- wlug - University of Waikato Mail Lists

Firefox 66.0.3 disabled all your plugins?
by Peter Reutemann 11 May '19

11 May '19

Hi there I just updated my Firefox to 66.0.3 and all of a sudden, all my installed plugins were disabled (eg uBlock). Turns out that the release was buggy and they are working on a fix. In the meantime, you can get things going again through a trick: by enabling "participating in studies" you can get access to their hotfix to remedy this problem (though it can take some time before you get notified once you enabled this option - up to 6 hours; it only took a minute for me). For more information, see the official blog post: https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-fire… If you haven't updated to 66.0.3, then I'd strongly advice to wait for the next version to become available. Will safe you some pain. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 4

New Intel Firmware Boot Verification Bypass Enables Low-Level Backdoors
by Peter Reutemann 11 May '19

11 May '19

'At the Hack in the Box conference in Amsterdam this week, researchers Peter Bosch and Trammell Hudson presented a new attack against the Boot Guard feature of Intel's reference UEFI implementation, known as Tianocore. The attack, which can give an attacker full, persistent access, involves replacing a PC's SPI flash chip with one that contains rogue code, reports Lucian Constantin for CSO. "Even though such physical attacks require a targeted approach and will never be a widespread threat, they can pose a serious risk to businesses and users who have access to valuable information," writes Constantin. Intel has patches available for Tianocore, but as we all remember from the Meltdown and Spectre vulnerabilities, distributing UEFI patches isn't an easy process.' -- source: https://it.slashdot.org/story/19/05/10/2335225 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google Is Starting To Reveal the Secrets of Its Experimental Fuchsia OS
by Peter Reutemann 10 May '19

10 May '19

'At Google's I/O developer conference this past week, Android and Chrome chief Hiroshi Lockheimer offered some rare insight into Fuchsia, albeit at a very high level, in front of public audiences. The Verge reports: What we do know about Fuchsia is that it's an open source project, similar to AOSP, but could run all manner of devices, from smart home gadgets to laptops to phones. It's also known to be built on an all-new, Google-built kernel called "zircon," formerly known as "magenta," and not the Linux kernel that forms the foundation of Android and Chrome OS. "We're looking at what a new take on an operating system could be like. And so I know out there people are getting pretty excited saying, 'Oh this is the new Android,' or, 'This is the new Chrome OS,'" Lockheimer said. "Fuchsia is really not about that. Fuchsia is about just pushing the state of the art in terms of operating systems and things that we learn from Fuchsia we can incorporate into other products." He says the point of the experimental OS is to also experiment with different form factors, a hint toward the possibility that Fuchsia is designed to run on smart home devices, wearables, or possibly even augmented or virtual reality devices. "You know Android works really well on phones and and you know in the context of Chrome OS as a runtime for apps there. But Fuchsia may be optimized for certain other form factors as well. So we're experimenting." Lockheimer provided some additional details at a separate Android fireside chat held at Google I/O today. "It's not just phones and PCs. In the world of [the Internet of Things], there are increasing number of devices that require operating systems and new runtimes and so on. I think there's a lot of room for multiple operating systems with different strengths and specializations. Fuchsia is one of those things and so, stay tuned," he told the audience.' -- source: https://mobile.slashdot.org/story/19/05/10/0021243 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Don Norman: I wrote the book on user-friendly design. What I see today horrifies me
by Peter Reutemann 10 May '19

10 May '19

'The world is designed against the elderly, writes Don Norman, 83-year-old author of the industry bible Design of Everyday Things and a former Apple VP. ' -- source: https://www.fastcompany.com/90338379/i-wrote-the-book-on-user-friendly-desi… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Computerphile YouTube Channel
by Lawrence D'Oliveiro 10 May '19

10 May '19

For those who are interested in short (10-minute or so) videos introducing various computing topics as discussed by lecturers at the University of Nottingham, have a look at the “Computerphile” channel <https://www.youtube.com/user/Computerphile> produced by Sean Riley. He also runs a sister channel which delves into mathematical topics, called “Numberphile” <https://www.youtube.com/user/numberphile>.

1 0

Open source bug poses threat to sites running multiple CMSes
by Peter Reutemann 09 May '19

09 May '19

'Websites running the Drupal, Joomla, or Typo3 content-management systems are vulnerable to attacks that could possibly execute malicious code until administrators install just-released patches, developers and security researchers warned. The vulnerability resides in the PharStreamWrapper, a PHP component developed and open-sourced by CMS maker Typo3. Indexed as CVE-2019-11831, the flaw stems from a path-traversal bug that allows hackers to swap a site's legitimate phar archive with a malicious one. A phar archive is used to distribute a complete PHP application or library in a single file, in much the way a Java archive file bundles many Java files into a single file.' -- source: https://arstechnica.com/information-technology/2019/05/open-source-bug-pose… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

All Chromebooks Will Also Be Linux Laptops Going Forward
by Peter Reutemann 09 May '19

09 May '19

'At Google I/O in Mountain View, Google said "all devices [Chromebook] launched this year will be Linux-ready right out of the box." From a report: In case you've missed it, last year, Google started making it possible to run desktop Linux on Chrome OS. Since then, more Chromebook devices are able to run Linux. Going forward, all of them will be able to do so, too. Yes. All of them. ARM and Intel-based.' -- source: https://linux.slashdot.org/story/19/05/09/1724228 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

WordPress Finally Gets the Security Features a Third of the Internet Deserves
by Peter Reutemann 08 May '19

08 May '19

' The WordPress content management system (CMS) is set to receive an assortment of new security features today that will finally add the protection level that many of its users have desired for years. From a report: These features are expected to land with the official release of WordPress 5.2, expected for later today. Included are support for cryptographically-signed updates, support for a modern cryptography library, a Site Health section in the admin panel backend, and a feature that will act as a White-Screen-of-Death (WSOD) protection -- letting site admins access their backend in the case of catastrophic PHP errors. With WordPress being installed on around 33.8 percent of all internet sites, these features are set to put some fears at ease in regards to some attack vectors. Probably the biggest and the most important of today's new security features is WordPress' offline digital signatures system. Starting with WordPress 5.2, the WordPress team will digitally sign its update packages with the Ed25519 public-key signature system so that a local installation will be able to verify the update package's authenticity before applying it to a local site.' -- source: https://it.slashdot.org/story/19/05/07/1930208 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Android Q Gets Dark Mode, Live Video Captioning, Better Gestures and More
by Peter Reutemann 07 May '19

07 May '19

'At its annual I/O developer event, Google announced a bunch of new features available in the latest Android Q beta. Engadget reports: The most obvious new feature is dark mode, which will be released system-wide in Android Q. It's accessible via a toggle switch in the quick settings area and it'll also be activated when you turn on battery saver mode. We just saw a quick screenshot of it, but it looks like it'll apply to any apps you're using regardless of whether they're Google-made or from other developers. Another notable new feature is called Live Caption. If you're watching a video, Google's machine-learning algorithms can now add captions on the fly by just pressing the volume button and then a "live caption" button that'll show up on on the onscreen volume slider. From there, you can expand and contract the panel as you see fit, and move it up and down on the screen so it doesn't obscure your video. Google is also able to do all of this on-device, so it's more secure and also doesn't need a network connection. [T]he company says that there are 50 new privacy and security settings in Android Q. Perhaps most notable are new location services settings that let you limit location tracking to only when the app is running. It'll also give you notifications to let users see when apps are using your location in the background. New settings also let you keep apps from accessing media on your phone and collecting information about your device like its IMEI and serial number. [...] Google's adding a new "focus mode" to help shut down various distractions. It'll block most app alerts and notifications while allowing important contacts like your family members to reach you. There are also more tools for parents to manage their kids' phone time -- it'll let you review how they're using their phone from your own device, set daily time limits, review app requests and more. There are also tweaks to the gesture-based navigation bar to make it more closely resemble the navigation gestures first introduced in the iPhone X. Google's also adding a new chat-focused interface called "bubbles" that lets users keep messaging conversations accessible regardless of what they're doing with the phone. We can expect the final desert-themed name and release date later in the summer. The Q beta 3 is currently available on 21 devices, including all Pixel devices.' -- source: https://developers.slashdot.org/story/19/05/07/2050236 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Cray, AMD to build 1.5 exaflops supercomputer for US government
by Peter Reutemann 07 May '19

07 May '19

'AMD and Cray have announced that they're building "Frontier," a new supercomputer for the Department of Energy at Oak Ridge National Laboratory. The goal is to deliver a system that can perform 1.5 exaflops: 1.5×1018 floating point operations per second. By way of comparison, a single Nvidia RTX 2080 GPU manages about 14 teraflops of compute performance with 32-bit numbers. Frontier will achieve 100,000 times more. The fastest supercomputer in the Top 500 list weighs in at 200 petaflops, or 0.2 exaflops. As things stand, it'd take the top 160 machines on the list to match Frontier's performance. Frontier will use custom versions of AMD's Epyc processors (likely Zen 3 or Zen 4), matched with 4 GPUs, all connected using AMD's Infinity Fabric. Between nodes, Cray's Slingshot interconnect will be used, which has transfer rates of up to 200Gb/s per port. The GPUs will have their own stacked HBM (High Bandwidth Memory). It'll be housed in 100 cabinets, taking about 7,300 square feet of floor space. Power consumption will be 30-40MW. The plan is for Frontier to be delivered in 2021, at a cost of about $500 million for the hardware and $100 million for research and development. It should be the fastest supercomputer in the world when it's delivered, and it will be the US government's second exaflops-capable system; the first will be the 1 exaflops Aurora, built using Intel Xeon SP processors and Intel Xe GPUs.' -- source: https://arstechnica.com/gadgets/2019/05/cray-amd-to-build-1-5-exaflops-supe… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0