- wlug - University of Waikato Mail Lists

Xiaomi Can Silently Install Any App On Your Android Phone Using A Backdoor
by Peter Reutemann 15 Sep '16

15 Sep '16

'Xiaomi, the Chinese smartphone manufacturer many refer to as the "Apple of China," can silently install any app on your device, according to a Computer Science student and security enthusiast from the Netherlands. Thijs Broenink started investigating a mysterious pre-installed app, dubbed AnalyticsCore.apk, that constantly runs in the background and reappears even if you try and delete it. The Hacker News reports: After asking about the purpose of the AnalyticsCore app on the company's support forum and getting no response, Thijs Broenink reverse engineered the code and found that the app checks for a new update from the company's official server every 24 hours. While making these requests, the app sends device identification information with it, including the phone's IMEI, Model, MAC address, Nonce, Package name as well as signature. If there is an updated app available on the server with the filename "Analytics.apk," it will automatically get downloaded and installed in the background without user interaction. Broenink found that there is no validation at all to check which APK is getting installed to a user's phone, which means there is a way for hackers to exploit this loophole. This also means Xiaomi can remotely and silently install any application on your device just by renaming it to "Analytics.apk" and hosting it on the server. Ironically, the device connects and receives updates over HTTP connection, exposing the whole process to Man-in-the-Middle attacks." ' -- source: https://news.slashdot.org/story/16/09/15/1923220 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Fwd: BREAKING: The Link Tax is Officially on its Way
by Roderick Aldridge 14 Sep '16

14 Sep '16

Its understandable that the publishing establishment want to protect their content from those who would use it without contributing to generating it, but they should be promoting links which send viewers to their content.This measure would stifle the free flow of information and ideas. I invite members to take part. Should WLUG or NZLUG or NZOSS take part officially? Your thoughts. Rod ---------- Forwarded message ---------- From: Ruth Coustick-Deal -OpenMedia <contact(a)openmedia.org> Date: 15 September 2016 at 04:22 Subject: BREAKING: The Link Tax is Officially on its Way To: rod.aldridge1(a)gmail.com *It’s official, Roderick.* The EU Commission has officially released some of the worst copyright laws in the world, including unprecedented new Link Tax powers for publishing giants.1, 2 Earlier today, the Commission presented these new rules to the world. Over the past few weeks, leaks suggested the rules were worse than originally feared,3 and today’s announcement proved it. *We have to stop this now. * Despite opposition from over 100,000 Internet users and dozens of other advocacy groups, the EU Commission has charged ahead with its wrong-headed plan. *This will affect Internet users around the world.* But we can fight back and win.* Share these hard-hitting social media images on Twitter and Facebook today!* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=I0bSQvl4iPegV0aFW8SXE%2BCKfLkJB…> *Share on Twitter* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=j6PCUhX2tFXXO2W1lh%2Bb9eCKfLkJB…>* | **Share on Facebook* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=r4eiWVxKXvGtgMwx1UtMaOCKfLkJBGne> <http://qb.salsalabs.com/dia/track.jsp?v=2&c=w%2B8TZO3T1iKYWWuTMT7lg320JAhxO…> *Share on Twitter* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=%2BhLRxVqNmLtJB0mgky1v2uCKfLkJB…>* | **Share on Facebook* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=fqFY%2F7FFxDHeBHW4aYs1X%2BCKfLk…> This comes on the heels of a major court ruling that undermined our right to use hyperlinks.4 This means it’s more important than ever that EU decision-makers do what they can to stop this dangerous #LinkTax plan.5 The link tax could *make some of your favourite content virtually disappear* from search engines.6 Users all over the world will be impacted. Join us now <http://qb.salsalabs.com/dia/track.jsp?v=2&c=bKmMmxqTfKTzkNMenSUp%2FuCKfLkJB…> to give decision-makers a clear resounding ‘no to the link tax’. We’re only weeks away from releasing a hard-hitting new tool that will let you send pro-Internet messages to Members of the European Parliament to stop this reckless proposal dead in its tracks. That’s where we’re taking the fight next. But in the meantime, let’s raise hell on Twitter <http://qb.salsalabs.com/dia/track.jsp?v=2&c=ZqFXncANqbo%2BCSLN6EF1NeCKfLkJB…> and Facebook <http://qb.salsalabs.com/dia/track.jsp?v=2&c=LMTErnjJVWARnEEo%2Fdx86OCKfLkJB…> and shame the Commission for ignoring our concerns and pushing on with this reckless plan. –Ruth Coustick-Deal, for OpenMedia *P.S. **Donate now* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=4E4oSrg34LjNM9l9gYkkZeCKfLkJBGne>* so we can reach as many people as possible at this crucial moment. Every single bit helps.* *Footnotes* [1] Official announcement of EU DSM Copyright. Source: State of the Union address <http://qb.salsalabs.com/dia/track.jsp?v=2&c=IkS3990M7tGYWWuTMT7lg320JAhxOp3c> . [2] EU Commission formally proposes Link Tax to European Parliament as part of new Copyright Directive. Source: OpenMedia <http://qb.salsalabs.com/dia/track.jsp?v=2&c=hYnF54%2BemHlc1mI21KHvkeCKfLkJB…> . [3] Google snippet tax, geoblocking, other copyright reform shunned in EU plan. Source: Ars Technica UK <http://qb.salsalabs.com/dia/track.jsp?v=2&c=XyWhLZD6wxBOt8UV7WGhguCKfLkJBGne> . [4] Disappointing ruling by EU’s highest court sets worrying global precedent for how we share and access information online. Source: OpenMedia <http://qb.salsalabs.com/dia/track.jsp?v=2&c=3xPQS6KkwjKgyS6tYhlnkOCKfLkJBGne> . [5] Europeans deserve a better copyright reform Source: Communia <http://qb.salsalabs.com/dia/track.jsp?v=2&c=pt2xXcNSqTH0cDuMUNQxIOCKfLkJBGne> [6] Google stops displaying news snippets from German publishers that sued it. Source: ZDNet <http://qb.salsalabs.com/dia/track.jsp?v=2&c=IrdzBK7a8BI%2F2n1MlsljVuCKfLkJB…> . [image: OpenMedia] <http://qb.salsalabs.com/dia/track.jsp?v=2&c=PVymJXXIdSTuq3CVpUMwvuCKfLkJBGne> We are an award-winning network of people and organizations working to safeguard the possibilities of the open Internet. We work toward informed and participatory digital policy. You can follow us on *Twitter* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=fgGjhtXZm736Zqri8dbigOCKfLkJBGne>, and like us on *Facebook* <http://qb.salsalabs.com/dia/track.jsp?v=2&c=v9tsIAW9sL7tgsYNavkPxeCKfLkJBGne> . You have received this message, because you have subscribed to OpenMedia's list with the email address rod.aldridge1(a)gmail.com. You can manage your email preferences. <http://qb.salsalabs.com/dia/track.jsp?v=2&c=tQXg5wXHn5CRpt9McM9OGHeIRo%2Fv1…> If you no longer wish to receive our emails, click here <http://qb.salsalabs.com/dia/track.jsp?v=2&c=1wdSq2cc3QOaQczdMsEN8%2BCKfLkJB…> to unsubscribe.

1 0

Android Users Need To Delete Google Maps and Google Play If They Don't Want Their Locations Tracked
by Peter Reutemann 13 Sep '16

13 Sep '16

'Google, it seems, is very, very interested in knowing where you are at all times. Users have reported battery life issues with the latest Android build, with many pointing the finger at Google Play -- Google's app store -- and its persistent, almost obsessive need to check where you are. Amid complaints that Google Play is always switching on GPS, it appears Google has made it impossible to prevent the app store from tracking your whereabouts unless you completely kill off location tracking for all applications. You can try to deny Google Play access to your handheld's location by opening the Settings app and digging through Apps -> Google Play Store -> Permissions, and flipping the switch for "location." But you'll be told you can't just shut out Google Play services: you have to switch off location services for all apps if you want to block the store from knowing your whereabouts. It's all or nothing, which isn't particularly nice. This is because Google Play services pass on your location to installed apps via an API. The store also sends your whereabouts to Google to process. Google doesn't want you to turn this off.' -- source: https://tech.slashdot.org/story/16/09/13/1634237 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Re: [wlug] Building Your Own Laptop
by Ian Stewart 12 Sep '16

12 Sep '16

Hi William, Thanks for your ideas... > I would add the Raspberry Pi 7 inch touch screen. This is a 800 x 480 pixels resolution screen. The RPi is meant to be capable of 1080 vertical lines per frame. With a 16:9 aspect ratio then this is a monitor of 1920x1080 pixels. This seems to be a common pixel ratio with HDTV's. Thus I suspect that due to mass production rates to fill the digital TV market, the price of these monitors should be dropping the fastest. So I would like to see a RPi with a 1920x1080 pixel monitor. I see that these monitors are commonly available in 21.5 and 24 inch. It looks like the 21.5 inch seems to be less popular and prices have dropped below $200. However getting one of these monitors with touchscreen seems to be a bit expensive at the moment. I see there is a company called gechic. They make some touch screen 1920x1080 monitors at 15.6inch. Models include the On-Lap2501H and On-Lap 1502. If you look at... http://www.gechic.com/product_help_en.asp?s=14 ...then there is a photo of a RPi connected to one of these gechic touch-screens. So, maybe it won't be too long before there will be good-sized 1080p touch-screen monitors suitable for RPi at a low price. > Use power banks (super cheap from China). No power in classroom is needed. While it would be nice to be rid of all cables, I think that power banks may be a bit messy to manage. You'd need to put 28 of them onto chargers each night, then hope they lasted the 6+ hours of a school day. If they only produce +5V for the RPi, then you need to also get +5V monitors. Plus their life-span of delivering to specification may not be very long. So I figure having an AC to DC regulator for each row would be more simple and then having DC cabling distributing the power down the row. cheers Ian.

1 0

meeting suggestions
by Peter Reutemann 12 Sep '16

12 Sep '16

Rowan posted the following meeting suggestion (http://www.meetup.com/WaikatoLinuxUsersGroup/events/233762057/): "regarding presenting the ubuntu m10 tablet; due to university i wont be available in september. its possible i could present in october; if not i will def be available in november. i could also demonstrate android on raspberry pi if it works (havnt found time to try it yet). or we could run through installing it together?" I'd suggest to have this meeting in November. As for September, how about we do a roundup of multi-media tools and giving them a quick spin. Here are some that I can think of (feel free to demo your own favorite tool!): - Gimp - Inkscape - Dia - OpenShot - Blender Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 9

Ubuntu Torrent Removed From Google Due To DMCA Complaint
by Peter Reutemann 12 Sep '16

12 Sep '16

"Cited in a DMCA takedown request filed against Google on behalf of Paramount Pictures is an innocuous link to a 32-bit alternate install image Ubuntu 12.04.2 LTS. The takedown request seeks to remove links to a number of torrent URLS that are alleged to infringe on Paramount movie Transformers: Age of Extinction. Ubuntu clearly doesn't. All it takes is a quick glance at the URL in question to see that. It's very much a stock ISO of an old Ubuntu release. And yet Google has complied with the request and scrubbed the link to the page in question from its search index." -- source: https://yro.slashdot.org/story/16/09/12/1515229 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 3

Building Your Own Laptop
by Lawrence D'Oliveiro 12 Sep '16

12 Sep '16

This article <http://www.computershopper.com/feature/build-your-own-laptop> originated several years ago, but says it was updated last year. I am pleasantly surprised to discover there are such things as “barebones” laptops, albeit they still come with somewhat more than you get with a “barebones” desktop box. While there are a range of such laptops available from different vendors, certain components (wi-fi cards and MXM graphics cards) may not be so easy to get. The total price for the build is quoted as USD1352, while “comparable systems with GeForce 8600M graphics were typically running about $250 to $300 more than our build”. Wonder if that included the Windows licence. Also, regardless of the revised article date, it still mentions installing Windows Vista...

6 13

Self-Driving Cars Can Learn a Lot by Playing Grand Theft Auto
by Eric Light 12 Sep '16

12 Sep '16

Self-Driving Cars Can Learna Lot by Playing Grand Theft Auto Technology Review (09/12/16) Will Knight Several research groups are using the "Grand Theft Auto" video game to educate algorithms with potential application to self-driving vehicle navigation. The researchers say the game's scenic elements are extremely realistic, and can be used to produce data on a par with that generated using real-world imagery. A team from Intel Labs and Germany's Darmstadt University created a software layer positioned between the game and a computer's hardware, automatically classifying different objects in the game's road scenes. [...] "We showed that this synthetic data is almost as good, or sometimes even better, than using real data for training," Shafaei says. https://www.technologyreview.com/s/602317/self-driving-cars-can-learn-a-lot… -- Securely sent with Tutanota. It's good, you should try it: https://tutanota.com

1 0

Microsoft Fixes Bugs in Skype for Linux
by Peter Reutemann 12 Sep '16

12 Sep '16

'After neglecting Linux's Skype client for years, Microsoft released a new app of Skype for Linux in July, giving comfort to millions of users. The app, however, had a fair share of bugs. Microsoft today has updated the app to iron out those bugs, and introduced a handful of interesting options. An anonymous reader writes: There were plenty of users who complained that Skype for Linux was reconnecting automatically when not using the app for a certain amount of time and Microsoft has already acknowledged the bug. This new version fixes the problem, so everything should work correctly after updating. Additionally, Skype for Linux 1.7 introduces a new grid layout of the group calls, but also fixes the standard behavior of unread messages. According to Microsoft, this means that "when opening chat with unread messages, the view will focus on the first unread message and as you scroll, messages will be marked as read."' -- source: https://linux.slashdot.org/story/16/09/12/1414222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

On a similar DYI theme
by rowan schischka 11 Sep '16

11 Sep '16

>28 x wireless keyboards and mice You definitely should not use so many wireless mice in the same room. keyboards are ok but the interference and drops on the mice are frustrating. We used them in a room of about 16 poeple and we had to convert to wired. Also you might want to check if r pis bluetooth has drivers yet. >For each row have a wireless ethernet router pretty sure a hub/switch is cheaper, you can get 10/100 for under $20 -- Kind Regards Rowan Schischka

3 2