Domain: tut.fi
Stories and comments across the archive that link to tut.fi.
Comments · 268
-
Tripwire suspends LGPL for over 6 monthsTripwire security has been distributing Tripwire 2.2.1 *statically linked* with glibc for over 6 months now. As part of the LGPL requirements, the glibc section must remain modifiable. Tripwire has decided that this requirement should be "temporarily" wave-able and has not at any time honored requests for the object files to perform relinking against modified copies of the glibc. They *may* now accomplish a Q3 release which *might* be provided under the terms of the GPL. Regardless, I don't think anything can make up for the mockery of LGPL requirement enforcement over the majority of this year.
Advanced Intrusion Detection Enviroment (AIDE) has been GPL from the beginning, provides most of the features in Tripwire with all of the features being planned for future versions. The AIDE team has never violated the GPL or LGPL and as such has never declaired that sections of the LGPL should be temporarily suspendable.
The supposed Tripwire open source release announcement would be a big deal if Tripwire Security was honorable people. But the fact of the matter is these people don't have the slightest clue when they are informed that the GPL and LGPL are a list of *requirements*. They have spent the last 6 months going out of their way to *demostrate* on their website that they don't understand what the GPL or LGPL actually *is*. Hence, they may declair it is GPL'd and then make a legal brew-ha-ha over rights that they supposably provided.
Be VERY careful when dealing with a company that has a 6 month history of violating the LGPL! Unless you have a *really* good lawyer, a company that decides to pick and choose what GPL or LGPL requirements actually apply can really screw you over bad. I would like to see a summery of the GPL and LGPL in Tripwire's own words to get a feel for how they interpret these licenses before I ever get daring enough to contribute.
The AIDE team WILL NOT screw you over. They do not have the history of screwing over the glibc development team by ignoring redistribution licensing conditions. I'm not sure Tripwire is worth providing them a free peer review. AIDE is worth reviewing and contributing too.
-
alternative free libre softwarewhy not use already GPLed alternatives?
these are completely free and GPLed:Fcheck FCheck is an open source PERL script providing intrusion detection and policy enforcement of Windows 95/98/NT/3.x and Unix server administration through the use of comparative system snapshots.
Aide AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire. It does the same things as the semi-free Tripwire and more. -
Re: HDTV, "Widescreen", and FireWire...
I think if I were a director, I would just use whatever aspect ratio I wanted and shoot only once. And when it came time to make a pan-'n-scan version of the movie, I wouldn't hesitate to zoom out and show the whole screen when necessary (causing momentary letterboxing) to avoid the "talking noses" problem.
Another idea is to use "partial letterboxing" -- zoom in just enough that you crop very little on the sides, and cause thin black bars at the top and bottom. Most viewers with a preference for pan-'n-scan wouldn't mind, and some wouldn't even notice due to the thin black bars being covered up by their TV's overscan!
There's also soft matte, but, boom microphone appearances notwithstanding, it must be just an annoyance to directors to have to work with it, and it really isn't any better than letterboxing-- you are just given the illusion of not seeing a letterboxed picture.
-
Re:Aqua & X11
How about running a deeply iterative Mandelbrot set render on a postscript printer engine? This has also been done. Some code here but not sure this would do the trick - i havent the time to look at it in detail. First link the guy who did this on LaserWriter IINTX, which had a '30 processor when Apple's best computer had only '020s !!
I dont know about executing this as a virsu like program, but maybe you could just embed it in an innoscent looking document market SecrE7$Ov_cMDrtACO'S_gIRL.PS.GZ and watch as Ghostscript dies or hangs in a multiday caluclation #8-) -
OT (sort of) YOPY Dev Kit Out April 30th
I got an email from Gmate saying the software development kit for the Yopy will be out on April 30th. In case you don't know, the Yopy is a Linux based PDA that will be marketed by Samsung. It runs on the 206mhz StrongARM and has a 4" TFT color screen, stereo audio, 32 meg ROM, 32 meg flash RAM (both upgradeable), compact flash slot, RS-232 and USB, 4-way game type buttons, a LiOh battery and runs Linux with W Windows. Gamate is developing lots of fun gadgets to plug into the CF slot (digital camera, PCS phone, Bluetooth and other wireless stuff). The Yopy itself is due out around the first of June. Cpt_Kirks
-
Intrusion Detection Software offers protection
The fact that root priviledges are required offers a great deal of protection in Linux (and other *nix's.) Of course a lot of software needs to be installed as root so we aren't completely protected. I think people are more likely to write trojans than viruses for Linux due to the fact that Linux boxes are useful to remote users as well as local users. That's neither here nor there though...
If you are running Linux you should absolutely be using some sort of IDS (Intrusion Detection Software.) I use aide. It's a 'tripwire' type program that detects changes in files (using an MD5 hash.) I have it configured on my home PC and my server. It runs via cron once a night, then e-mails me the results. That way if someone (or something) changes the kernel or an executable, library, script, etc, I'll know and be able to replace the altered (or infected) files. Software like this should be part of Linux distributions IMHO.
I realize that Virus Detection is not the same thing as active Virus Prevention. Of course, the root login requirement goes a long way as far as prevention.
numb -
Funding for Open Source projectsThere are quite a few ways that I have seen.
The most common one being: No funding at all. Do it in your spare time. Work days, code nights. For Example AIDE is not funded by anyone.
Others that I have seen include your own company: See GNOME, Miguel de Icaza
Government funding: Gnupg
As a part of your work: Redhat labs,Xfree86
Public project house: CoSource, SourceXchange -
Re:Best envrnmt. for a newbie C++ guy: BeOS, KDE,
To sum up, maybe someone can give me a opinion on a good "Starter C++" platform:
I would have to say GTK-- (a C++ wraper for GTK+) pretty much kicks ass. GTK+ has a decent OO design, which is kind of a pain to use in C, but GTK-- manages to make GTK+ easy to use without losing functionality, or being so totally diffrent from GTK+ that you can't use GTK+ documentation to "figure out" how some underdocumented Gtk-- bit works.
I use to do a lot of Xt and Xaw, and even raw Xlib work. Then nothing for about six years. Then I picked up GTK-- and wrote a half decent MP3 juke box in a cupple of weeks. Higly recomended.
-
My findingsI have a 19" SUN/Sony 1962B (it was made by Sony and sold by Sun). It didn't work yet.
Fixed sync isn't a problem, all you have to do is find a good modeline (and for text mode, use fb or svgatextmode). But, most of these monitors are nastier - composite sync or sync-on-green. Then you'll have to find a video board that supports these sync modes, or build an adaptor. These are the links I found:
- Sun GDM-1962-B Specifications
- Drivers for fixed frequency monitors, linux, metheus and other graphics cards.
- SUMMARY:Ye Olde Monitor
- Bookmarks for Teemu Laine (look for "sun")
- ! Sun: GDM-1962-B # 365-1130-01 or # 365-1113-01
- http://www.synergetech.co.j p/html/hal9000/display/1.txt
- SUN 20" Premium (SONY) GDM-20D10 monitor to a PC with Windows 95/98/NT
- SUN 19" monitor GDM-1962 (color, build 1991) with a PC with Windows 95 or 98
- ! Drivers PC Graphics Card (QUANTUM Fixed Frequency and MultiScan).
- Using a fixed-frequency monitor on a PC
One of these pages claims that the MACH64 can work with my monitor, but I have a VLB one and it doesn't (the modelines given in the page give me "illegal mode according to MACH BIOS" or something). I'll try to exchange it for a PCI. Otherwise, if anyone can send me more modes I'll be very grateful
:-) -
Re:16:9, DVD me baby!
Seeking enlightenment about all this aspect ratio stuff, and why you need to care? Why don't you check out How film is transferred to video? And then pop over to the DVD FAQ. And finally, jump to this list of anamorphic DVDs.
-
Signal SystemsAsside from this development, there has also been some talk on irc between members of the KDE crew and myself on sharing the signal/slot implementation between Gtk-- and Qt. Although the meeting was slightly dampened by my over competive nature, it generally ended with a positive step towards working together. This would further interopablity between KDE and GNOME by allowing the KDE C++ code and C++ GNOME code to share library elements that do not depend on the widget sets.
Sharing of signal/slot implementations would benifit KDE by removing the MOC preprocessor and improve the flexiblity of their signal/slots. GNOME will get the benifit that KDE libraries and applications will be less tied to Qt and thus more easily reused. Since libsigc++, the Gtk-- signal system, is a close translation of the capablities of gtk+ signal system, this should also reduce the burden of programmers trying to understand the two kits. For projects with multiple frontends, this would be a great help.
Unfortunately, this development is not set to be planned until after the summer when the KDE people start a developers cut of Qt. Assuming that people are interested I can give some directions as to how the translation can be made, but I don't have time to work on it heavily myself. (Preliminary specifications have already been sent to Mosfet.) I can mail more info to other interested programmers.
--Karl
-
Re: Single-floppy X, picoBSD with W, tomsrtbt
There's a relatively old windowing system called W, which is more like GEM than X11. To call it minimal would be putting it mildly.
Check it out:
http://www.modeemi.cs.tut.fi/~puujalka/w1r2.html
http://www.techfak.uni-bielefeld.de/techfak/ags/ti /personen/itschere/w.html
The picoBSD distribution of FreeBSD manages to fit PPP, SSH, and W (with weyes, wclock, and a web browser called -don't laugh- wetscape) onto a single floppy.
If you're looking for the absolute maximum packed onto a single floppy, it's hard to beat tomsrtbt - Linux 2.0.36 and a whole heap of useful stuff, on a 1.7Mb floppy. It even has a floppy image (Memtest-86) included, so it's two diskettes in one! :-) No room for any windowing system though.
Does this floppy format really break certain floppy drives, and if so, how old do said drives need to be? -
Re:Download URL here! - NEW SITES
STAR OFFICE 5.1 Download Sites:
FTP SITES:
Sun SITE UTK at University of Tennessee - Knoxville
TU Clausthal - Germany
Sun SITE Central Europe at RWTH-Aachen - Germany
Sun SITE Finland at the Tampere University of Technology
Sun SITE Switzerland - cnlab & SWITCH - Rapperswil & Zurich
Star Division - Germany
Star Division - Germany
AARNet Mirror Project - Brisbane, Queensland, Australia
HTTP SITES:
Sun SITE USA at University of North Carolina - UNC Chapel Hill
Sun SITE UTK at University of Tennessee - Knoxville
Sun SITE Central Europe at RWTH-Aachen - Germany
Sun SITE Finland at the Tampere University of Technology
Sun SITE Nordic at Kungliga Tekniska Högskolan - Stockholm
Sun SITE Belgium
Sun SITE Northern Europe at Imperial College - London
Sun SITE Switzerland - cnlab & SWITCH - Rapperswil & Zurich -
Re:Download URL here! - NEW SITES
STAR OFFICE 5.1 Download Sites:
FTP SITES:
Sun SITE UTK at University of Tennessee - Knoxville
TU Clausthal - Germany
Sun SITE Central Europe at RWTH-Aachen - Germany
Sun SITE Finland at the Tampere University of Technology
Sun SITE Switzerland - cnlab & SWITCH - Rapperswil & Zurich
Star Division - Germany
Star Division - Germany
AARNet Mirror Project - Brisbane, Queensland, Australia
HTTP SITES:
Sun SITE USA at University of North Carolina - UNC Chapel Hill
Sun SITE UTK at University of Tennessee - Knoxville
Sun SITE Central Europe at RWTH-Aachen - Germany
Sun SITE Finland at the Tampere University of Technology
Sun SITE Nordic at Kungliga Tekniska Högskolan - Stockholm
Sun SITE Belgium
Sun SITE Northern Europe at Imperial College - London
Sun SITE Switzerland - cnlab & SWITCH - Rapperswil & Zurich -
Cool!The pseudocode should work fine. However as to the win32 that I don't know. No one on the project I know of has tried to compile for the windows platform (nor has a windows platform). You should mail the gtkmm mailling list and see if anyone has tried.
I do know that getting the first compile will likely be fun as we are using lots of Unix specific tools like awk, perl, sed, and autoconf. One person did inquired earlier and was told that the tools are available (through cyngus and some other site that I don't have bookmarked.) However, we have not as of yet heard back as to the results of his tests.
The win32 changes were not fulling incorperated into gtk+ at the time of the last release of Gtk--, so I can't be sure the graphic interface is going to compile. Hopefully, 6 months from now when Gtk+ has it next release I can be a little more possitive.
Hope it helps.
--Karl
-
To add some perspective...I attend to Tampere University of Technology in Finland.
My tuition fee is around $100, dental plan included. I get $2 dinners at school. I'm paid approximately $400 each month (for housing and food) for the first 55 months of my studies.
I will graduate on black, but I pay around 25% taxes from my summer jobs and probably around 40% to 50% when I graduate.
--
Pirkka Jokela
It's a different world.. -
Summary of new features?There are a number of C++ bindings available. They each have different approachs to wrapping. Gtk-- with the straight wrapper, VDK with a more Borland type wrapper, and wx/Gtk with the wxWindows standard. Depending on how much or how little you wish to see Gtk code, take your pick.
Gtk-- (which I work on) is currently in beta after a rather long infancy period. We intend to release a 1.0 cut with the next month.
GL support for Gtk is very good. You can render direcly in a window or in a pixmap. See GtkGLArea for more details.
There is even a GL widget in the Gtk-- project. It will be a week or two before it is up to date with the gtk+ 1.2 (basically because it has the largest number of dependencies). If you are interested drop by the GtkGLArea-- website.
--Karl
Gtk-- Contributor -
gtk--Mail your problem to the gtk mailling list if you are having problems. See our web page for details on those lists. (Under reporting bugs.) We have at least 4 guys that would be happy to respond. Currently known problems are that gtk+ changed some methods recently and gtk-- will only compile with the latest release of gtk+.
You can mail me personally, but no guarantees that I know the solution.
For those interested, we have a gtk-- feature freeze and will be releasing gtk-- 1.0pre1 any day now. This version will correspond to the gtk+ 1.2 release.
--Karl
Gtk-- Contributor.