Does Wi-Fi Security Really Matter?
by Lawrence D'Oliveiro
Seems the Wi-Fi Alliance is having yet another crack at coming up with
a really secure protocol, this time to be called WPA3
<http://www.theregister.co.uk/2018/01/09/wi_fi_wpa3/>.
Does anybody care? Remember that on the Internet, security is
implemented between the endpoints, the protocols are designed not to
care that everything in-between might be pawed through by
eavesdroppers, or even active attackers trying to inject fake data.
1 year, 1 month
Re: [wlug] FreeBSD's New Code of Conduct
by William Mckee
virtual contact! none of that. more sjw bs.
cheers,
william.
On 21/02/2018 7:08 pm, "Lawrence D'Oliveiro" <ldo(a)geek-central.gen.nz>
wrote:
On Sun, 18 Feb 2018 11:25:31 +1300, Peter Reutemann quoted:
> '> Physical contact and simulated physical contact (e.g., textual
> descriptions like "hug" or "backrub") without consent or after a
> request to stop.'
From
<http://www.theregister.co.uk/2018/02/21/freebsd_code_of_
conduct_controversy/>:
OpenSUSE board member and YouTuber Bryan Lunduke has used his
YouTube channel <https://www.youtube.com/watch?v=SxNdQJSlg54> to
ask if FreeBSD also wants to regulate virtual high fives or fist
bumps. Lunduke's video is a rather more polite expression of
comments found in corners of the Internet where gender politics is
derided and debate is sometimes infamously uncivil.
_______________________________________________
wlug mailing list | wlug(a)list.waikato.ac.nz
Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug
2 years, 3 months
Mozilla Removes Individual Cookie Management in Firefox 60
by Peter Reutemann
'The most recent version of Firefox Nightly, currently at version 60,
comes with changes to Firefox's cookie management. Mozilla merged
cookie settings with site data in the web browser which impacts how
you configure and manage cookie options. If you run Firefox 59 or
earlier, you can load about:preferences#privacy to manage privacy
related settings in Firefox. If you set the history to "use custom
settings for history" or "remember history", you get an option manage
cookie settings and to remove individual cookies from Firefox. A click
on the link or button opens a new browser window in which all set
cookies are listed. You can use it to find set cookies, look up
information, remove selected or all cookies. Mozilla engineers changed
this in recent versions of Firefox 60 (currently on the Nightly
channel).'
-- source: https://news.slashdot.org/story/18/02/26/1853203
Cheers, Peter
--
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
2 years, 3 months
OpenBSD Releases Meltdown Patch
by Peter Reutemann
'OpenBSD's Meltdown patch has landed, in the form of a Version 11 code
update that separates user memory pages from the kernel's -- pretty
much the same approach as was taken in the Linux kernel. From a
report:
A few days after the Meltdown/Spectre bugs emerged in January,
OpenBSD's Phillip Guenther responded to user concerns with a post
saying the operating system's developers were working out what to do.
Now he's revealed the approach used to fix the free OS: "When a
syscall, trap, or interrupt takes a CPU from userspace to kernel the
trampoline code switches page tables, switches stacks to the thread's
real kernel stack, then copies over the necessary bits from the
trampoline stack. On return to userspace the opposite occurs: recreate
the iretq frame on the trampoline stack, switch stack, switch page
tables, and return to userspace." That explanation is somewhat obscure
to non-developers, but there's a more readable discussion of what the
project's developers had in mind from January, here.'
-- source: https://it.slashdot.org/story/18/02/23/1519245
Cheers, Peter
--
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
2 years, 3 months
Botched npm Update Crashes Linux Systems, Forces Users to Reinstall
by Peter Reutemann
'A bug in npm (Node Package Manager), the most widely used JavaScript
package manager, will change ownership of crucial Linux system
folders, such as /etc, /usr, /boot. Changing ownership of these files
either crashes the system, various local apps, or prevents the system
from booting, according to reports from users who installed npm
v5.7.0. -- the buggy npm update. Users who installed this update --
mostly developers and software engineers -- will likely have to
reinstall their system from scratch or restore from a previous system
image.'
-- source: https://it.slashdot.org/story/18/02/22/2034213
Cheers, Peter
--
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
2 years, 3 months
Ricoh MP C3003 or similar wanted
by Gregory Machin
Hi,
This is very off topic.
I'm working on script (currently powershell, my port to python)to manage
(backup and restore) the addess book on Ricoh printers. The idea is to be
able to manage large number of printers address books.
I'm looking for a printer I can use for my dev work. It I don't care if the
printer or scanner are faulty just need to brains to be functional.
If anyone has such I could have or loan for a couple of months, that would
be great. If not all good.
Many thanks
G
2 years, 3 months
Google To Cease “Offshoring” Local Revenue
by Lawrence D'Oliveiro
Wonder of wonders
<http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11999548>:
Government moves to crack down on tax avoidance by multinational
firms are already bearing fruit, with Google telling Parliament it
will no longer funnel New Zealand revenues via low-tax
jurisdictions such as Singapore.
...
The practice saw Google's New Zealand subsidiary provide only
services as part of the sales process - paying just $356,000 in tax
on only $12.2m in revenue. Estimates of Google's sales revenue from
New Zealand range in the hundreds of millions of dollars annually.
2 years, 3 months
uTorrent Client Affected by Some Pretty Severe Security Flaws
by Peter Reutemann
'A Google security researcher has found multiple security flaws
affecting the uTorrent web and desktop client that allow an attacker
to infect a victim with malware or collect data on the users' past
downloads, reports BleepingComputer. From the report:
The vulnerabilities have been discovered by Google Project Zero
security researcher Tavis Ormandy, and they impact uTorrent Web, a new
web-based version of the uTorrent BitTorrent client, and uTorrent
Classic, the old uTorrent client that most people know. Ormandy says
that both uTorrent clients are exposing an RPC server -- on port 10000
(uTorrent Classic) and 19575 (uTorrent Web). The expert says that
attackers can hide commands inside web pages that interact with this
open RPC server. The attacker only needs to trick a user with a
vulnerable uTorrent client to access a malicious web page.
Furthermore, the uTorrent clients are also vulnerable to DNS rebinding
-- a vulnerability that allows the attacker to legitimize his requests
to the RPC server.'
-- source: https://it.slashdot.org/story/18/02/21/180206
Cheers, Peter
--
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
2 years, 3 months
