- luv-talk - example.com

Hacking automotive OS's
by Rohan McLeod 08 Nov '15

08 Nov '15

Assembled cognoscenti I was watching a documentary on the fabulous gee-wiz world of autonomous cars; which is apparently going to lead to super safe car journeys and a revival of automotive manufacturing in places where it has been abandoned ! "Autonomous cars are coming, and it's time for everyone to just accept it." http://www.roadandtrack.com/car-culture/features/a26991/autonomous-cars-the… But then I remembered mention of automotive OS hackers taking over control of a vehicle, http://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway/ and all of a sudden the night-mare possibility of 'driving' in a vehicle which has the reliability of a Windows PC, augmented with the capacity to crash and kill me; struck full force [apologies to those who retain the original usage of hacking as 'DIY OS and IT enthusiasts'; this is obviously the more modern denigrating usage of 'OS cracker vandal etc'] In http://www.wired.com/2012/12/automotive-os-war/ there is mention of QNX, Windows and Linux. I guess the question which is bothering me; is in these automotive and perhaps (aeronautical ?); applications of OS's where bugs, hacks and security holes really are' life and death' issues; are the security holes which have been found; just programmer carelessness or reflective of the seemingly never ending generation and discovery of bugs and security glitches ? Will we finish up with something like Qubes; http://www.linux-magazine.com/Online/Features/Qubes-OS where Debian VM's are the security weak point ? regards Rohan McLeod

3 4

bypassing the kernel
by Steve Roylance 05 Nov '15

05 Nov '15

hi as mention at Maria's http://www.theregister.co.uk/2015/10/12/linux_networking_api_showing_its_ag…

2 1

part-time sysadmin work?
by Craig Sanders 04 Nov '15

04 Nov '15

I'm looking for a part-time Systems Administration role in Melbourne, either in a senior capacity or happy to assist an existing sysadmin or development team. I'm mostly recovered from a long illness and want to get back to work, on a part-time basis (up to 3 days per week). Preferably in the City or Inner North near public transport. I can commute further if there is scope for telecommuting once I know your systems and people, and trust has been established. If you have a suitable position available or know of someone who does, please contact me by email. Why hire me? Pros: - I have over 20 years experience working with linux and unix - Over 30 years in IT, tech support, sysadmin type roles - I have excellent problem-solving skills - I have excellent English language communication skills - I can only work part time so you get a senior sysadmin at a discount part-time price, and I'm able to get things done both quickly and correctly. - My programming strengths are in systems administration and automation. - I'm a real-life cyborg (at least part-time, on dialysis) Cons: - My programming weaknesses are in applications development. - I can't travel at all. I have to dialyse every 2nd night. - I can't work late (except via telecommute) - I can't drink alcohol, not even beer. - I am on the transplant waiting list. At some time in the next few years I might get a phone call from the hospital and have to drop everything with 1 or 2 hours notice and be out of action for a few weeks. Full CV available on request. I'm in the top few percent on ServerFault and Unix & Linux StackExchange sites - if you want to get a preview of my problem-solving and technical communication skills, see my profile at: http://unix.stackexchange.com/users/7696/cas?tab=profile CV Summary: Systems Administrator and Programmer with extensive exposure to a wide variety of hardware and software systems. Excellent fault-diagnosis, problem-solving and system design skills. Strong technical/user support background. Ability to communicate technical concepts clearly to non-IT people. Significant IT Management and supervisory experience. Particular Skills - Unix, Linux - Internet-based Services and Security - Systems & Network Administration - Virtualisation - Openstack, Libvirt, KVM, Xen, Vmware - HPC Cluster - slurm, Torque, OpenMPI, pdsh - Perl, Python, shell, awk, sed, etc scripting for systems automation - Data extraction/conversion, processing, and reporting. (incl. CSV, XML, many others) - Web server administation, incl. Apache. - Web development HTML, CSS, Javascript, perl, PHP, CGI scripting etc. - Postgresql, Mysql, Microsoft SQL Server, and Oracle - DNS - bind8/bind9, nlnet's nsd & unbound - SMTP - postfix, sendmail, exim, qmail. - High Level Technical Support - Database design & development - Mentoring and training of colleagues craig -- craig sanders <cas(a)taz.net.au> (part time cyborg)

1 0

racism
by Russell Coker 03 Nov '15

03 Nov '15

http://www.racialicious.com/2015/08/05/racism-made-me-who-i-am-today/ Based on past discussions on this list I think some people here need to read this. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Nexus5?
by Tim Hamilton 01 Nov '15

01 Nov '15

It's time for my partner and I to upgrade our phones and am wondering what people think of the original Nexus5. I don't need a cutting edge phone and like the idea of running a generation behind. The problem with this strategy right now is that means the Nexus6 which is probably physically a little large. It's also not a whole lot cheaper than the base model Nexus5x which goes on sale soon. I like the idea of a Google device to get a stock Android experience and to ensure updates are received in a timely manner, or at all. Nexus devices are also well supported by the aftermarket ROM community if Google drops support, though after running Cyanogen on my current HTC DesireHD for most of its life due t lack of support, I'd rather official updates. Is the Nexus5 still a reasonable phone, or does anyone have another suggestion? -- Vote NO in referenda.

1 0

Asylum Seekers Meeting next Saturday (After LUV Beginners)
by Lev Lafayette 11 Oct '15

11 Oct '15

Hi everyone, (Very much non-Linux related) People will know that I've had a long-standing interest (about twenty-three years now) in the issue of asylum seekers and Australian policy towards them. Sometimes I even organise meetings about such events. One such meeting will be next Saturday evening, starting at 6.00pm, just after the LUV Beginners meeting, and just down the road at the New International Bookshop at Trades Hall. Afterwards we'll be having dinner at #1 Lygon Street. The speaker is Damien Kingsbury. Apart form being the professor of international politics at Deakin University and the author or editor of some twenty five books in the past decade on regional affairs, Damien has also being doing some work on changing Australia's policies towards asylum seekers, working with a number of federal MPs on the issue. https://en.wikipedia.org/wiki/Damien_Kingsbury I hope that some of you who have an interest in this areas may come along. Let me know if you will, so I can organise numbers for the dinner. All the best, -- Lev Lafayette, BA (Hons), GradCertTerAdEd (Murdoch), GradCertPM, MBA (Tech Mngmnt) (Chifley) mobile: 0432 255 208 RFC 1855 Netiquette Guidelines http://www.ietf.org/rfc/rfc1855.txt

1 0

Re: [luv-talk] Non ISP mail servers.... metadata
by Rick Moen 07 Oct '15

07 Oct '15

Quoting Andrew McGlashan (andrew.mcglashan(a)affinityvision.com.au) > With the metadata laws.... does anyone here have a good understanding on > how we stand running our own mail servers onsite for ourselves and/or > for our clients (domains owned by us and also by clients) ? > > http://blog.fastmail.com/2015/04/09/fastmail-is-not-required-to-implement-t… Scofflaw that I am, I have stealthily secreted my Linux mail server in a surburban house in California. Frightfully clever, aren't I? -- Cheers, NOT ALL ELECTRONS ARE NEGATIVE, some have just been hurt Rick Moen in the past and are looking for a reason to trust again. rick(a)linuxmafia.com -- @SarcasticRover McQ! (4x80)

1 0

email tampering
by Brian May 06 Oct '15

06 Oct '15

Hello All, I have a windows based family member who is sending out going invoices via email, I think using a Telstra Bigbond email account. Somehow somebody is copying my relatives outgoing emails, replacing the contact details with their (very similar) contact details, and replacing the bank account details with their bank account details. All the other unique details in the invoice are the same and customized for the client. The attacker responds to emails to the new (but almost identical) email address that was in the email, and impersonates my relative in email conversations. I think (need to check) the client gets two copies of the invoice, one good and one bad. This results the clients paying the wrong account. My relative has changed his email password, had a complete virus scan of his computer; however the issue is still occurring. It seems like a very much targeted attack. It is becoming somewhat expensive. Any ideas? Apart from sending invoices postal? Which may or may not work depending on what access the attacker has? Is there anyone I could refer my relative to in order sort out this mess? Unfortunately, I think "use GPG" isn't an option. Even if his emails had signatures, it is unlikely his clients would know how to check them. Obviously this goes to show how insecure email is, however I am speculating that the intruder doesn't have access to the network to monitor the SMTP sessions. Regards

9 13

Re: [luv-talk] email tampering
by Brian May 29 Sep '15

29 Sep '15

On Tue, 29 Sep 2015 at 16:36 David Tulloh <david(a)tulloh.id.au> wrote: > As an immediate solution I suggest switching to an online email system > such as GMail. This can be done easily by redirecting the account or using > gmail fetcher to check the external server, outgoing emails can be sent > with the existing from address so there is visible change. > How does BigPond work? I assumed it would be an web based online system, maybe that is a bad assumption my part. In which case, if it is something like outlook on his computer talking SMTP/POP/IMAP need to make sure it is secure, like other people have mentioned. It is is a desktop computer, would be surprised if it is using WIFI, but something I should check. Are compromised routers common? There a number of possibilities here. I don't like to suggest random changes unless I can get some proof that the change addresses the actual attack vector. e.g. changing to a gmail account would not help if there is some sort of hidden keyboard logger on the computer. Apparently it is a bluetooth keyboad, how secure are bluetooth keyboards? Or if my relative changed an obvious password to another easy to guess password.

2 1

Causes of anomalous difference in execution time same application, same OS, different boxes ?
by Rohan McLeod 29 Sep '15

29 Sep '15

Assembled cognoscenti; just idle curiosity really. I am wondering about , causes of anomalous difference in execution time, same application (FreeDVDDecrypter), same OS (XP x64), different boxes ? Box 1: Asus M4A79XTD_EVO; 16GB RAM;CPU AMD Phenom II x4 (4 core) 965 3.4GHz takes about 30min for 6GB DVD, with 1 core obviously flat-chat ~100% Box 2: Asus_P6T-intel-i7; 20GB RAM; CPU Intel i7 (4 core) 940 2.93 GHz takes about 10min for same 6GB DVD, with no core seemingly particularly active regards Rohan McLeod

2 3