- wlug - University of Waikato Mail Lists

Thunderbolt Bug Lets Hackers Steal Your Data in 'Five Minutes'
by Peter Reutemann 13 May '20

13 May '20

'A new set of flaws discovered in the Intel Thunderbolt port has put millions of machines at risk of local hacking. This new research by Eindhoven University's Bjorn Ruytenberg suggests that if a hacker gains access to a machine for just five minutes, they could bypass login methods to gain full data access. From a report: Thunderbolt ports are present in machines with Windows, Linux, and macOS. So, that covers a lot of computers. Ruytenberg said all Thunderbolt versions and systems shipped between 2011 to 2020 are affected and no software patch can fix these vulnerabilities. So, Intel would need to redesign silicon in order to fix these flaws. There's not much you can do here. However, with open-source software called Thunderspy, developed by Ruytenberg and their team, you can check if you're affected by the Thunderbolt bug.' -- source: https://it.slashdot.org/story/20/05/11/1450208 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

Microsoft Wants Notebooks
by Lawrence D'Oliveiro 12 May '20

12 May '20

One of the plans announced for Microsoft’s Visual Studio Code development environment <https://www.theregister.co.uk/2020/05/11/visual_studio_code_145_released/> is “notebooks” à la Jupyter: The team is also working on native support for notebooks, though rather than just support Jupyter notebooks (for which support already exists as part of the Python tools) the intention is to "build a Notebook solution that is unbiased and supports different styles of Notebooks". Of course, Jupyter itself already allows you to use other programming languages, not just Python. By the way, interesting to note that Jupyter is becoming the recognized reference for the notebook paradigm, as opposed to Mathematica which is where the idea originated.

1 0

ZFS 101—Understanding ZFS storage and performance
by Peter Reutemann 11 May '20

11 May '20

'As we all enter month three of the COVID-19 pandemic and look for new projects to keep us engaged (read: sane), can we interest you in learning the fundamentals of computer storage? Quietly this spring, we've already gone over some necessary basics like how to test the speed of your disks and what the heck RAID is. In the second of those stories, we even promised a follow-up exploring the performance of various multiple-disk topologies in ZFS, the next-gen filesystem you have heard about because of its appearances everywhere from Apple to Ubuntu. Well, today is the day to explore, ZFS-curious readers. Just know up front that in the understated words of OpenZFS developer Matt Ahrens, "it's really complicated." But before we get to the numbers—and they are coming, I promise!—for all the ways you can shape eight disks' worth of ZFS, we need to talk about how ZFS stores your data on-disk in the first place.' -- source: https://arstechnica.com/information-technology/2020/05/zfs-101-understandin… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Which Linux Desktop Environment is the Best?
by Peter Reutemann 11 May '20

11 May '20

'Tom's Hardware "put five of the most popular desktop environments up against each other in a no-holds-barred, seven-round face-off. We've rated GNOME, KDE, Cinnamon, Awesome and Regolith on a 10-point scale based on Installation, Applications, User Experience, User Documentation, Performance, Extensions and Configurability." It's a good read, with a detailed and thoughtful 3,700-word analysis, especially about memory performance: When you use the standard desktops, Gnome and KDE, you will likely notice that you are using a lot of memory... If you haven't noticed yet, try running htop in a separate window while you try out your choices. You should see a substantial difference with Awesome, i3 and, if you are elite, dwm. The difference in memory footprint is staggering when you start measuring. GNOME starts with somewhere in the region of 3GB at boot. This can be trimmed down by serious tweaking, but not very much. In comparison, the Awesome window manager weighs in at around 600MB... You can put a lot of eye candy and daemons before you weigh down your system as much as the others... Getting the advantage comes at a cost, though: you need to learn a few new habits to use Awesome desktop environment. Among GNOME, KDE, and Cinnamon, the article ultimately calls KDE "the most polished... decorative and versatile of the bunch. This comes at a cost, though." Cinnamon has the best balance between extensions and ease of use, while it is also fast and responsive. At the same time, it is not that heavy on resources. You can also add a wide range of extensions in the shape of widgets that send you ongoing and updated information. Regolith requires a bit more training, but it does set itself up for you so you can continue as you did with GNOME. Adding extensions and other gadgets is a bit more tricky, however... With Awesome you have to set up and practice to use it! It's easily the hardest in the group to get started with. When you are up and running, Awesome does deliver the most benefits from a resource point of view... Overall Winner: Cinnamon...because of its strong combination of user experience, performance and customization. ' -- source: https://tech.slashdot.org/story/20/05/10/1552222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Source Code For Contact-Tracing Apps
by Lawrence D'Oliveiro 10 May '20

10 May '20

The UK and Australia have both published the source code for their contact-tracing apps on GitHub <https://www.theregister.co.uk/2020/05/09/coronavirus_tracing_app_source_cod…>. And of course a lot of people are going over them with a fine-toothed comb. Some are even suggesting that one for Apple’s platform, for example, might be violating the company’s rules on using Bluetooth while running in the background. It’s hard to see how these apps won’t be a big battery drain anyway. Maybe the NZ government is wise not to make this sort of thing a priority for now.

1 0

Do Working-From-Home Developers Risk Burning Out?
by Peter Reutemann 10 May '20

10 May '20

'"Software developers, like everyone else, have had to transition to a work-from-home world," writes InfoWorld. For the users of GitHub, the COVID-19 pandemic has meant changes in work cadence and collaboration, along with an increased risk of burnout, a GitHub study of usage patterns on the Microsoft-owned code sharing site has found." In an "Octoverse spotlight" analysis published May 6, 2020, GitHub compared the first three months of 2020 with the first three months of 2019... GitHub said its analysis shows that developers have been resilient to the change wrought by COVID-19, with activity holding consistent or increasing through the crisis. But their analysis also found: - Developers are working longer, by "up to an hour per day," seven days a week. - Slightly more pushes, pull requests, reviewed pull requests, and commented issues. - More collaboration on open source projects, and less time to merge pull requests into open source projects.' -- source: https://news.slashdot.org/story/20/05/09/0158217 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

3D Printed N95 Montana Mask Design Released Under GPLv3
by Peter Reutemann 10 May '20

10 May '20

'Since the COVID-19 pandemic has made Personal Protective Equipment worth it's weight in gold, Makers have been trying to help bridge the gap. While sewn masks have been the most common solution, the 3D printing community has been pitching in as well. The Montana Mask has been one of the most popular designs... Thursday, the group Make the Masks announced that the design files and STLs to print the mask have been released under the GNU General Public License v3, allowing anyone to print, sell, remix or improve the design, as long as they conform to the license. Importantly, the GPLv3 includes an international non-exclusive patent grant, meaning that even if the inventors decide to apply for a patent, it will not restrict anyone from using the design.' -- source: https://science.slashdot.org/story/20/05/09/1859238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Where Does Ad Money Go?
by Lawrence D'Oliveiro 08 May '20

08 May '20

The accounting firm PwC (does that still stand for “Price Waterhouse Coopers”?) has done a study <https://www.theregister.co.uk/2020/05/07/ad_tech_fees_sucked/> of the online ad market, to see where all the money is going. Turns out only about half the money spent by advertisers makes it all the way to the publishers, with the rest siphoned off by various intermediaries along the way (not all of them legitimate), and 15% could not be accounted for at all. Much of this trading is now done “programmatically”, between automated systems, rather than by direct agreements between humans. And these systems are more complex (i.e. “having more stages where a percentage cut can be taken”) than they need to be.

1 0

Inkscape Approaches Version 1.0
by Lawrence D'Oliveiro 08 May '20

08 May '20

Inkscape v1.0 is tentatively due to be released on May 1st. Here <https://www.theregister.co.uk/2020/04/14/16_years_inkscape_v1/> is a backgrounder on how development has been progressing. There seems to be this assumption that Apple users are important: Mac support is hugely important, thanks to the wide use of Macs in the artistic and designer community. while on the other hand, They know that macOS usage has been very small. The new version is using GTK+3, and the UI is more customizable than before. The command shell has also been improved. Finally: Is the open-source business model, or lack of it, holding back Inkscape? "We would advance much faster with even one or two full-time people," said Jeanmougin. "That has been some frustration because we only rely on donations. We get much less than what we would need to hire people."

1 2

MPA and Amazon Ask GitHub To Suspend Kodi Add-On Developer's Account
by Peter Reutemann 08 May '20

08 May '20

'The MPA, MPA-Canada, and Amazon have filed a request with Github requesting that a Kodi add-on developer's account be deleted from the platform. Citing a copyright case and a permanent injunction handed down by Canada's Federal Court, the content companies claim that the account is still being used to infringe their rights. Github has left the account intact, however. TorrentFreak reports: In February 2018, a developer known online as 'Blamo' (aka 'Mr. Blamo') revealed that he, in common with several of his counterparts, had been threatened by content companies. From there the trail went cold but according to a complaint filed against Github this week, legal action in Canada followed. On September 7, 2018, a dozen companies including the studios of the MPA/MPA-Canada plus Amazon and Netflix launched a copyright infringement lawsuit at Canada's Federal Court against an individual "doing business" as Mr. Blamo. "In the context of that action, our clients alleged that [Blamo] notably developed, hosted, promoted and distributed infringing add-ons for the Kodi media center, which provided unauthorized access to motion pictures and television content for which the copyright is owned by our clients," the MPA writes. According to Federal Court records, Blamo did not mount any kind of defense so as a result, the matter was decided in his absence. On January 15, 2019, the Federal Court handed down a final judgment, including a declaration of infringement and a permanent injunction. "The permanent injunction enjoins and restrains [Blamo] from, inter alia, hosting, distributing or promoting infringing Kodi add-ons and their repositories, including notably the 'Blamo' repository and the "Chocolate Salty Balls' infringing add-ons," the MPA adds. The problem here is that, according to the MPA and associated companies, Blamo has a Github account where it is claimed he continues to "host and distribute infringing Kodi add-ons and their repository, including notably the Chocolate Salty Balls infringing add-on and the Blamo repository." This, the MPA says, amounts to contempt of court. What's particularly interesting here, however, is that the MPA isn't asking for the specified URLs to be deleted. Instead, it asks for Blamo's entire Github account to be deactivated instead.' -- source: https://yro.slashdot.org/story/20/05/07/2018227 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0