- wlug - list.wlug.org.nz

Alphabet's Intra App Encrypts DNS Queries To Help Users Bypass Online Censorship
by Peter Reutemann 03 Oct '18

03 Oct '18

'Catalin Cimpanu, writing for ZDNet: Jigsaw, a technology incubator created by Google and operated as a subsidiary under the Alphabet brand, has released today an Android app named Intra that can encrypt DNS queries as a protection against DNS manipulation at the ISP (internet service provider) level. DNS manipulation is one of the most common forms of online censorship used by oppressive regimes or unscrupulous ISPs, used to block access to news sites, information portals, social media platforms, undesirable software, and more. Intra protects against DNS manipulation by keeping DNS traffic hidden from third-parties with state-level surveillance capabilities, such as internet service providers in countries with autocratic regimes. Reports suggest that Alphabet tested the app with a few dozen political activists in Venezuela before the global roll-out.' -- source: https://yro.slashdot.org/story/18/10/03/2042219 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

ungoogled-chromium
by Lawrence D'Oliveiro 03 Oct '18

03 Oct '18

Even though the Chromium browser is Open Source, it still does a whole lot of communication with Google’s servers, when it’s built and when it runs. This project <https://github.com/Eloston/ungoogled-chromium> tries to strip out all of that, while preserving the user-visible behaviour as much as possible.

1 0

Aussie Law >> Maths
by Lawrence D'Oliveiro 02 Oct '18

02 Oct '18

"The laws of Australia prevail in Australia, I can assure you of that," [Malcolm Turnbull] said on Friday. "The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia." <https://www.techdirt.com/articles/20170714/10385237789/aussie-prime-ministe…>

1 2

Who Needs Special Hardware Random Number Generators?
by Lawrence D'Oliveiro 02 Oct '18

02 Oct '18

The weak point in any encryption system has long been: how random are your random numbers? Providing special hardware for generating random numbers, special CPU instructions etc has always been open to the objection that their randomness could be subverted -- whether through some minor stupid mistake in implementation, or deliberately by certain powerful agencies -- and you would never know. Now, a new research paper <https://www.theregister.co.uk/2018/10/01/hardware_random_numbers/> proposes that normal CPU operation itself can be a source of random numbers. And the way these are obtained would in fact be very hard to subvert, since it is based on detecting subtle timing variations in the operations of various circuits. In other words, it is obtaining randomness from hardware that is not designed to be working randomly at all. And this should -- hopefully -- make the randomness very difficult to compromise.

1 0

NZ Customs Can Now Demand You Unlock Your Phone
by Lawrence D'Oliveiro 01 Oct '18

01 Oct '18

You can now face a $5,000 fine for not unlocking your phone if ordered to do so, when coming into NZ <https://www.theregister.co.uk/2018/10/01/nz_border_customs/>. Justice Minister Andrew Little says: “The bill provides for that power of search and examination, but in order to exercise that power, a customs officer, first of all, has to be satisfied, or at least to have a reasonable suspicion, that a person in possession of such a device—it would be a cellphone or a laptop or anything else that might be described as an 'e-device'—has been involved in criminal offending.” Howver, ... the Council of Civil Liberties criticised the “reasonable cause” protection as inadequate, because someone asked to unlock a device isn't told what that cause might be, and therefore has no way to challenge the request.

1 0

Five-Eyes Intelligence Services Choose Surveillance Over Security
by Lawrence D'Oliveiro 01 Oct '18

01 Oct '18

The “Five Eyes” intelligence group (which includes New Zealand) have issued a statement where they claim that the increasing use of secure encryption is endangering law and order and national security. Here is one of many reactions <https://www.schneier.com/blog/archives/2018/09/five-eyes_intel.html>. This whole claim has been repeated so many times it is getting tedious. This group, of all people, with access to the most qualified pool of cryptographic talent in the world, should be able to get an opinion from their own experts on whether this is doable or not -- and if it was, they could show us all how it’s done and make Bruce Schneier and all the rest of the open community of security researchers look like fools. But they won’t do that, because they can’t. Instead, we see this ongoing harping on the issue, as though it can magically be fixed by passing a law or two. The UK (among other countries) has already criminalized the failure to disclose decryption keys <https://en.wikipedia.org/wiki/Key_disclosure_law>, and decreed that forgetting the key is no excuse.

1 1

Wellywood’s Digital Edge Has Dulled
by Lawrence D'Oliveiro 01 Oct '18

01 Oct '18

You may have seen an item in the news lately about a report into the large amount of subsidies that the Government puts into the local film industry. This latest report says that these subsidies pay off in jobs and revenue elsewhere, but independent reviewers question this, saying such conclusions are very sensitive to initial assumptions <https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=120795…>. This extract from one of the linked documents caught my eye: Weta Digital executives ... considered that 10 years ago they were at the forefront of technology and that studios were forced to use them to achieve particular effects, they said that this is no longer true: “the degrees of difference in technology are almost imperceptible”. It is no longer technical capability that wins work, it is price point; they consider themselves a price taker. “If the grant were to disappear tomorrow it would call into question the business itself…the subsidy allows us to compete.” There is “no scenario” where the US studios would pay 20% more for Weta Digital than its competitors. VFX have long been a commodity; it’s actually surprising that Weta Digital has managed to last this long, compared to, say, Rhythm & Hues, which went bust shortly after winning an Oscar for “Life Of Pi” <http://www.fresnobee.com/news/nation-world/national/article128729769.html>. I guess it’s all down to those Government subsidies...

1 1

PB Tech Pleads Guilty To Extended Warranty, Advertising Shenanigans
by Lawrence D'Oliveiro 01 Oct '18

01 Oct '18

PB Tech has admitted not properly informing customers of their rights over extended warranties, and also promoting a special offer on Apple watches to 100,000 people when it only had 14 in stock at that price. <https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=120824…>

1 1

An Open Source Resistance Takes Shape as Tech Giants Race To Map the World
by Peter Reutemann 01 Oct '18

01 Oct '18

'Shadma Shaikh, reporting for FactorDaily: Chetan Gowda, 27, was speaking to a room full of students in IIIT Hyderabad for a workshop on OpenStreetMap for beginners organized by Swecha, a non-profit organization to support free software movement last month. There were close to 40 students in the room. Beginners often ask him: Why use open source maps when we already have Google Maps? For Gowda, it was the fact that Google Maps is a global, commercial product and did not capture local detail. Like the old banyan tree that was a major landmark in his hometown Hassan or public benches just outside the town where pedestrians could stop to catch a break or fire catchment areas in Bellandur lake in Bengaluru, India. "It was fascinating to add little but important details of my town to open maps," says Gowda who was introduced in 2013 to OSM or OpenStreetMap, a global community of mappers formed as a collaborative project to create a free editable map of the world in 2004. Since then he has been an active contributor to OpenStreetMap and has conducted many workshops in colleges and institutes to induct more people in the community. Gowda has made 8500 edits in the OpenStreetMap, mainly covering areas in Bengaluru, Hassan and Hyderabad. Gowda and a few other contributors from India are part of a tiny yet growing resistance movement which doesn't want giant corporations to own all the mapping data. For the average consumer, this may not seem like a big deal. But mapping is big business. The market opportunity for suppliers of mapping to the autonomous car industry is going to be worth over $24 billion by 2050, according to one estimate [PDF]. And that's just one industry. A study commissioned by Google in 2015 estimated that industries that run on top of the Global Positioning Satellite Systems and mapping generate nearly $73 billion in annual revenue. Worldwide, that industry is was estimated to generate $150- $270 billion in revenues. Although new research isn't available, with growing smartphone usage and the birth of companies such as Uber and many others it is safe to assume that the industry has only grown bigger. All the more reason why map data can't be held by only a few companies. With Google Maps beginning to charge small and medium-sized businesses and indie developers more for access to its platform, many have started to explore and switch to open source alternatives of Maps, and commercial services such as Here Maps. ' -- source: https://news.slashdot.org/story/18/10/01/1140259 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

VideoLAN Announces Dav1d, a New Libre and Open Source AV1 Decoder
by Peter Reutemann 01 Oct '18

01 Oct '18

'Jean-Baptiste Kempf, president of VideoLan and developer of VLC media player, made the following announced Monday: AV1 is a new video codec by the Alliance for Open Media, composed of most of the important Web companies (Google, Facebook, Netflix, Amazon, Microsoft,...). AV1 has the potential to be up to 20% better than the HEVC codec, but the patents license is totally free, while HEVC patents licenses are insanely high and very confusing. The reference decoder for AV1 is great, but it's a research codebase, so it has a lot to improve. Therefore, the VideoLAN, VLC and FFmpeg communities have started to work on a new decoder, sponsored by the Alliance of Open Media. The goal of this new decoder is: be small, be as fast as possible, be very cross-platform, correctly threaded, libre and (actually) Open Source. Without further due, the code: https://code.videolan.org/videolan/dav1d ' -- source: https://news.slashdot.org/story/18/10/01/1946250 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0