- wlug - list.wlug.org.nz

Finding Differences Between Binary Files
by Lawrence D'Oliveiro 14 Dec '15

14 Dec '15

Hi folks. As mentioned in passing last night, diff(1) isn’t much help for tracking down differences between two non-text files: all it will say is the files differ. However, there is a way to get detail on the differences, and that is to use a hex dump command like xxd(1) to produce text output from those binary files, and diff that text output instead. Thus, instead of diff binfile1 binfile2 you do diff <(xxd binfile1) <(xxd binfile2) This will quickly narrow down runs of changed bytes, and possibly even small sections of inserted or deleted bytes as well.

1 0

Raspberry π As A Thin Client?
by Lawrence D'Oliveiro 14 Dec '15

14 Dec '15

Citrix has posted a demo of a Raspberry π giving smooth performance running a thin client OS. <http://www.theregister.co.uk/2015/12/14/vdi_comes_to_the_raspberry_pi/> A game-changer for VDI?

1 0

MIT Creates Tor Alternative That Floods Networks With Fake Data
by Peter Reutemann 13 Dec '15

13 Dec '15

"An anonymous reader writes with word that MIT researchers "created an alternative to Tor, a network messaging system called Vuvuzela that pollutes the network with dummy data so the NSA won't know who's talking to who." Initial tests show the systems overhead adding a 44-second delay, but the network can work fine and preserve anonymity even it has more than 50% of servers compromised." -- source: http://yro.slashdot.org/story/15/12/13/1522224 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 2

Firefox OS smartphones are dead
by Peter Reutemann 12 Dec '15

12 Dec '15

The phone ecosystem just got smaller: "Mozilla is ending its plan to build an OS for smartphones. Today at Mozilla's "Mozlando" developer event, the company announced that it would stop developing and selling Firefox OS smartphones. " -- source: http://arstechnica.com/gadgets/2015/12/firefox-os-smartphones-are-dead/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

How To Win Friends And Influence People
by Lawrence D'Oliveiro 12 Dec '15

12 Dec '15

And show your appreciation to open-source developers. <https://github.com/JuliaLang/IJulia.jl/issues/398> Or not...

3 2

Is Your Son A Computer Hacker?
by Lawrence D'Oliveiro 10 Dec '15

10 Dec '15

A guide for the perplexed. As in, if you weren’t perplexed before reading this, you will be after <http://www.adequacy.org/stories/2001.12.2.42056.2147.html>. Watch out for that nasty Lunix and that devil incarnate, Linyos Torovoltos! Seems like there are some other similar gems to be found on that site, all dating from the early ’00s. Nice that they keep it online.

1 0

Let's Encrypt Is Now In Public Beta
by Peter Reutemann 03 Dec '15

03 Dec '15

"As of today, Let's Encrypt is in Public Beta. If you're comfortable running beta software that may have a few bugs and rough edges, you can use it to instantly obtain and install certificates for any HTTPS website or TLS service." -- source: http://yro.slashdot.org/story/15/12/03/2016238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

It’s Here: The Internet Of Wrongs
by Lawrence D'Oliveiro 03 Dec '15

03 Dec '15

One of the presentations at the upcoming Kiwicon in Wellington is going to be about a device built out of a Raspberry π Zero using “nothing more than off-the-shelf components and "questionable life choices"”. It looks for attempts to connect to Instagram and other “social-media vanity” sites (including rugby), and blocks them by returning bogus responses. Quote: “It is exceptionally effective at selfie-drenched "music" festivals and coffee shops”. <http://www.theregister.co.uk/2015/12/02/british_hacker_turns_raspberry_pi_z…>

2 1

Why Algebraic Eraser may be the riskiest cryptosystem you’ve never heard of
by Peter Reutemann 30 Nov '15

30 Nov '15

"A potential standard for securing network-connected pacemakers, automobiles, and other lightweight devices has suffered a potentially game-over setback after researchers developed a practical attack that obtains its secret cryptographic key. Known as Algebraic Eraser, the scheme is a patented way to establish public encryption keys without overtaxing the limited amounts of memory and computational resources that often constrain so-called Internet of Things (IoT) devices. Developed by scientists from Shelton, Connecticut-based SecureRF, it's similar to the Diffie-Hellman key exchange in that it allows two parties who have never met to securely establish a key over an insecure channel." -- source: http://arstechnica.com/security/2015/11/why-algebraic-eraser-may-be-the-mos… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

When Is “Free Software” Not Free?
by Lawrence D'Oliveiro 30 Nov '15

30 Nov '15

Linux kernel developer Matthew Garrett has posted some criticisms of projects like Mozilla, Red Hat and Ubuntu that develop or redistribute Free software, but tack on an “intellectual property rights policy”. Basically that means they claim ownership of certain logos and trademarks, so if you want to fully exercise your Four Freedoms, you have to strip those out before you are allowed to redistribute what you receive from them. <http://lwn.net/Articles/665175/> One particularly worrying thing is this comment from Garrett (mjg59) on the above article: Canonical refuse to tell you what changes you need to make to the packages in order to do so.

1 0