February 2015 - Talk - lists.gtalug.org

Fw: [Cryptography] Lenovo laptops with preloaded adware and an evil CA
by William Muriithi 20 Feb '15

20 Feb '15

‎Evening, Forwarding this to this list as I am aware thinkpad is popular. Looks though like Lenovo is shipping a really dirty adware How can they have fallen for this? Regards, William Original Message From: Christian Barcenas <christian(a)cbarcenas.com> Sent: Thursday, February 19, 2015 9:47 AM To: cryptography(a)metzdowd.com Subject: [Cryptography] Lenovo laptops with preloaded adware and an evil CA -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There's some interesting buzz online [1][2][3] about "Superfish", a bit of adware that Lenovo has apparently been preloading on some of its computers over the past few months. While preloaded adware is bad enough, Superfish does something even worse: to allow itself to MITM SSL-/TLS-protected web traffic, it installs a CA into the Windows trusted root certificate store. This CA is apparently pre-generated and its corresponding private key comes with every installation of Superfish. Furthermore, uninstalling Superfish does not remove this CA, so all users running Lenovo's tainted Windows installation are affected, even if they took the time to uninstall Superfish. A user on Twitter has apparently forged a certificate for Bank of America's online banking system [4] and I expect that we will see more of these shenanigans to come to light over the next few days. According to a thread on Lenovo's customer support forum [1], they are no longer pushing this adware on customers and are asking the authoring company to push a fix for this ASAP. Mozilla also has an issue on their tracker to mark the offending cert as "untrusted" in NSS. [5] Thoughts? [1] https://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series/Lenovo-Pre-instaling-a… [2] http://thenextweb.com/insider/2015/02/19/lenovo-caught-installing-adware-ne… [3] https://news.ycombinator.com/item?id=9072424 [4] https://twitter.com/kennwhite/status/568270748638318593/photo/1 [5] https://bugzilla.mozilla.org/show_bug.cgi?id=1134506 - -- Christian Barcenas -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJU5Yc2AAoJEJDIWKpke1EfA4IH/RUZ/g6g195FMQs843MlJ3mF H4162211XSXxmPBaJn2vg5ibWgTSWZVpxHvpo1iZb0thJTfJW1W8Aa3rHmyo5Y89 siAM0LujFlq3KkacIfEX01QL9/fDeiYZgm73KIO4M7/1O6J+tsU9XnLS66UbR6WX xxJ/3uqlFFaGrkykqvtEnIeOYrgqnXcHakW+uSOFPEPnOTYNcUxFXq36N4fPFM67 vL0Vbzf42aAgj5I6dlhm2Fhzo72KjpYu6x0QU2tv1UNKDbKEgnCoFjv2yOZ5Gb1h uQx7ktUoop7vj99LKShKm64oWJ+8CE5IQEnkJ6YR3aNf17WniDcihi8TecUW7Yw= =00Ds -----END PGP SIGNATURE----- _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

3 2

Speedtest-cli
by Scott Sullivan 20 Feb '15

20 Feb '15

https://github.com/sivel/speedtest-cli Thought I'd share this little gem I saw while reading are review of online.net's dedicated ARM cloud servers. -- Scott Sullivan

2 1

Fwd: Re: Tonight's [Libreplanet] meeting
by Bob Jonkman 19 Feb '15

19 Feb '15

A bit short notice, but Matt Lee from FSF is in town, and some of us are meeting him tonight. I'll be at the Charlotte around 7pm to get a bite to eat, please come join us if you're able. --Bob. -------- Original Message -------- From: Sergio Durigan Junior <sergiodj(a)sergiodj.net> Sent: February 19, 2015 12:48:34 PM EST To: Matt Lee <mattl(a)creativecommons.org> Cc: libreplanet-ca-on(a)libreplanet.org Subject: Re: [lp-ca-on] Tonight's meeting On Thursday, February 19 2015, Matt Lee wrote: > Hey, sorry for the late notice on some of these things. Planning a > week of activities for 20 people after spending all day together can > be tricky. > > So, I joined the list for a few days. > > We'll be at Charlotte Room, 19 Charlotte St http://www.charlotteroom.com at 9pm > > They have pool tables. I look forward to seeing you there. Thanks for the notice, Matt. I think Bob and I will be there. -- Sergio GPG key ID: 0x65FC5E36 Please send encrypted e-mail if possible http://sergiodj.net/ -- Bob Jonkman bjonkman(a)sobac.com http://bob.jonkman.ca/blogs/bobjonkman

1 0

Volunteers for Open Source Comes to Campus on Feb 28, 2015
by Dawn Walker 19 Feb '15

19 Feb '15

Hi all, My name is Dawn Walker, I am a Graduate Student at the Faculty of Information at UofT. I’m helping run a free event to introduce students to free/libre/open source software on February 28, 2015 at University of Torontocalled Open Source Comes to Campus in conjunction with OpenHatch <https://openhatch.org/>(https://openhatch.org/) We're looking for people to help mentor attendees in a variety of ways as they learn how to contribute to open source projects: * Instruction <https://openhatch.org/wiki/Open_Source_Comes_to_Campus/Curriculum>on topics like open source community norms, issue trackers, IRC and git * Participation on a Career Panel <https://openhatch.org/wiki/Open_Source_Comes_to_Campus/Curriculum/Career_Pa…> * Lead a contributions workshop <https://openhatch.org/wiki/Open_Source_Comes_to_Campus/Curriculum#Contribut…>around a specific project (in this case potentially Open Street Map!) * Or, volunteer to support attendees throughout the day! The event run from 10am - 5pm, with coffee, tea and socializing for a half hour beforehand (Mentors don't need to show up at 9:30am sharp, but should be there by 9:45, we will also provide a lunch!). Instructors with a variety of backgrounds are welcome: while it's great if you have tons of experience using git and setting up development environments, we're also looking for people who've been involved with open source as non-programmers, who know a bit about picking bugs and submitting patches, or who just like to talk about their experiences with open source. Here are links to find out more about the Event <https://events.openhatch.org/events/2>(https://events.openhatch.org/events/2) and Code of Conduct <https://openhatch.org/wiki/OpenHatch_event_code_of_conduct>(https://openhatch.org/wiki/OpenHatch_event_code_of_conduct) If this sounds interesting to you, and you're available on February 28 please email me back at dawn.walker(a)utoronto.ca <mailto:dawn.walker@utoronto.ca> and/or sign up on our Event Page <https://events.openhatch.org/events/2>(https://events.openhatch.org/events/2)<mailto:dawn.walker@utoronto.ca>, I'd love to answer any further questions you might have! Best, Dawn Walker MI Candidate, Faculty of Information University of Toronto

1 0

[Straw Poll] Where should we have dinner before the March 2015 GTALUG meeting?
by Myles Braithwaite 19 Feb '15

19 Feb '15

<http://strawpoll.me/3673421> Vote for where you think we should have dinner before the March 2015 GTALUG meeting! -- Myles Braithwaite | http://mylesb.ca/e

3 2

Administering NetworkManager
by Michael Hill 18 Feb '15

18 Feb '15

In reference to questions brought up in the January meeting... http://blogs.gnome.org/dcbw/2015/02/16/networkmanager-for-administrators-pa… Mike

1 0

FAX Programs
by John Moniz 17 Feb '15

17 Feb '15

Anyone using a Linux program for sending and receiving faxes? Are you using a fax modem on a regular voice line? Thanks, John.

6 8

Wireless router: TP-Link Archer C7 $100
by D. Hugh Redelmeier 17 Feb '15

17 Feb '15

This week (unless supplies run out, which happens) NCIX has this wireless router for $99.49 with free shipping. This is one that Scott has and recommends for OpenWRT. He says that you should go for Version 2.0 and that the box will say if it is a Version 2.0 router. For that reason it may be better to buy it in one of their stores. It has been cheaper (briefly $70 and Future Shop and Best Buy) but not often recently. <http://www.ncix.com/detail/tp-link-archer-c7-ac1750-dual-1c-91525-1251.htm> <http://wiki.openwrt.org/toh/tp-link/tl-wdr7500>

4 5

[OT]: Repair Caf? Toronto at Hacklab.to! Feb 21 2015
by Scott Sullivan 15 Feb '15

15 Feb '15

The Repair Café is a monthly gathering, were they will have volunteer fixers available for computers, electronics, small appliances, clothes, books, among others. For whatever you need fixing, bring it on! You can learn how to fix it while enjoying a cup of coffee or tea. Or see what’s possible with the 3D printer or laser cutter on site. To avoid lineups, please arrive early. It would be best to arrive before 3 p.m. so that there is enough time for the fixer to examine your item. *When*: Saturday, February 21, 2015 – 12 p.m. to 4 p.m. *Where*: HackLab.TO, 1266 Queen Street West, 2nd Floor (/buzz Unit #12/) *Cost*: Free (Donations are welcome!) https://hacklab.to/archives/repair-cafe-toronto-at-hacklab-to-feb-21-2015/ Disclosure: I am a member of hacklab.to, which is an awesome place. I am the coordinator between Hacklab.to and Repair Cafe Toronto. Mending over discarding is Awesome! -- Scott Sullivan with 'Hacklab Member' hat on.

2 1

[OT]: Repair Café Toronto at Hacklab.to! Feb 21 2015
by Scott Sullivan 14 Feb '15

14 Feb '15

The Repair Café is a monthly gathering, were they will have volunteer fixers available for computers, electronics, small appliances, clothes, books, among others. For whatever you need fixing, bring it on! You can learn how to fix it while enjoying a cup of coffee or tea. Or see what’s possible with the 3D printer or laser cutter on site. To avoid lineups, please arrive early. It would be best to arrive before 3 p.m. so that there is enough time for the fixer to examine your item. *When*: Saturday, February 21, 2015 – 12 p.m. to 4 p.m. *Where*: HackLab.TO, 1266 Queen Street West, 2nd Floor (/buzz Unit #12/) *Cost*: Free (Donations are welcome!) https://hacklab.to/archives/repair-cafe-toronto-at-hacklab-to-feb-21-2015/ Disclosure: I am a member of hacklab.to, which is an awesome place. I am the coordinator between Hacklab.to and Repair Cafe Toronto. Mending over discarding is Awesome! -- Scott Sullivan with 'Hacklab Member' hat on.

2 1