- wlug - list.wlug.org.nz

“*ERROR* pipe is still busy with an old pageflip”
by Lawrence D'Oliveiro 24 May '15

24 May '15

I’ve been hitting an occasional display freeze that matches this description <http://forums.gentoo.org/viewtopic-p-7675146.html>. Looks like a known problem with the 3.16 kernel. I thought things had got better with a system update I did 11 days ago, but this afternoon the freeze recurred. Unlike the previous times, killing all my user processes succeeded in unfreezing the display, so I was able to log in again without rebooting.

1 1

WLUG meeting tomorrow
by Peter Reutemann 24 May '15

24 May '15

Hi everyone We have a meeting tomorrow: "git - from novice to master. Lawrence D'Oliveiro will introduce you to the distributed revision control system git, demonstrating the basic commands and also more advanced actions." http://www.meetup.com/WaikatoLinuxUsersGroup/events/222463816 Unfortunately, due to work commitments, I won't be able to make it. Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

1 0

Glitch Art
by Lawrence D'Oliveiro 22 May '15

22 May '15

(From the Cairo mailing list.) A version of GIMP that produces glitch art (entertaining display bugs): <https://www.flickr.com/photos/hellocatfood/17336134091> How to build glitch-GIMP: <http://www.hellocatfood.com/glitch-gimp/>.

1 0

Meeting next Monday
by Peter Reutemann 22 May '15

22 May '15

Hi everyone We have a meeting coming up next Monday: "git - from novice to master. Lawrence D'Oliveiro will introduce you to the distributed revision control system git, demonstrating the basic commands and also more advanced actions." http://www.meetup.com/WaikatoLinuxUsersGroup/events/222463816 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph.+64 (7) 858-5174 http://www.data-mining.co.nz

2 3

'Logjam' Vulnerability Threatens Encrypted Connections
by Peter Reutemann 22 May '15

22 May '15

'A team of security researchers has revealed a new encryption vulnerability called 'Logjam,' which is the result of a flaw in the TLS protocol used to create encrypted connections. It affects servers supporting the Diffie-Hellman key exchange, and it's caused by export restrictions mandated by the U.S. government during the Clinton administration. "Attackers with the ability to monitor the connection between an end user and a Diffie-Hellman-enabled server that supports the export cipher can inject a special payload into the traffic that downgrades encrypted connections to use extremely weak 512-bit key material. Using precomputed data prepared ahead of time, the attackers can then deduce the encryption key negotiated between the two parties." Internet Explorer is the only browser yet updated to block such an attack — patches for Chrome, Firefox, and Safari are expected soon. The researchers add, "Breaking the single, most common 1024-bit prime used by web servers would allow passive eavesdropping on connections to 18% of the Top 1 Million HTTPS domains. A second prime would allow passive decryption of connections to 66% of VPN servers and 26% of SSH servers. A close reading of published NSA leaks shows that the agency's attacks on VPNs are consistent with having achieved such a break." Here is their full technical report (PDF).' -- source: http://it.slashdot.org/story/15/05/20/1258251 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

2 1

Linux 4.0 Has a File-System Corruption Problem, RAID Users Warned
by Peter Reutemann 21 May '15

21 May '15

'For the past few days kernel developers and Linux users have been investigating an EXT4 file-system corruption issue affecting the latest stable kernel series (Linux 4.0) and the current development code (Linux 4.1). It turns out that Linux users running the EXT4 file-system on a RAID0 configuration can easily destroy their file-system with this newest "stable" kernel. The cause and fix have materialized but it hasn't yet worked its way out into the mainline kernel, thus users should be warned before quickly upgrading to the new kernel on systems with EXT4 and RAID0.' -- source: http://hardware.slashdot.org/story/15/05/21/1324229 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

1 0

theregister.co.uk - Inkscape 0.91 review
by William Mckee 21 May '15

21 May '15

A very positive review of Inkscape 0.91 release. http://www.theregister.co.uk/2015/05/19/inkscape_review/?page=1 Most notable they talk about the speed and performance in the new release. I'm a heavy GIMP user but have been using Inkscape recently for website logos. Like the reviewer - I have been impressed with the improvements. Cheers, William.

1 0

FirefoxOS TV sets
by Ian Young 20 May '15

20 May '15

Currently available at retail outlets in Hamilton starting at $700 or so. Panasonic brand.

1 0

First Smart TVs Powered By Firefox OS On Sale In Europe, Worldwide Soon
by Peter Reutemann 18 May '15

18 May '15

'The first smart TVs powered by Firefox OS have gone on sale in Europe. Panasonic's line of Viera smart TVs includes six that are powered by Firefox OS — CR850, CR730, CX800, CX750, CX700 and CX680 — including their first curved LED LCD TV. The full global launch of the TVs is expected “in the coming months.” From the Mozilla blog: "We’re happy to partner with Panasonic to bring the first Smart TVs powered by Firefox OS to the world,” said Andreas Gal, Mozilla CTO. “With Firefox and Firefox OS powered devices, users can enjoy a custom and connected Web experience and take their favorite content (apps, videos, photos, websites) across devices without being locked into one proprietary ecosystem or brand.”' -- source: http://news.slashdot.org/story/15/05/18/0213238 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

1 0

Venom VM bug called “perfect” for NSA, or for stealing bitcoins and passwords
by Peter Reutemann 13 May '15

13 May '15

"The just-patched critical vulnerability in widely used virtualization software is an ideal exploitation target for state-sponsored spies and criminals alike fishing for passwords, cryptography keys, or bitcoins, a researcher who has dissected one of the fixes said. The bug, which is known to affect the Xen, KVM, and native QEMU virtual machine platforms and appliances, makes it possible for attackers to break out of protected guest environments and take full control of the operating system hosting them, security researchers warned Wednesday. In the hours following Wednesday morning's disclosure of the vulnerability, many security professionals have publicly said its severity is being exaggerated. The critics have rightly pointed out that it can't be remotely exploited and can't be exploited on large numbers of machines in a single stroke, as is the case with most serious security bugs." -- source: http://arstechnica.com/security/2015/05/venom-vm-bug-called-perfect-for-nsa… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

1 0