|
|
Subscribe / Log in / New account

Brief items

Security

Security quotes of the week

In other words, Russia is set to introduce its first online voting system. The system will be tested in a Moscow neighborhood that will elect a single member to the capital's city council in September. The details of how the experiment will work are not yet known; the State Duma's proposal on Internet voting does not include logistical specifics. The Central Election Commission's reference materials on the matter simply reference "absentee voting, blockchain technology." When Dmitry Vyatkin, one of the bill's co-sponsors, attempted to describe how exactly blockchains would be involved in the system, his explanation was entirely disconnected from the actual functions of that technology. A discussion of this new type of voting is planned for an upcoming public forum in Moscow.
Mikhail Zelensky (Translation by Hilah Kohen, at the Meduza Russian news site)

The report is a neat illustration of what I've called the adoption curve for oppressive technology, which goes, "refugee, immigrant, prisoner, mental patient, children, welfare recipient, blue collar worker, white collar worker."
Cory Doctorow on a report [PDF] about workplace surveillance and monitoring

Comments (1 posted)

Kernel development

Kernel release status

The 5.1 merge window remains open; it will mostly likely close on March 17.

Stable updates: 5.0.1, 4.20.15, and 4.19.28 were released on March 10. The relatively large 5.0.2, 4.20.16, 4.19.29, 4.9.163, and 4.14.106 updates are in the review process; they are due on March 14.

Comments (none posted)

Cook: security things in Linux v5.0

Kees Cook reviews some of the security-related enhancements in the 5.0 kernel. "While the C language has a statement to indicate the end of a switch case ('break'), it doesn’t have a statement to indicate that execution should fall through to the next case statement (just the lack of a 'break' is used to indicate it should fall through — but this is not always the case), and such 'implicit fall-through' may lead to bugs. Gustavo Silva has been the driving force behind fixing these since at least v4.14, with well over 300 patches on the topic alone (and over 20 missing break statements found and fixed as a result of the work). The goal is to be able to add -Wimplicit-fallthrough to the build so that the kernel will stay entirely free of this class of bug going forward. From roughly 2300 warnings, the kernel is now down to about 200. It’s also worth noting that with Stephen Rothwell’s help, this bug has been kept out of linux-next by him sending warning emails to any tree maintainers where a new instance is introduced (for example, here’s a bug introduced on Feb 20th and fixed on Feb 21st)."

Comments (107 posted)

Quotes of the week

This adds the initial driver for panfrost which supports Arm Mali Midgard and Bifrost family of GPUs. Currently, only the T860 Midgard GPU has been tested. [...]

How's performance? Great, because I haven't measured it.

Rob Herring

Sure, it's a matter of kernel coding conventions.

But this isn't the way to get those changed! The process for making such changes involves large numbers of people arguing at each other (perhaps at kernel summit) until Linus comes in and tells everyone how it's going to be.

Andrew Morton

Comments (none posted)

Distributions

Distribution quotes of the week

Further Discussion for DPL!

Further Discussion builds concensus within Debian!

Further Discussion gets things done!

Further Discussion welcomes diverse perspectives in Debian!

We’ll grow the community with Further Discussion!

Noah Meyerhans

Our conclave recently communed and began working on new means of communication between our worlds. Forget the flying owls (fedmsg) that could be lost on the way to the target world, and behold the magical mirrors (Fedora messaging). This will help communicate more reliably than ever before.
zlopez (Thanks to Paul Wise)

I am really not sure what people are expecting from the DPL. My past experience showed me that expectations varied a lot between different groups/team/persons. Having a DPL elected doesn't mean people agree with his/her program.

I am not sure what kind of governance the project needs today. We should collectively think about this before rushing someone to invest all his emotional and physical energy for one year.

Mehdi Dogguy

Comments (none posted)

Development

The Linux Foundation's CommunityBridge platform

The Linux Foundation has announced a new initiative called CommunityBridge; its purpose is to help with funding and support for open-source developers. It includes some security-related services and a means for connecting developers with mentors. The program is in an "early access" mode for now.

The Linux Foundation is not the first to provide such services, of course; see this statement from the Software Freedom Conservancy for its take on this new initiative.

Comments (4 posted)

Malcolm: Usability improvements in GCC 9

David Malcolm writes about improved diagnostics and more in the GCC 9 release. "Speaking of annotations, this example shows another new GCC 9 feature: diagnostics can label regions of the source code to show pertinent information. Here, what’s most important are the types of the left-hand and right-hand sides of the '+' operator, so GCC highlights them inline. Notice how the diagnostic also uses color to distinguish the two operands from each other and the operator."

Comments (16 posted)

Introducing Season of Docs

Google Open Source has announced Season of Docs. "During Season of Docs, technical writers will spend a few months working closely with open source communities. Each writer works with their chosen open source project. The writers bring their expertise to the projects’ documentation while at the same time learning about open source and new technologies. Mentors from participating open source organizations share knowledge of their communities’ processes and tools. Together the technical writers and mentors build a new doc set, improve the structure of the existing docs, develop a much-needed tutorial, or improve contribution processes and guides." Open source organizations may apply to take part in Season of Docs starting April 2.

Comments (1 posted)

Announcing the release of sway 1.0

Drew DeVault has announced the first stable release of sway, an i3-compatible Wayland desktop for Linux and FreeBSD. "Sway 1.0 adds a huge variety of features which were sorely missed on 0.x, improves performance in every respect, offers a more faithful implementation of Wayland, and exists as a positive political force in the Wayland ecosystem pushing for standardization and cooperation among Wayland projects."

Comments (8 posted)

Development quotes of the week

All this has been replaced by a set of Docker containers running my docker-debian-base software. They’re all in git, I can rebuild one of the containers in a few seconds or a few minutes by typing "make", and there is no cruft from 2002. There are a lot of benefits to this.

And yet, there is a part of me that feels it’s all so… cold. Servers having "personalities" was always a distinctly dubious thing, but these days as we work through more and more layers of virtualization and indirection and become more distant from the hardware, we lose an appreciation for what we have and the many shoulders of giants upon which we stand.

John Goerzen (retires a server that’s been running since 2003)

There was a time when commercial chat services supported XMPP because it was felt to be the right thing to do. But that was old-school hippie thinking, because if chatterers can just go ahead and talk to anyone anywhere, then your service probably won’t go viral and how are you going to monetize? You can simultaneously think markets are a useful civic tool and recognize obvious, egregious failures. So the links were severed and a whole lot of services just died.
Tim Bray

I'm very disappointed in this. While I don't care for the way the SSPL was introduced, this license poses interesting questions about how copyleft can be extended (or not) and how the OSD's clauses about software packaging need to change in a SaaS world.

If nothing else, SSPL was a serious license proposal and deserved serious consideration it didn't get. THis was a dramatic failure of the license-review process, and I think shows that this group needs to be reconstituted.

Josh Berkus

Comments (4 posted)

Miscellaneous

SPI annual report

Software in the Public Interest has released its annual report [PDF] for 2018. "During the current board term SPI continues to strive for self-improvement and renewal. Treasury teamsprints, bank visits, and legal consultations during in-person meetings have helped keep the wheels turning. An overhaul of our corporate bylaws that better meets our needs is being presented to the members for their approval. And we have improved our reimbursement workflow with a view toward speedier and smoother processing."

Comments (none posted)

Page editor: Jake Edge
Next page: Announcements>>


Copyright © 2019, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds