- wlug - list.wlug.org.nz

Jono Bacon Leaves Canonical For XPRIZE
by Peter Reutemann 21 May '14

21 May '14

"Jono Bacon, who has been Ubuntu Community Manager for Canonical for nearly eight years is moving on to join the XPRIZE Foundation (known for incentivizing solving major issues, such as the Google Lunar and Qualcomm Tricorder XPRIZES) to be Senior Director of Community." -- source: http://news-beta.slashdot.org/story/14/05/21/133243 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Wayland 1.5 Released
by Peter Reutemann 21 May '14

21 May '14

"Wayland 1.5 has been released, along with Weston Compositor 1.5. Wayland/Weston 1.5 carry many new user features, with a new libinput back-end, XWayland support, a full-screen shell, and many other changes. This release is particularly important as Fedora 21 will run on GNOME Wayland and X.Org Server 1.16 will be released this summer with integrated XWayland support." -- source: http://tech.slashdot.org/story/14/05/21/0136212 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Robyn Bergeron Stepping Down As Fedora Project Leader
by Peter Reutemann 21 May '14

21 May '14

"Red Hat's Fedora Linux Project Leader, Robyn Bergeron, has announced that she is leaving her role. Bergeron became Fedora Project Leader in February of 2012 and has presided over one of the busiest periods for Fedora ever. Fedora is now moving to a new model for Fedora 21, with separate desktop, cloud and server products. 'The community has now gotten to the point where it's not a one-size-fits-all product anymore,' Bergeron said." -- source: http://linux.slashdot.org/story/14/05/20/2318245 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

file managers
by Peter Reutemann 19 May '14

19 May '14

Hi there Just came across this post on Linux.com regarding file browsers: http://www.linux.com/learn/tutorials/773120-4-excellent-alternative-graphic… Personally, I didn't find any of the mentioned browsers very exciting, however, I stumbled across "sunflower" in the comments section: http://code.google.com/p/sunflower-fm/ Dual panel browser with multiple tabs per panel, you can run commands in a panel, pop up a terminal. Quite funky. :-) Here's an overview of file managers (alternatives for "sunflower"): http://alternativeto.net/software/sunflower/ Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linux Sucks (Video)
by Peter Reutemann 19 May '14

19 May '14

"How do we know Linux sucks? Because Bryan Lunduke says so. How did he become a Linux authority? By using Linux, of course. He has also written a kids Linux book, Linux for Hank, and a grown-up Linux book, Linux is Badass. But wait! That's not all! Bryan is also one of the people behind the infamous Bad Voltage podcast. And now, for something slightly different: In moments of weakness, Bryan admits that maybe Linux suckage isn't total, and Linux may have a good point or two and maybe some of the suckage could be removed. Zounds! Is that possible? Watch our video chat with Bryan (and/or read the transcript) and see. Or watch the entire 44 minute speech he gave at the 2014 LinuxFest Northwest, which was the 5th (or maybe 6th) "Linux Sucks" speech he's given at LFNW. That makes this a tradition, not just a speech. So if you find yourself in or near Bellingham, Washington, in 2039 you might want to pop in and see if Bryan is still updating his "Linux Sucks" speech. He'll be the geezer hobbling to the front of the room with help from his AutoCane, a device sure to be developed between now and then -- which will no doubt run Linux." -- source: http://linux.slashdot.org/story/14/05/19/1926213 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

WLUG meeting coming up next Monday
by Peter Reutemann 19 May '14

19 May '14

Hi there We have a WLUG meeting coming up next Monday: "William McKee is demoing the Godot Game Engine, released under the MIT license. Similar to Unity3D in features, it provides tools to quickly create games under Linux, Mac OSX and Windows." http://www.meetup.com/WaikatoLinuxUsersGroup/events/165977142/ Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 1

30-Day Status Update On LibreSSL
by Peter Reutemann 18 May '14

18 May '14

"Bob Beck — OpenBSD, OpenSSH and LibreSSL developer and the director of Alberta-based non-profit OpenBSD Foundation — gave a talk earlier today at BSDCan 2014 in Ottawa, discussing and illustrating the OpenSSL problems that have led to the creation of a big fork of OpenSSL that is still API-compatible with the original, providing for a drop-in replacement, without the #ifdef spaghetti and without its own "OpenSSL C" dialect. Bob is claiming that the Maryland-incorporated OpenSSL Foundation is nothing but a for-profit front for FIPS consulting gigs, and that nobody at OpenSSL is actually interested in maintaining OpenSSL, but merely adding more and more features, with the existing bugs rotting in bug-tracking for a staggering 4 years (CVE-2010-5298 has been independently re-discovered by the OpenBSD team after having been quietly reported in OpenSSL's RT some 4 years prior). Bob reports that the bug-tracking system abandoned by OpenSSL has actually been very useful to the OpenBSD developers at finding and fixing even more of OpenSSL bugs in downstream LibreSSL, which still remain unfixed in upstream OpenSSL. It is revealed that a lot of crude cleaning has already been completed, and the process is still ongoing, but some new ciphers already saw their addition to LibreSSL — RFC 5639 EC Brainpool, ChaCha20,Poly1305, FRP256v1, and some derivatives based on the above, like ChaCha20-Poly1305 AEAD EVP from Adam Langley's Chromium OpenSSL patchset. To conclude, Bob warns against portable LibreSSL knockoffs, and asks the community for Funding Commitment — Linux Foundation is turning a blind eye to LibreSSL, and instead is only committed to funding OpenSSL directly, despite the apparent lack of security-oriented direction within the OpenSSL project upstream. Funding can be directed to the OpenBSD Foundation." -- source: http://it.slashdot.org/story/14/05/17/2250242 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Position Vacant - multi-disciplined hacker
by David McNab 17 May '14

17 May '14

Vadacom Ltd is a leading provider of OSS-based telephony integration solutions. Their flagship product, VadaXchange, is used by many large organisations throughout New Zealand, including Xero, the rock-star accounting firm. We are seeking an experienced and adaptable software developer to join our R&D team. A solid background in OSS-based operating systems such as Linux is a must, as well as experience in several different programming languages, plus the ability and willingness to pick up more languages and frameworks quickly as required. Our main product is comprised of a mainly python-based server-side software, built around the Asterisk PBX system, plus a sophisticated javascript-based client-side web application, as well as Android and iOS apps. Our team is unique in that we actually encourage working from diverse physical locations. This is important to us, because we are all about empowering business communications, so it's walking our talk to use our own technologies internally. If you are good at organising your time, and can create a space where you won't be disturbed, you will be welcome to work from home most of the time. This said, however, some trips to the Auckland head office will be needed from time to time, especially as you are first starting work with us. We have just recently opened an office on Garden Place in Hamilton, and can offer you the option to work from here. Hamilton's IT scene is heavily skewed towards the Redmond stack, so opportunities to work with leading-edge OSS tools and great people, while staying in Hamilton or the greater Waikato, are scarce. If this position interests you, please send me your CV and cover letter. Cheers David

1 0

Betty Is Like Siri Or Google Now For The Command Line (Translates Plain English Into Commands)
by Peter Reutemann 16 May '14

16 May '14

'Betty is like Siri or Google Now for the command line. Well, sort of. The tool translates plain English into commands: it displays the command it runs and obviously, the command output, in the terminal. Betty isn't voice controlled so you still have to type your (plain English) commands but if you want, it can speak the command output. Betty's mission is, according to its GitHub page, to "provide a way to use computers through natural language input"' -- source: http://www.webupd8.org/2014/05/betty-is-like-siri-or-google-now-for.html Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

5-Year-Old Linux Kernel Bug Fixed
by Peter Reutemann 14 May '14

14 May '14

"'The memory-corruption vulnerability, which was introduced in version 2.6.31-rc3, released no later than 2009, allows unprivileged users to crash or execute malicious code on vulnerable systems, according to the notes accompanying proof-of-concept code available here. The flaw resides in the n_tty_write function controlling the Linux pseudo tty device. 'This is the first serious privilege escalation vulnerability since the perf_events issue (CVE-2013-2049) in April 2013 that is potentially reliably exploitable, is not architecture or configuration dependent, and affects a wide range of Linux kernels (since 2.6.31),' Dan Rosenberg, a senior security researcher at Azimuth Security, told Ars in an e-mail. 'A bug this serious only comes out once every couple years.' ... While the vulnerability can be exploited only by someone with an existing account, the requirement may not be hard to satisfy in hosting facilities that provide shared servers, Rosenberg said." -- source: http://linux.slashdot.org/story/14/05/13/2039233 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0