- wlug - list.wlug.org.nz

Inkscape: By The Way ...
by Lawrence D'Oliveiro 01 Jun '18

01 Jun '18

That previous Libre Graphics World article linked to an item on Tavmjong Bah’s blog <http://tavmjong.free.fr/blog/>. “Mr Inkscape” himself has posts on the ins and outs of SVG and CSS, and tutorials on advanced features of Inkscape itself.

1 0

SVG 2.0 Chicken-And-Egg Dilemma
by Lawrence D'Oliveiro 01 Jun '18

01 Jun '18

From <http://libregraphicsworld.org/blog/entry/gradient-meshes-and-hatching-to-be…>: Essentially, we have arrived to the point where development of a major vector graphics file format for the Web is shaped by inactivity of Mozilla and Google, while Microsoft and W3C do the real work, a developer of one design tool [Inkscape] contributes a lot, but has no say in what goes into the standard, and a vendor [Adobe] of another design tool is taking a wait-and-see stance. By the way, it appears Alexandre Prokoudine has given up the battle with spammers, and has turned off all posting of new comments on his blog.

1 0

Chrome and Firefox leaks let sites steal visitors’ Facebook names, profile pics
by Peter Reutemann 01 Jun '18

01 Jun '18

'For more than a year, Mozilla Firefox and Google Chrome may have leaked users’ Facebook usernames, profile pictures, and likes if the users’ browsers visited malicious websites that employed a cutting-edge hack, researchers said Thursday. The data could be extracted through what’s known as a side-channel vulnerability in the browsers’ implementation of new standards for cascading style sheets introduced in 2016. One of the new features known as the “mix-blend-mode” leaked visual content hosted on Facebook to websites that included an iframe linking to it and some clever code to capture the data. Normally, a security concept known as the same-origin policy forbids content hosted on one domain to be available to a different domain. The vulnerability was significant because it allowed hackers to bypass this bedrock principle for two of the Internet’s most widely used browsers. The leak was independently discovered by two different research teams, and it was fixed late last year in version 63 of Chrome and two weeks ago in Firefox 60. While the updated browsers no longer pose a threat to user privacy, one of the researchers who discovered the vulnerability said the increasingly powerful graphics capabilities being added in the HTML5 and CSS standards are likely to make similar hacks possible in the future.' -- source: https://arstechnica.com/information-technology/2018/05/chrome-and-firefox-l… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

1834: The World’s First Cyberattack
by Lawrence D'Oliveiro 31 May '18

31 May '18

How a pair of bond-trader brothers were able to covertly get information on prices days ahead of the competition, using the French Government-only telegraph network <https://www.schneier.com/blog/archives/2018/05/1834_the_first_.html>.

1 0

ProtonMail Launches Free ProtonVPN Service For Macs
by Peter Reutemann 31 May '18

31 May '18

'The creators of popular encrypted email service ProtonMail have released a free version of their ProtonVPN software for macOS. From a report: Even though the free version does not contain the full features that you would come to expect from a paid VPN service it is more than capable of obfuscating IP addresses and your location. While ProtonVPN has already released Windows and Android versions, according to Dr. Andy Yen, CEO of ProtonMail, their reason for releasing the free macOS version "is to make the world a safer place by ensuring that citizens around the world have access to an Internet free of spying and censorship. Releasing a free VPN service for macOS is another important step in that direction."' -- source: https://apple.slashdot.org/story/18/05/31/1327232 Here's the pricing/features overview: https://protonvpn.com/pricing Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google Chrome 67 Released for Windows, Mac, and Linux
by Peter Reutemann 31 May '18

31 May '18

'Google released earlier today Chrome 67, the latest stable release of its web browser. According to changelogs released with Chrome 67, this version adds support for a Generic Sensors API, improves AR and VR experiences, and deprecates the HTTP-Based Public Key Pinning (HPKP) security feature. Probably the biggest change in Chrome 67 is the addition of the Generic Sensors API. As the name implies, this is an API that exposes data from device sensors to public websites. The new API is based on the Generic Sensor W3C standard. This API is meant primarily for mobile use, and in its current version, websites can use Chrome's Generic Sensors API to access data from a device's accelerometer, gyroscope, orientation and motion sensors. Another API that shipped with Chrome is the WebXR Device API. Developers can use this API to build virtual and augmented reality experiences on Chrome for mobile-based VR headsets like Google Daydream View and Samsung Gear VR, as well as desktop-hosted headsets like Oculus Rift, HTC Vive, and Windows Mixed Reality Headsets.' -- source: https://tech.slashdot.org/story/18/05/30/1440256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

pop linux reviewed on distrowatch
by Ian Young 30 May '18

30 May '18

https://distrowatch.com/weekly.php?issue=20180528 By a strange coincidence the Sys 76 Linux version gets a look over this week on Distrowatch about the same time as our last meeting. A range of interesting comments amidst the dross. ~ Ian Y

3 3

Sonic and Ultrasonic Attacks Damage Hard Drives and Crash OSes
by Peter Reutemann 30 May '18

30 May '18

'Attackers can cause potentially harmful hard drive and operating system crashes by playing sounds over low-cost speakers embedded in computers or sold in stores, a team of researchers demonstrated last week. The attacks use sonic and ultrasonic sounds to disrupt magnetic HDDs as they read or write data. The researchers showed how the technique could stop some video-surveillance systems from recording live streams. Just 12 seconds of specially designed acoustic interference was all it took to cause video loss in a 720p system made by Ezviz. Sounds that lasted for 105 seconds or more caused the stock Western Digital 3.5 HDD in the device to stop recording altogether until it was rebooted. The device uses flash storage to house its firmware, but by default it uses a magnetic HDD to store the large quantities of video it records. The attack used a speaker hanging from a ceiling that rested about four inches above the surveillance system's HDD. The researchers didn't remove the casing or otherwise tamper with the surveillance system. The technique was also able to disrupt HDDs in desktop and laptop computers running both Windows and Linux. In some cases, it even required a reboot before the PCs worked properly. ' -- source: https://hardware.slashdot.org/story/18/05/30/0349202 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Windows 10 Spring Update Improves Linux On WSL With Unix Sockets and More
by Peter Reutemann 29 May '18

29 May '18

'Windows 10 build 1803 has come out this month, but with some problems. AnandTech has a deep-dive with the review examing many new features including the much better support for Linux. WSL (Windows Subsystem for Linux) now has native Curt and Tar from the command prompt as well as a utility to convert Unix to Windows pathnames called WSLpath.exe which is documented here. In addition it was mentioned on Slashdot in the past about OpenSSH being ported natively to Win32 in certain early builds. It now seems the reason was for Linux interoperability with this Spring Update 2. Unix sockets mean you can run Kali Linux on Windows 10 for penetration testing or run an Apache server in the background with full Linux networking support. Deemons now run in the background even with the command prompt closed. [...]' -- source: https://tech.slashdot.org/story/18/05/29/0244210 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Satya Nadella: “I Believe Right Now Microsoft Is Probably On The Right Side Of History”
by Lawrence D'Oliveiro 27 May '18

27 May '18

Interview of the Microsoft boss by the Daily Telegraph <https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=120597…>: ... Nadella's four years in charge cannot be described as anything but a success. Under his watch, its share price has increased by 170 per cent, finally overtaking the levels from the peak of the dotcom boom. Except that share price seems a somewhat short-sighted way of measuring a company’s success. Look at HP. "I always make this case, which is if it was not for Microsoft's openness, the web wouldn't have happened. I was talking to [web creator Sir] Tim Berners-Lee yesterday and I sort of said: 'Think about the current ecosystems and how closed and how walled gardened and riddled with all kinds of ways they've rigged it, [compared] to where we were.' Talk about rewriting history. The Web was growing by leaps and bounds long before Microsoft even noticed it (remember how the first edition of Bill Gates’ book “The Road Ahead” didn’t even mention it?). Netscape was the leader and de-facto setter of standards, until Microsoft belatedly entered the race, and took over by giving away their product for free. Then we had the long period of stagnation under Internet Explorer 6, until Firefox came in to jolt them out of their complacency, followed by Apple’s Safari and Google’s Chrome. So to say that “Microsoft’s openness” had anything to do with it is just shamelessly false.

1 0