Domain: blogspot.com
Stories and comments across the archive that link to blogspot.com.
Stories · 3,021
-
Apple and Google to Blog the World
Zrop writes "AppleInsider is reporting that Apple has been working on OS-level integration of an geographical mapping technology as an integral part of Leopard, its next-generation OS. The technology is rumoured to employ GPS functionality. Will GPS chips make Apple iPod phones and MacBooks location aware? Users would be able to post information at a location, hanging in the air, ready to be browsed by people passing by. Imagine getting highly relevant messages, without even pressing a button, simply because you are in the vicinity and your preferences match the content of the post." -
Apple and Google to Blog the World
Zrop writes "AppleInsider is reporting that Apple has been working on OS-level integration of an geographical mapping technology as an integral part of Leopard, its next-generation OS. The technology is rumoured to employ GPS functionality. Will GPS chips make Apple iPod phones and MacBooks location aware? Users would be able to post information at a location, hanging in the air, ready to be browsed by people passing by. Imagine getting highly relevant messages, without even pressing a button, simply because you are in the vicinity and your preferences match the content of the post." -
A Sneak Preview of KDE 4
An anonymous reader writes "In recent times, a lot of discussion has been generated about the state of KDE version 4.0 and as Linux users we are ever inquisitive about what the final user experience is going to be. This article throws light on some of the features that we can look forward to when KDE 4.0 is finally released some time this year. The article indicates that the most exciting fact about KDE 4.0 is going to be that it is developed using the Qt 4.0 library. This is significant because Qt 4.0 is released under a GPL license even for non-Unix platforms. So this clears the ideological path for KDE 4.0 to be ported to Windows and other non-Unix/X11 platforms." -
RIAA Admits 70 Cent Price is 'In the Range'
NewYorkCountryLawyer writes "In its professed battle to protect the 'confidentiality' of its 70-cents-per-download wholesale price, the RIAA has now publicly filed papers in UMG v. Lindor in which it admits that the 70-cents-per-download price claimed by the defendant is 'in the range'.(pdf) From the article: 'The pricing data really may not be all that secret. Late in 2005, former New York Attorney General (and current Governor) Eliot Spitzer launched an investigation into price fixing by the record labels, alleging collusion between the major labels in their dealings with the online music industry. Gabriel believes that making the pricing information public would 'implicate [sic] very real antitrust concerns' as the labels are not supposed to share contract information with one another ... Beckerman argues in a letter to the judge that the only reason the labels want to keep this information confidential is to 'serve their strategic objectives for other cases,' which he says does not rise to the legal threshold necessary for a protective order. The proposed order would force the labels to turn over contracts with their 12 largest customers. Most details--such as the identities of the parties--would be kept confidential, but pricing information and volume would not.'" -
Tamil Nadu (India) Shutting the Door On Microsoft
aprasadh writes "The government of Tamil Nadu, a state in southern India, has begun initiatives to convert all of their IT systems fully to OSS-based software. (The link is a copy of a news item that appeared recently in the Deccan Chronicle, an English-language daily.) The managing director of the IT procurement, consulting, and training agency for the Tamil Nadu government describes the reasons why he has chosen OSS, and also how he dealt with Microsoft executives." From the article: "Initially, 99 per cent of government systems have been running on Microsoft systems but then 2007 will be a watershed year for the state IT sector... We have already dispatched 6,500 Linux systems to village panchayats and another 6,100 Acer desktop systems with Suse Linux operating systems are on their way. We are procuring 20,000 desktop systems for schools, which will run only on Suse Linux... I require at least 500 trainers to train 30,000 state officials across Tamil Nadu in the next six months." -
Tamil Nadu (India) Shutting the Door On Microsoft
aprasadh writes "The government of Tamil Nadu, a state in southern India, has begun initiatives to convert all of their IT systems fully to OSS-based software. (The link is a copy of a news item that appeared recently in the Deccan Chronicle, an English-language daily.) The managing director of the IT procurement, consulting, and training agency for the Tamil Nadu government describes the reasons why he has chosen OSS, and also how he dealt with Microsoft executives." From the article: "Initially, 99 per cent of government systems have been running on Microsoft systems but then 2007 will be a watershed year for the state IT sector... We have already dispatched 6,500 Linux systems to village panchayats and another 6,100 Acer desktop systems with Suse Linux operating systems are on their way. We are procuring 20,000 desktop systems for schools, which will run only on Suse Linux... I require at least 500 trainers to train 30,000 state officials across Tamil Nadu in the next six months." -
Month of Apple Fixes
das writes "On the same day as the launch of the Month of Apple Bugs (MOAB) (blog), Landon Fuller, a programmer, Darwin developer, and former engineer in Apple's BSD Technology Group, has launched an effort to provide runtime fixes for each MOAB issue as they are released. A fix has already been posted for the first MOAB issue." -
Month of Apple Bugs - First Bug Unveiled
ens0niq writes "The first bug (a Quicktime rtsp URL Handler Stack-based Buffer Overflow) of the Month of Apple Bugs has been unveiled — as previously promised — by LMH and Kevin Finisterre. From the FAQ: 'This initiative aims to serve as an effort to improve Mac OS X, uncovering and finding security flaws in different Apple software and third-party applications designed for this operating system. A positive side-effect, probably, will be a more concerned (security-wise) user-base and better practices from the management side of Apple.'" -
Scientist Organizes Resistance To Polygraphs
George Maschke writes "Brad Holian, a senior scientist at Los Alamos National Laboratory, is using a blog to organize resistance to plans for random polygraph and drug testing of Lab scientists. Holian writes: 'Polygraphy is an insulting affront to scientists, since a committee of the National Academy of Sciences has declared that, beyond being inadmissible in court, there is no scientific basis for polygraphs. In my opinion, by agreeing to be polygraphed, one thereby seriously jeopardizes his or her claim to being a scientist, which is presumably the principal reason for employment for many scientists at Los Alamos.'" -
Games On Demand Service For Mac
Torrey Clark writes "MyMacGames is preparing to launch a new 'games on demand' service for Mac users ($8-20 per month) in the third quarter of 2007 that will feature roughly 100 games at launch. They are currently offering a free beta." -
Birth of an Island
slashmojo writes that while some islands are sinking, last August another rose from the ocean, formed by volcanic activity and caught in the act by a passing yacht. From the article: "What looked like a brown stain on the South Pacific turned out to be a spectacular drift of floating pumice stones stretching more than 16 km — and an indication an island was being born nearby... 'We are getting emails from volcanologists saying this is so rare.'" Here is the blog post of the yachtsman who photographed the nascent island. -
Microsoft Laptop Recipient Auctioning Laptop
Salvance writes "While most bloggers who received the controversial Vista powered Acer from Microsoft are keeping them, Laughing Squid has decided to auction off his free laptop from Microsoft and donate all proceeds to the The Electronic Frontier Foundation. (EFF) He saw this as a great opportunity to support a worthy cause, and some other bloggers are following suit. What's funny is that Microsoft is now backpedaling and telling bloggers to send back the laptops. Do they even have a legal right to do so?" -
What Questions Would You Ask An RIAA 'Expert'?
NewYorkCountryLawyer asks: "In UMG v. Lindor, the RIAA has submitted an 'expert' report (pdf) and 26-page curriculum vitae (pdf), prepared by Dr. Doug Jacobson of Iowa State University who is the RIAA's expert witness in all of its cases against consumers, relating to alleged copyright infringement by means of a shared files folder on Kazaa, and supposed analysis of the hard drive of a computer in Ms. Lindor's apartment. The RIAA's 'experts' have been shut down in the Netherlands and Canada, having been shown by Prof. Sips and Dr. Pouwelse of Delft University's Parallel and Distributed Systems research group (pdf) to have failed to do their homework, but are still operating in the USA. The materials were submitted in connection with a motion to compel Ms. Lindor's son, who lives 4 miles away from her, to turn over his computer and music listening devices to the RIAA. Both Ms. Lindor's attorney (pdf) and Ms. Lindor's son's attorney (pdf) have objected to the introduction of these materials, but Dr. Jacobson's document production and deposition are scheduled for January and February, and we would love to get the tech community's ideas for questions to ask, and in general your reactions, thoughts, opinions, information, and any other input you can share with us. (In case you haven't guessed, we are the attorneys for Ms. Lindor.)" -
What Questions Would You Ask An RIAA 'Expert'?
NewYorkCountryLawyer asks: "In UMG v. Lindor, the RIAA has submitted an 'expert' report (pdf) and 26-page curriculum vitae (pdf), prepared by Dr. Doug Jacobson of Iowa State University who is the RIAA's expert witness in all of its cases against consumers, relating to alleged copyright infringement by means of a shared files folder on Kazaa, and supposed analysis of the hard drive of a computer in Ms. Lindor's apartment. The RIAA's 'experts' have been shut down in the Netherlands and Canada, having been shown by Prof. Sips and Dr. Pouwelse of Delft University's Parallel and Distributed Systems research group (pdf) to have failed to do their homework, but are still operating in the USA. The materials were submitted in connection with a motion to compel Ms. Lindor's son, who lives 4 miles away from her, to turn over his computer and music listening devices to the RIAA. Both Ms. Lindor's attorney (pdf) and Ms. Lindor's son's attorney (pdf) have objected to the introduction of these materials, but Dr. Jacobson's document production and deposition are scheduled for January and February, and we would love to get the tech community's ideas for questions to ask, and in general your reactions, thoughts, opinions, information, and any other input you can share with us. (In case you haven't guessed, we are the attorneys for Ms. Lindor.)" -
What Questions Would You Ask An RIAA 'Expert'?
NewYorkCountryLawyer asks: "In UMG v. Lindor, the RIAA has submitted an 'expert' report (pdf) and 26-page curriculum vitae (pdf), prepared by Dr. Doug Jacobson of Iowa State University who is the RIAA's expert witness in all of its cases against consumers, relating to alleged copyright infringement by means of a shared files folder on Kazaa, and supposed analysis of the hard drive of a computer in Ms. Lindor's apartment. The RIAA's 'experts' have been shut down in the Netherlands and Canada, having been shown by Prof. Sips and Dr. Pouwelse of Delft University's Parallel and Distributed Systems research group (pdf) to have failed to do their homework, but are still operating in the USA. The materials were submitted in connection with a motion to compel Ms. Lindor's son, who lives 4 miles away from her, to turn over his computer and music listening devices to the RIAA. Both Ms. Lindor's attorney (pdf) and Ms. Lindor's son's attorney (pdf) have objected to the introduction of these materials, but Dr. Jacobson's document production and deposition are scheduled for January and February, and we would love to get the tech community's ideas for questions to ask, and in general your reactions, thoughts, opinions, information, and any other input you can share with us. (In case you haven't guessed, we are the attorneys for Ms. Lindor.)" -
GNUstep Project Gets New Chief Maintainer
stivi writes "OSNews is reporting that Gregory Casamento has accepted the position of GNUstep Maintainer. Adam Fedor, former GNUstep leader writes: 'After over 15 years of being the Chief Maintainer for GNUstep, I've found I have too many other responsibilities to devote as much time to GNUstep as is necessary. I still plan on contributing to GNUstep in the future in a lower capacity.' Gregory has been a prolific developer for GNUstep for the past seven years and is currently the maintainer for Gorm (the graphical interface designer) and the GUI library. I think he will make a great choice to lead GNUstep in the future. New plans for change have been set up already. Thank you Adam for the past, congratulations Gregory to the future." -
Department of Defense Now Blocking HTML Email
oKAMi-InfoSec writes "The Department of Defense (DoD) has taken the step of blocking HTML-based email. They are also banning the use of Outlook Web Access email clients. The DoD is making this move because HTML messages can easily be infected with spyware and executable lines of code that enable hackers to access DoD networks, according to an article in Federal Computer Week by Bob Brewin . A spokesman for the Joint Task Force for Global Network Operations (JTF-GNO) claims that this is a response to an increased network threat condition. The network threat condition has risen from Information Condition 5 to Information Condition 4 (also called Infocon 4). InfoCon 5 is normal operating conditions and Infocon 4 comes as a result of 'continuing and sophisticated threats' against DoD Networks. The change to Infocon 4 came in mid-November, after the Naval War College suffered devastating attacks that required their entire system be taken offline, but the JTF-GNO spokesman claims there is no connection." -
Judge Rules Shared Files Folder Not Enough
NewYorkCountryLawyer writes "In UMG v. Lindor, Judge David G. Trager rejected Ms. Lindor's objection to a Magistrate's Report, in which Ms. Lindor complained that the Report could be read to imply that 'the mere presence of a shared files folder on an individual's computer would ... satisfy the requirements of 17 USC 106(3)', saying that the Report of Magistrate Robert M. Levy could not be so read, since '[t]he report and recommendation does not comment on whether or not the mere presence of a shared files folder satisfies 17 USC 106(3). Instead, it makes clear that plaintiffs will have the burden of proving actual sharing. [Report and Recommendation, at 5] ('At trial, plaintiffs will have the burden of proving by a preponderance of the evidence that defendant did indeed infringe plaintiff's copyrights by convincing the fact-finder, based on the evidence plaintiffs have gathered, that defendant actually shared sound files belonging to plaintiffs.') (emphasis added)'" -
Judge Rules Shared Files Folder Not Enough
NewYorkCountryLawyer writes "In UMG v. Lindor, Judge David G. Trager rejected Ms. Lindor's objection to a Magistrate's Report, in which Ms. Lindor complained that the Report could be read to imply that 'the mere presence of a shared files folder on an individual's computer would ... satisfy the requirements of 17 USC 106(3)', saying that the Report of Magistrate Robert M. Levy could not be so read, since '[t]he report and recommendation does not comment on whether or not the mere presence of a shared files folder satisfies 17 USC 106(3). Instead, it makes clear that plaintiffs will have the burden of proving actual sharing. [Report and Recommendation, at 5] ('At trial, plaintiffs will have the burden of proving by a preponderance of the evidence that defendant did indeed infringe plaintiff's copyrights by convincing the fact-finder, based on the evidence plaintiffs have gathered, that defendant actually shared sound files belonging to plaintiffs.') (emphasis added)'" -
Google Updates AdSense Rules, Still Working on Radio
Photocritic writes "The practice of placing images above or next to adsense banners has been around for a while — the idea is to trick visitors into thinking that the Googe Ads are clickable image captions. Unsuspecting visitors click on the ads, and the webmasters make money. Now, Google has officially announced that the practice is no longer allowed. Meanwhile, the Marketwatch site is reporting that the company's previously discussed move into radio advertising is getting a mediocre reaction. Google, as yet, does not have enough access to airtime for the project to be profitable. The company plans on purchasing more airtime to expand the program, and is reportedly also looking to begin selling television ads as well." From the article: "Until Google can strike a deal with CBS, or some other radio giant, 'there will be no significant impact until mid-2007' on Google's bottom line, or the radio industry in general, [analyst Jordan] Rohan said in his research note. 'We believe a critical mass of advertisers is interested in testing the platform,' Rohan said, based on his interviews with his own sources. 'However, there is simply not enough radio inventory in the Google Audio system (yet) to enable buyers to run campaigns.'" -
Detecting Rootkits In GNU/Linux
An anonymous reader sends note of a blog post on rootkit detection in GNU/Linux. The article mentions only two utilities for ferreting out rootkits — the first comment to the blog post lists three additional ones — but it could be useful for those who haven't thought about the problem much. From the article: "A rootkit... is a collection of tools that a cracker installs on a victim's computer after gaining initial access. It generally consists of log cleaning scripts and trojaned replacements of core system utilities such as ps, top, ifconfig and so on." -
The Dangers of Improper Cookie Use
shifted89 writes "Over the last year, the security community have exposed web application security for what it is — extremely lacking. However, for all the focus on XSS, CSRF, history stealing, etc., not much attention has been given to the cookie. Unfortunately, cookie misuse can be just as dangerous, if not more so than XSS attacks and InformIT illustrates why. In short, the author clearly demonstrates what can happen when a website improperly uses cookies for customer tracking — including a working illustration." -
Give an Internet Freedom Disk
An anonymous reader, perhaps the blogger himself, writes to tell us about a new blog aimed at getting non-techies excited over the idea of running from a Live CD. The blogger doesn't call it that, preferring instead "Internet Freedom Disk"; Linux is never mentioned. The submitter adds: "This is just a great gift to drop on your non-geek friends and potentially wake up a sleeping giant." Cheap, last-minute, and you can make them yourself. The blogger isn't selling anything; he provides links to Ubuntu and Knoppix Live CDs. Or pick your favorite. -
Google Web Toolkit Now 100% Open Source
chrisd writes "When we first released the Google Web Toolkit (GWT) we were focused on building a great tool for people to build AJAX apps with. Now, we're happy to announce that all of the GWT source code is available, including the Java to JavaScript compiler and the debugging browser, under the Apache 2.0 license. If you'd like to see how we pulled off letting you avoid dealing with nasty browser quirks, you should take a look. More importantly, we're running this like a true open source project now: we'll be developing GWT completely in the open, as per our project charter. More info on the GWT blog." -
Independent Benchmarking System for Mice
Heartless Gamer writes "Why benchmark a mouse? From ESReality; "In this environment where performance is king, it's ludicrous to think that mouse performance has never been measured for reviewing the products. Imagine reviewing the latest graphics card in the same way. Without benchmarks, reviewers would have to resort to loading up their favourite game and commenting on how their frag count improved. You would have no way to compare NVIDIA and ATI cards apart from the quality of the packaging. Without benchmarking, graphics card reviews would be almost entirely useless. So why do we put up with mouse reviews that are just as useless?"" -
Word of the Year - "Truthiness"
KingSkippus writes "Stephen Colbert calls it 'truth that comes from the gut, not books.' Merriam-Webster calls it their 2006 Word of the Year. The word, first introduced [Windows media] on 'The Word' segment of The Colbert Report, won by a five-to-one margin. In spite of Colbert's ironic dismissal of dictionaries and other reference books, will Colbert's coined word actually be added to those books? With media outlets like CNN and MSNBC covering it, the idea may very well have truthiness." -
Dead Musicians Signing Media Rights Petitions
epeus writes "Following from the Gowers coverage and the Musicians' ad in the FT, Larry Lessig admits he was wrong about term extension: 'If you read the list, you'll see that at least some of these artists are apparently dead (e.g. Lonnie Donegan, died 4th November 2002; Freddie Garrity, died 20th May 2006). I take it the ability of these dead authors to sign a petition asking for their copyright terms to be extended can only mean that even after death, term extension continues to inspire. I'm not yet sure how. But I guess I should be a good sport about it, and just confess I was wrong. For if artists can sign petitions after they've died, then why can't they produce new recordings fifty year ago?'" -
Verizon Can't Do Math
Blogger George Vaccaro recently had a problem with his Verizon based on an unfortunate miscommunication of currency. The crux of the matter was that he was quoted .002 cents per kilobyte for data during a trip to Canada but was charged .002 dollars. Normally this would have been an easy fix, however several humorous calls later the Verizon reps still were unable to discern between the difference between the two rates. You really have to hear it to believe it. Kudos George, you have the patience of a saint. -
Google Responds to AdWords Accusations
An anonymous reader writes "Google has issued a statement on the Inside AdWords Blog. Based on the thoroughness of the statement and the use of the word 'precedent' in the second sentence, it appears that the Google PR team huddled with the legal team to get their point across." From the post: "Being rather proud of AdWords as a means to effectively advertise one's products or services, it seems natural to use it ourselves. Since it's a common practice across the industry for companies to promote their own products and services through their own web presence, there is much precedent to do this. It's important to note, however, that our ads are created and managed under the exact same guidelines, principles, practices and algorithms as the ads of any other advertiser. Likewise, we use the very same tools and account interface." -
EarthLink Is Losing a Lot of Email
LandGator writes "Robert X. Cringely, doyen compu-columnist for PBS, reports on a hidden e-mail problem at Earthlink: They're losing up to 9 messages out of 10, found as a result of a friend's testing." From the article: "He sent messages from other accounts to his Earthlink address, to his aliased Blackberry address, and to his Gmail account. For every 10 messages sent, 1-2 arrived in his Earthlink mailbox, 1-2 (not necessarily the SAME 1-2) on his Blackberry, and all 10 arrived with Gmail. Swimming upstream through Earthlink customer support, my buddy finally found a technical contact who freely acknowledged the problem. Since June, he was told, Earthlink's mail system has been so overloaded that some users have been missing up to 90 percent of their incoming e-mail. It isn't bounced back to senders; it just disappears. And Earthlink hasn't mentioned the problem to these affected customers unless they complain." -
Shortage of Electricity Drives Data Center Talks
Engineer-Poet writes "Per the San Jose Mercury News, competitors such as Google and Yahoo are meeting to discuss the issue of electricity in Silicon Valley. How much of the USA's 4038 billion kWh/year goes into data centers? Enough to make a difference. Data centers are moving out of California to spread the load and avoid a single-point-of-failure scenario. This is a serious matter; as Andrew Karsner (assistant secretary of energy efficiency and renewable energy for the Department of Energy) asked, 'What happens to national productivity when Google goes down for 72 hours?' I'm sure nobody wants to know." From the article: "Concern about electricity pricing and volatility has led Microsoft to talk with its network manufacturers about building more efficient servers. IBM and Hewlett-Packard -- which both build data centers -- want to improve efficiency at the facilities. AMD promotes changing the design of data centers to increase airflow to keep the supercomputers cool." -
RIAA Mischaracterizes Letter Received From AOL
NewYorkCountryLawyer writes "In Elektra v. Schwartz, an RIAA case against a Queens woman with Multiple Sclerosis who indicates that she had never even heard of file sharing until the RIAA came knocking on her door, the judge held that Ms. Schwartz's summary judgment request for dismissal was premature because the RIAA said it had a letter from AOL 'confirm[ing] that defendant owned an internet access account through which copyrighted sound recordings were downloaded and distributed.' When her lawyers got a copy of the actual AOL letter they saw that it had no such statement in it, and asked the judge to reconsider." -
RIAA Mischaracterizes Letter Received From AOL
NewYorkCountryLawyer writes "In Elektra v. Schwartz, an RIAA case against a Queens woman with Multiple Sclerosis who indicates that she had never even heard of file sharing until the RIAA came knocking on her door, the judge held that Ms. Schwartz's summary judgment request for dismissal was premature because the RIAA said it had a letter from AOL 'confirm[ing] that defendant owned an internet access account through which copyrighted sound recordings were downloaded and distributed.' When her lawyers got a copy of the actual AOL letter they saw that it had no such statement in it, and asked the judge to reconsider." -
RIAA Mischaracterizes Letter Received From AOL
NewYorkCountryLawyer writes "In Elektra v. Schwartz, an RIAA case against a Queens woman with Multiple Sclerosis who indicates that she had never even heard of file sharing until the RIAA came knocking on her door, the judge held that Ms. Schwartz's summary judgment request for dismissal was premature because the RIAA said it had a letter from AOL 'confirm[ing] that defendant owned an internet access account through which copyrighted sound recordings were downloaded and distributed.' When her lawyers got a copy of the actual AOL letter they saw that it had no such statement in it, and asked the judge to reconsider." -
RIAA Victims Bring Class Action Against Kazaa
NewYorkCountryLawyer writes "In Chicago, Illinois, a Kazaa customer has filed a class action against Kazaa, Lewan v. Sharman, U.S.Dist. Ct., N.D. Ill 06-cv-6736. The lead plaintiff, Catherine Lewan, was a Kazaa customer who was sued by the RIAA for her use of Kazaa, and paid a settlement to the RIAA, and she sues on behalf of others in her position. In her complaint(pdf) she alleges, among other things, that Kazaa deceptively marketed its product as allowing 'free downloads' (Complaint, par. 30); it designed the software in such a manner as to create a shared files folder and make that folder available to anyone using Kazaa, while at the same time failing to make the user aware that it had done so (Complaint, par. 36-37); and it surreptitiously installed 'spyware' on users' computers which made the shared files folder accessible to the Kazaa network even after the user had removed the Kazaa software from his or her computer (Complaint, par. 42-45)." -
RIAA Victims Bring Class Action Against Kazaa
NewYorkCountryLawyer writes "In Chicago, Illinois, a Kazaa customer has filed a class action against Kazaa, Lewan v. Sharman, U.S.Dist. Ct., N.D. Ill 06-cv-6736. The lead plaintiff, Catherine Lewan, was a Kazaa customer who was sued by the RIAA for her use of Kazaa, and paid a settlement to the RIAA, and she sues on behalf of others in her position. In her complaint(pdf) she alleges, among other things, that Kazaa deceptively marketed its product as allowing 'free downloads' (Complaint, par. 30); it designed the software in such a manner as to create a shared files folder and make that folder available to anyone using Kazaa, while at the same time failing to make the user aware that it had done so (Complaint, par. 36-37); and it surreptitiously installed 'spyware' on users' computers which made the shared files folder accessible to the Kazaa network even after the user had removed the Kazaa software from his or her computer (Complaint, par. 42-45)." -
Configuring IPCop Firewalls
Ravi writes "IPCop is a GPLed firewall solution targeted at Small Office/Home Office network. It is favored by many for its ease of configuration and setup and its support for a variety of features that you would expect to have in a modern firewall. IPCop is famed for letting users setup a sophisticated firewall for ones network without ever having to write an iptables rule themselves." Read the rest of Ravi's review. Configuring IPCOP Firewalls - Closing borders with Open Source author Barrie Dempster and James Eaton-Lee pages 230 publisher Packt Publishing rating 8.5 reviewer Ravi ISBN 1-904811-36-1 summary A practical book that takes a hands on approach in setting up and configuring IPCop firewall on ones network
Configuring IPCop Firewalls published by Packt Publishing is authored by two people Barrie Dempster and James Eaton-Lee and is divided into 11 chapters. The first chapter gives a brief introduction to firewalls and explains technical concepts such as OSI reference model, an introduction to TCP/IP and a brief outline of the parts that comprise a network. Even though I did not find anything new in this chapter, I realized that this is meant for people who are new to the world of computer networks and aims to bring them up to date with the various technologies associated with it. A network administrator intending to pick up skills in configuring and setting up IPCop, can circumvent this chapter and go to the second chapter which gives an introduction to IPCop and its different features. The authors have explained the concepts in an easily understood way with the aid of necessary screen-shots. One of the salient features of IPCop is its web based interface which allows one to configure all aspects of it from a remote location. In fact, IPCop is designed to be controlled from a remote location and serves all its configuration parameters via the Apache web server.
In the second chapter, one gets to know all the features of IPCOP including the different services it offer. One thing that struck me while going through this book was that the authors are fully immersed in explaining the configuration aspects of IPCop which is done entirely via the web interface. Other than the first, third, and 10th chapter, where the readers are made to digest some theory, the rest of the book is as a how-to. I found this to be ideally suited for people who are the least bothered about theory and just want to set up IPCop and get on with what they were doing.
In the third chapter, we are introduced to the unique feature used by IPCop to segregate the network depending upon its vulnerability. And in the succeeding chapter, the authors walk one through installing IPCop. Here each and every installation step is explained with the help of a screenshot which makes understanding the procedure much more intuitive.
The chapter titled "Basic IPCop Usage" gives a good introduction to the web interface provided by IPCop. Reading this chapter, I was able to get a good feel for the IPCop interface. More specifically, you learn how to configure IPCop to provide different services such as DHCP server, support for Dynamic DNS, editing the hosts file and so on. The IPCop interface is quite rich in functionality even providing options to reboot or shutdown the machine remotely. In this chapter, apart from the introduction to the web interface, the authors have also provided a few tips related to logging in to the remote machine running IPCop using SSH.
Put in simple terms, IPCop is a specialized Linux distribution which contain a collection of tools which revolve around providing robust firewall capabilities. The tools bundled with IPCop range from the ubiquitous iptables, services such as DNS, and DHCP, to tools which specialize in intrusion detection such as snort.
The sixth chapter titled "Intrusion Detection with IPCop" explains the concept of intrusion detection and how one can use snort IDS bundled with IPCop to effectively find out what is passing through our network and thus isolate any harmful packets.
The book moves on to explain how to use IPCop to set up a virtual private network (VPN). By way of an example, the authors explain how to setup a VPN between two remote networks with each end having a IPCop firewall in place. This chapter covers different VPN scenarios such as host to net, net to net connections as well as configuring IPCop to detect the Certifying Authority certificates.
The 8th chapter is a rather short one which explains how to effectively use proxying and caching solutions available in IPCop to manage the bandwidth.
One of the biggest advantages of IPCop is that it is possible to extend it to provide additional features by way of add-ons. Add-ons are generally developed by third parties and are usually developed with an aim to provide a feature that the developers of IPCop have missed. There are a whole lot of add-ons available for IPCop. The 9th chapter introduces the most popular add-ons available for IPCop such as SquidGuard — a content filtering add-on, LogSend — an add-on which send the IPCop logs to remote email accounts, AntiSpam, integrating ClamAV anti virus solution and more. The authors have also explained how to install and enable these add-ons using the IPCop web interface.
The tenth chapter titled "Testing, Auditing and Hardening IPCop" has more of a theoretical disposition where the authors list some of the common attributes towards security and patch management and also some of the security risks and a few common security and auditing tools and tests.
One thing I really like about this book is the practical approach taken by the authors in explaining how to accomplish a certain task. Each section is accompanied by the relevant screenshots of the web interface with a brief explanation of the options available. The book is well designed with a number of tips provided in each section highlighted in big square brackets which makes it quite eye catching. Even though I found the book a bit short on theory, it is an ideal resource which provides a hands on approach to people who are more interested in installing and setting up IPCop firewall solutions in ones network rather than pondering about the theoretical concepts of the same.
Ravi Kumar likes to share his thoughts on all things related to GNU/Linux, Open Source and Free Software through his blog on Linux.
You can purchase Configuring IPCOP Firewalls - Closing borders with Open Source from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page. -
Configuring IPCop Firewalls
Ravi writes "IPCop is a GPLed firewall solution targeted at Small Office/Home Office network. It is favored by many for its ease of configuration and setup and its support for a variety of features that you would expect to have in a modern firewall. IPCop is famed for letting users setup a sophisticated firewall for ones network without ever having to write an iptables rule themselves." Read the rest of Ravi's review. Configuring IPCOP Firewalls - Closing borders with Open Source author Barrie Dempster and James Eaton-Lee pages 230 publisher Packt Publishing rating 8.5 reviewer Ravi ISBN 1-904811-36-1 summary A practical book that takes a hands on approach in setting up and configuring IPCop firewall on ones network
Configuring IPCop Firewalls published by Packt Publishing is authored by two people Barrie Dempster and James Eaton-Lee and is divided into 11 chapters. The first chapter gives a brief introduction to firewalls and explains technical concepts such as OSI reference model, an introduction to TCP/IP and a brief outline of the parts that comprise a network. Even though I did not find anything new in this chapter, I realized that this is meant for people who are new to the world of computer networks and aims to bring them up to date with the various technologies associated with it. A network administrator intending to pick up skills in configuring and setting up IPCop, can circumvent this chapter and go to the second chapter which gives an introduction to IPCop and its different features. The authors have explained the concepts in an easily understood way with the aid of necessary screen-shots. One of the salient features of IPCop is its web based interface which allows one to configure all aspects of it from a remote location. In fact, IPCop is designed to be controlled from a remote location and serves all its configuration parameters via the Apache web server.
In the second chapter, one gets to know all the features of IPCOP including the different services it offer. One thing that struck me while going through this book was that the authors are fully immersed in explaining the configuration aspects of IPCop which is done entirely via the web interface. Other than the first, third, and 10th chapter, where the readers are made to digest some theory, the rest of the book is as a how-to. I found this to be ideally suited for people who are the least bothered about theory and just want to set up IPCop and get on with what they were doing.
In the third chapter, we are introduced to the unique feature used by IPCop to segregate the network depending upon its vulnerability. And in the succeeding chapter, the authors walk one through installing IPCop. Here each and every installation step is explained with the help of a screenshot which makes understanding the procedure much more intuitive.
The chapter titled "Basic IPCop Usage" gives a good introduction to the web interface provided by IPCop. Reading this chapter, I was able to get a good feel for the IPCop interface. More specifically, you learn how to configure IPCop to provide different services such as DHCP server, support for Dynamic DNS, editing the hosts file and so on. The IPCop interface is quite rich in functionality even providing options to reboot or shutdown the machine remotely. In this chapter, apart from the introduction to the web interface, the authors have also provided a few tips related to logging in to the remote machine running IPCop using SSH.
Put in simple terms, IPCop is a specialized Linux distribution which contain a collection of tools which revolve around providing robust firewall capabilities. The tools bundled with IPCop range from the ubiquitous iptables, services such as DNS, and DHCP, to tools which specialize in intrusion detection such as snort.
The sixth chapter titled "Intrusion Detection with IPCop" explains the concept of intrusion detection and how one can use snort IDS bundled with IPCop to effectively find out what is passing through our network and thus isolate any harmful packets.
The book moves on to explain how to use IPCop to set up a virtual private network (VPN). By way of an example, the authors explain how to setup a VPN between two remote networks with each end having a IPCop firewall in place. This chapter covers different VPN scenarios such as host to net, net to net connections as well as configuring IPCop to detect the Certifying Authority certificates.
The 8th chapter is a rather short one which explains how to effectively use proxying and caching solutions available in IPCop to manage the bandwidth.
One of the biggest advantages of IPCop is that it is possible to extend it to provide additional features by way of add-ons. Add-ons are generally developed by third parties and are usually developed with an aim to provide a feature that the developers of IPCop have missed. There are a whole lot of add-ons available for IPCop. The 9th chapter introduces the most popular add-ons available for IPCop such as SquidGuard — a content filtering add-on, LogSend — an add-on which send the IPCop logs to remote email accounts, AntiSpam, integrating ClamAV anti virus solution and more. The authors have also explained how to install and enable these add-ons using the IPCop web interface.
The tenth chapter titled "Testing, Auditing and Hardening IPCop" has more of a theoretical disposition where the authors list some of the common attributes towards security and patch management and also some of the security risks and a few common security and auditing tools and tests.
One thing I really like about this book is the practical approach taken by the authors in explaining how to accomplish a certain task. Each section is accompanied by the relevant screenshots of the web interface with a brief explanation of the options available. The book is well designed with a number of tips provided in each section highlighted in big square brackets which makes it quite eye catching. Even though I found the book a bit short on theory, it is an ideal resource which provides a hands on approach to people who are more interested in installing and setting up IPCop firewall solutions in ones network rather than pondering about the theoretical concepts of the same.
Ravi Kumar likes to share his thoughts on all things related to GNU/Linux, Open Source and Free Software through his blog on Linux.
You can purchase Configuring IPCOP Firewalls - Closing borders with Open Source from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page. -
Warner CEO Admits His Kids Stole Music
IAmTheDave writes "Warner Music CEO Edgar Bronfman admitted that he was fairly certain that one or more of his children had downloaded music illegally, but despite this direct admission of guilt, no lawsuits are pending. Surprised? Bronfman insists that, after a stern talking-to, his children have suffered the full consequences of their actions. 'I explained to them what I believe is right, that the principle is that stealing music is stealing music. Frankly, right is right and wrong is wrong, particularly when a parent is talking to a child. A bright line around moral responsibility is very important. I can assure you they no longer do that.' I wonder if all of the people currently being sued/extorted can now just claim that they 'no longer do that.'" -
Internet2 Turns 10 and Upgrades
An anonymous reader writes "As an update to a previous story, Internet2 is celebrating its 10th anniversary in Chicago this week at it's fall conference. In addition, they're announcing the initial stages of their second significant network upgrade of their backbone network. Engineers are providing daily blog updates on the network install process as the old network is transitioned to the new. In addition to changing to a Level3-managed and Internet2-provisioned DWDM transport system for backbone capacity, I2 is implementing a new connection-oriented backbone network based on the Ciena CoreDirector platform in concert with the routed IP network." -
Taxing Virtual Gaming Assets
rijit writes " It appears very likely that taxation of online games assets is inevitable. Quote: 'That's because game publishers may well in the not too distant future have to send the forms — which individuals receive when earning nonemployee income from companies or institutions — to virtual world players engaging in transactions for valuable items like Ultima Online castles, EverQuest weapons or Second Life currency, even when those players don't convert the assets into cash.' " -
RIAA v. Barker Showdown Slated for January
NewYorkCountryLawyer writes "Judge Kenneth M. Karas has set Friday, January 26, 2007, at 2:15 P.M., as the oral argument date for Tenise Barker's motion to dismiss complaint, in Elektra v. Barker, in federal court in Manhattan. The argument will take place at the newer federal court house, located at 500 Pearl Street, New York, New York, in courtroom 21D on the 21st Floor. Proceedings are open to the public. This is the case in which amicus briefs were filed by the Motion Picture Association of America (MPAA), the Electronic Frontier Foundation (EFF), the U.S. Internet Industry Association (USIIA) and the Computer & Communications Industry Association (CCIA), and a Statement of Interest was filed by the U.S. Department of Justice (USDJ). Defendant Tenise Barker moved to dismiss the complaint on the ground that neither downloading nor uploading had been alleged sufficiently to give her notice of what she was being accused of, and on the further ground that merely "making available for distribution" was not a copyright infringement at all. The RIAA and MPAA argued that merely "making available" was indeed a copyright infringement. Defendant, CCIA, and USIIA argued that it was not. EFF argued that intangible computer network transmissions cannot be "distributions" within the meaning of the Copyright Act. USDJ argued that they can be. Defendant refrained from taking a position on that issue here and here. The DOJ refrained from taking a position on the "making available" argument, indicating that it had never prosecuted anyone for "making available". See page 5, footnote 3." -
RIAA v. Barker Showdown Slated for January
NewYorkCountryLawyer writes "Judge Kenneth M. Karas has set Friday, January 26, 2007, at 2:15 P.M., as the oral argument date for Tenise Barker's motion to dismiss complaint, in Elektra v. Barker, in federal court in Manhattan. The argument will take place at the newer federal court house, located at 500 Pearl Street, New York, New York, in courtroom 21D on the 21st Floor. Proceedings are open to the public. This is the case in which amicus briefs were filed by the Motion Picture Association of America (MPAA), the Electronic Frontier Foundation (EFF), the U.S. Internet Industry Association (USIIA) and the Computer & Communications Industry Association (CCIA), and a Statement of Interest was filed by the U.S. Department of Justice (USDJ). Defendant Tenise Barker moved to dismiss the complaint on the ground that neither downloading nor uploading had been alleged sufficiently to give her notice of what she was being accused of, and on the further ground that merely "making available for distribution" was not a copyright infringement at all. The RIAA and MPAA argued that merely "making available" was indeed a copyright infringement. Defendant, CCIA, and USIIA argued that it was not. EFF argued that intangible computer network transmissions cannot be "distributions" within the meaning of the Copyright Act. USDJ argued that they can be. Defendant refrained from taking a position on that issue here and here. The DOJ refrained from taking a position on the "making available" argument, indicating that it had never prosecuted anyone for "making available". See page 5, footnote 3." -
Google Answers Closing Up Shop
EricTheGreen writes "It isn't often that Google completely kills a product, which makes the announcement of the end of Google Answers noteworthy. I find it particularly interesting, given that there's clearly a market for this service. Yahoo!'s offering continues to flourish, it seems ... so what made Yahoo's service more attractive than Google's?" From the blog post: "Later this week, we will stop accepting new questions in Google Answers, the very first project we worked on here. The project started with a rough idea from Larry Page, and a small 4-person team turned it into reality in less than 4 months. For two new grads, it was a crash course in building a scalable product, responding to customer requests, and discovering what questions are on people's minds. Google Answers taught us exactly how many tyrannosaurs are in a gallon of gasoline, why flies survive a good microwaving, and why you really shouldn't drink water emitted by your air conditioner. Even closer to home, we learned one afternoon that our building might be on fire." -
Charges Dropped In Fake Boarding Pass Case
An anonymous reader writes, "Investigators have dropped the criminal case against Christopher Soghoian after satisfying themselves that he acted without criminal intent. The grad student had created a web site capable of printing fake airline boarding passes. Soghoian is quoted: 'If they fix the airport security problems... then this entire process has been worth it. If they don't fix airport security, then... what was the purpose?'" Soghoian's blog has insightful comments about the divide between security researchers and government officials on subjects such as TOR. -
Russia Agrees To Shut Down AllOfMP3.com
Pro-SEO writes, "An official document (PDF), dated November 19, summarizes an agreement between the U.S. and Russia in which Russia has agreed to close down AllofMP3.com, and any sites that 'permit illegal distribution of music and other copyright works.' The agreement is posted to the Web site for the Office of the U.S. Trade Representative. It summarizes the joint efforts of the two countries to fight content piracy, an issue in which Russia and Eastern Europe figure prominently." From the document: "This agreement sets the stage for further progress on IPR issues in Russia through the next phase of multilateral negotiations, during which the United States and other WTO members will examine Russia's IPR regime." -
RIAA Subpoenas Neighbor's Son, Calls His Employer
NewYorkCountryLawyer writes "To those who might think that I might be exaggerating when I describe the RIAA's litigation campaign as a 'reign of terror', how's this one: in UMG v. Lindor, the RIAA not only subpoenaed the computer of Ms. Lindor's son, who lives 4 miles away, but had their lawyer telephone the son's employer. See page 2, footnote 1." From Ray's comments: "You have a multi-billion dollar cartel suing unemployed people, disabled people, housewives, single mothers, home healthcare aids, all kinds of people who have no resources whatsoever to withstand these litigations. And due to the adversary system of justice the RIAA will be successful in rewriting copyright law, if the world at large, and the technological community in particular, don't fight back and help these people fighting these fights." -
RIAA Subpoenas Neighbor's Son, Calls His Employer
NewYorkCountryLawyer writes "To those who might think that I might be exaggerating when I describe the RIAA's litigation campaign as a 'reign of terror', how's this one: in UMG v. Lindor, the RIAA not only subpoenaed the computer of Ms. Lindor's son, who lives 4 miles away, but had their lawyer telephone the son's employer. See page 2, footnote 1." From Ray's comments: "You have a multi-billion dollar cartel suing unemployed people, disabled people, housewives, single mothers, home healthcare aids, all kinds of people who have no resources whatsoever to withstand these litigations. And due to the adversary system of justice the RIAA will be successful in rewriting copyright law, if the world at large, and the technological community in particular, don't fight back and help these people fighting these fights." -
Fedora Linux
Ravi writes "Fedora — the Linux that is developed as a community effort, is the sand box of Red Hat. They incorporate all the new features after they have been exhaustively tested into its commercial product, namely Red Hat Enterprise Linux . Fedora has a 6 month release schedule and the most recent release is core 6. In all respects Fedora is the same Red Hat Linux but with cutting edge packages. What I really like about Fedora apart from the vibrant community participating in its development is the mark of quality it has from its association with Red Hat." Read the rest of Ravi's review. Fedora Linux author Chris Tyler pages 650 publisher O'Reilly rating 9 reviewer Ravi ISBN 0-596-52682-2 summary An excellent book on setting up and configuring all aspects of Fedora Linux.
Coinciding with the release of the latest version of Fedora, O'Reilly brought out the new book titled Fedora Linux authored by Chris Tyler. The book is divided into 10 chapters spanning over 600 pages with each chapter catering to a particular topic. Like all books of this genre, this book also starts by explaining how to install Fedora on ones machine. But what is different regarding the Fedora installer is that it provides a lot of flexibility, variety and finer control over the install process. Not surprisingly, the author has dedicated two chapters for explaining the various ways in installing Fedora. The first chapter titled "Quick start: Installing Fedora" covers the basic installation from start to finish. Where as the 10th chapter titled "Advanced Installation" covers the advanced features of the installer such as creating logical volumes and Raid during installation, automating the installation process using the kick start file, installing from locations other than a CD/DVD such as NFS and PXE boot as well as a detailed coverage of the Grub boot loader. This chapter also has a short section explaining how to install and use Xen virtual machines.
At a first glance, one might be tempted to bundle this book with the rest of the books available on this subject. But on close scrutiny, I discovered a certain method to the madness. That is each topic that is covered in the book is divided into 4 broad sections. There is a section titled "How do I do that?" which explains the nuts and bolts of accomplishing the given task. The next section titled "How does it work?" gives a good understanding of the theoretical concepts if any behind the topic, the third section titled "What about...?" introduces potential configuration bottlenecks and any additional tasks related to the topic and provides solutions to them. And lastly, there is a section titled "Where can I learn more...?" which provides a bunch of resources on the web and pointers to the respective documentation which will provide further insights about the topic being discussed. It is really refreshing to see this book take such a unique structured approach to explaining the concepts.
The 2nd chapter titled "Using Fedora on your Desktop" apart from covering details about Gnome and KDE Desktops also provides information about additional topics like configuring the XServer, adding new fonts and configuring sound and printing to work with Fedora. There are topics like partitioning a flash drive which makes this particular chapter quite interesting.
The third chapter titled "Using Fedora on your Notebook" explains how to configure Fedora to handle laptop specific features such as power management, mobile networking and configuring touch pad. This chapter also gives a firm introduction to configuring the networking interfaces be it the ethernet or wireless. One thing which holds Fedora in good stead over its peers is the good set of GUI front-ends available to configure each and every aspect of Linux. And configuring networking is no different. But the author does not limit himself to explaining the GUI way of configuring but also explains how to do it the command line way.
No book on Linux is complete without an in depth coverage of the basic commands used for system maintenance. The fourth chapter titled "Basic System Management" is one of the largest chapters in this book where the author explains all the important commands one might be expected to know to keep Fedora Linux in ship shape. Apart from the ubiquitous commands, I also found detailed pointers in enabling secure remote access to Fedora using SSH.
Package management forms the basis for the fifth chapter. Fedora has a great set of tools which aid the user in a variety of ways in installing, removing and upgrading packages. Fedora uses the software management system called RPM Package Manager. But with popular demand, it has also incorporated an apt-get like tool called Yum which automatically resolve dependency issues. I found this chapter to provide an in-depth coverage of all the tools related to package management in Fedora. For example, the author explains how to roll back the installation of a package to a state 10 minutes ago or for that matter to a previous date using the RPM tool. There is also a section which explains how to create ones own RPM packages.
The chapter titled "Storage management" gives a broad explanation of Logical volume management and setting up Raid. Fedora comes with its own LVM administration tool which makes it a snap to set up and manage logical volumes. The author after explaining how to accomplish creating, resizing and deleting logical volumes using this GUI tool, goes on to describe how to do it the command line way too which makes this chapter really useful. All along the chapter, I found useful tips on tasks such as creating backups of the disk and how to go about doing it, stopping a raid and so on.
But the one chapter which I found really comprehensive was the seventh chapter titled "Network Services". Here the author explains how to setup the gamut of network services including but not limited to DHCP server, BIND, CUPS print server, MySQL server, sendmail and more. This chapter spans around 100 pages. There is also a short section providing tips on analyzing the web and ftp logs.
Lets face it. Even though Fedora is a community supported venture backed by Red Hat, it has all the characteristics which propel it to the enterprise level. One of the notable characteristics is the extensive integration of SELinux (Security Enhanced Linux). SELinux controls what a program is and is not allowed to do, enforcing security policy through the kernel. Fedora has very good support for SELinux and has even developed GUI front-ends to make it much more easier to configure. In the 8th chapter, the author explains in detail the steps needed to configure and fine tune selinux on Fedora. This chapter also contain sections which explain the pluggable authentication module as well as other security related features such as configuring a firewall and using access control lists.
The unique structure in which the chapters are layed out makes it more suitable to be used as a reference more than a cover to cover read. The author is eloquent in his narration of the topics and has done a good job of explaining the concepts. I found this book to be an ideal resource for coming up to date with all the system and network administration tasks that can be accomplished in Fedora Linux.
Ravi Kumar maintains a blog where he shares his thoughts related to GNU/Linux, Open Source and Free Software at linuxhelp.blogspot.com. He has also reviewed in a concise way the history of GNU/Linux.
You can purchase Fedora Linux from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page. -
Fedora Linux
Ravi writes "Fedora — the Linux that is developed as a community effort, is the sand box of Red Hat. They incorporate all the new features after they have been exhaustively tested into its commercial product, namely Red Hat Enterprise Linux . Fedora has a 6 month release schedule and the most recent release is core 6. In all respects Fedora is the same Red Hat Linux but with cutting edge packages. What I really like about Fedora apart from the vibrant community participating in its development is the mark of quality it has from its association with Red Hat." Read the rest of Ravi's review. Fedora Linux author Chris Tyler pages 650 publisher O'Reilly rating 9 reviewer Ravi ISBN 0-596-52682-2 summary An excellent book on setting up and configuring all aspects of Fedora Linux.
Coinciding with the release of the latest version of Fedora, O'Reilly brought out the new book titled Fedora Linux authored by Chris Tyler. The book is divided into 10 chapters spanning over 600 pages with each chapter catering to a particular topic. Like all books of this genre, this book also starts by explaining how to install Fedora on ones machine. But what is different regarding the Fedora installer is that it provides a lot of flexibility, variety and finer control over the install process. Not surprisingly, the author has dedicated two chapters for explaining the various ways in installing Fedora. The first chapter titled "Quick start: Installing Fedora" covers the basic installation from start to finish. Where as the 10th chapter titled "Advanced Installation" covers the advanced features of the installer such as creating logical volumes and Raid during installation, automating the installation process using the kick start file, installing from locations other than a CD/DVD such as NFS and PXE boot as well as a detailed coverage of the Grub boot loader. This chapter also has a short section explaining how to install and use Xen virtual machines.
At a first glance, one might be tempted to bundle this book with the rest of the books available on this subject. But on close scrutiny, I discovered a certain method to the madness. That is each topic that is covered in the book is divided into 4 broad sections. There is a section titled "How do I do that?" which explains the nuts and bolts of accomplishing the given task. The next section titled "How does it work?" gives a good understanding of the theoretical concepts if any behind the topic, the third section titled "What about...?" introduces potential configuration bottlenecks and any additional tasks related to the topic and provides solutions to them. And lastly, there is a section titled "Where can I learn more...?" which provides a bunch of resources on the web and pointers to the respective documentation which will provide further insights about the topic being discussed. It is really refreshing to see this book take such a unique structured approach to explaining the concepts.
The 2nd chapter titled "Using Fedora on your Desktop" apart from covering details about Gnome and KDE Desktops also provides information about additional topics like configuring the XServer, adding new fonts and configuring sound and printing to work with Fedora. There are topics like partitioning a flash drive which makes this particular chapter quite interesting.
The third chapter titled "Using Fedora on your Notebook" explains how to configure Fedora to handle laptop specific features such as power management, mobile networking and configuring touch pad. This chapter also gives a firm introduction to configuring the networking interfaces be it the ethernet or wireless. One thing which holds Fedora in good stead over its peers is the good set of GUI front-ends available to configure each and every aspect of Linux. And configuring networking is no different. But the author does not limit himself to explaining the GUI way of configuring but also explains how to do it the command line way.
No book on Linux is complete without an in depth coverage of the basic commands used for system maintenance. The fourth chapter titled "Basic System Management" is one of the largest chapters in this book where the author explains all the important commands one might be expected to know to keep Fedora Linux in ship shape. Apart from the ubiquitous commands, I also found detailed pointers in enabling secure remote access to Fedora using SSH.
Package management forms the basis for the fifth chapter. Fedora has a great set of tools which aid the user in a variety of ways in installing, removing and upgrading packages. Fedora uses the software management system called RPM Package Manager. But with popular demand, it has also incorporated an apt-get like tool called Yum which automatically resolve dependency issues. I found this chapter to provide an in-depth coverage of all the tools related to package management in Fedora. For example, the author explains how to roll back the installation of a package to a state 10 minutes ago or for that matter to a previous date using the RPM tool. There is also a section which explains how to create ones own RPM packages.
The chapter titled "Storage management" gives a broad explanation of Logical volume management and setting up Raid. Fedora comes with its own LVM administration tool which makes it a snap to set up and manage logical volumes. The author after explaining how to accomplish creating, resizing and deleting logical volumes using this GUI tool, goes on to describe how to do it the command line way too which makes this chapter really useful. All along the chapter, I found useful tips on tasks such as creating backups of the disk and how to go about doing it, stopping a raid and so on.
But the one chapter which I found really comprehensive was the seventh chapter titled "Network Services". Here the author explains how to setup the gamut of network services including but not limited to DHCP server, BIND, CUPS print server, MySQL server, sendmail and more. This chapter spans around 100 pages. There is also a short section providing tips on analyzing the web and ftp logs.
Lets face it. Even though Fedora is a community supported venture backed by Red Hat, it has all the characteristics which propel it to the enterprise level. One of the notable characteristics is the extensive integration of SELinux (Security Enhanced Linux). SELinux controls what a program is and is not allowed to do, enforcing security policy through the kernel. Fedora has very good support for SELinux and has even developed GUI front-ends to make it much more easier to configure. In the 8th chapter, the author explains in detail the steps needed to configure and fine tune selinux on Fedora. This chapter also contain sections which explain the pluggable authentication module as well as other security related features such as configuring a firewall and using access control lists.
The unique structure in which the chapters are layed out makes it more suitable to be used as a reference more than a cover to cover read. The author is eloquent in his narration of the topics and has done a good job of explaining the concepts. I found this book to be an ideal resource for coming up to date with all the system and network administration tasks that can be accomplished in Fedora Linux.
Ravi Kumar maintains a blog where he shares his thoughts related to GNU/Linux, Open Source and Free Software at linuxhelp.blogspot.com. He has also reviewed in a concise way the history of GNU/Linux.
You can purchase Fedora Linux from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.