- Roundtable - muug.ca

Using ...Python in Libreoffice is a funny way to pop calc.exe
by Kat 29 Jul '19

29 Jul '19

김진욱 (@wugeej) tweeted at 7:44 p.m. on Sun., Jul. 28, 2019: [PoC] LibreOffice a Python Interpreter RCE CVE-2019-9848) 1. LibreOffice is shipped by default with LibreLogo, 2. LibreLogo executes code that is internally translated to python code and executed. 3. run on a mouseover event 4. open a calculator https://t.co/YE9jzbcNTn https://t.co/dImz9Kn0qk (https://twitter.com/wugeej/status/1155640100354572288?s=03) Get the official Twitter app at https://twitter.com/download?s=13

1 0

Shaw second WAN IP with XB6
by Wyatt Zacharias 14 Jul '19

14 Jul '19

Is anyone else here using Shaw with the Arris XB6 modem is bridge mode? If so, have you asked Shaw for a second WAN IP and gotten it? I've been running my modem like this for many months now without issue, but my coworker is getting the run-around from Shaw, saying he already has two IPs in use on his modem. Well it seems that the XB6, even in bridge mode still holds its own WAN IP, separate from the one that is issued to the clients router. So in my case I actually have three IPs, one is on the WAN interface of the modem, the other two go to DHCP clients on my routers. But in my coworkers case, Shaw says that this means he needs to be allocated a third IP, which is an extra $10/month. So if you're running an XB6 in bridge mode could you do me a favour and go to the modem admin page (10.0.0.1, yes it's still active, even in bridge mode) and go to Gateway > Connection > Shaw Network and see if your modem has a WAN IP that is different than your router has, and if you have two WAN IPs like me, is the modem WAN IP different than both of them? -- Wyatt Zacharias

1 1

Looking for PCI serial port card
by Brian Lowe 10 Jul '19

10 Jul '19

Hi everyone, Does anyone have a PCI card with one or two serial ports on it (DB25 or DB9) and are willing to part with it cheap (preferably free)? I'd like to use it for a project I'm working on. Thanks, Brian

1 0

DJango?
by Scott Toderash 10 Jul '19

10 Jul '19

Are there any django developers here? Do you know any? I may have a small amount of work for someone, just sending out some feelers right now.

1 0

Looking for a couple of Mikrotik hAP lite or similar
by Wyatt Zacharias 11 Jun '19

11 Jun '19

I'm looking a for a pair of small mikrotik or similar wireless APs that'll support L2 bridging (client mode). Any band or speed would be acceptable. -- Wyatt Zacharias

3 2

MUUG Meeting, June 11, 7:30pm -- PDF::Reuse - Reuse and Mass-produce PDF Documents
by Gilbert E. Detilllieux 05 Jun '19

05 Jun '19

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, June 11. The meeting topic for this month is as follows: PDF::Reuse - Reuse and Mass-produce PDF Documents Brad Vokey will demonstrate a Perl module that specializes in mass-producing efficient multi-page PDF documents by reusing an original PDF file as a template. This module was the perfect tool to help him create many multi-page PDF result forms for his Matchomatics business (with many over 1000 pages each) quickly and easily while at the same time keeping file sizes small and efficient. The group holds its meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ******************************************************************* Please note our meeting location for this month: *Room 1M28* Manitoba Hall, University of Winnipeg, entrance on Ellice Ave. between Spence and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ******************************************************************* For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: https://muug.ca/meetings/MUUGmeeting.pdf -- Manitoba UNIX User Group E-mail: <gedetil(a)muug.ca> c/o Gilbert E. Detillieux Web: http://muug.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

1 0

Winnipeg AWS user group meetup June 12 at Le Garage 6PM
by Mark Campbell 03 Jun '19

03 Jun '19

Hey all, the next AWS user group meetup has been scheduled for June 12 at Le Garage from around 5:30PM to 8:30PM. The details for the talks (multi-cloud and Cyber Defense Challenge) and RSVP are below: https://www.eventbrite.ca/e/winnipeg-aws-user-group-march-meetup-tickets-57… See you all there! -Mark

2 2

Plain Text Accounting (plaintextaccounting.org)
by Mark Jenkins 16 May '19

16 May '19

I didn't have the URL on the tip of my tongue, but I mentioned yesterday if I could start my adventures in bookkeeping from scratch I would turn to one of the many simpler solutions covered here: https://plaintextaccounting.org/ (Saying this with hindsight in my 13th year as a GNUCash user which including presenting at MUUG, developing Python bindings, and developing the now abandoned code seen at bokeep.org . Hopefully this is my year as I hand-off all business related bookkeeping to others) The whole thing plain text thing was sparked by Ledger https://www.ledger-cli.org/ And as the plaintextaccounting.org site explains, many clones of the same have been mode. For those who like their demos in video form, here's one I found https://www.youtube.com/watch?v=FJtaM43PgXQ Never actually used these, but the design concepts seems right on for unix-heads compared to GnuCash which I think takes its early inspiration from Quicken. Mark Jenkins ------------ post script rant for bored readers: One thing that plaintextaccounting.org gets wrong is they misunderstand what double-entry bookkeeping is all about. They say: """Double entry accounting? Where are the debits and credits? Most (not all) plain text accounting implementations use signed amounts instead of debits and credits. This makes them "double entry light" perhaps, but it has been a rather successful simplification, intuitive to most newcomers.""" The idea of having avoiding negative numbers by having two columns (one for increase in value, one for decrease in value) isn't the double-entry aspect of bookkeeping at all, that's simply a "two-column" display format. Of course a data format can be simplified and just use a signed integer instead of storing two columns and GnuCash does this. (while still representing with two columns in the GUI). Wikipedia has a much better grasp of this very old idea: https://en.wikipedia.org/wiki/Double-entry_bookkeeping_system "Double-entry bookkeeping, in accounting, is a system of bookkeeping so named because every entry to an account requires a corresponding and opposite entry to a different account." So as a concrete example, for me to say that a cash withdrawal from my bank account results in a ledger entry that increases the value of my cash on hand account and a separate ledger entry that decreases the value of my record of my bank account, that's a double-entry and it has nothing to do with using two columns with positive values or a single column with negative or positive. The important thing is that the redundant entries themselves provide all kinds of checks and balances which helps protect against a lot of errors. As it turns out though, the very old term "double-entry" is itself a bit of a misnomer. The reality is more N>=2 entry (multi-entry accounting). For example, if my old business did an hour of IT work at $100 an hour and was a GST registrant, than the issuing of an invoice is going to increase the value of accounts receivable by $105, increase the amount of liability for GST payable by $5 and increase by record of income by $100. That's N=3. Notice how quickly I descended into describing all three entries as an "increase", even though it's still going to be debit $105, credit $5 and credit $105 (debits==credits) for the respective accounts or 0 == +105 + -100 + -5 if we use a signed representation instead of a two column positive representation. That's the thing about negatives numbers. People don't like them, even as a way to describe our own liabilities. I found it very instructive early when I was just starting out to turn off in GnuCash the convention of displaying the credit balances of Liabilities, Income, and Equity as accounts positive values and instead display them as negative balances as they truly are in the internal representation and to then make some example transactions. Doing this flips the conventional accounting equations of: assets - liabilities = net worth (equity) and income - expenses = change in net worth (equity) and you get 0 = assets + liabilities + equity 0 = expenses + income +change in net worth And then the math head was enlightened.

3 2

new Spectre-type flaws
by Trevor Cordes 16 May '19

16 May '19

The gift that *still* keeps on giving... to infinity and beyond! https://access.redhat.com/security/vulnerabilities/mds Short: new "MDS" Microarchitectural Data Sampling class of flaws regarding writes and reads to CPU cache due to separate store-address and store-data sub-operations and shared buffer space (much like TLB in other flaws). Sounds like some of these might be even easier to exploit than Spectre: like MFBDS, which might not even require a "widget". Interesting these flaws all have a CVE from 2018... these have been known (but kept quiet) for a while. All our computers made slower in ... 3 ... 2 ... 1

1 0

Fun with BASH
by Geoffrey Jacobs 16 May '19

16 May '19

Just to follow up on the discussion of interesting BASH tricks last night, here is how one could implement file system traversal if find didn't exist. Note that GLOBIGNORE isn't always required to be explicitly set as shown for the root and parent directory to be excluded, but this does as required and provides clarity. #!/bin/bash GLOBIGNORE=". .." # Ignore the current and parent directory # This will be implicit with GLOBIGNORE not null, although . and .. can still # be explicitly selected if nullglob and failglob aren't set descend() { for i in * .*; do if [ -d "$i" ]; then pushd "$i" descend # Do things to files in the directory here popd fi done } descend # end script Also, Douglas Adams on the Galactic Presidency is translated by the jive filter: Anyone willin' an' capable t'git demselves elected President by no means should be allowed t'do de job. What it is, Mama! Or Hanlon's Razor as presented by a Swedish chef: Nefer ettreeboote-a tu meleece-a thet vheech is edeqooetely ixpleeened by stoopeedity. Yes, the filters package is endless fun.

2 1