- wlug - list.wlug.org.nz

Ubuntu Wants To Collect Data About Your System -- Starting With 18.04 LTS
by Peter Reutemann 15 Feb '18

15 Feb '18

' In an announcement on Ubuntu mailing list, Will Cooke, on behalf of the Ubuntu Desktop team, announced Canonical's plans to collect some data related to the users' system configuration and the packages installed on their machines. From a report: Before you read anything further, it's important to note that users will have the option to opt-out of this data collection. The company plans to add a checkbox to the installer, which would be checked by default. The option could be like: "Send diagnostics information to help improve Ubuntu." As per your convenience, you can opt-out during the installation. An option to do the same will also be made available in the Privacy panel of GNOME Settings. With this data collection, the team wishes to improve the daily experiences of the Ubuntu users. It's worth noting that the collected data will be sent over encrypted connections and no IP addresses will be tracked. To be precise, the collected data will include: flavour and version of Ubuntu, network connectivity or not, CPU family, RAM, disk(s) size, screen(s) resolution, GPU vendor and model, OEM manufacturer, location (based on the location selection made during install), no IP information, time taken for Installation, auto-login enabled or not, disk layout selected, third party software selected or not, download updates during install or not, livePatch enabled or not.' -- source: https://news.slashdot.org/story/18/02/15/1410203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

DeepFakes Explained
by Lawrence D'Oliveiro 15 Feb '18

15 Feb '18

Heard about the latest hot new trend on the Internet? Slightly disturbing, even? It’s splicing someone’s face into a video in place of that of an entirely unrelated person, to make it look like they’re the one in the scene. Except that the result doesn’t look fake at all--you’d think it was real. Naturally, Rule 34 applies. But here <https://www.youtube.com/watch?v=7XchCsYtYMQ> is a watchable, and entirely SFW, overview of how it all works. Oh, and the software for doing this is all over GitHub.

2 2

Manjaro at meeting
by Ian Young 15 Feb '18

15 Feb '18

I have been using Manjaro of late so could try to summon up something to say ~ IanY

2 1

Critical Telegram flaw under attack disguised malware as benign images
by Peter Reutemann 14 Feb '18

14 Feb '18

'Makers of the Telegram instant messenger have fixed a critical vulnerability that hackers were actively exploiting to install malware on users' computers, researchers said Tuesday. The flaw, which resided in the Windows version of the messaging app, allowed attackers to disguise the names of attached files, researchers from security firm Kaspersky Lab said in a blog post. By using the text-formatting standard known as Unicode, attackers were able to cause characters in file names to appear from right to left, instead of the left-to-right order that's normal for most Western languages.' -- source: https://arstechnica.com/information-technology/2018/02/telegram-app-purged-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft’s compiler-level Spectre fix shows how hard this problem will be to solve
by Peter Reutemann 14 Feb '18

14 Feb '18

'The Meltdown and Spectre attacks that use processor speculative execution to leak sensitive information have resulted in a wide range of software changes to try to limit the scope for harm. Many of these are operating system-level fixes, some of which depend on processor microcode updates. But Spectre isn't a simple attack to solve; operating system changes help a great deal, but application-level changes are also needed. Apple has talked about some of the updates it has made to the WebKit rendering engine, used in its Safari browser, but this is only a single application. Microsoft is offering a compiler-level change for Spectre. The "Spectre" label actually covers two different attacks. The one that Microsoft's compiler is addressing, known as "variant 1," concerns checking the size of an array: before accessing the Nth element of an array, code should check that the array has at least N elements in it. Programmers using languages like C and C++ often have to write these checks explicitly. Other languages, like JavaScript and Java, perform them automatically. Either way, the test has to be done; attempts to access array members that don't exist are a whole class of bugs all on their own. [...] In fairness, Microsoft does warn that "there is no guarantee that all possible instances of variant 1 will be instrumented," but as Kocher's examination shows, it's not simply that some Spectre-vulnerable code will escape the compiler's fixes. Much—and perhaps even most—Spectre-vulnerable code will escape. And even if it were only a few instances, bad guys would be able to locate the unprotected routines and focus their attacks accordingly.' -- source: https://arstechnica.com/gadgets/2018/02/microsofts-compiler-level-spectre-f… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Would You Let A Site Mine Cryptocurrency In Return For Blocking Ads?
by Rowan Schischka 14 Feb '18

14 Feb '18

> What do you think: is it a fair trade? Not fair trade but fair game. The technology used is coinhive and anybody at any level of computer skill can block it. Firefox's noscript plugin and Pi-hole are both effective.

1 0

Linux Journal: Best Linux Distribution
by Peter Reutemann 14 Feb '18

14 Feb '18

'We started things off with Best Linux Distribution, and nearly 10,000 readers voted. The winner was Debian, with many commenting "As for servers, Debian is still the best" or similar. One to watch that is rising in the polls is Manjaro (7 percent), which is independently based on the Arch Linux. Manjaro is a favorite for Linux newcomers and is known for its user-friendliness and accessibility. And, now for the top three LJ winners: Debian (33 percent), openSUSE (12 percent), and Fedora (11 percent).' -- source: https://linux.slashdot.org/story/18/02/14/1850259 Does anyone want to give Manjaro a spin at the next meeting? Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Would You Let A Site Mine Cryptocurrency In Return For Blocking Ads?
by Lawrence D'Oliveiro 14 Feb '18

14 Feb '18

This was inevitable, really. Salon.com <https://arstechnica.com/information-technology/2018/02/salon-to-ad-blockers…> now asks you, when it notices you are running an ad-blocker, if you would like to contribute some CPU to running a cryptocurrency miner for them instead. What do you think: is it a fair trade? Is it a sustainable revenue model, at least better than doing the mining without asking your permission?

2 1

The Most Popular Linux Desktop Programs
by Peter Reutemann 14 Feb '18

14 Feb '18

'The most recent Linux Questions poll results are in. Steven J. Vaughan-Nichols, writing for ZDNet: LinuxQuestions, one of the largest internet Linux groups with 550,000 members, has just posted the results from its latest survey of desktop Linux users. In the always hotly-contested Linux desktop environment survey, the winner was the KDE Plasma Desktop. It was followed by the popular lightweight Xfce, Cinnamon, and GNOME. If you want to buy a computer with pre-installed Linux, the Linux Questions crew's favorite vendor by far was System76. Numerous other computer companies offer Linux on their PCs. These include both big names like Dell and dedicated small Linux shops such as ZaReason, Penguin Computing, and Emperor Linux. Many first choices weren't too surprising. For example, Linux users have long stayed loyal to the Firefox web browser, and they're still big fans. Firefox beat out Google Chrome by a five-to-one margin. And, as always, the VLC media player is far more popular than any other Linux media player. For email clients, Mozilla Thunderbird remains on top. That's a bit surprising given how Thunderbird's development has been stuck in neutral for some time now. When it comes to text editors, I was pleased to see vim -- my personal favorite -- win out over its perpetual rival, Emacs. In fact, nano and Kate both came ahead of Emacs.' -- source: https://linux.slashdot.org/story/18/02/13/1652238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Active Browser Tabs Vs Active Browser Windows
by Lawrence D'Oliveiro 14 Feb '18

14 Feb '18

I have noticed some interesting behaviour with video playback on various websites, at least with Firefox. Videos on the NZ Herald website, for example, don’t start playing until the tab becomes the active one in the window. Also on YouTube, sometimes after an ad, there is a display inviting you to take part in some kind of survey. This displays for a fixed amount of time, but that time only accumulates while the tab is active -- make it inactive, and the time counter stops until it becomes active again. *But* ... the active tab is still considered to be active even if the window is not the frontmost one. This means if you want to do something else while waiting for a YouTube ad to finish playing (with the sound off, of course) and the extra display to disappear, you just have to do it in an entirely separate window.

1 0