- wlug - list.wlug.org.nz

Betty Is Like Siri Or Google Now For The Command Line (Translates Plain English Into Commands)
by Peter Reutemann 16 May '14

16 May '14

'Betty is like Siri or Google Now for the command line. Well, sort of. The tool translates plain English into commands: it displays the command it runs and obviously, the command output, in the terminal. Betty isn't voice controlled so you still have to type your (plain English) commands but if you want, it can speak the command output. Betty's mission is, according to its GitHub page, to "provide a way to use computers through natural language input"' -- source: http://www.webupd8.org/2014/05/betty-is-like-siri-or-google-now-for.html Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

5-Year-Old Linux Kernel Bug Fixed
by Peter Reutemann 14 May '14

14 May '14

"'The memory-corruption vulnerability, which was introduced in version 2.6.31-rc3, released no later than 2009, allows unprivileged users to crash or execute malicious code on vulnerable systems, according to the notes accompanying proof-of-concept code available here. The flaw resides in the n_tty_write function controlling the Linux pseudo tty device. 'This is the first serious privilege escalation vulnerability since the perf_events issue (CVE-2013-2049) in April 2013 that is potentially reliably exploitable, is not architecture or configuration dependent, and affects a wide range of Linux kernels (since 2.6.31),' Dan Rosenberg, a senior security researcher at Azimuth Security, told Ars in an e-mail. 'A bug this serious only comes out once every couple years.' ... While the vulnerability can be exploited only by someone with an existing account, the requirement may not be hard to satisfy in hosting facilities that provide shared servers, Rosenberg said." -- source: http://linux.slashdot.org/story/14/05/13/2039233 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

How To Approve the Use of Open Source On the Job
by Peter Reutemann 12 May '14

12 May '14

"If you work in an organization that isn't focused on development, where computer systems are used to support other core business functions, getting management buy-in for the use of open source can be tricky. Here's how an academic librarian negotiated with his management to get them to give open source software a try, and the four phrases he recommends you avoid using." -- source: http://news.slashdot.org/story/14/05/12/2159234 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linux Video of the Week: Limit Theory Game Developer Switches to Linux
by Peter Reutemann 12 May '14

12 May '14

'Game developer Josh Parnell has released the latest development update on his open-world space simulation and strategy game, Limit Theory. While the graphics are beautiful, this release is particularly notable because Parnell has switched to developing on the native Linux client version from Windows (which he called “just annoying.”)' -- source: http://www.linux.com/news/featured-blogs/200-libby-clark/772484 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Valve Sponsors Work To Greatly Speed-Up Linux OpenGL Game Load Times
by Peter Reutemann 05 May '14

05 May '14

"Valve Software has sponsored some interesting improvements developed by LunarG for the Mesa OpenGL library on Linux for deferred and threaded GLSL shader compilation. What these changes mean for users of the open-source Linux graphics drivers when running their favorite games is that OpenGL games now load a lot faster. As an example, the time from starting Dota 2 until the time actually being within the game is reduced by about 20 seconds on an Intel system. While Direct3D has offered similar functionality for a while, OpenGL has not, which has given it a bad reputation with regard to game load times until all shaders are compiled and cached — fortunately it's now addressed for OpenGL if using the Mesa Linux graphics drivers on a supported game." -- source: http://linux.slashdot.org/story/14/05/05/0443238 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

OpenBSD 5.5 Released
by Peter Reutemann 05 May '14

05 May '14

"Just as per the schedule, OpenBSD 5.5 was released today, May 1, 2014. The theme of the 5.5 release is Wrap in Time, which represents a significant achievement of changing time_t to int64_t on all platforms, as well as ensuring that all of the 8k+ OpenBSD ports still continue to build and work properly, thus doing all the heavy lifting and paving the way for all other operating systems to make the transition to 64-bit time an easier task down the line. Signed releases and packages and the new signify utility are another big selling point of 5.5, as well as OpenSSH 6.6, which includes lots of DJB crypto like chacha20-poly1305, plus lots of other goodies." -- source: http://bsd.slashdot.org/story/14/05/01/1656209 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

2 2

Nasty Security Flaw In OAuth, OpenID
by Peter Reutemann 03 May '14

03 May '14

"A notable security vulnerability has been discovered which impacts both OAuth and OpenID, which are software packages that provide a secure delegated access to websites. Wang Jing, a Ph.D student at the Nanyang Technological University in Singapore, discovered that the 'Covert Redirect' flaw can masquerade as a login popup based on an affected site's domain. Covert Redirect is based on a well-known exploit parameter. For example, someone clicking on a malicious phishing link will get a popup window in Facebook, asking them to authorize the app. Instead of using a fake domain name that's similar to trick users, the Covert Redirect flaw uses the real site address for authentication. If a user chooses to authorize the login, personal data will be released to the attacker instead of to the legitimate website. Wang did already warn a handful of tech giants about the vulnerability, but they mostly dodged the issue. In all honesty, it is not trivial to fix, and any effective remedies would negatively impact the user experience. Users who wish to avoid any potential loss of data should be careful about clicking links that immediately ask you to log in to Facebook or Google, and be aware of this redirection attack." -- source: http://it.slashdot.org/story/14/05/02/2015227 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Canonical (Nearly) Halts Development of Ubuntu For Android
by Peter Reutemann 01 May '14

01 May '14

"In a since-removed bug report on Launchpad, Ubuntu's issue tracker, Canonical's Matthew Paul Thomas stated that Ubuntu for Android is no longer in active development. In a statement, Canonical stated that while the project is not completely dead, Canonical is currently focusing on pushing Ubuntu for Phones. The company is open to working with partners on Ubuntu for Android, but will not proceed with further U4A development unless they can form a partnership with an OEM partner to launch it. The Ubuntu for Android project was first announced in early 2012." -- source: http://mobile.slashdot.org/story/14/05/01/1822254 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

OpenSSH No Longer Has To Depend On OpenSSL
by Peter Reutemann 30 Apr '14

30 Apr '14

"What has been planned for a long time now, prior to the infamous heartbleed fiasco of OpenSSL (which does not affect SSH at all), is now officially a reality — with the help of some recently adopted crypto from DJ Bernstein, OpenSSH now finally has a compile-time option to no longer depend on OpenSSL. `make OPENSSL=no` has now been introduced for a reduced configuration OpenSSH to be built without OpenSSL, which would leave you with no legacy SSH-1 baggage at all, and on the SSH-2 front with only AES-CTR and chacha20+poly1305 ciphers, ECDH/curve25519 key exchange and Ed25519 public keys." -- source: http://it.slashdot.org/story/14/04/30/1822209 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

LED and current limiting resistors
by chris 30 Apr '14

30 Apr '14

Following on from Monday nights discussion about LEDs and resistors. https://www.sparkfun.com/tutorials/219 BTW, I acquired a pad heater and a brewing container for my set up from a colleague and its now all wired in - regulating 15 litres of water nicely at the moment.

1 0