- wlug - list.wlug.org.nz

Razors Edge database
by Roderick Aldridge 16 Dec '16

16 Dec '16

Does anybody know about running Razors Edge database under Linux or anybody who does? I successfully installed Citrix Receiver and logged into the database and ran a Report to get information, but could not save it or export it. Although I used the Linux Debian Citrix Receiver the options to save were all Windows destinations. when I tried to save to the computer option the message says The operation has been cancelled due to restrictions in effect on the computer. Please contact your system administrator. This could be a permissions problem. Any help welcome. Roderick Aldridge.

1 0

0-days hitting Fedora and Ubuntu open desktops to a world of hurt
by Peter Reutemann 16 Dec '16

16 Dec '16

'If you run a mainstream distribution of Linux on a desktop computer, there's a good chance security researcher Chris Evans can hijack it when you do nothing more than open or even browse a specially crafted music file. And in the event you're running Chrome on the just-released Fedora 25, his code-execution attack works as a classic drive-by.' -- source: http://arstechnica.com/security/2016/12/fedora-and-ubuntu-0days-show-that-h… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Yahoo admits it’s been hacked again, and 1 billion accounts were exposed
by Peter Reutemann 15 Dec '16

15 Dec '16

'On December 14, Yahoo announced that after an investigation into data provided by law enforcement officials in November, the company and outside forensics experts have determined that there was in fact a previously undetected breach of data from more than 1 billion user accounts. The breach took place in August 2013 and is apparently distinct from the previous mega-breach revealed this fall—one Yahoo claims was conducted by a "state-sponsored actor." The information accessed from potentially exposed accounts "may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers," Yahoo's chief information security officer, Bob Lord, reported in the statement issued by the company. "The investigation indicates that the stolen information did not include passwords in clear text, payment card data, or bank account information. Payment card data and bank account information are not stored in the system the company believes was affected."' -- source: http://arstechnica.com/security/2016/12/yahoo-reveals-1-billion-more-accoun… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

OpenStreetView
by Lawrence D'Oliveiro 14 Dec '16

14 Dec '16

You’ve heard of OpenStreetMap, the (very popular) project to compile mapping information for the whole world under a freely shareable, open licence; now there is OpenStreetView, which attempts to do the same for street-level photos <http://www.theregister.co.uk/2016/12/14/open_source_insider_openstreetview_…>.

1 0

First Version of Sandboxed Tor Browser Available
by Peter Reutemann 12 Dec '16

12 Dec '16

'To protect Tor users from FBI hacking tools that include all sorts of Firefox zero-days, the Tor Project started working on a sandboxed version of the Tor Browser in September. Over the weekend, the Tor Project released the first alpha version of the sandboxed Tor Browser. "Currently, this version is in an early alpha stage, and only available for Linux," reports BleepingComputer. "There are also no binaries available, and users must compile it themselves from the source code, which they can grab from here." The report notes: "Sandboxing is a security mechanism employed to separate running processes. In computer security, sandboxing an application means separating its process from the OS, so vulnerabilities in that app can't be leveraged to extend access to the underlying operating system. This is because the sandboxed application works with its own separate portion of disk and memory that isn't linked with the OS."' -- source: https://yro.slashdot.org/story/16/12/12/2042225 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Mint 18.1 'Serena' BETA Ubuntu-based Operating System Now Available For Download
by Peter Reutemann 05 Dec '16

05 Dec '16

'Feeling fatigued by Windows 10 and its constant updates and privacy concerns? Can't afford one of those beautiful new MacBook Pro laptops? Don't forget, Linux-based desktop operating systems are just a free download away, folks! If you do decide to jump on the open source bandwagon, a good place to start is Linux Mint. Both the Mate and Cinnamon desktop environments should prove familiar to Windows converts, and since it is based on Ubuntu, there is a ton of compatible packages. Today, the first beta of Linux Mint 18.1 'Serena' becomes available for download.' -- source: https://linux.slashdot.org/story/16/12/04/236236 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Canonical Sues Cloud Provider Over 'Unofficial' Ubuntu Images
by Peter Reutemann 05 Dec '16

05 Dec '16

'Canonical posted Thursday that they've been in a dispute with "a European cloud provider" over the use of their own homespun version of Ubuntu on their cloud servers. Their implementation disables even the most basic of security features and Canonical is worried something bad could happen and it'd reflect badly back on them... They said they've spent months trying to get the unnamed provider to use the standard Ubuntu as delivered to other commercial operations to no avail. Canonical feels they have no choice but to "take legal steps to remove these images." They're sure Red Hat and Microsoft wouldn't be treated like this. Mark Shuttleworth, the founder of Ubuntu, wrote in his blog post that Ubuntu is "the leading cloud OS, running most workloads in public clouds today," whereas these homegrown images "are likely to behave unpredictably on update in weirdly creative and mysterious ways... We hear about these issues all the time, because users assume there is a problem with Ubuntu on that cloud; users expect that 'all things that claim to be Ubuntu are genuine', and they have a right to expect that... "To count some of the ways we have seen home-grown images create operational and security nightmares for users: clouds have baked private keys into their public images, so that any user could SSH into any machine; clouds have made changes that then blocked security updates for over a week... When things like this happen, users are left feeling let down. As the company behind Ubuntu, it falls to Canonical to take action."' -- source: https://news.slashdot.org/story/16/12/04/2235251 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ask Slashdot: What's the Best Linux Laptop?
by Peter Reutemann 04 Dec '16

04 Dec '16

'Long-Time Slashdot reader sconeu is finally replacing his 10-year-old Toshiba Satellite laptop, and needs suggestions on the best current laptops for running Linux. I'm looking to run some flavor of Linux (probably KDE-based UI, but not mandatory) while using a virtual machine to run Windows 7 (for stuff needed for work). For me personally, battery life and weight are more important than raw power. I'm not going to be running games on this. I've been considering an XPS 13 Developer Edition, or something from System76, ZaReason or Emperor Linux. What laptop do you use? Do you have any suggestions? It's your chance to share useful information, recommendations, and your own experiences with various brands of laptop. So leave your best answers in the comments. What's the best Linux laptop? ' -- source: https://linux.slashdot.org/story/16/12/03/0727258 Personally, I've been very happy with my Dell Latitude 6430u at work in conjunction with Linux Mint 17. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Devuan's Systemd-Free Linux Hits Beta 2
by Peter Reutemann 04 Dec '16

04 Dec '16

'Long-time Slashdot reader Billly Gates writes, "For all the systemd haters who want a modern distro feel free to rejoice. The Debian fork called Devuan is almost done, completing a daunting task of stripping systemd dependencies from Debian." From The Register: Devuan came about after some users felt [Debian] had become too desktop-friendly. The change the greybeards objected to most was the decision to replace sysvinit init with systemd, a move felt to betray core Unix principles of user choice and keeping bloat to a bare minimum. Supporters of init freedom also dispute assertions that systemd is in all ways superior to sysvinit init, arguing that Debian ignored viable alternatives like sinit, openrc, runit, s6 and shepherd. All are therefore included in Devuan. Devuan.org now features an "init freedom" logo with the tagline, "watching your first step. Their home page now links to the download site for Devuan Jessie 1.0 Beta2, promising an OS that "avoids entanglement".' -- source: https://linux.slashdot.org/story/16/12/04/0142242 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Easing Into That Leap-Second...
by Lawrence D'Oliveiro 02 Dec '16

02 Dec '16

Google is offering time servers that will help you get over the upcoming leap-second hump. Instead of having a day with 61 seconds in it, their clock will run 0.0014% slower across a twenty-hour interval with the moment of the leap second in the middle. At the end of that interval, your clock will be correctly in sync with UTC again. <http://www.theregister.co.uk/2016/12/02/google_public_ntp_servers/>

1 0