- wlug - University of Waikato Mail Lists

Vivaldi 1.10 Released
by Peter Reutemann 15 Jun '17

15 Jun '17

'Vivaldi, the successor to Opera 12.16 (Presto) in spirit, admittedly has a long way to go but continues to steadily mature with the release of version 1.10: Releasing Vivaldi 1.10, we give you the power for making the Start Page more personal than ever before. You're the one who gets to decide how your Start Page looks, feels and performs. We've also added the much-requested ability to dock the Developer Tools. Other new features and improvements include: -Sorting of Downloads in the Side Panel by name, size, date added and date finished, as well as manually. -Toggle image visibility from the View menu or via configurable keyboard shortcut. -Quick Commands improvements for users that like to control everything in their browser from their keyboard. The Quick Commands menu lets users navigate to tabs, find search terms, filter lists of available commands and much more. -Address Bar dropdown list can now exclude bookmarks and typed history. -Controlling new tabs via third-party extensions with additional functionality, such as productivity tools or reminders. ' -- source: https://tech.slashdot.org/story/17/06/15/1511257 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Re: [wlug] meeting on the 26th
by William Mckee 15 Jun '17

15 Jun '17

On Jun 15, 2017 9:44 PM, "Peter Reutemann" <fracpete(a)waikato.ac.nz> wrote: Hi everyone Unfortunately, I haven't had any inspirations as to topics for the upcoming meeting on June 26th. Any ideas or suggestions? Any cool software or distro that you'd like to demo? Personally, I've never seen an installation and day-to-day usage of Arch Linux (adding/removing applications, configuring services, etc)... I installed arch linux once on the pi. didnt get further than the login prompt though. its certainly helpful distro, i will be forever grateful for the wiki. i will be away for this meetup up though, mid semester break gives an excuse to get away. Hope you find a topic. cheers, william.

1 0

Firefox 54 Arrives With Multi-Process Support For All Users
by Peter Reutemann 14 Jun '17

14 Jun '17

'Mozilla today launched Firefox 54 for Windows, Mac, Linux, and Android. The new version includes the next major phase of multi-process support, which streamlines memory use, improving responsiveness and speed. The Electrolysis project, which is the largest change to Firefox code ever, is live. Firefox now uses up to four processes to run webpage content across all open tabs. This means that complex webpages in one tab have a much lower impact on responsiveness and speed in other tabs, and Firefox finally makes better use of your computer's hardware.' -- source: https://tech.slashdot.org/story/17/06/13/1720250 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Malware Infects Raspberry Pi Devices And Makes Them Mine Cryptocurrency
by Peter Reutemann 12 Jun '17

12 Jun '17

'If you're a Raspberry Pi user who's never changed the default password of the "pi" user, then heed this warning: change it. A brand new piece of malware has hit the web, called "Linux.MulDrop.14", and it preys on those who haven't secured their devices properly... After scanning for RPis with an open (and default) SSH port, the "pi" user is logged into (if the password is left default), and the password is subsequently changed. After that, the malware installs ZMap and sshpass software, and then it configures itself. The ultimate goal of Linux.MulDrop.14 is to make digital money for someone else, namely the author of the malware, using your Raspberry Pi. ' -- source: https://linux.slashdot.org/story/17/06/11/0552231 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Malware Uses Obscure Intel CPU Feature To Steal Data and Avoid Firewalls
by Peter Reutemann 09 Jun '17

09 Jun '17

'Microsoft's security team has come across a malware family that uses Intel's Active Management Technology (AMT) Serial-over-LAN (SOL) interface as a file transfer tool. The problem with Intel AMT SOL is that it's part of Intel's ME, a separate chip inside Intel CPUs that runs its own OS and stays on even when the main CPU is off. Inside Intel's ME, AMT SOL opens a virtual network interface which works even when the PC is turned off. Furthermore, because this virtual network interface runs inside ME, firewalls and security products installed on the main OS won't detected malware using AMT SOL to exfiltrate data. The malware was created and used by a nation-state cyber-espionage unit codenamed PLATINUM, active since 2009, and which has targeted countries around the South China Sea. PLATINUM is by far one of the most sophisticated hacking groups ever discovered. Last year [PDF], the OS maker said the group was installing malware by abusing hotpatching — a mechanism that allows Microsoft to issue updates that tap into active processes and upgrade applications or the operating system without having to reboot the computer. Details about PLATINUM's recent targets and attacks are available in a report [PDF] Microsoft released yesterday.' -- source: https://it.slashdot.org/story/17/06/08/1754244 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

Is Intel Threatening To Sue Microsoft Over x86-on-ARM?
by Lawrence D'Oliveiro 09 Jun '17

09 Jun '17

Intel has put out a press release warning anybody working on x86-emulation technology to beware of infringing its patents <https://arstechnica.com/information-technology/2017/06/intel-fires-warning-…>. The article suggests that the timing of this announcement is a warning specifically to Microsoft, and possibly also Qualcomm, over their upcoming release of Windows-10-on-ARM machines. Even if this is so, I’m not sure I agree that “This compatibility makes these ARM-based machines a threat to Intel in a way that Windows RT never was”. The simple fact is that the performance of emulated x86 code on ARM is going to be most politely described as “anaemic”. ARM chips are not the most powerful (they are the most power-efficient), and x86 code is extremely complicated to emulate. Thus, the overheads of the translation layer are going to sap any hope of reasonable speed.

1 0

Internet cameras have hard-coded password that can’t be changed
by Peter Reutemann 08 Jun '17

08 Jun '17

'Security cameras manufactured by China-based Foscam are vulnerable to remote take-over hacks that allow attackers to view video feeds, download stored files, and possibly compromise other devices connected to a local network. That's according to a 12-page report released Wednesday by security firm F-Secure. Researchers at F-Secure documented 18 vulnerabilities that the manufacturer has yet to fix despite being alerted to them several months ago. All of the flaws were confirmed in a camera marketed under the Opticam i5 HD brand. A smaller number of the vulnerabilities were also found in the Foscam C2. The report said the weaknesses are likely to exist in many other camera models Foscam manufactures and sells under other brand names.' -- source: https://arstechnica.com/security/2017/06/internet-cameras-expose-private-vi… Not sure whether these cameras are sold here in NZ... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ubuntu Works With GNOME To Improve HiDPI Support On Linux Desktop
by Peter Reutemann 07 Jun '17

07 Jun '17

'Canonical is playing host to a 'fractional scaling hackfest' in its Taipei offices this week. Both GNOME developers and Ubuntu developers are in attendance, ready to wrestle with the aim: improve GNOME HiDPI support. Ubuntu's Unity desktop (I'm told, anyhow) plays fairly nice with high DPI monitors because the shell supports fractional scaling (though most apps, I believe, do not). Furthermore, users can tweak some high DPI settings to better suit their display(s). GNOME Shell also supports HiDPI monitors, but has, until now, been a little less flexible about it. "Currently, we only allow to scale windows by integral factors (typically 2). This proves somewhat limiting as there are many systems that are just in between the dpi ranges that are good for scale factor 2, or unscaled," the hackfest page explains.' -- source: https://linux.slashdot.org/story/17/06/06/2048243 Other links regarding HiDPI: http://www.makeuseof.com/tag/linux-hidpi-support-for-gnome-kde-xfce-cinnamo… https://www.maketecheasier.com/best-linux-desktop-environments-for-hidpi-di… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

SGI Desktop Clone Gets A New Version On Fedora
by Peter Reutemann 06 Jun '17

06 Jun '17

'Silicon Graphics workstations used the IRIX Interactive Desktop (formerly called Indigo Magic Desktop) for its IRIX operating system (based on UNIX System V with BSD extensions). "Anyone who remembers working on a SGI machine probably has fond memories of the Magic Desktop for IRIX," remembered one Slashdot reader in 2002. At the time a project called 5Dwm was working on a clone, and its work is still being continued by MaXX Interactive. Today Slashdot reader Daniel Mark shared the news that after "several years and many long nights," the company is announcing a new release for Fedora 25, adding that "more Linux Distributions support will be added over the coming days/weeks." They're calling it "something new and fresh in the Linux Desktop space." The MaXX Desktop is available in two versions, the free Community Edition (CE) which provides basic SGI Desktop experience and the commercially available Professional Edition (PE) that comes with support, CPU and GPU specific optimizations and a full SGI Desktop experience... So there is no surprise here, the MaXX Desktop is a highly tuned Workstation Environment for the Linux x86_64 and ia64 platforms. Multi-core processing, NVidia GPU specific optimizations are among the things that makes the MaXX Desktop so fast, light-weight and stable. ' -- source: https://slashdot.org/story/17/06/04/1535251 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Network Time Protocol Hardened To Protect Users From Spying, Increase Privacy
by Peter Reutemann 05 Jun '17

05 Jun '17

'The Internet Engineering Task Force has taken another small step in protecting everybody's privacy... As the draft proposal explains, the RFCs that define NTP have what amounts to a convenience feature: packets going from client to server have the same set of fields as packets sent from servers to clients... "Populating these fields with accurate information is harmful to privacy of clients because it allows a passive observer to fingerprint clients and track them as they move across networks". The header fields in question are Stratum, Root Delay, Root Dispersion, Reference ID, Reference Timestamp, Origin Timestamp, and Receive Timestamp. The Origin Timestamp and Receive Timestamp offer a handy example or a "particularly severe information leak". Under NTP's spec (RFC 5905), clients copy the server's most recent timestamp into their next request to a server – and that's a boon to a snoop-level watcher. The proposal "proposes backward-compatible updates to the Network Time Protocol to strip unnecessary identifying information from client requests and to improve resilience against blind spoofing of unauthenticated server responses." Specifically, client developers should set those fields to zero.' -- source: https://tech.slashdot.org/story/17/06/03/0422246 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0