- wlug - list.wlug.org.nz

Review: Framework’s next-gen Laptop follows through on its upgradeable promises
by Peter Reutemann 26 Jul '22

26 Jul '22

'It's one thing to say you're making a fully user-serviceable, upgradeable laptop. It's another thing to actually follow through with it. The original Framework Laptop we reviewed last year did a lot of things right. It's easy to open and work on, the ports can be swapped out to suit your needs, and it's sturdy and well-built enough to stand up to traditional, less-upgradeable-and-repairable ultrabooks like Dell's XPS 13 or Lenovo's ThinkPad X1 Carbon. But making "one surprisingly good laptop" isn't the same as creating a laptop ecosystem with upgradeable, interchangeable, user-serviceable parts. To do that, you need to keep up with new component releases. You need to address the shortcomings of your original design (or even release new revisions) without ending support for or breaking compatibility with previous versions of your design. And your small, independent company needs to continue to exist so it can keep getting all that work done, year after year, for a few years. I can't say what the next year or two will bring, but I can say that the second-generation Framework Laptop is still doing almost everything right. It's a lightly revised version of the original chassis designed around a 12th-generation Intel Core CPU rather than an 11th-gen version, and the motherboard exists as a drop-in upgrade for anyone who has already bought a Framework Laptop. The Framework Laptop does have problems, especially when it comes to battery life. But overall, it's a thoughtfully designed computer that treats do-it-yourselfers and PC builders like adults who can make their own decisions. There still isn't another laptop quite like it.' -- source: https://arstechnica.com/gadgets/2022/07/review-frameworks-next-gen-laptop-f… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

meeting on Monday
by Peter Reutemann 26 Jul '22

26 Jul '22

Hi everyone We have a meeting on Monday with the following topic: 'Open source software is always about choice. Whereas Windows users can't really do much about the desktop experience that gets dictated by Microsoft, Linux users can choose from a wide variety of desktop environments. Tonight, we will explore a range of these: MATE, Cinnamon, Gnome, KDE, LXDE, XFCE and maybe more. If your favorite environment is not listed, then please join in and demo it!' Details: https://www.meetup.com/waikatolinuxusersgroup/events/283776683/ Virtual meeting link: https://bbb2.nzoss.nz/b/pet-w7y-nxe-vxh Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 1

Zero-day used to infect Chrome users could pose threat to Edge and Safari users, too
by Peter Reutemann 22 Jul '22

22 Jul '22

'A secretive seller of cyberattack software recently exploited a previously unknown Chrome vulnerability and two other zero-days in campaigns that covertly infected journalists and other targets with sophisticated spyware, security researchers said. CVE-2022-2294, as the vulnerability is tracked, stems from memory corruption flaws in Web Real-Time Communications, an open-source project that provides JavaScript programming interfaces to enable real-time voice, text, and video communications capabilities between web browsers and devices. Google patched the flaw on July 4 after researchers from security firm Avast privately notified the company it was being exploited in watering hole attacks, which infect targeted websites with malware in hopes of then infecting the users known to frequent them. Microsoft and Apple have since patched the same WebRTC flaw in their Edge and Safari browsers, respectively.' -- source: https://arstechnica.com/information-technology/2022/07/exploit-seller-used-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Dell’s XPS 13 Plus Developer Edition gets Ubuntu 22.04 LTS certified
by Peter Reutemann 21 Jul '22

21 Jul '22

'Dell is extending its love for Linux to the Dell XPS 13 Plus. The Developer Edition of the laptop has been Ubuntu 22.04 LTS-certified, Canonical announced today. That means the laptop will be sold starting in August with the latest version of Ubuntu, and owners of the XPS 13 Plus Developer Edition can download Ubuntu 22.04 LTS today (even if they bought it with Windows 11) for guaranteed performance. The XPS 13 Plus Developer Edition is the first 22.04 LTS-certified laptop, joining only some Raspberry Pi devices in certification. However, Dell has been certifying some of its XPS laptops, as well as other machines, for Ubuntu for generations. HP and Lenovo also have Ubuntu-certified systems. Of course, Ubuntu certification means all the components will "work as expected," as Canonical's announcement today put it. Further, Ubuntu LTS certification means the device will have support for at least 10 years. Ubuntu's release cycle page states that LTS (long-term support) releases include 10 years of "Base Package" maintenance and security updates. "Certified devices also include specific software or drivers that differ from the default distribution where required. These are defined in a meta-package that automatically [installs] the optimal configuration of packages, drivers, and kernel to deliver the best experience on that device," Canonical's announcement said.' -- source: https://arstechnica.com/gadgets/2022/07/dells-xps-13-plus-developer-edition… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google, Oracle Cloud Servers Wilt in UK Heatwave, Take Down Websites
by Peter Reutemann 20 Jul '22

20 Jul '22

'Cloud services and servers hosted by Google and Oracle in the UK have dropped offline due to cooling issues as the nation experiences a record-breaking heatwave. From a report: When the mercury hit 40.3C (104.5F) in eastern England, the highest ever registered by a country not used to these conditions, datacenters couldn't take the heat. Selected machines were powered off to avoid long-term damage, causing some resources, services, and virtual machines to became unavailable, taking down unlucky websites and the like. Multiple Oracle Cloud Infrastructure resources are offline, including networking, storage, and compute provided by its servers in the south of UK. Cooling systems were blamed, and techies switched off equipment in a bid to prevent hardware burning out, according to a status update from Team Oracle. "As a result of unseasonal temperatures in the region, a subset of cooling infrastructure within the UK South (London) Data Centre has experienced an issue," Oracle said on Tuesday at 1638 UTC. "As a result some customers may be unable to access or use Oracle Cloud Infrastructure resources hosted in the region.' -- source: https://it.slashdot.org/story/22/07/19/204256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Denmark Bans Chromebooks, Google Workspace In Schools Over Data Transfer Risks
by Peter Reutemann 20 Jul '22

20 Jul '22

'Denmark is effectively banning Google's services in schools, after officials in the municipality of Helsingor were last year ordered to carry out a risk assessment around the processing of personal data by Google. TechCrunch reports: In a verdict published last week, Denmark's data protection agency, Datatilsynet, revealed that data processing involving students using Google's cloud-based Workspace software suite -- which includes Gmail, Google Docs, Calendar and Google Drive -- "does not meet the requirements" of the European Union's GDPR data privacy regulations. Specifically, the authority found that the data processor agreement -- or Google's terms and conditions -- seemingly allow for data to be transferred to other countries for the purpose of providing support, even though the data is ordinarily stored in one of Google's EU data centers. Google's Chromebook laptops, and by extension Google Workspace, are used in schools across Denmark. But Datatilsynet focused specifically on Helsingor for the risk assessment after the municipality reported a "breach of personal data security" back in 2020. While this latest ruling technically only applies to schools in Helsingor for now, Datatilsynet notes that many of the conclusions it has reached will "probably apply to other municipalities" that use Google Chromebooks and Workspace. It added that it expects these other municipalities "to take relevant steps" off the back of the decision it reached in Helsingor. The ban is effective immediately, but Helsingor has until August 3 to delete user data. A Google spokesperson told TechCrunch in a statement: "We know that students and schools expect the technology they use to be legally compliant, responsible, and safe. That's why for years, Google has invested in privacy best practices and diligent risk assessments, and made our documentation widely available so anyone can see how we help organizations to comply with the GDPR. Schools own their own data. We only process their data in accordance with our contracts with them. In Workspace for Education, students' data is never used for advertising or other commercial purposes. Independent organizations have audited our services, and we keep our practices under constant review to maintain the highest possible standards of safety and compliance."' -- source: https://news.slashdot.org/story/22/07/18/2059204 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Disentangling The Debian Derivatives: Which Should You Use?
by Lawrence D'Oliveiro 19 Jul '22

19 Jul '22

Intro to just a few <https://www.theregister.com/2022/07/18/disentangling_the_debian_derivatives/> members of the sprawling family of Debian derivatives. I think one of the reasons it has spawned so many offshoots is because the maintainers have made a point of ensuring the tools they use to create the distro itself are easy to use, adapt and configure, not just for themselves, but for others, too.

1 0

Servers running Digium Phones VoiP software are getting backdoored
by Peter Reutemann 19 Jul '22

19 Jul '22

'Servers running the open source Asterisk communication software for Digium VoiP services are under attack by hackers who are managing to commandeer the machines to install web shell interfaces that give the attackers covert control, researchers have reported. Researchers from security firm Palo Alto Networks said they suspect the hackers are gaining access to the on-premises servers by exploiting CVE-2021-45461. The critical remote code-execution flaw was discovered as a zero-day vulnerability late last year, when it was being exploited to execute malicious code on servers running fully updated versions of Rest Phone Apps, aka restapps, which is a VoiP package sold by a company called Sangoma. The vulnerability resides in FreePBX, the world's most widely used open source software for Internet-based Private Branch Exchange systems, which enable internal and external communications in organizations' private internal telephone networks. CVE-2021-45461 carries a severity rating of 9.8 out of 10 and allows hackers to execute malicious code that takes complete control of servers.' -- source: https://arstechnica.com/information-technology/2022/07/servers-running-digi… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Apple’s Windows 10
by Lawrence D'Oliveiro 19 Jul '22

19 Jul '22

Fred Brooks predicted long ago that complex pieces of software would eventually reach the point of irreducible entropy, where any attempt to fix a bug would simply introduce a new one. Microsoft’s Windows 10 seems to be about there, and it’s now clear that Apple’s macOS 10.15 “Catalina” has also joined that elite group <https://www.theregister.co.uk/2020/05/27/apple_catalina_update/>: The first spin of Catalina, officially released in October 2019, was a mess. ... The biggest issue was that all kinds of apps simply stopped working. ... Peripherals like mice, keyboards and printers stopped working. Email went missing; iCloud backups failed; users were constantly harassed by login requests; updates didn’t update ... ... So came for the first update to its new system one week after the main launch which fixed some, but not all, of the issues. ... Version two came in December 2019 and fixed some of those issues, but not all. ... More bug fixes came with version three in January 2020, but the OS seemed to have finally stabilized; something that was then spectacularly undone with version .4. ... Then we had the “supplemental update” to version 10.15.4, which fixed some, but not all, of the problems – most significantly the problem with Finder and transferring large files. And, amazingly, appeared to undo the good work that had been done with website security and broke SSH for some users. But now, with version point-five this week, that problem appears to have been sorted and, of course, your battery might last longer too.

1 1

Linux distro for Apple silicon Macs is already up and running on the brand-new M2
by Peter Reutemann 19 Jul '22

19 Jul '22

'Unlike Intel Macs, Apple silicon Macs were designed to run only Apple's software. But the developers on the Asahi Linux team have been working to change that, painstakingly reverse-engineering support for Apple's processors and other Mac hardware and releasing it as a work-in-progress distro that can actually boot up and run on bare metal, no virtualization required. The Asahi Linux team put out a new release today with plenty of additions and improvements. Most notably, the distro now supports the M1 Ultra and the Mac Studio and has added preliminary support for the M2 MacBook Pro (which has been tested firsthand by the team) and the M2 MacBook Air (which hasn't been tested but ought to work). Preliminary Bluetooth support for all Apple silicon Macs has also been added, though the team notes that it works poorly when connected to a 2.4GHz Wi-Fi network because "Wi-Fi/Bluetooth coexistence isn't properly configured yet." There are still many other things that aren't working properly, including the USB-A ports on the Studio, faster-than-USB-2.0 speeds from any Type-C/Thunderbolt ports, and GPU acceleration, but progress is being made on all of those fronts. GPU work in particular is coming along, with a "prototype driver" that is "good enough to run real graphics applications and benchmarks" already up and running, though it's not included in this release.' -- source: https://arstechnica.com/gadgets/2022/07/linux-distro-for-apple-silicon-macs… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 (office) +64 (7) 577-5304 (home office) https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0