Slashdot Mirror

"Linux runs the world, right? So we want to make sure that things are secure," says Linux kernel maintainer Greg Kroah-Hartman. When asked in a new video interview which bug makes them most angry, he first replies "the whole Spectre/Meltdown problem. What made us so mad, in a way, is we were fixing a bug in somebody else's layer!" One also interesting thing about the whole Spectre/Meltdown is the complexity of that black box of a CPU is much much larger than it used to be. Right? Because they're doing -- in order to eke out all the performance and all the new things like that, you have to do extra-special tricks and things like that. And they have been, and sometimes those tricks come back to bite you in the butt. And they have, in this case. So we have to work around that.
But a companion article on Linux.com notes that "Intel has changed its approach in light of these events. 'They are reworking on how they approach security bugs and how they work with the community because they know they did it wrong,' Kroah-Hartman said." (And the article adds that "for those who want to build a career in kernel space, security is a good place to get started...")

Kroah-Hartman points out in the video interview that "we're doing more and more testing, more and more builds," noting "This infrastructure we have is catching things at an earlier stage -- because it's there -- which is awesome to see." But security issues can persist thanks to outside vendors beyond their control. Linux.com reports: Hardening the kernel is not enough, vendors have to enable the new features and take advantage of them. That's not happening. Kroah-Hartman releases a stable kernel every week, and companies pick one to support for a longer period so that device manufacturers can take advantage of it. However, Kroah-Hartman has observed that, aside from the Google Pixel, most Android phones don't include the additional hardening features, meaning all those phones are vulnerable. "People need to enable this stuff," he said.

"I went out and bought all the top of the line phones based on kernel 4.4 to see which one actually updated. I found only one company that updated their kernel," he said. "I'm working through the whole supply chain trying to solve that problem because it's a tough problem. There are many different groups involved -- the SoC manufacturers, the carriers, and so on. The point is that they have to push the kernel that we create out to people."
"The good news," according to Linux.com, "is that unlike with consumer electronics, the big vendors like Red Hat and SUSE keep the kernel updated even in the enterprise environment. Modern systems with containers, pods, and virtualization make this even easier. It's effortless to update and reboot with no downtime."

An anonymous reader quotes Linux.com: Attempts to establish Linux as a gaming platform have failed time and time again, with Valve's SteamOS being the latest high-profile casualty. Yet, Linux has emerged as a significant platform in the much smaller niche of retro gaming, especially on the Raspberry Pi. Atari has now re-emerged from the fog of gaming history with an Ubuntu-based Atari VCS gaming and media streaming console aimed at retro gamers. In addition to games, the Atari VCS will also offer Internet access and optional voice control. With a Bluetooth keyboard and mouse, the system can be used as a standard Linux computer.

The catch is that the already delayed systems won't ship until July 2019... By the launch date, Atari plans to have "new and exclusive" games for download or streaming, including "reimagined classic titles from Atari and other top developers," as well as multi-player games. The Atari VCS Store will also offer video, music and other content... The hardware is not open source, and the games will be protected with HDCP. However, the Ubuntu Linux stack based on Linux kernel 4.10 is open source, and includes a "customizable Linux UX." A Linux "sandbox" will be available for developing or porting games and apps. Developers can build games using any Linux compatible gaming engine, including Unity, Unreal Engine, and Gamemaker. Atari also says that "Linux-based games from Steam and other platforms that meet Atari VCS hardware specifications should work."
Atari boasts this will be their first device offering online multi-player experiences, and the device will also come pre-loaded with over 100 classic Atari games.

An Indiegogo campaign this week seeking $100,000 in pre-orders has already raised over $2.2 million from 8808 backers.

An anonymous reader quotes Linux.com: What happens when you take Ubuntu 17.10, a new desktop interface (one that overlays on top of KDE), snap packages, and roll them all up into a pseudo rolling release? You get Nitrux. At first blush, this particular Linux distribution seems more of an experiment than anything else -- to show how much the KDE desktop can be tweaked to resemble the likes of the Elementary OS or MacOS desktops. At its heart, however, it's much more than that... This particular take on the Linux desktop is focused on the portable, universal nature of snap packages and makes use of a unique desktop, called Nomad, which sits atop KDE Plasma 5... The desktop includes a dock, a system/notification tray, a quick search tool (Plasma Search), and an app menu. Of all the elements on the desktop, it's the Plasma Search tool that will appeal to anyone looking for an efficient means to interact with their desktops. With this tool, you can just start typing on a blank desktop to see a list of results. Say, for example, you want to open LibreOffice writer; on the blank desktop, just start typing "libre" and related entries will appear...

Skilled Linux users should have no problem using Nitrux and might find themselves intrigued with the snap-centric Nomad desktop. The one advantage of having a distribution centered around snap packages would be the ease with which you could quickly install and uninstall a package, without causing issues with other applications... In the end, Nitrux is a beautiful desktop that is incredibly efficient to use -- only slightly hampered by an awkward installer and a lack of available snap packages. Give this distribution a bit of time to work out the kinks and it could become a serious contender.
The GUI-focused distro even includes Android apps in the menu -- although Linux.com's reviewer notes that "on two different installations, I have yet to get this feature to work. Even the pre-installed Android apps never start."

To celebrate Linux's 26th anniversary, the Linux Foundation tweeted a picture of Tux on a birthday cake, and linked to an essay on OpenSource.com by FreeDOS founder Jim Hall: My first Linux distribution was Softlanding Linux System (SLS) 1.03, with Linux kernel 0.99 alpha patch level 11. That required a whopping 2MB of RAM, or 4MB if you wanted to compile programs, and 8MB to run X windows... To celebrate, I reinstalled SLS 1.05 to remind myself what the Linux 1.0 kernel was like and to recognize how far Linux has come since the 1990s.
"Getting X windows to perform was not exactly easy..." Hall writes, adding "the concept of a desktop didn't exist yet." Meanwhile Phoronix celebrated by republishing that fateful email Linus Torvalds sent on August 25, 1991. And Fossbytes shared the most recent statistics about modern-day Linux's 20 million lines of code from the Linux Foundation: During the period between the 3.19 and 4.7 releases, the kernel community was merging changes at an average rate of 7.8 patches per hour; that is a slight increase from the 7.71 patches per hour seen in the previous version of this report, and a continuation of the longterm trend toward higher patch volumes.

Linus Torvalds appeared in a new "fireside chat" with VMware Head of Open Source Dirk Hohndel. An anonymous reader writes: Linus explained what still surprises him about Linux development. "Code that I thought was stable continually gets improved. There are things we haven't touched for many years, then someone comes along and improves them or makes bug reports in something I thought no one used. We have new hardware, new features that are developed, but after 25 years, we still have old, very basic things that people care about and still improve... Our processes have not only worked for 25 years, we still have a very strong maintainer group... And as these maintainers get older and fatter, we have new people coming in."

Linus also says he's surprised by the widespread popularity of Git. "I expected it to be limited mostly to the kernel -- as it's tailored to what we do... In certain circles, Git is more well known than Linux." And he also shares advice if you want to get started as an open source developer. "I'm not sure my example is the right thing for people to follow. There are a ton of open source projects and, if you are a beginning programmer, find something you're interested in that you can follow for more than just a few weeks... If you can be part of a community and set up patches, it's not just about the coding, but about the social aspect of open source. You make connections and improve yourself as a programmer."
Linus also says that "I really like what I'm doing. I like waking up and having a job that is technically interesting and challenging without being too stressful so I can do it for long stretches; something where I feel I am making a real difference and doing something meaningful not just for me."

Linus Torvalds: What I find interesting is code that I thought was stable continually gets improved. There are things we haven't touched for many years, then someone comes along and improves them or makes bug reports in something I thought no one used. We have new hardware, new features that are developed, but after 25 years, we still have old, very basic things that people care about and still improve. I really like what I'm doing. I like waking up and having a job that is technically interesting and challenging without being too stressful so I can do it for long stretches; something where I feel I am making a real difference and doing something meaningful not just for me. I occasionally have taken breaks from my job. The 2-3 weeks I worked on Git to get that started for example. But every time I take a longer break, I get bored. When I go diving for a week, I look forward to getting back. I never had the feeling that I need to take a longer break.

21,000 developers were surveyed for this year's annual survey by VisionMobile -- and for the first time, they were asked about their salaries. An anonymous reader quotes Linux.com: [S]killed cloud and backend developers, as well as those who work in emerging technologies including Internet of Things, machine learning and augmented/virtual reality can make more money than frontend web and mobile developers whose skills have become more commoditized... The top 10 percent of salary earners in AR who live in North America earn a median salary of $219,000, compared with $169,000 for the top earning 10 percent of backend developers, according to the report... New, unskilled developers interested in emerging tech will have a harder time finding work, and earn less than their counterparts in more commoditized areas, due both to their lack of experience and fewer companies hiring in the early market.

Along with skill level and software sector, developer salaries also vary widely by where they live in the world. A web developer in North America earns a median income of $73,600 USD per year, compared with the same developer in Western Europe whose median income is $35,400 USD. Web developers in South Asia earn $11,700 in South Asia while those in Eastern Europe earn $20,800 per year.
For developers who want to move up in the world, VisionMobile suggests "Invest in your skills. Do difficult work. Improve your English. Look for opportunities internationally. Go for it. You deserve it!"

"We're building a world-size robot, and we don't even realize it," security expert Bruce Schneier warned the Open Source Leadership Summit. As mobile computing and always-on devices combine with the various network-connected sensors, actuators, and cloud-based AI processing, "We are building an internet that senses, thinks, and acts." An anonymous reader quotes Linux.com: You can think of it, he says, as an Internet that affects the world in a direct physical manner. This means Internet security becomes everything security. And, as the Internet physically affects our world, the threats become greater. "It's the same computers, it could be the same operating systems, the same apps, the same vulnerability, but there's a fundamental difference between when your spreadsheet crashes, and you lose your data, and when your car crashes and you lose your life," Schneier said...

"I have 20 IoT-security best-practices documents from various organizations. But the primary barriers here are economic; these low-cost devices just don't have the dedicated security teams and patching/upgrade paths that our phones and computers do. This is why we also need regulation to force IoT companies to take security seriously from the beginning. I know regulation is a dirty word in our industry, but when people start dying, governments will take action. I see it as a choice not between government regulation and no government regulation, but between smart government regulation and stupid government regulation."

Linux.com highlights some interesting statistics about npm, the package manager for Node.js.

• "At over 350,000 packages, the npm registry contains more than double the next most populated package registry (which is the Apache Maven repository). In fact, it is currently the largest package registry in the world."
• In the preceding four weeks, users installed 18 billion packages.
• This translates into 6 billion downloads, "because approximately 66 percent of the installs are now being served from the cache."
• ping.npmjs.com "shows that the registry's services offer a 99.999 uptime."
• Every week roughly 160 people publish their first package in the registry

But what about the incident last year where a developer suddenly pulled all their modules and broke thousands of dependent projects? npm's Ashley Williams "admitted that the left-pad debacle happened because of naive policies at npm. Since, the npm team have devised new policies, the main one being that you are only allowed to unpublish a package within 24 hours of publishing it." And their new dissociate and deprecate policy allows developers to mark packages as "unmaintained" without erasing them from the registry.

Friday Linux.com published their list of "what might well be the best Linux distributions to be found from the ever-expanding crop of possibilities... according to task." Here's their winners (as chosen by Jack Wallen), along with a short excerpt of his analysis.

• Best distro for sysadmins : Parrot Linux. "Based on Debian and offers nearly every penetration testing tool you could possibly want. You will also find tools for cryptography, cloud, anonymity, digital forensics, programming, and even productivity."
• Best lightweight distribution: LXLE. "Manages to combine a perfect blend of small footprint with large productivity."
• Best desktop distribution: Elementary OS "I'm certain Elementary OS Loki will do the impossible and usurp Linux Mint from the coveted 'best desktop distribution' for 2017."
• Best Linux for IoT: Snappy Ubuntu Core "Can already be found in the likes of various hacker boards (such as the Raspberry Pi) as well as Erle-Copter drones, Dell Edge Gateways, Nextcloud Box, and LimeSDR."
• Best non-enterprise server distribution: CentOS. "Since 2004, CentOS has enjoyed a massive community-driven support system."
• Best enterprise server distribution: SUSE. "Don't be surprised if, by the end of 2017, SUSE further chips away at the current Red Hat market share."

Wallen also chose Gentoo for "Best distribution for those with something to prove," saying "This is for those who know Linux better than most and want a distribution built specifically to their needs... a source-based Linux distribution that starts out as a live instance and requires you to then build everything you need from source." And surprisingly, he didn't mention his own favorite Linux distro, Bodhi Linux, which he describes elsewhere as "a melding of Ubuntu and Enlightenment".

LibbyMC writes Git will celebrate its 10-year anniversary tomorrow. To celebrate this milestone, Linus shares the behind-the-scenes story of Git and tells us what he thinks of the project and its impact on software development. From the article: "Ten years ago this week, the Linux kernel community faced a daunting challenge: They could no longer use their revision control system BitKeeper and no other Software Configuration Management (SCMs) met their needs for a distributed system. Linus Torvalds, the creator of Linux, took the challenge into his own hands and disappeared over the weekend to emerge the following week with Git. Today Git is used for thousands of projects and has ushered in a new level of social coding among programmers."

jrepin writes KDE is among the biggest open source projects which continues to innovate and evolve with the changing times. Often we have seen this particular community create technologies ahead of its time which were later adopted by other projects. The Linux Foundation talked to Lydia Pintscher, the president of the KDE e.V., the nonprofit organization that oversees the legal and financial aspects of the KDE project, to understand the relationship between the community and the organization. We also discussed the challenge of recruiting more women to open source projects and women in the KDE community.

jones_supa writes Almost two years ago, Samsung's open source team was just one person: Linux and FOSS advocate Ibrahim Haddad, head of the open source group at Samsung Research America. The new Open Source Innovation Group at Samsung is now 40 people strong, including 30 developers, devoted full-time to working on upstream projects and shepherding open source development into the company. The group is hiring aggressively and plans to double the size of the group in the coming years. Their first targets are project maintainers and key contributors to 23 open source projects that are integral to Samsung's products, including Linux, Gstreamer, FFmpeg, Blink, Webkit, EFL, and Wayland. They plan to eventually start hiring more junior open source developers as well. Just about every Samsung product, from phones and tablets to home appliances, uses open source software, said Guy Martin, senior open source strategist at Samsung. Martin also mentions the importance of funding: "You already see this in the Linux kernel, where most people who contribute are paid to contribute. And you'll see that more and more."

LibbyMC writes Executive Director Jim Zemlin writes, "We do not agree with everything Microsoft does and certainly many open source projects compete directly with Microsoft products. However, the new Microsoft we are seeing today is certainly a different organization when it comes to open source. The company's participation in these efforts underscores the fact that nothing has changed more in the last couple of decades than how software is fundamentally built."

LibbyMC writes For a few years now Linux kernel developers have followed a fairly strict authentication policy for those who commit directly to the git repositories housing the Linux kernel. Each is issued their own ssh private key, which then becomes the sole way for them to push code changes to the git repositories hosted at kernel.org. While using ssh keys is much more secure than just passwords, there are still a number of ways for ssh private keys to fall into malicious hands. So they've further tightened access requirements with two-factor authentication using yubikeys.

New submitter trogdoro (3716731) writes with an excerpt from Linux Cookbook author Carla Schroder's enthusiastic introduction to what looks like a tempting tool, combining elements of GUI and text-mode interfaces: Command-line lovers, allow me to introduce you to Xiki, the incredibly interactive, flexible, and revolutionary command shell. I do not use the word "revolutionary" lightly. The command shell has not advanced all that much since the ancient days of Unix. Xiki is a giant leap forward. If you're looking for the Next Big Thing in FOSS, Xiki is it. It's not the first tool meant to combine text and graphic interface, but from the screencast demo, Xiki looks like it gets a lot of things right.

An anonymous reader writes "In the spirit of Jimmy Kimmel's popular Mean Tweets series and in a rare video appearance, Linus Torvalds takes to task a few 'tweeters' who have called him out. Never one to back down, Linus reads the tweets and shares his comments." Sadly, this is just a few -- with weekly updates, Linus could charge a subscription to fund unlimited diving trips.

DeviceGuru writes "The 2014 Toyota Lexus IS reportedly will be the second major automobile to offer in-vehicle infotainment (IVI) systems based on Linux, following last year's introduction of the Debian-based Cadillac User Experience (CUE) IVI system, which now appears in Cadillac's XTS and SRX models. Cadillac's CUE IVI implementation was developed by GENIVI Alliance members MontaVista and Bosch and uses similar code, but is not listed as GENIVI compliant. Meanwhile, ABI Research projects that Linux will grow to 20 percent IVI market share by 2018, behind Microsoft and market leader QNX."

DeviceGuru tipped us to the release of the latest single board computer from Beagle Board. It's been two years since the previous BeagleBone was released, and today they've released the BeagleBone Black (including full hardware schematics) at a price competitive with the Raspberry Pi ($10 more, but it comes with a power brick). Powered by a Cortex-A8, it has 512M of DDR3 RAM, 2G of onboard eMMC, two blocks of 46 I/O pins, a pair of 32-bit DSPs, the usual USB host/client ports, Ethernet, and micro-HDMI (a much requested feature). Support is provided for Ångstrom GNU/Linux, Ubuntu, and Android out of the box. Linux Gizmos reports where some of the cost savings came from: "According to BeagleBoard.org cofounder Jason Kridner, interviewed in a Linux.com report today, cost savings also came from removing the default serial port as well as USB-to-serial and USB-to-JTAG interfaces, and including a cheaper single-purpose USB cable. (Three serial interfaces are available via the expansion headers.) In addition, the power expansion header for battery and backlight has been removed."

silentbrad sends word of a recent lecture given by Valve's Gabe Newell to a college class. He had some interesting remarks about the future of games in the living room: "The threat right now is that Apple has gained a huge amount of market share, and has a relatively obvious pathway towards entering the living room with their platform," Newell said. "I think that there's a scenario where we see sort of a dumbed down living room platform emerging — I think Apple rolls the console guys really easily. The question is can we make enough progress in the PC space to establish ourselves there, and also figure out better ways of addressing mobile before Apple takes over the living room? ... We're happy to do it if nobody else will do it, mainly because everybody else will pile on, and people will have a lot of choices, but they'll have those characteristics. They'll say, 'Well, I could buy a console, which assumes I'll re-buy all my content, have a completely different video system, and, oh, I have a completely different group of friends, apparently. Or I can just extend everything I love about the PC and the internet into the living room.' ... I think the biggest challenge is that Apple moves on the living room before the PC industry sort of gets its act together." There's another hour-long lecture from Newell posted on YouTube talking about productivity, economics, and the future of corporations. Speaking of Steam, reader skade88 points out an article at Linux.com about the current state of the Steam for Linux beta.

Rikki Endsley has been Community Manager for USENIX since September, 2011. She also edits their magazine, ;login:, writes for publications ranging from Linux.com to Network World, and is a long-distance runner to boot. But this interview concentrates on USENIX, a worthy organization that does a great job of helping its members (and the entire Unix/Linux community) stay up to date technically and, with its job board, keep USENIX members employed. Toward the end of the conversation, Rikki mentions some of the intangible but valuable benefits people get when they attend USENIX events. (Remember: If you don't have time to watch the video, can't see the video or just don't like video, you can click on the "Show/Hide Transcript" link and read a text version of the video.)

Jeremy Allison - Sam writes "Interview Bruce Byfield did with me after the Samba 4.0 release. Discusses interactions with Microsoft, the future of the code and project, and many other things."

Karrde712 writes "In a first for the Millennium Technology Prize, both Laureates were awarded the prize. Linus Torvalds was recognized for the creation of the Linux kernel and its continuing impact on enhancing scientific progress throughout the world. Dr. Shinya Yamanaka was recognized for his work in the development of induced pluripotent stem cells for medical research." New submitter Elessar wrote in about the BBC's related interview with Linus "... touching on many subjects including Linux on the desktop, Raspberry Pi, and the weirdness of his employment contract." (He did another one with Linux.com earlier this week too).

An anonymous reader writes "We'll never forget last year's LinuxCon Japan conference, which took place shortly after the devastating Tohoku earthquake and tsunami in March. As the country still reeled from the disaster, LinuxCon presenters discussed how open source software could contribute to disaster relief. One year later, a team of developers has returned to LinuxCon in Yokohama this week to announce OpenRelief, a new project aimed at building a low-cost, remote-controlled robotic plane to report damage in hard-to-reach, disaster stricken areas."

eldavojohn writes "With the release of GCC 4.7.0, the venerable and stalwart constant that is the GNU Compiler Collection turns twenty five. More ISO standards and architectures supported with this release and surely more memories to come from the compiler that seems to have always been."

An anonymous reader tipped us to an interview with Phillip Lee, author of Brewtarget, one of the best pieces of Free brewing software available (it's even in Debian). The interview discusses some of the technical decisions made (why Qt and Cmake?), and mentions a bit of the plans for future development: "The way the database was designed previously really hadn't been changed since the my first code in 2008, and we were running into a brick wall with some of the features we wanted. After we move to SQLite, there will be quite a lot of new features like being able to search through the ingredients in the database and stuff like that. I also plan to add some water chemistry tools for people that like to alter the ions and salts to fit a particular profile." (The last bit about water salt modifications comes as a relief to at least this brewer.)

LinuxScribe writes "The Linux Foundation has quietly restored all of the websites it took down following the September 2011 breach that affected Linux.com and all other Foundation websites--an attack that was linked to the August 2011 breach of kernel.org. But one website won't be coming back: the Linux Developer Network, launched in 2008. Content from the site will now be hosted across all of the Linux Foundation's web properties."

xmas2003 writes "Over at Linux.com, Zonker writes about Alek's Controllable Christmas Lights for Celiac Disease. This annual Internet tradition uses a hi/low-tech combo of LAMP'ed Redhat Web Servers, a 7+ year old Thinkpad running Ubuntu for the X10 control, and an old-school webpage design that could be politely described as Web 0.0 — wait until you see the animated cursor — D'OH! The site is free (and totally fun) as it also raises awareness and donations for Celiac Disease — over $70,000 to the University of Maryland. Nifty pictures of the crazy christmas display can be seen on the Christmas Blog (notice Clifford Stoll's The Cuckoo's Egg in post #220) plus watch videos of it in action with comedic history. Nothing quite says Christmas like a giant, inflatable HULK wearing a Santa Hat... along with three wise men of Elmo, SpongeBob, and Homer Simpson. The Slashdot Effect of turning 21,000 Christmas lights ON & OFF this evening should provide quite a Christmas Eve show to Alek's neighbors... and also the International Space Station."

In his main page debut, ramereth writes with a look at the infrastructure of OSUOSL from Linux.com. From the article: "Many people use Linux in many ways, often totally unaware that they're depending on Linux. Likewise, those of us in the open source community depend heavily on Oregon State University's Open Source Labs (OSUOSL), but may not even realize just how much. Thanks to one of the final talks at LinuxCon by Lance Albertson, it's much clearer now just how important OSUOSL is."

jbrodkin writes "Linux and ARM developers have clashed over what's been described as a 'United Nations-level complexity of the forks in the ARM section of the Linux kernel.' Linus Torvalds addressed the issue at LinuxCon this week on the 20th anniversary of Linux, saying the ARM platform has a lot to learn from the PC. While Torvalds noted that 'a lot of people love to hate the PC,' the fact that Intel, AMD, and hardware makers worked on building a common infrastructure 'made it very efficient and easy to support.' ARM, on the other hand, 'is missing it completely,' Torvalds said. 'ARM is this hodgepodge of five or six major companies and tens of minor companies making random pieces of hardware, and it looks like they're taking hardware and throwing it at a wall and seeing where it sticks, and making a chip out of what's stuck on the wall.'"

shougyin writes "For years, Linux has enjoyed much of its success as a replacement for Unix. Companies turned to Linux to replace Unix servers, or for new deployments within a Unix-heavy environment. Linux is still king there, but it's starting to encroach on Microsoft as well. Big companies are planning overwhelmingly (76.4%) to add more Linux servers in the next year, and less than half (41.2%) of the companies are planning to add Windows servers in the next year. Even more interesting, nearly half (43.6%) are actively planning to decrease use of Windows servers in the next year."

metasonix writes "While the rest of the industry has been babbling on about the iPad and imitations thereof, Qi Hardware is actually shipping a product that is completely open source and copyleft. Linux News reviews the Ben NanoNote (product page), a handheld computer apparently containing no proprietary technology. It uses a 366 MHz MIPS processor, 32MB RAM, 2 GB flash, a 320x240-pixel color display, and a Qwerty keyboard. No network is built in, though it is said to accept SD-card Wi-Fi or USB Ethernet adapters. Included is a very simple Linux OS based on the OpenWrt distro installed in Linksys routers, with Busybox GUI. It's apparently intended primarily for hardware and software hackers, not as a general-audience handheld. The price is right, though: $99."

LinuxScribe writes "In a blog announcement today, Canonical Founder and CEO Mark Shuttleworth revealed he will be stepping down from his CEO role to be replaced by current COO Jane Silber. Both execs do not see major strategic changes on the horizon. Silber's official blog and Linux.com each have more details on how the change will be implemented."

LinuxScribe writes "Red Hat, Mozilla, Novell, Oracle, and Sun are among the 50-plus member Open Source for America coalition that will be officially announced today by Tim O'Reilly at OSCON. The OSA will be a strong advocate for free and open source software, and plans to boost US Federal government support and adoption of FOSS. From their website: 'The mission of OSA is to educate decision makers in the US Federal government about the advantages of using free and open source software; to encourage the Federal agencies to give equal priority to procuring free and open source software in all of their procurement decisions; and generally provide an effective voice to the US Federal government on behalf of the open source software community, private industry, academia, and other non-profits.'"

LinuxScribe tips a piece up at Linux.com with inside details on the design and construction of the Apollo 11 code. There are some analogies to open source development but they are slim. MIT drafted the code — to run on the Apollo Guidance Computer, a device with less grunt than an IBM XT — it had 2K of memory and a 1-MHz clock speed. It was an amazing machine for its time. NASA engineers tested, polished, simulated, and refined the code. "The software was programmed on IBM punch cards. They had 80-columns and were 'assembled' to instruction binary on mainframes... and it took hours. ... During the mission, most of the software code couldn't be changed because it was hard-coded into the hardware, like ROM today... But during pre-launch design simulations, problems that came up in the code could sometimes be finessed by... computer engineers using a small amount of erasable memory that was available for the programs. The software used a low-level assembly language and was controlled using pairs or segments of numbers entered into a square-shaped, numeric-only keyboard called a Display and Keyboard Unit... The two-digit codes stood for 'nouns' or 'verbs,' and were used to enter commands or data, such as spacecraft docking angles or time spans for operations." Reader Smark adds, "The Google Code Blog announced today that the Virtual AGC and AGS project has transcribed the Command Module and Lunar Excursion Module code used during the Apollo 11 moon landing. The code is viewable at the VirtualAGC Google Code Page."

twitter writes "There's been a lot of fuss about mono lately. After SCO and MS suing over FAT patents, you would think avoiding anything MS would be a matter of common sense. RMS now steps into the fray to warn against a serious mistake: 'Debian's decision to include Mono in the default installation, for the sake of Tomboy which is an application written in C#, leads the community in a risky direction. It is dangerous to depend on C#, so we need to discourage its use. .... This is not to say that implementing C# is a bad thing. ... [writing and using applications in mono] is taking a gratuitous risk.'" Update: 06/27 20:22 GMT by T : Read on below for one Mono-eschewing attempt at getting the (excellent) Tomboy's functionality, via a similar program called Gnote. Update: 06/27 21:07 GMT by T: On the other side of the coin, reader im_thatoneguy writes "Jo Shields, a Mono Developer, has published an article on 'Why Mono Doesn't Suck,' why it is not a threat to FOSS, why it is desirable to developers and why it should be included in Ubuntu by default." LastGuyonEarth writes "Gnote was started on April 2009 by Gnome developer Hubert Figuiere, known also for his work on Abiword. The goal of Gnote is to provide a Free Software implementation of Tomboy that doesn't rely on Mono. The ultimate goal is to replace Tomboy in an effort to make Gnome and GNU/Linux distributions non-dependant on Novell's implementation of Microsoft's .NET platform. For our testing purposes, I installed Gnote 0.5.1 on Ubuntu Jaunty through a personal PPA, but I would love to see it officially packaged in the near future."

mikesd81 writes "Linux.com has been relaunched under the direction of the Linux Foundation. The goal of the site is supposed to be a community hub that lets the Linux community participate and contribute their knowledge. An initial look as the site is today makes it look like a news site. Linux Foundation Executive Director Jim Zemlin insists that the plan wasn't for Linux.com to be a breaking news organization but rather as a resource for the Linux community as a whole."

Linux.com (which shares a corporate overlord with Slashdot) has an interesting look at what going proprietary can mean for your overall effectiveness. Using Firefox extension "Interclue" as the object lesson, the piece looks at both the engineering and social difficulties surrounding the project. "Even more significantly, the efforts to commercialize only detract from the software itself. The basic idea behind Interclue would make for a handy Web utility, but seems too slight to build a business around. The effort to do so only leads to complications that do nothing to enhance the basic utility, and to pleas for donations that can only annoy. The result is that, if your position on free software doesn't lead you to avoid Interclue, the efforts to monetize it almost certainly will."

iamhigh writes "Reports are popping up that Chinese Internet Cafes are being required to switch to Red Flag Linux. Red Flag is China's biggest Linux distro and recently received headlines for their Olympic Edition release. The regulations, effective Nov. 5th, are aimed at combating piracy and require only that cafes install either a legal version of Windows or Red Flag. However, Radio Free Asia says that cafes are being forced to install Red Flag even if they have legal versions of Windows. Obviously questions about spying and surveillance have arisen, with no comment from the Chinese Government."

StoneLion writes "Since its release, the OpenGL code that is responsible for 3-D acceleration on GNU/Linux has been running on licenses that were accepted by neither the Free Software Foundation (FSF) nor the Open Source Initiative. Today, however, the FSF has announced that the licenses in question have been rewritten, the problems resolved, and the code freed. Peter Brown, executive director of the FSF, says, 'This represents a huge gift to the free software community.'"

Linux.com has an interesting look at the inner workings of the Free Software Foundation (FSF). "The purpose of the Free Software Foundation (FSF) is probably obvious from its name -- but what does promoting free software mean in terms of everyday activity? Examining the roles of the organization shows how complex the FSF's advocacy role has become. It also reveals the range of services available to the free software community, and helps to explain how such a small group has had such a major influence on computer technology. As a 501(c)3 charity in the United States, the FSF is run by a board of directors. The current board includes FSF founder and president Richard M. Stallman and long-term member Henry Poole, but, in the last few years, new faces have appeared on the board."

As the DVR becomes a much more pervasive performer in home theater setups, the level of excellence demanded by the general consumer seems to continue to rise. The open source project MythTV has been in this arena for quite a while, and now offers the ability to have multiple front-ends on your MythTV install on a wide range of different platforms. Able to run on Windows XP, Vista, Xbox, and even an Apple iPod, the new flexibility is sure to interest many consumers (and many competitors).

Yes, some US IT jobs are disappearing, but Linux.com (which shares a corporate overlord with Slashdot) has a recent story emphasizing the job advantage that involvement in open source projects can give young programmers who aren't planning to ditch their dreams of making a living in the field. The article focuses on one programmer's experience with Google's Summer of Code, which led directly to her job working on the Drupal content-management system. But the underlying message (that involvement in open source projects provides a background of experience otherwise difficult to obtain because of the chicken-and-egg problem of "experience required" job opportunities) is generalizable to many other forms of open-source involvement. Do you have a job that you landed because of your unpaid open-source programming?

This year at OSCON it seemed that you couldn't throw a stone without hitting someone from Microsoft (and in fact, I'm sure several people did). They were working very hard to make themselves known, and working desperately to change public opinion of Microsoft's involvement in the open source community. Linux.com's Nathan Willis took a look at what they were preaching, with a hefty dose of skepticism, and tries to postulate what the "angle" is. Of course, the powers that be at Microsoft may have finally seen the writing on the wall and felt the pressure from Google enough to alter their strategy a bit. For now I guess we'll have to wait with guarded optimism (or laughable contempt, depending on how old/jaded you are).

StoneLion writes "After months of development and controversy, the KDE project announced the release of KDE 4.1 today. Linux.com (a Slashdot sister site) took a hands-on look at the new code, and reviewer Jeremy LaCroix says, 'KDE 4.1 simply rocks.'" Bruce Byfield's review is quite positive, as well.

StoneLion writes "After months of development and controversy, the KDE project announced the release of KDE 4.1 today. Linux.com (a Slashdot sister site) took a hands-on look at the new code, and reviewer Jeremy LaCroix says, 'KDE 4.1 simply rocks.'" Bruce Byfield's review is quite positive, as well.

PainMeds writes "iPhone Atlas is reporting that the first jailbreak for the iPhone 3G has been released, and includes the popular Cydia community installer for distributing free games and applications. Since Apple's SDK was released, web sites have criticized Apple for the restrictions placed on both what developers could write and what APIs they were allowed to use. Others have noted the SDK's incompatibility with the GPL. The Cydia installer has provided a distribution channel for both open source software and software that would otherwise be impossible to build using the restricted SDK. A few applications are already out, including MobileTerminal and NES.app, a Nintendo game console emulator. In just over a week, open development is finally here for the iPhone 3G!"

javipas writes "GPLv3 and LGPLv3 were released one year ago, on 29 June 2007. Palamida, who tracks Open Source projects, has made a study of the current situation of these licenses along with AGPLv3, which was released later, in November. The number of projects that have made the transition to these licenses has grown over the last months, and it seems than AGPLv3 has captured a great interest lately. Black Duck Software, a company that tracks Open Source projects too, has made its own study with similar results, and although GPLv3 and its variants have a good adoption rate, the interviews published on the Palamida site (Stallman, Chris Di Bona) show that the acceptance of GPLv3 has still a long way to walk."

Joe Barr writes "Bruce Byfield reports at Linux.com that a Swedish developer, Goran Fransson, has 'given a deposition in the Barracuda-Trend Micro case that appears to seriously undermine Trend Micro's patent on gateway virus scanning.' Gransson has resurrected a product (still in its shrinkwrap) sold by Ten Four, the company he worked for at the time, to prove that it provided gateway virus scanning in January 1995. Trend Micro's patent application was filed in September of that year. If you were — or worked for — a Ten Four customer during 1995, you might be able to help Barracuda prove that Trend Micro's patent omits prior art." We discussed this important patent case when it was filed in January. (Slashdot and Linux.com share a corporate overlord.)

Joe Barr writes "Mayank Sharma has two recent stories on Linux.com; one evaluating the performance of Firefox 3, and the second comparing it to Opera 9.5. Which is better? For most people, it's probably more a matter of familiarity or personal preference, but these stories provide hard performance data to consider as well. Sharma notes, 'In terms of rendering JavaScript, Firefox 3 had the edge over Opera 9.5 in the SunSpider JavaScript Benchmark, which has an error range between +/-0.8% to +/-11.3% depending on the type of test. In the JavScript Engine speed test, Opera 9.5 scores over its peers when it comes to error handling, DOM, and AJAX.'" Slashdot shares a corporate overlord with Linux.com.