- wlug - University of Waikato Mail Lists

Does Ringing Room Use BBB?
by Lawrence D'Oliveiro 04 Jun '20

04 Jun '20

Came across this site <https://ringingroom.com/> mentioned on the TV news this evening. It’s a “virtual bell tower” where fans of bell-ringing can gather to scratch their itch during lockdown in the UK and US. The thing that strikes me is, it look remarkably similar, at least in concept, to Web conferencing software BigBlueButton <https://bigbluebutton.org/>. I wonder if it’s an application/customization of the latter?

1 0

Zoom Won't Encrypt Free Calls Because it Wants To Comply With Law Enforcement
by Peter Reutemann 04 Jun '20

04 Jun '20

'If you're a free Zoom user, and waiting for the company to roll out end-to-end encryption for better protection of your calls, you're out of luck. From a report: Free calls won't be encrypted, and law enforcement will be able to access your information in case of 'misuse' of the platform. Zoom CEO Eric Yuan today said that the video conferencing app's upcoming end-to-end encryption feature will be available to only paid users.' -- source: https://yro.slashdot.org/story/20/06/03/1150245 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

6 9

TrueNAS isn’t abandoning BSD—but it is adopting Linux
by Peter Reutemann 04 Jun '20

04 Jun '20

'To the surprise—and likely consternation—of BSD fans everywhere, FreeNAS vendor iXsystems is building a new version of its core product, TrueNAS, on top of Debian Linux. This week's TrueNAS Scale announcement builds on the company's March announcement that its commercial project TrueNAS and its community project FreeNAS would be merging into a common base. Effectively, all the NAS projects from iXsystems will be TrueNAS variants moving forward, with the free-to-use version being TrueNAS Core, the new Debian-based project becoming TrueNAS Scale, and the commercial project remaining simply TrueNAS.' -- source: https://arstechnica.com/gadgets/2020/06/truenas-isnt-abandoning-bsd-but-it-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

New Cold Boot Attack Affects Seven Years of LG Android Smartphones
by Peter Reutemann 04 Jun '20

04 Jun '20

'South Korean phone manufacturer LG has released a security update last month to fix a vulnerability that impacts its Android smartphones sold over the past seven years. From a report: The vulnerability, tracked under the identifier of CVE-2020-12753, impacts the bootloader component that ships with LG smartphones. In March this year, US software engineer Max Thomas discovered a vulnerability in the bootloader component that had been added to LG smartphones starting with the LG Nexus 5 series. In a technical breakdown of the vulnerability published on Tuesday, Thomas says the bootloader component's graphics package contains a bug that lets attackers sneak in their own code to run alongside the bootloader's graphics under certain conditions, such as when the battery dies out and when the device is in the bootloader's Download Mode. Thomas says that threat actors who perfectly time an attack can gain the ability to run their own custom code, which could allow them to take over the bootloader, and inherently the entire device.' -- source: https://mobile.slashdot.org/story/20/06/03/1830216 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google fixes Android flaws that allow code execution with high system rights
by Peter Reutemann 03 Jun '20

03 Jun '20

'Google has shipped security patches for dozens of vulnerabilities in its Android mobile operating system, two of which could allow hackers to remotely execute malicious code with extremely high system rights. In some cases, the malware could run with highly elevated privileges, a possibility that raises the severity of the bugs. That’s because the bugs, located in the Android System component, could enable a specially crafted transmission to execute arbitrary code within the context of a privileged process. In all, Google released patches for at least 34 security flaws, although some of the vulnerabilities were present only in devices available from manufacturer Qualcomm.' -- source: https://arstechnica.com/information-technology/2020/06/google-fixes-android… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

DOD's Third Attempt To Implement IPv6 Isn't Going Well
by Peter Reutemann 03 Jun '20

03 Jun '20

'The US Department of Defense is woefully behind on its plan to upgrade its IT infrastructure to support the newer IPv6 protocol, according to a government report published on Monday. From a report: This current effort is the third time the DOD attempts to upgrade its infrastructure to support IPv6 over in the past 17 years. The first two attempts took place in 2003 and 2010, respectively. The 2003 effort was abandoned with the DOD citing security risks and a lack of personnel trained in IPv6, while the second attempt was also abandoned, similarly on the grounds that IPv6 was not yet secure enough for the DOD's sensitive networks. On Monday, the Government Accountability Office (GAO), the auditing agency of the US government, said that the DOD's third attempt isn't doing any better either. GAO officials said the DOD failed to follow four basic requirements that were set out by the White House Office of Management and Budget (OMB) in 2006. The four requirements were part of an OMB guideline sent to all federal agencies detailing the proper procedure for upgrading networks from IPv4 to IPv6. "For its current [third] initiative, DOD has not completed three of four longstanding OMB requirements," GAO auditors said in a report published on Monday.' -- source: https://news.slashdot.org/story/20/06/02/1447254 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox 77 Arrives With Faster JavaScript Debugging and Optional Permissions
by Peter Reutemann 03 Jun '20

03 Jun '20

'Mozilla today launched Firefox 77 for Windows, Mac, and Linux. Firefox 77 includes faster JavaScript debugging, optional permissions for extensions, and Pocket recommendations in the U.K. You can download Firefox 77 for desktop now from Firefox.com, and all existing users should be able to upgrade to it automatically. According to Mozilla, Firefox has about 250 million active users, making it a major platform for web developers to consider. [...] Other than Pocket recommendations arriving in the U.K. (they've been in Canada, Germany, and the U.S. since April 2018), this is primarily a developer release. Firefox's Debugger is now better at handling large web apps with all their bundling, live reloading, and dependencies. Mozilla is promising performance improvements that speed up pausing and stepping, as well as cutting down on memory usage over time. Source maps should also see performance boosts -- some inline source maps load 10 times faster -- and improved reliability for many configurations. The debugger will now also respect the currently selected stack when stepping, which is useful when you've stepped into a function call or paused in a library method further down in the stack.' -- source: https://news.slashdot.org/story/20/06/02/1530214 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Wallpaper crash explained: Here’s how a simple image can soft-brick phones
by Peter Reutemann 02 Jun '20

02 Jun '20

'How can a simple image crash an Android phone to the point that it becomes unusable? It’s a question that came out frequently over the past 24 hours, as news of a “cursed wallpaper” spread around the web. Here’s a recap: Setting a particular image as wallpaper can send some phones into a loop of crashes that makes them unusable. There are a few solutions, depending on how hard the phone is hit. Some users were able to change the wallpaper in the short interval between crashes. Others had success deleting the wallpaper using the recovery tool TWRP. But in most cases, the only solution was to reset the phone to factory settings, losing any data that’s not backed up. The issue was brought to light by Ice Universe, the Chinese Twitter users known for leaks. Based on user reports, many models from Samsung and Google are affected, while we’ve also seen some reports from users of OnePlus, Nokia, and Xiaomi devices (it’s not clear if these latter devices ran stock software or custom ROMs). From our own testing and looking at user reports, Huawei devices seem to be less exposed to the wallpaper crash issue.' -- source: https://www.androidauthority.com/android-wallpaper-crash-1124577/ Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Programmers Use 80 Characters Per Line!?
by Lawrence D'Oliveiro 02 Jun '20

02 Jun '20

Are there still people writing their code to the constraints of 80-column CRT terminals which vanished into museums decades ago? Seems there are enough such around to rile Linus Torvalds <https://www.theregister.com/2020/06/01/linux_5_7/>. Even back in the days of those terminals, the printers you used for hard-copy listings could almost always do 132-column lines. And some of the terminals could be put into a mode with such a line length, by using a much narrower font (I remember it hurt my eyes to do much work in this mode). Nowadays I typically have my text-editor windows set to a width of 100 columns. And there is still enough room on my screen for two such views side-by-side.

1 0

Lawsuit Over Online Book Lending Could Bankrupt Internet Archive
by Lawrence D'Oliveiro 02 Jun '20

02 Jun '20

A group of book publishers is suing the Internet Archive over its recent loosening of restrictions on lending out copyrighted books <https://arstechnica.com/tech-policy/2020/06/publishers-sue-internet-archive…>. Choice description of the founder of the Internet Archive: "Brewster Kahle is what the Russians might call a holy fool—someone who acts without real regard for himself or the worldly things in the service of a higher calling," [copyright scholar James] Grimmelmann said.

1 0