- wlug - University of Waikato Mail Lists

How DNSpooq Attacks Could Poison DNS Cache Records
by Peter Reutemann 23 Jan '21

23 Jan '21

'Earlier this week security experts disclosed details on seven vulnerabilities impacting Dnsmasq, "a popular DNS software package that is commonly deployed in networking equipment, such as routers and access points," reports ZDNet. "The vulnerabilities tracked as DNSpooq, impact Dnsmasq, a DNS forwarding client for *NIX-based operating systems." Slashdot reader Joe2020 shared Help Net Security's quote from Shlomi Oberman, CEO and researcher at JSOF. "Some of the bigger users of Dnsmasq are Android/Google, Comcast, Cisco, Red Hat, Netgear, and Ubiquiti, but there are many more. All major Linux distributions offer Dnsmasq as a package, but some use it more than others, e.g., in OpenWRT it is used a lot, Red Hat use it as part of their virtualization platforms, Google uses it for Android hotspots (and maybe other things), while, for example Ubuntu just has it as an optional package." More from ZDNet: Dnsmasq is usually included inside the firmware of various networking devices to provide DNS forwarding capabilities by taking DNS requests made by local users, forwarding the request to an upstream DNS server, and then caching the results once they arrive, making the same results readily available for other clients without needing to make a new DNS query upstream. While their role seems banal and insignificant, they play a crucial role in accelerating internet speeds by avoiding recursive traffic... Today, the DNSpooq software has made its way in millions of devices sold worldwide [including] all sorts of networking gear like routers, access points, firewalls, and VPNs from companies like ZTE, Aruba, Redhat, Belden, Ubiquiti, D-Link, Huawei, Linksys, Zyxel, Juniper, Netgear, HPE, IBM, Siemens, Xiaomi, and others. The DNSpooq vulnerabilities, disclosed today by security experts from JSOF, are dangerous because they can be combined to poison DNS cache entries recorded by Dnsmasq servers. Poisoning DNS cache records is a big problem for network administrators because it allows attackers to redirect users to clones of legitimate websites... In total, seven DNSpooq vulnerabilities have been disclosed today. Four are buffer overflows in the Dnsmasq code that can lead to remote code execution scenarios, while the other three bugs allow DNS cache poisoning. On their own, the danger from each is limited, but researchers argue they can be combined to attack any device with older versions of the Dnsmasq software... The JSOF exec told ZDNet that his company has worked with both the Dnsmasq project author and multiple industry partners to make sure patches were made available to device vendors by Tuesday's public disclosure.' -- source: https://it.slashdot.org/story/21/01/23/0412253 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Alphabet Shuts Down Loon Internet Balloon Company
by Peter Reutemann 22 Jan '21

22 Jan '21

'Google's parent firm, Alphabet, is done exploring the idea of using a fleet of balloons to beam high-speed internet in remote parts of the world. From a report: The firm said on Thursday evening that it was winding down Loon, a nine-year-old project and a two-and-a-half-year-old spin off firm, after failing to find a sustainable business model and partners for one of its most prominent moonshot projects. The demise of Loon, which assumed spotlight after the project helped restore cell services knocked out by a hurricane in Puerto Rico, comes a year after the Android-maker ended Google Station, its other major connectivity effort to bring internet to the next billion users.' -- source: https://tech.slashdot.org/story/21/01/22/1418212 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Intel Talks With TSMC, Samsung To Outsource Some Chip Production
by Peter Reutemann 22 Jan '21

22 Jan '21

'Intel has talked with TSMC and Samsung about the Asian companies making some of its best chips, but the Silicon Valley pioneer is still holding out hope for last-minute improvements in its own production capabilities. Bloomberg reports: After successive delays in its chip fabrication processes, Santa Clara, California-based Intel has yet to make a final decision less than two weeks ahead of a scheduled announcement of its plans, according to people familiar with the deliberations. Any components that Intel might source from Taiwan wouldn't come to market until 2023 at the earliest and would be based on established manufacturing processes already in use by other TSMC customers, said the people, asking not to be identified because the plans are private. Talks with Samsung, whose foundry capabilities trail TSMC's, are at a more preliminary stage, the people said. An Intel spokesperson referred to previous comments by Bob Swan, the company's chief executive officer. Swan has promised investors he'll set out his plans for outsourcing and get Intel's production technology back on track when the company reports earnings Jan. 21. [...] TSMC, the largest maker of semiconductors for other companies, is preparing to offer Intel chips manufactured using a 4-nanometer process, with initial testing using an older 5-nanometer process, according to the people. The company has said it will make test production of 4-nanometer chips available in the fourth quarter of 2021 and volume shipments the following year. The Taiwanese company expects to have a new facility in Baoshan operational by the end of this year, which can be converted to production for Intel if required, one of the people said. TSMC executives previously said the new Baoshan unit would house a research center with 8,000 engineers. While Intel has outsourced production of lower-end chips before, it has kept the manufacturing of its best semiconductors in-house, considering it a competitive strength. Its engineers have historically tailored their designs to the company's manufacturing processes, making a shift to outsourcing of flagship products unthinkable in the past. As the provider of 80% of personal computer and server processors globally, Intel produces hundreds of millions of chips each year. That scale dictates that any potential supplier must create new capacity to accommodate Intel.' -- source: https://hardware.slashdot.org/story/21/01/08/2215226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

“When Elephants Fight, The Grass Gets Trampled”
by Lawrence D'Oliveiro 22 Jan '21

22 Jan '21

When big news organizations tussle with big Web search engines and social media outfits over who is stealing revenue from whom, how do you decide who is right and who is wrong? The Aussie Government is trying to protect one lot of multinational companies from the encroachments of another lot; where does fair competition end and protectionism or exploitation begin? <https://www.nzherald.co.nz/business/google-threatens-to-ban-search-button-i…> (By the way, in that old African proverb, the “grass” is the ordinary people who are the inevitable victims in any conflict between major powers.)

1 0

Ubuntu Now Runs On Apple Silicon, Devs Say It's 'Completely Usable'
by Peter Reutemann 21 Jan '21

21 Jan '21

'Developers at ARM virtualisation company Corellium have managed to get Ubuntu 20.04 up and running on the new Apple Silicon Mac Mini. And we're not talking 'it boots and prints a load of text' running here. No, this is the full Ubuntu desktop experience -- and it's already being described as "completely usable!" Pretty impressive, right? Even Linus Torvalds wasn't convinced that Linux M1 support was likely to appear anytime soon. He told ZDnet's Steven J. Vaughan-Nichols that: "...the main problem with the M1 for me is the GPU and other devices around it, because that's likely what would hold me off using it because it wouldn't have any Linux support unless Apple opens up." Not that he was entirely wrong, mind. GPU support is indeed a current sticking point in Correllium's Linux for M1 effort. It doesn't (yet) include M1 GPU support meaning 'graphics' handling is done via software rendering.' -- source: https://news.slashdot.org/story/21/01/21/1329258 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

NSA Urges System Administrators To Replace Obsolete TLS Protocols
by Peter Reutemann 21 Jan '21

21 Jan '21

'The US National Security Agency has issued a security advisory this month urging system administrators in federal agencies and beyond to stop using old and obsolete TLS protocols. From a report: "NSA recommends that only TLS 1.2 or TLS 1.3 be used; and that SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1 not be used," the agency said. "Using obsolete encryption provides a false sense of security because it seems as though sensitive data is protected, even though it really is not," the agency added. Even if TLS 1.2 and TLS 1.3 are deployed, the NSA warns against configuring these two protocols with weak cryptographic parameters and cipher suites.' -- source: https://tech.slashdot.org/story/21/01/21/1646211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Leave.EU Stays In The EU
by Lawrence D'Oliveiro 21 Jan '21

21 Jan '21

The domain that was registered by Brexiteers to promote their campaign for the UK to leave the EU has been re-domiciled to an address in the EU <https://www.theregister.com/2021/01/08/leave_eu_domain_name_hilarity/>. This is because of rule changes that mean UK-based entities are no longer entitled to register .eu names. So if the site wants to stay up under that name, it cannot, contrary to its own name, leave the EU. Just to add to the fun, the individual in the Republic of Ireland who is named on the domain registration claims to know nothing about it, and says he “will be looking into the matter”.

3 3

Stopping Alert Volume Going To 100%
by Lawrence D'Oliveiro 20 Jan '21

20 Jan '21

For quite a while now, I’ve been annoyed by the system notification volume going to 100% on my Debian systems, regardless of my attempts to set it to a lower level. For example, when I open the KDE System Settings app, change something, then try to close the window, the sound that accompanies the save/discard/cancel alert is always startlingly loud. I think I have finally found a fix: in your /etc/pulse/daemon.conf, put in a line saying flat-volumes = no (You should find an existing comment “; flat-volumes = yes” that indicates the default.) You can make this new setting take effect in the current session immediately without having to logout or reboot, by executing the following as the currently-logged-in user: pulseaudio -k (This kills and restarts the PulseAudio daemon for your user session.) There are several discussions of the pros and cons of this issue online, going back some years. For example, here <https://bugzilla.redhat.com/show_bug.cgi?id=1265267>. Also a mention about the “flat-volumes” setting in the ever-reliable Arch Linux Wiki here <https://wiki.archlinux.org/index.php/PulseAudio>.

1 1

Wine 6.0 Released
by Peter Reutemann 19 Jan '21

19 Jan '21

'Wine 6.0 has been released today and contains over 8,300 changes, according to its full release notes. Windows Central reports: The new release of version 6.0 has thousands of changes, but Wine's website highlights some of the biggest improvements: Core modules in PE format; Vulkan backend for WineD3D; DirectShow and Media Foundation support; and Text console redesign. The full release notes for Wine 6.0 explain that the core DLLs, which include NTDLL, KERNEL32, GDI32, and USER32 are now built in the Portable Executable (PE) format. As a result, people should see improvements for certain copy protection schemes. The update also includes a new mechanism to associate a Unix library with the PE module. This change makes it so systems can call Unix libraries from PE when trying to perform a function that can't be handled by Win32 APIs. Wine 6.0 also includes an experimental Vulkan rendered that translates Direct3D shaders to SPIR-V shaders. In another change related to Direct3D, the Direct3D graphics card database now recognizes more graphics cards and includes updated driver versions. ' -- source: https://tech.slashdot.org/story/21/01/19/039257 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Brave Becomes First Browser To Add Native Support For the IPFS Protocol
by Peter Reutemann 19 Jan '21

19 Jan '21

'With the release of Brave 1.19 today, Brave has become the first major browser maker to support IPFS, a peer-to-peer protocol meant for accessing decentralized or censored content. From a report: Released in 2015, IPFS stands for InterPlanetary File System. It is a classic peer-to-peer protocol similar to BitTorrent and designed to work as a decentralized storage system. IPFS allows users to host content distributed across hundreds or thousands of systems, which can be public IPFS gateways or private IPFS nodes. Users who want to access any of this content must enter an URL in the form of ipfs://{content_hash_ID}. Under normal circumstances, users would download this content from the nearest nodes or gateways rather than a central server. However, this only works if users have installed an IPFS desktop app or a browser extension. Brave says that with version 1.19, users will be able to access URLs that start with ipfs://, directly from the browser, with no extension needed, and that Brave will natively support ipfs:// links going forward. Since some major websites like Wikipedia have IPFS versions, users in oppressive countries can now use Brave's new IPFS support to go around national firewalls and access content that might be blocked inside their country for political reasons and is available via IPFS.' -- source: https://it.slashdot.org/story/21/01/19/2015252 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 577-5304 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0