March 2017 - Talk - lists.gtalug.org

Re: [GTALUG] DMA kernel attacks
by Russell Reiter 17 Mar '17

17 Mar '17

<rreiter91(a)gmail.com> Date: Mar 16, 2017 12:49 PM Subject: Re: [GTALUG] DMA kernel attacks To: "Lennart Sorensen" <lsorense(a)csclub.uwaterloo.ca On Mar 13, 2017 10:50 AM, "Russell Reiter" <rreiter91(a)gmail.com> wrote: On Mar 13, 2017 10:27 AM, "Lennart Sorensen" <lsorense(a)csclub.uwaterloo.ca> wrote: On Sat, Mar 11, 2017 at 01:02:45PM -0500, Russell Reiter via talk wrote: > Another DEFCON talk. This is a hardware attack on M$, OSX & Linux, PCIleech > = 150mbs over usb3. Sorry, I wasn't clear here. The PCI card goes in the attacking machine. The steal is over USB. Two tries for the linux box. > > https://www.youtube.com/watch?v=fXthwl6ShOg&list=PL9fPq3eQfa aAvXV3hJc4yHuNxoviVckoE&index=15#t=2508.995164 Well first you have to install your PCIe card in the target machine, which means you would have to shut it down first, which could make booting it again difficult. Ummm ... PCIe is hot plugable with the right software. I thought initially they found a flaw in USB3, but no that is not the case. So it doesn't do anything we didn't already have a problem with in firewire years ago. So yes if you get to put your own PCIe hardware in a machine, you can DMA memory. And it's a bit faster than a firewire card was. The firewire and thunderbolt issues in the past seem much more of a concern than this because they were hardware already present in the target machine. This is pretty much just irrelevant. Maybe to you. I dont consider increase of transfer rate from 3mbs to 150mbs irrelevant by any means. Just because I highlight one bit of information which I gleaned from a source and wanted to share, as a matter of general interest; this doesent mean I didn't want you to learn from the post. I did it because I do want you to learn from it. Like you just now learned PCIe can be accessed without rebooting. Among other things. -- Len Sorensen

3 7

Dell Venue 11 pro at Factory direct
by D. Hugh Redelmeier 15 Mar '17

15 Mar '17

I was asked if this is still available. <http://www.factorydirect.ca/Canada-Downtown%20Toronto/Ipads__Tablets___Erea…> Stock seems very low: two stores might have them. If you go to a FD store, they might be able to phone Barrie or London to see if any are in stock. Thy might be willing to get it shipped to your store (free). I've done that in the past. These were used by a Texas school board for a couple of years. Mine was still within the Dell warranty and I was able to get a repair. They are called "refurb" but this would not be by Dell. They are definitely used.

1 0

Looking for an extrovert (or a noisy introvert) to M.C. tonight's meeting
by Myles Braithwaite 👾 14 Mar '17

14 Mar '17

We are looking for a someone who would M.C. tonight’s meeting. Basically you say who is speaking next and what they are going to be talking about. You can find a current list of people presenting here: <https://wiki.gtalug.org/meeting:2017-03#lightning_talks>. It’s a fun job.

4 3

Watching a network folder: is there a smart way of doing this?
by Stewart C. Russell 14 Mar '17

14 Mar '17

I need to watch a folder on a network share (a scanner) and see when new files are created. There are a couple of special things about this location: * It's over CIFS. There's nothing I can do about that. I think that means I can't use Inotify. * It doesn't have an accurate clock for timestamping. There's nothing I can do about that, either. * If the share is being written to by the device, it effectively disappears: stat() complains loudly. * It reuses the lowest available file name of the form “EPSON%03d.(PDF|JPG)”, so synching the share to a sensible filesystem might overwrite files accidentally. * I don't need to watch it very often; a few times per hour would be fine. I tried using Perl's File::ChangeNotify::Watcher, which is supposed to pick the smartest method available. Unfortunately, this seems to be calling stat() every two seconds, resulting in: 1. Messages (one per existing file on the share) saying that the scanner has deleted them. This happens when someone starts scanning 2. An error message from stat() every two seconds while the device is scanning 3. Messages saying that all of the old files (plus the new one) have been created. I was naïvely hoping for a mechanism that would report “Hey, you have a new file called $filename” but that seems to have been a pipedream. What do People Who Actually Know What They're Doing use, please? cheers, Stewart

11 17

dinner before meeting?
by D. Hugh Redelmeier 14 Mar '17

14 Mar '17

Has anybody figured out a good place for tonight? <https://wiki.gtalug.org/pre-meeting_dinner#kaiju_japanese_curry> If it is still there, I suggest Roti Roll: Roti Roll Caribbean Cuisine Address: 361 Yonge St. (A little hard to recognize from the street but it is there) Yelp Review visited 2015 November 10, 2016 July 12

4 3

mailing list issue
by D. Hugh Redelmeier 14 Mar '17

14 Mar '17

I'm receiving much of my email through an ancient server. I hope to fix that. Some of my messages from the GTALUG list are dammaged. Basically, the newlines are lost. I suspect that this is due to my server, but at least some of the problem is the GTALUG list handling software. For example, Chris Browne just sent a message to the list and CCed me. The copy that went directly was fine. The copy that went through the GTALUG is mangled. The direct copy was transmitted in plain text, UTF-8: Content-Type: text/plain; charset=UTF-8 The copy from the list had been changed to base64 by the list sofware: X-MIME-Autoconverted: from base64 to 8bit by gw-d.mimosa.com id v2EGxaHB032483 I expect that my systems MIME Autoconverter is wrong but why is the list software creating base64 where none existed before? Other observations: Not all my mail goes through that gateway. The simple (non-MIME) messages that come via another gateway seem to all be in base 64. Why? Not all my GTALUG mail that goes through that gateway gets mangled. For example, the message about dinner that I sent to the list didn't get mangled. This seems to have started happening in late September.

2 1

[GTALUG-Announce] Meeting tonight at 7:30pm
by hi＠gtalug.org 14 Mar '17

14 Mar '17

<http://gtalug.org/meeting/2017-03/> # Lighting Talks To start off the meeting we have two 10mins talks about **Let's Encrypt** with Myles Braithwaite and **Assembly Language Programming Atmel Microprocessors from a Linux platform** with Peter Hiscocks. After Myles' talk there will be a bunch of audience organized short talks. If you would like to give a talk, all you have to do is write your name on a post-it and stick it on the whiteboard in the front of the room. When your talk get's picked you will have five minutes of uninterrupted time for you to present, then five minutes of audience questions/concerns. Schedule Five Minute Talks: * Metal-as-a-Service: David Collier-Brown * Add your name to this list by emailing <hi(a)gtalug.org>. ## Location George Vari Engineering and Computing Centre 245 Church Street, Room 203 Ryerson University <http://goo.gl/maps/16oJ2> <http://www.openstreetmap.org/way/23447525> ## Schedule * 6:00 pm - Please discuss on the general mailing list (i.e. <talk(a)gtalug.org>) where you want to go for dinner. * 7:30 pm - Meeting and presentation. * 9:00 pm - After each meeting, a group of GTALUGers move to The Imperial Pub (54 Dundas St East) for refreshments and more socializing. # Code of Conduct We want a productive happy community that can welcome new ideas, improve every process every year, and foster collaboration between individuals with differing needs, interests and skills. We gain strength from diversity, and actively seek participation from those who enhance it. This code of conduct exists to ensure that diverse groups collaborate to mutual advantage and enjoyment. We will challenge prejudice that could jeopardize the participation of any person in the community. The Code of Conduct governs how we behave in public or in private whenever the Linux community will be judged by our actions. We expect it to be honoured by everyone who represents the community officially or informally, claims affiliation or participates directly. It applies to activities online or offline. We invite anybody to participate. Our community is open. Please read more about the GTALUG Code of Conduct here: <http://gtalug.org/about/code-of-conduct/>. If you have any questions, comments, or concerns about the GTALUG Code of Conduct please contact the GTALUG Board @ <board(a)gtalug.org>. --- GTALUG Announce mailing list announce(a)gtalug.org https://gtalug.org/mailman/listinfo/announce

2 1

DMA kernel attacks
by Russell Reiter 13 Mar '17

13 Mar '17

Another DEFCON talk. This is a hardware attack on M$, OSX & Linux, PCIleech = 150mbs over usb3. https://www.youtube.com/watch?v=fXthwl6ShOg&list=PL9fPq3eQfaaAvXV3hJc4yHuNx…

2 4

Updating Wheezy to Jessie
by David Mason 13 Mar '17

13 Mar '17

I have a server at home that tends to be install and forget. It's running Wheezy and zfsonlinux. Unfortunately zfsonlinux no longer supports Wheezy, so upgrading isn't as straight-forward as I would hope. I am following instructions at https://www.howtoforge.com/ tutorial/how-to-upgrade-debian-wheezy-to-jessie-stable-release/ and one of the early steps is to do apt-get update which gets some "No public key available" for the zfsonlinux/wheezy links. This leads to the following: root@server:/etc/apt# apt-get upgrade Reading package lists... Done Building dependency tree Reading state information... Done The following packages have been kept back: default-jdk default-jre default-jre-headless zfsutils The following packages will be upgraded: apt apt-utils base-files bash bind9-host binutils cpio cups cups-client cups-common cups-filters cups-ppdc dbus debian-archive-keyring dnsutils dpkg dpkg-dev e2fslibs e2fsprogs exim4 exim4-base exim4-config exim4-daemon-light file fontconfig fontconfig-config foomatic-filters ghostscript ghostscript-cups gnupg gpgv grub-common grub-pc grub-pc-bin grub2-common gstreamer0.10-gconf gstreamer0.10-plugins-bad gstreamer0.10-plugins-base gstreamer0.10-plugins-good gstreamer0.10-x host hpijs hplip hplip-data icedtea-6-jre-cacao icedtea-6-jre-jamvm icedtea-netx icedtea-netx-common isc-dhcp-client isc-dhcp-common java-common krb5-locales libapt-inst1.5 libapt-pkg4.12 libass4 libavcodec53 libavformat53 libavutil51 libbind9-80 libc-bin libc-dev-bin libc6 libc6-dev libcairo-gobject2 libcairo2 libcomerr2 libcups2 libcupscgi1 libcupsdriver1 libcupsfilters1 libcupsimage2 libcupsmime1 libcupsppdc1 libcurl3-gnutls libdbus-1-3 libdns88 libdpkg-perl libevent-2.0-5 libexpat1 libfontconfig1 libfreetype6 libfuse2 libgc1c2 libgcrypt11 libgd2-xpm libgdk-pixbuf2.0-0 libgdk-pixbuf2.0-common libgif4 libgme0 libgnutls-openssl27 libgnutls26 libgs9 libgs9-common libgssapi-krb5-2 libgssrpc4 libgstreamer-plugins-bad0.10-0 libgstreamer-plugins-base0.10-0 libgtk-3-0 libgtk-3-bin libgtk-3-common libhpmud0 libicu48 libidn11 libisc84 libisccc80 libisccfg82 libjasper1 libk5crypto3 libkadm5clnt-mit8 libkadm5srv-mit8 libkdb5-6 libkrb5-3 libkrb5support0 liblcms1 liblcms2-2 libldap-2.4-2 liblwres80 libmagic1 libnspr4 libnss3 libnvpair1 libpcsclite1 libperl5.14 libpixman-1-0 libpng12-0 libpoppler19 libpython2.7 librsvg2-2 librsvg2-common libsane-hpaio libslp1 libsqlite3-0 libss2 libssl1.0.0 libsystemd-login0 libtasn1-3 libtiff4 libupnp6 libuutil1 libx11-6 libx11-data libx11-dev libx11-doc libx11-xcb1 libxapian22 libxfixes3 libxi6 libxml2 libxpm4 libxrandr2 libxrender1 libxslt1.1 libxtst6 libxv1 libzfs2 libzpool2 linux-headers-3.2.0-4-amd64 linux-headers-3.2.0-4-common linux-image-3.2.0-4-amd64 linux-libc-dev live-tools locales mime-support multiarch-support openjdk-6-jdk openjdk-6-jre openjdk-6-jre-headless openjdk-6-jre-lib openssh-client openssh-server openssl perl perl-base perl-modules poppler-utils printer-driver-hpcups printer-driver-hpijs printer-driver-postscript-hp python-crypto python-imaging python2.7 python2.7-minimal rpcbind spl spl-dkms ssl-cert sudo tar tzdata tzdata-java unzip vim-common vim-tiny wget wpasupplicant xscreensaver xscreensaver-data zfs-dkms zfsonlinux 199 upgraded, 0 newly installed, 0 to remove and 4 not upgraded. Need to get 217 MB of archives. After this operation, 4,578 kB disk space will be freed. Do you want to continue [Y/n]? WARNING: The following packages cannot be authenticated! zfs-dkms zfsonlinux libuutil1 libnvpair1 libzpool2 libzfs2 grub-pc grub-pc-bin grub2-common grub-common spl spl-dkms Install these packages without verification [y/N]? E: Some packages could not be authenticated And nothing happens. I guess I have to tell it not to try to upgrade those unauthenticated packages, but I don't know how. Any advice appreciated. Thanks ../Dave

3 2

A Rakuten/Kobo contract job
by David Collier-Brown 09 Mar '17

09 Mar '17

My department has a small status dashboard, written in python: we need a developer to expand and clean it up, as the current one is the "minimum viable product". This is basically doing a GUI in python with a little bit of html/css as opposed to a "suffer from javascript" job. The description is at https://www.kobo.com/jobs?jvi=ofdO4fw4,Job I'd appreciate a good applicant or two, as I need to work with this product (;-)) Send me mail if you're interested. --dave -- David Collier-Brown, | Always do right. This will gratify System Programmer and Author | some people and astonish the rest davecb(a)spamcop.net | -- Mark Twain

1 0