- wlug - list.wlug.org.nz

Linux Kernel Adopts 'Code of Conflict'
by Peter Reutemann 11 Mar '15

11 Mar '15

'Motor was one of several readers to note that a small patch recently added to the Linux kernel contains guidelines for discourse and dispute resolution within the community. It's called the "Code of Conflict."' -- source: http://linux.slashdot.org/story/15/03/10/237257 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Cutting-edge hack gives super user status by exploiting DRAM weakness
by Peter Reutemann 10 Mar '15

10 Mar '15

"In one of more impressive hacks in recent memory, researchers have devised an attack that exploits physical weaknesses in certain types of DDR memory chips to elevate the system rights of untrusted users of Intel-compatible PCs running Linux." -- source: http://arstechnica.com/security/2015/03/cutting-edge-hack-gives-super-user-… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

How to create a full backup of your Android device without root
by Peter Reutemann 10 Mar '15

10 Mar '15

"Sometimes, a backup of a smartphone or tablet just isn't enough, especially if you have a number of (the same) devices that have to be quickly deployed (or redeployed). For that, you need a bit more power than Titanium Backup or Google Drive. If you want to do full-blown backup of devices, you must turn to the Android Software Developer Kit (SDK). With this powerhouse tool, you can easily create a complete backup of a device with a single command." -- source: http://www.techrepublic.com/article/how-to-create-a-full-backup-of-your-and… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Android v5 live CD version from Sweden
by Ian Young 08 Mar '15

08 Mar '15

A live CD of Android 5.0.2 by a gentleman named Arne Exton who seems to have a passion for running up pimped out versions of sundry distros. Looks like he also plays golf. Not yet run by me. Arne's work sometimes has quirks, he is a one man band afaik and comes up with something new at least fortnightly. AndEX (Android) x86 5.0.2 Lollipop Live CD with kernel 3.10.58-exton-android-x86 :: Free Download https://extonlinux.wordpress.com/ -- currently at top of this page. http://andex.exton.net/?page_id=13

1 0

You Thought PC Security Was Bad...
by Lawrence D'Oliveiro 06 Mar '15

06 Mar '15

To those still reeling from Baden’s presentation on cracking PC security, there’s worse to come. At least PC OSes do get some patching. But think of all the other devices around your home which have the core of a computer running something resembling an operating system on them which might be many years out of date (even on a newer device!). But the vendor can’t be bothered to provide fixes for any security holes which may be discovered. And even if they did, most of the buyers of these devices wouldn’t even know patches were available. Case in point: wireless routers, which are so full of unpatched holes that it’s actually unusual to find a reasonably secure one <http://www.theregister.co.uk/2015/03/05/broadband_routers_sohopeless_and_ve…>.

1 0

Red Hat Strips Down For Docker
by Peter Reutemann 06 Mar '15

06 Mar '15

"Reacting to the surging popularity of the Docker virtualization technology, Red Hat has customized a version of its Linux distribution to run Docker containers. The Red Hat Enterprise Linux 7 Atomic Host strips away all the utilities residing in the stock distribution of Red Hat Enterprise Linux (RHEL) that aren't needed to run Docker containers. Removing unneeded components saves on storage space, and reduces the time needed for updating and booting up. It also provides fewer potential entry points for attackers." -- source: http://hardware.slashdot.org/story/15/03/05/2240245 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Software Freedom Conservancy Funds GPL Suit Against VMWare
by Peter Reutemann 05 Mar '15

05 Mar '15

"Jeremy Allison - Sam writes with this excerpt from a news release from the Software Freedom Conservancy: Software Freedom Conservancy announces today Christoph Hellwig's lawsuit against VMware in the district court of Hamburg in Hamburg, Germany. This is the regretful but necessary next step in both Hellwig and Conservancy's ongoing effort to convince VMware to comply properly with the terms of the GPLv2, the license of Linux and many other Open Source and Free Software included in VMware's ESXi products. Serge Wroclawski points out the SFC's technical FAQ about the suit. One nugget: This case is specifically regarding a combined work that VMware allegedly created by combining their own code (“vmkernel”) with portions of Linux's code, which was licensed only under GPLv2. As such, this, to our knowledge, marks the first time an enforcement case is exclusively focused on this type of legal question relating to GPL" -- source: http://linux.slashdot.org/story/15/03/05/1721231 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 3

Pulling Remote Word Documents from RAM using Kali Linux
by Peter Reutemann 05 Mar '15

05 Mar '15

With the Kali demo at last month's meeting in mind, I just came across this post here and I thought people might be interested in this: "In this tutorial we will see how to pull a Word document from a remote machine’s memory, parse it for text and view it in Kali Linux." -- sources: http://www.linuxtoday.com/security/pulling-remote-word-documents-from-ram-u… https://cyberarms.wordpress.com/2015/03/01/pulling-remote-word-documents-fr… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

FREAK Attack Threatens SSL Clients
by Peter Reutemann 04 Mar '15

04 Mar '15

"For the nth time in the last couple of years, security experts are warning about a new Internet-scale vulnerability, this time in some popular SSL clients. The flaw allows an attacker to force clients to downgrade to weakened ciphers and break their supposedly encrypted communications through a man-in-the-middle attack. Researchers recently discovered that some SSL clients, including OpenSSL, will accept weak RSA keys–known as export-grade keys–without asking for those keys. Export-grade refers to 512-bit RSA keys, the key strength that was approved by the United States government for export overseas. This was an artifact from decades ago and it was thought that most servers and clients had long ago abandoned such weak ciphers. The vulnerability affects a variety of clients, most notably Apple's Safari browser." -- source: http://it.slashdot.org/story/15/03/03/2036241 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

Linux and Multiple Internet Uplinks: a New Tool
by Peter Reutemann 04 Mar '15

04 Mar '15

"Linux has been able do multipath routing for a long time: it means being able to have routes with multiple gateways and to use them in a (weighted) round-robin fashion. But Linux is missing a tool to actively monitor the state of internet uplinks and change the routing accordingly. Without it, from a LAN perspective, it's like having a RAID-0: just one uplink goes down and all of your LAN-to-WAN traffic goes down too. Documentation and examples on the subject are lacking; existing solutions are few and deeply integrated in firewall/routing specific distributions. To address these issues, a new standalone tool was just released: Fault Tolerant Router. It also includes a complete (iptables + ip policy routing) configuration generator." -- source: http://linux.slashdot.org/story/15/03/03/1910206 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

A Tale Of Two Standards
by Lawrence D'Oliveiro 03 Mar '15

03 Mar '15

Came across this article from a decade ago <https://www.samba.org/samba/news/articles/low_point/tale_two_stds_os2.html> about the evolution of the POSIX and Win32 standards from the viewpoint of a veteran who earned his scars in the trenches. While POSIX got one or two things spectacularly wrong (e.g. the disaster that is file locking), it got a lot of things right (e.g. abstracting data types for file offsets/sizes, timestamps etc). Wonder why WINE has taken so long to get to where it is? It’s because nobody can be quite sure they have flushed out every last wrinkle of the behaviour of every Win32 API call.

1 0

Xfce 4.12 Released
by Peter Reutemann 01 Mar '15

01 Mar '15

"After two years of hard work (and much to the dismay of naysayers who worried the project has been abandoned), the Xfce team has announced the release of Xfce 4.12. Highlights include improvements to the window switcher dialog, intelligent hiding of the panel, new wallpaper settings, better multi-monitor support, improved power settings, additions to the file manager, and a revamped task manager. Here is a quick tour, the full changelog, and the download page. I have been running it since Xubuntu 15.04 beta 1 was released two days ago. It is much improved over 4.10, and the new additions are great." -- source: http://linux.slashdot.org/story/15/03/01/0558259 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Android-x86 -- the story continues
by Ian Young 24 Feb '15

24 Feb '15

Who knew? Android doesn't play nicely with a 2nd display. However investigation continues. Some say the internal display should be turned off, before the outside screen will go. Watch this space. Meanwhile some may like to read an interview with English as not the primary language featuring Chih-Wei Huang, main man of Android-x86. Snip > Why Android-x86? Runs on PC(x86). Original Android runs on ARM. Android - Teoreticaly could run on every present and future device, PS4 and Xbox one included (in pure theory). Is everytime better develop for only one OS (even with some platform differences), that for bunch of them. Mac OS or iOS are too closed and fixed on Apple device and its unlikely to change it. Linux market is realy fragmented and its development is relatively slow. Android - is without doubt OS with faster development speed and it counts. Android is open and free. Today, when i can buy good living room pc for 200$ i realy dont wan to pay next 100 bucks to Microsoft for crippled OEM licence, or 200$ for retail (HW independed licence) .... > How many of users know you think that tried Android-x86, at least through live distro and how many installed it into physical computer? Do you have some stats about usage? I don't have the stats and I don't really care about that. Just checked. The 4.4-RC1 release has 584,441 downloads and the 4.3-test release has 1,365,182 downloads. > Are you in contact with Google? Do you know why Google isn't developing Android-x86 for desktops itself? Is affair of Microsoft or something else? ChromeOS looks like duplicity. I have no official contact window of Google. But I have many friends in Google including the android team. I'll also contact Google android engineers directly for issues clarification or patches submission. I don't know Google's plan. But as you said, ChromeOS is probably the right one for its desktop roadmap. This is a common guess. < stop snipping http://www.gamasutra.com/blogs/RuthanielVandenNaar/20140612/219170/Current_…

1 0

Debian’s Reproducible Binary Project Reaches 83% Mark
by Lawrence D'Oliveiro 24 Feb '15

24 Feb '15

For a while now, Debian has been running a project to try to allow anyone to independently confirm that a particular Debian package was indeed built from a particular set of sources, by being able to reproduce the exact build steps themselves. (The security rationale for wanting to do so should be obvious.) As you can imagine, this is seriously non-trivial to achieve, since the least little difference in the version of your compilers or libraries can cause the binaries to differ, maybe not in any important way, but the idea is to end up with no differences at all. The Register has a report on the status of the project here <http://www.theregister.co.uk/2015/02/23/debian_project/>. More background here <https://lists.debian.org/debian-devel-announce/2015/02/msg00007.html>.

1 0

Linus Torvalds Debuts First Linux 4 Release Candidate
by Paul Wilson 24 Feb '15

24 Feb '15

"The Linux 3.x kernel family is no more. Long Live Linux 4! The Linux 3.x kernel family first officially debuted <http://www.datamation.com/open-source/linux-3.0-debuts-with-xen-integration…>on July 22, 2011. Linux 3.0 was the first major version change for Linux since the 2.6 kernel debuted in December of 2003. While Linux 2.6 was a major milestone that signified a break with the past, Linux 3.0 really was just the renumbered Linux 2.6.40 kernel. In the same manner the Linux 4.0 kernel is the continuation of Linux 3.x and is the renamed Linux 3.20."

1 0

How I upgraded my garden’s ugly drip system with a sexy OpenSprinkler
by Peter Reutemann 23 Feb '15

23 Feb '15

"After a few hours of work alongside an electrical engineering buddy this week, my home garden drip system became powered by a Raspberry Pi. I can control the entire thing locally from my iPhone and, to be frank, it’s pretty flippin’ cool." -- source: http://goo.gl/sDPGsr Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

“SSL hijacker” behind Superfish debacle imperils large number of users
by Peter Reutemann 21 Feb '15

21 Feb '15

I know, this is not strictly Linux related, but scary nonetheless and worthy of sharing, IMHO: "Thursday's revelations that Lenovo PCs ship with adware that intercepts sensitive HTTPS-protected traffic have focused intense scrutiny on Superfish, the company that markets the intrusive software. But lost in the furor is the central role a company called Komodia plays in needlessly exposing the passwords and other sensitive data of not just Lenovo customers but also a much larger base of PC users." -- source: http://goo.gl/KhA4KT Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Empire of the Gates
by Ian Young 20 Feb '15

20 Feb '15

Better snap back to reality. On Arstechnica I see the following data as of 11/2014. OS share worldwide -- Windows allsorts 91.28%, OS X 7.27, all others [weeps] 1.45. Windows breakdown XP 13.57%, Vista 2.65, Win 7 56.41, Win 8 6.55, Win 8.1 12.1. http://arstechnica.com/gadgets/2015/01/you-can-offer-people-windows-10-for-… All hail his Billness. Though the figures for systems other than desktops must show a different story, and in phone and tablet world Windows is pretty well a joke apart from some misguided corporate purchases. (I stand to be corrected on that). Meanwhile back in the day, I had GEOS installed and it was passable. Even ran it within OS/2, freaky or what? Speaking of OS/2 last time I looked there were still some zealots keeping it working after a fashion. -quote- Unfortunately, OS/2 had a crucial flaw in its design: a Synchronous Input Queue (SIQ). What this meant was that all messages to the GUI window server went through a single tollbooth. If any OS/2 native GUI app ever stopped servicing its window messages, the entire GUI would get stuck and the system froze. OK, technically the operating system was still running. Background tasks continued to execute just fine. You just couldn’t see them or interact with them or do anything, because the entire GUI was hung. Some enterprising OS/2 fan wrote an application that polled the joystick port and was supposed to unstick things when the user pressed a button. It rarely worked. Ironically, if you never ran native OS/2 applications and just ran DOS and Windows apps in a VM, the operating system was much more stable. -quote- http://arstechnica.com/business/2013/11/half-an-operating-system-the-triump… And now we return to our normal programme and wonder whether Linux v4 is soon to arrive. 19 million lines in the kernel and counting. http://linuxgizmos.com/is-linux-heading-toward-the-big-4-0/

2 1

Raspberry π 2 Ships Half Million In First Two Weeks
by Lawrence D'Oliveiro 20 Feb '15

20 Feb '15

The next-generation Raspberry π seems to be doing rather well right out of the starting gate <http://www.theinquirer.net/inquirer/news/2395948/raspberry-pi-2-sales-top-5…>. Meantime, while total sales of both old- and new-generation π models have wildly exceeded expectations, there is some dispute over the Foundation’s claim that it has become the best-selling British PC maker ever <http://www.theregister.co.uk/2015/02/18/raspberry_pi_5_million_sold/>.

5 14

A History Of Photoshop
by Lawrence D'Oliveiro 19 Feb '15

19 Feb '15

Quite a few articles around to celebrate the 25th anniversary of Photoshop 1.0, but this one at The Register <http://www.theregister.co.uk/2015/02/19/feature_25_years_of_adobe_photoshop/> seems to offer the most background detail. And some nice (or not-so-nice) examples of its use...

2 1

Microsoft's First Azure Hosted Service Is Powered By Linux
by Peter Reutemann 19 Feb '15

19 Feb '15

"Canonical, through John Zannos, VP Cloud Alliances, has proudly announced that the first ever Microsoft Azure hosted service will be powered by Ubuntu Linux. This piece of news comes from the Strata + Hadoop World Conference, which takes place this week in California. The fact of the matter is that the news came from Microsoft who announced the preview of Azure HDInsight (an Apache Hadoop-based hosted service) on Ubuntu clusters yesterday at the said event. This is definitely great news for Canonical, as their operating system is getting recognized for being extremely reliable when handling Big Data. Ubuntu is now the leading cloud and scale-out Linux-based operating system." -- source: http://hardware.slashdot.org/story/15/02/19/1830232 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Arduino Ructions
by Lawrence D'Oliveiro 19 Feb '15

19 Feb '15

Seems like the Arduino founders have split to go their separate ways <https://www.techdirt.com/articles/20150217/10345530055/is-arduino-heading-t…>. The unfortunate thing is that there are now lawsuits to try to decide who has exclusive rights to the “Arduino” name. Whatever happens, it seems likely there will continue to be more than one company making products that are “Arduino” in every way, if not in name. This is nothing new in open-source software, though it may be a first for open-source hardware.

1 0

Seymour Cray’s Only Surviving Talk
by Lawrence D'Oliveiro 19 Feb '15

19 Feb '15

Seymour Cray, who was practically “Mister Supercomputer” through the 1960s, 70s and 80s, gives a talk at Los Alamos discussing the pending introduction of the legendary Cray-1 <https://www.youtube.com/watch?v=vtOA1vuoDgQ>. The date given in the title is 1976, but he repeatedly makes remarks in the talk that point to the year actually being 1974. He says the new machine will be installed at LANL the following year (actually it went in in 1976).

1 0

How to rool the world by Bill G
by Ian Young 19 Feb '15

19 Feb '15

Become the main supplier of an OS for PCs while IBM snoozes, replete with profits from existing business. Adopt the 386 processor while IBM messes about with the 286 perhaps because of sunk investment in that CPU. Make deals with the hardware makers they can't refuse and shut out any competition. Introduce the first GUI to become widely used on the machines soon to become predominant in desktop computing. Leave the superior OS/2 in the dust, and get IBM to sell Windows. Excel. Actually first came to fame on the Mac iirc, and rapidly drove out just about all other spreadsheets in its Windows guise. On its coattails came all the other applications we know today as MS Office, effectively wiping out all competitors. Get networking in the box with Windows and crush Netware and eventually Novell with it. And so it went until perhaps MS became like IBM in the 1980s and failed to see the next big thing on several occasions, or at least failed to achieve the same level of dominance as in the past in new fields. 2 cents is the suggested donation, I'll pass the hat around.

2 1

Re: [wlug] PC-BSD: Set For Serious Growth?
by Chris O'Halloran 19 Feb '15

19 Feb '15

On Tue, 17 Feb 2015 21:40:02 +1300, Peter Reutemann wrote: > 'Luke Wolf, a KDE developer, argues that PC-BSD might become a > serious > -- source: http://bsd.slashdot.org/story/15/02/16/2355236 > > NB: Mentioning "Linux + Year of the Desktop" is always bait for a > flamewar. But... Did anyone ever use PC-BSD as their primary OS > (work/home)? Willing to share some insight? > > Cheers, Peter Perhaps people have to consider why they use Linux on the desktop at all (and why others than don't at present would). I think its people with a technical interest that use Linux on the desktop, either because they are familiar with it on servers, are passionate about the 'freeness' of it or the ease (including cost) with which they can set up a development environment. I think the big players like Apple and Microsoft would have to make some serious stuff-ups for the rest of population to go through the hassle of switching OSes on their current desktops. While many of the FOSS applications (GIMP/LibreOffice/Firefox) run just fine on Windows (and possible Mac too I don't know), they also reduce the imperative to shift entirely to Linux or BSD. And the only thing I see that really could shift the corporate environment is a server based Office(Document/Spreadsheet/Mail) solution that was so compelling, that eventually system administrators started to wonder if there was any point in sticking exclusively to an MS Desktop. Cloud computing, Smart TVs and the advent of Android and iPhone have certainly helped computer *users* become more comfortable with alternative OS and user interfaces. -- Chris

2 1

FreeBSD-Current Random Number Generator Broken
by Peter Reutemann 18 Feb '15

18 Feb '15

'The FreeBSD random number has been discovered to be generating possibly predictable SSH keys and SSL certificates for months. Time to regenerate your keys and certs if using FreeBSD-Current. A message to the freebsd-current mailing list reads in part: "If you are running a current kernel r273872 or later, please upgrade your kernel to r278907 or later immediately and regenerate keys. I discovered an issue where the new framework code was not calling randomdev_init_reader, which means that read_random(9) was not returning good random data. read_random(9) is used by arc4random(9) which is the primary method that arc4random(3) is seeded from."' -- source: http://it.slashdot.org/story/15/02/18/2026258 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

Google Chrome Will Adopt HTTP/2 In the Coming Weeks, Drop SPDY Support
by Peter Reutemann 18 Feb '15

18 Feb '15

''Google today announced it will add HTTP/2, the second major version of Hypertext Transfer Protocol (HTTP), to Google Chrome. The company plans to gradually roll out support to the latest version of its browser, Chrome 40, "in the upcoming weeks." At the same time, Google says it will remove support for SPDY in early 2016. SPDY, which is not an acronym but just a short version for the word "speedy," is a protocol developed primarily at Google to improve browsing by forcing SSL encryption for all sites and speeding up page loads. Chrome will also lose support for the TLS extension NPN in favor of ALPN. -- source: http://tech.slashdot.org/story/15/02/09/2320244 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

PC-BSD - ubiquitous in world of future - or not
by Ian Young 18 Feb '15

18 Feb '15

Some years ago I had a brief dabble with PC-BSD. It was brief because every time I attempted to boot a live DVD the system would fail to boot or run only for a few minutes before crashing. The same equipment had no trouble with various Linux distros. That was then of course and the project continues to exist so presumably some people have managed to run it. However I will stick my neck out and say that imho PC-BSD is a most unlikely candidate for world domination .... Any one seen it in action? I think when I tried it there were issues like limited support for USB, and driver support still lags behind Linux.

2 1

next meeting of lug topics
by Ian Young 17 Feb '15

17 Feb '15

Saw some mention of Kali distro as a topic at next meeting. Not sure where this has gone, but no problem for me sharing the time as required. Will stick with the Android x-86 idea, and maybe dispense with Puppy developments if need be. In latest news the live CD of Android I downloaded boots on a Compaq laptop and appears somewhat usable on that machine.

3 2

PC-BSD: Set For Serious Growth?
by Peter Reutemann 17 Feb '15

17 Feb '15

'Luke Wolf, a KDE developer, argues that PC-BSD might become a serious desktop OS contender by year 2020, since Linux so far has failed to grasp any serious market share. He writes, "Consider this: In the past 10 years has the distribution you run changed significantly in what it offers over other distributions? I think you'll find the answer is largely no. I do have to give a shout out to openSUSE for the OBS, but otherwise I've used my desktop in the same exact way that I have always used it within the continuity of distribution X,Y, or Z since I started using them. Distributions simply aren't focused on desktop features, they're leaving it up to the DEs to do so." He continues, "PC-BSD on the other hand in fitting with the BSD mindset of holistic solutions is focused on developing desktop features and is moving rapidly to implement them." What do you think?' -- source: http://bsd.slashdot.org/story/15/02/16/2355236 NB: Mentioning "Linux + Year of the Desktop" is always bait for a flamewar. But... Did anyone ever use PC-BSD as their primary OS (work/home)? Willing to share some insight? Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

End of the m0n0wall project
by Peter Reutemann 17 Feb '15

17 Feb '15

"m0n0wall has served as the seed for several other well known open source projects, like pfSense, FreeNAS and AskoziaPBX. The newest offspring, OPNsense (https://opnsense.org) aims to continue the open source spirit of m0n0wall while updating the technology to be ready for the future. In my view, it is the perfect way to bring the m0n0wall idea into 2015, and I encourage all current m0n0wall users to check out OPNsense and contribute if they can." -- source: http://www.linuxtoday.com/security/end-of-the-m0n0wall-project.html Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Will The Next Linux Kernel Be Called 4.0?
by Lawrence D'Oliveiro 16 Feb '15

16 Feb '15

Apparently Linus Torvalds is running a poll <http://lwn.net/Articles/633231/> to decide whether to continue with the 3.xx version numbering or start from 4.0.

1 0

Fwd: Re: Inkscape Version 0.91 Released
by Chris O'Halloran 16 Feb '15

16 Feb '15

On Mon, 16 Feb 2015 20:16:44 +1300, Peter Reutemann <fracpete(a)waikato.ac.nz> wrote: >> I just downloaded and built it from source. To those accustomed to I'm using it on Windows8 machine at work. I like the pdf export to latex option. It periodically crashes but still very useable - just not as stable as the previous 'stable' version. Cheers all

1 0

Fwd: Re: Removing Libsystemd0 From a Live-running Debian System
by Chris O'Halloran 16 Feb '15

16 Feb '15

On Mon, 16 Feb 2015 13:52:45 +1300, Lawrence D'Oliveiro <ldo(a)geek-central.gen.nz> wrote: > > To those who may not understand the background to this, systemd is a > project, headed by Lennart “PulseAudio” Poettering, to modernize the Thanks for that Lawrence.

1 0

Inkscape Version 0.91 Released
by Peter Reutemann 16 Feb '15

16 Feb '15

"Four years since the last major Inkscape release, now news is out about version 0.91 of this powerful vector drawing and painting tool. The main reason for the multi-year delay is that they've switched from their old custom rendering engine to using Cairo now, improving their support for open source standards. This release also adds symbol libraries and support for Visio stencils, cross platform WMF and EMF import and export, a native Windows 64-bit build, scads of bug fixes, and much more. Check out the full release notes for more information about what has changed, or just jump right todownloading your package for Windows, Linux, or Mac OS X." -- source: http://news.slashdot.org/story/15/01/31/1914255 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 3

Removing Libsystemd0 From a Live-running Debian System
by Peter Reutemann 16 Feb '15

16 Feb '15

"The introduction of systemd has unilaterally created a polarization of the GNU/Linux community that is remarkably similar to the monopolistic power position wielded by Microsoft in the late 1990s. Choices were stark: use Windows (with SMB/CIFS Services), or use UNIX (with NFS and NIS). Only the introduction of fully-compatible reverse-engineered NT Domains services corrected the situation. Instructions on how to remove systemd include dire warnings that "all dependent packages will be removed", rendering a normal Debian Desktop system flat-out impossible to achieve. It was therefore necessary to demonstrate that it is actually possible to run a Debian Desktop GUI system (albeit an unusual one: fvwm) with libsystemd0 removed. The reason for doing so: it doesn't matter how good systemd is believed to be or in fact actually is: the reason for removing it is, apart from the alarm at how extensive systemd is becoming (including interfering with firewall rules), it's the way that it's been introduced in a blatantly cavalier fashion as a polarized all-or-nothing option, forcing people to consider abandoning the GNU/Linux of their choice and to seriously consider using FreeBSD or any other distro that properly respects the Software Freedom principle of the right to choose what software to run. We aren't all "good at coding", or paid to work on Software Libre: that means that those people who are need to be much more responsible, and to start — finally — to listen to what people are saying. Developing a thick skin is a good way to abdicate responsibility and, as a result, place people into untenable positions." -- source: http://news.slashdot.org/story/15/02/15/1959209 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 2

Live Patching Now Available For Linux
by Peter Reutemann 13 Feb '15

13 Feb '15

'It provides a basic infrastructure for function "live patching" (i.e. code redirection), including API for kernel modules containing the actual patches, and API/ABI for userspace to be able to operate on the patches (look up what patches are applied, enable/disable them, etc). It's relatively simple and minimalistic, as it's making use of existing kernel infrastructure (namely ftrace) as much as possible. It's also self-contained, in a sense that it doesn't hook itself in any other kernel subsystem (it doesn't even touch any other code). It's now implemented for x86 only as a reference architecture, but support for powerpc, s390 and arm is already in the works (adding arch-specific support basically boils down to teaching ftrace about regs-saving).' -- source: http://linux.slashdot.org/story/15/02/12/1853215 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Upcoming features of Fedora 22
by Paul Wilson 12 Feb '15

12 Feb '15

New features to be included in Fedora 22 release currently scheduled for around May 2015 http://news.softpedia.com/news/Upcoming-Features-of-Fedora-22-472955.shtml Regards Paul Wilson

1 0

Re: [wlug] Kali Linux 1.1.0 Released
by Eric Light 12 Feb '15

12 Feb '15

That sounds awesome, I'd personally LOVE to hear more on that. Peter, Ian, does that suit you guys? Ryan - The next wlug meeting is Monday, February 23, 7:30 PM, in MS4.G.02. Can Baden make it? *excite* Thanks Eric. Yup we do use some of the tools from time to time. If you are interested, we can arrange for my grad student Baden to talk about (and demo) some of the tools. Only catch is that he is busy with his thesis writing now - due next week. Ryan On 12 Feb 2015 15:44, "Eric Light" <eric(a)ericlight.com> wrote: > I'm definitely not suitable - I have *no idea* what I'm doing. > > Let me check with Ryan and see if there's anyone doing the Masters of > Cybersecurity who would be interested though... > > Ryan? We're just a small group of geeks, but if any of your guys use > Kali, it would be awesome to have a quick demo :) > > Eric > > -------------------------------------------- > Q: Why is this email five sentences or less? > A: http://five.sentenc.es > > > On Thu, Feb 12, 2015 at 10:56 AM, Peter Reutemann <fracpete(a)waikato.ac.nz> > wrote: > >> > ... No, really, it looks like there's a lot of new stuff in the 1.1 >> version. >> > I'm experimenting with it here in my "free time". >> >> Ian Young volunteered to present some distros at the next meeting (Feb >> 23). Do you or Paul feel like demoing Kali? >> >> Cheers, Peter >> -- >> Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ >> http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 >> _______________________________________________ >> wlug mailing list | wlug(a)list.waikato.ac.nz >> Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug >> > >

2 1

Owncloud 8 Released
by Paul Wilson 12 Feb '15

12 Feb '15

"ownCloud <https://owncloud.org/>, a free software alternative to proprietary web services such as Dropbox, Google Drive and others that you can install on your own server, has reached version 8.0.0." "http://www.webupd8.org/2015/02/owncloud-8-server-released-with.html" I Have been running v7 on Fedora 21 Server for about 8 weeks works great, this is a really nice solution if you are looking at running your own cloud and don't want to dive into openstack. Regards Paul Wilson

1 0

Kali Linux 1.1.0 Released
by Paul Wilson 12 Feb '15

12 Feb '15

"After almost two years of public development (and another year behind the scenes), we are proud to announce our first point release of Kali Linux - version 1.1.0. This release brings with it a mix of unprecedented hardware support as well as rock-solid stability. For us, this is a real milestone as this release epitomizes the benefits of our move from BackTrack to Kali Linux over two years ago." http://www.linuxscreenshots.org/?release=Kali%20Linux%201.1.0 For all those "Security Testers" out there this could be interesting.... Regards Paul Wilson

4 4

Firefox To Mandate Extension Signing
by Peter Reutemann 12 Feb '15

12 Feb '15

'In a recent blog post, Mozilla announced its intention to require extensions to be signed in Firefox, without any possible user override. From the post: "For developers hosting their add-ons on AMO, this means that they will have to either test on Developer Edition, Nightly, or one of the unbranded builds. The rest of the submission and review process will remain unchanged, except that extensions will be automatically signed once they pass review. For other developers, this is a larger change. For testing development versions, they’ll have the same options available as AMO add-on developers. For release versions, however, we’re introducing the required step of uploading the extension file to AMO for signing. For most cases, this step will be automatic, but in cases where the extension doesn’t pass these tests, there will be the option to request a manual code review."' -- source: http://tech.slashdot.org/story/15/02/11/210247 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Show your love for Free Software
by Peter Reutemann 12 Feb '15

12 Feb '15

'Every year on 14th February, the Free Software Foundation Europe asks all Free Software users to think about the hard-working people in the Free Software community and to show them their appreciation individually on this "I love Free Software"-Day. Like last year the campaign is dedicated to the people behind Free Software because they enable us to use, study, share and improve the software which enables us to work in freedom. This time the focus especially lies on the small contributions to the big picture of the Free Software community.' -- source: http://fsfe.org/news/2015/news-20150209-01.html Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

VLC Acquiring Lots of New Features
by Peter Reutemann 11 Feb '15

11 Feb '15

"Two weekends ago an update for VLC media player was shared during a presentation in Brussels at FOSDEM. Lead developer Jean-Baptiste Kempf covered VLC's continued vibrant development, as well as features that are coming for VLC 2.2 and VLC 3.0. VLC 2.2.0 will feature automatic, GPU-accelerated video rotation support, extension improvements, resume handling, support for new codecs/formats and rewrites to some of the existing formats, VDPAU GPU zero-copy support, x265 encoder support, etc. Further out is VLC 3.0.0, which is planned to have Wayland support, GPU zero-copy support for OpenMAX IL, ARIB subtitle support, HEVC / VP9 hardware decoding on Android, a rework of the MP4 and TS demuxers, and browsing improvements. The VLC FOSDEM 2015 presentation is available in PDF form. The VLC Git shortlog can be used to follow the development of the project." -- source: http://news.slashdot.org/story/15/02/11/0515244 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Is Modern Linux Becoming Too Complex?
by Peter Reutemann 11 Feb '15

11 Feb '15

'Debian developer John Goerzen asks whether Linux has become so complex that it has lost some of its defining characteristics. "I used to be able to say Linux was clean, logical, well put-together, and organized. I can’t really say this anymore. Users and groups are not really determinitive for permissions, now that we have things like polkit running around. (Yes, by the way, I am a member of plugdev.) Error messages are unhelpful (WHY was I not authorized?) and logs are nowhere to be found. Traditionally, one could twiddle who could mount devices via /etc/fstab lines and perhaps some sudo rules. Granted, you had to know where to look, but when you did, it was simple; only two pieces to fit together. I've even spent time figuring out where to look and STILL have no idea what to do."' -- source: http://linux.slashdot.org/story/15/02/11/0444232 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Elementary OS: Why We Make You Type "$0"
by Peter Reutemann 11 Feb '15

11 Feb '15

'Open source software can always be acquired without charge, but can still incur significant development costs. Elementary OS wants to make people aware of this, and have changed their website to suggest donating when downloading, and make users explicitly enter "$0" if they want a free download. This is the same strategy Canonical has used when offering Ubuntu. The Elementary OS blog explains: "Developing software has a huge cost. Some companies offset that cost by charging hundreds of dollars for their software, making manufacturers pay them to license the software, or selling expensive hardware with the OS included. Others offset it by mining user data and charging companies to target ads to their users. [...] If we want to see the world of open source software grow, we should encourage users to pay for its development; otherwise it'll be underfunded or developers will have to resort to backdoor deals and advertising. And nobody wants that future." Currently the only people who have received money for working on Elementary OS have been community members through their bounty program.' -- source: http://news.slashdot.org/story/15/02/11/1753219 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

libregraphicsworld.org
by Lawrence D'Oliveiro 11 Feb '15

11 Feb '15

For those who don’t know about this site, but who make frequent use of open-source graphics software (GIMP, Inkscape, Blender etc), you will find all kinds of informative news articles here. There seems to be a new item about once a week. Some recent items: * Inkscape 0.91 released <http://libregraphicsworld.org/blog/entry/inkscape-0-91-released> * Blender 2.73 as a 2D animation powerhouse (to add to all the other arrows in its quiver) <http://libregraphicsworld.org/blog/entry/blender-2-73-grease-pencil> * A follow-up to the item Peter posted a few weeks back about Paris-8 University moving from Photoshop to Krita and other Free Software <http://libregraphicsworld.org/blog/entry/the-complete-story-of-paris-8-univ…>

2 2

Stuff seems to run Ubuntu/nginx
by Peter Reutemann 10 Feb '15

10 Feb '15

What http errors can tell you about a website ;-) Stuff seems to use Ubuntu/nginx as you can see in the attachment. Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

New Multi-Purpose Backdoor Targets Linux Servers
by Peter Reutemann 09 Feb '15

09 Feb '15

'A new multi-purpose Linux Trojan that opens a backdoor on the target machine and can make it participate in DDoS attacks has been discovered and analyzed by Dr. Web researchers, who believe that the Chinese hacker group ChinaZ might be behind it. "First, Linux.BackDoor.Xnote.1 sends information about the infected system to the server. It then goes into standby mode and awaits further instructions. If the command involves carrying out some task, the backdoor creates a separate process that establishes its own connection to the server through which it gets all the necessary configuration data and sends the results of the executed task," the researchers explained.' -- source: http://linux.slashdot.org/story/15/02/09/1829255 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linux Versus Linux
by Lawrence D'Oliveiro 09 Feb '15

09 Feb '15

Another long-heralded Android competitor, Tizen, gets a head-to-head comparison gallery here <http://arstechnica.com/gadgets/2015/02/tizen-versus-android-in-pictures/>.

1 0