- wlug - University of Waikato Mail Lists

Ampere Altra is the First 80-core ARM-based Server Processor
by Peter Reutemann 05 Mar '20

05 Mar '20

'Ampere has unveiled the industry's first 80-core ARM-based 64-bit server processor today in a bid to outdo Intel and Advanced Micro Devices in datacenter chips. From a report: Ampere announced today that it has begun providing samples of the Ampere Altra processor for modern cloud and edge computing datacenters. The Ampere Altra processor runs on 210 watts and is targeted at such server applications as data analytics, artificial intelligence, database, storage, telco stacks, edge computing, web hosting, and cloud-native applications. Intel dominates about 95.5% of the server chip market with its x86-based processors, and AMD has the rest. But Ampere is targeting power-efficient, high-performance, and high-memory capacity features. Renee James, former president of Intel and CEO of Ampere, said in an interview with VentureBeat that the chip is faster than a 64-core AMD Epyc processor and Intel's 28-core high-end Xeon "Cascade Lake" chip.' -- sources: https://hardware.slashdot.org/story/20/03/04/2027230 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Intel CSME Bug Worse Than Previously Thought
by Peter Reutemann 05 Mar '20

05 Mar '20

'Security researchers say that a bug in one of Intel's CPU technologies that was patched last year is actually much worse than previously thought. From a report: "Most Intel chipsets released in the last five years contain the vulnerability in question," said Positive Technologies in a report published today. Attacks are impossible to detect, and a firmware patch only partially fixes the problem. To protect devices that handle sensitive operations, researchers recommend replacing CPUs with versions that are not impacted by this bug. Only the latest Intel 10th generation chips are not vulnerable, researchers said. The actual vulnerability is tracked as CVE-2019-0090, and it impacts the Intel Converged Security and Management Engine (CSME), formerly called the Intel Management Engine BIOS Extension (Intel MEBx). ' -- source: https://it.slashdot.org/story/20/03/05/149222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

GCHQ’s Advice For Securing Smart-Home Gadgets
by Lawrence D'Oliveiro 04 Mar '20

04 Mar '20

For those who can’t be bothered trying to understand the ins and outs of security concerns with “Internet-Of-Things” devices <https://www.theregister.co.uk/2020/03/03/ncsc_smart_gadget_security_tips/> such as cameras and baby monitors, GCHQ advises: * If your camera comes with a default password, change it to a secure one – connecting three random words which you'll remember is a good way to do this. You can usually change your password using the app you use to manage the device. * Keep your camera secure by regularly updating security software. Not only does this keep your devices secure, but often adds new features and other improvements. * If you do not use the feature that lets you remotely access the camera from the internet, it is recommended you disable it.

1 0

Let’s Encrypt discovers CAA bug, must revoke customer certificates
by Peter Reutemann 04 Mar '20

04 Mar '20

'On Leap Day, Let's Encrypt announced that it had discovered a bug in its CAA (Certification Authority Authorization) code. The bug opens up a window of time in which a certificate might be issued even if a CAA record in that domain's DNS should prohibit it. As a result, Let's Encrypt is erring on the side of security and safety rather than convenience and revoking any currently issued certificates it can't be certain are legitimate, saying: Unfortunately, this means we need to revoke the certificates that were affected by this bug, which includes one or more of your certificates. To avoid disruption, you'll need to renew and replace your affected certificate(s) by Wednesday, March 4, 2020. We sincerely apologize for the issue. If you're not able to renew your certificate by March 4, the date we are required to revoke these certificates, visitors to your site will see security warnings until you do renew the certificate.' -- source: https://arstechnica.com/information-technology/2020/03/lets-encrypt-revokin… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

Microsoft Retiring MCSA/MCSD/MCSE Certifications
by Lawrence D'Oliveiro 04 Mar '20

04 Mar '20

Came across this Microsoft article <https://www.microsoft.com/en-us/learning/community-blog-post.aspx?BlogId=8&…> (linked from this YouTube video <https://www.youtube.com/watch?v=laaGuJItNCM>) explaining that Microsoft is “retiring” its more broad-based MCSA, MCSD and MCSE certifications in favour of a range of narrower, “role-based” ones. You’ll notice in the diagram on that page that everything starts with the cloud now: Azure, Dynamics 365 and Microsoft 365. And as we know, Microsoft has previously admitted that Azure is more about Linux instances rather than Windows ones. Myself, I never understood the emphasis on vendor-specific certifications. They have a short shelf-life, requiring continual “refreshing” or “updating” to new product versions--basically another revenue stream for the vendor.

1 0

Cisco: Avoid Coronavirus, Stay Home, Use Webex
by Peter Reutemann 03 Mar '20

03 Mar '20

'Ars Technica: Networking giant Cisco is getting into the coronavirus monitoring and mitigation game with its Webex remote meeting property. The company notes that in the wake of mandates issued to employees to halt travel plans and/or work from home, traffic across its Webex backbone has increased significantly. Webex meeting traffic connecting Chinese users to global workplaces has increased by a factor of 22 since the outbreak began; traffic in other Asian countries is up by 400 percent or more, and free signup rates in impacted countries have increased 700 percent or more. In response, Cisco is offering temporarily unlimited usage (with no time restrictions) in all countries where the service is available (full list here), not just the ones worst hit by coronavirus. The company is also offering free 90-day licenses to businesses that are not currently Webex customers and offering free upgrades to customers whose current plan is insufficient to accommodate increased traffic due to the outbreak. In the worst affected countries, telepresence and remote work software like Webex is currently the only alternative to a complete shutdown of activities. In its press release, Cisco highlights the Nesbitt Center, an organization working with disabled young adults in Hong Kong. All Hong Kong schools, including the Nesbitt Center, have been required to suspend day programs during the outbreak. Webex videoconferencing has allowed the Nesbitt Center to continue delivering educational sessions despite the lockdown. Ars Technica also recommends Jitsi, a "free and open source software, offering video call and screen sharing capabilities." There's also Jitsi Meet for people "who just need to get something done on-the-fly with no setup at all." Do you have a favorite remote work software?' -- source: https://tech.slashdot.org/story/20/03/03/2013226/cisco-avoid-coronavirus-st… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

If You Like RSS, You'll Love Fraidycat
by Peter Reutemann 03 Mar '20

03 Mar '20

'J. Fergus, writing for Input: Someone finally did it. We can now follow who we want on our own terms and get that information chronologically. Fraidycat is an app and browser extension that allows just that. Though it launched in November 2019, Fraidycat recently got a massive update, widening its compatibility and adding a dark mode. The open-source tool, brought to you by Kicks Condor, is available for Linux, Mac, and Windows in addition to Mozilla Firefox and Chrome as an extension. Fraidycat definitely pulls from RSS feeds more easily, but it also works on Twitter, Instagram, and SoundCloud. You drop the link to the account you'd like to follow -- from Medium bloggers to Twitch streamers to vision board Pinterest-ers -- and set how frequently you'd like to see their posts. Label it, hit save, and posts will appear as often as you'd like. The recent update notably folds Kickstarter into the mix and collapses Twitter threads for readability.' -- source: https://tech.slashdot.org/story/20/03/03/1441254 Personally, I use the "Feeder" app on my phone for my RSS feeds: https://f-droid.org/en/packages/com.nononsenseapps.feeder/ But Fraidycat looks like an interesting project. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Firefox: removing "Save link to Pocket" menu item
by Peter Reutemann 03 Mar '20

03 Mar '20

Hi everyone Ever got annoyed at the "Save link to Pocket" in Firefox's right-click popup menu? In case you don't use that feature (like me), here's how you can turn it off (and also re-enable): https://support.mozilla.org/en-US/kb/disable-or-re-enable-pocket-for-firefox It boils down to toggling the following setting ("about:config"): extensions.pocket.enabled Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Freedb.org Is Shutting Down
by Peter Reutemann 03 Mar '20

03 Mar '20

'Freedb, the community-generated database of music CD metadata, is shutting down on March 31, 2020. The service was set up as a free alternative to CDDB. Many CD-ripping applications pull metadata from Freedb to save the user having to type it in manually, but the service has some major limitations and has now been superseded by MusicBrainz. This wouldn't be the first time Freedb shut down. In 2006, the site shut down due to a disagreement among its developers, only to be brought back to life a few months later. It's unclear why Freedb is shutting down after all these years.' -- source: https://developers.slashdot.org/story/20/03/02/2245216 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

'Have I Been Pwned' Is No Longer For Sale
by Peter Reutemann 03 Mar '20

03 Mar '20

'Troy Hunt, the owner and founder of the well-known and respected data breach notification website "Have I Been Pwned," announced in a blog post today that his website is no longer being sold and will continue running independently. The news comes several months after Hunt announced he was actively looking for a buyer. Last June, Hunt wrote: "To date, every line of code, every configuration and every breached record has been handled by me alone. There is no 'HIBP team,' there's one guy keeping the whole thing afloat. It's time for HIBP to grow up. It's time to go from that one guy doing what he can in his available time to a better-resourced and better-funded structure that's able to do way more than what I ever could on my own." Now, according to Hunt, "unexpected changes" with the business model of the party believed to be the purchaser of the service "made the deal infeasible." "It wasn't something I could have seen coming nor was it anything to do with HIBP itself, but it introduced a range of new and insurmountable barriers," writes Hunt in today's blog post. Hunt goes on to explain what's been happening since April 2019 and how the service will operate in the future. ' -- source: https://it.slashdot.org/story/20/03/02/2148230 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0