[Note] HEIC

Environment: Ubuntu 20

Issue:

Photos from iPhone->Google Photo->Download saves as .HEIC, can't view on Linux.

Solution:

$ sudo apt install heif-gdk-pixbuf

$ sudo apt install libheif-examples

$ heif-convert -q 90 [HEIC file] [filename.jpg]

[Note] Ubuntu VirtualBox + VirtualBox Extension Pack

Environment:

Ubuntu 20.04, VirtualBox 6.1.30 r148432

VBox was updated multiple times.

 

Problem:

sudo apt install fails to install VBox Extension Pack 

 

$ sudo apt install virtualbox-ext-pack

Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  virtualbox-ext-pack
0 upgraded, 1 newly installed, 0 to remove and 3 not upgraded.
Need to get 10.6 kB of archives.
After this operation, 142 kB of additional disk space will be used.
Get:1 http://us.archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 virtualbox-ext-pack all 6.1.26-2~ubuntu1.20.04.1 [10.6 kB]
 

...omit....

Progress state: NS_ERROR_FAILURE
VBoxManage: error: Failed to install "/usr/share/virtualbox-ext-pack/Oracle_VM_VirtualBox_Extension_Pack-6.1.26.vbox-extpack"
VBoxManage: error: VBoxExtPackRegister returned VERR_VERSION_MISMATCH, pReg=0000000000000000 ErrInfo='Helper version mismatch - expected 0x3 got 0x30000'
VBoxManage: error: Details: code NS_ERROR_FAILURE (0x80004005), component ExtPackManagerWrap, interface IExtPackManager
VBoxManage: error: Context: "RTEXITCODE handleExtPack(HandlerArg*)" at line 1424 of file VBoxManageMisc.cpp
Installation error: License key incorrect or unknown problem during installation.
dpkg: error processing package virtualbox-ext-pack (--configure):
 installed virtualbox-ext-pack package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 virtualbox-ext-pack
E: Sub-process /usr/bin/dpkg returned an error code (1)

Fix:

1. Make sure all VMs are closed.
   
2. Open http://download.virtualbox.org/virtualbox/6.1.30/
3. (firefox was used) Click on Oracle_VM_VirtualBox_Extension_Pack-6.1.30.vbox-extpack
4. It'll ask to open with Oracle VM VirtualBox - click Ok.
5. Check: open VBox Manager -> File -> Preferences -> Extensions

[Note] HWP 1.51 file conversion

Converting HWP 1.51 file to UTF8

1. Save as new (@V), select ASCII - KS

2. From Linux,  

$ iconv -f uhc -t utf8 KS2.TXT > /tmp/out.txt

Note

• hwp2txt v3 produces zero byte file
• hwp2txt v1.2 converts to some unknown encoding (chardet couldn't detect)
  
• enca can't detect
• used chardet to detect the encoding uhc (EUC-KR).

 

To-do

send key events from Linux to DOSBox to automate saving in KS-ASCII encoding, or find correct hwp2txt version.

 

[Bookmark] SDR air traffic signal (video in Korean)

[NOTE] log4j security issue

Issue

https://nvd.nist.gov/vuln/detail/CVE-2021-44228

Apache Log4j2 <=2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. In previous releases (>2.10) this behavior can be mitigated by setting system property "log4j2.formatMsgNoLookups" to “true” or by removing the JndiLookup class from the classpath (example: zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class). Java 8u121 (see https://www.oracle.com/java/technologies/javase/8u121-relnotes.html) protects against remote code execution by defaulting "com.sun.jndi.rmi.object.trustURLCodebase" and "com.sun.jndi.cosnaming.object.trustURLCodebase" to "false".

Remedy - for now, see https://www.darkreading.com/dr-tech/what-to-do-while-waiting-for-the-log4ju-updates

News

• https://www.wired.com/story/log4j-flaw-hacking-internet/
  
• https://www.zdnet.com/article/security-warning-new-zero-day-in-the-log4j-java-library-is-already-being-exploited/
  
• https://thehackernews.com/2021/12/extremely-critical-log4j-vulnerability.html

Reference

• https://www.darkreading.com/dr-tech/what-to-do-while-waiting-for-the-log4ju-updates
• https://stackify.com/compare-java-logging-frameworks/ 
• Log4j, Logback comparison - https://stackify.com/compare-java-logging-frameworks/
  
• Log4j 2 - https://logging.apache.org/log4j/2.x/
• Logback - http://logback.qos.ch/