- wlug - University of Waikato Mail Lists

Android for tweakers, USB-C
by Ian Young 14 Mar '15

14 Mar '15

Someone on the internet said, "The advantage of Android is that you are free to tweak everything to your liking. The disadvantage is that you have to." There was some sort of comparison with the Apple enclosed garden going on. Experiments with the v5 Android live CD from exton continue. Seems picky about hardware, more so than the Kitkat from android-x86 project. Meanwhile the release of a new Apple lightweight laptop reveals the existence of USB-C. Say what? http://www.wired.com/2015/03/usb-type-c-faq/ Coming to a device near you soon now apparently. Oh dear, so hard to keep up.

2 1

Google to close Google Code open source project hosting
by Peter Reutemann 12 Mar '15

12 Mar '15

"Google Code is to join the long list of Google projects that have been consigned to the dustbin of history. The open source project hosting service will no longer be accepting new project submissionsas of today, will no longer be accepting updates to existing projects from August 24, and will be closed entirely on January 25, 2016." -- source: http://arstechnica.com/information-technology/2015/03/google-to-close-googl… Well, there goes another free service... Now I have to move my remaining projects over to github. Grr... Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

4 10

OpenSSL To Undergo Massive Security Audit
by Peter Reutemann 12 Mar '15

12 Mar '15

"Now that its codebase is finally viewed as stable, OpenSSL is getting a good top-to-bottom once-over in the form of a sweeping audit. As part of the Linux Foundation's Core Infrastructure Initiative, the foundation and the Open Crypto Audit Project are sponsoring and organizing what may arguably be the highest-profile audit of a piece of open-source software in history. The audit itself will be conducted by the information assurance organization NCC Group, and its security research arm, Cryptography Services, will carry out the code review of OpenSSL's 447,247 line codebase over the next several months." -- source: http://tech.slashdot.org/story/15/03/12/1928259 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Linux Kernel Adopts 'Code of Conflict'
by Peter Reutemann 10 Mar '15

10 Mar '15

'Motor was one of several readers to note that a small patch recently added to the Linux kernel contains guidelines for discourse and dispute resolution within the community. It's called the "Code of Conflict."' -- source: http://linux.slashdot.org/story/15/03/10/237257 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Cutting-edge hack gives super user status by exploiting DRAM weakness
by Peter Reutemann 10 Mar '15

10 Mar '15

"In one of more impressive hacks in recent memory, researchers have devised an attack that exploits physical weaknesses in certain types of DDR memory chips to elevate the system rights of untrusted users of Intel-compatible PCs running Linux." -- source: http://arstechnica.com/security/2015/03/cutting-edge-hack-gives-super-user-… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

How to create a full backup of your Android device without root
by Peter Reutemann 09 Mar '15

09 Mar '15

"Sometimes, a backup of a smartphone or tablet just isn't enough, especially if you have a number of (the same) devices that have to be quickly deployed (or redeployed). For that, you need a bit more power than Titanium Backup or Google Drive. If you want to do full-blown backup of devices, you must turn to the Android Software Developer Kit (SDK). With this powerhouse tool, you can easily create a complete backup of a device with a single command." -- source: http://www.techrepublic.com/article/how-to-create-a-full-backup-of-your-and… Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Android v5 live CD version from Sweden
by Ian Young 07 Mar '15

07 Mar '15

A live CD of Android 5.0.2 by a gentleman named Arne Exton who seems to have a passion for running up pimped out versions of sundry distros. Looks like he also plays golf. Not yet run by me. Arne's work sometimes has quirks, he is a one man band afaik and comes up with something new at least fortnightly. AndEX (Android) x86 5.0.2 Lollipop Live CD with kernel 3.10.58-exton-android-x86 :: Free Download https://extonlinux.wordpress.com/ -- currently at top of this page. http://andex.exton.net/?page_id=13

1 0

You Thought PC Security Was Bad...
by Lawrence D'Oliveiro 05 Mar '15

05 Mar '15

To those still reeling from Baden’s presentation on cracking PC security, there’s worse to come. At least PC OSes do get some patching. But think of all the other devices around your home which have the core of a computer running something resembling an operating system on them which might be many years out of date (even on a newer device!). But the vendor can’t be bothered to provide fixes for any security holes which may be discovered. And even if they did, most of the buyers of these devices wouldn’t even know patches were available. Case in point: wireless routers, which are so full of unpatched holes that it’s actually unusual to find a reasonably secure one <http://www.theregister.co.uk/2015/03/05/broadband_routers_sohopeless_and_ve…>.

1 0

Red Hat Strips Down For Docker
by Peter Reutemann 05 Mar '15

05 Mar '15

"Reacting to the surging popularity of the Docker virtualization technology, Red Hat has customized a version of its Linux distribution to run Docker containers. The Red Hat Enterprise Linux 7 Atomic Host strips away all the utilities residing in the stock distribution of Red Hat Enterprise Linux (RHEL) that aren't needed to run Docker containers. Removing unneeded components saves on storage space, and reduces the time needed for updating and booting up. It also provides fewer potential entry points for attackers." -- source: http://hardware.slashdot.org/story/15/03/05/2240245 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

1 0

Software Freedom Conservancy Funds GPL Suit Against VMWare
by Peter Reutemann 05 Mar '15

05 Mar '15

"Jeremy Allison - Sam writes with this excerpt from a news release from the Software Freedom Conservancy: Software Freedom Conservancy announces today Christoph Hellwig's lawsuit against VMware in the district court of Hamburg in Hamburg, Germany. This is the regretful but necessary next step in both Hellwig and Conservancy's ongoing effort to convince VMware to comply properly with the terms of the GPLv2, the license of Linux and many other Open Source and Free Software included in VMware's ESXi products. Serge Wroclawski points out the SFC's technical FAQ about the suit. One nugget: This case is specifically regarding a combined work that VMware allegedly created by combining their own code (“vmkernel”) with portions of Linux's code, which was licensed only under GPLv2. As such, this, to our knowledge, marks the first time an enforcement case is exclusively focused on this type of legal question relating to GPL" -- source: http://linux.slashdot.org/story/15/03/05/1721231 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

3 3