- wlug - list.wlug.org.nz

4K / Ultra High Definition Monitors
by Ian Stewart 27 Sep '19

27 Sep '19

Hi Folks, For those of you at last nights meeting you'll recollect there was some discussion on Ultra High Definition<https://en.wikipedia.org/wiki/4K_resolution> computer monitors (i.e. "4K" monitors). With such a large resolution monitor there were jokes made about sitting on the other side of the room in order to use your computer. Today I found links to a Canadian web-site that seems to have created a science out of how far to sit in front of a TV monitor... https://www.rtings.com/tv/reviews/by-size/size-to-distance-relationship ...and... https://www.rtings.com/tv/learn/4k-ultra-hd-uhd-vs-1080p-full-hd-tvs-and-up… ...apparently you sit closer to a 4K/UHD TV monitor than a 1080/HD TV monitor. In fact, if you sit too far away from a 4K/UHD monitor then there is no point in having one and you should have stuck with a 1080/HD monitor! I notice that PB-Tech for the category of 4K Monitors<https://www.pbtech.co.nz/category/peripherals/monitors/4k-monitors>, the sizes are mostly in the range 24 inch to 32 inch, while 4K TVs<https://www.pbtech.co.nz/category/tv-av/tvs/4k-televisions> have screens in the range 43 inch to 86 inch. The cheapest 32 inch 4K monitor I found was a Kogan 32" Ultra HD 4K FreeSync IPS Monitor (3840 x 2160) that is available by purchasing on-line at NZ$370 plus shipping from kogan<https://www.kogan.com/nz/buy/kogan-32-ultra-hd-4k-freesync-ips-monitor-3840…>. Getting a 4K monitor is one thing, being able to feed it with true 4K created video is the next challenge. I don't think it will be coming out of a Freeview box in NZ for a while ;-) However, with the adoption and take-up of the AV1<https://en.wikipedia.org/wiki/AV1> standard, then more 4K video content should become available to stream from the internet. If your Desktop PC doesn't have a 4K (3980 x 1920 pixel) graphics capability, then don't forget that for a starting price of around $150 will be required for a PCI-e 4K graphics adapter<https://www.pbtech.co.nz/product/VGAGBV11032/Gigabyte-GeForce-GT1030-2GB-GD…>. cheers, Ian.

2 4

Cloudflare, Google Chrome, and Firefox Add HTTP/3 Support
by Peter Reutemann 27 Sep '19

27 Sep '19

'HTTP/3, the next major iteration of the HTTP protocol, is getting a big boost today with support added in Cloudflare, Google Chrome, and Mozilla Firefox. From a report: Starting today, Cloudflare announced that customers will be able to enable an option in their dashboards and turn on HTTP/3 support for their domains. That means that whenever users visit a Cloudflare-hosted website from an HTTP/3-capable client, the connection will automatically upgrade to the new protocol, rather than being handled via older versions. On the browser side, Chrome Canary added support for HTTP/3 earlier this month. Users can enable it by using the Chrome command-line flags of "--enable-quic --quic-version=h3-23". In addition, Mozilla too announced it would roll out support for HTTP/3. The browser maker is scheduled to ship HTTP/3 in an upcoming Firefox Nightly version later this fall.' -- source: https://news.slashdot.org/story/19/09/26/1710239 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Phrase Of The Week: “Chaos Engineering”
by Lawrence D'Oliveiro 27 Sep '19

27 Sep '19

How about a company that offers “Failure-As-A-Service” <https://www.theregister.co.uk/2019/09/26/organizing_chaos_gremlin_announces…>? That is, they make it easier to deliberately trigger various kinds of infrastructure problems and outages (under controlled conditions, of course) to make sure that your systems that are supposed to be designed for resiliency, actually do what they say on the tin. Quote from their Senior Site Reliability Engineer: “I like to do a CPU attack first. It's the Hello World of chaos engineering.”

1 0

Why So Many Apps Are Asking To Use Bluetooth on iOS 13
by Peter Reutemann 26 Sep '19

26 Sep '19

'Apple's new iOS 13 update adds a new privacy measure that requires apps to get your consent in order to use your device's Bluetooth. From a report: After installing the latest version of iOS, trust me when I say you'll be surprised by the number of apps asking for Bluetooth permission the next time you open them. Some might seem very strange (like Dunkin' Donuts in my case), but others probably won't make you think twice about giving the thumbs-up. The reason Apple implemented this is because Bluetooth has enabled companies to sneakily track your location over Bluetooth by using beacons in stores, shopping malls, and even on popular city streets if they're placed within range of a place you'd walk by. This is entirely separate from your iPhone's location privacy settings, which makes it seem all the more underhanded. A beacon is very easily able to detect your device's Bluetooth chip and log that with a retailer or some other app on your phone. So getting more strict about Bluetooth is a good move by Apple to prevent unwanted tracking of its customers. Similarly, the company is also getting even more transparent about location, showing you on a map how often and where apps have recorded your position. This prompt is much easier to understand, and will probably startle people into slimming down the list of apps that can monitor where they are. As it should!' -- source: https://apple.slashdot.org/story/19/09/26/1928204 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

High-severity vulnerability in vBulletin is being actively exploited
by Peter Reutemann 26 Sep '19

26 Sep '19

'Attackers are mass-exploiting an anonymously disclosed vulnerability that makes it possible to take control of servers running vBulletin, one of the Internet’s most popular applications for website comments. Sites running the app should take comments offline until administrators install a patch that vBulletin developers released late Wednesday morning. The vulnerability was disclosed through an 18-line exploit that was published on Monday by an unidentified person. The exploit allows unauthenticated attackers to remotely execute malicious code on just about any vBulletin server running versions 5.0.0 up to 5.5.4. The vulnerability is so severe and easy to exploit that some critics have described it as a back door.' -- source: https://arstechnica.com/information-technology/2019/09/public-exploit-code-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The /e/ Google-Free, Pro-Privacy Android Clone Is Now Available
by Peter Reutemann 26 Sep '19

26 Sep '19

'Gael Duval, creator of the popular early Linux distribution, Mandrake Linux, wanted a smartphone, which was open source, would run a wide variety of popular software, and protect your privacy. His answer was the Android-based /e/ operating system and smartphones. While it's still in beta, both its code and refurbished Samsung phones running it are now available. Duval's approach hasn't been to reinvent the mobile operating system wheel, but instead to clean up Android of its Google privacy-invading features and replace them with privacy-respecting one, in which, as Duval said in an interview, "Your data is your data." To do this, he's started with LineageOS. This is an Android-based operating system, which is descended from the failed CyanogenMod Android fork. According to Duval, the /e/ operating system is a Lineage OS fork. It also blends in features from the Android Open Source Project (AOSP) 7, 8, and 9 source-code trees. In the /e/ OS all Google services have been removed and replaced with MicroG services. MicroG replaces Google's libraries with purely open-source implementations without hooks to Google's services. This includes libraries and apps which provide Google Play, Maps, Geolocation, and Messaging services for the Android applications when they need them. What this means is that you can run some Android apps, which normally only work on a fully Google-enabled Android phone on an /e/ phone. These compatible apps are available via the /e/ app store. The /e/ platform also comes with its own services, the report notes. For example, its search program uses Qwant, a popular, privacy-first European-based search engine, and for cloud storage, you get /e/'s own cloud, which is based on the open-source NextCloud. You can download and install /e/ on 85 different smartphone models. You can also buy an /e/ phone today if you're in the EU.' -- source: https://linux.slashdot.org/story/19/09/25/2129247 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Developer Made an Ad Blocker That Works On Podcasts and Radio
by Peter Reutemann 25 Sep '19

25 Sep '19

'Meet AdBlock Radio, an adblocker for live radio streams and podcasts. Its creator, Alexandre Storelli, told Motherboard he hopes to help companies "develop alternative business models for radio and podcast lovers that do not want ads." "Ads exploit the weaknesses of many defenseless souls," Storelli told Motherboard. "Ads dishonestly tempt people, steal their time and promise them a higher social status. Blocking them will be a relieving experience for many." Most audio ads exploit "auditory artifacts" to produce an ad that can't be ignored or tuned out because it feels louder than it actually is -- this has gotten so bad that there has actually been a "sonic arms race" where ads have been made increasingly louder over the years. "Adblock Radio detects audio ads with machine-learning and Shazam-like techniques," Storelli wrote about the project. He said he's been working on it for more than three years and that it uses techniques such as speech recognition, acoustic fingerprinting, and machine learning to detect known ad formats. It uses a crowdsourced database of ads and "acoustic fingerprinting," which converts audio features into a series of numbers that can be combed by an algorithm. Storelli has made Adblock Radio open-source and given detailed instructions on how to build on it, integrate it into user devices, and deploy it in a way that pressures radio stations (and podcasts) to self-regulate the quality of their ads.' -- source: https://entertainment.slashdot.org/story/19/09/25/2056215 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Android 10 Go Edition Improves Speed and Security For Low-cost Phones
by Peter Reutemann 25 Sep '19

25 Sep '19

'Android Go has made smartphones more accessible by focusing on lower-cost devices, but it's frequently pokey and sometimes insecure -- not a great introduction to modern mobile tech. Google is aware of this, though, and it's tackling those issues head-on with its newly unveiled Android 10 Go edition. From a report: The scaled-back version of Android 10 puts a strong focus on speed, with faster and more memory-efficient app switching as well as launching that's 10 percent faster than in Android 9 Go. It should be more reliable, too. For some, data protection may be the real star of the show. Android 10 Go edition includes a new Adiantum encryption system that should secure data without affecting performance or requiring special hardware. You won't have to worry that your sensitive info is vulnerable simply because you bought an entry-level device.' -- source: https://mobile.slashdot.org/story/19/09/25/1648239 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft’s Cascadia Font Offers Ligatures For Programmers
by Lawrence D'Oliveiro 25 Sep '19

25 Sep '19

I just heard of this <https://devblogs.microsoft.com/commandline/cascadia-code/>, though it was apparently announced back in May. It has OpenType context-dependent substitutions for displaying “>=” as “≥”, “/=” as “≠” among others. Me? I just think it’s about time programming languages supported those Unicode characters directly.

1 0

Quantum Computers Are Analog Computers
by Lawrence D'Oliveiro 25 Sep '19

25 Sep '19

Google continues to experiment with quantum computing <https://arstechnica.com/science/2019/09/paper-leaks-showing-a-quantum-compu…>. This latest result (albeit preliminary) sounds impressive: But that seriously understates what's going on here. Every calculation that's done on a quantum computer will end up being a measurement of a quantum system. And in this case, there is simply no way to get that probability distribution using a classical computer. With this system, we can get it in under 10 minutes, and most of that time is spent in processing that doesn't involve the qubits. As the researchers put it, "To our knowledge, this experiment marks the first computation that can only be performed on a quantum processor." but it is still just reinforcing the point I made earlier <https://list.waikato.ac.nz/hyperkitty/list/wlug(a)list.waikato.ac.nz/thread…>, that quantum computers are just a reboot of the old idea of “analog” computers. These are able to do fast simulations of physical systems (in this case, a quantum probability distribution), to limited precision. But they continue to be useless for number-theoretic calculations, such as factoring large integers. Or code cracking.

1 0