- wlug - list.wlug.org.nz

Alibaba's Huge Browser Business Is Harvesting The 'Private' Web Activity Of Millions Of Android And iPhone Users
by Peter Reutemann 03 Jun '21

03 Jun '21

'Security researcher Gabi Cirlig's findings, verified for Forbes by two other independent researchers, reveal that on both Android and iOS versions of UC Browser, every website a user visits, regardless of whether they're in incognito mode or not, is sent to servers owned by UCWeb. From a report: Cirlig said IP addresses -- which could be used to get a user's rough location down to the town or neighborhood of the user -- were also being sent to Alibaba-controlled servers. Those servers were registered in China and carried the .cn Chinese domain name extension, but were hosted in the U.S. An ID number is also assigned to each user, meaning their activity across different websites could effectively be monitored by the Chinese company, though it's not currently clear just what Alibaba and its subsidiary are doing with the data. "This could easily fingerprint users and tie them back to their real personas," Cirlig wrote in a blog post handed to Forbes ahead of publication on Tuesday. Cirlig was able to uncover the problem by reverse engineering some encrypted data he spotted being sent back to Beijing. Once the key had been cracked, he was able to see that every time he visited a website, it was being encrypted and transmitted back to the Alibaba company. On Apple's iOS, he didn't even need to reverse engineer the encryption because there effectively was none on the device (though it was encrypted when in transit). "This kind of tracking is done on purpose without any regard for user privacy," Cirlig told Forbes. When compared to Google's own Chrome browser, for instance, it does not transfer user web browsing habits when in incognito. Cirlig said he'd looked at other major browsers and found none did the same as UC Browser. ' -- source: https://yro.slashdot.org/story/21/06/02/185213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google Chrome's Top Web App Advocate Resigns
by Peter Reutemann 03 Jun '21

03 Jun '21

'Google is losing one of its strongest champions of the web. Alex Russell, who has led the Fugu project to make web apps as powerful as those running on Google's Android or Apple's iOS software, is leaving the company on Wednesday. From a report: Russell announced his departure on Twitter. He's not quitting in anger or being pushed out. But after 12 years at Google pushing his vision for a more powerful web, "I need some time off," he said in an interview. Russell has been an outspoken advocate for the web, using Chrome's dominant position to help test and introduce new abilities that let programmers build interactive apps on the web, not just relatively static websites. Project Fugu embodies this effort, as does the broader progressive web app, or PWA, movement that lets you install and launch web apps more like those that run natively on smartphones and PCs.' -- source: https://tech.slashdot.org/story/21/06/02/1931236 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Huawei's HarmonyOS Arrives With iPad-Inspired Tablet UI, Apparent Android Base
by Peter Reutemann 03 Jun '21

03 Jun '21

'Two years into its ban from the US Government and, in turn, access to the Play Store on its Android-powered devices, Huawei is unveiling HarmonyOS. The platform is an alternative to Android that powers TVs, smartphones, tablets, and smartwatches. 9to5Google reports: Announced at an event today, Huawei is positioning HarmonyOS as an operating system that can handle just about everything, from the smartphone in your pocket to IoT devices such as "power sockets and lamps." The company says the goal of the platform is to have one set of code that can be used across virtually any device, saying that it is not aware of "any other operating system in the world" that can cover such a wide range of devices. Leaning into this ability, Huawei developed a "Control Panel," which gives users the ability to connect multiple devices together, with the example of using the "music widget" to throw audio playback to nearby speakers or TVs. A "Super Device" widget shows icons for other nearby devices and enables a quick and easy pairing mode. On smartphones, the HarmonyOS homescreen can use a swipe-up gesture on apps developed for the platform to see a widget pulling information from that app. Those widgets, apparently, can also be used across devices because of the shared codebase Huawei says HarmonyOS offers. The homescreen can also intelligently add apps to a folder based on the category. Interestingly, Huawei says HarmonyOS devices will also be able to move running apps from one device to another, which is really neat and unique. Moving apps between devices apparently also works between watches and TVs, with a workout app being used on both simultaneously given as an example. A video calling app was also shown moving between devices. Huawei says that performance of HarmonyOS is "superior" to Android with EMUI, specifically calling out long-term use. While there are certainly new elements in HarmonyOS, it appears to be a "fork" of Android. The Verge spent time with the HarmonyOS-powered MatePad Pro and described the act of installing Android APKs as "though I was using an Android device." Visually, there are also a tremendous number of similarities between HarmonyOS and Android, though there are some distinct elements of Apple's iPad OS in the platform's tablet-optimized homescreen, seen below as Evan Blass posted to Twitter. Android Authority further described HarmonyOS as "ultimately a spin on Android 10" with a "slight rebrand." TechRadar said the software was "clearly" based on Android. These findings from the media appear to back up a previous report from ArsTechnica, which showed the developer preview as basically a clone of EMUI-skinned Android. ' -- source: https://tech.slashdot.org/story/21/06/02/2114259 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

China Cracking Down On Cryptomining
by Lawrence D'Oliveiro 02 Jun '21

02 Jun '21

This article <https://www.aljazeera.com/economy/2021/5/24/china-crackdown-forces-crypto-m…> reports on how many large cryptomining operators are moving out of China in the wake of the Government’s actions against them. But the main reason I’m posting this link is because of that picture. That’s what it looks like inside a cryptomining farm. Look at those power cables, like ships’ hawsers. It’s even more impressive at full resolution.

1 1

Multinational Meat Producer JBS Hit By Ransomware Attack
by Lawrence D'Oliveiro 02 Jun '21

02 Jun '21

The world’s largest meat-producing company, Brazil-based JBS SA, has been hit by a ransomware attack that has forced the closure of its US installations <https://www.aljazeera.com/economy/2021/6/1/slaughterhouse-closures-spread-a…>. That means 20% of beef supply in the US has been cut. There are also reports of outages in its Australian and Canadian operations, so there is very likely more bad news to come. On the bright side, the company says its backup servers are fine, and it is in the process of restoring from them.

1 0

The State Of NZ Online Media
by Lawrence D'Oliveiro 02 Jun '21

02 Jun '21

Just saw this report <https://www.nzherald.co.nz/business/mediaworks-sale-revealed-how-much-disco…> that Discovery paid about $20 million for MediaWorks (TV channels Three, Bravo, Edge, Breeze and their “+1” repeaters, streaming service ThreeNow and Newshub). Contrast this against the $700-million valuation of MediaWorks back in 2007. There was an assumption it would be worth much less; “Much of this was ostensibly driven by the $1 sale of the Stuff news business”. Speaking of Stuff, seems Fairfax didn’t do well after acquiring it <https://www.nzherald.co.nz/business/stuff-the-laggard-among-fairfax-busines…>. I remember the head of the NZ Open-Source Society saying in a radio interview that it actually used to be a profitable business, but after the acquisition, Fairfax ripped out the open-source software it was built on and replaced it with some proprietary and expensive Adobe platform.

1 0

Quic Gives the Internet's Data Transmission Foundation a Needed Speedup
by Peter Reutemann 01 Jun '21

01 Jun '21

'One of the internet's foundations just got an upgrade. From a report: Quic, a protocol for transmitting data between computers, improves speed and security on the internet and can replace Transmission Control Protocol, or TCP, a standard that dates back to Ye Olde Internet of 1974. Last week, the Internet Engineering Task Force, which sets many standards for the global network, published Quic as a standard. Web browsers and online services have been testing the technology for years, but the IETF's imprimatur is a sign the standard is mature enough to embrace fully. It's extremely hard to improve the internet at the fundamental level of data transmission. Countless devices, programs and services are built to use the earlier infrastructure, which has lasted decades. Quic has been in public development for nearly eight years since Google first announced Quic in 2013 as an experimental addition to its Chrome browser. But upgrades to the internet's foundations are crucial to keep the world-spanning communication and commerce backbone humming. That's why engineers spend so much effort on titanic transitions like Quic, HTTPS for secure website communications, post-quantum cryptography to protect data from future quantum computers, and IPv6 for accommodating vastly more devices on the internet.' -- source: https://tech.slashdot.org/story/21/05/31/168221 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Amazon Devices Will Soon Automatically Share Your Internet With Neighbors
by Peter Reutemann 01 Jun '21

01 Jun '21

'If you use Alexa, Echo, or any other Amazon device, you have just over a week to opt out of an experiment that leaves your personal privacy and security hanging in the balance. From a report: On June 8, the merchant, Web host, and entertainment behemoth will automatically enroll the devices in Amazon Sidewalk. The new wireless mesh service will share a small slice of your Internet bandwidth with nearby neighbors who don't have connectivity and help you to their bandwidth when you don't have a connection. By default, Amazon devices including Alexa, Echo, Ring, security cams, outdoor lights, motion sensors, and Tile trackers will enroll in the system. And since only a tiny fraction of people take the time to change default settings, that means millions of people will be co-opted into the program whether they know anything about it or not. The Amazon webpage linked above says Sidewalk "is currently only available in the US." [...] Amazon has published a white paper detailing the technical underpinnings and service terms that it says will protect the privacy and security of this bold undertaking. To be fair, the paper is fairly comprehensive, and so far no one has pointed out specific flaws that undermine the encryption or other safeguards being put in place. But there are enough theoretical risks to give users pause.' -- source: https://yro.slashdot.org/story/21/05/31/2024259 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Remote Desktop with Linux: 5 Apps Which You Can Use
by Peter Reutemann 01 Jun '21

01 Jun '21

'With more people working from home than ever before, having the right remote desktop access software has become very important. Maybe you’re helping a family member or colleague with an IT issue, or perhaps you’re working from home. Accessing any system remotely is the need of the day. Generally, a remote desktop connection is defined as any software allowing you to remotely access a device from a geographical distance. In addition to desktop sharing, many tools can now conduct file transfers and offer highly secure remote access. The main purpose of this article is to help Linux users to find out the remote desktop app for usage with the Linux distro which they are using.' -- source: https://linuxiac.com/remote-desktop-with-linux/ NB: Not all are open-source software. But Apache Guacamole looks promising - anyone used it? Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The Quest For Faster Python
by Lawrence D'Oliveiro 31 May '21

31 May '21

This report <https://www.theregister.com/2021/05/06/the_quest_for_faster_python/> on Facebook’s new “Cinder” project for speeding up Python code also mentions some other existing alternatives for doing the same. Python is commonly considered slow, yet note this one interesting comparison that was done with JavaScript: In May 2020 AI specialists DLabs tested JavaScript versus Python performance for machine learning. For JavaScript Node 12.16.1 was used, and for Python 3.7.6. The results seem surprising: although JavaScript benefits from an excellent JIT in Node (which uses the V8 engine as used by Google Chrome), Python easily outperformed it. "The learnings from the tests I ran are stark. JavaScript couldn’t get close to Python’s tasks — across the board. JavaScript’s computational performance is still much better than Python’s. However, the maturity of the libraries — which often have underlying modules written in C — means that operations on large datasets can offer so much more than sheer computational power," said developer Krzysztof Miśtal. Which is what Guido van Rossum has long advised: write performance-critical parts as extension modules in C.

2 2