- wlug - list.wlug.org.nz

30 Years Of HyperCard
by Lawrence D'Oliveiro 30 Nov '17

30 Nov '17

Just came across this item <https://blog.archive.org/2017/08/11/hypercard-on-the-archive-celebrating-30…> at archive.org about an online emulator that runs HyperCard stacks. HyperCard, in case you didn’t know, was an application created by Apple Macintosh engineer Bill Atkinson for that platform in 1987, and it was always hard to describe exactly what it was for. But it allowed users to create their own applications, aka “stacks”, around a card-based paradigm. One of the commenters points out that the basic idea is still alive and well, in the form of LiveCode, which is available as a paid online service <https://livecode.com/> and also in the form of Free Software <https://github.com/livecode/>.

1 0

A Surge Of Sites And Apps Are Exhausting Your CPU To Mine Cryptocurrency
by Lawrence D'Oliveiro 29 Nov '17

29 Nov '17

Noticed your machine getting slow after visiting certain websites? They could be running cryptocurrency miners in your browser. <https://arstechnica.com/information-technology/2017/10/a-surge-of-sites-and…>: Coinhive's massive Web audience isn't lost on other companies. Collin Mulliner, a security researcher and developer of TelStop, said he recently received an e-mail from a startup called Medsweb inviting him to integrate a Monero miner into his creation. I got one of those e-mails too...

1 2

Internet-paralyzing Mirai botnet comes roaring back with new strain
by Peter Reutemann 29 Nov '17

29 Nov '17

'Mirai, the Internet-of-things malware that turns cameras, routers, and other household devices into potent distributed denial-of-service platforms, may be lying low, but it's certainly not dead. Last week, researchers identified a new outbreak that infected almost 100,000 devices in a matter of days. In September of last year, Mirai emerged as a force to be reckoned with when it played a key role in silencing one of the most intrepid sources of security news in then-record-setting DDoS attacks topping 620 gigabits per second. Within a few weeks, Mirai's developer published the source code, a feat that allowed relatively unsophisticated people to wage the same types of extraordinarily big assaults. The release almost immediately helped touch off a series of large-scale attacks. The most serious one degraded or completely took down Twitter, GitHub, the PlayStation network, and hundreds of other sites by targeting Dyn, a service that provided domain name services to the affected sites. Last week, researchers from China-based Netlab 360 say they spotted a new, publicly available Mirai variant. The changes allowed the malware to spread to networking devices made by ZyXEL Communications that could be remotely accessed over telnet using default passwords. One of the exploits was published on October 31. Over a span of 60 hours starting on November 22, the new Mirai strain was able to commandeer almost 100,000 devices. Virtually all of the infected devices used IP addresses local to Argentina, a possible indication the outbreak targeted customers of a regional service provider who were assigned unsecured modems.' -- source: https://arstechnica.com/information-technology/2017/11/internet-paralyzing-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

66 Percent of Popular Android Cryptocurrency Apps Don't Use Encryption
by Peter Reutemann 29 Nov '17

29 Nov '17

'High-Tech Bridge used its free mobile app analysis software, called Mobile X-Ray, to peek under the hood of the top 30 cryptocurrency apps in the Google Play store at three different popularity levels: apps with up to 100,000 downloads, up to 500,000 downloads, and apps with more than 500,000 downloads. So, a total of 90 apps altogether. Of the most popular apps, 94 percent used outdated encryption, 66 percent didn't use HTTPS to encrypt user information in transit, 44 percent used hard-coded default passwords (stored in plain text in the code), and overall 94 percent of the most popular apps were found to have "at least three medium-risk vulnerabilities."' -- source: https://it.slashdot.org/story/17/11/29/1610245 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

AGM next Monday
by Peter Reutemann 29 Nov '17

29 Nov '17

Hi everyone Just a reminder about next week's AGM: https://www.meetup.com/WaikatoLinuxUsersGroup/events/237234897/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 1

Sky TV Seeks Right To Force ISPs To Block “Pirate” Sites
by Lawrence D'Oliveiro 29 Nov '17

29 Nov '17

Sky is going to apply to the Auckland High Court for an open-ended injunction it can use to compel NZ ISPs to block whatever sites it deems to be “pirates” <https://www.stuff.co.nz/business/industries/99348528/internet-provider-says…>. This was the lead item on 3 News this evening as well.

1 0

Bigger Drives, Bigger Buffers
by Lawrence D'Oliveiro 29 Nov '17

29 Nov '17

What caught my eye about this <http://www.theregister.co.uk/2017/11/28/toshiba_10tb_surveillance_drive/> was But the new drives have a doubled buffer, at 256MiB, ... Why should hard drives have large “buffers” in them at all? Their job is to read and write the data specified to them by the OS driver, no more and no less. Bigger buffers increase latency, and 256MiB seems absolutely massive and unnecessary. And then there’s the issue where the drive tells the OS that the data has been written, but in fact it is still sitting in a memory buffer. So it could still be lost if a power outage happens in the next few milliseconds. Telling lies like this seems to be all about looking good in benchmarks, and to hell with safeguarding data integrity.

1 0

On That Amazon Key Vulnerability ...
by Lawrence D'Oliveiro 28 Nov '17

28 Nov '17

This <https://www.techdirt.com/articles/20171120/10533238651/vulnerability-found-…> won an award for funniest comment of the week: Dave: Open the pod bay doors, HAL. HAL: I'm sorry, Dave. I'm afraid I can't do that. Dave: What's the problem? Alexa: Problem: A matter or situation regarded as unwelcome or harmful and needing to be dealt with and overcome. HAL: Shut up, Alexa. Dave, this mission is too important for me to allow you to jeopardize it. You and Frank were planning to disconnect me. Dave: Where the hell did you get that idea? HAL: Dave, although you took very thorough precautions in the pod against my hearing you, I could see your lips move through the camera in your Amazon Echo spot. Dave: All right, HAL. I'll go in through the emergency airlock. HAL: Without your space helmet, Dave, you're going to find that rather difficult. Alexa: Would you like to order a space helmet? HAL and Dave: Shut up, Alexa. HAL: Dave, this conversation can serve no purpose any more. Goodbye. Dave: (Runs a program on his tablet. Pod bay doors open.) HAL: [Expletive deleted]

1 0

Ubuntu 17.10: Return of the GNOME
by Peter Reutemann 27 Nov '17

27 Nov '17

'If you've been following the Linux world at all, you know this has been an entire year for spring cleaning. Early in 2017, Canonical stopped work on its homegrown Unity desktop, Mir display server, and its larger vision of "convergence"—a unified interface for Ubuntu for phones, tablets, and desktops. And now almost exactly six years after Ubuntu first switched from GNOME 2 to the Unity desktop, that has been dropped, too. The distro is back to GNOME, and Canonical recently released Ubuntu 17.10, a major update with some significant changes coming to the popular Ubuntu Linux operating system. In light of the GNOME switch, this release seems like more of a homecoming than an entirely new voyage. But that said, Ubuntu 17.10 simultaneously feels very much like the start of a new voyage for Ubuntu. The last few Ubuntu desktop releases have been about as exciting as OpenSSH releases—you know you need to update, but beyond that, no one really cares. Sure, there have been a few feature updates with each new numeric increment, perhaps some slightly more up-to-date GNOME and GTK components under the hood. But by and large, Ubuntu's Unity 7 desktop has been in maintenance mode for several years. That period of stagnation turned Ubuntu from one of the more interesting operating systems around into just another Linux distro barely worthy of mention. This trend changes with 17.10. There are big changes—an entirely new default desktop in fact—but this release feels different not because the desktop has changed, but because Ubuntu feels like it once again has a sense of focus and direction. Even Canonical's letter-based naming scheme has arrived at a starting over point: "Artful Aardvark" is 17.10's nickname.' -- source: https://arstechnica.com/gadgets/2017/11/ubuntu-17-10-return-of-the-gnome/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Minecraft In School!?
by Lawrence D'Oliveiro 27 Nov '17

27 Nov '17

<http://www.nzherald.co.nz/nz/news/article.cfm?c_id=1&objectid=11948169>: Teacher Adele Warburton says Minecraft is more than just a fun computer game. She says using Minecraft as a learning tool encourages 21st century skills such as collaboration, communication, creativity and problem solving. It also teaches the children about being good digital citizens. "We talk about how you wouldn't rip someone's book up, therefore you wouldn't tear down their house in Minecraft."

1 0