- wlug - list.wlug.org.nz

238 Google Play apps with >440 million installs made phones nearly unusable
by Peter Reutemann 04 Jun '19

04 Jun '19

'If the prevalence of abusive Google Play apps has left you numb, this latest report is for you. Carefully concealed adware installed in Google-approved apps with more than 440 million installations was so aggressive that it rendered mobile devices nearly unusable, researchers from mobile security provider Lookout said Tuesday. BeiTaAd, as the adware is known, is a plugin that Lookout says it found hidden in emojis keyboard TouchPal and 237 other applications, all of which were published by Shanghai, China-based CooTek. Together, the 238 unique apps had a combined 440 million installs. Once installed, the apps initially behaved normally. Then, after a delay of anywhere between 24 hours and 14 days, the obfuscated BeiTaAd plugin would begin delivering what are known as out-of-app ads. These ads appeared on users' lock screens and triggered audio and video at seemingly random times or even when a phone was asleep.' -- source: https://arstechnica.com/information-technology/2019/06/238-google-play-apps… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Apple Replaces Bash With Zsh as the Default Shell in macOS Catalina
by Peter Reutemann 04 Jun '19

04 Jun '19

'Starting with macOS Catalina, Macs will now use zsh as the default login shell and interactive shell across the operating system. From a report: All newly created user accounts in macOS Catalina will use zsh by default. Bash will still be available, but Apple is signaling that developers should start moving to zsh on macOS Mojave or earlier in anticipation of bash eventually going away in macOS. Apple hasn't explained exactly why it's making this change, but bash isn't exactly a modern shell as it's implemented in macOS, and a switch to something less aging makes a lot more sense for the company. Apple is stuck using version 3.2 of bash that has been licensed under GPLv2, as newer versions are licensed under GPLv3. Apple has kept clear of using GPLv3 packages in macOS as the license is generally more restrictive to companies like Apple that sign their own code and it includes explicit patent grants, ' -- source: https://apple.slashdot.org/story/19/06/04/1645240 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Firefox Starts Blocking Third-Party Cookies By Default
by Peter Reutemann 04 Jun '19

04 Jun '19

'Mozilla today announced a slew of privacy improvements. The company has turned on Enhanced Tracking Protection, which blocks cookies from third-party trackers in Firefox, by default. Mozilla has also improved its Facebook Container extension, released a Firefox desktop extension for its rebranded Lockwise password keeper, and updated Firefox Monitor with a dashboard for multiple email addresses. Mozilla added basic Tracking Protection to Firefox 42's private browsing mode in November 2015. The feature blocked website elements (ads, analytics trackers, and social share buttons) based on Disconnect's tracking protection rules. With the release of Firefox 57 in November 2017, Mozilla added an option to enable Tracking Protection outside of private browsing. (Tracking Protection was not turned on by default because it can break websites and cut off revenue streams for content creators who depend on third-party advertising.)' -- source: https://news.slashdot.org/story/19/06/04/1636241 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Dell Begins Pre-Installing Linux On Range of Precision Laptops
by Peter Reutemann 31 May '19

31 May '19

'"While Linux-preloaded laptops have been available for years from smaller companies, and have represented a fraction of their own sales with the much-admired XPS 13 developer model, Dell now offers a range of Precision models pre-installed with Ubuntu Linux," writes Slashdot reader Freshly Exhumed. Phoronix reports: At the start of May Dell announced an Ubuntu Linux option for their entry-level ~$700 Precision laptop while now they are closing out May by offering up Ubuntu 18.04 LTS on their higher-tier Precision laptop models. Ubuntu Linux has landed for the rest of Dell's current generation Precision mobile workstation line-up with support for the Precision 5540, 7540, and 7740. The Precision 5540 offers options of Xeon E or 9th Gen Core CPUs with up to 64GB of RAM and options for a NVIDIA Quadro T2000. The Precision 7540/7740 meanwhile are more powerful mobile workstations with supporting up to 128GB of ECC RAM and latest generation processors. The Precision 7740 model can also accomodate NVIDIA Quadro RTX 5000 series graphics. Additional details can be found via this blog post by Dell's Barton George.' -- source: https://linux.slashdot.org/story/19/05/30/2154256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Advanced Linux backdoor found in the wild escaped AV detection
by Peter Reutemann 30 May '19

30 May '19

'Researchers say they’ve discovered an advanced piece of Linux malware that has escaped detection by antivirus products and appears to be actively used in targeted attacks. HiddenWasp, as the malware has been dubbed, is a fully developed suite of malware that includes a trojan, rootkit, and initial deployment script, researchers at security firm Intezer reported on Wednesday. At the time Intezer’s post went live, the VirusTotal malware service indicated Hidden Wasp wasn’t detected by any of the 59 antivirus engines it tracks, although some have now begun to flag it. Time stamps in one of the 10 files Intezer analyzed indicated it was created last month. The command and control server that infected computers report to remained operational at the time this article was being prepared. Some of the evidence analyzed—including code showing that the computers it infects are already compromised by the same attackers—indicated that HiddenWasp is likely a later stage of malware that gets served to targets of interest who have already been infected by an earlier stage. It’s not clear how many computers have been infected or how any earlier related stages get installed. With the ability to download and execute code, upload files, and perform a variety of other commands, the purpose of the malware appears to be to remotely control the computers it infects. That's different from most Linux malware, which exists to perform denial of service attacks or mine cryptocurrencies.' -- source: https://arstechnica.com/information-technology/2019/05/advanced-linux-backd… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

libmtp error: could not delete object.
by John 29 May '19

29 May '19

Hi All, I have just got a 16gig micro sd card with my Granddaughters data on it. I managed to delete almost completely all the data but there are ten files that will not delete either on the phone or my computer the phone say the files are deleted but they remain the computer returns a "could not delete" error. I tried "sudo apt-get install mtp-server libmtpserver-dev" But got a error msg unable to locate mtp and libmtpserver. Any one can help please................ Cheers John..

2 1

Chinese Military To Replace Windows OS Amid Fears of US Hacking
by Peter Reutemann 29 May '19

29 May '19

'Amidst an escalating trade war and political tensions with the US, Beijing officials have decided to develop a custom operating system that will replace the Windows OS on computers used by the Chinese military. From a report: The decision, while not made official through the government's normal press channels, was reported earlier this month by Canada-based military magazine Kanwa Asian Defence. Per the magazine, Chinese military officials won't be jumping ship from Windows to Linux but will develop a custom OS. Thanks to the Snowden, Shadow Brokers, and Vault7 leaks, Beijing officials are well aware of the US' hefty arsenal of hacking tools, available for anything from smart TVs to Linux servers, and from routers to common desktop operating systems, such as Windows and Mac. Since these leaks have revealed that the US can hack into almost anything, the Chinese government's plan is to adopt a "security by obscurity" approach and run a custom operating system that will make it harder for foreign threat actors -- mainly the US -- to spy on Chinese military operations.' -- source: https://news.slashdot.org/story/19/05/28/1613221 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

W3C and WHATWG Sign Agreement To Collaborate on a Single Version of HTML and DOM
by Peter Reutemann 29 May '19

29 May '19

'W3C and the WHATWG signed an agreement today to collaborate on the development of a single version of the HTML and DOM specifications. >From a blog post: The Memorandum of Understanding jointly published as the WHATWG/W3C Joint Working Mode gives the specifics of this collaboration. This is the culmination of a careful exploration effective partnership mechanisms since December 2017 after the WHATWG adopted many shared features as their work-mode and an IPR policy. The HTML Working Group which we will soon recharter will assist the W3C community in raising issues and proposing solutions for the HTML and DOM specifications, and bring WHATWG Review Drafts to Recommendation. Motivated by the belief that having two distinct HTML and DOM specifications claiming to be normative is generally harmful for the community, and the mutual desire to bring the work back together, W3C and WHATWG agree to the following terms: W3C and WHATWG work together on HTML and DOM, in the WHATWG repositories, to produce a Living Standard and Recommendation/Review Draft-snapshots. WHATWG maintains the HTML and DOM Living Standards. W3C facilitates community work directly in the WHATWG repositories (bridging communities, developing use cases, filing issues, writing tests, mediating issue resolution). W3C stops independent publishing of a designated list of specifications related to HTML and DOM and instead will work to take WHATWG Review Drafts to W3C Recommendations.' -- source: https://tech.slashdot.org/story/19/05/28/1353243 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Google's Chrome Becomes Web 'Gatekeeper' and Rivals Complain
by Peter Reutemann 28 May '19

28 May '19

'Few home-grown Google products have been as successful as Chrome. Launched in 2008, it has more than 63% of the market and about 70% on desktop computers, according to StatCounter data. Mozilla's Firefox is far behind, while Apple's Safari is the default browser for iPhones. Microsoft's Internet Explorer and Edge browsers are punchlines. From a report: Google won by offering consumers a fast, customizable browser for free, while embracing open web standards. Now that Chrome is the clear leader, it controls how the standards are set. That's sparking concern Google is using the browser and its Chromium open-source underpinnings to elbow out online competitors and tilt entire industries in its favor. Most major browsers are now built on the Chromium software code base that Google maintains. Opera, an indie browser that's been used by techies for years, swapped its code base for Chromium in 2013. Even Microsoft is making the switch this year. That creates a snowball effect, where fewer web developers build for niche browsers, leading those browsers to switch over to Chromium to avoid getting left behind. This leaves Chrome's competitors relying on Google employees who do most of the work to keep Chromium software code up to date. Chromium is open source, so anyone can suggest changes to it, but the majority of programmers who approve contributions are Google employees, and any major disagreements get settled by a small circle of senior Google employees. Chrome is so ascendant these days that web developers often don't bother to test their sites on competing browsers. Google services including YouTube, Docs and Gmail sometimes don't work as well on rival browsers, sending frustrated users to Chrome. Instead of just another ship slicing through the sea of the web, Chrome is becoming the ocean.' -- source: https://developers.slashdot.org/story/19/05/28/1845238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Huawei's Android Replacement OS Will Launch in June, Company Exec Says
by Peter Reutemann 28 May '19

28 May '19

'Huawei's home-grown operating system -- codenamed HongMeng -- that's set to replace Android once the Huawei ban from Google comes into full effect, will be commercially rolled out next month, a Middle East head for the firm revealed exclusively to TechRadar Middle East. From a report: On May 20, Google announced that it would partially cut off Huawei devices from its Android operating system but was given an extension till August 19 by the US White House. "Huawei knew this was coming and was preparing. The OS was ready in January 2018 and this was our 'Plan B'," said Alaa Elshimy, Managing Director and Vice President of Huawei Enterprise Business Group Middle East. "We did not want to bring the OS to the market as we had a strong relationship with Google and others and did not want to ruin the relationship. Now, we are rolling it out next month' -- source: https://tech.slashdot.org/story/19/05/28/1524239 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0