- wlug - list.wlug.org.nz

Old Ubuntu Bug Lets Malicious Users Gain Sudo Access
by Peter Reutemann 30 Apr '15

30 Apr '15

"Users can change the system clock without authenticating It appears that there's a bug in Ubuntu distributions which lets malicious users locally exploit sudo and gain access to the user's account without knowing their password. The bug was submitted to Canonical's Launchpad back in September 2013 by user Mark Smith." -- source: http://news.softpedia.com/news/An-Old-Ubuntu-Bug-Lets-Malicious-Users-Gain-… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

1 0

Hard Drive Failure Rates
by Lawrence D'Oliveiro 28 Apr '15

28 Apr '15

BackBlaze have been frequently posting notes on their experience with running large numbers of hard drives in their storage service. Some salient points: * “Enterprise” drives, while more expensive than “consumer” ones, are not significantly more reliable. (This has been borne out by other studies.) * Keep your drives running all the time, or switch them off when not in use? “Our vote is to keep them running.” * They do use SMART to keep an eye on their drives. Other studies I read reported that these only picked up a minority (around 30%) of failures, from which I concluded that SMART was not worth using. I suppose it’s different for these guys if it saves on costs to replace a drive *before* it actually starts reporting uncorrectable errors... <https://www.backblaze.com/blog/hard-drive-stats-faq/>

3 7

meeting tomorrow
by Peter Reutemann 27 Apr '15

27 Apr '15

Hi everyone We have a meeting tomorrow: "Due to the positive feedback on Baden Delamore's demonstration of Kali back in February, there will be a follow up to, delving deeper into the world of (in-)security." http://www.meetup.com/WaikatoLinuxUsersGroup/events/221426689/ Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

Debian 8 Jessie Released
by Peter Reutemann 26 Apr '15

26 Apr '15

"After almost 24 months of constant development, the Debian project is proud to present its new stable version 8 (code name Jessie), which will be supported for the next five years thanks to the combined work of the Debian Security team and the Debian Long Term Support team. (Release notes.) Jessie ships with a new default init system, systemd. The systemd suite provides features such as faster boot times, cgroups for services, and the possibility of isolating part of the services. The sysvinit init system is still available in Jessie. Screenshots and ascreencast are available." -- source: http://linux.slashdot.org/story/15/04/26/0322241 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

The March Of (In)Security
by Lawrence D'Oliveiro 25 Apr '15

25 Apr '15

Bruce Schneier has said “Today's top-secret programs become tomorrow's PhD theses and the next day's hacker tools”. And not long after that, a graduate homework assignment. The NSA was desperate to prevent any exposure of its top-secret “QUANTUM” packet-injection technology. But all this effort was futile, because others had already invented the same thing, including China’s “Great Cannon”, which was used to attack GitHub recently. The only protection is end-to-end encryption. <https://www.schneier.com/blog/archives/2015/04/the_further_dem.html>

1 0

X2Go: An Open Source Remote Desktop Solution For Linux
by Peter Reutemann 23 Apr '15

23 Apr '15

"X2Go is an Open Source remote desktop application for GNU/Linux that uses NX technology protocol. The main difference between X2Go and other remote desktop applications is it provides secure standalone remote desktop sessions via SSH. So, each session connected using X2Go is strongly encrypted and safe. X2Go allows you mainly to connect to Linux systems from Linux, Windows, or Mac OS systems. Also, many clients can simultaneously connect and use single X2Go server. It comes with two components, namely X2Go server and X2Go client. X2Go server is a system that is being accessed from a client system. And, the X2Go is a system which can be used to access the X2Go server. This Client will be able to connect to X2Go server(s) and start, stop, resume and terminate (running) desktop sessions. X2Go Client stores different server connections and may automatically request authentication data from LDAP directories. Furthermore it can be used as fullscreen loginscreen (replacement for loginmanager like xdm)." -- source: http://www.unixmen.com/x2go-an-open-source-remote-desktop-solution-for-linu… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

1 0

Lubuntu 15.04 released
by Peter Reutemann 23 Apr '15

23 Apr '15

'The developers of the Lubuntu distribution have announced the availability of Lubuntu15.04. Lubuntu is built using packages from the Ubuntu repositories and features the LXDE desktop. This release of Lubuntu offers nine months of support and focuses on minor bug fixes as the development team prepares the distribution for a switch to the newer LXQt desktop environment. "New Features in Lubuntu 15.04: General bug fix release as we prepare for LXQt; Many LXDE components have been updated with bug fix releases; An update of the artwork (more icons, theme update, more compatibilities." Lubuntu is available in two editions, one edition for most desktop computers and an "Alternative" edition for computers featuring less than 400MB of RAM.' -- source: http://distrowatch.com/?newsid=08906 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

1 0

8 Linux file managers to try
by Peter Reutemann 23 Apr '15

23 Apr '15

"One of the most common administrative tasks that end users and administrators alike need to perform is file management. Managing files can consume a major portion of your time. Locating files, determining which files and folders (directories) are taking the most disk space, deleting files, moving files, and simply opening files for use in an application are some of the most basic—yet frequent—tasks we do as computer users. File management programs are tools that are intended to streamline and simplify those necessary chores." -- source: http://opensource.com/business/15/4/eight-linux-file-managers My gripes with Caja (MATE's equivalent of Nautilus) is that it cannot handle lots of files in a directory. A directory containing 10s of thousands of files will bring the file browser to a stand still for several minutes. Midnight commander takes less than a second for the same directory. Krusader is pretty good as well, with 1-2 seconds. Nice thing about Krusader: both panels can have multiple tabs, making it quite versatile. Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

3 3

Fedora 23 to Use Wayland and Python 3 by Default, Will Be Released in Fall 2015
by Peter Reutemann 23 Apr '15

23 Apr '15

"The Beta version of the forthcoming Fedora 22 Linux computer operating system was released on April 21, as reported by Softpedia, but it is time now to look at some of the features to be implemented in the next major release of the Red Hat-sponsored distribution, Fedora 23. Therefore, among the highlights announced for Fedora 23, we can mention that the next-generation Wayland display server will be used by default for the Workstation edition, which will most probably be built around the GNOME 3.18 desktop environment. Python 3 will also be used by default in the Workstation edition, and a Vagrant image will be provided for Fedora 23 Atomic Host and Cloud spins. The Vagrant boxes have been designed to be compatible with the Oracle VirtualBox and KVM (Kernel-based Virtual Machine) virtualization software." -- source: http://news.softpedia.com/news/Fedora-23-to-Use-Wayland-and-Python-3-by-Def… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 http://www.data-mining.co.nz/

2 1

Debian 8.0 “Jessie” To Be Released This Weekend
by Lawrence D'Oliveiro 23 Apr '15

23 Apr '15

Looks like the new version of Debian Stable is in imminent release... <http://www.phoronix.com/scan.php?page=news_item&px=Debian-Jessie-CD-Ready>

1 0