- wlug - list.wlug.org.nz

Turning a Rasberry Pi into a Tor Gateway with Sphirewall
by Michael Lawson 17 Nov '14

17 Nov '14

Earlier this month Sphirewall released support for Tor as a transparent gateway, we thought it would be neat to get it running on the Pi and show it of a little bit. Half shameless plug, half interesting use case for Sphirewall and a Pi. http://sphirewall.net/blog.html?post_id=2 (Also 100% kiwi ;)) -- Michael Lawson

1 0

Docker - (was: Re: WLUG meeting next Monday)
by Peter Reutemann 17 Nov '14

17 Nov '14

Ian pointed out that my reply to a meeting announcement might confuse people... So, just to clarify, there is no meeting next week, but on the 24th (AGM). Cheers, Peter On Thu, Nov 6, 2014 at 2:31 PM, Peter Reutemann <fracpete(a)waikato.ac.nz> wrote: >> We have a meeting coming up next Monday: >> >> "Virtualization has been become commonplace nowadays, with lots of >> different implementations. Docker provides an as-thin-as-possible >> approach, making use of the kernel's functionality of resource >> isolation, eliminating the need for installing an operating system for >> the guest system. >> Andrew Parnasov will give an introduction to Docker, how to set it up, >> how to use and what it can be used for." >> >> http://www.meetup.com/WaikatoLinuxUsersGroup/events/197652482/ > > Just have come across this here: > > "Google Container Engine (Alpha) > > Run Docker containers on Google Cloud Platform, powered by Kubernetes. > Container Engine takes care of provisioning and maintaining the > underlying virtual machine cluster, scaling your application, and > operational logistics like logging, monitoring, and health > management." > > -- source: https://cloud.google.com/container-engine/ > > Cheers, Peter > -- > Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ > http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 1

Fedora Looks To Make /usr World-Readable
by Peter Reutemann 17 Nov '14

17 Nov '14

"Fedora developers are looking at requiring all files that be placed in /usr world-readable. Developers are seeking a mandate that all Fedora packages must not install any non-world-readable files within /usr. Right now some Fedora packages do not honor this and restrict permissions to certain files/directories. Stakeholders are after making the user directory world-readable since containerized copies of Fedora can have the directory bind-mounted into the container, support for virtualization use-cases, and for better systemd handling. " -- source: http://www.phoronix.com/scan.php?page=news_item&px=MTgzOTE Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Longtime Debian Developer Tollef Fog Heen Resigns From Systemd Maintainer Team
by Peter Reutemann 17 Nov '14

17 Nov '14

'Debian developer Tollef Fog Heen submitted his resignation to the Debian Systemd package maintainers team mailing list today (Sun. Nov. 16th, 2014). In his brief post, he praises the team, but claims that he cannot continue to contribute due to the "load of continued attacks...becoming just too much." Presumably, he is referring to the heated and, at times, even vitriolic criticism of Debian's adoption of Systemd as the default init system for its upcoming Jessie release from commenters inside and outside of the Debian community. Currently, it is not known if Tollef will cease contributing to Debian altogether. A message from his twitter feed indicates that he may blog about his departure in the near future.' -- source: http://linux.slashdot.org/story/14/11/16/2142244 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

81% of Tor Users Can Be De-anonymized By Analysing Router Information
by Peter Reutemann 15 Nov '14

15 Nov '14

"A former researcher at Columbia University's Network Security Lab has conducted research since 2008 indicating that traffic flow software included in network routers, notably Cisco's 'Netflow' package, can be exploited to deanonymize 81.4% of Tor clients. Professor Sambuddho Chakravarty, currently researching Network Anonymity and Privacy at the Indraprastha Institute of Information Technology, uses a technique which injects a repeating traffic pattern into the TCP connection associated with an exit node, and then compares subsequent aberrations in network timing with the traffic flow records generated by Netflow (or equivalent packages from other router manufacturers) to individuate the 'victim' client. In laboratory conditions the success rate of this traffic analysis attack is 100%, with network noise and variations reducing efficiency to 81% in a live Tor environment. Chakravarty says: 'it is not even essential to be a global adversary to launch such traffic analysis attacks. A powerful, yet non- global adversary could use traffic analysis methods [] to determine the various relays participating in a Tor circuit and directly monitor the traffic entering the entry node of the victim connection.'" -- source: http://yro.slashdot.org/story/14/11/14/1851245 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

FreeBSD 10.1 Released
by Peter Reutemann 15 Nov '14

15 Nov '14

"Version 10.1 of the venerable FreeBSD operating system has been released. The new version of FreeBSD offers support for booting from UEFI, automated generation of OpenSSH keys, ZFS performance improvements, updated (and more secure) versions of OpenSSH and OpenSSL and hypervisor enhancements. FreeBSD 10.1 is an extended support release and will be supported through until January 1, 2017." -- source: http://bsd.slashdot.org/story/14/11/14/2159223 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Ubuntu Linux Will Work To Slowly Demphasize 32-bit
by Peter Reutemann 13 Nov '14

13 Nov '14

"Canonical isn't yet prepared to drop 32-bit Ubuntu ISOs outright, but over time -- and particularly at or just after Ubuntu 16.04 -- they will work to demphasize the existence of the 32-bit releases and work to push more users to 64-bit Ubuntu as a main focus. " -- source: http://www.phoronix.com/scan.php?page=news_item&px=MTgzODE Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linux Security Distros Compared: Tails vs. Kali vs. Qubes
by Peter Reutemann 13 Nov '14

13 Nov '14

"If you're interested in security, you've probably already heard of security-focused Linux distros like Tails, Kali, and Qubes. They're really useful for browsing anonymously, penetration testing, and tightening down your system so it's secure from would-be hackers. Here are the strengths and weaknesses of all three. - Tails Provides Security Through Anonymity - Kali Is All About Offensive Security - Qubes Offers Security Through Isolation" -- source: http://goo.gl/vomgra Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Groupon backs down from GNOME over trademark, will change product name
by Peter Reutemann 11 Nov '14

11 Nov '14

'UPDATE: Groupon has decided to use a name other than "Gnome" for its tablet platform for merchants. "After additional conversations with the open source community and the Gnome Foundation, we have decided to abandon our pending trademark applications for 'Gnome,'" the company said. "We will choose a new name for our product going forward."' -- source: http://goo.gl/p5IXl7 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Pitivi Video Editor Surpasses 50% Crowdfunding Goal, Releases Version 0.94
by Peter Reutemann 10 Nov '14

10 Nov '14

'With the latest developments, Pitivi is proving to truly be a promising libre video editor for GNU distributions as well as a serious contender for bringing libre video production up to par with its proprietary counterparts. Since launching a beautifully well-organized crowdfunding campaign (as covered here previously), the team has raised over half of their 35,000 € goal to pay for full-time development and has entered "beta" status for version 1.0. They've released two versions, 0.94 (release notes) being the most recent, which have brought full MPEG-TS/AVCHD support, porting to Python 3, lots of UX improvements, and—of course—lots and lots of bug fixes. The next release (0.95) will run on top of Non Linear Engine, a refined and incredibly more robust backend Pitivi developers have produced to replace GNonLin and bring Pitivi closer to the rock-solid stability needed for the final 1.0 release.' -- source: http://linux.slashdot.org/story/14/11/10/2045244 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0