- wlug - University of Waikato Mail Lists

UEFI aka Ooof!!y links - more than a lifetime to know
by Ian Young 12 Feb '16

12 Feb '16

Following a recent refererence to the dread Oofy at a LUG meeting and after looking at a couple of Intel PC type machines using this boot method I am pretty well totally baffled. The people of Arch however know it all. Or as much as can be known. https://wiki.archlinux.org/index.php/Unified_Extensible_Firmware_Interface#… I seem to have a vague recollection that Sun once used Ooofy. And Apple of course was an early adopter. Or am I thinking of Open Firmware? Somewhat related. Hmmm. https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface https://en.wikipedia.org/wiki/Open_Firmware

1 0

The Truth Behind “true”
by Lawrence D'Oliveiro 10 Feb '16

10 Feb '16

Among the many useful commands you will find as standard on any POSIX system is “true”. This command does absolutely nothing, but returns a successful exit status. (There is also “false”, which also does nothing, but always returns a failure status. If anyone is curious as to how you would make use of these in shell scripts, just ask.) This page <http://trillian.mit.edu/~jc/humor/ATT_Copyright_true.html> gives the history of the “true” command from the original AT&T Unix--it was essentially a shell script that did absolutely nothing at all. Yet AT&T claimed copyright on it. This article <http://www.theregister.co.uk/2016/02/10/line_break_ep2/> includes, among its examples of supposedly bad code, the full source of the GNU “true” program (which actually also shares its source with the “false” program), which runs to 80 lines, as compared to the version from OpenBSD, which is just four lines (including a blank line and comments). But as pointed out in the previous link, the GNU version uses less memory and runs faster.

2 1

San Francisco To Open-Source Its Voting Software
by Lawrence D'Oliveiro 10 Feb '16

10 Feb '16

The San Francisco Elections Commission has resolved to “support the development and certification of an open source voting system running on commercial off-the-shelf hardware; and to request that the Mayor and Board of Supervisors initiate and fund a project to develop and certify such a system for use in San Francisco”. <http://www.theregister.co.uk/2016/02/10/san_francisco_to_open_source_voting…> Contrast this with ongoing unsuccessful attempts to get access to the software used for Australian federal elections under its Freedom Of Information Act <http://www.theregister.co.uk/2015/12/13/aec_easycount_foi_decision/>: [Hobart lawyer Michael] Cordover sought the source code because Australia's 2013 election produced some irregularities. What software do we use in NZ?

2 1

Docker Images To Be Based On Alpine Linux
by Peter Reutemann 06 Feb '16

06 Feb '16

"Docker container sizes continue a race to the bottom with a couple of environments weighing in at less than 10MB. Following on the heels of this week's story regarding small images based on Alpine Linux, it appears that the official Docker images will be moving from Debian/Ubuntu to Alpine Linux in the near future. How low will they go?" -- source: http://linux.slashdot.org/story/16/02/06/0433228 Alpine Linux is rather small, coming in at 82MB as ISO download: http://www.alpinelinux.org/ Anybody feel like giving a demo at the next meeting? Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Open Source Pioneer Michael Tiemann On the Myth of the Average
by Peter Reutemann 03 Feb '16

03 Feb '16

'In a recent article, Michael Tiemann, one of the world's first open source entrepreneurs and VP of Open Source Affairs at Red Hat, highlights an example from the 1950s US Air Force where the "myth of the average resulted in a generation of planes that almost no pilots could reliably fly, and which killed as many as 17 pilots in a single day." He uses this example to argue that IT leaders who think that playing it safe means being as average as possible in order to avoid risks (i.e. "Buy what others are buying. Deploy what others are deploying. Manage what others are managing.") may be making IT procurement and strategy decisions based on flawed data. Instead, Tiemann says that IT leaders should understand elements of differentiation that are most valuable, and then adopt the standards that exploit them. "Don't aim for average: it may not exist. Aim for optimal, and use the power of open source to achieve what uniquely benefits your organization."' -- source: http://it.slashdot.org/story/16/02/03/177233 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

New Hack Shrinks Docker Containers
by Peter Reutemann 03 Feb '16

03 Feb '16

'Promising "uber tiny Docker images for all the things," Iron.io has released a new library of base images for every major language optimized to be as small as possible by using only the required OS libraries and language dependencies. "By streamlining the cruft that is attached to the node images and installing only the essentials, they reduced the image from 644 MB to 29MB,"explains one technology reporter, noting this makes it quicker to download and distribute the image, and also more secure. "Less code/less programs in the container means less attack surface..." writes Travis Reeder, the co-founder of Iron.io, in a post on the company's blog. "Most people who start using Docker will use Docker's official repositories for their language of choice, but unfortunately if you use them, you'll end up with images the size of the Empire State Building..."' -- source: http://developers.slashdot.org/story/16/02/03/221231 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Chromodo Browser Disables Key Web Security
by Peter Reutemann 03 Feb '16

03 Feb '16

"A Google Security Research update has claimed that Comodo's internet browser Chromodo, based on the open-source project Chromium, contains significant security failings and puts its users at risk. This week's Google alert suggested that the Chromodo browser – available as a standalone download, as well as part of the company's Security package – is less secure than it promises. According to analysis, the browser is disabling the Same Origin policy, hijacking DNS settings, and replacing shortcuts with Chromodo links, among other security violations." -- source: http://it.slashdot.org/story/16/02/03/1416236 NB: I know that the browser is for Windows, but you might know someone who's using it, blindly trusting the marketing of Comodo. Chromium builds are available here: https://www.chromium.org/getting-involved/dev-channel Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Crypto flaw was so glaring it may be intentional eavesdropping backdoor
by Peter Reutemann 02 Feb '16

02 Feb '16

"Socat is a more feature-rich variant of the once widely used Netcat networking service for fixing bugs in network applications and for finding and exploiting security vulnerabilities. One of its features allows data to be transmitted through an encrypted channel to prevent it from being intercepted by people monitoring the traffic. Amazingly, when using the Diffie-Hellman method to establish a cryptographic key, Socat used a non-prime parameter to negotiate the key, an omission that violates one of the most basic cryptographic principles." -- source: http://arstechnica.com/security/2016/02/crypto-flaw-was-so-glaring-it-may-b… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Fwd: [NZOSS OpenChat] TPPA appears to compromise NZ data sovereignty
by Peter Reutemann 02 Feb '16

02 Feb '16

Apologies for cross-posting. Cheers, Peter ---------- Forwarded message ---------- From: Dave Lane <president(a)nzoss.org.nz> Date: Wed, Feb 3, 2016 at 10:22 AM Subject: [NZOSS OpenChat] TPPA appears to compromise NZ data sovereignty To: NZOSS Open Chat List <openchat(a)groups.nzoss.org.nz> Hi all, Thanks to Grant Paton-Simpson for bringing clause 14.13.2 of the Trans-Pacific Partnership Agreement to my attention... I've just written a quick post to explain the potential implications of it, as I see it: https://nzoss.org.nz/content/tppa-compromises-nz-data-sovereignty Any comments or corrections (or alternative interpretations) to the article would be appreciated. If you think it is a cause for concern, I encourage you to promote it, particularly among those who will understand the implications. The TPPA is slated for signing tomorrow. We need to make a BIG stink about this very unfortunate turn of events. Cheers, Dave -- Dave Lane, President, New Zealand Open Source Society e: president(a)nzoss.org.nz m: 021 229 8147 w: http://nzoss.org.nz ―― View topic http://groups.nzoss.org.nz/r/topic/7bw4I2juaLBbCQycHlZriA Leave group mailto:openchat@groups.nzoss.org.nz?subject=Unsubscribe Start groups https://OnlineGroups.net -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

The State Of Blender: “The Art Of Open Source”
by Lawrence D'Oliveiro 01 Feb '16

01 Feb '16

An article <https://www.blender.org/media-exposure/the-art-of-open-source/> written for the November 2015 issue of “Linux Format” magazine covers the origins and increasing popularity of Blender. But more than popularity, it seems it is now (somewhat grudgingly) winning actual respect among 3D artists. Pixar even lists Blender as one of the packages it officially supports in the latest release of RenderMan. My main beef with the article is the writer keeps saying “commercial” when he means “proprietary”, seemingly reserving the use of “proprietary” for when he means “in-house”. If you don’t think Blender can be “commercial”, just look at some of its users mentioned in the article. A quote from one of those users: “In 10 years of using proprietary 3D software, we never received usable support from either software vendor or reseller – except on problems with registering our licences.”

1 0