Slashdot Mirror


Public Software Fund's First Project

Russ Nelson writes "The Public Software Fund's first project has been funded for two months worth of development. Tom Jennings (of Fidonet fame) will be writing software to do peer-to-peer file sharing of free software RPM packages, improving the existing free software packages up2date, /current/, and BitTorrent. This will keep new distro releases from being slashdotted."

145 comments

  1. Finally... by URoRRuRRR · · Score: 2, Insightful

    The perfect chance for P2P to redeem itself from being label as illegal activity only. Unfortunately, it won't appeal to 90% of users, so it won't. The idea is still nice.

    --
    "Oh no, 3 horny women and only 2 condoms...Thank god I read slashdot"
  2. Peer-to-peer pioneer kills self by corebreech · · Score: 1, Offtopic

    Story I submitted that got rejected follows. Yeah, it's off-topic. Bite me.

    The New York Times tells us (after we register for free) that Gnutella developer Gene Kan has committed suicide. Let's see, he was young (25) and just over a year ago saw the company he started bought by Sun Microsystems. It would be wrong to jump to conclusions here. It would also be wrong to not start asking questions.

    1. Re:Peer-to-peer pioneer kills self by Anonymous Coward · · Score: 0, Offtopic

      It's really no surprise that such a person would choose to commit suicide. Many criminals are seriously troubled souls. Many of these turn to alcohol and become the bums you see on the street. Others turn to drugs and street crime. Others like Kan turn to pursuits like criminal hacking because being able to control the computer gives them a sense of God-hood and exhilaration.

      People who have these criminal thoughts always seem to turn inward eventually. Some find spirituality, others find nothing. Kan found nothing and that's what we have today. Sometimes there is something to be said for early identification and mandatory treatment for those who exhibit criminal behavior. It would save us all a lot of heartbreak.

    2. Re:Peer-to-peer pioneer kills self by buzzbomb · · Score: 0, Offtopic

      It would be wrong to jump to conclusions here.

      What if I have a mat specifically built for this purpose?

    3. Re:Peer-to-peer pioneer kills self by ceejayoz · · Score: 1, Offtopic

      Asking questions? About what? Suicide is, unfortunately, not an unusual occurance. What, do you think RIAA had him assassinated? They may be one bastard of an organization, but killing people is pretty damned far-fetched.

    4. Re:Peer-to-peer pioneer kills self by Anonymous Coward · · Score: 0, Offtopic
      There has been much speculation over on the Free Republic that the MPAA or the RIAA might have had him whacked. Or perhaps one of the Hollywood moguls had him whacked.

      I seriously doubt the kid really killed himself. I believe it was murder.

    5. Re:Peer-to-peer pioneer kills self by Anonymous Coward · · Score: 0, Offtopic

      Yeah, you're right. Nobody has ever killed anybody over dollars before.

      Especially not billions and billions of dollars.

      Only crackheads kill for personal gain.

    6. Re:Peer-to-peer pioneer kills self by edhall · · Score: 5, Insightful

      The mean-spirited and outright nasty comments that have gotten attached to every post mentioning Gene Kan's death remind me of why I cringe every time Slashdot announces that someone has died. Although it would be nice for Slashdot to provide a place for those of us touched by this tragedy to pay our respects, I'm actually relieved that they haven't. It would be painful to see all the trash that some of the miscreant AC's who hang out here would post.

      Goodbye, Gene.

      -Ed
    7. Re:Peer-to-peer pioneer kills self by rob-fu · · Score: 0, Offtopic

      For anyone who is interested, the link to Kan's weblog is here.

    8. Re:Peer-to-peer pioneer kills self by Cryptnotic · · Score: 1, Offtopic

      This is Funny(+1) if you've seen Office Space. On the other hand, it is definately Offtopic(-1). But it is definately NOT a Troll(-1).

      --
      My other first post is car post.
    9. Re:Peer-to-peer pioneer kills self by lightware · · Score: 1

      Offtopic, but makes for a highly intelligent read, nonetheless.

  3. Wait til the RIAA hears about this! by buzzbomb · · Score: 3, Funny

    If I'm not mistaken, N'Sync has a little-known song named "apache.tgz". Also, Brititany has done "kernel-2.4.19.tgz".

    Oh, well...it was a nice idea while it lasted.

    ;)

    1. Re:Wait til the RIAA hears about this! by ukryule · · Score: 1

      Also, Brititany has done "kernel-2.4.19.tgz".
      Yeah. But it's not a patch on her more experimental '-ac' work ...

    2. Re:Wait til the RIAA hears about this! by gazbo · · Score: 0, Offtopic
      Yeah. But it's not a patch on her more experimental '-ac' work ...

      Why doesn't she create an account?

  4. flash crowd? by ceejayoz · · Score: 5, Interesting

    The "slashdotted" link has an interesting link about another name for the /. effect... the "flash crowd"

    Larry Niven's 1973 SF short story "Flash Crowd" predicted that one consequence of cheap teleportation would be huge crowds materializing almost instantly at the sites of interesting news stories. Twenty years later the term passed into common use on the Internet to describe exponential spikes in website or server usage when one passes a certain threshold of popular interest (what this does to the server may also be called slashdot effect).

    1. Re:flash crowd? by Anenga · · Score: 1

      Oh boy, I can't wait until the definition for the "Slashdotted" gets Slashdotted. What a conundrum that will be.

  5. But you're violating their copyleft's by muon1183 · · Score: 1

    If the RIAA/MPAA hears about this, we're doomed. Not only will they accuse people of "stealing" copyleft material. It's free, as in beer, you can't steal it. This is what P2P was meant for. Let's hope that this takes off.

    --

    There's no sig like SIGSEG
  6. wait, isn't he a news anchorman? by Anonymous Coward · · Score: 0

    "Tom Jennings" .. is he related to "Peter Brokaw"?

    HAW HAW HAW I MADE ME UP A FUNNY!

  7. Redhat by Snoopy77 · · Score: 4, Interesting

    Before everyone starts screeming, "Why only development for Redhat!" you may note that John Gilmore (evidently a Redhat guy) donated the money for this project. I don't know why Redhat didn't just hire the guy.

    --
    "She's a West Texas girl, just like me" - G.W Bush Iraqis
    1. Re:Redhat by magicslax · · Score: 1
      I don't know why Redhat didn't just hire the guy.

      My best guess is Public Relations: free Slashdotting and an even open-friendlier image. Red Hat wouldn't get to show off quite as much if they just put another employee behind their doors.

    2. Re:Redhat by Anonymous Coward · · Score: 0

      Red Hat is to be praised for their many, many financial contributions to open source projects. No one, other than IBM, even comes close. IBM of course has funded billions of dollars worth of Linux development, particularly in porting enterprise software to Linux. Linux, as you may or may not know, is the wonderfully successful new operating system which has taken the world by storm.

    3. Re:Redhat by asobala · · Score: 1

      Well, I suppose they could be sharing debs as well as RPMs. But if the whole point is to avoid instant slashdotting of new releases, there's not much point... it couldn't really be argued that debian collapses when a new release comes out, for the simple reason it's not there for a couple of months.

      I love debian.

  8. This sucks by aminorex · · Score: 2, Troll

    Why don't they fund the original authors and
    contributors to provide the desired enhancements
    instead of locking them out? Sure. Screw the
    innovators and featherbed your pals. This is just
    corrupt, and there's no way any of my companies will
    be contributing to that fund. Cronyism pretending
    to be public service. Pffft.

    --
    -I like my women like I like my tea: green-
    1. Re:This sucks by josh+crawley · · Score: 2

      Could you elaboriate? I'm fairly interested in this, but no links to what you mention.

      Thanks.

    2. Re:This sucks by HeUnique · · Score: 2

      Original authors??

      Last time I checked - RPM stands for "Red hat Package Management" - so should John Gilmore (from Red Hat) pay Red Hat? ;)

      --
      Hetz (Heunique)
    3. Re:This sucks by vidarh · · Score: 3, Informative
      Have you even read their pages? The donor gets to decide who will do the work. This is just a way for private individuals to hire someone to do open source development work and be able to deduct it from their taxes.

      If you want the original authors to make money, donate money and specify who you want to do the work.

    4. Re:This sucks by CorwinOfAmber · · Score: 1
      Last time I checked - RPM stands for "Red hat Package Management"

      Actually, RPM stands for RPM Package Manager. I forgot where I first saw this referenced, but here is a google cache of a mailing about the name.

      --
      My future's determined by Thieves, thugs, and vermin -- The Offspring
    5. Re:This sucks by Anonymous Coward · · Score: 1, Informative

      Bram Cohen is the (broke) author of BitTorrent, but instead of hiring him to do this project, they hired somebody else.

    6. Re:This sucks by aminorex · · Score: 2

      So it's a tax cheat? A way to avoid paying
      payroll taxes to your employees by funnelling the
      funds through a non-profit?

      --
      -I like my women like I like my tea: green-
    7. Re:This sucks by vidarh · · Score: 2
      No. You would not be able to use this for employees. You could use it for contractors though, but as they point out a business wouldn't save anything doing that as they are taxed on profit, and paying a contractor will reduce your profit, reducing your tax bill regardless.

      The purpose is to let individuals enjoy the same kind of tax benefit. Employees are taxed on earnings, not on profit, so if you hire someone to work on open source for you directly it won't affect your tax bill. But if you donate the money to a non-profit that hires the person for you, you can reduce your tax bill.

      Considering that this is all within the law, and that it is up to IRS whether or not to accept the validity of what they are doing for the purpose of tax excempt status, calling it a "tax cheat" is certainly not fitting.

      This is exactly the same way you can indirectly hire a pastor through a church by donating money, and reduce your tax bill by doing so.

      It's all explained on their pages, linked to from the article - why not read them?

  9. BSD is anti-consumer by Anonymous Coward · · Score: 0
    BSD favors the retailer over the consumer.

    GNU favors the consumer over the retailer.

    Which you prefer depends on whose freedom which you consider is more important. Linux follows the GPL, thus it favors the consumer. To paraphrase Abraham Lincoln, "God must have loved the consumer because he made so many of them."

    1. Re:BSD is anti-consumer by Anonymous Coward · · Score: 1, Insightful

      You're simplistic statements are incorrect.

      Standard copyright favors the IP producer over consumers. i.e. The producer is incentivized to create because the government will protect them in the courts.

      The GPL favors consumers over producers. i.e. The incentive to create is minimized because profit from selling software as a product is reduced to almost zero.

      The BSD License favors neither over the other. i.e. Consumers can use software in the same way as provided in the GPL, and producers can build upon the software without jeopardizing their intellectual property.

    2. Re:BSD is anti-consumer by Anonymous Coward · · Score: 0

      GNU favours irritating, arrogant, self-righteous, shithead hippies. I've met several GNU lusers, and they've all been irritating, arrogant, self-righteous, shithead hippies.

    3. Re:BSD is anti-consumer by Anonymous Coward · · Score: 0
      GNU favors the consumer over the retailer.

      BSD favors the retailer over the consumer.

      Which you prefer depends on whose freedom which you consider is more important. Linux follows the GPL, thus it favors the consumer. To paraphrase Abraham Lincoln, "God must have loved the consumer because He made so many of them."

    4. Re:BSD is anti-consumer by Anonymous Coward · · Score: 0

      GNU favors the consumer over the retailer.

      BSD favors the retailer over the consumer.

      Which you prefer depends on whose freedom which you consider is more important. Linux follows the GPL, thus it favors the consumer. To paraphrase Abraham Lincoln, "God must have loved the consumer because He made so many of them."

  10. CNN has story on this as well (with pic) by Anonymous Coward · · Score: 0, Offtopic
    1. Re:CNN has story on this as well (with pic) by CProgrammer98 · · Score: 1, Offtopic

      So does Gnutella but they didn't mentioned he shot himself.

      Very Very sad.

      --
      And the people shall be oppressed, every one by another, and every one by his neighbour Isaiah 3:5
  11. Tom Jennings by Pathwalker · · Score: 5, Informative

    He has done a lot more than FidoNet - take a look at some of the artwork he's done recently. ( I suggest taking a look at the Story Teller - very very cool...)

    He also has lots of info on Nixie tubes and builds some cool looking clocks with them (to tie into the earlier /. articles on nixie clocks from a few months back).

    1. Re:Tom Jennings by Anonymous Coward · · Score: 0, Offtopic

      No kidding. They already called him a British mathematician.

      How rendundant can you get?

    2. Re:Tom Jennings by taniwha · · Score: 1

      don't forget TLG - he helped break the back of the original closed internet run by the big boys by helping make it possible for people to resell packets which lead to the mom&pop isp and lots of little customers rather than a few big ones which had been the 'net biz model up untill then.
      And of course one mustn't forget the WPS toilet-cam maybe one of the first web-trolls

  12. You can help! by PureFiction · · Score: 4, Interesting

    We are currently running a BitTorrent load test at:

    http://66.139.73.165/

    If you would like to help out an open source content distribution network we would greatly appreciate it!

    1. Re:You can help! by Anonymous Coward · · Score: 1

      I like the idea about the porn downloads. To tell the truth, I was going to file the page in the back of my brain until I saw that. :)

      We are *so* gullible. :) It's kind of cruel to post free porn on Slashdot, especially when it is available via a system that provides fast downloads to everybody. So you can't say "Oh, well I bet it'll be Slashdotted."

      Interesting marketing tactic, too! ++ for that. :)

    2. Re:You can help! by Anonymous Coward · · Score: 0

      The 10 meg file came in at about 5 times the rate of the 100 meg file for me. I guess that means more people must be downloading the smaller one. So, as the demand goes up, the speed goes up instead of down. Congrats to the developers, this is very cool.

    3. Re:You can help! by vsavkin · · Score: 1

      Cool stuff. I got 500-1000kbytes/sec download rate and 150-200kbytes/sec upload.

  13. I don't think the RIAA likes my comment by roalt · · Score: 3, Interesting
    I love open-source...
    sed 's/\.rpm/\.mp3/g' *.c
    1. Re:I don't think the RIAA likes my comment by HiThere · · Score: 2

      Well, you left out *.h, *.py, etc. But I wonder how much additional work would be needed. You might be perfectly right.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
  14. Don't think the RIAA gives a fuck about your post by Anonymous Coward · · Score: 0

    n/t

  15. Free Porn by SeanTobin · · Score: 3, Informative

    OMG. It really is porn. I figured it'd be a huge advertizement for them or something. Thumbs (yes, thumbs) up to BitTorrent for actually putting some truth in advertizing.

    --
    Karma: SELECT `karma` FROM `users` WHERE `userid`=138474;
    1. Re:Free Porn by Anonymous Coward · · Score: 0

      Sucks for you. :) 20 - 50 KB/s here.

    2. Re:Free Porn by berck · · Score: 1

      Not really sure how it works, but the rates seem to be fluctuating a LOT. Since I posted that the d/l rates have fluctuated from 0.5kb/s to 20kb/s, with an average around 6kb/s, I would guess. Upload rates have been anywhere from 2kb/s to 23kb/s on an aDSL line.

    3. Re:Free Porn by Anonymous Coward · · Score: 0

      120 Kbytes per-second download
      0.8 Kbytes per-second upload..

      Could be great for some "dpkg" clone where multiple RPMS can exists together to satisfy dependencies. Think "KDE 3.1 Alpha 1" package spread...

  16. why just rpm's by bug1 · · Score: 1

    What does the packaging format have to do with p2p ?

    The required metadata fields to uniquely identify a package (i.e. package name and version) are similar in all packaging schemes.

    The only significant bit that would be distribution dependent would be dependeny handling.

    1. Re:why just rpm's by aveng0 · · Score: 1

      I would think that if you dont want to get some modified trojan package, that there would be some authentication or 1 way hash matching... it would have to be integrated into the package itself... i would think

    2. Re:why just rpm's by bug1 · · Score: 1

      No, each package (of any type) has a md5sum which is authenticated against the md5sum provided by a gpg signed list of package-md5sums's

  17. On funding by bentriloquist · · Score: 1

    From PubSoft's funding page:

    "Our funding comes from the public. From people like you, who would like to see more and better freely available software.

    We have received our first donation, of $35,000, from John Gilmore. Will you be next? He is funding Tom Jennings to work on peer-to-peer sharing of free software RPMs."


    I don't know about the typical public software user, but I don't have $35K to spend. On the other hand, I don't need any software that I don't already have. The $35K donation does not come from a typical user and I would hardly call the project typical. Anyway, it will be fun to see if PubSoft's idea catches on.

    1. Re:On funding by 3seas · · Score: 2


      Who said it had to be large sums of money?

      All Pubsoft is offering is to handle some issues and concernes that come
      up in regards to dealing with donations to sponsor OSI compliant work. Like
      how do you know the developer does the work they are paid for...etc..

      The follow is such a situation where the "how" to make this happen hasn't
      been figured out (should the developer be offered the 550 Euro).

      But here is the solution with PubSoft!!

      BTW: this is NOT me though I have offered some. AROS is an Open Source Amiga Clone
      project that is almost at the 80% done mark. But it's intended to be better than
      AmigaOS, and portable. See AROS @ Sourceforge

      I have two months of free time this summer, which I would love to spend
      on coding for AROS or AWeb Open Source. The problem is that I have to pay
      my bills, and therefore I would need to get some temporary job. This of
      course means there would be very little time to code on those projects... :-/

      The solution to this would be if someone (or some group of people) were
      willing to sponsor me for coding on AROS or AWeb one month or two. I don't
      ask for much money, just enough to pay my bills and to buy food. For that
      I would code 60 hours / week, that is more than fulltime. In total, this
      would mean around 240 hours of work going into AROS or AWeb in a month,
      to improve any part you (the sponsor) wants me to.

      You can find more information at:
      AROS or AWeb Sponsoring

    2. Re:On funding by Russ+Nelson · · Score: 3, Informative

      If you donate $10 to this project, all of it goes to paying Tom to work that much longer on it. Even $10 will help.
      -russ

      --
      Don't piss off The Angry Economist
  18. Free Porn by berck · · Score: 1

    Hahah. What a great idea.

    "Hmmm, how can we can get at least 100 people to download a file at once?" "I know, lets offer them free porn!"

    Seems to have worked, since I'm getting a whopping 1.5k/b a second....

  19. the name needs to change, though. by lingqi · · Score: 2
    lookie here.

    now... if you just bounced onto that company online -- what goes on in your mind?
    1) public fund open source software company
    2) beer related software company
    3) beer

    my reaction was somewhere between 2 and 3 above, leaning strongly toward 3...

    --

    My life in the land of the rising sun.

    1. Re:the name needs to change, though. by Anonymous Coward · · Score: 1

      Maybe it's because I don't drink,or maybe it's because people in the U.S. don't usually refer to bars as pubs, but I didn't think of 2 or 3 at all.

    2. Re:the name needs to change, though. by Russ+Nelson · · Score: 2

      Heck, if people want to write public software in pubs, that's fine with us. If you don't like pubsoft.org, then use publicsoftware.org.
      -russ

      --
      Don't piss off The Angry Economist
  20. Another Way to Fund Open Source Software by pheph · · Score: 1

    I do work for a company that donates significant (and published) portions of its sales (mostly Open Source compatible computer hardware) to Open Source projects and organizations of the user's choosings.
    For more information, check Open Soars

    1. Re:Another Way to Fund Open Source Software by ActiveSX · · Score: 1

      Eh, what? Did you just say Open Sores?

  21. New meaning for RPM? by tg_schlacht · · Score: 1

    Red Hat Pornography Manager

  22. I just remembered the one thing that makes P2P bad by Anonymous Coward · · Score: 2, Interesting

    I think this program is a really great concept... I eagerly downloaded the client and started the download of the test file, when I was quickly reminded of what ruins every P2P program I've tried. As soon as people start downloading from me, my incoming connection grinds to a halt. It literally just took me 5 minutes to get back to this page in order to write my reply. Once all of my upstream bandwidth is used, my download speed drops to almost nothing, leaving me with virtually no connection the entire time I'm trying to download whatever it is I'm getting, which takes even longer because my connection is so slow. Isn't there any way to make P2P software play nice with the connection and only use the unused outgoing bandwidth?

    Posting as AC because I'm too lazy to login...

  23. I thought... by Sam+Lowry · · Score: 0, Troll

    That BitTorrent is not Free as in speech and is not even completely free as in beer.

    1. Re:I thought... by Anonymous Coward · · Score: 0

      you're talking about bitkeeper you dumbfuck.

      No one CARES what some nigga troll has to say about it, which is why your sweet, sweet candy ass is at -1, while MY BLAZIN' AC hotness resides perpetually at

      ZZZZZZ EEEEEE RRRRR OOOO
      Z EE R RR OO OO
      ZZ EEEEEE RRRRR OO OO
      Z EE RR R OO OO
      ZZZZZZ EEEEEE RR RR OOOO

      Z to tha fuckin' ERO, cuz! AC fo' life!

  24. How to get it working under Mozilla on Win32 by flonker · · Score: 3, Interesting

    My experience, (as of a few minutes ago.)

    The installer simply says that "BitTorrent will now work under Internet Explorer", or words to that effect. No status screen, no readme, no "install to directory". Just a simple dialog box. Well, it turns out, BitTorrent is automatically installed to "%programdir%\BitTorrent" with the executable named "btdownloadprefetched.exe". So, click on one of the .torrent links, click "Advanced", navigate to, and select the executable. Click OK. Then choose "Open using", browse, select the executable again, OK, click the "Open using" radio button again, (some kind of bug makes the final "OK" deselected somewhere.) And click the final OK. Everything seems to be configured.

    Interesting algo. Lots of interesting side effects. Accurate download stats for who and how many times. Upstream connections only during a flash crowd, (or so it seems).

  25. What do I get? by Anonymous Coward · · Score: 1

    Using the standard client-server system for file transfers, only the server (ie those producing cheap software) and the client (ie those consuming cheap software) suffer from poor transfer speeds when a popular file is released. Using a peer-to-peer system, everyone suffers, (since the system is distributed amongst every peer) including those who could not care less about the hot new apache patch. I don't feel it is fair for the rest of us to suffer to support linuz dorks.

    1. Re:What do I get? by Anonymous Coward · · Score: 0

      And just how, pray tell, are "those who could not care less about the hot new apache patch" going to be the least bit affected since they aren't downloading it via BitTorrent?

      BitTorrent doesn't sit on your system acting as a general server for the whole world for every BitTorrent download. It is only active when you are downloading a particular BitTorrent stream, it only acts as a peer for the particular BitTorrent stream you are receiving, and once downloading is complete it is only active until you close the client.

  26. Re:I just remembered the one thing that makes P2P by Subcarrier · · Score: 3, Informative

    As soon as people start downloading from me, my incoming connection grinds to a halt.

    This is a good point, especially with highly asymmetric systems like cable connections (asymmetry can be as high as 1:40 on these beauties). Some of the uplink capacity is needed for TCP protocol acknowledgement packets. If the uplink becomes congested, the downlink clogs down as well.

    Isn't there any way to make P2P software play nice with the connection and only use the unused outgoing bandwidth?

    It's possible but it requires support from the OS. A quality-of-service implementation like DiffServ can help solve the problem. Packets belonging the P2P traffic could be assigned to the lowest service class so that precendence is always given to other traffic.

    --
    "I have opinions of my own, strong opinions, but I don't always agree with them." -- George H. W. Bush
  27. Not just Red Hat by Nailer · · Score: 2

    As far as I can tell, there's nothing Red Hat specific about the project. Linux clients not already using up2date can, as far as I see it, still install up2date and use Current servers to provide their packages rather than Red hat network.

    Linux clients who can't install RPM packages (there aren't many) aren't compliant with the Linux Standard Base.

    1. Re:Not just Red Hat by Anonymous Coward · · Score: 0

      "Linux clients who can't install RPM packages (there aren't many) aren't compliant with the Linux Standard Base."

      LSB is NOT needed and has nothing to do with p2p systems.

      Your a Xenophobe

    2. Re:Not just Red Hat by Denny · · Score: 1

      Your answer has nothing to do with the original question. The comment you replied to did.

      --
      Police State UK - news and
  28. What's the point? by chris_sawtell · · Score: 4, Informative

    BitTorrent works absolutely perfectly.
    Somebody has more money than sense. Just reward the BitTorrent author, if you want to splash money around.

  29. They should sort out RPM by oliverthered · · Score: 2

    It's nice and all to have a P2P RPM network, but the money would have been better spent improving RPM's.

    RPM's need to be made far more granuler this would sort out all thoes evil dep problems which in my experiance are.
    RPM X requires RPM's A B C D E .... P to be installed where RPM's D-P are obscure features that no-one ever uses.

    No if all RPM's were in nice sized chunks you would only have to install the chunk you wanted/required. This would keep the install base down, and force packagers/programmers to do things in a nice modula way.

    Also... Why can't I use source RPM's that optionally compile themselfs after install...

    Why don't RPM's seem to be signed!!!

    RPM's should have "where can i get updates / security patches etc.. from" properties.

    Now if they sotred that out then maybe you wouldn't need each distro to build there RPM's and each RPM to be so huge an bloaty (especially when you take deps into account!!)

    --
    thank God the internet isn't a human right.
  30. don't use up2date for your kernel updates! by f_ckthisaddy · · Score: 1

    I had my first kernel panic in a production server last week. The system ran fine for nearly a year, within a week of running up2date, and having it automatically building a new kernel, I got a kernel panic in the middle of the night.

    So far no problems with packages, just build your kernel yourself!

    BT

  31. Signature/Security by nuggz · · Score: 2

    I agree, without signed packages and verification this could turn into quite a security breach.

    Installing unknown binaries from a random source is BAD

  32. 620K BYTES per sec! 5mbps! by Alsee · · Score: 2

    I peaked at 620K BYTES per sec on my cable modem!
    Nearly 5 megbits per sec! Yahoo!

    This program ROCKS!
    And thank you Cablevision! :)

    After it completes downloading it leaves up the window with a "finnish" button and keeps uploading to other people. Just leave it up while you watch the movie and you improve other people's download speeds :)

    -

    --
    - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  33. Re:I just remembered the one thing that makes P2P by Lev_Arris · · Score: 1

    Erm... I don't know about you but when I'm running ed2k and tell it that it's max upload limit is 19kbyte/sec then it's upload limit is 19kbyte/sec and nothing more. Granted, it will somethimes peak over the given limit a little, so I just substract another kbyte/sec to get the 'reserved upload capacity' that I need for browsing et al...

  34. P2P and software. by 6odm · · Score: 1

    Distributing software via p2p-network is.. umh.. dangerous. Without crc/md5-sum/hash/whatewer authentication user can not be sure what he/she has been downloaded. And installing that kind of binary, no way Jose. And even with hashs user must verify the binary. How many of us (and what about the rest of the world) have strenght enough to verify every binary? Well great way for distributing troijans and viruses.

    1. Re:P2P and software. by dmarien · · Score: 1

      exactly what I was thinking... great point. if i had mod points i would have given you one.

      cheers!

      --
      dmarien
    2. Re:P2P and software. by cduffy · · Score: 2

      Not necessarily.

      Let's say that your ".torrent" control file (which you download through traditional means) contains a md5sum for the entire file -- and perhaps another for the list of block sums (or that could be in the file directly). Your downloads are thus checked, and no network corruption can occur.

      I'll bet dollars to doughnuts that BitTorrent does some form of verification not entirely unlike what I mention here.

    3. Re:P2P and software. by 6odm · · Score: 1

      Yes yes, but one must download ".torrent" file before hand. That is not big problem for me, but I know many ppls who directly opens every email attach, without virus scanning it first. I newer ever do that. So how many check that ".torrent" before installing binary. Those binaries can not carry ".torrent"-file or url or location to, because it can be manufactured allso. Maybe if user first download binary files indexnumber or some identification (generated randomly by distributor) and ".torrent", then search binary by its identification number.

    4. Re:P2P and software. by cduffy · · Score: 2

      Putting safeguards in the .torrent file is entirely effective as far as one understands its goal -- which is to say, making downloads as secure as they would be via a traditional (non-P2P) download of the whole file. Presuming presence of the abovementioned safeguards, Corruptability of the .torrent file in a BitTorrent-based distribution system is effectively equivalent to corruption of the entire download in another system -- they have the same risks, same difficulty levels, &c. If downloading the file via traditional HTTP is considered an acceptable risk, so must be a similar BitTorrent-based download.

      That is to say: If people don't check where they get the .torrent file that downloads their installer from, they wouldn't check where they get their installer from otherwise; the risks are equivalent.

  35. What about Mnet? by haeger · · Score: 2
    What about the mnet project? Although in an early phase it should be quite useful for things like this.
    Files are split up into pieces and published over a lot of hosts, and when you download something you query the nodes closest to you. Should they not have the file but notice that a particular block is in high demand they contact other nodes and get that block so that data that's in high demand is moved to where the demand is.

    It looks quite interesting. There is a win32 package availible for download that's functional but not good, and it's quite simple to get it from the cvs and compile it for your favorite platform.
    I think there is a new release in the near future.

    .haeger

    --
    You are not entitled to your opinion. You are entitled to your informed opinion. -- Harlan Ellison
  36. Same idea by AeiwiMaster · · Score: 1

    I had the same idea some time ago.
    I had actuly started to look closely
    on a open source napster like server,
    so I could change it to exchange RPM's.

    But then i swhiched to debian and
    concluded that the was no need for
    such a system.

    Debian rocks.

    Knud

  37. Why so many offtopic mods? by shepd · · Score: 1, Offtopic

    Some of the more inquisitive than offensive posts have clearly been modded offtopic by someone who can't stomach the slightest questioning into someone's unusual death.

    Why is that? I find that just as insulting as some of the comments desgined to be mean-spirited.

    --
    If you could be told what you can see or read, then it follows that you could be told what to say or think - BoC
  38. up2date by OpenMind(tm) · · Score: 3, Interesting

    I may be wrong, but it seems to me that up2date in its current form is hopelessly married to Red Hat's services, and not a generally applicable piece of software. If I am correct about this, I can hardly see it as a free software victory when development money is going to improve such a limited and vendor specific program. The most obvious effect of this development would be to take the demand off of RedHat's servers, and put it on those of its users. A shrewd technique, but not exactly a public service. BitTorrent development from this project might well be a great help to the community, however.

    1. Re:up2date by hunterm · · Score: 1

      That's what current does - it allows you to seperate up2date from Red Hat itself. Nobodies done it that I know of, but I don't know why Suse or Mandrake distros wouldn't work with up2date/current.

      If you do get it working with one of the other distro's, let me know - I'm the original author of current.

  39. More Funding for OS by Anonymous Coward · · Score: 0

    Thanks to funding from a technology company that prefers to remain anonymous, Benetech has started a market research and planning process to assess the needs of the nonprofit sector and the poor worldwide. They are expecting this to lead to a major project named Libre that will adapt existing Open Source applications and build new ones in an effort to create a viable low cost Linux solution for the people who need it most.

    http://www.benetech.org/projects/libre.shtml

  40. Security / Compromised RPM packages by Simon+Kongshoj · · Score: 1
    Which methods are there to allow such a network to deal with the possibility of an attacker who makes compromised RPMs available? P2P package sharing seems to be a brilliant idea (and a very good use for P2P), yet I'm not quite sure how that security problem could be dealt with. One possibility could be to have the system compare MD5 checksums of P2P-downloaded packages with the official ones -- but that has the problems that the user also needs to get a MD5 checksum of the official package, and that it's likely that the packages distributed on a P2P package network wouldn't all have official counterparts (homegrown packages, etc.).

    Note: I'm not very familiar with how RPM packaging works in the first place, as I have mainly used dpkg and various source package managers. (swpkg, depot, graft, etc.)

    --
    Six sick .sigs, the Number of the Beast!
  41. This is how it is supposed to happen... by maxconfus · · Score: 1

    This is how it is supposed to happen. Independent concerns helping fund Open Source projects they are interested in. Simple, plain, nothing more to say.

    --
    A hand up and a foot on every chest...
  42. Gilmore founded Cygnus by hqm · · Score: 2

    He founded Cygnus, which was the leading
    free software developer until they were
    bought by RedHat for $600 million. I doubt
    Gilmore needs a job now.

    1. Re:Gilmore founded Cygnus by FattMattP · · Score: 2

      He didn't need a job before considering the fact that he was the fifth employee of Sun Microsystems. He made a killing from the stock he had and used that to start up a lot of different things including Cygnus.

      --
      Prevent email address forgery. Publish SPF records for y
  43. That really is a good idea though! by Mustang+Matt · · Score: 2

    They ought to use it as a chance to unify packages across all distributions while they're at it.

    --
    The man who trades freedom for security does not deserve nor will he ever receive either. - Benjamin Franklin
  44. Re:I don't believe these clowns. by Russ+Nelson · · Score: 2

    The Public Software Fund would be happy to accept funding for any BSD project. Write a check!
    -russ

    --
    Don't piss off The Angry Economist
  45. shape your traffic by raulmazda · · Score: 1
    Run linux and shape your traffic so that an upload can't eat _ALL_ of your outgoing bandwidth.

    See wondershaper for a semi user friendly script and the Linux Advanced Routing & Shaping HOWTO for docs if you want to tweak it.

  46. Open Content Network (P2P for open source) by Orasis · · Score: 4, Interesting

    Another complementary project in progress is the Open Content Network

    The OCN provides an important piece of the puzzle with its metadata proxy servers. These servers automatically generate the verification information (SHA-1 hashes) necessary to perform secure P2P downloads.

    It would be nice if this project leveraged the significant amount of work going into the OCN to provide a standard way to securely delivery any open source content across peer-to-peer networks.

    Check out the OCN specifications here.

  47. Easy Money by AmericanInKiev · · Score: 2, Informative
    Assuming you have had a job for some of this year - You probably have all the funding you need waiting for you at the IRS.

    If you create a "work of art", have it appraised by an expert, print it on paper, and donate it to a non-profit organization. That org can issue you a tax deduction.

    Tax Deductions are worth n+n^2 face value where n is your income tax rate. Say you were at the 50% rate - the Tax Deduction you receive for your artistic contribution to AmigaOS would be 75% of the Appraised Value. I doubt many programmers get 75% of the selling price of their software - so it's really a generous deal.

    See IRS Document 561 for official details on donating "Works of Art".

    Its true the document doesn't break down "Works of Art" into Books, vs Photographs, vs Original Van Gough vs, Compiled works of highly mathmatical precision, but Art is a big tent, and Software is as like art as anything else.

    IANAL/CPA But what an easy place to find the money you need to complete that OS! And We the People will both benefit and pay.

    AIK

  48. Re:I don't believe these clowns. by AmericanInKiev · · Score: 1

    Rus,
    Why Doesn't the Public Software Fund simply accept Donation of Software as "Art" from Programmers - who then receive a Tax Deduction for the appraised amount. This way the People would pay for what they get - OSI compliance Software.

    What could be easier or more fair?

    AIL

  49. context, please. by tomjennings · · Score: 1

    peer-to-peer is a lovely idea, but without authentication it quickly becomes a cesspool.

    every up2date client has a certificate to authenticate the connection (to redhat) and a GPG public key to verify each package; you can reasonably assume the packages are what they claim to be.

    gnutella (et al) vs. up2date: which do you trust to find (RedHat) kernel updates?

    bittorrent minimizes the 'slashdot effect', and it's our intent to build it in.

    combined, this hopefully makes distribution of RPMs pretty nice, and a good starting point for a more general file distribution system.

    one step at a time, no pushing please.

    tomj

    PS: no thing solves all problems.

  50. Re:I don't believe these clowns. by Russ+Nelson · · Score: 2

    You can already do this. Assign your copyright to the Free Software Foundation. Take the assignation contract and use it as a receipt. The only trick is coming up with a valuation for the software that the IRS will believe. As long as it's a plausible valuation, the IRS won't assess penalties if you get audited. They'll just hit you with interest charges.
    -russ

    --
    Don't piss off The Angry Economist