![]() |
|
![]() |
Bringing you the latest news from the Linux World.
Dedicated to keeping Linux users up-to-date, with concise
news for all interests
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters
Other LWN stuff:
Archives/search
Recent features: Here is the permanent site for this page. See also: last week's LWN.
|
Leading items and editorialsThe Digital Speech Project got a boost this week when the Free Software Foundation announced its support
for the effort. The purpose of the project is to attempt to bring some
sanity to U.S. intellectual property laws; in particular, the project has
targeted the DMCA and the (proposed) SSSCA. The FSF has joined in by
hiring organizer Jonathan Watterson to work on digital speech issues.
The FSF is right to be concerned about the DMCA and SSSCA, of course. Consider this description of the SSSCA from a recent Wired article: A version of the SSSCA obtained by Wired News prohibits creating, selling or distributing 'any interactive digital device that does not include and utilize certified security technologies.' The SSSCA also creates new federal felonies, punishable by five years in prison and fines of up to $500,000.
Any system built on free software will certainly qualify as an "interactive digital device that does not include and utilize certified security technologies." It is going to be an interesting time if free software is made illegal. Any attempt to ban free software will be futile, of course, but that wouldn't stop the ruining of numerous lives in the process. It is better to avoid that situation altogether - and that requires action now. (One bit of useful action for U.S. folk might be to respond to a call for views on "the application of copyright law to the digital environment" from a House subcommittee. The House is the most likely place to stop the SSSCA, so they should know what we think.) Red Hat's year-end results. Red Hat has announced its financial results for the end of its fiscal year. Since Red Hat is one of the most prominent free software businesses, and since it has been making claims of profitability, its results are worth a close look. The details have to wait for the company's SEC filing, of course; for now, we have to content ourselves with the press release. The company claims an "adjusted net income" of $1 million for the quarter, on revenue of $18.6 million.. "This represents the fourth consecutive quarter in which the company has delivered profitable or breakeven results." Once you un-adjust the figures, of course, the picture is a little different. When the accounts are run in accordance with GAAP (generally accepted accounting principles), that $1 million profit turns into a $28.9 million loss. One can argue that much of that loss is an accounting artifact, since is made up of "goodwill" writeoffs and such. A bit over $2 million of that loss, however, is in the form of cash severance payments to the company's laid-off network consulting group. So, while Red Hat is hardly failing, its claims of sustained profitability only work with sustained funky accounting. They may yet get there for real, however. This time around, Red Hat has decided that its mission is "delivering open source solutions to the Global 2000." So the press release hypes the company's new big-name customers (AOL, UBS, Morgan Stanley, Amazon, Cisco, Nortel, Dell, GE Medical, Dreamworks, Oracle, Deutsche Bank, Siemens, and BP), and deemphasizes other areas of business. It is, perhaps, most interesting to look at the performance one of those deemphasized business areas: embedded systems. With its acquisition of Cygnus, Red Hat should be positioned to do well in the embedded arena. So it is discouraging to examine the trend of Red Hat's embedded services revenues (in millions):
In other words, Red Hat's total embedded revenue has dropped from $7 million to $2.4 million over the course of a year. That hurts. It has been a hard time to run a business, and one could blame a reduction in revenues on the difficult economy. But Red Hat was able to increase its "enterprise" revenues slightly during the last quarter. It's hard to avoid the conclusion that Red Hat's embedded business is slipping away. If this decay continues, a point could come where Red Hat's contribution to important related free software (i.e. gcc) is sharply reduced. Some people have been known to worry about Red Hat's dominant position with regard to gcc, but few would like to see it cut back in this way. Followup: Hurd and proprietary software. Last week we speculated on whether Richard Stallman's comments on the upcoming Hurd release suggested that Hurd-based systems would not be allowed to run proprietary software. It turns out we speculated wrong. There will be no attempt to keep proprietary software off the Hurd kernel. We regret any confusion that our speculations may have caused. That still leaves open, however, the question of what the comments did mean. There is, after all, no difficulty in building 100% free systems based on the Linux kernel, and a number of distributors do so. What will be different about a Hurd-based system? According to Mr. Stallman: Many versions of the GNU system are available (typically they are GNU/Linux systems, using Linux as the kernel), but none of them follows our criteria for free software. Debian comes closest, but their criteria are different and they also distribute software they do not consider free.
We are working at clarifying things further, in an attempt to discover (and fairly represent) what the Free Software Foundation's objections are with regard to the existing, fully free distributions. Stay tuned... Donations. The response to last week's request for donations for LWN met with a tremendous response; over $5,000 has been donated by our readers. This amount of money, of course, is not enough to keep an operation going for very long, but it could well prove to be the crucial bridge that keeps the lights on while we work on longer-term solutions. It is extremely gratifying that our readers are willing to help support us in that way. We can't thank you enough. Our new LWN Supporters Page lists the LWN contributors who were willing to be thanked in public. We have received a few complaints about the use of Paypal. We understand that not everybody likes or wants to work with Paypal, and we are working on alternatives. Paypal has the advantage of being quick and easy to set up, which is why we went to it first. Things like credit card processing will take longer. Of course, it's still not too late to donate if you haven't done so already... Inside this LWN.net weekly edition:
This Week's LWN was brought to you by:
|
March 21, 2002
| ||||||||||||
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters See also: last week's Security page. |
SecurityNews and EditorialsToo much trust in open source? (ZDNet). ZDNet looks at the recent security vulnerabilities and asks whether free software is really more secure. Quoting Linus Torvalds: "In the open-source community, the community has so far been pretty good at policing itself without the embarrassment. Do bugs happen? Yes, of course. But do they get found and fixed without a new virus of the week that costs a few billion dollars of user time? You bet." Analysts: Security flaws won't undermine Linux (ComputerWorld). ComputerWorld talks to security analysts about recent security problems. "Alan Paller, research director at the SANS Institute, a Bethesda, Md.-based nonprofit security group, said it's not a surprise that more vulnerabilities are showing up in Linux, since the operating system is being used more widely in corporate computing. The larger deployment of the operating system means more problems are likely to be seen in larger numbers, Paller said." (Thanks to Jay R. Ashworth) March CRYPTO-GRAM newsletter. Bruce Schneier's CRYPTO-GRAM Newsletter for March is out. It looks at the SNMP vulnerabilities, the IETF draft "responsible disclosure" standard, cryptography and terrorism, and more. "CERT took on the task of coordinating the [SNMP] fix with the major software vendors, and has said that the reason publication was delayed so long is that there were so many vendors to contact. CERT even had problems with vendors not taking the problem seriously, and had to spend considerable effort to get the right people to pay attention. Lesson #1: If bugs are secret, many vendors won't bother patching their systems." Security Reports
Mandrake Linux update for rsync.
Ethan Benson reported that
rsyncd fails to remove supplementary groups (such as root)
from the server process after changing to the specified unprivileged
uid and gid.
Mandrake has provided an rsync update which fixes the problem.
"This seems only serious if rsync is called using "rsync
--daemon" from the command line where it will inherit the group of the
user starting the server (usually root)."
web scripts.
Proprietary products. The following proprietary products were reported to contain vulnerabilities:UpdatesApache mod_ssl buffer overflow vulnerability. According to this announcement "modssl versions prior to 2.8.7-1.3.23 (Feb 23, 2002) make use of the underlying OpenSSL routines in a manner which could overflow a buffer within the implementation. This situation appears difficult to exploit in a production environment[...]." (First LWN report: March 7). This week's updates: Previous updates:
Buffer overflow in CUPS. Versions of the Common Unix Print System prior to 1.1.14 have a buffer overflow vulnerability. (First LWN report: February 14). This week's updates: Previous updates:
Remotely exploitable buffer overflow in Ecartis/Listar. Janusz Niewiadomski and Wojciech Purczynski reported a remotely exploitable buffer overflow in address_match(). The other vulnerabilities in their report not addressed by the updates listed below are "ineffective privilege dropping in listar" and "multiple local vulnerabilities." Listar is a mailing list manager similar to Majordomo or Listserv. (First LWN report: March 14). This week's updates: Both PHP3 and PHP4 have vulnerabilities in their file upload code which can lead to remote command execution. This one could be ugly; sites using PHP should apply updates at the first opportunity. If an update isn't available for your distribution, users of PHP 4.0.3 and later are encouraged to consider disabling file upload support by adding this directive to php.ini: file_uploads = Off CERT has issued this advisory on the problem. This article in the Register also talks about the vulnerability. (First LWN report: March 7). Developers using the 4.2.0 branch, are not vulnerable because because file upload support was completely rewritten for that branch. This week's updates: Previous updates:
Update: Despite some concern expressed in an earlier report by LWN, these updates do, in fact, fix the problem. The original update from the php team fixes the security hole but introduces a "rare segfault condition" that is not a security problem. zlib corrupts malloc data structures via double free. This vulnerability impacts all major Linux vendors. It may impact every Linux installation on Earth. Updates are required to zlib and any packages that were statically built with the zlib code. (First LWN report: March 14). LinuxSecurity describes the vulnerability and coordinated distributor efforts in detail. "Packages including X11, rsync, the Linux kernel, QT, mozilla, gcc, vnc, and many other programs that have the ability to use network compression are potentially vulnerable." Updating is recommended. As always, please proceed with caution when applying updates to the kernel. This week's updates:
Previous updates:
See also: articles in ZDNet and The Register about the zlib vulnerability. And, these reports from ZDNet and Vnunet on this vulnerability in some of Microsoft's major applications. ResourcesParanoid Penguin: Hardening Sendmail (Linux Journal). Mick Bauer shares his secrets of a secure sendmail install. "Well, contrary to popular belief, sendmail isn't a total loss where security is concerned, nor does it require learning the arcane syntax of sendmail.cf (although hardcore sendmail gurus do indeed master it). This month we examine these and other sendmail security controversies, using sendmail's handy m4 macros to rapidly build a secure but functional Simple Mail Transport Protocol (SMTP) gateway to handle internet mail." The Linux Virus Writing HOWTO. Alexander Bartolich's Linux Virus Writing HOWTO describes "how to write parasitic file viruses infecting ELF executables on Linux/i386. Though it contains a lot of source code, no actual virus is included." Linux security week. The Linux Security Week and Linux Advisory Watch publications from LinuxSecurity.com are available. EventsUpcoming Security Events. FOSE SELinux Panel. There is a Security Enhanced Linux (SELinux) panel at the FOSE conference in Washington D.C. today, Thursday, March 21, 2002.
For additional security-related events, included training courses (which we don't list above) and events further in the future, check out Security Focus' calendar, one of the primary resources we use for building the above list. To submit an event directly to us, please send a plain-text message to lwn@lwn.net. Section Editor: Dennis Tenney |
March 21, 2002
LWN Resources | |||||||||||||||||||||||||||||||||||||||||||||
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters See also: last week's Kernel page. |
Kernel developmentThe current development kernel release is 2.5.7, which was released on March 18. This will be the last such release for a while, since Linus has headed off for a two-week vacation. This release contains some fairly big patches, including:
The latest from Dave Jones is 2.5.6-dj2, which adds a number of fixes and updates to the 2.5.7-pre2 kernel. Guillaume Boissiere updated his 2.5 status summary on March 20. The current stable kernel release is 2.4.18. The current 2.4.19 prepatch is 2.4.19-pre4; it includes a massive m68k update, the new video device code, and a great many other fixes. Alan Cox's latest 2.4.19 patch is 2.4.19-pre3-ac4. For those of you who aren't into all that bleeding-edge 2.4 stuff, David Weinehall has released 2.0.40-rc4 which should, with luck, turn into a real 2.0.40 soon. Note that other kernel tree announcements now appear with the rest of the patches at the bottom of the page. Kernel compilation benchmark update. When we last checked in with the fast-kernel-compile benchmark crowd (in last week's LWN Kernel Page) they had managed to get a kernel compilation down to just over 10 seconds. The record has fallen, however: Anton Blanchard has announced that he was able, through use of a 32-way PowerPC64 system, to build the benchmark kernel in 7.52 seconds. "...not a bad result for something running under a hypervisor." Watch for sub-second kernel compilations, coming soon to a million-dollar machine near you... The obligatory BitKeeper update. Marcelo Tosatti has announced that he is now using BitKeeper to manage the 2.4 code. See this note for information on how to access his tree. "Discussions" of BitKeeper's licensing continue, not helped by the discovery of a temporary file race vulnerability in the BitKeeper installer. Readers of this page are more than familiar with the licensing arguments, though; we'll not repeat them this time. Reworking the 2.4 VM patches. The word on the net for some time has been that the 2.4.x virtual memory subsystem almost works as it should; all that remains is to incorporate the last set of patches from Andrea Arcangeli. 2.4 maintainer Marcelo Tosatti has not yet integrated those patches, however; he has wanted to see them split up and documented so that he actually understands what he is putting in. This seems like a not unreasonable approach for a stable kernel maintainer to take. Thus far, however, Andrea has not found the time to rework his patches as requested, so they remain unapplied. Andrew Morton has decided to try to break this logjam by reworking the patch and splitting it up into a form suitable for submission to Marcelo. Andrew has, in consultation with Linus, annotated the patches and made his own changes (including leaving a few patches out entirely). The result is an interesting view into what still needs to be fixed with the 2.4 virtual memory implementation; it's worth a detailed look. Andrea's 10_vm-32 patch was split into 24 individual pieces. Andrew has dropped eight of those, leaving 16 patches for consideration:
Together, these patches represent a great deal of work by both Andrea and Andrew. With luck, they'll find their way into a better VM in the near future. Exit sections and monolithic kernels. The kernel has had, for some time, the ability to mark functions and data with an "exit" flag. The traditional use for this marker is to flag functions which are used at module unload time. Modules need cleanup functions so that they can be gracefully removed from the kernel. When those modules are linked statically into the kernel, however, they will never be removed. In this case, functions and data marked with the "exit" flag are simply discarded, making the kernel image smaller. It's a worthwhile optimization. Anybody who has tried building a kernel with a modern binutils distribution, however, will have experienced the annoying, useless "undefined reference to `local symbols in discarded section .text.exit'" message that accompanies a failed link. The problem is simple: the kernel has numerous pointers to exit functions and data. Usually a human can determine that, in cases where the exit section has been discarded, those pointers will never be used; they are thus harmless. The linker doesn't see things that way, though, and newer versions refuse to complete the link when dangling exit pointers exist. The workaround has been to define a devexit_p macro which causes exit pointers to disappear in non-modular code. It's a bit of a hack, but it gets the job done. The devexit_p calls have been slowly working their way into the kernel code. But now Linus has come up with a different approach. Rather than discard all that exit code, why not keep it in the kernel and use it to gracefully shut down the hardware at system shutdown time? The code is there, one might as well make use of it, even if the kernel gets a bit bigger. devexit_p's days in the kernel may be numbered. Other patches and updates released this week include: Alternate kernel trees:
Core kernel code:
Development tools:
Device drivers
Kernel building:
Miscellaneous:
Networking:
Section Editor: Jonathan Corbet |
March 21, 2002 For other kernel news, see: Other resources: |
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters See also: last week's Distributions page.
|
DistributionsPlease note that security updates from the various distributions are covered in the security section. News and EditorialsRTFM!. We know what it means*. Sometimes, though, it's hard to find the right M to R and that's where the Linux Documentation Project (LDP) comes in. The LDP is a collection of Guides, HOWTOs, FAQs, man pages, and other sources of Linux related documentation. If you are having trouble finding the M you want to R, searching through the LDP site might help. The LWN Development page usually carries the LDP weekly news, with more information on what's new, what's revised, and so on. This week a particular document showed up in the list of new documents. It's really not so much new, as newly revised, with a new maintainer, and it's clearly in need of additional revisions. It's the English-language GNU/Linux distributions on CD-ROM (formerly: The Linux distributions HOWTO). As the name implies, this list of Linux distributions is very focused, covering only popular English-language distributions; specifically compiled for the Intel platform; available on CD-ROM; and easily accessible to the first-time user. As such it is much shorter than the LWN list which includes distributions in many languages and formats. Keeping the list focused allows new users to find the information they are looking for, without becoming overwhelmed by extraneous information. Martin S. Wheeler is new maintainer of this document, and while he probably doesn't need a barrage of email asking why distribution x, y or z isn't on the list, he could use some help getting this document up-to-date. So if you are a maintainer of a distribution that falls within the scope of this list, check to see if your distribution is covered and follow the directions within the document to add or update the entry for your distribution. We've added a link to the English-language GNU/Linux distributions on CD-ROM document to the right sidebar of this page, along with the other known lists of Linux distributions.
* (For anyone who really doesn't know, it's - Read The Frelling** Manual
- No source for Sorcerer. Sorcerer GNU/Linux seems to be dead. The listing on Freshmeat is gone and the Sorcerer homepage now only contains only a short announcement which reads, in part: Sorcerer GNU Linux is no longer being distributed under the GNU/GPL license. If you have problems with this then write your own original source based GNU Linux distribution and give it away for free. (Thanks to Ravenhall) Update: Numerous readers have written in to note that the rumors of Sorcerer's death are premature. Here's the new web page for this distribution. See also SorcererLinux.org for more information on this (fairly twisted) situation. New DistributionsNetule. A company called Netule has created three new Linux distributions, which are now available for download. The EM-I or Email Module I is a full featured Email Server based on Sendmail; the WM-I or Web Module I is a vastly simplified Web Server based on Apache; and the FM-I or Firewall Module I is released in partnership with Astaro Security Linux. Netule products are a combination of open and closed source and are available bundled with hardware. Distribution NewsDebian GNU/Linux. The Debian Weekly News for March 13, 2002 contains news about the Woody release status, the Project Leader Elections debate, and congratulates Debian developer Bart Bunting for two gold medal wins in this year's Paralympics. The DPL debate is now scheduled for 21:00 UTC Saturday, March 23, 2002. The start of the voting period has been postponed to 00:00 UTC, March 24th, 2002. Mandrake Linux 8.2 is Available. MandrakeSoft has announced the release of Mandrake Linux 8.2. Features include support for encrypted filesystems, SMP support, easy setup for printers and scanners, a redesigned Mandrake Control Center, lots of new configuration wizards, and more. MontaVista Linux. MontaVista Software Inc. has announced that MontaVista Linux will support IBM's new 440GP PowerPC microprocessor. Red Hat Linux. Red Hat has updated e2fsprogs packages available, which fix many ext3 bugs. This advisory says that new versions of the Red Hat Network Update Agent and Registration Client are now available. These new versions include new features, optimizations, and bug fixes. Keep an eye out for 'Skipjack', the code name for the newest Red Hat beta. The ftp site was not open for anonymous ftp as of this writing, but it might be open by the time you read this. Try ftp.redhat.com/pub/redhat/linux/beta/skipjack/ Slackware Linux. Slackware also has updated e2fsprogs packages available for Slackware current. SuSE Linux. SuSE Linux announced that the latest version of its advanced enterprise operating system, the 64-bit SuSE Linux Enterprise Server 7 for IBM eServer zSeries, will be available by the beginning of May. Turbolinux Speeds Enterprise Acceptance of Linux. Here is a press release about Turbolinux 7 Server, "the first Linux distribution to conform to Li18NUX internationalization standards." Yellow Dog Linux. Terra Soft is preparing to release Yellow Dog Linux 2.2; with Gnome 1.4, kernel 2.4.18 and XFree86 4.2.0; all built from a Red Hat 7.2 foundation. It should be out soon. Minor Distribution updatesAstaro Security Linux. Astaro Security Linux has released v3.040 beta with major feature enhancements. Devil-Linux. Devil-Linux released v0.5 beta 6 with lots of changes. Keeper Linux. Keeper Linux has released KL 1.1a, with TinyLogin and other minor updates. Kondara MNU/Linux. The Kondara Project has released Kondara MNU/Linux 2.1 code named "Asumi". (Thanks to Maya TAMIYA) Libranet GNU/Linux. The folks at Libranet GNU/Linux have decided to set up a pay for download scheme to help out with the bills. NSA Security Enhanced Linux. NSA Security Enhanced Linux has released v2002031409 with minor feature enhancements. Vine Linux. Vine Linux has announced the release of Vine Linux 2.5 beta 1, available for i386 and PPC processors. Distribution ReviewsLinux on a Floppy, an Intro to Mini Linux Distributions Version 1.0 (Linux Orbit). Linux Orbit introduces some mini-distributions, including Trinux, the Crash Recovery Kit, and tomsrtbt. "If you've ever been stuck on the freeway with a flat tire and no jack, you know what it's like to have a Linux system crash and not have a boot disk. And although nearly every Linux distribution company asks you make a boot/recovery floppy when you install Linux for the first time, many users skip this important step. Out of the boot/recovery disk concept was born the Mini-Linux distribution." Lycoris Desktop/LX: The World's Flower Power (Tux Reports). Tux Reports focuses on usability in this review of the Lycoris Desktop/LX operating system. "I was surprised that my students latched onto Lycoris so readily. This says a lot about it's usability for novices. Clearly, Lycoris hit the mark for a Windows network. This Linux distribution worked well on a mid-sized Windows network. Students used it without complaining. We'll keep it on this network so that students can work with the school website (hosted on a Linux box)." MandrakeSoft adds Office to Linux (ZDNet). This ZDNet UK article covers the release of Mandrake Linux 8.2, with a focus on the software that will be added to the boxed sets. "When the boxed product ships in April, version 8.2 will be the first Mandrake Linux version to include the office suite StarOffice 6.0 and the Outlook clone Evolution 1.02, both of which are considered to be significantly improved over earlier editions." MandrakeSoft, SuSe add new life to Linux (ZDNet). This ZDNet UK article takes a look at Mandrake Linux 8.2 (which is already available for download) and the upcoming SuSE Linux 8.0. "SuSE Linux 8 includes tweaked versions of its e-mail client, organizer and media players. Other multimedia features include support for CD writing, video playback and editing, the Kooka scanning application, and version 0.9 of the Advanced Linux Sound Architecture." Section Editor: Rebecca Sobol |
March 21, 2002
Please note that not every distribution will show up every week. Only distributions with recent news to report will be listed.
Distribution Lists:
|
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters See also: last week's Development page. |
Development projectsNews and EditorialsThe Knoda Database Frontend for KDEKnoda, ("Knorr's Datenbank"), is a database front end for the K Desktop Environment (KDE). It is based on the hk_classes C++ database library. Knoda works with the Mysql database and the documentation indicates that it can be installed under the Mandrake and SuSE distributions. Knoda was written by Horst Knorr. "Knoda is a GUI for accessing relational databases in KDE. It comprises a Form generator, a Table and Query generator and a Report Designer." The general information page further details what Knoda can do. The screenshots page shows some examples of Knoda's capabilities. Version 0.5.1 of Knoda has just been released, new features include support for KDE2 and KDE3 as well as an XML export filter and bug fixes. See the changelog for the complete list and project history. These pages also have some useful information:
Knoda can be downloaded here. It is licensed under the GPL and the LGPL. Audio ProjectsMPEG audio analysis tools. We have received an announcement from CSIRO for a set of frequency domain audio analysis tools. Maaate is a framework for doing work with MPEG compressed files, and Bewdy allows one to work with MP3 files. (Thanks to Silvia Pfeiffer.) EducationSEUL/edu report for March 18, 2002. The March 18, 2002 SEUL/edu report features discussions on GNU license issues in Canada, teaching Linux to high school students, the Free Assessment Summary Tool (FAST), multi-language support for Tux Typing, data formats for educational use, and more. Embedded SystemsEmbedded Linux Newsletter for March 14, 2002. The March 14, 2002 edition of the LinuxDevices Embedded Linux Newsletter is out with the latest embedded Linux news. Tracking Down Killer Bugs (Dr. Dobbs'). Eric McRae discusses embedded system debugging techniques on Dr. Dobbs'. "In the field of embedded system development, there occasionally arises a bug that defies all normal techniques for discovery. These "killer" bugs are characterized by unpredictability, an unclear hardware/software basis, and their proximity to a major project deadline." Network Managementiptables-1.2.6 released. Version 1.2.6 of the iptables firewall software has been released. It features a bunch of bug fixes. (Thanks to Harald Welte.) ScienceTk Family Practice Version 50 Released (LinuxMedNews). LinuxMedNews reports on the latest version of the Tk_familypractice medical record system. Features include an improved install script, better progress note templates, a file chooser dialog, improved internationalization, and more. BioPerl 1.0 Release (Bioinformatics). Bioinformatics has an announcement for the 1.0 release of BioPerl, a set of Perl extensions for handling biological data. "Bioperl has been used worldwide since 1998 but the project has always used conservative release numbering - for example, for the last 2 years, the stable release series was 0.7. By moving to 1.0, Bioperl is declaring that it is 'feature complete' for sequence handling, the most common task in bioinformatics. " Web-site DevelopmentLiferay Enterprise Portal v1.0. Liferay, a new J2EE open source portal server has been released for Linux and Windows. The portal is built on Oracle9i. Liferay is licensed under the MIT Open Source License. Bricolage 1.2.2 Released (use Perl). Version 1.2.2 of the Bricolage content management and publishing system has been announced. "This is a maintenance release with many bug fixes." This week on Zope Members' News. New items on the Zope Members' News site include a new PHParser, FunctionalTests 0.2, and a note on a Zope talk at the Open Source Content Management Summit in Zurich, Switzerland on Mar 21-22 2002. Asp2php news. A few updates have been added to the Asp2php project. "Fixed some bugs in the 'function' conversion. I also totally updated the GUI. It should work A LOT better now. " Apache AxKit 1.5.1 Released (use Perl). A new version of AxKit, a mod_perl mime encoding sniffer for XML files, has been announced. This release features bug fixes, it is also the first release to be included as part of Apache. Introducing AxKit (O'Reilly). Barrie Slaymaker takes a look at AxKit on O'Reilly's perl.com. "Starting from the basics, this series explains how to install a basic AxKit server and then explores AxKit's more powerful capabilities. " DocumentationLDP Weekly News. The March 12, 2002 LDP Weekly News features a new Latvian HOWTO as well as numerous updated documents. The March 19, 2002 LDP Weekly News mentions that Joy Goodreau will be replacing David Merrill as the collection editor. Thanks go to Dave for all of his hard work, and welcome to Joy. New documents include a Compaq T1500 Linux HOWTO, and an English-language GNU/Linux distributions HOWTO. |
March 21, 2002
|
|
|
Desktop DevelopmentAudio ApplicationsAlsaPlayer 0.99.57. Version 0.99.57 of the AlsaPlayer PCM player is available. This version features bug fixes, added scopes, and more preferences. Web BrowsersHave You Seen These Hackers? (Mozilla). The Mozilla project is searching for a number of former developers, they need to find them and ask their permission for the relicensing of Mozilla. Switching from IE to Gecko (NewsForge). NewsForge has an encouraging article about a web browser developer making the switch to Gecko. "Howard Ryan is CEO of Custom Browser, Inc. , a company that codes (you'd never guess from the name) custom Web browsers. He's a Windows guy, and most of his work has been based on Microsoft Explorer's rendering engine. But Howard is starting to use Mozilla's Gecko in his own custom and embedded browsers, and says moving to Gecko from Explorer is not only a good idea, but is amazingly simple for browser developers because, he says, 'the Gecko API is identical to the IE API.'" Desktop EnvironmentsKernel Cousin KDE #35. Issue #35 of Kernel Cousin KDE covers recent release candidates for KDE3, Krayon, KOffice file thumbnails, CVS documentation accidents, and more. People of KDE: Andy Fawcett. One of the more recent endeavours in the KDE world is the KDEduware project. This week dot.kde.org speaks with team member Andy Fawcett. "I help out with the KDE Edu project, doing testing, giving advice (I have some teaching experience), and maintaining some of the website . When we 'went public' with the project, I somehow managed to coordinate getting the text in seven different languages, all in the space of a day, and for which I am very grateful to the poor fools people on IRC who volunteered to translate." The KDE Three Meeting. Cristian Tibirna has compiled a summary of the recent KDE Three Meeting, which covered various KDE 3.0 development issues. KDE Worldwide Goes Live. Chris Howells has announced a new project, KDE Worldwide, which aims to promote KDE around the world by assisting with the localization of KDE. GNOME-2.0 Installation Guide Online (Gnotices). A new GNOME-2.0 Installation Guide has been announced. "This GIG2 explains not only how to compile and install the GNOME 2.0 Desktop Environment itself but also how to compile and install the GNOME 1.4.1 applications into the new GNOME-2.0 Desktop Environment." New GNOME themes site (Gnotices). Sunshine In A Bag is a new GNOME themes site that has been announced. Its purpose is to be a resource site for all GNOME related themes. GNOME Summary for March 16, 2002. The March 16, 2002 GNOME Summary looks at Rhythmbox 0.1, GStreamer 0.3.3, GnuCash 1.6.6, Ada bindings for GTK+ 2.0, the GNOME 2.0 desktop Beta 2, and more. GUI PackagesPython/C# Mania: New Bindings Expand KDE Languages. A number of new bindings have been released for KDE and Qt, adding C# and Python to the list of supported languages. InteroperabilityXfsamba 0.44 Samba navigator. Version 0.44 of Xfsamba, a GUI-based Samba navigator, has been released. (Thanks to Joe Klemmer.) MultimediaKWinTV: Future Vision (KDE.News). KDE.News reports on Richard Moore's latest version of KWinTV, a television card interface for KDE. Office ApplicationsAbiWord 0.99.3 Released (Gnotices). In the move towards the AbiWord 1.0 release, the AbiWord team has announced version 0.99.3. "The AbiWord team continues to make great progress towards 1.0. In the 4 weeks since 0.99.2 was released we've closed tons of bugs, completed RTF import/export, added great new image handling facilities and have made AbiWord significantly faster." |
Desktop Environments GNOME GNUstep KDE XFce XFree86 Window Managers Afterstep Enlightenment FVMW2 IceWM Sawfish WindowMaker Widget Sets GTK+ Qt |
|
|
Programming LanguagesC++Implementing C++ Servlet Containers (Dr. Dobbs'). John Hinke introduces C++ servelet containers on Dr. Dobb's. "What if the full power of the Java servlet API could be harnessed in C++ to create a pure C++ web application by using the same techniques used when creating Java web applications? C++ developers would then be able to create C++ web applications without needing to use multiple languages, or using a slower technology such as Java or CGI." CamlCaml Weekly News. The March 19, 2002 Caml Weekl News is available. Topics include profiling, PXP-1.1.4, a lablgtk interface for Gecko, caml-info-look, and a Text Mode Kit. The Caml Hump. This week, the Caml Hump looks at the TextMode Kit OCaml text mode widget system and caml-info-look, an automatic OCaml info file browser. JavaJSP Standard Tag Libraries, Part 1 (O'Reilly). Sue Spielman introduces JSP Standard Tag Libraries on O'Reilly's OnJava site. "If a custom tag has been created, tested, and debugged, then it only is logical that, as a developer, you want to grab the golden ring of OOD: reusable components. Working with custom tags is one avenue to explore in the world of reuse. But wouldn't it be better, more efficient, and easier if there was a set of standard tags that solved common problems? Do we really need ten different ways to iterate, or to do conditional processing?" A taste of 'Bitter Java' (IBM developerWorks). Bruce A. Tate explores Java antipatterns on IBM's developerWorks. "In this article, antipatterns expert and noted author of Bitter Java, Bruce Tate, demonstrates how and why antipatterns are a necessary and complementary companion to design patterns." LispCL-BibTeX alpha available. An alpha release of CL-BibTeX, a Common Lisp replacement of the BibTeX bibliograpy database tool, has been announced. PHPPHP Weekly Summary. The March 17, 2002 PHP Weekly Summary covers streams support, SapDB and PHP, a FastCGI update, fixes for the PHP audit project, interface extension, and Unix Mail, and more. PHP Documentation Team Meeting. The notes from the PHP Documentation Team Meeting are available online. PythonPython 2.2.1c1 released. A new candidate for the bugfix release of Python has been announced. No major new features are included, just bug fixes. Testers are being recruited. This week's Python-URL!. This week's Python-URL! covers Enhanced Generators, NormalDate 1.2, a Python 2.2 bug encounter, an English thesaurus and dictionary thread, a proposed standard logging module, PIL v1.1.3, and more. This week on the Daily Python-URL. New items on the Daily Python-URL include a list-comprehension syntax discussion, Python 2.2.1 RC 1, a Python Logging System, Python Imaging Library, version 1.1.3, Korean Codecs 2.0.2, and more. RubyRuby: Productive Programming Language (Linux Journal). The Linux Journal looks at Ruby. "Ruby has some distinct advantages over Python. It is a far cleaner OOP language with excellent features, and it supports Perl's regex type terse notation. It also scores high in enabling one to write short concise and maintainable code." The Ruby Garden. This week, the Ruby Garden discusses programmer personalities, Dir.mkdirhier and Dir.rmdirhier, message parameters for abort, the Mutex object, dir methods, and more. The Ruby Weekly News. The March 18, 2002 Ruby Weekly News features announcements for Ruby Dataquery Shell 0.3.3, rpkg 0.3.1, Ruby-Gnome 0.27, Ruby/SMB beta 2, Ruby/zlib 0.5.1, the Locana GUI and GUI builder 0.81, and more. Tcl/TkTcl-URL! for March 18, 2002. This week's Tcl-URL! covers try/catch exception handling, garbage collection, embedded TCL legalities, Tcl history, animated GIFs, the Tgdb debugger, and more. XMLProcessing Model Considered Essential (O'Reilly). Leigh Dodds looks at XML processing model issues on xml.com. "This week's XML-Deviant takes a step backwards in an attempt to foreground an issue that has been behind several recent debates in the XML community, namely, the lack of a processing model for XML." Integrated Development EnvironmentsGNUstep Weekly Editorial. The March 15, 2002 GNUstep Weekly Editorial covers testing on different Objective-C window managers, compatibility between Apple Objective-C++ and gcc, Chinese language support, converting a NeXTSTEP text to speech program to Linux, and GNUstep progress. Section Editor: Forrest Cook |
Language Links Caml Caml Hump Tiny COBOL Erlang g95 Fortran Gnu Compiler Collection (GCC) Gnu Compiler for the Java Language (GCJ) Guile Haskell IBM Java Zone Jython Free the X3J Thirteen (Lisp) Use Perl O'Reilly's perl.com Dr. Dobbs' Perl PHP PHP Weekly Summary Daily Python-URL Python.org Python.faqts Python Eggs Ruby Ruby Garden MIT Scheme Schemers Squeak Smalltalk Why Smalltalk Tcl Developer Xchange Tcl-tk.net O'Reilly's XML.com Regular Expressions |
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters See also: last week's Linux in the news page. |
Linux in the newsRecommended ReadingFree programs with strings attached (Financial Times). Here's a Financial Times article which covers (overblown) worries about the GPL. "This last condition is particularly controversial, as it means the GPL can 'convert' proprietary software into open source software - since any company incorporating licensed code into its own software products is obliged to open up its code too." (Thanks to Thomas Blankenhorn). Microsoft Loses Courtroom Battle Over Windows Trademark. Lindows.com has won a court battle with Microsoft concerning the name of their company and LindowsOS distribution. "In a strongly-worded ruling, a Seattle court has denied a request by the Microsoft Corporation to block a San Diego software company from branding themselves as Lindows.com and their Linux-based operating system, which will run popular Windows-based programs, as LindowsOS." News.com also covers the story. Microsoft 'killed Dell Linux' - States (Register). There have been several articles in the press about the nine states that are pushing for remedies in the Microsoft anti-trust trial. The Register focuses on Dell's decision to drop desktop Linux from its computing solutions. "The States' remedy hearing opened in DC yesterday, and States attorney Steven Kuney produced a devastating memo from Kempin, then in charge of Microsoft's OEM business, written after Judge Jackson had ordered his break-up of the company. Kempin raises the possibility of threatening Dell and other PC builders which promote Linux." (Thanks to David Killick) Here are some additional articles on the subject. News.com carries this Reuters article and Newsalert carries these articles from The Seattle Times and The Washington Times. Sour Note (TechWeb). This article looks at webcasting, and the legal threat to Internet radio. "There are a couple of issues here. One of them is the specific concern about Internet radio Webcasting. (And, in case you're as interested in this as I am, I'll include resource links at the end of this column.) The larger problem, though, is that the music industry hasn't managed to wrap its hands around the Internet, and it doesn't look like it's getting smarter anytime soon. Do I need to mention DMCA? Napster? MP3? I didn't think so." Grey market likely if big MP3 fees imposed (National Post). The Canadian National Post covers proposed legislation that would create new charges for blank compact disks, disk drives and other data storage equipment. "The fees are intended to cover the losses to the recording industry that occur when people record music from an existing copy rather than buy their own." (Thanks to doks) Morpheus auditions for new Net music role (News.com). News.com looks at StreamCast Networks' incorporation of anti-copying technology in its Morpheus software. "With its new technology, the company is moving down a path well worn by Napster. As that file-trading service came under fire by the recording industry for allowing illegal trades of copyrighted works, it too mounted a campaign to solicit support from independent artists who used it to distribute their work." A Tale of Three Cultures (Linux Journal). Doc Searls travels from the SXSW conference in Austin, Texas to the ESC in San Francisco, and thinks about clashes of culture along the way. "The geeks built the Net and want to keep it free. Hollywood wants to control it. That's the basic conflict. Since the beginning, the geeks have had resolute faith in the Net's ability to resist control by government and commercial interests. Geeks interpret attempts at control as mere problems the Net will naturally route around. The same goes for Linux, which has proven handy for extending the Net upward into the operating system and outward into the world." Is Linux an operating system or a political platform? (IT-Director). IT-Director looks at anti-Microsoft sentiments within the Linux community. "But as Linux increases in popularity the question must be asked -- why are people selecting Linux? Is it simply a vote against Microsoft or is it because of superior functionality available within the open source product and how many more organisations will change their allegiances when it comes to upgrade time?" North Carolina Open-Source Technology Center Closes. The Open-Source Technology Center in Durham, North Carolina is closing its doors. "The Center for the Public Domain, founded in 1999 as the Red Hat Center for Open Source when the Linux company's stock was still on the rise, has called it quits with an e-mail message to friends of the center stating: 'Our job here is done.'" The center's last action involved donating money to three pro-open-source organizations. Commentary: Toward a successful Linux desktop install (NewsForge). Don Goodman suggests some ways to make Linux more attractive to those desktop users. "Without an easy-to-use, universally accepted setup for Linux programs, Linux remains relegated to the server room. Building a successful future for Linux on the desktop begins with..." For a slightly different view of the same issue, check out Paul Tatham's writings from last month. Users get a grip on one-handed Linux PDA (ZDNet). Reporting from CeBIT, ZDNet takes a look at the Linux-based Filewalker PDA. "Filewalker, which runs on the Linux operating system, lets users enter text by way of three buttons on the left side of its case, and a scroll wheel on the top. When held in the right hand the buttons are under the fingers, and the scroll wheel sits below the thumb." Linux consortium slows to a waddle, critics say (EE Times). EE Times covers complaints about the Embedded Linux Consortium, and its lack of progress so far. "The IPA [intellectual property agreement], which addresses such issues as licensing, patent and trademark infringement, and disclosure agreements, apparently became a bone of contention for some of the board members who disagreed over its structure. Some reportedly wanted to move quickly and not worry about the consortium's ownership issues, while others wanted to ensure that the ELC essentially owned the specification, and no other organization could build on it." Linux digs in at embedded systems show (InfoWorld). InfoWorld reports from the Embedded Systems Conference. "As the millions of smart computing devices in the world turn into billions, analysts say operating systems designed for particular devices are losing ground to general-purpose software that can be adapted more easily for use in different types of products." BT Linking Suit Dealt a Blow (Wired). WIRED covers recent developments in British Telecom's suit against Prodigy over the use of hyperlinks. "The most damaging point in U.S. District Judge Colleen McMahon's ruling is a question about whether BT's patent can legitimately be said to apply to an Internet-based technology, since the patent specifies the use of a single computer terminal. 'In this patent, the computer is a single device, in one location,' McMahon wrote in her ruling. 'The term ''computer'' is the only structure described in the specification, and there is no indication that ... the term ''computer'' means to be broader than ''a computer.'' If the term ''computer'' does not tell us what the computer is, then the claim would be indefinite." (Thanks to Marty.) CompaniesAOL testing new, improved Netscape (ZDNet). ZDNet looks into AOL's efforts to switch to the Mozilla browser. This gem of a quote was included: "However, while Jupiter Media Metrix analyst David Card said it was likely AOL was testing different software, he thought the company would likely stick with Internet Explorer for the time being. ``If they did it, they could pull it off, though I don't see any benefit to it,'' Card said. ``But it would be difficult. It is a big technology investment.'' He said it was unlikely a serious software company would use alternative open-source software for its final products. ``Serious software companies don't ship open source. They may start with it but they build products on it,'' Card added. ''You just have to be serious about the business and I don't think they are serious (about Netscape).''" AOL 7.0 tests Netscape browser (News.com). AOL is considering a switch from the Internet Explorer browser to a Mozilla based Netscape browser. "Launching new versions of the AOL service without Microsoft's IE, long AOL's default browser, could cause an enormous rift between the two technology giants. For years, the companies have fiercely battled in the marketplace and in the federal courts, but they have maintained a business relationship. Now, there are signs that AOL and Microsoft are gearing up for a cold war." AOL Takes Another Look At Netscape Browser (TechWeb). Here is TechWeb's take on AOL's possible browser change. "AOL spokesman Jim Whitney confirmed that the company has already shipped a Netscape browser in some test software for its discount Internet service, CompuServe. The browser is powered by Gecko technology that was developed through an open-source project called Mozilla." AOL Looks at Netscape Gecko; What Are You Looking at? (TechWeb). TechWeb takes another look at AOL, as the company looks at changing browsers. "Security is the third reason you should watch what happens in this case. Have you calculated IE's total cost of ownership lately? If you're applying all the security patches Microsoft puts out, the investment is huge. If you're not applying them, are you sleeping at night? I'm not claiming that Netscape has no security issues -- every piece of software has bugs that can be exploited to breach your security. But Netscape is not tied into your operating system. Therefore, it's arguably less risky and certainly requires less patching." IBM Unveils New Server Based on Intel Chips. NewsAlert reports on IBM's new xSeries 440 server, which uses Intel processor chips. "IBM and Unisys both have packaged those chips with sophisticated features such as self-healing systems, which detect and repair potential problems. Their respective machines also are equipped with partitioning, the ability to run different operating systems at the same time within the same machine. Both run Microsoft programs, and IBM's version works with the Linux operating system. " Lineo swallows another bitter pill, cuts staff to under 80 (LinuxDevices). LinuxDevices.com covers the latest bad news from Lineo. "Citing 'the impact of the economic downturn that has prevailed since March', Lineo reduced its headcount again this week and continued the process begun last Fall of narrowing its focus to three key target markets. According to CEO Matt Harris, the company is reducing its size from 138 employees to between 75 and 80." MandrakeSoft adds Office to Linux (ZDNet). This ZDNet UK article covers the release of Mandrake Linux 8.2, with a focus on the software that will be added to the boxed sets. "When the boxed product ships in April, version 8.2 will be the first Mandrake Linux version to include the office suite StarOffice 6.0 and the Outlook clone Evolution 1.02, both of which are considered to be significantly improved over earlier editions." MandrakeSoft, here we go again (NewsForge). Here's a NewsForge article criticizing MandrakeSoft and its pleas for donations. "This really wouldn't be a problem if MandrakeSoft was a little more like National Public Radio. No one ever figured that NPR would become self sufficient. Likewise, MandrakeSoft was originally set up as a non-profit. It began its existence as a volunteer project to upgrade and localize Red Hat's version of Linux, combined with the KDE user interface. Almost from the day the company declared itself a profit-seeking corporation, observers have had trouble figuring out how the firm expected to make money, although MandrakeSoft leaders keep insisting they are going to try." Novell in talks to bundle eDirectory on Linux servers (Register). The Register reports that Novell is in talks with IBM and Red Hat about bundling its eDirectory services with Linux servers. "The network software and services firm already supports Linux, so the deal - which is still at the discussion stage - would involve expending Novell's commitment to the platform that boosts the availability of directory services for Linux, CRN reports." SuSE goes 64-bit with IBM zSeries (ZDNet). SuSE's Enterprise Server 7 will be available for IBM's eServer zSeries by the beginning of May according to this article. "The software also allows 32-bit and 64-bit applications to run at the same time, within the same Linux instance on the mainframe, so that 32-bit applications can be retained where they are needed." SuSE gets ready to pick up Hammer (ZDNet). ZDNet looks at SuSE's work with the AMD Hammer processor and other SuSE business operations. "SuSE is pushing to have its server software ready in November, in time for the launch of Hammer late in the year, according to product manager Stefan Werden. 'As soon as Hammer is officially available, our operating system package will be too,' he said." BusinessMaking free software pay (BBC News). The BBC News goes to CeBIT and takes a look at open source business models. "Like its European competitors Caldera and SuSE, US-based Red Hat charges not for the Linux software but for the documentation and helpline support that goes with it." (Thanks to Dave Killick) Insurer Seeks Cost Savings With Server Switch (TechWeb). TechWeb reports that the Wisconsin Physicians Service Corp. is dumping their Intel servers in a move to Linux (on a new IBM z900 mainframe). "The apps, running on mainframe partitions, will run in parallel with the Intel servers until April 1. By October, 40 servers will be switched to Linux partitions. The goal of the switch is to save time and money. Jim Hwang, director of enterprise network systems at WPS, says it takes him two to three minutes to configure an app on a partition on IBM's z900 mainframe. A comparable configuration on an Intel server would take two to three days. The apps also run two to three times faster than they do on the Intel-based servers, he adds." Running a corporation in an open source world. Shawn Gordon, founder and president of theKompany.com discusses his reasons for discontinuing the use of the GPL on future products. "We sell one product that is GPL. On at least a weekly basis we get someone telling us that we have to give them the source code because it is GPL. Some of them become verbally violent and abusive when I point out that the GPL provides for us to charge for the source code, we just have to make it available, and this we have done. Some of these people even tried to hack our system to get the code because they thought it was their God-given right to have it. These are also typically the people who contribute nothing to the community." (Thanks to Simon Cozens.) Pay Dirt (TechWeb). TechWeb examines the role that Linux clusters are playing in the oil industry. "As oil companies outsource more seismic processing, especially the commodity depth-migration algorithms that smooth out noisy data, low bids and quick turnaround are king at companies such as WesternGeco, Halliburton, CGG, and Veritas DGC. That's where Linux clusters come in--they've reduced processing costs more than tenfold, Venkataraman says. 'You don't want to tie up expensive computing cycles or storage on stuff they don't need to do,' he says. " German parliament to use Linux (Heise.de). This article (in German) confirms that the German Parliament will replace approximately 150 Microsoft based servers with Linux servers. Here is the Babelfish translation. (Thanks to Werzinger Lothar) Realtor group houses all kinds of Open Source projects (NewsForge). NewsForge reports on the development of Open Source software for the real estate industry. "The more than 800,000 real estate professionals who constitute the membership of the National Association of Realtors the largest trade association in the United States and the tens of millions of commercial and residential customers they serve probably won't realize it, but many will soon be benefiting from Open Source software, thanks to projects being done by the NAR's Center for Realtor Technology." Support still a problem for open source (IT-Director). IT-Director looks into the issue of support for open-source software users: "Explaining that the shortcoming could be overcome in a number of ways, Taylor said: 'There's an opportunity for integrators such as IBM to provide support, irrespective of where the original open source products came from. Smaller support companies could also take on product support in this area. There is a golden opportunity to be in this market space.'" ReviewsAbiWord: Open Source's Answer to Microsoft Word (OreillyNet). The O'Reilly Network looks at AbiWord. "Although the AbiWord development team is currently working towards their milestone Version 1.0, the beta releases already come with a number of useful features: support for plug-ins and scripts, a spell checker, 2- and 3-column text formatting, and image importing. For other languages besides English, multilingual spell checking is in place, as is bidirectional text for languages that are written from right to left." Want a Windows alternative? Take a look at BSD (ZDNet). Here is a look the BSD operating systems, as an alternative to Windows. "If you're investigating and evaluating Unix-style OSes, don't pick Linux just because of the buzz. Take a good look at FreeBSD, NetBSD, and OpenBSD as well, and make the most informed decision." Roxen WebServer 2.2 (Linux Journal). Linux Journal reviews the Roxen web server. "Although Apache dominates the internet web server market, it has some weak points: it lacks a built-in SQL database backend, flexible administration tools and easy SSL certificate management. All of these features can be found, however, in the Roxen WebServer." Revolution OS: Movie Review (Linux Orbit). Linux Orbit reviews Revolution OS. "When we walked into the theater, lo and behold.... Geeks. I suppose it?s hard to be objective when my wife uses the same term to describe me (in the nicest possible way), but for every filled seat, there was a second seat with a laptop propped up on it." Langa Letter: Exploring Windows Alternatives (TechWeb). InformationWeek looks at Windows alternatives, saying that it is a matter of "self defense." "And sadly, some of the more rabid Linuxophiles add a needless social tension to the already challenging technological task of switching operating systems. These Linux "fanatics" (as opposed to the sane enthusiasts) assume that anyone with lesser Linux skills, or anyone who forms an opinion contrary to theirs, must be an idiot." ResourcesIT pros learn to beat hackers at their own game (CNN). CNN reports on a class called "Extreme Hacking: Defending Your Site". "Using dual-bootable NT/Linux laptops and an accompanying network setup for practicing subversive attacks, attendees were taught a new bag of tools and tricks to help them understand how hackers identify IP addresses, collect information about the systems they want to compromise and exploit weaknesses without being noticed." InterviewsInterview: Linus's latest lieutenant (developerWorks). developerWorks is running an interview with Marcelo Tosatti, 2.4 kernel maintainer. "Something about Linus that is a problem is that a lot of things come from his mood. He'll just say, 'Oh, this is good: Apply. This is good: Apply.' He should not accept some of the patches he does. He accepts some patches too early, without thinking too much about them. He does not have the time to really care about some stuff." (Thanks to Frank Carlos). Navigating a PC sea change (News.com). News.com interviews Compaq's Mike Winkler, and discusses the proposed merger with HP as well as Compaq's business directions. "One of Michael's key initiatives has been to make Compaq a stronger player in the enterprise. That means the server business, not just the industry standard server business, but also continued presence and growth in the Linux and Unix (segments), high-performance technical computing and the very high end of the Tandem mission critical system--and then storage, of course, which is a really big and good growth business for us." Miguel de Icaza on just about everything (Linux and Main). The Man of Pure Energy (Miguel, of course) is back in the press with this interview by Linux and Main. "[In this interview] he discussed his belief that .NET and Mono are the wave of the future, his view of Microsoft Corp., his explanation of how there can be times when selling closed-source software is jus tified, as well as the .GNU project, the importance of making sure Linux and its desktops can run on the machines found in poorer nations, the future of Linux in both the business and consumer spheres, and even the things that motivate programmers." Interview with Dr. Karl-Heinz Strassemeyer (SSLUG.dk). SSLUG's Ole Tange interviews Dr. Karl-Heinz Strassemeyer from IBM in Böblingen, Germany. The above link contains links to additional information and to this interview in a variety of formats; including Ogg Vorbis, RealPlayer and text. GNU-Friends Interview Arnold Robbins. Arnold Robbins, author of GNU awk and several related manuals, is interviewed by GNU-Friends. "The strchr, memset, and so on routines were shipped with gawk for portability. At the time, Unix systems varied more widely than they do now. We found it easiest to code to "standard" interfaces and then include replacement versions of routines, instead of using lots of #ifdef goo to take advantage of whatever a system had locally." MiscellaneousNew devices bypass the PC (CNN). CNN.com covers several announcements from last week's Embedded Systems Conference. "InfoMart, based in Bangalore, India, has developed a device called the Kaii with the Embedix Plus PDA operating system, according to Lineo. Using a processor from Hitachi, the Kaii will run at 160 MHz and will be equipped with 64MB of RAM and 32MB of ROM. " Back Orifice for Unix flaw emerges from obscurity (Register). This Register article looks at another possible security problem. "This flaw appears to affect all versions of Sun Solaris and versions of Linux Mandrake up to 8.1, though Red Hat Linux is believed to be immune to that attack. The jury is out on IBM's AIX and HP/UX." Old Morpheus still works for unhacked users (Register). The Register reports that older version of Morpheus still work. "Earlier this month Music City Morpheus ditched support for the P2P stack supplied by developer FastTrack and embraced the open source Gnutella protocol, with the launch of Morpheus Preview Edition." Microsoft fear over zlib flaw (vnunet). Vnunet reports that Microsoft has confirmed that the zlib software-compression library flaw could affect Office, Explorer, DirectX, Messenger, Windows XP and Front Page. "The open-source compression project, Gzip, has identified more than 600 applications which use the zlib code, including some from Microsoft." Open-source flaw threatens MS code (ZDNet). ZDNet reports that Microsoft may also have vulnerabilities related to the recent zlib double free() hole. "On Thursday, researchers reported that at least nine of Microsoft's major applications--including Microsoft Office, Internet Explorer, DirectX, Messenger and Front Page--appear to incorporate borrowed code from the compression library and could be vulnerable to a similar attack." Section Editor: Forrest Cook |
March 21, 2002 |
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters See also: last week's Announcements page. |
AnnouncementsResourcesECS K75SA Motherboard (LinuxLookup). LinuxLookup reviews the ECS K75SA motherboard, which runs AMD Athlon and Duron processors. Testing your memory, the Open Source way (NewsForge). Russell Pavlicek describes testing your memory with the GPL program Memtest86. "You are probably used to seeing the memory test that occurs when you boot most PCs. This proves that your machine has good memory, right? Well, not exactly." Smart (Script-Aided) Browsing (Linux Journal). Marco Fioretti shows how to use the wget script for automated web surfing. "Basically, there are two ways to surf the Net: interactively, with any text or graphical browser, or in batch mode, with a program that copies single pages or whole web sites to your hard drive for later use. " Porting OS/2 applications to Linux (IBM). IBM has published a paper that documents the differences between OS/2 and Linux. "This paper is a summary of problems encountered by the LAN Distributed Platform (LANDP) for Linux team whilst porting LANDP from OS/2 to Linux. This paper should be useful to other teams that are porting OS/2 applications to Linux." (Thanks to Frank Carlos.) mySAP.com on Linux for IBM eServer zSeries. IBM and SAP plan to announce the availability of mySAP.com on Linux for IBM zSeries by the end of May. For those interested, IBM has this list of Frequently Asked Questions (in PDF format) and also this list of Software Developers that have products for both Linux for zSeries and Linux for S/390. Finding Things in Unix (O'Reilly). O'Reilly is running a series on the Unix find command. See part one and part two of the article. EventsFOSE SELinux Panel. There will be a Security Enhanced Linux (SELinux) panel at the FOSE conference in Washington D.C. on Thursday, March 21, 2002. MontaVista offers proprietary RTOS to Linux seminars. MontaVista has announced that it will be sponsoring three seminars on the topic of moving from a proprietary RTOS to embedded Linux. The seminars will be held during April, 2002 in Boca Raton, Florida, Bellevue, Washington, and Ottawa, Canada. CeBIT review. Helge Kreutzmann has posted a review of this year's CeBIT conference in Hannover, Germany. New Security Paradigms Workshop call for papers. A call for papers has been issued for the New Security Paradigms Workshop 2002 in Virginia Beach, Virginia on September 23-26, 2002. The deadline is Friday, April 5, 2002. Events: March 21 - April 16, 2002.
Additional events can be found in the LWN Event Calendar. Event submissions should be sent to lwn@lwn.net in a plain text format. Web sitesLinux Users Groups WorldWide. Linux Counter has created the LUGWW project to help keep track of the many Linux Users Groups around the world. (Thanks to Hugo van der Kooij) Section Editor: Forrest Cook. |
March 21, 2002 | ||||||||||||||||||
|
|
Software AnnouncementsHere are this week's Freshmeat software announcements. Freshmeat now offers the announcements sorted in two different ways: The Alphabetical List and Sorted by license |
Our software announcements are provided courtesy of FreshMeat
| ||||||||||||||||||
|
Sections: Main page Security Kernel Distributions Development Commerce Linux in the news Announcements Letters See also: last week's Letters page. |
Letters to the editorLetters to the editor should be sent to letters@lwn.net. Preference will be given to letters which are short, to the point, and well written. If you want your email address "anti-spammed" in some way please be sure to let us know. We do not have a policy against anonymous letters, but we will be reluctant to include them. |
March 21, 2002 |
From: tet@accucard.com To: letters@lwn.net Subject: Kernel compile times Date: Fri, 15 Mar 2002 17:40:12 +0000 On the LWN kernel page, you say: >Compiling a kernel in 23 seconds isn't bad - it looks like a record. You then explain how Anton Blanchard rose to the challenge and achieved a 10.3 second kernel compile. What you didn't mention was that he'd already broken the 23s mark some 18 months ago. On 26th September 2000, he posted a message to the Linux Kernel mailing list showing Linux booting on a 24 CPU Sun Ultra Entrprise E10000, and claiming a kernel compile in 20 seconds. So, a 100% increase in 18 months? Sounds like a perfect illustration of Moore's law to me :-) Tet | ||
From: Biju Chacko <biju@exocore.com> To: letters@lwn.net Subject: Thinking with ones gonads Date: 14 Mar 2002 09:58:01 +0530 In lwn you wrote: > It is worth pondering, however, on why so many of us insisted on using > Linux systems in the early 90's, when it was still clearly inferior to > the numerous proprietary Unix systems that were available at the time. > Without a certain amount of "gonad thinking," Linux might not have > come so far so quickly. It's fairly simple, really. In the early '90s, when I started working with Linux, proprietary Unixes were just plain out of reach. Actually, as a penniless student in a third-world country, DOS was out of reach! I shudder to think of the sheer volume of piracy I commited at that time. Why did I use Linux in '94? Not for any political reason. It was UNIX and it was available. Why do I use Linux in '02? Ditto. With the bonus that in many areas it is superior to the competition. Remember, this is a technical field we're in ... making decisions based on politics/marketing/whatever is just asking for trouble. And *that* is the same mistake being made by both RMS and MS. -- Biju PS: The .sig is a coincidence -- but appropriate nevertheless. -- ------------------------------------------------- Biju Chacko | biju@exocore.com (work) Exocore Consulting | biju_chacko@yahoo.com (play) Bangalore, India | http://www.exocore.com ------------------------------------------------- Those who do things in a noble spirit of self-sacrifice are to be avoided at all costs. -- N. Alexander. | ||
From: David Mackintosh <mackdav@rogers.com>
To: <letters@lwn.net>
Subject: "Gonads" vs practicality
Date: Thu, 14 Mar 2002 11:13:19 -0500 (EST)
Sir:
With respect to your comments on Linux's history, specifically:
> It is worth pondering, however, on why so many of us insisted on
> using Linux systems in the early '90s [...] without a certain amount
> of "gonad thinking", Linux might not have come so far so quickly.
I would doubt that any kind of religion plays a significant part of
selecting an operating system. The vast majority of linux users have
different reasons for chosing to run this operating system. In
general, before a user will consider selecting it for his needs, the
OS must have evolved into at least one of two states:
1. The OS must be able to do something the user wants it to do; or
2. The OS is in a state where the user is capable of modifying it
to do something they want it to do.
For me, I needed a crash-resistant OS that I could afford. Linux
fit "what I wanted it to do" and through perl, shell scripting, and
some awful awful C code, I could "make it do what I wanted it to
do" in a practical sense.
Yes, OSF/1 and SunOS were far more capable at the time, but Linux fit
my needs from an affordability perspective -- it cost $25 for a set
of CDs and ran on the less-than-state-of-the-art equiptment I owned.
I did not understand the GPL at the time, so "gonad thinking"
played absolutely no roll in the decision.
I think that the majority of the religious are involved with Linux
because using a "counter-culture" operating system is seen to be
against the mainline. With the exception of the truely sincere (such
as Mr. Stallman) I think these people are useless as a core
constituency, because they will flee Linux and the GPL as soon as it
becomes mainstream in favor of something more "revolutionary".
Perhaps this is where the Hurd's userbase will come from?
--
/\oo/\
/ /()\ \ David Mackintosh | mackdav@rogers.com
| ||
From: Joe Klemmer <klemmerj@webtrek.com> To: letters@lwn.net Subject: "gonad thinking" Date: Thu, 14 Mar 2002 16:38:09 -0500 (EST) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > It is worth pondering, however, on why so many of us insisted on using > Linux systems in the early 90's, when it was still clearly inferior to > the numerous proprietary Unix systems that were available at the time. > Without a certain amount of "gonad thinking," Linux might not have come > so far so quickly. FWIW, I think there's a difference of scale and/or perspective. When Linux came out there was no expectation of it being or doing real work. It wasn't needed to, nor desired for, something that actually did anything. BitKeeper, OTOH, is expected to perform a function that has some requirement for someone (specifically LKH'ers). But that's just my opinion. What do I know... - --- Using Linux since 11/91 | http://www.linux.org Linux user #29402 | http://counter.li.org/ Red Hat Linux | http://www.redhat.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE8kRhGHeWRPx8OIHARAn2WAJ9ACa8cWyd5Kh6XQb0fUnKW2REDhgCdHF+x 6Vuw/7xOvXAwwD6Ps1HXZ94= =+tra -----END PGP SIGNATURE----- | ||
From: Zygo Blaxell <zblaxell@feedme.hungrycats.org> To: letters@lwn.net Subject: Whoa there! Linux inferior to _which_ Unix systems in the early 90's? Date: Fri, 15 Mar 2002 23:22:04 -0500 >It is worth pondering, however, on why so many of us insisted on using >Linux systems in the early 90's, when it was still clearly inferior >to the numerous proprietary Unix systems that were available at the >time. Without a certain amount of "gonad thinking," Linux might not have >come so far so quickly. Whoa there...I have a few problems with that statement! Last time I checked, I was a Linux and proprietary Unix user in the early 90's. I was doing a fair amount of "gonad thinking" at that time in my life, but I certainly wasn't thinking about _software_ with those organs. Uhhh... maybe that's more than my fellow readers want to know. Anyway... First of all, the world is not all Unix--by 1993, there were many non-Unix operating systems for 386-class machines that were clearly inferior to Linux. Even if we compare Linux only to proprietary Unixes, I'm having difficulty recalling which proprietary Unix vendor had a product that Linux was "clearly inferior" to at the time. Each proprietary Unix vendor optimized their product for one (usually vertically integrated) niche market, and utterly ignored anyone else, so each proprietary Unix was good at one particular kind of application and bad at most others. Linux was not "clearly inferior" to contemporary Sun, HP, IBM, SGI, or SCO systems of the early 90's--I used a bit of all of those at the time, as well as Linux, and they all sucked more or less equally, especially if you wanted to run a mixture of many different applications. This lack of generality was part of the very reason why there were so many proprietary Unix vendors in the first place! People who were serious about working on a Unix system (as opposed to merely running a single application on it) in the early 90's routinely replaced as many of the bundled system components with third-party replacements as possible, using proprietary software if you had money, or GNU and other free (beer) software if you didn't. The major motivation for this was to have a layer of portable runtime to insulate you from the vendor's Unix taste, so you could develop software for multiple vendor platforms without going insane. By the mid 90's, there was very little practical difference between a proprietary Unix system that had been mostly hidden under a thick layer of third-party components, and a Linux system that didn't have any vendor-supplied components to start with. Oh, and a lot of this third-party software was free (speech) too. Wasn't that nice! -- Zygo Blaxell (Laptop) <zblaxell@feedme.hungrycats.org> GPG = D13D 6651 F446 9787 600B AD1E CCF3 6F93 2823 44AD | ||
From: Eric Smith <eric@brouhaha.com> To: letters@lwn.net Subject: nore GPL confusion Date: 20 Mar 2002 22:20:45 -0000 Gentlemen, In your 20-Mar-2002 daily updates, you quote a Financial Times article as saying "the GPL can 'convert' proprietary software into open source software - since any company incorporating licensed code into its own software products is obliged to open up its code too." You do state that this worry is "overblown", and I agree. Developers should remember that using GPL'd code is a choice that is available to them, not a burden. If the terms of the GPL are not consistent with their intention to keep their software proprietary, they should not use the GPL'd code. No one is forcing them to do so. The have the OPTION of using GPL'd code IF they desire to AND they are willing to comply with the license. The way the Financial Times article was worded, it almost sounds like they think GPL'd code can somehow mysteriously sneak into another software package when the developers aren't looking. Unless the software developers are grossly incompetent, that's not going to happen. It is a legitimate concern that software developers must be aware of the licensing on any software that they merge into a product, but this is in no way specific to the GPL. Sincerely, Eric Smith | ||
From: Leandro Guimarães Faria Corsetti Dutra <leandrod@mac.com> To: letters@lwn.net Subject: The GNU HURD will be ready by the end of the year Date: Thu, 14 Mar 2002 14:30:04 +0100 First, you've taken RMS words off a much edited interview... not good for acuracy. Second, you got it all right about keeping proprietary software off the GNU system. Obviously RMS isn't talking about applications being able or not to run. He's talking about "Distributions of GNU/Linux", and obviously FSF's distribution of GNU, being based on Debian, won't include any proprietary software. About licensing, obviously GNU GPL libraries won't allow proprietary software. This is already the case with GNU libraries like readline and some Gnome ones, as well as with Troll Tech's Qt -- you have to get a different license to be able to distribute your application with Qt. On the other hand, applications usually don't talk to the kernel, they talk to libraries such as GNU libc, and most of these have been licensed under LGPL specifically to allow for proprietary applications. -- _ / \ Leandro Guimarães Faria Corsetti Dutra +41 (21) 216 15 93 \ / http://homepage.mac.com./leandrod/ fax +41 (21) 216 19 04 X http://tutoriald.sf.net./ Orange Communications CH / \ Campanha fita ASCII, contra correio HTML +41 (21) 644 23 01 | ||
From: Jeroen Dekkers <jeroen@dekkers.cx> To: letters@lwn.net Subject: The GNU Hurd Date: Tue, 19 Mar 2002 17:52:33 +0100 It's nice that you write something about the Hurd, but it would be better if you would have looked at the Hurd homepage, http://hurd.gnu.org, a bit better. To start with, you write it as "the Hurd", not capitalized like "HURD". See http://www.gnu.org/software/hurd/faq.en.html#q1-2 for more information. Second, the Hurd isn't a kernel. It's a multi-server system running on a microkernel, Mach at the moment. In the future the Hurd will probably run on L4 (http://os.inf.tu-dresden.de/L4/ and http://www.l4ka.org) and other microkernels. There are plenty of reasons for producing the GNU system. One of the reasons is to give attention to the GNU project. GNU/Linux never did (at least not before RMS started with his GNU/Linux campaign) give much credit to GNU. (Just name LWN for example. Your article about the Hurd perfectly shows that it's misnamed). The GNU system will do. It also generates money if the FSF is going to sell cds with the GNU system. Money which will be spend to advocate and develop free software. You really misinterpretted RMS his reasons for creating the GNU system. He only says that he's looking forward to see the GNU system available because it will only contain free software. He didn't say anything about forbidding the user to install non-free software on it if that user doesn't care about his freedom. The following sentence doesn't make much sense to me either: "Thus, it seems unlikely that the HURD will mount a substantial challenge to the established free kernels anytime soon." And that's not only because it doesn't make much sense seeing it stand-alone, the potential of the Hurd is very big, but because the arguments before it. Why shouldn't it be able to challenge the existing free kernels because the GNU distribution doesn't contain non-free software? I'm not sure if you know that one of the most populair distributions, Debian, doesn't have non-free software in its main distribution. Debian works perfect without the non-free section and a lot of people I know have are running it without it. Proprietary software isn't necessary any longer. Debian also has a Hurd 'port', BTW. But what is actually the biggest reason? It's because of its technical superiority. Although the current implementation doesn't show it, the design of the Hurd and the ideas behind it really rock. And of course I get flamed about this by people who think microkernels suck. I'll just say that research proved that it's possible to make a good system based on a microkernel. It can be fast, for example. That there isn't a good system at the moment doesn't make it impossible. All flames based on FUD will go directly to /dev/null. The Hurd has many nice features. To give an example, you can run servers implementing file systems, network protocols, file access control, etc just as a normal user and debug it as a normal program. Any user can add things to the filesystem, for example mounting a directory on a ftp server in its home directory. All this is possible without special permissions. And all those things and more are possible because the Hurd is a multi-server system running on a microkernel. This is the reason why the Hurd is still developed and why the number of Hurd developers and users is increasing. It's nice that the Hurd is getting more usable. You would probably ask why the Hurd taked so long. The answer is simple: manpower. The Hurd only has a few developers and never had much in the past. The Hurd is a redesign of Unix, a redesign takes much more time than a reimplemention. That's why Linux was much easier to develop, they didn't have to think about the interfaces and the design. But one thing is sure: The Hurd isn't dead and the GNU system has a lot of potential to beat a lot of operating systems, even those much used proprietary ones. Jeroen Dekkers -- Jabber supporter - http://www.jabber.org Jabber ID: jdekkers@jabber.org Debian GNU supporter - http://www.debian.org http://www.gnu.org IRC: jeroen@openprojects | ||
From: "Robert A. Knop Jr." <rknop@pobox.com> To: letters@lwn.net Subject: reverse FUD Date: Fri, 15 Mar 2002 13:13:11 -0600 It's striking that as the news of the zlib flaw gets out, what we're seeing is lots of patches from Linux and FreeBSD distributors, and at the same time realization by Microsoft that maybe this is their problem too. Yes, this flaw is a bit of a PR black mark for open source, but it is interesting to note the speed of response of the two different communities. There's another take on this too. Assuredly this security flaw is going to be a giant pain for Microsoft, if they have to patch all sorts of applications as a result. BUT, if zlib had been released under the GPL, Microsoft wouldn't have used it, and they wouldn't have this problem! So... Microsoft likes to go around saying that GPL "breaks the cycle" that they think ought to be present in the computer industry. But, really-- when somebody releases something under the GPL, they're just trying to protect you, Microsoft, so you won't be succeptible to its flaws! It's all done for your own good. Really. -Rob -- -=-=-= Rob Knop =-= rknop@pobox.com =-= http://www.pobox.com/~rknop =-=-=- Help the EFF protect basic freedoms online: http://www.eff.org Playwrights & theatre types, see The Dramatic Exchange: http://www.dramex.org | ||
From: "David L. Craig" <dlc@radix.net> To: letters@lwn.net Subject: On Overstatement Date: Fri, 15 Mar 2002 16:37:18 -0500 In "Cal Senator: Hollywood Over Tech (Wired)," the abstract ends with "Yes, it's true: the U.S. government really wants to outlaw free software." Now, honestly, don't you think that is retractable nonsense? It is proper to attribute this to some members of Congress, but to the whole kit and kaboodle? These new bills are still in committee, after all. If you remember the U.S. electorate IS the U.S. government, you will see how overstated this was. In fact, I perceive it to be inflamatory and beneath the journalistic standards I have come to expect from your Web site. I beg you, fix this pronto. -- May the LORD God bless you abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - "So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe." --Athor 77, formulator of the from _Nightfall_ Universal Theory of Gravitation by Asimov/Silverberg | ||