US security researcher Troy Mursch. The researcher discovered a group that gained access to Drupal sites and hid a version of the Coinhive in-browser cryptocurrency miner inside a file named "jquery [dot] once [dot] js?v=1.2," loaded on each of the compromised sites. Mursch initially tracked down the infected files to over 100,000 domains, then narrowed down the results to 80,000 domains, and finally confirmed the infection on at least 348 sites where the in-browsing mining operation was actually taking place.' -- source: https://it.slashdot.org/story/18/05/07/1636258 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu Considering an HTML5-Based OS Installer
by Peter Reutemann 08 May '18

08 May '18

'Ubuntu's Self-Appointed Benevolent Dictator for Life, Mark Shuttleworth, is considering backing a new Ubuntu installer that would be using HTML5 via the Electron Framework. This theoretical installer would re-use the company's existing HTML5 code for managing MAAS installations, integrate with Electron, and also better support their Snap packaging format, according to his proposal. What could possibly go wrong with an HTML5/Electron operating system installer? Mark also announced that Ubuntu 18.10 is codenamed the Cosmic Cuttlefish.' -- source: https://news.slashdot.org/story/18/05/08/1712221 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

You Can Now Run Linux Apps On Chrome OS
by Peter Reutemann 08 May '18

08 May '18

'Google today announced Chrome OS is getting Linux support. "As a result, Chromebooks will soon be able to run Linux apps and execute Linux commands," reports VentureBeat. "A preview of Linux on the Pixelbook will be released first, with support for more devices coming soon." From the report: "Just go to wherever you normally get those apps, whether it's on the websites or through apt-get in the Linux terminal, and seamless get those apps like any other Linux distribution," Chrome OS director of product management Kan Liu told VentureBeat. Support for Linux apps means developers will finally be able to use a Google device to develop for Google's platforms, rather than having to depend on Windows, Mac, or Linux machines. And because Chrome OS doesn't just run Chrome OS-specific apps anymore, developers will be able to create, test, and run any Android or web app for phones, tablets, and laptops all on their Chromebooks. Without having to switch devices, you can run your favorite IDE -- as long as there is a Debian Linux version (for the curious, Google is specifically using Debian Stretch here -- code in your favorite language and launch projects to Google Cloud with the command line. ' -- source: https://linux.slashdot.org/story/18/05/08/216240 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Meeting topics?
by Peter Reutemann 08 May '18

08 May '18

Hi everyone Any ideas for next week's meeting? Having a go at System76's Pop!_OS? Other ideas? Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz

3 3

Eight New Meltdown-Like Flaws Found
by Peter Reutemann 06 May '18

06 May '18

'Researchers have found eight new flaws in computer central processing units that resemble the Meltdown and Spectre bugs revealed in January, a German computing magazine reported on Thursday. The magazine, called c't, said it was aware of Intel Corp's plans to patch the flaws, adding that some chips designed by ARM Holdings, a unit of Japan's Softbank, might be affected, while work was continuing to establish whether Advanced Micro Devices chips were vulnerable... The magazine said Google Project Zero, one of the original collective that exposed Meltdown and Spectre in January, had found one of the flaws and that a 90-day embargo on going public with its findings would end on May 7... "Considering what we have seen with Meltdown and Spectre, we should expect a long and painful cycle of updates, possibly even performance or stability issues," said Yuriy Bulygin, chief executive officer of hardware security firm Eclypsium and a former Intel security researcher. "Hopefully, Meltdown and Spectre led to improvements to the complicated process of patching hardware." Neowin now reports that Intel "is expected to release microcode updates in two waves; one in May, and the other in August."' -- source: https://it.slashdot.org/story/18/05/05/1730203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Drive-by Rowhammer attack uses GPU to compromise an Android phone
by Peter Reutemann 03 May '18

03 May '18

'Over the past few years, there has been a steady evolution in Rowhammer, the once largely theoretical attack that exploits physical defects in memory chips to tamper with the security of the devices they run on. On Thursday, researchers are unveiling the most practical demonstration yet of Rowhammer's power and reach: an exploit that remotely executes malicious code on Android phones by harnessing their graphical processors.' -- source: https://arstechnica.com/information-technology/2018/05/drive-by-rowhammer-a… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

More Dead Microsoft Technologies
by Lawrence D'Oliveiro 01 May '18

01 May '18

A roundup <http://www.theregister.co.uk/2018/05/01/windows_10_april_update_casualties/> of what’s gone in the latest Windows 10 update mentions that HomeGroup, Microsoft’s attempt to let a bunch of machines share files and printers on an ad-hoc basis, has now gone the way of Windows Home Server and Windows Media Center. Also it looks like XPS, Microsoft’s NIH alternative to PDF, has also bitten the dust. And the Windows Help Viewer may be next...

1 0

Fedora 28 Featuring GNOME 3.28 Released
by Peter Reutemann 01 May '18

01 May '18

'Fedora 28 has many new features, but one in particular will surely excite desktop/workstation users -- GNOME 3.28, which introduces Thunderbolt 3 support and improved laptop battery life. Fedora has long used GNOME as the default desktop environment, and best of all, it is mostly a stock affair -- no silly tweaks enabled by default. In other words, you get a very pure GNOME experience, making Fedora Workstation the preferred OS for many hardcore fans of the DE. "GNOME 3.28 adds the capability to favorite files, folders, and contacts for easier organization and access. Additionally, the new application Usage is included to help users more easily diagnose and resolve performance and capacity issues," says The Fedora Project.' -- source: https://linux.slashdot.org/story/18/05/01/1727233 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

USB 3.2 Work Is On The Way For The Linux 4.18 Kernel: Report
by Peter Reutemann 30 Apr '18

30 Apr '18

'USB 3.2 was announced last summer as an incremental update to the USB standard to double the bandwidth for existing USB Type-C cables. We haven't seen much in the way of USB 3.2 mentions in the Linux kernel yet but then again we haven't really seen USB 3.2 devices yet. USB 3.2 brings a multi-lane operation mode for hosts and devices using existing Type-C cables as well as a minor update to the USB hub specification. USB 3.2 allows for new 10 Gbit/s and 20 Gbit/s rates using two lanes, USB 3.2 Gen 1x2 and USB 3.2 Gen 2x2, respectively. It looks like kernel developers are now working on getting their USB 3.2 Linux support in order. We were tipped off that as of last week there are some USB 3.2 patches queued in the usb-next tree maintained by Greg Kroah-Hartman's.' -- source: https://linux.slashdot.org/story/18/04/30/1558201 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Sinclair ZX Spectrum Designer Rick Dickinson Succumbs To Cancer
by Lawrence D'Oliveiro 27 Apr '18

27 Apr '18

Rick Dickinson, the designer for several machines sold by Sinclair in the 1980s, has died <http://www.theregister.co.uk/2018/04/26/rick_dickinson_dies/>. More recently, he was involved in the campaign to create the “ZX Spectrum Next” machine. Commenters have offered up some useful links: his Flickr gallery <https://www.flickr.com/photos/9574086(a)N02/albums> with some peeks at concept renders, and this item <https://www.youtube.com/watch?v=TAwHIcdidzI> from 2003 where he talks about his designs for Sinclair.

1 0

Microsoft Quarterly Report
by Lawrence D'Oliveiro 27 Apr '18

27 Apr '18

Just some items I found notable from here <https://arstechnica.com/gadgets/2018/04/even-windows-revenue-is-up-in-micro…>: * Office 365 is up, traditional MS Office is down. * Corporate sales of Windows are up, while consumer sales are down (“below the general decline of the PC market”). In each case, the former is growing faster than the latter is declining, so overall business is up.

1 0

Linux At The Leading Edge Of Enterprise-Level Storage
by Lawrence D'Oliveiro 26 Apr '18

26 Apr '18

First of all, some background (as I understand it): * “NVMe” is a standard for accessing storage (normally flash rather than hard drives) via a PCI-E bus <https://en.wikipedia.org/wiki/NVM_Express>. * “NVME-oF” (“NVMe over Fabrics”) (mentioned in the above article) is a further spec that allows one node to access storage attached to another node. Sounds like NBD, really <https://en.wikipedia.org/wiki/Network_block_device>, though the term “RDMA” (“Remote Direct Memory Access”) gets tossed around. So, this article <http://www.theregister.co.uk/2018/04/26/nvme_fabric_over_fibre_channel/> says things like NVME-oF “has to be implemented across network or fabric and, so far, Ethernet, with ROCE (RDMA over Converged Ethernet), is the favoured one”, though other lower-layer protocols also work. In particular, the writer is interviewing an industry guru about the prospects for FC-NVMe, which uses Fibre Channel as the transport. A couple of quotes caught my eye: Since the low-level driver isn't a part of the OS, like NVMe-oF, but rather supplied by the HBA vendor (Emulex or QLogic), the deployment for OSes outside the Linux model should be more agile... You must run a recent version of Linux; no other OSes have NVMe-oF drivers available (yet). In other words, NVME-oF is pretty much Linux-only at the moment. But it would be hardware-independent, which should mean you can mix and match storage from different vendors. Unlike FC-NVMe, where the “HBA vendor” needs to supply hardware-specific drivers. In other, other words, NVME-oF works only on Linux, but makes you “hardware-agile”, while FC-NVMe is hardware-specific but should (hopefully) be “OS-agile”. Which kind of “agility” will turn out to be more important, I wonder?

1 0

Drupal Warns of New Remote-Code Bug, the Second in Four Weeks
by Peter Reutemann 26 Apr '18

26 Apr '18

'For the second time in a month, websites that use the Drupal content management system are confronted with a stark choice: install a critical update or risk having your servers infected with ransomware or other nasties. From a report: Maintainers of the open-source CMS built on the PHP programming language released an update patching critical remote-code vulnerability on Wednesday. The bug, formally indexed as CVE-2018-7602, exists within multiple subsystems of Drupal 7.x and 8.x. Drupal maintainers didn't provide details on how the vulnerability can be exploited other than to say attacks work remotely. The maintainers rated the vulnerability "critical" and urged websites to patch it as soon as possible.' -- source: https://developers.slashdot.org/story/18/04/25/1956214 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Was Our Census Data Secure?
by Lawrence D'Oliveiro 25 Apr '18

25 Apr '18

According to this article <http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=12038826>, when we were filling out our census data online last month, it was actually going through the servers of a company called Incapsula, which was scanning the unencrypted data for malware. Since the company is based in the US, this naturally raises concerns about US Government access to the data of NZ residents and citizens. On the one hand, the article says “this is not a data breach”, but on the other hand Adding to the researchers' concerns, Stats NZ's digital key that is required to decrypt the data sent over TLS secured connections is now distributed across Incapsula's global network, Teague and Culnane said. "Our non-exhaustive search found that servers in Australia, the US, as well as New Zealand, all had the Stats NZ key," they added. Digital TLS keys are supposed to be protected and should only be kept on the servers that they relate to, the researchers said. If keys are leaked, attackers could use them to impersonate Stats NZ servers. and further down they use the phrase “clear security flaw”. Stats NZ insists the company is trusted and “Goverment-approved”. Given it’s also protecting the GCSB, I guess that is already very literally true.

1 0

Can Online Elections Ever Be Secure?
by Lawrence D'Oliveiro 25 Apr '18

25 Apr '18

Commentary <https://www.schneier.com/blog/archives/2018/04/securing_electi_1.html> from Bruce Schneier: We can securely bank online, but can't securely vote online. If we could do away with anonymity -- if everyone could check that their vote was counted correctly -- then it would be easy to secure the vote. ... We can't, so we need to accept that our voting systems are insecure. We need an election system that is resilient to the threats. And for many parts of the system, that means paper.

1 0

meeting next week
by Peter Reutemann 25 Apr '18

25 Apr '18

Hi guys We have a WLUG meeting next Monday: "With the Cambridge Analytics scandal around (ab)using data obtained through Facebook, how about we have a look at (self-hosted) alternatives to the social network giant? Details on scandal: https://arstechnica.com/tech-policy/2018/03/facebooks-cambridge-analytica-s… Social media alternatives (eg diaspora, gnu social): https://alternativeto.net/software/facebook/" -- details: https://www.meetup.com/WaikatoLinuxUsersGroup/events/246737141/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 4

What Private Browsing Mode Really Means
by Lawrence D'Oliveiro 25 Apr '18

25 Apr '18

Seems like a lot of people <http://www.theregister.co.uk/2018/04/24/private_web_browsing_study/> have the wrong idea about what is really “private” in private browsing mode. Many of them believe that * Activity while logged into an account (e.g. Google) will not be saved in that account’s history * Bookmarks made in private mode are not visible in standard mode * It prevents websites from tracking their location * It affords better protection against malware * It obscures their IP address. None of which is true. To its credit, when you open a private window in Firefox, it clearly states the things that are hidden and the things that are not.

1 0

Ubuntu 18.04?
by Peter Reutemann 24 Apr '18

24 Apr '18

Hi everyone Since April would be the usual month for an Ubuntu release, I was surprised that I hadn't heard anything so far. The following article mentions a release date of 26/4: https://fossbytes.com/ubuntu-18-04-bionic-beaver-release-date-features/ And according to the Ubuntu wiki, this still seems to be happening: https://wiki.ubuntu.com/BionicBeaver/ReleaseTaskSignup Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google Accused of Showing 'Total Contempt' for Android Users' Privacy
by Peter Reutemann 23 Apr '18

23 Apr '18

'On the heels of a terse privacy debate, Google may have found another thing to worry about: its attempt to rethink the traditional texting system. From a report: Joe Westby is Amnesty International's Technology and Human Rights researcher. Recently, in response to Google's launch of a new messaging service called "Chat", Westby argued that Google, "shows total contempt for Android users' privacy." "With its baffling decision to launch a messaging service without end-to-end encryption, Google has shown utter contempt for the privacy of Android users and handed a precious gift to cybercriminals and government spies alike, allowing them easy access to the content of Android users' communications. Following the revelations by CIA whistleblower Edward Snowden, end-to-end encryption has become recognized as an essential safeguard for protecting people's privacy when using messaging apps. With this new Chat service, Google shows a staggering failure to respect the human rights of its customers," Westby contended. Westby continued, saying: "In the wake of the recent Facebook data scandal, Google's decision is not only dangerous but also out of step with current attitudes to data privacy."' -- source: https://tech.slashdot.org/story/18/04/23/1946251 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

“Drupalgeddon2” touches off arms race to mass-exploit powerful Web servers
by Peter Reutemann 22 Apr '18

22 Apr '18

'Attackers are mass-exploiting a recently fixed vulnerability in the Drupal content management system that allows them to take complete control of powerful website servers, researchers from multiple security companies are warning. At least three different attack groups are exploiting "Drupalgeddon2," the name given to an extremely critical vulnerability Drupal maintainers patched in late March, researchers with Netlab 360 said Friday. Formally indexed as CVE- 2018-7600, Drupalgeddon2 makes it easy for anyone on the Internet to take complete control of vulnerable servers simply by accessing a URL and injecting publicly available exploit code. Exploits allow attackers to run code of their choice without having to have an account of any type on a vulnerable website. The remote-code vulnerability harkens back to a 2014 Drupal vulnerability that also made it easy to commandeer vulnerable servers. Drupalgeddon2 "is under active attack, and every Drupal site behind our network is being probed constantly from multiple IP addresses," Daniel Cid, CTO and founder of security firm Sucuri, told Ars. "Anyone that has not patched is hacked already at this point. Since the first public exploit was released, we are seeing this arms race between the criminals as they all try to hack as many sites as they can." China-based Netlab 360, meanwhile, said at least three competing attack groups are exploiting the vulnerability. The most active group, Netlab 360 researchers said in a blog post published Friday, is using it to install multiple malicious payloads, including cryptocurrency miners and software for performing distributed denial-of-service attacks on other domains. The group, dubbed Muhstik after a keyword that pops up in its code, relies on 11 separate command-and-control domains and IP addresses, presumably for redundancy in the event one gets taken down.' -- source: https://arstechnica.com/information-technology/2018/04/drupalgeddon2-touche… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Millions of Chrome Users Have Installed Malware Posing as Ad Blockers
by Peter Reutemann 19 Apr '18

19 Apr '18

'Andrey Meshkov, the cofounder of ad-blocker AdGuard, recently got curious about the number of knock-off ad blocking extensions available for Google's popular browser Chrome. These extensions were deliberately styled to look like legitimate, well-known ad blockers, but Meshkov wondered why they existed at all, so he downloaded one and took a look at the code. "Basically I downloaded it and checked what requests the extension was making," Meshkov told me over the phone. "Some strange requests caught my attention." Meshkov discovered that the AdRemover extension for Chrome -- which had over 10 million users -- had code hidden inside an image that was loaded from the remote command server, giving the extension creator the ability to change its functions without updating. This alone is against Google's policy, and after Meshkov wrote about a few examples on AdGuard's blog, many of which had millions of downloads, Chrome removed the extensions from the store. I reached out to Google, and a spokesperson confirmed that these extensions had been removed.' -- source: https://yro.slashdot.org/story/18/04/19/1946250 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ask Slashdot: Is There a Good Alternative to Facebook?
by Peter Reutemann 18 Apr '18

18 Apr '18

'Long-time Slashdot reader Lauren Weinstein argues that fixing Facebook may be impossible because "Facebook's entire ecosystem is predicated on encouraging the manipulation of its users by third parties who posses the skills and financial resources to leverage Facebook's model. These are not aberrations at Facebook -- they are exactly how Facebook was designed to operate." Meanwhile one fund manager is already predicting that sooner or later every social media platform "is going to become MySpace," adding that "Nobody young uses Facebook," and that the backlash over Cambridge Analytica "quickens the demise." But Slashdot reader silvergeek asks, "is there a safe, secure, and ethical alternative?" to which tepples suggests "the so-called IndieWeb stack using the h-entry microformat." He also suggests Diaspora, with an anonymous Diaspora user adding that "My family uses a server I put up to trade photos and posts... Ultimately more people need to start hosting family servers to help us get off the cloud craze... NethServer is a pretty decent CentOS based option." Meanwhile Slashdot user Locke2005 shared a Washington Post profile of Mastodon, "a Twitter-like social network that has had a massive spike in sign-ups this week." Mastodon's code is open-source, meaning anybody can inspect its design. It's distributed, meaning that it doesn't run in some data center controlled by corporate executives but instead is run by its own users who set up independent servers. And its development costs are paid for by online donations, rather than through the marketing of users' personal information... Rooted in the idea that it doesn't benefit consumers to depend on centralized commercial platforms sucking up users' personal information, these entrepreneurs believe they can restore a bit of the magic from the Internet's earlier days -- back when everything was open and interoperable, not siloed and commercialized. The article also interviews the founders of Blockstack, a blockchain-based marketplace for apps where all user data remains local and encrypted. "There's no company in the middle that's hosting all the data," they tell the Post. "We're going back to the world where it's like the old-school Microsoft Word -- where your interactions are yours, they're local and nobody's tracking them." On Medium, Mastodon founder Eugene Rochko also acknowledges Scuttlebutt and Hubzilla, ending his post with a message to all social media users: "To make an impact, we must act." Lauren Weinstein believes Google has already created an alternative to Facebook's "sick ecosystem": Google Plus. "There are no ads on Google+. Nobody can buy their way into your feed or pay Google for priority. Google doesn't micromanage what you see. Google doesn't sell your personal information to any third parties..." And most importantly, "There's much less of an emphasis on hanging around with those high school nitwits whom you despised anyway, and much more a focus on meeting new persons from around the world for intelligent discussions... G+ posts more typically are about 'us' -- and tend to be far more interesting as a result." (Even Linus Torvalds is already reviewing gadgets there.) Wired has also compiled their own list of alternatives to every Facebook service. But what are Slashdot's readers doing for their social media fix? Leave your own thoughts and suggestions in the comments. Is there a good alternative to Facebook?' -- source: https://tech.slashdot.org/story/18/03/25/0039218 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Microsoft’s bid to secure the Internet of Things: Custom Linux, custom chips, Azure
by Peter Reutemann 18 Apr '18

18 Apr '18

'The drive to connect everything to the Internet and build the Internet of Things has created a new security nightmare. Millions of devices with little to no active maintenance are now permanently online, enabling the creation of massive botnets as the devices go unpatched and unloved. Microsoft today announced its solution: Azure Sphere.' -- source: https://arstechnica.com/gadgets/2018/04/microsofts-bid-to-secure-the-intern… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

When Two Secure Systems Make An Insecure Combination
by Lawrence D'Oliveiro 13 Apr '18

13 Apr '18

Just goes to show <https://www.schneier.com/blog/archives/2018/04/obscure_e-mail_.html> that two separate systems may be reasonably secure in their own right, but the interaction between them can create unexpected vulnerabilities.

1 0

Cyber-Espionage Groups Are Increasingly Leveraging Routers in Their Attacks
by Peter Reutemann 12 Apr '18

12 Apr '18

'Catalin Cimpanu, reporting for BleepingComputer: Cyber-espionage groups -- also referred to as advanced persistent threats (APTs) -- are using hacked routers more and more during their attacks, according to researchers at Kaspersky Lab. "It's not necessarily something new. Not something that just exploded," said Costin Raiu, director of Global Research and Analysis Team (GReAT) at Kaspersky Lab, in a webinar today. "We've seen a bunch of router attack throughout the years. A very good example is SYNful Knock, a malicious implant for Cisco [routers] that was discovered by FireEye but also threat actors such as Regin and CloudAtlas. Both APTs have been known to have and own proprietary router implants." But the number of APTs leveraging routers for attacks has gone steadily up in the past year, and the tactic has become quite widespread in 2018. For example, the Slingshot APT (believed to be a US Army JSOC operation targeting ISIS militants) has used hacked MikroTik routers to infect victims with malware.' -- source: https://tech.slashdot.org/story/18/04/12/1932248 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Some Android Device Makers Are Lying About Security Patch Updates
by Peter Reutemann 12 Apr '18

12 Apr '18

'Security patches for smartphones are extremely important because many people store personal data on their devices. Lots of Android phones out there get regularly security patches, but according to a new report, some of them are lying about the patches that they've actually gotten. According to a study by Security Research Labs, some Android phones are missing patches that they claim to have. Wired explains that SRL tested 1,200 phones from more than a dozen phone makers for every Android security patch released in 2017. The devices tested include ones from Google, Samsung, Motorola, LG, HTC, Xiaomi, OnePlus, Nokia, TCL, and ZTE. The study found that outside of Google and its Pixel phones, well-known phone makers had devices that were missing patches that they claimed to have. "We found several vendors that didn't install a single patch but changed the patch date forward by several months," says SRL founder Karsten Nohl.' -- source: https://tech.slashdot.org/story/18/04/12/1851203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

AMD Releases Spectre v2 Microcode Updates for CPUs Going Back To 2011
by Peter Reutemann 11 Apr '18

11 Apr '18

'Catalin Cimpanu, writing for BleepingComputer: AMD has released CPU microcode updates for processors affected by the Spectre variant 2 (CVE-2017-5715) vulnerability. The company has forwarded these microcode updates to PC and motherboard makers to include them in BIOS updates. Updates are available for products released as far as 2011, for the first processors of the Bulldozer line. Microsoft has released KB4093112, an update that also includes special OS-level patches for AMD users in regards to the Spectre v2 vulnerability. Similar OS-level updates have been released for Linux users earlier this year. Yesterday's microcode patches announcement is AMD keeping a promise it made to users in January, after the discovery of the Meltdown and Spectre (v1 and v2) vulnerabilities.' -- source: https://tech.slashdot.org/story/18/04/11/1826222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0