Slashdot Mirror

True, VLC supports the LRC and SRT formats for timed text and has supported WebVTT since this commit in September 2013. So that's fine as long as you can ensure that all of your viewers have (or have permission to install) VLC.

Yes, this is my beef with this research. It's almost exactly a year after the publication of goto fail and the GNU TLS bug that was also related to this "clean" goto idiom (see https://www.gitorious.org/gnutls/gnutls/commit/6aa26f78150ccbdf0aec1878a41c17c41d358a3b).

It seems strange to claim that these things don't happen. And even if they happen rarely, we have seen that they can happen in very high-profile software and have a disastrous impact. In short, the probability of failure does not seem to be the right measure here, it should be something like the expected value of economic damage. But that's impossible to quantify, of course.

(Also, the sample size of 384 seems very small, even if they can formally claim statistical significance.)

Yes, and it's called EVIL for a reason :)

Here are a few links:

Tao3D documents on Gitorious

Taodyne tutorials usually have the code corresponding to the videos. But I'm pretty sure our small server won't take a slashdotting. Use it while it lasts.

There are also a few examples in the source tree itself.

Nestled with the fact that there are so many git solutions that are third-party hosted only, and so many hostable open source subversion options available

That is because all that you need for GIT is a local directory, SSH, or a Web server. Since your client has a full copy of the repository you can always just fire up gitweb on a local repository.

If you need a GUI to satisfy your needs there is the official web GUI that is distributed with git again no hosting required.
https://git.wiki.kernel.org/in...

If you want more advanced features like Git Hub:
https://about.gitlab.com/ (a near clone of Git Hub)
https://gitorious.org/
and dozens of others (https://git.wiki.kernel.org/index.php/Interfaces,_frontends,_and_tools)

I will +1 on the sub-directories deal, but for my use case I just made the sub-directories GIT submodules and everything works itself out. If your sub-directories are really separate parts of a larger project you probably should already have them in separate repositories anyways.

And in case you're actually interested: here's the current status of the boycott campaign known as #gamergate:

https://gitorious.org/gamergat...

12 mysogynist kids apparently have indeed moved on. The >12.000 adults pissed off at utter lack of ethics and betrayal by people they expected to stand by them and their hobby on the other hand are just getting started.

What's obviously needed to even out the field is a feminist programming language. Luckily there are people doing research in that field. And our friends at 4chan have even created the first implementation.

"Emacs is a great operating system, if only it had a decent text editor!"

Nice dig but quite out of date. Check out EVIL.

Bitbucket.org is a good replacement for now, although eventually they will probably end up complying with DMCA takedowns.

I expect that DMCA subservience will come sooner rather than later for Bitbucket, alas, given their location in SF, USA. They will HAVE to comply with the most outrageous takedowns, or suffer the wrath of their local establishment. Also, like a lot of US service providers, Bitbucket are in IPv6 denial so they're not exactly the leading edge of network application providers.

Gitorious seems like a much better bet since they're outside of USA. And, no surprise at all, they're on IPv6, because the rest of the world understands the meaning of exponential growth.

If you want to know how much each device uses by hour, day, month, then you need wrtbwmon.

It is a simple shell script that uses iptables, and runs on OpenWRT just fine.

wrtbwmon shows a graph for each device by MAC address. if you configure OpenWRT to use a fixed IP address per MAC address, then you see the device name that you assign on all graphs.

The original is here. There is also this fork.

I have modified it to run off of a USB memory stick, and store its data there as well. It does not use much storage, barely 85 to 100 kilobytes per day. So even an old 512MB USB stick should last for many years.

I really like the way that these types of programs are taking us. It's about time that my computer starts listening to me while I'm yelling at it!

I've been using Blather myself, and really enjoy the results.

GitLab is a thing, if you want your own GitHub stop building it from scratch and just use the real thing.

Gitorious is a thing, if you want your own Gitorious stop building it from scratch and just use the real thing.

Right. Because it's not as if they found a bug in GnuTLS security the other week, that compromises HTTP security in many Linux apps. A bug that may or may not have been planted by the NSA, but either way has been undiscovered for 9 years.

A bug in a single library is not the end of the world. If anything the fact it was found means it can be fixed, which as it happens: it was.
Time to detect is meaningless. Some bugs exist today that have been there since the initial code was written. Not all of it is intentional. Treating it as if the developers knew about it and were conspiring against you, just because of how long it took to find the bug, is beyond idiocy.

Also mentioning the NSA having potential involvement is a scare tactic, shame on you.

There is nothing about Linux that makes it safer from government hacking.

That is true. No system exists that is safe from a determined individual or group that has the resources and ability to destroy / compromise it.

In fact the openness that allows many people, who's actual identities are not know to anyone, to contribute code makes it more vulnerable than a closed commercial OS.

So you personally trust every single closed source commercial developer for every piece of software you use then? How well do you know them? What makes them known to you so well that you would trust them to work in your best interests despite any form of compromise, coercion, blackmail, or other incentives? Do you honestly believe that they will always work in your best interests? Or do you think that because you paid them once that they are in your debt for life?

Do you know every single vulnerability that the software you use has and take precautions against it? Other than security through obscurity, what makes you think any software you use (closed or open source) is any more secure than any other software?

At least with a closed commercial OS you have to actually be an identifiable person working for the company to submit changes. Or risk posing as one. And there are people who are paid to do the boring testing and audits. Apple's equivalent of the GnuTLS bug was discovered in a matter of months, not years.

Once again verifiable to WHOM? No one but YOU will defend your best interests 100% of the time. A company is just as vulnerable to goverment meddling as an open-source project. Are you standing there watching every line of code being written, compiled and written to media? Examining each opcode that the system doing it is executing as well as the I/O generated? Placing blind faith in some random person who works for some random company is foolish. Just as placing blind faith in some random developer on the net commiting code to some random project is foolish. If you want security you have to verifiy it yourself. (I'm intentionaly ignoring the difficulity in doing that with software, but the point still stands as the act of doing so is not impossible just difficult.)

What makes you think that the testing (if it is done) is accurate and honest? Yes, just because they can be dishonest does not mean they are, but at the same time the opposite is true too.

Again time to detect is meaningless. To say that Apple is superior for finding their bug sooner than gnutls found theirs is pointless. What matters is that the bugs were fixed, not how long it took to find them after the fact. No one wins by saying "I found a bug in X amount of time!". Everyone benefits by saying "This bug is no longer an issue, as it has been fixed."

Yes, not everyone is out to get you. At the same time saying one thing is secure over another just because of how it MAY have been made, is blind faith and can be taken advantage of. You should really take the whole situation into account before making such claims, you (and all of us) will be better off for it if you do.

Captcha: threats

That's utterly crap advice. Since a lot of softwares in popular, active use have critical vulnerabilities.

The example quoted just above (http://ask.slashdot.org/comments.pl?sid=4862577&cid=46414687) in which nobody got the sarcasm... says:

You know there won't be any bugs in those, or if there are they'll be very quickly fixed and not sit there unnoticed for years.

He was referring to https://www.gitorious.org/gnut... and https://www.imperialviolet.org..., not to mention http://bsd.slashdot.org/story/... which also sat unnoticed for years.

Client-side is a mess. Everything needs to be built (at least) three times, once for the web, Android, and iOS. In the browser you have to content with JavaScript, browser API’s,CSS, and rendering differences.

if your application looks the same on a webpage as it does on a smartphone then YOU ARE DOING IT WRONG. Hell, if your application is on a webpage then almost assuredly, YOU ARE DOING IT WRONG.

If you are writing a desktop, tablet, mobile or server-side application, you can use Qt to do it all.

- desktop: OS integration, sound, graphics (transparently software or hardware based), multi-touchscreen support (for tablets)
- mobile: Android/iPhone ports, multi-touchscreen support, direct display buffer access and more.
- server: execute as a daemon, handling TCP/UDP directly, talking over D-Bus

On a side note: someone wrote black magic code and ported Qt to javascript. If it's run locally, it's ok but otherwise it's a huge download. Here are some demos like Tetrix

Actually, there are script I'm using on n900, you should be able to get them running on n9, too. https://gitorious.org/tui/tui/source/d86f07f53dcf09620ace1040d7862543632e098c:loc But consider contributing to opencellid.org . They actually allow you to download the data.

I'd like to see examples of such security risks. Gitorious is one website that uses AGPL3 code, and hosts projects such as Qt and Dungeon Crawl Stone Soup. Given its profile I'm sure Gitorious and the hosted projects would love to know too.

I'd like to see examples of such security risks. Gitorious is one website that uses AGPL3 code, and hosts projects such as Qt and Dungeon Crawl Stone Soup. Given its profile I'm sure Gitorious and the hosted projects would love to know too.

I'd like to see examples of such security risks. Gitorious is one website that uses AGPL3 code, and hosts projects such as Qt and Dungeon Crawl Stone Soup. Given its profile I'm sure Gitorious and the hosted projects would love to know too.

Done. Emacs is now supreme.

* gitosis https://wiki.archlinux.org/index.php/Gitosis

Easy to setup, limited. Good to setup quick remote repositories with Ssh for user management.

* gitolite https://wiki.archlinux.org/index.php/Gitolite

Easy to setup, no web client. Good to setup quick remote repositories with more features then gitosis.

* gitorious http://gitorious.org/gitorious/pages/Home
* gitlab https://wiki.archlinux.org/index.php/Gitlab

With web clients.

* redmine http://www.redmine.org/

My all time favourite project management web client.

I cannot use this GPLv3 add-on to a GPLv3 editor.

A few years ago I whined that there are no good text editors / IDE's out there with a genuine free software license - only ye olde nvi, mg (tiny emacs clone), and a few Windows/Mac-only and SlowScriptKiddyLanguage-based options... The situation remains unchanged today.

My attempt to convince the vim lead developer to relicense (so that *BSD OS'es could include it in base) has led nowhere... I guess he thinks Evil Microsoft wants to "steal" vim code for Visual Studio 2015 ::rolleyes::...

A zillion editors out there, and all of them bundled with unethical anti-market legal threats...

Very depressing...

--libman

Gitorious is both free software (AGPL) and a hosted git service. Creating a project, you get to pick between 22 licences, proprietary or none. I haven't checked their stats to see what percentage of projects it hosts are open source or not.

In both those cases, there was a mutually agreed license -- Peak's clients and the original licensees in Vernor had to indicate agreement in order to receive and/or the software.

Click this. Note that there's no requirement to agree to any license! Without indication of assent, there is no legal contract. You've just been handed a piece of copyrighted code, just like being handed a book.

From Vernor:

We hold today that a software user is a licensee rather than an owner of a copy where the copyright owner (1) specifies that the user is granted a license; (2) significantly restricts the user's ability to transfer the software; and (3) imposes notable use restrictions.

1 can be accomplished unilaterally by dropping a license.txt in a tarball. But 2 and 3 fail without a legally binding contract to do the restricting. No agreement, no contract. No contract, no restriction. No restriction, no "licensee" status under the Vernor test.

I read it, dumbass.

So when someone wants to take Freeside's code, THAT company (hereafter called THEY) must obey the AGPL.

Only if you agree to the license.

Practical example:
Gitorious is AGPLed.
Click this.
You've just downloaded AGPL software WITHOUT EVER SEEING A LICENSE. You may say that the license is magically binding, but it won't hold up in court.

As I said, EULAs at least have clicky agree buttons to try to meet the legal standard of a contract, but AGPL software as a rule doesn't have even that. After you click that link you're in exactly the same state as if I (in place of the gitorious.org server) hand you a textbook (in place of the gitorious tarball) with a license printed on page 10 attempting to restrict you from writing in the margins. It's unenforceable without some evidence of you agreeing

3D visualization of GeoRSS earthquakes database available here.

Apparently we need a nice high level 3D presentation library but we don't want to work out how to use libxml2.

The idea here was precisely to show the kind of things you could do with mere regular expressions (we introduced a regexp module recently). Yes, I know it is theoretically wrong, and if you knew how much I don't care, you wouldn't bother insulting me with the suggestion that we wouldn't know how to use libxml2. XML parsing is on its way, but if you want to add it yourself, Taodyne provides a C++ SDK (here is an example to get you started).

(Also, what language did you base that on? It's surprisingly hard to read.)

As mentioned in the story, it's called XL. Can you elaborate why you think it is hard to read? As an aside, I completely disagree with that statement. Here is for example how you create a slide in Reveal.js:

<section>
  <h2>Heads Up</h2>
  <p>
    reveal.js is an easy to use, HTML based, presentation tool.
  </p>
</section>

Here is how you create a similar slide in Tao Presentations:

slide "My page",
    title
        text "Heads up"
    story
        text "Tao Presentations is an easy to use, XL-based presentation tool"

For me, I already know which one I find easier to read (or to copy-paste in Slashdot for that matter). But the difference really shows when you want to add a time-dependent HSV color:

slide "My page",
    title
        text "Heads up"
    story
        color_hsv 20 * time, 30%, 80%
        text "Tao Presentations is an easy to use, XL-based presentation tool"

Now, writing this in Reveal.js is left as an exercise for the reader...

Er, that's a different Lima project. The Lima Mali GPU reverse-engineering project page is at: http://limadriver.org/ The obligatory git code page is at: https://gitorious.org/lima

The Allwinner A10 has an incomplete 72 page summary of features that calls itself a datasheet compared to a fairly nice 205 page peripheral datasheet for the Broadcom BCM2835 SOC in the Raspberry Pi.

The Allwinner A10, like the BCM2835, uses closed source proprietary libraries to access 3D features of its GPU. The MALI 400 GPU is being reverse engineered which is why there is a preliminary open source GPU driver.

The Allwinner A10 CPU/GPU are faster but less efficient and use more power than the Raspberry Pi's BCM2835.

The Rhombus Allwinner A10 has no final cost yet unlike the Raspberry Pi. They are hoping to hit a $15 price point if they purchase 100,000 units. The Raspberry Pi is available today at $35 which was achieved with only an initial 10,000 units purchased.

There's the <reboot_suggested/> flag in updateinfo.xml.gz , which is set in the bodhi updates system (and also a hardcoded list).

However the proposal to use systemd updates refers only to the desktop file hack.

There's the <reboot_suggested/> flag in updateinfo.xml.gz , which is set in the bodhi updates system (and also a hardcoded list).

However the proposal to use systemd updates refers only to the desktop file hack.

I rewrote the pidgin-otr plugin to use plain libpurple a few months ago. It will work on anything that libpurple works on, including finch. You can read about it here

http://lists.cypherpunks.ca/pipermail/otr-dev/2011-December/001226.html

and grab the code here

https://gitorious.org/purple-otr#more

There's already a package for it in Arch Linux.
http://aur.archlinux.org/packages.php?ID=55511

For GUI, I've had a great experience using Tkx. That is just a lightweight wrapper around the Tcl interpreter and there are nice tutorials for it at TkDocs.

For something to make bindings easier, there is work on a ctypes for Perl. And there's also the Inline namespace on CPAN, but that makes your code a bit difficult to distribute.

Or, perhaps right now there is a young Finnish college student writing a new OS even as I type...

I had high hopes in some Finnish guys, but then they sold out to MS.

However, there is still hope with Qt, as it runs on both Android and iOS. I don't know how well it runs, or how integrated it looks, but it's possible.
Android: http://sourceforge.net/p/necessitas/home/necessitas/
iOS: http://qt.gitorious.org/+qt-iphone/qt/qt-iphone-clone

Did you forget to escape your sarcasm tags or something? It's much easier to let someone else handle all the I/O for you and you just pull in libraries to perl or python or what have you.

http://qt.gitorious.org/qtonpi

Qt's not dead. https://qt.gitorious.org/qt -> Activities https://qt.gitorious.org/qt-creator "The Qt Project" == the robot pushing changes out from paid Nokia developers.

Qt's not dead. https://qt.gitorious.org/qt -> Activities https://qt.gitorious.org/qt-creator "The Qt Project" == the robot pushing changes out from paid Nokia developers.

On that topic, i guess it would be a really good idea to write an OTR plugin for the vanilla Android SMS app. Something for my todo list if it hasn't already been done. (PS, you can find my OTR plugin for Finch/libpurple here https://gitorious.org/purple-otr )

I started researching tools and writing scripts to split up a repository and move to github yesterday.
If you have a complicated non-standard svn layout, you should look into the svn2git on gitorious (there are many tools with that name).

How does it stack up against X-Plane or MS Flight Sim?

Earlier versions of FlightGear (I haven't used 2.4.x yet) aren't as good as X-Plane or MS Flight Simulator when it comes to graphics or ease of use on a PC. The overall experience has tended to be more polished with X-Plane or FS. I don't know about non-PC (e.g. actual flight simulator hardware), and, again, I don't know about FlightGear 2.4. The other thing is that X-Plane and FS have the better graphics if you can get them to work at all - X-Plane, for example, only gives me white rectangles instead of textured surfaces, probably because of issues with my video card driver. FlightGear works fine on the same setup, though. All in all, YMMV.

As for accuracy of the simulation, I can't really judge, because I don't have a lot of experience flying actual planes. I am told X-Plane, FS, and FlightGear are all very good, though. And certainly all of them are used in professional simulation environments.

Does it support things like the Saitek Pro Flight Yoke, Pedals and switch panels?

FlightGear supports several kinds of joysticks and pedals. Don't know about switch panels. It looks like the Saitek Pro Flight Yoke is supported: https://gitorious.org/fg/fgdata/trees/master/Input/Joysticks/Saitek

I guess the best way to figure out if FlightGear works for you is to simply try it out.

For those not in the know, which included me a few minutes ago, Lighthouse was apparently a research project aimed to make Qt easier to port to different graphics systems. Was, because it has now been integrated with Qt 4.8, according to the page at that link.

Here's a video from the website showing tile animations.
http://www.youtube.com/watch?v=ZJyF99uqSbY

And here's the code:
https://qt.gitorious.org/~girish/qt/caca-lighthouse

Sorry, I forgot to answer your bracketed request. He makes clear:

"One contribution of mine to the community was a site where developers could get funded for developing features [for Bitcoin] and I'd love nothing more than to pay people to write free software."

Thanks for the tasty FUD!

Some comments here claim Qt is not dying because Nokia made some announcement and the Qt blog is hyperactive.

But look at the facts:
-the IRC channel they used: #qt-labs, has almost no activity since February

Looks like there's quite a bit of activity from just the last week

-the brand new Qt Developer Network has been deserted by the trolls

It'd be great if things were deserted by the trolls, I guess... Anyway, it doesn't seem deserted by the users

-the blog posts on Qt labs are just about future project, never anything concrete for the current library

Of the five posts on the front page, two are about merges of experimental features (the QML scenegraph and Lighthouse), two about conferences and summits, and one's about the release of QtWebkit 2.1.1. Not current enough for you?

-the plans for Qt 5 announced recently are ridiculous, no troll was involved in those

I'm not even going to reply to that one!

-the development on qt.gitorious.org stalled since February

If there is not quickly a fork of Qt, we will discover in 2 years that Qt is outdated and there is no longer any professional GUI library for Linux.

Latest commit is dated Jun 1 2011

Now, WTF are you talking about again?

First of all, reimplementing most if not all Qt widgets in QML takes less code than original Qt widget implementations took, line-wise. And it's by a fairly large factor -- a reduction of 5-10 times. Just look at the Qt Quick Components for Desktop -- it's pretty amazing stuff when you realize that a table view is about 500 lines long. For your reference, src/gui/itemviews/qtableview.cpp is 3000 lines long, and it's not nearly as modular and tweakable as TableView QML element.

The beauty and power of QML is shown in the fact that the TableView component's source code is not only fairly easy to understand, but it's very easy to tweak. I had to add per-column delegates for my project and it was a dozen lines or so, took about an hour without any prior QML experience. Good luck with modifying qtableview.cpp. Now I of course realize that there's no full feature parity between the two just yet, but they are alarmingly close. And if you consider source tweakability to be a feature in itself, I think that QML already wins over native Qt views. Even little details make life easier: suppose you want to tweak QTableView and cannot simply derive from it, but you have to modify the source. If you want to copy it over to your own project, you have to at least do a search-and-replace to change the damned class name everywhere. In QML, you change the damn file name and you're done. Add enough of those "little" improvements, and you get something that beats expressibility of C++ by a lot.

Qt could have been much further ahead if they implemented the QML idea back in times of Qt 1.x... And no, I don't buy the argument that the platforms back then were too slow. They'd have had to spend more effort in optimizing things, but there's nothing inherent in QML that makes it slow. All the heavy lifting is done by C++ code or JIT-ed JavaScript anyway.

First of all, reimplementing most if not all Qt widgets in QML takes less code than original Qt widget implementations took, line-wise. And it's by a fairly large factor -- a reduction of 5-10 times. Just look at the Qt Quick Components for Desktop -- it's pretty amazing stuff when you realize that a table view is about 500 lines long. For your reference, src/gui/itemviews/qtableview.cpp is 3000 lines long, and it's not nearly as modular and tweakable as TableView QML element.

The beauty and power of QML is shown in the fact that the TableView component's source code is not only fairly easy to understand, but it's very easy to tweak. I had to add per-column delegates for my project and it was a dozen lines or so, took about an hour without any prior QML experience. Good luck with modifying qtableview.cpp. Now I of course realize that there's no full feature parity between the two just yet, but they are alarmingly close. And if you consider source tweakability to be a feature in itself, I think that QML already wins over native Qt views. Even little details make life easier: suppose you want to tweak QTableView and cannot simply derive from it, but you have to modify the source. If you want to copy it over to your own project, you have to at least do a search-and-replace to change the damned class name everywhere. In QML, you change the damn file name and you're done. Add enough of those "little" improvements, and you get something that beats expressibility of C++ by a lot.

Qt could have been much further ahead if they implemented the QML idea back in times of Qt 1.x... And no, I don't buy the argument that the platforms back then were too slow. They'd have had to spend more effort in optimizing things, but there's nothing inherent in QML that makes it slow. All the heavy lifting is done by C++ code or JIT-ed JavaScript anyway.

Well; we have the source;. If the FO i FOSS is to ever mean something, this is the stage at which we should fork and start contributing as much as possible under a license which Microsoft will never steal (e.g. the AGPLv3). This is going to be interesting and hard to kill.

Dear Sony, Welcome to the DCVS world, you bastard ! http://gitorious.org/ps3free/

THIS. Anyone hosting DMCA-questionable content should damned well get a server offshore in a country that doesn't care about IP laws and then be sure to take every step to keep their real identity separate from it. I hear Russia is a good place...

No need to go that far east, just try out this Norwegian competitor to GitHub instead: http://gitorious.org/ . It might not be completely "outlaw" but without the DMCA the laws are at least a lot saner.

In fact, as others have mentioned further down, a mirror of some of the repos on gitorious is already available @ http://gitorious.org/ps3free.

THIS. Anyone hosting DMCA-questionable content should damned well get a server offshore in a country that doesn't care about IP laws and then be sure to take every step to keep their real identity separate from it. I hear Russia is a good place...

No need to go that far east, just try out this Norwegian competitor to GitHub instead: http://gitorious.org/ . It might not be completely "outlaw" but without the DMCA the laws are at least a lot saner.

In fact, as others have mentioned further down, a mirror of some of the repos on gitorious is already available @ http://gitorious.org/ps3free.