- wlug - list.wlug.org.nz

MPEG Founder Says the MPEG Business Model Is Broken
by Peter Reutemann 30 Jan '18

30 Jan '18

'Leonardo Chiariglione, the founder and chairman of MPEG, argues on his blog that the current MPEG business model is broken. He writes, "Thanks to [MPEG's] 'business model' that can be simply described as: produce standards having the best performance as a goal, irrespective of the IPR involved. Because MPEG standards are the best in the market and have an international standard status, manufacturers/service providers get a global market of digital media products, services and applications, and end users can seamless communicate with billions of people and access millions of services. Patent holders who allow use of their patents get hefty royalties with which they can develop new technologies for the next generation of MPEG standards. A virtuous cycle everybody benefits from." But, he argues, the MPEG model is now in crisis because the forthcoming AV1 video format from the Alliance for Open Media means that "everybody realizes that the old MPEG business model is broke, all the investments (collectively hundreds of millions USD) made by the industry for the new video codec [HEVC] will go up in smoke and AOM's royalty free model will spread to other business segments as well." Chiariglione goes on to explain what can be done: "The first action is to introduce what I call 'fractional options.' ISO envisages two forms of licensing: Option 1, i.e. royalty free and Option 2, i.e. FRAND, which is taken to mean 'with undetermined license.' We could introduce fractional options in the sense that a proposer could indicate that the technology be assigned to a specifically identified profile with an 'industry license' (defined outside MPEG) that does not contain monetary values. For instance, one such license could be 'no charge' (i.e. Option 1), another could be targeted to the OTT market etc." "The second action, not meant to be alternative to the first, is to streamline the MPEG standard development process. Within this a first goal is to develop coding tools with 'clear ownership,' unlike today's tools which are often the result of contributions with possibly very different weights. A second goal is not to define profiles in MPEG. A third goal could be to embed in the standard the capability to switch coding tools on and off."' -- source: https://news.slashdot.org/story/18/01/30/0419222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Is This The Hawaii Civil Defence Missile Alert UI?
by Lawrence D'Oliveiro 30 Jan '18

30 Jan '18

Remember the alert about the incoming missile in Hawaii that turned out to be nonsense? This <https://arstechnica.com/information-technology/2018/01/the-interface-to-sen…> is apparently what the user interface looks like for the system that sends out both test and genuine alerts. It looks like a web page with a random assortment of links. Just off the top of my head, not claiming to be a UI expert here, but I would have a big title across the top of the screen saying either “TEST MODE” or “LIVE MODE” (the latter red, and blinking). Then have a single set of options below, appropriate to the active mode. Even go one better, and do what Japanese railway locomotive drivers do as they see signs at the side of the track: say out loud what the signs mean, before taking appropriate action.

2 1

The SCO Vs IBM Zombie Shambles On
by Peter Reutemann 29 Jan '18

29 Jan '18

'At the end of last October, the 10th Circuit issued an opinion overturning the lower court's summary judgement in favor of IBM on one of SCO's claims, sending it back to the lower court for trial. Shortly thereafter, IBM filed for a re-hearing en banc. On January 2nd, the 10th circuit essentially denied IBM's request, issuing a slightly revised opinion with the same conclusions and result. The charge being reheard accuses IBM of "stealing and improperly using [SCO's] source code to strengthen its own operating system, thereby committing the tort of unfair competition by means of misappropriation" -- though that charged is based on an implied duty that SCO says IBM incurred by entering into a development relationship with SCO. "SCO believes that IBM merely pretended to go along with the arrangement in order to gain access to Santa Cruz's coveted source code." The court's 46-page document adds that "We are now almost fifteen years into this litigation."' -- source: https://yro.slashdot.org/story/18/01/29/0213203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Intel Told Chinese Firms of Meltdown Flaws Before the US Government
by Peter Reutemann 29 Jan '18

29 Jan '18

'According to The Wall Street Journal, Intel initially told a handful of customers about the Meltdown and Spectre vulnerabilities, including Chinese tech companies like Alibaba and Lenovo, before the U.S. government. As a result, the Chinese government could have theoretically exploited the holes to intercept data before patches were available. Engadget reports: An Intel spokesman wouldn't detail who the company had informed, but said that the company couldn't notify everyone (including U.S. officials) in time because Meltdown and Spectre had been revealed early. Lenovo said the information was protected by a non-disclosure agreement. Alibaba has suggested that any accusations of sharing info with the Chinese government was "speculative and baseless," but this doesn't rule out officials intercepting details without Alibaba's knowledge. There's no immediate evidence to suggest that China has taken advantage of the flaws, but that's not the point -- it's that the U.S. government could have helped coordinate disclosures to ensure that enough companies had fixes in place. ' -- source: https://it.slashdot.org/story/18/01/29/0520222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Are the BSDs Dying? Some Security Researchers Think So
by Peter Reutemann 26 Jan '18

26 Jan '18

'The BSDs have lost the battle for mindshare to Linux, and that may well bode ill for the future sustainability of the BSDs as viable, secure operating systems, writes CSO's JM Porup. The reason why is a familiar refrain: more eyeballs mean more secure code. Porup cites the work of Ilja von Sprundel, director of penetration testing at IOActive, who, noting the "small number of reported BSD kernel vulnerabilities compared to Linux," dug into BSD source code. His search 'easily' turned up about 115 kernel bugs. Porup looks at the relative security of OpenBSD, FreeBSD and NetBSD, the effect on Mac OS, and why, despite FreeBSD's relative popularity, OpenBSD may be the most likely to survive.' -- source: https://bsd.slashdot.org/story/18/01/26/1636229 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Ubuntu 18.04 LTS Will Default To The X.Org Stack, Not Wayland
by Peter Reutemann 26 Jan '18

26 Jan '18

'Five years after their original goal to ship Ubuntu with Wayland, Ubuntu 17.10 transitioned to using the Wayland display system by default as part of their transition to GNOME Shell as the default desktop. But with the upcoming Ubuntu 18.04 LTS release, Canonical has decided to transition back to the X.Org Server. Their reasoning for moving to an X.Org Server by default is better support for screen sharing, remote desktop, and better recovery from crashes. But for those interested the Wayland session will still be available as a log-in option.' -- source: https://news.slashdot.org/story/18/01/26/1437212 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Burger King Explains Net Neutrality
by Lawrence D'Oliveiro 26 Jan '18

26 Jan '18

Burger King uses “Whopper Neutrality” to illustrate why service providers shouldn’t play favourites <https://www.theregister.co.uk/2018/01/24/burger_king_net_neutrality/>.

1 0

Senator Asks FBI Director To Justify His 'Ill-Informed' Policy Proposal For Encryption
by Peter Reutemann 26 Jan '18

26 Jan '18

'In a speech earlier this month, FBI Director Christopher Wray said the inability of law enforcement authorities to access data from electronic devices due to powerful encryption is an "urgent public safety issue." He proposed that Silicon Valley companies should add a backdoor to their encryption so that they could both "provide data security and permit lawful access with a court order." One person is not amused by Wray's proposal. Senator Ron Wyden criticized Wray on Thursday for not consulting him before going public with the proposal for encryption. Wyden said today, via Gizmodo: Your stated position parrots the same debunked arguments espoused by your predecessors, all of whom ignored the widespread and vocal consensus of cryptographers. For years, these experts have repeatedly stated that what you are asking for is not, in fact, possible. Building secure software is extremely difficult, and vulnerabilities are often introduced inadvertently in the design process. Eliminating these vulnerabilities is a mammoth task, and experts are unified in their opinion that introducing deliberate vulnerabilities would likely create catastrophic unintended consequences that could debilitate software functionality and security entirely. [...] I would like to learn more about how you arrived at and justify this ill-informed policy proposal. Please provide me with a list of the cryptographers with whom you've personally discussed this topic since our July 2017 meeting and specifically identify those experts who advised you that companies can feasibly design government access features into their products without weakening cybersecurity. Please provide this information by February 23, 2018.' -- source: https://yro.slashdot.org/story/18/01/25/161245 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

New Unit Of Time: The “Flick”
by Lawrence D'Oliveiro 26 Jan '18

26 Jan '18

Oculus is proposing a new unit for measuring time for audio/video/VR purposes: it is 1/705,600,000 of a second. This denominator was chosen to have sufficient integer factors to allow it to exactly represent various common frame/sample rates as whole numbers of flicks (which cannot be done with the usual SI divisions). And also, from the looks of it, possible future higher multiples of those rates. <https://arstechnica.com/gaming/2018/01/oculus-creates-a-new-open-source-uni…>

1 0

Chrome 64 Released With Stronger Popup Blocker, Spectre Mitigations
by Peter Reutemann 25 Jan '18

25 Jan '18

'Google on Thursday pushed an update to its marquee Web browser Chrome, now at v64, which offers a handful of new features including an improved ad blocker. From a report: Most of the new features included with Chrome 64 are meant to improve the browser's support for the ever-changing web standards that drive the modern Internet. For example, Chrome 64 is choke full of support for new browser APIs, new CSS properties, new JavaScript (ECMAScript) features, and changes to Chrome's V8 JavaScript engine. [...] Other big changes that shipped with Chrome 64 are on the browser's security side. For starters, Chrome 64 includes mitigations against the web-exploitable Spectre flaw. Further, Chrome 64 also comes with a bolstered popup blocker that can now block tab-under behavior, being much more efficient at blocking malvertising redirects.' -- source: https://tech.slashdot.org/story/18/01/25/1717226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0