- wlug - list.wlug.org.nz

Addendum to last night's presentation on RPi projects
by Peter Reutemann 29 Aug '17

29 Aug '17

Hi everyone This was the other sensor project that I came across, using multiple arduino sensors to monitor humidity/temperature, collecting them with a RF receiver (though I wouldn't use xively.com to collect the data): https://computers.tutsplus.com/tutorials/building-a-wireless-sensor-network… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

How the NSA Identified Satoshi Nakamoto
by Peter Reutemann 29 Aug '17

29 Aug '17

'The 'creator' of Bitcoin, Satoshi Nakamoto, is the world's most elusive billionaire. Very few people outside of the Department of Homeland Security know Satoshi's real name. In fact, DHS will not publicly confirm that even THEY know the billionaire's identity. Satoshi has taken great care to keep his identity secret employing the latest encryption and obfuscation methods in his communications. Despite these efforts (according to my source at the DHS) Satoshi Nakamoto gave investigators the only tool they needed to find him -- his own words. Using stylometry one is able to compare texts to determine authorship of a particular work. Throughout the years Satoshi wrote thousands of posts and emails and most of which are publicly available. According to my source, the NSA was able to the use the 'writer invariant' method of stylometry to compare Satoshi's 'known' writings with trillions of writing samples from people across the globe. By taking Satoshi's texts and finding the 50 most common words, the NSA was able to break down his text into 5,000 word chunks and analyse each to find the frequency of those 50 words. This would result in a unique 50-number identifier for each chunk. The NSA then placed each of these numbers into a 50-dimensional space and flatten them into a plane using principal components analysis. The result is a 'fingerprint' for anything written by Satoshi that could easily be compared to any other writing. The NSA then took bulk emails and texts collected from their mass surveillance efforts. First through PRISM and then through MUSCULAR, the NSA was able to place trillions of writings from more than a billion people in the same plane as Satoshi's writings to find his true identity. The effort took less than a month and resulted in positive match' -- source: https://tech.slashdot.org/story/17/08/28/1725232 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

A Year After Mirai: DVR Torture Chamber Test Shows Two Minutes Between Exploits
by Peter Reutemann 29 Aug '17

29 Aug '17

'Over two days, the Internet Storm Center connected a default configured DVR to the internet, and rebooted it every 5 minutes in order to allow as many bots as possible to infect it. They detected about one successful attack (using the correct password xc3511) every 2 minutes. Most of the attackers were well known vulnerable devices. A year later, what used to be known as the "Mirai" botnet has branched out into many different variants. But it looks like much hyped "destructive" variants like Brickerbot had little or no impact.' -- source: https://it.slashdot.org/story/17/08/28/1812242 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

One of 1st-known Android DDoS malware infects phones in 100 countries
by Peter Reutemann 29 Aug '17

29 Aug '17

'Last year, a series of record-setting attacks hitting sites including KrebsOnSecurity and a French Web host underscored a new threat that had previously gone overlooked: millions of Internet-connected digital video recorders and similar devices that could easily be wrangled into botnets that challenged the resources of even large security services. Now, for one of the first times, researchers are reporting a new platform recently used to wage powerful denial-of-service attacks that were distributed among hundreds of thousands of poorly secured devices: Google's Android operating system for phones and tablets. The botnet was made up of some 300 apps available in the official Google Play market. Once installed, they surreptitiously conscripted devices into a malicious network that sent junk traffic to certain websites with the goal of causing them to go offline or become unresponsive.' -- source: https://arstechnica.com/information-technology/2017/08/first-known-android-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

How to Scan Your Linux Computer for Viruses and Rootkits
by rowan schischka 28 Aug '17

28 Aug '17

>Any volunteers? Especially people that have used one of these tools before. Unfortunately I am not in Hamilton atm, but if i was I would demonstrate an automated way to scan and alert the user. The tools are very straight forward to use. The hardest part I had was setting up local mail and sending a report to gmail without gmail marking it as spam.

1 0

Raspberry Pi - Raspbian released based on Debian 9 - Stretch
by Ian Stewart 27 Aug '17

27 Aug '17

Raspbian, the main distro for the Raspberry Pi, has now been released based on Debian 9 (Stretch). While this provides the benefits and enhancements of a more recent Linux release, another benefit is the updated products available in the Debian repository. You can download Raspian from https://www.raspberrypi.org/downloads/raspbian/ Raspbian Stretch with desktop Image with desktop based on Debian Stretch Version: August 2017 Release date: 2017-08-16 Kernel version: 4.9 Release notes: 2017-08-16: * Based on Raspbian Stretch (Debian version 9) * Version 60 of Chromium browser included * Version 3.0.1 of Sonic Pi included * Version 6.1.1 of RealVNC included * Version 0.17.4 of NodeRED included * Bluetooth audio routed via ALSA rather than Pulseaudio * SenseHAT extension added to Scratch 2 * Various desktop applications modified to prompt for sudo password if needed * lxinput control options for mouse speed simplified * lxpanel plugins moved into separate packages * Wireless firmware for Pi 3 and Pi 0W modified to address Broadpwn exploit * Latest kernel and firmware * Various small tweaks, bug fixes and theme modifications cheers, Ian.

2 1

How to Scan Your Linux Computer for Viruses and Rootkits
by Peter Reutemann 27 Aug '17

27 Aug '17

'Are you worried that your Linux computer may be infected with malware? Have you ever checked? While Linux systems tend to be less susceptible to malware than Windows, they can still be infected. Many times they’re less obviously compromised, too. There are a handful of excellent open-source tools to help you check if your Linux system has been the victim of malware. While no software is perfect, these three have a solid reputation and can be trusted to find most known threats.' -- source: https://www.maketecheasier.com/scan-linux-for-viruses-and-rootkits/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 5

A New Non-Money Oriented Crowdsourcing Platform Based On Code Contributions
by Peter Reutemann 27 Aug '17

27 Aug '17

An anonymous reader shares a new crowdfunding site built on open source principles to "remove the money element from project creation" so creators "don't have to take extreme actions such as quitting their jobs or compromising on their ideas because of investor demands. Because of the nature of crowdsourcer.io projects, project creators can remain as ambitious as funded projects and get all the contributors they need to make their idea a reality." >From the site: Crowdsourcer.io is an alternative crowd sourcing platform that allows developers and designers alike to create or join in on software related projects, build up their contribution and earn an income from the final product. Think of Crowdsourcer.io as something between open source software creation and Kickstarter start ups, a new crowd sourcing alternative, in its purest form" The site's creator recently answered questions on Reddit, saying they'd spent years fine-tuning the idea, and writing that "It's really focussed on people who don't want to quit their job to form their own software company, and don't want to become embroiled in debt or other financing." A note at the bottom of the site adds that "Crowdsourcer.io is young. We want your ideas!" -- source: https://developers.slashdot.org/story/17/08/27/0639253 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

screen with a scrollbuffer / scroll wheel support
by Peter Reutemann 25 Aug '17

25 Aug '17

Hi everyone Finally figured out (well, by that I mean googled) how to change the scrollbuffer for screen sessions (running + default setting): https://stackoverflow.com/questions/8760346/how-do-i-increase-the-scrollbac… And how to get the mouse scroll wheel working (works on mate-terminal): https://stackoverflow.com/questions/359109/using-the-scrollwheel-in-gnu-scr… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux expr command tutorial for beginners (with examples)
by Peter Reutemann 25 Aug '17

25 Aug '17

'Sometimes, while working on the command line (especially when dealing with a shell script), you may find yourself in a situation where you have to perform actions like searching for a substring in a string, finding its index, as well as other things like performing comparisons and arithmetic operations. For those who aren't in the know, there exists a command line utility - dubbed expr - that lets you do all this. In this tutorial, we will discuss the basics of this command along with some of the features it provides.' -- source: https://www.howtoforge.com/linux-expr-command/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0