MUUGLines The Manitoba UNIX User Group Newsletter Volume 33 No. 8, April 2021 Editor: Katherine Scrupa Next Meeting: April 13th, 2021 ,is month (0ust like last month+ we are using our (Online Jitsi Video Meeting) own online Jitsi meeting server hosted by merlin.mb.ca . The virtual meeting room will be Calibre eBook Reader – Chris Audet open around 7&22 pm on April 14th, with the actual meeting starting at 7&42 pm You do not need to Do you love to read, but your house is running out install any special app or so5ware to use Jitsi& you of space for books? Does your family poke fun at can use it via any modern webcam%enabled browser your messy ebook hoarding habits? Take back by going to the aforementioned link No camera? control of your library – this month Chris Audet will $oin without, or use your phone with the Android or present an overview of Calibre, the world’s best i7. app- Thank you MERLIN (the Manitoba Education ebook management program 9esearch and Learning Information Networks+ for providing the hosting and bandwidth for our Calibre can meetings automatically organi!e books The latest meeting details are always at: by author, series, etc You can read https://muug.ca/meetings/ directly in Calibre, or Calibre &l$gins convert your books to use a dedicated device like a Kindle You To complement this month’s meeting, check out all can even share your library over the web for your the Calibre Plugins- E<amples includes accessibility friends and family plugins, page generators for Amazon forma=ing, downloaders for metadata and covers from large $oin us for a brief overview of Calibre’s history and booksellers and Goodreads, spli=ing tools, merging features, and why you might choose to use it to tools, library codes? manage your collection. https://plugins.calibre-ebook.com/ April Door &rizes: ***☠ CrA+,d b- .tan/0rd +re0 ☠*** Draw for one e%book& any Mastery title by Michael .tanford scientists have reverse engineered the ( Lucas (https://mwl.io+ Thanks Michael- (.ee page 4 + m9NA code for the Moderna vaccine and posted it to Github Would this be considered a checksum? (e’ll also have our usual e%book giveaway (e have Download your own rip of the vaccine now- [insert added additional e%books since last month 8-bit music hereA https://www.vice.com/en/article/7k9gya/ (here to Find the Meeting: stanford-scientists-reverse-engineer- moderna-vaccine-post-code-on-github jitsi.merlin.mb.ca/muug.2021.04 1 Cosmopolitan and A+tuall- &ortable printing 6S pages and taping many of them together *keeping them sOuare+, or ge=ing it printed locally as Exe+$table a blueprint for an additional $QT By contrast, printed Programmer Justine Tunney developed Cosmo% patterns in store are ready to go, for $T – P3T (if you politan based on a previous pro0ect “αcDEαlly keep an eye on sales+ pδrταblG ε<GcEταblG” (A;8+ A;8 encodes Windows Portable E<ecutable files as a U6:K Si<th Edition Pa=arina allows shell script. you to use patterns at $ustine’s goal& home, with no specialized “makes C a build%once run-anywhere eOuipment – all language, like Java [?A reconfigures stock you need is your >CC to output a PO.:K%approved polyglot cell phone, and a format that runs natively on Linu< + Mac + pre%printed paper the camera uses to determine (indows + FreeN.D + OpenB.D + B:7. orientation and skew of a 2D surface (the fabric+ with the best possible performance and the .elect a sewing pa=ern in Patterina, place the page tiniest footprint imaginableH on the fabric, and the Patterina so5ware uses A9 to show where to trace the pattern on the fabric No https://justine.lol/ape.html printing or taping needed, no trips to the printers, no e<tra cost. An Exer+ise in A$gmented "eality As other MJJ> Board members pointed out, the Appli+ations usability of this may vary by person. Learning style, neurodiversity, ageUeyesight/eye conditions, and b- Katherine Scrupa disabilities will all affect if and how it can be used 'any people familiar with Augmented Reality (A9+ Wow could the A9 option be improved to reduce the or Mi<ed Reality ('9+ applications as games These barriers? A steady frame for the cameraphone? A apps solve the “problem” of “that’s a cool futuristic modiIer on a digital flashlight to show the tracing toy H lines on a surface (mini pro0ector+? Something with lasers that lights the tracing on the surface? "ou may see videos of people using A9 to rotate a car in the air and think, “Neat, I guess But what do I (hat other applications can this be used for? do with it?H )andscaping? Woodworking? Car and home repair? A9 applications have been available in classrooms https://www.pattarina.de/english.html for a while, such as document cameras and so5ware used in tandem with a cube that has si< uniOue patterns on its sides Rotate the cube under the 4inux ,ernel $gs Al1ost Old camera, and an ob0ect of your choosing – such as a 4D model of human heart – will rotate on screen. Eno$gh to Dri5e ,is may especially help with visual learners J.%based Cybersecurity group G9:'' noticed these bugs and have reported them to the Linu< Security 9ecently, another A9 application, Pa=arina, came up Team Patches became available March 7, 22Q3 The in my Twi=er feed bugs stem from a 1T%year%old SC.: driver Even if you don’t use SC.:, the vulnerabilities are still in ,e problem this Pattarina solves is large scale play pattern printing is wasteful, time%consuming, and e<pensive CY8%Q2Q3%Q14RT, Heap Buffer OverXow (i.C.:+ : recently bought a hard%to%Ind pattern from CY8%Q2Q3%Q14R4 Pointer Leak to Userspace (i.C.:+ >ermany as a PDM for $Q4 CAD My options were 2 CY8%Q2Q3%Q14R/ Out-of%Nounds Read (i.C.:+ Union file systems together to present multiple local andUor cloud file systems as one .ee the link for a well%wri=en e<planation of how the vulnerabilities work and how they can be https://rclone.org/ e<ploited https://blog.grimm-co.com/2021/03/new-old- Need a Mainframe 7raining &lan? bugs-in-linux-kernel.html B8vil Mainframe” zU7. Pentesting Course – (orld’s Irst (and only?+ mainframe pentesting course is FileZilla and &$778 Share More being offered online- 7han 8o$ 7hink https://www.eventbrite.com/e/evil- .ecurity researcher Didier Stevens noticed a popup mainframe-training-online-tickets- for one of their S.W Fingerprints when using SMTP 145350422025 via FileZilla, which they weren’t e<pecting. Then they connected with a S.W Client, but the Finger% print was the same Inspection with pro<mon (a OV: Data Centre Fire in France handy tool for Windows process, registry, and file 7n March 12, 22Q3, an early activity+ revealed FileZilla looking for the key in morning fire destroyed one PuTTY’s registry keys .trasbourg, France, data centre and part of another :t turns out fzs5p e<e, used by FileZilla, is a fork of ,e Strasbourg data centre PuTTY’s ps5p e<e FileZilla will use any keys gained is located near the German via PuTT", and vice versa. border The fire was caused by a faulty U;. that had been serviced the day https://blog.didierstevens.com/2021/03/27/ before No one was injured in the fire OYW runs 21 filezilla-uses-puttys-registry-fingerprint- data centres around the world and has a 3 3[ market cache/ share of web hosting. A5ermath updates from the C87, Octave Klaba: rClone – Mo$nt Clo$d Storage as Networ! Disk 'arch 2\& Do you use rClone? It’s an open source command (e are facing lot of blockers and the line tool for mounting cloud storage systems on a unpredictable issues that should have been variety of platforms I<ed but are not yet. E<emple [sicA& the elevator in SN>4 is not fi<ed yet. Nackup (and encrypt) files to cloud storage ConseOuence& we have to use the stairway 9estore (and decrypt) files from cloud storage for all servers coming from Croi< 1by3 'irror cloud data to other cloud services or locally 'arch 32& 'igrate data to cloud, or between cloud storage (e delivered > 7# servers Still 3# in the vendors backlog. Everyday we add 4T2%T22 servers 5% 32 days ? depends on the type of the server 'ount multiple, encrypted, cached or diverse cloud Also, we plan to deliver in G9AL9NK all the storage as a disk remains services that was destroyed in SN>Q and apply 6m for free Analyse and account for data held on cloud storage using lsf, ljson, size, ncdu 3 'arch 33st& 7hank 8o$ 423;net 7n 1Q4T backups on 1\/SR backups, 6[, a A big thanks to L8. net for providing MJJ> with small part of the file isn’t there Since all files free hosting and all that bandwidth- are encrypted, we can’t partially rebuild 1Q4T backup with the data we have We continue to check, but . :U All 1SQT3 backups (Y;. / ;C:+ are in progress April 1st& :n the SN>4 we have the security guard https://les.net/ walking and checking if everything is okey @sicA This morning at 6am, they felt something strange in the air and found out 7hanks to Mi+hael (; 4$+as it’s coming from U;.33T4 We immediately bypassUshutdown the U;. and we called the 'JJ> would like to thank Michael W Lucas for IreIghter donating one of his ebooks every month as a door prize You ,e fireIghters came and checked the temp can view and purchase everywhere& no smoke, no fire They le5 the his tech books here& site On the front of this U;., we see that the small filter is burnt.