- wlug - list.wlug.org.nz

Xfce Getting a New Version Soon
by Peter Reutemann 08 Feb '15

08 Feb '15

'It looks like the release of Xfce 4.12 is finally about to materialize. It has been about two and half years since the last stable release. There is now a concerted effort underway to ship a new release of this lightweight GTK+2 desktop environment out around the end of February or early March. "As we have discussed the status and progress of core components with many of you individually, we feel confident that the state of Xfce is good enough to polish some final edges and push more translations until then," wrote Simon Steinbeiß on the xfce4-dev mailing list. The official list of showstopper bugs does not look too bad either. However, looking at the long time between releases certainly makes one think if the project could have use for some extra resources.' -- source: http://tech.slashdot.org/story/15/02/08/1431250 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Xenon Flashes Can Make New Raspberry Pi 2 Freeze and Reboot
by Peter Reutemann 08 Feb '15

08 Feb '15

"Unfortunately for Raspberry Pi 2 owners who are trying to photograph their devices, ... the Raspberry Pi 2 has been found to be Xenon flash sensitive. Any camera with a Xenon flash aimed at the device is causing the device to freeze for a few seconds before rebooting." -- source: http://it.slashdot.org/story/15/02/08/0643254 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

The First Ubuntu Phone Is Here, With Underwhelming Hardware
by Peter Reutemann 08 Feb '15

08 Feb '15

'A few days ago, Fast Company reviewer Jay Cassano was enthusiastic about Ubuntu's approach to apps for its new phone OS: namely, not relying on them, and instead interfacing seamlessly with existing websites and protocols. Now, new submitter ablutions (4006541) writes with a less than glowing review at The Daily Dot of the actual hardware that the OS is launching on. A sample that conveys the gist: "Let's start with the good stuff: It sports a 4.5-inch multi-touch screen and a respectable 8-megapixel rear camera and 5-megapixel lens on the front. That's pretty much it. The list of negatives is a bit longer."' -- source: http://tech.slashdot.org/story/15/02/08/0034236 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

IEEE Computer Society YouTube Channel
by Lawrence D'Oliveiro 08 Feb '15

08 Feb '15

A large collection of videos here <https://www.youtube.com/user/ieeeComputerSociety/videos>. Some interesting-looking ones (none of which I’ve watched yet): Eben Upton on the (original) Raspberry π <https://www.youtube.com/watch?v=JVU5QBg5l6g> Linus Torvalds, 2014 Computer Pioneer Award <https://www.youtube.com/watch?v=EMmo0Nyleg4> Computing Conversations: Andrew Tanenbaum on MINIX <https://www.youtube.com/watch?v=ZS_LFeZA7p8>. And no doubt lots more I’ve missed. :)

1 2

Ubuntu smartphone as seen on BBC
by Ian Young 07 Feb '15

07 Feb '15

http://www.bbc.com/news/technology-31148661 --snip-- An Ubuntu-powered smartphone is coming to the market a year and a half after a previous attempt to launch a model via crowdfunding failed. .... The Ubuntu handset can run apps written in either the HTML5 web programming language or its own native QML code. However, its operating system effectively hides them away. Instead of the traditional smartphone user interface - featuring grids of apps - it uses themed cards that group together different facilities. --unsnip-- Chocolate fish for first person to bring one to a meeting?

1 0

Samba issues
by David Nicholls 04 Feb '15

04 Feb '15

Hi guys. I am having an issue with my fresh samba setup. I built a 14.04.1 LTS Ubuntu server and set up a single mount point (/media/data) and pointed 3 separate internal hard drives to it (eg it contains directories "music_drive", "tv_drive" & "movie_drive"). I turned "/media/data" into a samba share. Annoyingly permissions look fine but I cannot seem to be able to either see the share on my network from other machines or connect to it. Even using the servers IP address. Any advice? Or am I just missing something obvious. My config is below. samba.conf # # Sample configuration file for the Samba suite for Debian GNU/Linux. # # # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options most of which # are not shown in this example # # Some options that are often worth tuning have been included as # commented-out examples in this file. # - When such options are commented with ";", the proposed setting # differs from the default Samba behaviour # - When commented with "#", the proposed setting is the default # behaviour of Samba but the option is considered important # enough to be mentioned here # # NOTE: Whenever you modify this file you should run the command # "testparm" to check that you have not made any basic syntactic # errors. #======================= Global Settings ======================= [global] passwd program = /usr/bin/passwd %u max log size = 1000 browseable = yes workgroup = RIMFALL passdb backend = tdbsam obey pam restrictions = yes map to guest = bad user unix password sync = yes os level = 20 server role = standalone server printing = cups load printers = no netbios aliases = ook preferred master = yes available = yes default = lspace panic action = /usr/share/samba/panic-action %d wins support = true netbios name = ook security = user server string = %h server (Samba, Ubuntu) passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam password change = yes syslog = 0 dns proxy = no log file = /var/log/samba/log.%m usershare allow guests = yes ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of # server string is the equivalent of the NT Description field # Windows Internet Name Serving Support Section: # WINS Support - Tells the NMBD component of Samba to enable its WINS Server # wins support = no # WINS Server - Tells the NMBD components of Samba to be a WINS Client # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both ; wins server = w.x.y.z # This will prevent nmbd to search for NetBIOS names through DNS. #### Networking #### # The specific set of interfaces / networks to bind to # This can be either the interface name or an IP address/netmask; # interface names are normally preferred ; interfaces = 127.0.0.0/8 eth0 # Only bind to the named interfaces and/or networks; you must use the # 'interfaces' option above to use this. # It is recommended that you enable this feature if your Samba machine is # not protected by a firewall or is a firewall itself. However, this # option cannot handle dynamic or non-broadcast interfaces correctly. ; bind interfaces only = yes #### Debugging/Accounting #### # This tells Samba to use a separate log file for each machine # that connects # Cap the size of the individual log files (in KiB). # If you want Samba to only log through syslog then set the following # parameter to 'yes'. # syslog only = no # We want Samba to log a minimum amount of information to syslog. Everything # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log # through syslog you should set the following parameter to something higher. # Do something sensible when Samba crashes: mail the admin a backtrace ####### Authentication ####### # Server role. Defines in which mode Samba will operate. Possible # values are "standalone server", "member server", "classic primary # domain controller", "classic backup domain controller", "active # directory domain controller". # # Most people will want "standalone sever" or "member server". # Running as "active directory domain controller" will require first # running "samba-tool domain provision" to wipe databases and create a # new domain. # If you are using encrypted passwords, Samba will need to know what # password database type you are using. # This boolean parameter controls whether Samba attempts to sync the Unix # password with the SMB password when the encrypted SMB password in the # passdb is changed. # For Unix password sync to work on a Debian GNU/Linux system, the following # parameters must be set (thanks to Ian Kahan << kahan(a)informatik.tu-muenchen.de> for # sending the correct chat script for the passwd program in Debian Sarge). # This boolean controls whether PAM will be used for password changes # when requested by an SMB client instead of the program listed in # 'passwd program'. The default is 'no'. # This option controls how unsuccessful authentication attempts are mapped # to anonymous connections ########## Domains ########### # # The following settings only takes effect if 'server role = primary # classic domain controller', 'server role = backup domain controller' # or 'domain logons' is set # # It specifies the location of the user's # profile directory from the client point of view) The following # required a [profiles] share to be setup on the samba server (see # below) ; logon path = \\%N\profiles\%U # Another common choice is storing the profile in the user's home directory # (this is Samba's default) # logon path = \\%N\%U\profile # The following setting only takes effect if 'domain logons' is set # It specifies the location of a user's home directory (from the client # point of view) ; logon drive = H: # logon home = \\%N\%U # The following setting only takes effect if 'domain logons' is set # It specifies the script to run during logon. The script must be stored # in the [netlogon] share # NOTE: Must be store in 'DOS' file format convention ; logon script = logon.cmd # This allows Unix users to be created on the domain controller via the SAMR # RPC pipe. The example command creates a user account with a disabled Unix # password; please adapt to your needs ; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u # This allows machine accounts to be created on the domain controller via the # SAMR RPC pipe. # The following assumes a "machines" group exists on the system ; add machine script = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u # This allows Unix groups to be created on the domain controller via the SAMR # RPC pipe. ; add group script = /usr/sbin/addgroup --force-badname %g ############ Misc ############ # Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ; include = /home/samba/etc/smb.conf.%m # Some defaults for winbind (make sure you're not using the ranges # for something else.) ; idmap uid = 10000-20000 ; idmap gid = 10000-20000 ; template shell = /bin/bash # Setup usershare options to enable non-root users to share folders # with the net usershare command. # Maximum number of usershare. 0 (default) means that usershare is disabled. ; usershare max shares = 100 # Allow users who've been granted usershare privileges to create # public shares, not just authenticated ones #======================= Share Definitions ======================= # Un-comment the following (and tweak the other settings below to suit) # to enable the default home directory shares. This will share each # user's home directory as \\server\username ;[homes] ; comment = Home Directories ; browseable = no # By default, the home directories are exported read-only. Change the # next parameter to 'no' if you want to be able to write to them. ; read only = yes # File creation mask is set to 0700 for security reasons. If you want to # create files with group=rw permissions, set next parameter to 0775. ; create mask = 0700 # Directory creation mask is set to 0700 for security reasons. If you want to # create dirs. with group=rw permissions, set next parameter to 0775. ; directory mask = 0700 # By default, \\server\username shares can be connected to by anyone # with access to the samba server. # Un-comment the following parameter to make sure that only "username" # can connect to \\server\username # This might need tweaking when using external authentication schemes ; valid users = %S # Un-comment the following and create the netlogon directory for Domain Logons # (you need to configure Samba to act as a domain controller too.) ;[netlogon] ; comment = Network Logon Service ; path = /home/samba/netlogon ; guest ok = yes ; read only = yes # Un-comment the following and create the profiles directory to store # users profiles (see the "logon path" option above) # (you need to configure Samba to act as a domain controller too.) # The path below should be writable by all users so that their # profile directory may be created the first time they log on ;[profiles] ; comment = Users profiles ; path = /home/samba/profiles ; guest ok = no ; browseable = no ; create mask = 0600 ; directory mask = 0700 [printers] comment = All Printers available = no writable = no printable = yes path = /var/spool/samba guest ok = no create mask = 0700 browseable = no # Windows clients look for this share name as a source of downloadable # printer drivers [print$] guest ok = no writable = no path = /var/lib/samba/printers comment = Printer Drivers # Uncomment to allow remote administration of Windows print drivers. # You may need to replace 'lpadmin' with the name of the group your # admin users are members of. # Please note that you also need to set appropriate Unix permissions # to the drivers directory for these users to have write rights in it ; write list = root, @lpadmin [lspace] valid users = david, steff, tracey, smbguest, @sambashare guest account = comment = Lspace media share writeable = yes force group = sambashare path = /media/data read list = smbguest write list = david, steff, tracey

4 12

Android tethering: fix IP address of client using Mac ID?
by Peter Reutemann 03 Feb '15

03 Feb '15

Hi there Just playing around with Android tethering / wifi hotspot on my phone. One question that I have is, how do I fix the IP address that my phone assigns to a client when acting as an access point? Is there an App that I can use to tie a client's Mac ID to certain IP address, like you can usually do with "regular" wireless access points? Thanks. Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 2

The Linux Foundation Offers a Self-Paced SysAdmin Course
by Peter Reutemann 02 Feb '15

02 Feb '15

"The Linux Foundation has announced the launch of its new self-paced Essentials of System Administration course (LFS201), which comes bundled with a Linux Foundation Certified System Administrator exam. The full schedule of all 2015 Linux Foundation training courses is also now available." -- source: http://ostatic.com/blog/the-linux-foundation-offers-a-self-paced-sysadmin-c… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

Major Release LibreOffice 4.4 Announced
by Peter Reutemann 02 Feb '15

02 Feb '15

'The Document Foundation today announced the latest and "most beautiful" LibreOffice ever. LibreOffice 4.4 is the ninth major release for the project and brings with it lots of design and functionality improvements. Redesigned toolbars, menus, status bars, rulers and new theme selector are among the goodies for users. Michael Meeks said today that this release not only improves the visible features but also the foundations underneath.' -- source: http://ostatic.com/blog/major-release-libreoffice-4-4-announced Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

OpenSSH Will Feature Key Discovery and Rotation For Easier Switching To Ed25519
by Peter Reutemann 01 Feb '15

01 Feb '15

"OpenSSH developer Damien Miller has posted about a new feature he implemented and committed for the next upcoming 6.8 release of OpenSSH — hostkeys(a)openssh.com — an OpenSSH extension to the SSH protocol for sshd to automatically send all of its public keys to the client, and for the client to automatically replace all keys of such server within ~/.ssh/known_hosts with the fresh copies as supplied (provided the server is trusted in the first place, of course). The protocol extension is simple enough, and is aimed to make it easier to switch over from DSA to the OpenSSL-free Ed25519 public keys. It is also designed in such a way as to support the concept of spare host keys being stored offline, which could then seamlessly replace main active keys should they ever become compromised." -- source: http://it.slashdot.org/story/15/02/01/0533208 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Dell Continues Shipping Fresh Linux Laptops
by Peter Reutemann 01 Feb '15

01 Feb '15

"In its latest move, Dell will be bringing Ubuntu 14.04 LTS to its top-of-the-line Precision M3800 workstation laptop and the latest model of the Dell XPS 13. Both systems will be running Ubuntu 14.04.1. According to Barton George, Dell's Director of Developer Programs, programmers had been asking for a better, officially-supported Ubuntu developer laptop. This came about from a combination of the efforts of Dell software engineer Jared Dominguez and enthusiastic feedback. Specs of M3800: 15.6" LCD @ 3840x2160, Intel i7 quad core CPU, NVIDIA Quadro GPU, up to 16 GB RAM. The bad news is, as Dominguez explained on his blog, this version of the M3800 doesn't support its built-in Thunderbolt 2 port out of the box. However, thanks to the hardware-enablement stack in Ubuntu, starting with upcoming Ubuntu 14.04.2, you will be able to upgrade your kernel to add some Thunderbolt support." -- source: http://linux.slashdot.org/story/15/01/31/180203 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Everybody’s Gone Flat
by Lawrence D'Oliveiro 31 Jan '15

31 Jan '15

A tour through the new standard theme for KDE Plasma 5.2 <https://dot.kde.org/2015/01/27/plasma-52-beautiful-and-featureful>. And you thought it was just Apple and Microsoft and Google doing it: looks like anything resembling depth or gradients or shadows is completely out of fashion nowadays...

2 1

Microsoft Puts Money Into Android
by Lawrence D'Oliveiro 30 Jan '15

30 Jan '15

Microsoft is reportedly going to invest in Cyanogen Inc <http://arstechnica.com/gadgets/2015/01/microsoft-to-invest-in-cyanogen-hope…>. If you remember, the people behind the well-regarded CyanogenMod custom build of Android decided to become a commercial operation recently. There are even phone makers putting CyanogenMod straight onto their phones at the factory, in preference to official Google Android.

1 0

GParted Live Now Supports Microsoft's New Filesystem, ReFS
by Peter Reutemann 29 Jan '15

29 Jan '15

"GParted Live is a small bootable GNU/Linux distribution that has a lot of features and that can be used in operations like creating, reorganizing, and deleting disk partitions on a variety of filesystems. A new stable update has been made available and the operating system is now at version 0.21.0." -- source: http://news.softpedia.com/news/GParted-Live-Now-Supports-MIcrosoft-s-New-Fi… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

FSF-Endorsed Libreboot X200 Laptop Comes With Intel's AMT Removed
by Peter Reutemann 29 Jan '15

29 Jan '15

'"The Free Software Foundation has announced its endorsement of the Libreboot X200, a refurbished Lenovo ThinkPad X200 sold by Gluglug. The laptop ships with 100% free software and firmware, including the FSF's endorsed Trisquel GNU/Linux and Libreboot. One of the biggest challenges overcome in achieving FSF's Respects Your Freedom certification was the complete removal of Intel's ME and AMT firmware. The AMT is a controversial proprietary backdoor technology that allows remote access to a machine even when it is powered off. Quoting from the press release: "The ME and its extension, AMT, are serious security issues on modern Intel hardware and one of the main obstacles preventing most Intel based systems from being liberated by users. On most systems, it is extremely difficult to remove, and nearly impossible to replace. Libreboot X200 is the first system where it has actually been removed, permanently," said Gluglug Founder and CEO, Francis Rowe."' -- source: http://hardware.slashdot.org/story/15/01/29/2241214 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Georgia Institute of Technology Researchers Bridge the Airgap
by Peter Reutemann 29 Jan '15

29 Jan '15

"Hacked has a piece about Georgia Institute of Technology researchers keylogging from a distance using the electromagnetic radiation of CPUs. They can reportedly do this from up to 6 meters away. In this video, using two Ubuntu laptops, they demonstrate that keystrokes are easily interpreted with the software they have developed. In their white paper they talk about the need for more research in this area so that hardware and software manufacturers will be able to develop more secure devices. For now, Farraday cages don't seem as crazy as they used to, or do they?" -- source: http://it.slashdot.org/story/15/01/29/141243 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Mozilla Dusts Off Old Servers, Lights Up Tor Relays
by Peter Reutemann 29 Jan '15

29 Jan '15

"According to The Register, "Mozilla has given the Tor network a capacity kick with the launch of 14 relays that will help distribute user traffic. Engineers working under the Foundation's Polaris Project inked in November pulled Mozilla's spare and decommissioned hardware out of the cupboard for dedicated use in the Tor network. It included a pair of Juniper EX4200 switches and three HP SL170zG6 (48GB ram, 2*Xeon L5640, 2*1Gbps NIC) servers, along with a dedicated existing IP transit provider (2 X 10Gbps). French Mozilla engineer Arzhel Younsi (@xionoxfr) said its network was designed to fall no lower than half of its network capacity in the event of maintenance or failure. The Polaris initiative was a effort of Mozilla, the Tor Project and the Centre for Democracy and Technology to help build more privacy controls into technology." -- source: http://hardware.slashdot.org/story/15/01/29/192215 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Ubuntu 15.04 Is The Easy Path To Better Performance For Ubuntu Users On Intel Broadwell
by Peter Reutemann 29 Jan '15

29 Jan '15

"Unless you manually upgrade your kernel and other system packages from your Ubuntu 14.10 installation, Ubuntu 15.04 Vivid Vervet is an important release for users of new Intel Broadwellsystems for ensuring your hardware reaches its maximum performance potential." -- source: http://www.phoronix.com/scan.php?page=article&item=ubuntu-1504-5600u&num=1 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Serious Network Function Vulnerability Found In Glibc
by Peter Reutemann 28 Jan '15

28 Jan '15

"A very serious security problem has been found and patched in the GNU C Library (Glibc). A heap-based buffer overflow was found in __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() function calls. A remote attacker able to make an application call to either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the program. The vulnerability is easy to trigger as gethostbyname() can be called remotely for applications that do any kind of DNS resolving within the code. Qualys, who discovered the vulnerability (nicknamed "Ghost") during a code audit, wrote a mailing list entry with more details, including in-depth analysis and exploit vectors." -- sources: http://news.slashdot.org/story/15/01/27/1925208 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 4

Opera Founder Is Back, WIth a Feature-Heavy, Chromium-Based Browser
by Peter Reutemann 27 Jan '15

27 Jan '15

"Almost two years ago, the Norwegian browser firm Opera ripped out the guts of its product and adopted the more standard WebKit and Chromium technologies, essentially making it more like rivals Chrome and Safari. But it wasn't just Opera's innards that changed; the browser also became more streamlined and perhaps less geeky. Many Opera fans were deeply displeased at the loss of what they saw as key differentiating functionality. So now Jon von Tetzchner, the man who founded Opera and who would probably never have allowed those drastic feature changes, is back to serve this hard core with a new browser called Vivaldi." -- source: http://tech.slashdot.org/story/15/01/27/1733259 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 3

EFF Unveils Plan For Ending Mass Surveillance
by Peter Reutemann 27 Jan '15

27 Jan '15

'The Electronic Frontier Foundation has published a detailed, global strategy for ridding ourselves of mass surveillance. They stress that this must be an international effort — while citizens of many countries can vote against politicians who support surveillance, there are also many countries where the citizens have to resort to other methods. The central part of the EFF's plan is: encryption, encryption, encryption. They say we need to build new secure communications tools, pressure existing tech companies to make their products secure against everyone, and get ordinary internet-goers to recognize that encryption is a fundamental part of communication in the surveillance age. They also advocate fighting for transparency and against overreach on a national level. "[T]he more people worldwide understand the threat and the more they understand how to protect themselves—and just as importantly, what they should expect in the way of support from companies and governments—the more we can agitate for the changes we need online to fend off the dragnet collection of data." The EFF references a document created to apply the principles of human rights to communications surveillance, which they say are "our way of making sure that the global norm for human rights in the context of communication surveillance isn't the warped viewpoint of NSA and its four closest allies, but that of 50 years of human rights standards showing mass surveillance to be unnecessary and disproportionate."' -- source: http://yro.slashdot.org/story/15/01/27/042212 Cheers, Pete -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linus Fixes Kernel Regression Breaking Witcher 2
by Peter Reutemann 24 Jan '15

24 Jan '15

'There has been quite a debate around the Linux version of The Witcher 2: Assassins of Kings and the fact that it wasn't really a port. A special kind of wrapper was used to make the Windows version of the game run on Linux systems, similar to Wine. The performance on Linux systems took a hit and users felt betrayed because they thought that they would get a native port. However, after the gamestopped launching properly at some point, the reason was actually found to be a Linux regression.Linus quickly took care of the issue on an unofficial Witcher 2 issue tracker on GitHub: "It looks like LDT_empty is buggy on 64-bit kernels. I suspect that the behavior was inconsistent before the tightening change and that it's now broken as a result. I'll write a patch. Serves me right for not digging all the way down the mess of macros." This one goes to the bin "don't break userspace". Linus also reminds of QA: "And maybe this is an excuse for somebody in the x86 maintainer team to try a few games on steam. They *are* likely good tests of odd behavior.."' -- source: http://games.slashdot.org/story/15/01/24/1528232 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Accidentally Deleting Directories
by Lawrence D'Oliveiro 21 Jan '15

21 Jan '15

I suppose every seasoned Linux user has been there (I know I have): done “rm -rf” (or equivalent) to wipe out a directory, only to realize--too late--that it was the wrong one. There’s a discussion currently raging <http://www.theregister.co.uk/2015/01/17/scary_code_of_the_week_steam_cleans…> over a bug just like this in the Steam client for Linux. There is a script that contains the line rm -rf "$STEAMROOT/"* However, as a result of certain (unusual) user actions, the value of the STEAMROOT variable could end up empty, in which case the script proceeds to wipe out every file on the system that your userid has privilege over. What’s the best way to handle this? On the one hand, when setting up a new installation/preferences directory, you want to ensure there is no leftover rubbish in it. But on the other, you want to ensure that any existing directory you delete/replace is in fact an old installation/preferences directory. I’m leaning towards the solution--discussed in the GitHub issue entry--of checking for some distinctive file in the existing directory. If that doesn’t exist, then the directory is not what the script thinks it is. For example, my wipetree script <https://github.com/ldo/git-useful/blob/master/wipetree> checks that there is a .git subdirectory in the directory you want to wipe. It also helps to use “set -e”, so bash aborts the script on an error, instead of barrelling on.

2 1

Canonical Launches Internet-of-Things Version of Ubuntu Core
by Peter Reutemann 21 Jan '15

21 Jan '15

'Ubuntu Linux isn't just for desktops, servers and the cloud anymore. Mark Shuttleworth wants Ubuntu to be the operating system of choice for the Internet of Things too. The new Snappy Ubuntu Core is targeted at device developers and it's the basis for an entire new division of Canonical Inc. The promise of Snappy Ubuntu Core is also one of security, protecting the devices of the world, by keeping them updated. "With Snappy there is also a division of responsibilities for updating that can also help protect IoT devices and users. So we could deliver an update for a Heartbleed or Shellshock vulnerability, completely independently of the lawnmower control app that would come from the lawnmower company," Shuttleworth said.' -- source: http://news.slashdot.org/story/15/01/20/2347214 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 6

The current state of video editing for Linux
by Peter Reutemann 21 Jan '15

21 Jan '15

"I often ask myself what the current state of video editing is for free and open source software (FOSS). Here are my thoughts. I've spent many years in the visual effects (VFX) industry from the perspective of being either an artist, compositor, video editor, or systems engineer. (I've even got film creds on IMDB!) In the past, I had the pleasure of cutting on, training people on, setting up, and supporting Avid Media Composer, the cream of the crop of professional real-time video editing tools for film and TV alike—at least before things like Final Cut Pro and Adobe Premiere became useful enough to professionals." Tested: Pitivi, OpenShot, Lightworks, Avidemux, Cinelerra, KDEnlive, Blender The winner (spoiler): Blender -- source: http://opensource.com/life/15/1/current-state-linux-video-editing Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 3

dates for meetings
by Peter Reutemann 21 Jan '15

21 Jan '15

Hi everyone I've talked to the Bernhard Pfahringer, head of the computer science department, and he's willing to sponsor our meetings (WLUG and Python) again this year. Therefore, I booked the following dates for WLUG: Feb 23 Mar 23 Apr 27 May 25 Jul 27 Aug 24 Sep 28 Nov 23 NB: Some months are unavailable due to exam periods (these periods start already during study week, when the rooms get prepared and cannot be disturbed anymore). This brings me also to the next question: who's up for presenting at the first meeting in February? Any new, funky distros that anyone has taken for a spin? Any Linux-related projects tackled during the summer break? Feel free to contact me off-list and I'll add you to the meeting on meetup.com. As a reminder, our meetings get scheduled here: http://www.meetup.com/WaikatoLinuxUsersGroup/ Thanks and see you in February. Hope you all had a good summer break (at the least the folks in the southern hemisphere)! Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Adobe's Photoshop Ditched for Krita at French University Due to Lack of Support
by Peter Reutemann 19 Jan '15

19 Jan '15

"The ATI (Art and Technology of Image) department at University Paris 8 is switching to Krita this year. This department has the double aim to train students both to use graphic software (2D,3D,VFX and Compositing) and to code their own (Python, C#, C++). Until recently the classes used only Adobe Photoshop, but because of inadequate support from the company the department decided to replace that." -- source: https://krita.org/item/goodbye-photoshop-and-hello-krita-at-university-pari… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

Fwd: [NZOSS-Openchat] LCA'15
by Peter Reutemann 19 Jan '15

19 Jan '15

Apologies if you've received this already. Cheers, Peter ---------- Forwarded message ---------- From: Jaco Date: Mon, Jan 19, 2015 at 9:05 AM Subject: [NZOSS-Openchat] LCA'15 To: NZOSS Open Discussion List Thanks to everyone who attended, participated or helped in the Linux Conference last week. Video's should be available online now: * http://www.youtube.com/user/linuxconfau2015 * http://mirror.linux.org.au/linux.conf.au/2015/ * Local ‪NZ‬ mirror at http://mirror.slingshot.co.nz/pub/linux.conf.au/2015/ thanks to SlingshotNZ! Was good to see many familiar faces, but I was also hoping to see others. OTOH I was running around so much & attention focused on the above, I doubt I would've noticed anyway. Looking forward to working at the next one (this counts as doing my bit for the community, right?) cheers - Jaco _______________________________________________ Openchat mailing list Openchat(a)lists.nzoss.org.nz http://lists.nzoss.org.nz/mailman/listinfo/openchat -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

4 3

Tails 1.2.3 is out
by Peter Reutemann 18 Jan '15

18 Jan '15

"Tails, The Amnesic Incognito Live System, version 1.2.3, is out. This release fixes numerous security issues and all users must upgrade as soon as possible. On January 3rd, the SSL certificate of our website hosting provider, boum.org, expired. This means that if you still are running Tails 1.2.1 or older, you will not get any update notification. Please help spreading the word!" -- source: https://tails.boum.org/news/version_1.2.3/index.en.html Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Security Products Are Wasting Our Time
by Lawrence D'Oliveiro 18 Jan '15

18 Jan '15

Apparently 4 out of 5 alerts reported by malware-detection products are false alarms <http://arstechnica.com/security/2015/01/survey-says-security-products-waste…>. And of course the result is predictable: In 2013, for example, when cybercriminals broke into Target’s systems and loaded malware, the company’s FireEye security system issued an alert for the activity, but the company ignored the alerts. As a result, a District Court judge in Minnesota has given the go-ahead for banks to sue the retailer.

1 0

How Many Weeks Has “The Spectator” Been Publishing?
by Lawrence D'Oliveiro 16 Jan '15

16 Jan '15

Any other readers of “New Scientist” on this list? In the issue of 3rd Jan, the “Feedback” column tried to work out how many weeks various magazines that are still in existence had been publishing. The oldest they could find was “The Spectator”, which first came out on 6th July 1828. Unfortunately they were using Microsoft Excel to do their calculations, with predictably nonsensical results. :) Here’s what I came up with, using the good old “date” command, together with the arithmetic facilities built into bash. Taking it step by step: date +%s prints out the number of seconds since midnight 1st January 1970 to the present time. date -d "6-Jul-1828" +%s does the same for 6th July 1828. Of course this is a very small negative number. It computes and displays fine on my 64-bit system, but might overflow on 32-bit ones. echo $(($(date +%s) - $(date -d "6-Jul-1828" +%s))) prints out the subtraction of the above two numbers, giving the number of seconds from the founding of “The Spectator” to the present time. And finally, echo $(($(($(date +%s) - $(date -d "6-Jul-1828" +%s))) / $((86400 * 7)))) divides that number of seconds by the number of seconds in a week, giving the number of weeks from the founding of “The Spectator” to the present time. Which, by my reckoning, is 9732.

1 0

Run Your Choice Of Linux/Android On A Chromebook
by Lawrence D'Oliveiro 15 Jan '15

15 Jan '15

Google has posted details <http://www.theinquirer.net/inquirer/news/2390180/google-will-now-allow-andr…> of how to boot up your choice of Linux distro (including Android) on a Chromebook, as an alternative to its built-in ChromeOS. This is still extremely fiddly, risk-prone and not for the faint-of-heart.

1 0

Australia Bans Crypto Research
by Lawrence D'Oliveiro 15 Jan '15

15 Jan '15

A law currently being phased in in Australia <http://www.theregister.co.uk/2015/01/14/australia_tries_to_ban_crypto_resea…> would seem to mean serious jail time for those trying to discuss certain advanced crypto technologies with those outside the country: “Was the government warned that it was making a mistake? Apparently so...” Other countries have exemptions for academic researchers. But why should they be treated differently from ordinary people, anyway?

1 0

Microsoft Offers Ubuntu Image with Docker Engine in Azure Marketplace
by Peter Reutemann 15 Jan '15

15 Jan '15

"Microsoft CEO Satya Nadella (seen here) made big headlines late last year when he sang the praises of open source and Linux. Reversing what was long perceived to be a hostile stance for open source, Nadella said that he "loves Linux" and also claimed that 20 percent of Microsoft's Azure cloud is already Linux-based. Furthermore, Microsoft seems to remain committed to providing support for popular Linux distributions in its public cloud offerings. Now, the company has announced Azure Marketplace's first Docker image: Docker on Ubuntu Server by Canonical and Microsoft Open Tech." -- source: http://ostatic.com/blog/microsoft-offers-ubuntu-image-with-docker-engine-in… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 3

Fun With Fontconfig
by Lawrence D'Oliveiro 15 Jan '15

15 Jan '15

Fontconfig <http://www.freedesktop.org/wiki/Software/fontconfig/> is a set of command-line utilities, as well as an API for programs to use. It allows matching of fonts by names and other characteristics, rather than having to hard-code paths to font file names, or having to embed fonts into every document. For example, you format some text in a LibreOffice document. In the GUI, you will see a popup menu of all the fonts available on your system. Having chosen a font to use and saved your document, you send a copy to a friend. But they don’t have the same font installed, so LibreOffice uses Fontconfig to find the next best available font. As another example, Web pages commonly specify fonts by names like “serif” or even “Arial” (actually the name of a Microsoft-created clone of the original “Helvetica” font). While those who really care about typography and layout will use CSS font specifications to get the exact font they want from some server, the rest of us will muddle through with the common names, and expect the Web browser to find a suitable match on the user’s local machine. The command-line utilities allow you to observe this process in action. Given a reasonably vague font name, the fc-match command will show you the exact font file that will be chosen; thus, on my system: ldo(a)theon:~> fc-match -f "%{file}\n" arial /usr/share/fonts/truetype/liberation/LiberationSans-Regular.ttf (You will likely get a different result, depending on what fonts you have installed.) Sometimes the file names are not so explanatory: ldo(a)theon:~> fc-match -f "%{file}\n" palatino /usr/share/fonts/type1/gsfonts/p052003l.pfb in which case, the fc-query command will give you more info about what exactly is in that font file: ldo(a)theon:~> fc-query -f "%{family}\n" /usr/share/fonts/type1/gsfonts/p052003l.pfb URW Palladio L Or, you could have combined both steps into one: ldo(a)theon:~> fc-match -f "%{family} %{file}\n" palatino URW Palladio L /usr/share/fonts/type1/gsfonts/p052003l.pfb The list of what information item names you can put in those “%{...}” format specifiers is not mentioned in any of the man pages, but you can look in /usr/include/fontconfig/fontconfig.h, which is part of the libfontconfig1-dev package. Be warned, though: not all the items listed there will work with all fonts.

1 0

SystemD Gains New Networking Features
by Peter Reutemann 15 Jan '15

15 Jan '15

"A lot of development work is happening on systemd with just the recent couple of weeks seeing over 200 commits. With the most recent work that has landed, the networkd component has been improved with new features. Among the additions are IP forwarding and masquerading support (patch). This is the minimal support needed and these settings get turned on by default for container network interfaces. Also added was minimal firewall manipulation helpers for systemd's networkd. The firewall manipulation helpers (patch) are used for establishing NAT rules. This support in systemd is provided by libiptc, the library used for communicating with the Linux kernel's Netfilter and changing iptables firewall rulesets. Those wishing to follow systemd development on a daily basis and see what is actually happening under the hood, can keep tabs via the systemd Git viewer." -- source: http://linux.slashdot.org/story/15/01/14/2030259 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Samsung Launches Tizen Phone In India
by Peter Reutemann 15 Jan '15

15 Jan '15

"After plenty of speculation and an abort launch in Russia last year, Samsung has finally managed to release its first phone powered by the Tizen operating system. The Samsung Z1 is coming to India initially, where it is available to buy for 5,700 INR — that’s around $92 — from today. The Z1 is an affordable device, both in price and specs. It packs a four-inch WVGA PLS screen, and is powered by a 1.2 GHz dual-core processor and 768 MB RAM. There’s a 3.1-megapixel camera on the rear, and a limited VGA camera on the front. The phone runs version 2.3 of the Tizen operating system, and comes with 4GB of on-device storage which can be expanded by up to 64GB via a micro SD card. It supports dual SIMs, as is commonplace with devices in India." -- source: http://mobile.slashdot.org/story/15/01/14/2023220 Cheers, peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Make a Handheld Linux Terminal with a Raspberry Pi
by Peter Reutemann 14 Jan '15

14 Jan '15

"Robinson's build uses a Raspberry Pi A+, a USB hub, battery, touchscreen, charger, backlit keyboard, and a few other random parts. The whole thing is housed inside of two, 2.5-inch plastic hard drive enclosures that are connected with a piano hinge. You'll need some extra tools like a drill, a soldering iron, and some wire cutters, but otherwise Robinson's guide is pretty straight-forward. " -- source: http://lifehacker.com/make-a-handheld-linux-terminal-with-a-raspberry-pi-16… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

What Does Using A Supercomputer Look Like?
by Lawrence D'Oliveiro 14 Jan '15

14 Jan '15

This article <http://www.theinquirer.net/inquirer/feature/1649635/sgi-advances-linux-hpc> is from a few years ago now, but it stuck in my mind about how running Linux on a proper supercomputer is little different from how it works on your own PC. Standard commands like “lspci” and “more /proc/cpuinfo” work exactly the same, except their output does go on a bit longer when your machine has 4096 cores, and peripheral attachments to match. And all done with a stock-standard Linux kernel: Goh was keen to mention that whatever SGI does to the Linux kernel, it does after making sure that any changes it makes will be accepted by the Linux kernel maintainers. Apparently getting the number of cores limit increased to 4,096 was something that he and his colleagues had to personally convince Linux founder Linus Torvalds to accept. According to Goh, convincing Torvalds was "tougher than designing the hardware".

1 0

Wireless Keylogger Masquerades as USB Phone Charger
by Peter Reutemann 13 Jan '15

13 Jan '15

"Hardware hacker and security researcher Samy Kamkar has released a slick new device that masquerades as a typical USB wall charger but in fact houses a keylogger capable of recording keystrokes from nearby wireless keyboards. The device is known as KeySweeper, and Kamkar has released the source code and instructions for building one of your own. The components are inexpensive and easily available, and include an Arduino microcontroller, the charger itself, and a handful of other bits. When it's plugged into a wall socket, the KeySweeper will connect to a nearby Microsoft wireless keyboard and passively sniff, decrypt and record all of the keystrokes and send them back to the operator over the Web." -- source: http://it.slashdot.org/story/15/01/13/183226 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Ask Slashdot: Linux Database GUI Application Development?
by Peter Reutemann 13 Jan '15

13 Jan '15

"I have been developing some applications to use in small businesses using Windows and SQL Server. I would like to move on and start doing the same thing in Linux. I have looked at several Frameworks/Databases/Development environments and I really don't know what is the best/simplest/fastest to learn approach. I use VS and C# mostly, although I could easily go back to C++. I found Qt and GTK+ are the most common frameworks, but they seem to lack controls that deal with datasets and stuff (sorry, spoiled by the .net form controls), but I also know that I could use Mono in order to make the jump. I would have no problem on moving to MySQL, as I have done quite a lot of work on that side, and I would like to stick with the traditional client server application, as I find it easier to maintain, and a whole lot more robust when it comes to user interaction (web apps for POS applications don't seem to be the right way to go in my view). Any suggestions/comments/recommendations?" -- source: http://developers.slashdot.org/story/15/01/13/1525235 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

The 4 Best New Linux Distributions to Watch in 2015
by Peter Reutemann 12 Jan '15

12 Jan '15

"There was a time when new Linux distributions popped up on what seemed like a daily basis. They came and went so fast, you might have completely missed their short lives. That’s not so much the case these days. Linux distributions arrive a bit less frequently and, when they do finally arrive, tend to have a bit more staying power. Why is that? My guess would be that the stable of standard distributions has become so strong, it’s hard for competition to stand up to the likes of Ubuntu, Arch, Mint, Fedora, SUSE, and Debian. That doesn’t mean, however, that new distributions don’t try to take down the mighty standard bearers. In fact, there are a few distributions that could give those kings and queens of Linux a run for their money this year. Which ones, you ask? Let’s take a look at what I believe will be the distributions to watch in 2015." 1. Evolve OS 2. SparkyLinux GameOver Edition 3. Korora 4. Ozon OS -- source: http://www.linux.com/news/software/applications/801303 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Eight Security Vulnerabilities Patched by OpenSSL Project
by Peter Reutemann 12 Jan '15

12 Jan '15

"The risks they pose range from denial-of-service attacks, changing the fingerprint certificate, client authorization without verification message for a DH (Diffie-Hellman) certificate, client accepting the use of a temporary RSA or a handshake that leads to removing the forward secrecy from the ciphersuite." -- source: http://news.softpedia.com/news/Eight-Security-Vulnerabilities-Patched-By-Op… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Ubuntu GNOME 15.04 Finally Gets GNOME 3.14
by Peter Reutemann 12 Jan '15

12 Jan '15

"Ubuntu GNOME 15.04 (Vivid Vervet) is just one of the many official Ubuntu flavors and its developers have been working to implement the latest version of GNOME 3.14. One of the problems faced by the Ubuntu GNOME developers is the fact that their project is not in sync with GNOME, which puts a little bit of pressure on them. For example, they have been criticized for not having the latest GNOME desktop in Ubuntu 14.10, even if that particular piece of software was released after the feature freeze." -- source: http://news.softpedia.com/news/Ubuntu-GNOME-15-04-Finally-Gets-GNOME-3-14-4… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Would You Rent Out Your Unused Drive Space?
by Peter Reutemann 12 Jan '15

12 Jan '15

"There is a new idea out there, proposed by Shawn Wilkinson, Tome Boshevski & Josh Brandof, that if you have unused disk space on your HD that you should rent it out. It is a great idea and the concept may have a whole range of implementations. The 3 guys describe their endeavor as: "Storj is a peer-to-peer cloud storage network implementing end-to-end encryption would allow users to transfer and share data without reliance on a third party data provider. The removal of central controls would eliminate most traditional data failures and outages, as well as significantly increasing security, privacy, and data control. A peer-to-peer network and basic encryption serve as a solution for most problems, but we must offer proper incentivisation for users to properly participate in this network." -- source: http://hardware.slashdot.org/story/15/01/11/181208 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

Crowdfunded Linux Voice Magazine Releases Second Issue CC-BY-SA
by Peter Reutemann 11 Jan '15

11 Jan '15

"As covered previously on Slashdot, Linux Voice crowdfunded its way to success in late 2013, showing how a small team can make things happen with a different business model (giving profits and content back to the community). Now, a few months after the magazine made issue 1 freely available, they've released issue 2 under the Creative Commons for everyone to share and modify. If you've ever fancied making your own Raspberry Pi-powered arcade machine, there's a full guide in the second issue." -- source: http://linux.slashdot.org/story/15/01/11/0311258 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Sloppy File Permissions Make Red Star OS Vulnerable
by Peter Reutemann 11 Jan '15

11 Jan '15

"Red Star OS Desktop 3.0, the official Linux distro of North Korea, which recently found its way onto torrents and various download sites in form of an ISO image, is interesting for a number of reasons, including its attempt to look like commercial operating systems (currently OS X, earlier versions mimicked the Windows GUI). Hackers are also poking Red Star for security vulnerabilities. An pseudonymous researcher noted in a post to the Open Source Software Security (oss-sec) mailing list, that the OS has one significant security hole: Red Star 3.0 ships with a world-writeable udev rule file /etc/udev/rules.d/85-hplj10xx.rules (originally designed for HP LaserJet 1000 series printers) which can be modified to include RUN+= arguments executing arbitrary commands as root by Udev. In the post he also mentions how the older Red Star 2.0 shipped with another schoolboy mistake: /etc/rc.d/rc.sysinit was world-writeable." -- source: http://linux.slashdot.org/story/15/01/11/032207 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Rust Programming Language Reaches 1.0 Alpha
by Peter Reutemann 11 Jan '15

11 Jan '15

"Rust, a new a systems programming language with a focus on safety, performance and concurrency, has released the 1.0 alpha version of the language. This means that the language and core libraries are feature-complete for the 1.0 release. In practical terms, this means that the rate of change experienced by early adopters will slow down dramatically and major breaking changes should be very rare (during the alpha cycle some major changes may still occur if considered necessary). The language will stabilize further when the beta stage is reached (planned for six weeks from now)." -- source: http://developers.slashdot.org/story/15/01/11/0254252 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

USB 3.1 & Type C Connectors
by Lawrence D'Oliveiro 11 Jan '15

11 Jan '15

At the recent CES exhibition in Las Vegas, there was being shown a lot of new hardware taking advantage of the new USB specs <http://arstechnica.com/gadgets/2015/01/usb-3-1-and-type-c-the-only-stuff-at…>. There are 4 quite separate parts to these specs: * the USB 3.1 spec, supporting theoretical data rates up to 10Gb/s * the USB Power Delivery spec, which can supply up to 100W to connected devices * the new “Type C” connector, which has 4 separate physical data channels on it, including one for backward compatibility with USB 2.0 * USB Alternate Mode, which can use some or all of the Type C channels to communicate non-USB data (e.g. DisplayPort). In principle, it is neat to be able to replace all the different kinds of ports on a machine with ports all of a single kind. However, the article suggests that Alternate Mode could be a problem: it seems inevitable that different ports on a machine will be restricted to different uses for the Alternate Mode function. Which means, instead of the current situation where a monitor connector is different from a USB connector so you cannot plug a cable for one into the other, you will have the situation where all the connectors and cables _are_ the same, but if you plug the wrong device into the wrong port, it just won’t work. I remember in an e-mail exchange with Stuart Cheshire a few years ago (he was the mastermind behind the Zeroconf initiative, which Apple implemented as “Rendezvous”—later renamed “Bonjour”—and Linux users know as the “Avahi” packages), he said that there should indeed be just a single type of port on a computer, all speaking the same protocol. And that protocol should be TCP/IP. After all, why shouldn’t you run full TCP/IP between your keyboard, mouse and PC? The silicon it takes to implement the network stack shouldn’t amount to much of a cost these days. Of course, it should be IPv6, not IPv4...

2 2

NZ Postcodes Database
by Lawrence D'Oliveiro 10 Jan '15

10 Jan '15

If you didn’t know about it, this guy Nick Le Mouton has put together a pretty extensive list of postcode information for New Zealand, available here <https://www.noodles.net.nz/2007/09/14/new-zealand-postcode-database-v2/>. There are details on 43457 streets in 1260 suburbs with latitude/longitude positions, and separate tables of rural delivery addresses and P O boxes/private bag locations.

1 0