- wlug - list.wlug.org.nz

New speculative-execution vulnerability strikes AMD, ARM, and Intel
by Peter Reutemann 22 May '18

22 May '18

'A new attack that uses processors' speculative-execution capabilities to leak data, named Speculative Store Bypass (SSB), has been published after being independently discovered by Microsoft's Security Response Center and Google Project Zero. Processors from Intel and AMD, along with some of those using ARM's designs, are all affected.' -- source: https://arstechnica.com/gadgets/2018/05/new-speculative-execution-vulnerabi… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

meeting next Monday
by Peter Reutemann 22 May '18

22 May '18

Hi everyone We have a meeting next Monday: 'Carsten will give a short introduction to their FOSS project "DiLer" which is a LMS and school administration software and how they made it a business model. Some details are available at https://digitale-lernumgebung.de in English. Lawrence D'Oliveiro will show off Pop!_OS, the Ubuntu-derivative that System76 uses on their computers that they sell (https://system76.com/pop)' More details: https://www.meetup.com/WaikatoLinuxUsersGroup/events/246737153 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ask Slashdot: Some Good Linux Desktop Option For Kids?
by Peter Reutemann 17 May '18

17 May '18

'I'm looking to re-purpose some of the older hardware that I've held onto to create something of a starter machine for my kids (both aged below 10). At this point it's still just a few shortcut icons I can setup on the desktop for them, primarily to web tools/sites they use, but I'd like some flexibility; everything I've read suggests options that haven't had any activity since 2015. Is there an option out there or is this just a custom job' -- source: https://ask.slashdot.org/story/18/05/17/1425203 See the discussion in the comments of that article. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu - Upgrading to 18.04
by Ian Stewart 17 May '18

17 May '18

Hi, Ubuntu users are probably aware that about three weeks ago version 18.04.0 was released. This is a Long Term Support (LTS) release. If you are running version 17.10, and your "Software & Updates" --> "Updates" --> "Notify me of a new Ubuntu version:" is set to either "For any new version" or "For long-term support versions", then you will probably have received a GUI pop-up screen asking you if you wanted to do an on-line upgrade to 18.04. I had no problems when performing the on-line upgrade with Ubuntu/Mate 17.10 to 18.04. (Which is better that when I did the 17.04 to 17.10, where I struck an application dependency problem.) I also have a 16.04 LTS Ubuntu/Mate laptop, and I was expecting a pop-up and to get prompted to do the software upgrade to 18.04 LTS, but all I could get was a message to say my 16.04 version was up-to-date. In reading this askubuntu posting: https://askubuntu.com/questions/1028624/not-able-to-upgrade-from-16-04-lts-… ...I found someone has posted the following comment: Upgrades from LTS releases are scheduled after the first patch - 18.04.1 which is usually a month after the first release. They need to make sure everything goes smoothly and then the software manager will allow it. If you're anxious, which based on my experience you shouldn't be cause there are probably tons of bugs, you can still force that upgrade, but that's not recommended. sudo do-release-upgrade -d ...despite it not being recommended I did the "sudo do-release-upgrade -d" and it upgraded my laptop from 16.04 to 18.04, and it seems to be booting and working fine. However, if you read the posting, then be aware that not everyone has had the same level of success: "I did a sudo do-release-upgrade -d on an ASUS SonicMaster with Ubuntu 16.04 LTS on it. After the upgrade, I restarted the machine, and the computer couldn't boot due to some infinite loops while showing messages regarding PCI bus." cheers, Ian.

1 1

Fedora-Based Linux Distro Korora Halts Development
by Peter Reutemann 16 May '18

16 May '18

'Korora, a Fedora-based Linux distro, halted its development this month, BetaNews' Brian Fagioli spotted Wednesday. The announcement would irk many, as Korora consistently received positive feedback from critics and users alike. News outlet ZDNet once described Korora as "Fedora++", while Slashdot readers, too, spoke highly of the distro. At the same time, the announcement should come as little surprise to anyone who has been tracking Korora's work. In a blog post, Korora team wrote: Korora for the forseeable future is not going to be able to march in cadence with the Fedora releases. In addition to that, for the immediate future there will be no updates to the Korora distribution. Our team is infinitesimal (currently 1 developer and 2 community managers) compared to many other distributions, we don't have the luxury of being able to dedicate the amount of time we would like to spend on the project and still satisfy our real life obligations. So we are taking a little sabbatical to avoid complete burn out and rejuvenate ourselves and our passion for Korora/Fedora and wider open source efforts. The team had expressed similar concerns earlier this year: For the past few years Korora has released a new version in line with each Fedora version. That means that approximately twice a year we prepare, test and create 5 different ISO versions. This is as well as, among other things, developing new projects, supporting existing releases and planning the future versions. As each team member has different skills some tasks, such as development, can only be done by one person. All this is done in our spare time along side our job, family and personal responsibilities. For a very small team, currently 3 people plus the occasional input from others, this is a lot of work. It means that often Korora has to take a back seat when real life intrudes. This isn't the first time Korora had to abruptly pause its development. In 2007, Christopher Smart, who kickstarted Korora (at the time based on Gentoo Linux), had discontinued the project -- only to revive it three years later.' -- source: https://linux.slashdot.org/story/18/05/16/1352245 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu - Upgrading to 18.04
by rowan schischka 16 May '18

16 May '18

My Ubuntu 18.04 upgrade story from 17.10, originally 16.04. I had to re-install xserver-xorg-input-all to get my mouse and keyboard working I also had to reinstall gnome, for some reason only Unity desktop was installed. Other than that it is working fine.

1 0

It Doesn't Take a Genius to See That Microsoft Still Attacks GNU/Linux With Patents to Make Billions of Dollars in 'Protection' Money
by Peter Reutemann 14 May '18

14 May '18

'Intellectual Ventures, Finjan, RPX, and other Microsoft-connected trolls cannot be countered by LOT Network and the likes of it (notably OIN); Microsoft continues to shrewdly distribute patents to trolls, offering 'protection' from them (for a fee) and pressuring OEMs to bundle Microsoft 'apps' or risk retaliatory patent lawsuits' -- source: http://techrights.org/2018/05/14/microsoft-still-attacks-with-patents/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Attention PGP Users: New Vulnerabilities Require You To Take Action Now
by Peter Reutemann 14 May '18

14 May '18

'A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. From a report: EFF has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages. The full details will be published in a paper on Tuesday at 07:00 AM UTC (3:00 AM Eastern, midnight Pacific). In order to reduce the short-term risk, we and the researchers have agreed to warn the wider PGP user community in advance of its full publication. Our advice, which mirrors that of the researchers, is to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email. Until the flaws described in the paper are more widely understood and fixed, users should arrange for the use of alternative end-to-end secure channels, such as Signal, and temporarily stop sending and especially reading PGP-encrypted email.' -- source: https://it.slashdot.org/story/18/05/14/149222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Malware Found In the Ubuntu Snap Store
by Peter Reutemann 14 May '18

14 May '18

'Oh, snap! Just because some packages are available to install directly from the Ubuntu Software Center doesn't make them safe. This is proved by a recent discovery of malware in some snap packages from the Ubuntu Snaps Store. At least two of the snap packages, 2048buntu and hextris, uploaded to the Ubuntu Snaps Store by user Nicolas Tomb, contained malware. All packages by Nicolas have since been removed from the Ubuntu Snaps Store, "pending further investigations." The report comes from a bug which mentions that the 2048buntu snap package (and other packages by Nicolas Tomb) contains a hidden cryptocurrency miner inside. ' -- source: https://news.slashdot.org/story/18/05/12/2140252 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Same IP Address For Wired And Wireless Connections
by Lawrence D'Oliveiro 10 May '18

10 May '18

I did something I thought was a little dodgy in my DHCP server config, namely I assigned the same IP address to both the Ethernet and Wi-Fi MAC addresses for my laptop. I figured this was OK so long as I turned one off before turning on the other. Today, I tried breaking that rule. I started a large rsync transfer over wi-fi, decided it was too slow, and plugged in an Ethernet cable. And it worked! After a few seconds, I was able to turn off the wi-fi, and the transfer continued without a hiccup. Has anyone else tried this?

1 0