- wlug - list.wlug.org.nz

SGI Desktop Clone Gets A New Version On Fedora
by Peter Reutemann 06 Jun '17

06 Jun '17

'Silicon Graphics workstations used the IRIX Interactive Desktop (formerly called Indigo Magic Desktop) for its IRIX operating system (based on UNIX System V with BSD extensions). "Anyone who remembers working on a SGI machine probably has fond memories of the Magic Desktop for IRIX," remembered one Slashdot reader in 2002. At the time a project called 5Dwm was working on a clone, and its work is still being continued by MaXX Interactive. Today Slashdot reader Daniel Mark shared the news that after "several years and many long nights," the company is announcing a new release for Fedora 25, adding that "more Linux Distributions support will be added over the coming days/weeks." They're calling it "something new and fresh in the Linux Desktop space." The MaXX Desktop is available in two versions, the free Community Edition (CE) which provides basic SGI Desktop experience and the commercially available Professional Edition (PE) that comes with support, CPU and GPU specific optimizations and a full SGI Desktop experience... So there is no surprise here, the MaXX Desktop is a highly tuned Workstation Environment for the Linux x86_64 and ia64 platforms. Multi-core processing, NVidia GPU specific optimizations are among the things that makes the MaXX Desktop so fast, light-weight and stable. ' -- source: https://slashdot.org/story/17/06/04/1535251 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Network Time Protocol Hardened To Protect Users From Spying, Increase Privacy
by Peter Reutemann 05 Jun '17

05 Jun '17

'The Internet Engineering Task Force has taken another small step in protecting everybody's privacy... As the draft proposal explains, the RFCs that define NTP have what amounts to a convenience feature: packets going from client to server have the same set of fields as packets sent from servers to clients... "Populating these fields with accurate information is harmful to privacy of clients because it allows a passive observer to fingerprint clients and track them as they move across networks". The header fields in question are Stratum, Root Delay, Root Dispersion, Reference ID, Reference Timestamp, Origin Timestamp, and Receive Timestamp. The Origin Timestamp and Receive Timestamp offer a handy example or a "particularly severe information leak". Under NTP's spec (RFC 5905), clients copy the server's most recent timestamp into their next request to a server – and that's a boon to a snoop-level watcher. The proposal "proposes backward-compatible updates to the Network Time Protocol to strip unnecessary identifying information from client requests and to improve resilience against blind spoofing of unauthenticated server responses." Specifically, client developers should set those fields to zero.' -- source: https://tech.slashdot.org/story/17/06/03/0422246 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu Touch Mobile OS Now Maintained By UBports
by Peter Reutemann 05 Jun '17

05 Jun '17

'UBports continues to be the leading community project for trying to let Ubuntu Touch live on and evolve under their direction... Among their recent achievements were acquiring more sponsors, all devices that were sold with Ubuntu Touch can now run with UBports' builds, they are working on their own version of Mozilla's AGPS Location Service to replace Canonical's GPS system, the Halium OS platform continues evolving, the Dekko email client is back under development, installation improvements are being worked on, they are still striving for Wayland support, and more. The UBports Patreon page has even raised enough to allow UBports founder Marius Gripsgard to work full-time on what they're calling "a beautiful, free and open-source mobile OS." Their recent community update announced that "we are seeing more activity on Ubuntu Touch than for a very long time, and that is really encouraging."' -- source: https://news.slashdot.org/story/17/06/04/0316204 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

US Supreme Court Victory for the Right to Tinker in Printer Cartridge Case
by Ian Stewart 01 Jun '17

01 Jun '17

"The [US] Supreme Court struck a blow today for your right to own the things you buy, reversing a lower court decision that had given patent owners the power to sue customers who paid in full for a patented item but then used it in a way the patent owner didn't care for. Together with Public Knowledge and R Street, EFF filed an amicus brief at the Supreme Court. We explained that the ability of patent owners to sell products into the stream of commerce while also writing a wishlist of anti-competitive restrictions, would be a disastrous expansion of patent law, hindering competition, innovation, and your freedom to tinker with and repair your own stuff. The Supreme Court agreed, explaining that when a patent owner "chooses to sell an item, that product is no longer within the limits of the monopoly and instead becomes the private individual property of the purchaser, with the rights and benefits that come along with ownership." The Court emphasized that, by default, people have every right to make, sell, and use things. The limited monopoly that the government bestows upon a patent owner is a deviation from the norm of free market competition and ownership of personal property, and is subject to important limits in order to protect the public interest. The Court explained that people who buy things are allowed to use and resell them without being sued under patent and copyright law, and explained that this freedom is necessary for commerce to function. The next logical step will be for courts to recognize that people who buy digital goods are owners of those goods, not mere licensees, and can resell and tinker with their digital goods to the same extent as purchasers of tangible property." See the Electronic Frontier Foundation (EFF) article for more details... https://www.eff.org/deeplinks/2017/05/supreme-court-victory-right-tinker-pr… [https://www.eff.org/files/issues/patents-2.png]<https://www.eff.org/deeplinks/2017/05/supreme-court-victory-right-tinker-pr…> Supreme Court Victory for the Right to Tinker in Printer Cartridge Case<https://www.eff.org/deeplinks/2017/05/supreme-court-victory-right-tinker-pr…> www.eff.org The Supreme Court struck a blow today [PDF] for yo Maybe the 11 remaining TPP countries will ensure that their agreement endorses this ruling ? cheers, Ian

2 1

Car Emissions Cheating: How It’s Done
by Lawrence D'Oliveiro 29 May '17

29 May '17

Researchers have been digging through car firmware from Volkswagen and Audi to get to the bottom of the emissions-testing scandal that broke a couple of years ago. Turns out the code was written by Bosch, and important information in the form of “function sheets” (documentation for what the firmware does) was not (officially) forthcoming from that company. But unofficial sources can be found on online forums frequented by vehicle-modding enthusiasts. <https://arstechnica.com/cars/2017/05/volkswagen-bosch-fiat-diesel-emissions…>

1 0

Creative Commons Staff Members Release New Free eBook
by Peter Reutemann 28 May '17

28 May '17

'Creative Commons staff-members Sarah Hinchliff Pearson and Paul Stacey have now published Made With Creative Commons, the awaited book they successfully funded on Kickstarter in 2015. "Made With Creative Commons is a book about sharing," explains the book's description. "It is about sharing textbooks, music, data, art, and more. People, organizations, and businesses all over the world are sharing their work using Creative Commons licenses because they want to encourage the public to reuse their works, to copy them, to modify them... But if they are giving their work away to the public for free, how do they make money? "This is the question this book sets out to answer. There are 24 in-depth examples of different ways to sustain what you do when you share your work. And there are lessons, about how to make money but also about what sharing really looks like -- why we do it and what it can bring to the economy and the world. Full of practical advice and inspiring stories, Made with Creative Commons is a book that will show you what it really means to share." There's free versions in PDF, ePub, and MOBI formats for downloading from the Creative Commons site, and there's also an edit-able version on Google Docs. A small Danish non-profit publisher named Ctrl+Alt+Delete Books is also publishing print copies of the book under a Creative Commons license "to ensure easy sharing," and is making the book available on Amazon or through the publisher's own web site.' -- source: https://news.slashdot.org/story/17/05/28/0130259 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Timers In systemd
by Lawrence D'Oliveiro 27 May '17

27 May '17

Was referred to this page <https://wiki.gentoo.org/wiki/Systemd> about enabling systemd as the init system in Gentoo. The section on “Timer services” I found particularly useful, as applicable to other distros running systemd: instead of a conventional crontab, you create .timer entries, and corresponding .service descriptions for them to invoke, in your ~/.local/share/systemd/user area. One advantage of this I can see is one less set of user files kept in /var. In fact, do this in conjunction with maildir format for user mail, and you no longer need to have any user files in /var. (That I can think of, anyway...)

1 0

Popularity Contests
by Lawrence D'Oliveiro 26 May '17

26 May '17

In the middle of another Phoronix flame war, someone posted links to a couple of interesting pages. What’s your favourite desktop environment? According to this <https://opensource.com/life/15/7/poll-preferred-desktop-environment>, GNOME is number one, with KDE not far behind. One-third of respondents use something else. Arch Linux offers some stats <https://www.archlinux.de/?page=FunStatistics> on popularity of desktop environments and other software among its users. Here GNOME and KDE add up to only about 50%. By the way, it’s clear from the numbers for browsers and text editors in the latter that lots of people use more than one.

1 0

UK Government May Push Anti-Encryption Laws After Election
by Lawrence D'Oliveiro 25 May '17

25 May '17

Not too surprising to discover that some parties in the UK might be using the Manchester attack as a pretext to push through laws to ban secure encryption <https://www.theregister.co.uk/2017/05/25/uk_to_push_antiencryption_laws_aft…>. As if such a ban would have helped uncover a perpetrator who, by all accounts, had already been reported to the authorities multiple times...

3 5

A wormable code-execution bug has lurked in Samba for 7 years. Patch now!
by Peter Reutemann 25 May '17

25 May '17

'Maintainers of the Samba networking utility just patched a critical code-execution vulnerability that could pose a severe threat to users until the fix is widely installed. The seven-year-old flaw, indexed as CVE-2017-7494, can be reliably exploited with just one line of code to execute malicious code, as long as a few conditions are met. Those requirements include vulnerable computers that (a) make file- and printer-sharing port 445 reachable on the Internet, (b) configure shared files to have write privileges, and (c) use known or guessable server paths for those files. When those conditions are satisfied, remote attackers can upload any code of their choosing and cause the server to execute it, possibly with unfettered root privileges depending on the vulnerable platform. "All versions of Samba from 3.5.0 onwards are vulnerable to a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it," Samba maintainers wrote in an advisory published Wednesday. They urged anyone using a vulnerable version to install a patch as soon as possible.' -- source: https://arstechnica.com/security/2017/05/a-wormable-code-execution-bug-has-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1