Slashdot Mirror


Software Choice Group Tells DOD Not to Use Open Source

ducomputergeek writes "A group calling themselves the Initiative for Software Choice, backed by Microsoft and others, is recommending that the DOD drop plans for further adoption of Open Source software. This comes after MITRE, a defense contractor, published a report stating that not only does the Department of Defense use opensource, but is recommend on using it more. The article is at News.com and you can read it here."

211 of 410 comments (clear)

  1. Re:NEWS FLASH by dzym · · Score: 5, Insightful
    Yes, people can have different opinions.

    You can be paid to have them, or you can have them due to some deeply held beliefs with religious fervor, or you can arrive at your opinion through a process of reasoning.

    On the other hand, reasoning that it's better to move to an open source product just because said OS product is currently attacked less, is fallacious.

  2. Microsoft at al? by DigitalDad · · Score: 4, Insightful

    Seriously, how can a group called "Initiative for Software Choice" that's backed by major players against open source (see Microsoft) be open and objective in this?

    --


    My good sig is in the laundry
    1. Re:Microsoft at al? by Winterblink · · Score: 2

      How can open source groups give a nonbiased pitch of their products/ideals/whatever? The door swings both ways.

      --
      "I'm a leaf on the wind. Watch how I soar."
      -Hoban Washburn
    2. Re:Microsoft at al? by bstadil · · Score: 5, Interesting
      The door swings both ways.

      Indeed it does. The beauty of this is that every time a piece of FUD like this arrives, it adds mindshare of OpenSource to the equation.

      It's like the old Monty Python sketch when in the cockpit of a plane John Cleese takes the microphone and informs the passenger that "There is no cause for alarm". When asked why he did that claiming the passengers now have to ponder "What is there no cause for alarm For!

      This junk by MS almost ensures an invite for OpenSource to the party.

      --
      Help fight continental drift.
    3. Re:Microsoft at al? by Winterblink · · Score: 5, Interesting

      Oh I totally agree. I'm all for OSS getting an equal share of the limelight with others, even Microsoft. Personally I think on an even playing field, OSS has way more pros than cons as opposed to more proprietary solutions. However the OSS community also has to realize that all they can do is showcase themselves as best they can. If an individual/company/organization/whatever decides they want Microsoft products (as an example) then that's their decision. Hopefully they've made an informed one, but if they have then they've chosen what's best for them. OSS shouldn't take that as a slap to the face, they don't have to win EVERY battle.

      --
      "I'm a leaf on the wind. Watch how I soar."
      -Hoban Washburn
    4. Re:Microsoft at al? by 0x0d0a · · Score: 4, Insightful

      group called "Initiative for Software Choice"

      (a) I don't see what their name has to do with this

      (b) The name is pretty par for the choice for a lobbying group

      (c) In this case, the name is actually deserved, as what they're fighting for is not to ban Open Source software from government contracts, but only to ensure that the US government not *require* Open Source, which would eliminate as an option most current closed software.

    5. Re:Microsoft at al? by bstadil · · Score: 5, Insightful
      OS fanatics have been busy yabbering to anyone who'll listen why their utopian communist way

      I do not understand why you think that OpenSource is exempted from capitalist market forces. It is precisely the market forces that the OpenSource movement wants put into play and that MS et al is afraid of.

      --
      Help fight continental drift.
    6. Re:Microsoft at al? by Anonymous Coward · · Score: 3, Insightful

      utopian communist way beats all,
      Interesting way to phrase this. Communist as defined by Soviet Union and China was a top down archetecture where one (or a small group of ppl) control what goes on. Also, they are the ones who have high profits. But anybody who supports them, will get some decent scrapes. It has lead to the down fall of all that support it.

      In contrast, the democratic version is lead by votes where by one person is in power, but on a true sharing approach. Normally, there is plenty of opposition against that pperson with all sorts of ppl who have different ideas. They will routinely fire up their own stuff based on what the others were doing. In a normal democracy/capitalist society, you will find that competition encourages the best of the best to succeed. This would create a system that improves in various places through out the system. Sound familiar?

      So I have been thinking long and hard about who would really be pushing MS systems which have high costs in terms of ppl and security. I have not doubt that MS would push it (high profits). I also have no doubts that the ppl who are feeding on the scrapes would also push it. But finally who might push it so that weak security is in place through out our government? Crackers and SKs do not have the money to buy politicians and/or be part of groups like comptia. It would take somebody who has billions, has shown enough intelligence to attack us before. Who indeed?
      So commrade, are you with MS or Jihad?

    7. Re:Microsoft at al? by Sj0 · · Score: 5, Insightful

      Isn't it ironic that some people equate Open source with communism, but they equate "ein volk, ein reich, ein windows!" with democracy, choice, and capitalism?

      --
      It's been a long time.
    8. Re:Microsoft at al? by Anonymous Coward · · Score: 2
      Hmm. An application that I was the lead developer for a couple of years back was sold to the U.S. Army (among many others). They asked for the source. They would have been crazy not to. Nobody else ever got the source.

      I can't see any reason why they would not demand, even, to have and get the source. And it doesn't go for only military applications, where security audits are necessary, why would anybody at all take the security risk involved with closed, proprietary source code?

    9. Re:Microsoft at al? by Bruce+Perens · · Score: 5, Interesting
      Don't buy their line. The U.S. government has not proposed to require Open Source, only to promote it so that it will be used effectively. If Software Choice was really fighting for equality, it would be nice. But when you read the fine print, you'll find that they aren't. They stand for patents in standards, which would lock out Open Source. They want software purchasers to blind themselves to the merits of intellectual property policy. Consider two functionaly equivalent programs - one Open Source and one proprietary - to be the same. The Open Source program has a lot of economic and business advantages over the proprietary one, and the purchaser should prefer Open Source if all else is equivalent. Software Choice opposes this, they call it a "categorical preference".

      Bruce

    10. Re:Microsoft at al? by Bruce+Perens · · Score: 5, Insightful
      Especially these guys. They are lobbying against your right to choose Open Source. They dress their campaign up as if they seek equality and no preferences, but read the fine print. They want to lock us out of industry standards by using patents - it's right there in their "principles".

      See SincereChoice.org for a platform that really would give you choice.

      Bruce

    11. Re:Microsoft at al? by Bruce+Perens · · Score: 4, Insightful
      Oh, I definitely think Open Source is the best, if that's what you mean by bias. What you need is an unbiased third party to evaluate both sides. Like Terry Bollinger at MITRE. His conclusion is really interesting reading.

      Bruce

    12. Re:Microsoft at al? by rseuhs · · Score: 3, Insightful
      (c) In this case, the name is actually deserved, as what they're fighting for is not to ban Open Source software from government contracts, but only to ensure that the US government not *require* Open Source, which would eliminate as an option most current closed software.

      Well, there are currently zero OSS-only policies in the US among governmental organizations, but numerous MS-only policies at the operating system and office-suite level.

      And now this "Initiative for Software Choice" starts fighting against policies that don't even exist (yet).

      If they are serious about software choice, why don't they attack the numerous MS-only policies out there?

    13. Re:Microsoft at al? by steve_l · · Score: 3, Interesting

      Also they dont want the govt to fund or participate in any OSS projects, particularly GPL stuff, as it prevents their 'right' to profit from the developments. Heh. NSA Linux is one case in point...the TIA program will probably have to build the US police state on freebsd instead.

      I actually think their argument about OSS code not necessarily being more secure is valid, an OSS project can have security bugs introduced as features, and often they get found by external black box attacks rather than source code walk throughs. But OSS projects can roll out fixes faster, which meant if had a widespread and secure update mechanism we could get those fixes out the door faster too. Compare that to win2K which is still available in the shops in 'Code Red Ready' form.

    14. Re:Microsoft at al? by Eric+Damron · · Score: 2

      "(c) In this case, the name is actually deserved, as what they're fighting for is not to ban Open Source software from government contracts, but only to ensure that the US government not *require* Open Source, which would eliminate as an option most current closed software."

      Really? Here is a quote from their web site:

      "For many years, governments have made important contributions to technology by funding basic software research. When public funds are used to support software research and development, the innovations that result from this work should be licensed in ways that take into account both the desirability of broadly sharing those advances as well as the desirability of applying those advances to commercialized products."

      The above means NO GOVERNMENT DEVELOPMENT FOR GPL PROJECTS. And of course Microcrap has been spreading FUD about how if you use Linux everything you develop for it must be GPLed. A false statement but some will believe it. So Government agencies will be very reluctant to use it.

      What the jerks like Adam Smith from Washington wants is for Microsoft to continue to contribute to their campaign funds. This guy is sponsoring legislation that WOULD MAKE IT ILLEGAL for tax dollars to be spent on GPL software development.

      Microbrain wants to force the government to spend tax dollars on software development that it alone can use to SELL TO THE PEOPLE WHO PAID FOR ITS DEVELOPMENT!! And as a bonus throw another road block in the fically responsible GPL development.

      Yeah, you and I are paying for the development costs so it is only right that we be ensured that we ALL can FREELY USE WHAT WE HAVE ALREADY PAID FOR.

      Adam Smith would have you paying for the development and then turn it over to Microsoft so that they can pretty it up, add a few vulnerabilities and make us pay for it again! I say bullshit on that!

      This is just another one of Microsoft's dirty tricks. Nothing more.

      If anyone from IBM is reading this it may be a good time to start fighting this rat-fuck.

      --
      The race isn't always to the swift... but that's the way to bet!
    15. Re:Microsoft at al? by Eric+Damron · · Score: 2

      It's hard to tell if an Open Source project has more security bugs than a Microsoft product being that we can't look at Microsoft's source. Hoever, with the enormous number of bugs being found in Microsoft products it's hard to believe that Open Source could be worse!

      Like the saying goes: "The race isn't always to the swift... but that's the way to bet!"

      --
      The race isn't always to the swift... but that's the way to bet!
    16. Re:Microsoft at al? by mpe · · Score: 2

      Interesting way to phrase this. Communist as defined by Soviet Union and China was a top down archetecture where one (or a small group of ppl) control what goes on. Also, they are the ones who have high profits. But anybody who supports them, will get some decent scrapes.

      Which sounds closer to proprietary software than open source. Especially when you consider the way Microsoft likes to pay people in stock options.

    17. Re:Microsoft at al? by sql*kitten · · Score: 2

      They are lobbying against your right to choose Open Source.

      So what? You are lobbying against the right to choose closed source!

      Of course, you won't come out and say it, because that would reveal your hand, but indirectly undermining the economic viability of commercial software amounts to the same thing.

    18. Re:Microsoft at al? by Codifex+Maximus · · Score: 2

      Ah... nice to see the old Slashdot cronies crawl out of the woodwork. :)

      I figure you're playing Devil's Advocate(tm) here.

      >So what? You are lobbying against the right to
      >choose closed source!
      Is that based on the fact that ISC seems to want software with BSD license to be funded by government? BSD license would allow proprietization of the codebase. An especially lucrative proposition if the codebase was developed with federal funds. The GPL/LGPL(or a like license) would ensure an ever growing public codebase that all could draw from and that would promote interoperability.

      >Of course, you won't come out and say it, because
      >that would reveal your hand, but indirectly
      I think Bruce has already said it kitten. A couple posts back as a matter of fact.

      >undermining the economic viability of commercial
      >software amounts to the same thing.
      Once again, does undermining the "economic viability of commercial software" mean opposing a "go ahead and steal it if you want to" license or advocating Open-Source? Does competition amount to undermining in this context?

      Public goods have just as much "Right" to thrive as corporate goods; laws should not be passed to exclusively require one OR the other. Last time I checked, corporations were members of the public - and as such would benefit from OSS too.

      P.S. I feel that BSD is a great idea. They have intrinsic views of a world where we all love each other and share openly. Unfortunately, we don't live in such a world.

      --
      Codifex Maximus ~ In search of... a shorter sig.
    19. Re:Microsoft at al? by steve_l · · Score: 2

      I was thinking, maybe the issue is

      'shit code written in a hurry with the ship date given higher priority than security is less secure than code written with security kept in mind from the outset'.

      And that's why MS code is so bad. Its not that we cant see the source -that just hides the bugs, its that to meet ship dates imposed by marketing, they rushed things out. The MS process of 'triage the software, cull unfixable features and ship with known unimportant bugs' only works if the bugs are 'minor'. In security, any security hole is major, so you cannot ship with even one.

      If you look at IIS, the core server is mostly ok. Its the fact that it ships with too many features turned on, config is a morass of dialogs and the add on stuff (like Internet Printing Protocol support) that introduced the big bugs.

      So: I dont think the quality of MS code should be a metric of closed source; SYSV unix was fairly secure, after all...

    20. Re:Microsoft at al? by steve_l · · Score: 2

      my biggest issue with MS code is that the underlying causes for their security problems are more than the source is closed, or even they shipped without enough testing, but that they built some things that are inherently insecure in the first place.

      case 1: activeX. As a reaction to netscape plugins and java it works, but they made it so easy to sign and redist code that even idiots do it...

      case 2: Windows scripting host. WTF does my mother need .VBS and .JS executable support on her PC? I dont know, but I do know that Installing IE6 reenabled it after I had helpfully bound both extensions (and some others ) to notepad. So the IE upgrade made her machine more virus vulnerable than before.

      case 3: Visual Basic for Applications. WTF does my version of Word need to have a macro language that can call any API call the OS offers, import COM objects to do bad things and create so much mistrust that of you send an office doc with a macro in people panic. The Excel language used to be limited to letting you write formula that ran when you clicked a button and could only affect the document the lived in. But not any more. So much functionality is in excel now that you dont dare use any.

      And that's the irony. The end result of whatever meeting between marketing and the program managers 'lets make all our office apps COM objects that office macro languages can program'. has given the world a feature that almost nobody uses, but everybody is scared of.

      I dont know how to deal with fundamental design errors like that. I guess OSS wins there as I should just be able to build a copy of the office suite without ENABLE_VBA #defined.

  3. In other news today by Dachannien · · Score: 5, Funny

    In other news, Microsoft reports that it has purchased the rights to the next edition of Webster's Unabridged Dictionary. Among the changes expected to appear in this edition, the word "choice" will henceforth be defined as "the act of giving Microsoft more money, esp. against one's better judgment."

    1. Re:In other news today by lfourrier · · Score: 2

      M$ has the habit of redefining words.
      Remember a few year ago the advertisement of NT as an open system?
      They don't need to buy webster, they have word and thesaurus

    2. Re:In other news today by mpe · · Score: 2

      In other news, Microsoft reports that it has purchased the rights to the next edition of Webster's Unabridged Dictionary. Among the changes expected to appear in this edition, the word "choice" will henceforth be defined as "the act of giving Microsoft more money, esp. against one's better judgment."

      In the followining edition they will change the spelling to "coyce" and the definition to "whatever Microsoft says it is".

  4. Choices by aufecht · · Score: 3, Insightful

    Initiative for Software Choice, just make sure you chose between Windows XP,2000 or 98.

    1. Re:Choices by MsGeek · · Score: 2

      No, you have to choose between Windows 2000 SP3 and Windows XP. That's the only choice they want you to make. Remember, 98 is being phased out...if memory serves, it will be officially non-supported as of New Year's Eve.

      Some choice, neh?

      --
      Knowledge is power. Knowledge shared is power multiplied.
    2. Re:Choices by frankie · · Score: 3, Funny
      just make sure you chose between Windows XP,2000 or 98.

      Hey, be fair now. The Institute for Software Choice offers a much broader selection than just three versions of Windows (two of which are out of fashion):

      1. XP Home
      2. XP Pro
      3. XP Embedded
      4. XP Media Center
      5. XP Tablet PC
      6. .Net Server
      7. PocketPC
      See? Isn't that enough choice for anybody?
  5. Not surprising... but the DOD is heading twds OSS by andymac · · Score: 5, Insightful

    My company does quite a bit of work for the big defense contractors, we're involved in many big programs. These contractors are constantly asking us for Linux based software (SDKs APIs etc.) and especially for their embedded devices. These guys want to stop laying huge license fees to WindRiver for their vxWorks software... and want to spend the $$ elsewhere. Good on them I say. However I will insert the obligatory M$ comment: I'm shocked (not!) that MS would push their own agenda blah blah blah... ;-)

    --
    "Content's a bitch."
  6. Comptia by tetrode · · Score: 2, Interesting

    Strange, this is one of the companies behind it, and they do linux...

    Mark

    1. Re:Comptia by pVoid · · Score: 2
      Check out your link: http://www.comptia.org/certification/linux/default .asp...

      ;)

    2. Re:Comptia by CoolVibe · · Score: 2

      Didn't you know that linux does asp? Try ChiliASP sometime.

    3. Re:Comptia by cant_get_a_good_nick · · Score: 2

      Hmm, still IIS. Try www.netcraft.com to get the site. Real men would just telnet to it, do a GET. Or a wget -S...

      ASP pages tend to have a lot of COM/OCX/ActiveX crap on it, so while you do have the ChiliASP parser, the real power is in COM objects which aren't on Linux.

  7. Choice by John+Sullivan · · Score: 5, Interesting
    A group calling themselves the Initiative for Software Choice, backed by Microsoft

    This would be the Henry Ford definition of choice then? "You can choose any supplier you like, so long as it's us."

    --
    This is my World Wide Web of Whatever
    1. Re:Choice by penguin_punk · · Score: 2

      I allways thought that quote was:

      "You may choose any colour you wish. As long as it's black."

      I can't tell you how many people I come across that say things like:

      "I'll help you install any Operating System you wish."

      The catch-all? It must either be 95, 98, me, 2000 or XP. What a choice.

      --
      HURD - Hurd's Under Research & Development
  8. Is trhis really news? by joel8x · · Score: 5, Funny

    A group backed by corporations with their own interests says their biggest threat is not a good choice.

    In other news, a group called "The Darkened Lung Group" (backed by R.J. Reynolds and Phillip Morris) are saying that smoking isn't that bad for you and it's not really addictive.

    --
    Sound waves should be free!
    1. Re:Is trhis really news? by JoeCommodore · · Score: 5, Funny
      a group called "The Darkened Lung Group" (backed by R.J. Reynolds and Phillip Morris)

      In this example it should be called the "Group for Health Alternatives".

      --
      "Enjoy what you're doing! If it becomes drudgery, you're doing it wrong!" - Jim Butterfield
  9. Next up... by smagruder · · Score: 2

    Microsoft digs its own grave by getting more and more huffy with its customers. High-def video at 11.

    Meanwhile, Linux gets more and more free press.

    --
    Steve Magruder, Metro Foodist
  10. This makes logical sense by the_other_one · · Score: 2

    Improve software choice by limiting the choice of options.

    --
    134340: I am not a number. I am a free planet!
  11. The same article at the register by MoonFog · · Score: 2, Informative

    Here's an article from The Register talking about the same subjecf. News.com will probably get slashdotted now anyways =)

    1. Re:The same article at the register by inode_buddha · · Score: 2

      Thanks for the link, there's an interesting quote there: "...if it is GPL based, then proprietary companies cannot directly benefit from it."

      I will leave the various conclusions to the slashdot readership... this out to be interesting ;)

      --
      C|N>K
    2. Re:The same article at the register by inode_buddha · · Score: 2

      Uh, look again. 7th paragraph, last sentence.

      --
      C|N>K
    3. Re:The same article at the register by inode_buddha · · Score: 2

      Interesting... I haven't used opera much, I just tried it out on linux a few times when it first came out. So I really don't know much about it , especially on Windows (I use Mozilla on Linux).

      I bet Opera has a bug reporting system, and I'd be looking for something similar in there, or else report it as a new bug and see what happens. Cheers!

      --
      C|N>K
  12. Interesting choice of words by ryants · · Score: 5, Interesting
    arguing that proprietary products are not inherently less secure.
    Now, that isn't a direct quote from report itself, but rather a paraphrase from the reporter, but still...

    "Not inherently less secure" is a strange way of advocating your position. Double-negatives like this usually betray a defensive mind set. Why didn't they have the conviction to say "we're *more* secure"?

    --

    Ryan T. Sammartino
    "Ancora imparo"

    1. Re:Interesting choice of words by sys$manager · · Score: 2

      That's not a double negative. If they had said they are more secure then they would be saying Proprietary > OSS. They said they are not less secure so in fact they are saying Proprietary >= OSS.

    2. Re:Interesting choice of words by Rik+van+Riel · · Score: 2
      "Not inherently less secure" is a strange way of advocating your position. Double-negatives like this usually betray a defensive mind set. Why didn't they have the conviction to say "we're *more* secure"?
      Could that be because Microsoft is finally on the defense? The latest halloween document suggests that Microsoft has gotten to the point where they're behind reality, even on the field of marketing...
    3. Re:Interesting choice of words by ZeLonewolf · · Score: 5, Informative

      I work for the DoD, in a technology policy branch.

      Not only is proprietary softare inherently insecure, it's inherently more expensive, inherently doesn't work as well, and inherently causes the government to be screwed if the company goes out of business or decides to stop supporting the software. In fact, the government got screwed by using HP-UX when HP decided not to make new versions of the OS backwards-compatible with the older HP processors being used in most of our submarines...now, wisely, half of the computers in the NEXT generation of subs are running Linux (the rest are running Solaris...)

      --
      "If at first you don't succeed, lower your standards."
    4. Re:Interesting choice of words by Sj0 · · Score: 2

      Is this a common attitude at the DoD? If it is, I'll rest a little easier in spite of the efforts of microsoft.

      --
      It's been a long time.
    5. Re:Interesting choice of words by .milfox · · Score: 2

      Eh? Don't you mean SCO? :P

      *whistles and hides the unix and embedded linux systems in the space*

    6. Re:Interesting choice of words by bmajik · · Score: 2
      Not only is proprietary softare inherently insecure, it's inherently more expensive, inherently doesn't work as well

      Get over yourself. security, cost, and "work as well" are not inherent characteristics of any method of managing who gets to look at source code.

      • Open Source does NOT equate better security. Never think so, never say so, never tell anyone this again. It's pure bullshit. Security is a disciplined mindset. And the opensource mindset is "someone will look at this and email me a patch if i fucked up". Lovely.
      • Free software is free if you don't value your time. Of _course_ contracting agencies are going to be in favor of open source systems that cost them nothing to procure or redistribute and have less functionality out of the box so that they get more billable hours re-inventing the wheel (again).
      • How's that open source sound coming along in linux these days ? Working much better than say, sound in MacOS ? Windows ? Irix ? Again, this is pure bullshit.

      Why were new versions of HP-UX required ? What did it offer for systems that were already in-place ? What was so compelling about a new version of HP-UX that justified the considerable man hours of rolling it out (note that the human cost here usually dwarfs the cost of acquiring new HPUX hardware)

      --
      My opinions are my own, and do not necessarily represent those of my employer.
    7. Re:Interesting choice of words by ozbird · · Score: 2

      "Not inherently less secure" is a strange way of advocating your position.

      That's because saying they're "designed to be less secure" tends to upset security people. ;-)

    8. Re:Interesting choice of words by schon · · Score: 2

      the opensource mindset is "someone will look at this and email me a patch if i fucked up". Lovely.

      And you somehow think this is worse than "nobody CAN look at this and tell me if I fucked up"?

      Free software is free if you don't value your time.

      How come you're changing the subject? (We WERE talking about Open Source, not Free software.)

      Free software is Free whether you value your time or not. Free software is not about zero-cost, it's about FREEDOM - as in the FREEDOM to see the code, and the FREEDOM to make changes to it.

      Take your FUD and trolling somewhere else.

    9. Re:Interesting choice of words by nihilogos · · Score: 2

      Get over yourself. security, cost, and "work as well" are not inherent characteristics of any method of managing who gets to look at source code.

      This sentence is grammatically nonsensical. Are you saying that no manager who considers open-source code can claim to be concerned about security,cost and reliability? Weird.

      Open Source does NOT equate better security. Never think so, never say so, never tell anyone this again. It's pure bullshit.

      Of course open source doesn't necessarily mean better security - there is no reason why proprietry code should be less secure. In practice though it is. It might because open source coders love what they're doing and invest lots of effort into writing good code whereas someone working to a deadline just gets something out the door. And there is the tired old line that more eyes pick up more mistakes. It's tired but it's true. Most security advisories on open source products describe potential buffer overflows etc caught by someone reading the source, and a fix is available immediately. The first people hear about many microsoft holes is a worm running all over the net.

      Security is a disciplined mindset ... Free software is free if you don't value your time.

      The time spent configuring and understanding "free" software is extremely worthwhile if you want to be disciplined about security. If you learn about Apache, then you gain valuable knowledge about how the web functions and where its vulnerabilities are.

      How's that open source sound coming along in linux these days ?

      Very well thank you. I believe Alsa is being merged into kernel 2.6 or maybe earlier.

      --
      :wq
    10. Re:Interesting choice of words by Daniel+Phillips · · Score: 2

      Free software is free if you don't value your time. Of _course_ contracting agencies are going to be in favor of open source systems that cost them nothing to procure or redistribute and have less functionality out of the box so that they get more billable hours re-inventing the wheel (again).
      With the GPL, this is not a problem in the long run, as the improvements made by contractors must necessarily be provided to the customer. It's very much in the customer's interest to ensure that these improvements are contributed back to the original project, helping it evolve, and reducing the cost to the next guy to join the party.

      How's that open source sound coming along in linux these days ? Working much better than say, sound in MacOS ? Windows ? Irix ?
      Got a chip on your shoulder? ALSA is coming along very nicely, thankyou.

      --
      Have you got your LWN subscription yet?
    11. Re:Interesting choice of words by Reziac · · Score: 2

      As one of the taxpayers who funds the military, I'm all for spending my tax dollars as wisely, and as frugally, as is reasonably possible. Which includes NOT wasting my tax dollars in having to revamp proprietary systems every time a contractor decides compatibility is a one-way street (spelled "upgrade").

      Hopefully the gov't will learn from previous mistakes -- and sounds like you're one of the people in a position to help make sure that happens!

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    12. Re:Interesting choice of words by ZeLonewolf · · Score: 4, Informative

      Why were new versions of HP-UX required ?
      My guesses:

      Threads.
      A version of Java later than 1.1.8.

      Actually, the problem was that HP-UX ran only on HP processors. A brand new Navy nuclear submarine has a lifespan of 35-40 years, while a typical computer operating system becomes outdated in 5-7 years. The problem was that after about a year ago, HP stopped supporting the latest version of HP-UX that ran on those processors, stopped making patches for it, stopped adding support for new hardware, etc., etc. Thus, as the Navy's needs changed, their operating system couldn't change to meet the new needs. The options were to either upgrade all the hardware to all new HP processors and OSes (and probably get screwed again in the future), or move to something that was more likely to be supported, upgradeable, and backwards-compatible in the future. Since Linux is a relative newcomer, the choice was made at the time to use Sun Solaris, though the big push now is towards Linux.
      --
      "If at first you don't succeed, lower your standards."
    13. Re:Interesting choice of words by ZeLonewolf · · Score: 2

      Suppose you're the government, and you're in charge of acquiring software to run the latest nuclear submarine, one that with the push of a few buttons can launch medium-range ballistic nuclear missiles (real example here).

      Whatever runs these systems has to be totally, unequivocally, 100% bug-free and secure. To do this, the government takes the code written by one company, and gives it to another company or two to comb though it and make SURE it's clean! In fact, for code that runs nuclear systems, a company is paid to remove any dead or unused code from the system, and at a considerable expense. Billions of dollars are spent on testing, testing, and re-testing these systems to make sure they are absolutely rock-solid.

      Now, given such an environment...it's pretty silly to even consider something like, "Hey...we'll sell you MS Nuker 95 because Windows is fast, reliable, and secure! Of course we can't show you our source code, you just have to trust us..."

      And that's the position the government is in. For that type of application, you can't get much more mission-critical or content-sensitive. For these types of military applications, the source code must must must be available...not necessarily to the world, but at least to the gov't developers.

      --
      "If at first you don't succeed, lower your standards."
    14. Re:Interesting choice of words by WNight · · Score: 2

      Well, Open Source(tm) isn't really the definition of open source, it's just one group's view of it. For most purposes, open source (and many of the many-eyeballs benefits) could be achieved with proprietary software that had a visible codebase (not just for people who pay a lot, or sign an NDA, etc) and encouraged people to discuss and suggest changes.

      This wouldn't happen for someone like MS with their shared-source plan because 1) it's users at home who have the time to help with someone else's project and 2) MS are jerks who have alienated most of the good coders.

      But Apple is getting good results even though MacOS X is largely proprietary.

    15. Re:Interesting choice of words by cant_get_a_good_nick · · Score: 2

      Open Source does NOT equate better security. Never think so, never say so, never tell anyone this again. It's pure bullshit. Security is a disciplined mindset. And the opensource mindset is "someone will look at this and email me a patch if i fucked up". Lovely.

      I agree, I don't think Open Source has the security benefits that folks liked to say. The "many eyes" thing assumes that folks are looking... and know what they see, and can do something constructive about it. My grandma isn't debugging kernel drivers. Of course there is a subset of folks who can, but everybody is always looking for a 'magic bullet' and OS isn't it. It helps, but everybody is looking for a free lunch that isn't there. Take the gains that you do get, and go from there.

      But with open source, you have that debug option. It isn't just that everybody in the world can fix the code and you'll receive it perfect, but that you can fix your code. That allows turnaround, granted you need the skillset in house to do it. But that is tremendously powerful option.

      The other thing it does it helps you develop. You don't have to guess what this function does, you can take it apart and see. I was programming an Apache module, needed to find out if a function was being called on startup or during normal server operation. It wasn't documented. So I looked at the code, found out. Yah, it was work, and I would have preferred it being documented, but i had the option. I wouldn't have with say, IIS.

      As far as the mindset goes, I agree. But how does a company doing checkbox marketing forcing stuff out on deadline have that mindset. Microsoft has said in court that it's software is so riddled with bugs that releasing th source would cause major problems. It has also said that older versions of the software are so buggie, that folks hsould replace them because just owning them is a security risk. Granted, both of those statements also furthered other Microsoft ends (releasing code would help interoperability, and possible replacements, ditching the win9x kernel means new OS sales). But they send code out with bugs, and they have terrible design decisions (Outlook is WAY too scriptable for soemthing that receives things from unknown sources.

      Free software is free if you don't value your time.
      Nobody should pick up Linux and say "this is free, I'll never spend another penny on software or support, ever". Those that say so are either idiots or zealots selling their own agenda. It's just not true. Wise people would do a cost analysis, and for certain classes of jobs (servers in genral, for certain classes of users 'desktops' are cheaper as well) Linux is a cheaper overall solution. Not free, but cheaper.

      People tend to like absolutes. "Linux is free, things get debugged quick". "Microsoft is easy to use". "Linux is hard to use." "Microsoft software is buggy and can be rooted in seconds". I'ts all a mix... Keep your mind open, pick the best tool for the job.

    16. Re:Interesting choice of words by mpe · · Score: 2

      Not only is proprietary softare inherently insecure, it's inherently more expensive, inherently doesn't work as well, and inherently causes the government to be screwed if the company goes out of business or decides to stop supporting the software.

      With proprietary software a commercial software company's idea of "lifespan" can quite easily be at odds with military ideas of lifespan.

      In fact, the government got screwed by using HP-UX when HP decided not to make new versions of the OS backwards-compatible with the older HP processors being used in most of our submarines.

      At a guess they won't support the older version and the newer hardware either hasn't been certified for use in a submarine or requires a major refit to install.

    17. Re:Interesting choice of words by mpe · · Score: 2

      Free software is not about zero-cost, it's about FREEDOM - as in the FREEDOM to see the code, and the FREEDOM to make changes to it.

      Also freedom to use it as you see fit, freedom to use it according to your timescale.

    18. Re:Interesting choice of words by mpe · · Score: 2

      I'm reasonably confident that the US military isn't all to concerened about the ability of linux to play high quality mp3's.

      With open source if you don't need some piece of functionality you can remove it. With a proprietary system, especially one like Windows which is orientated around providing a nice GUI desktop, there might be lots of bits of code you don't need, but can't get rid of.

  13. GPL FUD again? by debest · · Score: 5, Insightful

    FUD: You have to open up all your code if you use GPL code in your software.

    Fact: You have to open up all your code if you use GPL code in your software and then distribute it!

    I don't think the DoD distributes very much of the software it writes, so why should it care if it uses GPL code? It shouldn't care! But let the FUD fly!

    --
    Look at the tomato! Isn't it sad? He can't dance! Poor tomato!
    1. Re:GPL FUD again? by silas_moeckel · · Score: 2, Informative

      Even more importantly the DOD can clasify something after the fact so while it might have to release source code but only if you have need to know as defined by the DOD.

      --
      No sir I dont like it.
    2. Re:GPL FUD again? by LostCluster · · Score: 3, Insightful

      Furthermore, you only have to open up your code to those who you distribute your software to...

      Which means Army can give software to the Navy, and they'd only have to give the code to the Navy, not to the general public.

    3. Re:GPL FUD again? by deander2 · · Score: 5, Informative


      It's important to make clear the difference between:
      1) using OSS code in your software
      2) using OSS code to write your software, or to deploy your software, or to distribute your software, or to hang your software out to dry on your clothesline, etc...

      Only #1 requires you to make your software open source.

      (btw, I work as a contractor for the DOD. we do #2 constantly, and I can promise you it's the much more common activity)

    4. Re:GPL FUD again? by greenrd · · Score: 2
      since it would put the DoD on possible shaky ground if an employee did release the software (it would be the rights the GPL gives you versus the NDA or other constricting contract).

      No it wouldn't. The GPL itself already explains what happens here. If any other contract conflicts with the GPL, you may not distribute the software at all.

    5. Re:GPL FUD again? by greenrd · · Score: 3, Insightful
      Basically the same definition used by copyright law, or by a typical software license. Distribution within an organisation doesn't tend to count as "distribution" from the point of view of copyright law, but practically everything else does.

    6. Re:GPL FUD again? by flossie · · Score: 2
      I think you will find that DoD employees are not free to just hand out stuff they find lying around the office. "Here Saddam, have a look at this simulation of a nuclear bomb I found ..."

      Aside from the national security implications, where do you get the idea that an employee has any right to distribute software obtained by their employer? I am fairly sure that a court would find that the employer, not the employee, owns the software.

    7. Re:GPL FUD again? by FreeUser · · Score: 4, Informative

      This bring up a question I've asked before and no one seems to have a conclusive answer for. Technically, by the GPL rules, anyone who gets the binary has to be able to get the source. Now the DoD employees are certainly getting the binary, so they should have access to the source as well, correct? And if they have access to the source, the GPL gives them full legal rights to redistribute it as they want, correct?

      The Free Software Foundation and Richard Stallman have both made this very, very clear.

      Software kept within an organization is not considered to have been distributed. There is a very precise definitions of what distributed means, which the GPL, the FSF, etc. have made very clear. You can use as much GPLed code as you like with your in-house software, and as long as that software stays in-house it is not being distributed, and you are under no obligation to provide a single line of sourcecode to anyone. This has been made explicity clear by RMS and others.

      Now, if you distribute the software outside of your organization, then you are obligated to provide the source code to that other organization.

      So yes, the Army giving the Navy software would have to give them source code (and if the Navy wanted to give it to Joe Blow, the Army couldn't stop them). But having the source code distributed from Army Headquarters in the Pentagon to GI Jane in the field does not constitute distribution outside of the organization, and there is no obligation to either give Jane the code, nor to allow her to distribute it outside of the organization (in this case, the US military).

      --
      The Future of Human Evolution: Autonomy
    8. Re:GPL FUD again? by mindstrm · · Score: 2

      Yes, they can. Absolutely.
      And when they do, they will be doing so without a license, as the GPL will not be applicable, because they are refusing to re-distribute code, so the original copyright holders can demand compensation.

    9. Re:GPL FUD again? by MrResistor · · Score: 2

      Only #1 requires you to make your software open source.

      Not true. Many Open Source licenses do not require this, and even the GPL requires it only under certain specific circumstances.

      If you sell modified GPL code to, say, the Army for a targeting system, you have to provide the Army with the source to your modifications. Neither you, nor the Army, however, are required to provide source to the gunners who will be using the system.

      --
      Under capitalism man exploits man. Under communism it's the other way around.
    10. Re:GPL FUD again? by Lumpy · · Score: 2

      1) using OSS code in your software
      2) using OSS code to write your software, or to deploy your software, or to distribute your software, or to hang your software out to dry on your clothesline, etc...

      Only #1 requires you to make your software open source.


      WRONG!

      you only have to release the sourcecode and make your software open source IF YOU DISTRIBUTE IT.

      If I use linux and Tons of GPL sourcecode for the department of defense for a project of theirs.. they do not have to release one line of code as it is used in house and will not be released.

      remember to stop the biggest FUD lie about GPL's software.... you do NOT have to release the sourcecode of your program if you are using it for yourself... I have a few projects here based on several OSS and GPL'd products... and not one of you Sod's are going to ever see the sourcecode.... because none of you will ever see a binary of it.

      --
      Do not look at laser with remaining good eye.
    11. Re:GPL FUD again? by deander2 · · Score: 3, Informative


      That depends on what you mean by distribute. I would tend to think that distributing inside your company is still distributing, but it looks like I'm wrong.

      (taken from gnu.org)
      Does the GPL require that source code of modified versions be posted to the public?
      The GPL does not require you to release your modified version. You are free to make modifications and use them privately, without ever releasing them. This applies to organizations (including companies), too; an organization can make a modified version and use it internally without ever releasing it outside the organization.

      But if you release the modified version to the public in some way, the GPL requires you to make the modified source code available to the users, under the GPL.

      Thus, the GPL gives permission to release the modified program in certain ways, and not in other ways; but the decision of whether to release it is up to you.

    12. Re:GPL FUD again? by mpe · · Score: 2

      you only have to release the sourcecode and make your software open source IF YOU DISTRIBUTE IT.

      With the GPL, or similar, you only have to make the source code available to the same people you distribute the binaries to.
      You'd only need to make the source publically available if you made the binaries publically available.
      Were you to supply the binaries to a finite group of people (including corporate "people") only they would be able to insist that you supplied the source to them.

    13. Re:GPL FUD again? by mpe · · Score: 2

      That depends on what you mean by distribute. I would tend to think that distributing inside your company is still distributing, but it looks like I'm wrong.

      A company is legally one "person". "Distribution" in this context means to outside parties.

      But if you release the modified version to the public in some way, the GPL requires you to make the modified source code available to the users, under the GPL.

      There is a difference between making a program available to "the public" and making it available to specific individuals. The GPL only requires that you make source available to the same people you distribute binaries to.

    14. Re:GPL FUD again? by mpe · · Score: 2

      Basically the same definition used by copyright law, or by a typical software license. Distribution within an organisation doesn't tend to count as "distribution" from the point of view of copyright law, but practically everything else does.

      Except that many EULAs count internal distribution. Otherwise the likes of per seat licencing would be impossible to enforce.

    15. Re:GPL FUD again? by quark2universe · · Score: 2

      If you do #2 constantly, then it must be a pretty shitty place to work.

      (Couldn't resist)

      --

      Believe in things of which no person has ever learned
  14. Re:big brother by Erpo · · Score: 4, Funny

    Minipax unuse openful computerwrite. Refs uncommercialism. Doubleplus ungood.

    --The grammar police.

  15. "Defending" my own computer by j_dot_bomb · · Score: 2, Informative

    I know at least one thing. I feel much better about the "defence" of my own computer from viruses and hackers with a stripped down linux that runs few services. I know exactly what programs/services are running. The stripped kernel code is small enough that I probably could audit it over say a year. The "Defense" Department could certainly allocate some resources to audit a stripped distribution.

  16. Boo on Moft... by pVoid · · Score: 3, Informative
    I actually went and check out their list of partners, and this thing is just Microsoft plus a list of roughly a hundred small shops (probably moft shops)... No other big names (like Sun, which I was expecting to find mind you).

    Anyways, a funny highlight, one of their members is: "Open Solutions" =)

  17. Summary... by MosesJones · · Score: 2

    Companies say that Customers should pay for their products rather than using cheaper or even free alternatives.

    In related new DoD announce "War is good".

    --
    An Eye for an Eye will make the whole world blind - Gandhi
  18. Who makes the choice? by Cap'n+Canuck · · Score: 3, Insightful

    Proprietary software companies such as Microsoft have labeled open-source software as a serious threat and have begun to oppose its use by governments. At the same time, however, nations such as France and Germany have begun to encourage open-source software to limit their dependence on proprietary vendors and to stimulate local software development.

    As a community of Open Source users, there is often a "ram-it-down-your-throat" style of preaching your brand of OS religion. Sure, a free OS is great, but it's not for everyone. Ultimately, a group of knowledgable professionals within the DoD will make a choice. You can agree or disagree with that choice, but they are entitled to it. Besides, their criteria are different from yours, which are different from France's and Germany's.

    Having said that, Microsoft, along with Cisco & Intel, have taken what I feel is the low road. It is one thing to advocate your product, but what they are essentially doing here is mudslinging. While this seems to be a fine tradition in American politics, I'm not sure that it's an ethical business practice, even for Microsoft (OK, I may have said that tongue-in-cheek).

    Karma: Basking in the warm afterglow of post-coital whoring.

    1. Re:Who makes the choice? by Cap'n+Canuck · · Score: 2

      Yes.

      1) You have just purchased a computer from [insert large national computer chain here]. The computer you purchased is shipped with Windows installed (included in the purchase price). The tech support guy at the store knows nothing about Linux, and you, as a user, have no interest/knowledge in installing and supporting an OS that you have no idea about. It's a reality.

      2) You work for government agency [insert name of agency here], whose policy states that the OS they will use must be closed and proprietary. It's a reality.

      3) You work for a large corporation, [insert name of large corporation here], that has an agreement with a company that sells an OS. Your IT department forbids you from loading Linux on your machine. It's a reality.

    2. Re:Who makes the choice? by Cap'n+Canuck · · Score: 2

      1) [user purchasing a computer] is a personal choice, based upon user ignorance and inexperience.

      2) [government agency] is a political choice, as well as a functional requirement (closed/proprietary). That's the choice they went with - I wouldn't call it a "wrong" policy.

      3) [business] may be a political choice, but I'd call it more of a business decision. There are more to these decisions than the liberal application of hookers - sometimes it's based on business sense and the needs of the business. I also wouldn't call it a "wrong" policy, simply because you disagree with it. You can call it wrong if you can prove that choosing Linux over M$ will save "real" money as well as save "imaginary" money - all those intangibles like support, productivity, user satisfaction, etc.

    3. Re:Who makes the choice? by jbolden · · Score: 2

      You work for government agency [insert name of agency here], whose policy states that the OS they will use must be closed and proprietary. It's a reality.

      What reality? I don't know of a single government agency with such a policy. I do know of agencies which require specific OSes for specific functions (particularly desktops). Usually the policy is more like this:

      Department X's IS department will only provide services A, B and C to
      Bureau Y if Bureau Y agrees to M,N and O. Its M,N,O where things like OS and OS configuration can come from on desktops. Even fairly low level managers can bring in a system providing they are:

      a) Willing to self support
      b) Willing to have the system considered untrusted by the network.

    4. Re:Who makes the choice? by Cap'n+Canuck · · Score: 2

      What reality, you ask?

      By your own admission, you state that there are agencies that require specific OS's. Oh but wait, there's a loophole - low level managers can bring in a system, as long as they support it, and are considered untrusted. Gee, not everyone is willing to do that. So I guess, by your admission, it's a reality.

      Anyway, thank you for answering your own question.

    5. Re:Who makes the choice? by jbolden · · Score: 2

      I think there is a difference between a legal mandate and consequences of choices. Being discouraged from doing something and being forbidden are very different. Tax law is much more reasonable on borrowing from a brokerage account than from a credit card (one is 100% deductable one is 0% deductable); that is discouragement. Still far more Americans borrow from their credit card accounts.

  19. Intel a two faced demon? by Diabolical · · Score: 5, Insightful

    It's a pitty to see Intel's name as one of the companies opposing OSS. Strangely they reach out at one side and then at the other side they slap you in the face. It is not that Intel should choose sides.

    I can understand fully that it is in Intels best interest to have support from both camps but this is really something they should watch out for. It may well be that more OSS developers and users will buy the products of their competitors if these kind of things become normal practice for them.

    1. Re:Intel a two faced demon? by Ctrl-Z · · Score: 2


      It's a pitty to see Intel's name as one of the companies opposing OSS. Strangely they reach out at one side and then at the other side they slap you in the face. It is not that Intel should choose sides.


      It's called hedging your bets. Intel really has no interest in what operating system you buy, as long as it runs on their hardware. Since both Microsoft and Linux run on Intel hardware (a fact which is not going to change), why shouldn't Intel support both sides? As long as one of them wins, Intel wins.

      --
      www.timcoleman.com is a total waste of your time. Never go there.
    2. Re:Intel a two faced demon? by max+cohen · · Score: 2

      I mostly agree, except I can't help but think Intel would rather Linux win out in the long run. After all, MS has applied lots of pressure in the past to suppress technology Intel was developing that could've hurt MS. Getting out from under that would be in Intel's best interest.

    3. Re:Intel a two faced demon? by gorilla · · Score: 4, Interesting

      OSS should threaten Intels position. If you have the source, you can recompile it for a different architecture, if you've got the binary, then you're stuck with whatever it's compiled from.

    4. Re:Intel a two faced demon? by B.D.Mills · · Score: 3, Insightful

      It's called hedging your bets. Intel really has no interest in what operating system you buy, as long as it runs on their hardware.

      To get Linux running on a new processor, all that's needed is a new gcc, maybe a few modifications to the kernel, and within a week or two you have an operating system for your new processor. It may take longer, but with the full source code available you have a good chance.

      To get a Microsoft OS running on a new processor would be much more difficult, nearly impossible. You can't do a direct source port, as Microsoft guards this like the Crown Jewels. You have emulation difficulty as well because Microsoft OSes have "undocumented" API calls. And of course emulation runs like a snail on Mogadon.

      So it's no surprise to me that Intel would back Microsoft. If Linux wins, Intel loses a cosy monopoly as well.

      --

      The only thing necessary for the triumph of evil is for good men to do nothing. - Edmund Burke
    5. Re:Intel a two faced demon? by max+cohen · · Score: 2

      In the long run, an "easy to use by novices" version of Linux will have been produced. There are many developing countries which will embrace such a product and they will likely be running it on x86 chips. This will benefit Intel. Remember the testimony from the MS anti-trust trial? Steve McGeady shed some light on a few very touchy things that MS did to Intel, namely forcing them shutdown the Intel Architecture Labs and going ballistic over Intel's support of Java. It is clearly in Intel's best interest to have equal footing in the Wintel monopoly and right now they do not. Of course Intel would like to remain the preferred arch of MS, but Linux is clearly a better deal for them. Linux helps Intel replace big iron Unix systems and provide lower cost desktop computers in developing countries, all without having to worry about "Linux" getting angry about it.

      That's my opinion. YMMV.

    6. Re:Intel a two faced demon? by shaitand · · Score: 3, Interesting

      Not true, intel has a stake in microsoft that is alot greater than their stake in open source. They have a heavy market dominance, and alot of other ties so it's not a buisness killer for them if microsoft bit the dust tomorrow... but this is just a lead. If linux took over the desktop then for the most part there would be very little binding users to intel architecture in general. New architectures would be developed and adopted quickly by linux where the hardware manufacturers who make them could do the porting themselves if need be. This would be a substantial blow to the x86 architecture which intel is married to, and would also send a statement to the world that intel's design wasn't god and as soon as people had a choice, they chose something else.

  20. Thanksgiving... by Noryungi · · Score: 5, Funny

    ... And I am grateful for the Microsoft marketdroids, for spewing such ridiculous, transparent FUD.

    The more they do this, the more exposure Open Source gains, and the more people are going to stop buying Microsoft products.

    Seriously, though, imagine a PHB in those difficult times: you have to do more with less $$$. And right there and then, comes this PR FUD from Microsoft, saying: "Stop using this cheap Open Source! It's BAD for your health and for the environment!!".

    PHB brain, of course, only registers the word cheap. He immediately goes to his techies and says: "Linux is cheap!! Start using it NOW to save money!".

    *Collective sighs of relief from said techies*

    Let us all give thanks for Microsoft Marketing, and for the FUD for which it stands. With upgrade paths and expensive licenses for all.

    Amen.

    (Yes, I am being sarcastic, people. Go back to your turkeys instead of pointing these flamethrowers at me now...) ;)

    --
    The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
    1. Re:Thanksgiving... by Dirtside · · Score: 2
      The more they do this, the more exposure Open Source gains, and the more people are going to stop buying Microsoft products.
      ...and the more star systems that will slip through their fingers!

      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    2. Re:Thanksgiving... by DarkVein · · Score: 2

      I wonder sometimes. There are thousands of people explaining to them every little (and big) mistake they make. It should be no problem for them to learn from our critique. We're TELLING them exactly what they're doing right, and many times exactly what would be a great move for them to make right now.

      No corporation explains their motivations, intentions, and tells their competition how to beat them. The crazy thing is, I think this is why Open and Free choices --software being a small subset-- will win.

      More on the poetic front, there seems to be a significant difference between an individual mass of people, and a mass of individual people.

      --

      I'm as mimsy as the next borogove but your mome raths are completely outgrabe.

  21. Microsoft screw ups by infractor · · Score: 5, Interesting

    Well I'm sure the DoD remember their dead microsoft NT sub. The radar which doesn't work etc. The missing nukes because of SQL server? Microsofts admission and then retraction.. it is all documented out there..

    A quick search of slashdot digs up this:

    navy unhappy with microsoft

    Even the average man in the street thinks of windows as less secure. I can't believe something like this would really fool people...

  22. Microsoft argues they are as good as open source by dagg · · Score: 2
    "This week, the Initiative for Software Choice counterattacked, telling the Defense Information Systems Agency that the Pentagon should not "openly promote the use" of open-source software, arguing that proprietary products are not inherently less secure."

    That emphasis is mine. Nothing in the article indicates that Microsoft said their products were better than open source. In this particular case... Microsoft is arguing that their software is as good as open source software.

    I think its funny that Microsoft didn't say that their stuff is better. They can only argue that their stuff isn't worse.

    --
    Your sex is given in one question
    --
    Sex - Find It
  23. Talking about OSS is what is important by Alain+Williams · · Score: 2

    A year or so ago we would have been thrilled that the discussion was even happening. There will be debate one way and the other - the more the better.

    The point is that the longer and more high profile the debate, the more people become aware of OSS and come to realise that it is not a flash in the pan. ``Gee, they are still talking about Linux, my M$/... salesman told me it would be forgotten by the Autumn. Hmmmm, maybe I ought to find out some more.''

    To an extent, any publicity is good publicity.

    The closed source vendors have a problem: they either shut up about Linux/OSS and have it gradually move into their territory; or they generate loud FUD and bring it to decision makers' attention.

    Things will get really interesting when widespread adoption of OSS grows from operating systems, systems utilities and universal applications to business sector specific applications.

  24. Too Late by core+plexus · · Score: 2

    Aside from the semi-interesting doublespeak ("Initiative for Software Choice", while being against open source), we've been working with NSA for quite a while now on the SeLinux Project. One of the big players in the commercial software (I forget the name now) tried to muck up the works by insisting they had some right to a portion of the code, but their complaints have fallen by the wayside.

  25. Well gee... by Kjella · · Score: 5, Insightful

    Of course they're worried. If their corporate customers start saying "Hey, if the DoD is using it, it must be good and secure enough for us too!"

    Oh and the GPL doesn't really stop the DoD at all, as you only have to release source code to those you provide with a binary. Unless DoD starts handing out binaries to others, they can keep every change to themselves (but I imagine they'd rather stay with the main branch than running their own solo run, but they are one of the few who could).

    OSS is no magic cure against bugs though, and QA is important. In my experience bugs show up faster & get fixed faster in OSS, so in the short run you have more *known* bugs than commercial software, even if there aren't really any more bugs in it. In the long run though, if enough people use it and find bugs, it is more stable and bugfree.

    Kjella

    --
    Live today, because you never know what tomorrow brings
    1. Re:Well gee... by ZeLonewolf · · Score: 2

      Unfortunately, OSS is much more suitable for military applications than in corporate America... a typical workstation on a submarine will have one purpose, say, to look at radar or fire weapons...so you have an OS, some special hardware, and typically a single application built specifically for you to control it all.

      So, it's really easy to develop something like this on an OSS platform as opposed to a Windows platform or whatnot. Migrating OSS to the desktops of large corporations, on the other hand, is an entirely different endeavour.

      --
      "If at first you don't succeed, lower your standards."
    2. Re:Well gee... by mpe · · Score: 2

      Unfortunately, OSS is much more suitable for military applications than in corporate America... a typical workstation on a submarine will have one purpose, say, to look at radar or fire weapons...so you have an OS, some special hardware, and typically a single application built specifically for you to control it all.

      How is this different from a single purpose workstation in a corporate environment? e.g. call centre, stock control system, supermarket till, parcel tracking, airline check in, etc. Single task workstations are commonplace in supporting commercial busines. Even an "office" may only require a handful of applications, email, web browser, wordprocessor, spreadsheet.

    3. Re:Well gee... by ZeLonewolf · · Score: 2

      How is this different from a single purpose workstation in a corporate environment? e.g. call centre, stock control system, supermarket till, parcel tracking, airline check in, etc. Single task workstations are commonplace in supporting commercial busines. Even an "office" may only require a handful of applications, email, web browser, wordprocessor, spreadsheet.

      Because, if your stock control system malfunctions, you don't risk nuclear disaster :)

      --
      "If at first you don't succeed, lower your standards."
  26. Re:NEWS FLASH by Lussarn · · Score: 2

    Is this any different from a closed source product? If this where true there would be no issues with closed source. But there are, they are successfully attacked just as frequently as open source software, in many many cases more.

  27. Re:Surprise by NotTheNickIWanted · · Score: 2, Funny
    After all Windows Xp is the most secure operating system according to Microsoft.

    I suspect that there is a noticable difference between the most secure operating system and Microsoft's most secure operating system.

    --

    unsigned int question = 0x2B | ~(0x2B)
  28. OSS can't be used everywhere by enos · · Score: 2, Insightful

    I was at a talk once where a guy from Lockheed was saying how they were using more and more commercial off-the-shelf systems to reduce costs. They were moving away from specialized systems custom developed for each plane, to a more general system that didn't need as much work.

    He started out with an animation of someone punching bill gates, so that eased my fears. But he said that even though Linux would be great, they could not have a foreign national have control over their system. Sure, they could see exactly what they have, but any changes to the kernel would have to be checked out completely (expensive), so they would be right back at having a specialized system. Politics maybe, but they ended up with a proprietary OS.

    I gotta say though, the redundancy systems they have on those things, amazing.

    --
    boldly going forward, 'cause we can't find reverse
    1. Re:OSS can't be used everywhere by quantum+bit · · Score: 2, Funny

      Then use FreeBSD. It came out of California ;)

    2. Re: OSS can't be used everywhere by Black+Parrot · · Score: 2


      > But he said that even though Linux would be great, they could not have a foreign national have control over their system. ...they ended up with a proprietary OS.

      Any empirical evidence that using a POS gives them better protection against foreign nationals than using an OSOS would?

      OTOH, think what someone not from the USA might conclude from the same line of reasoning.

      --
      Sheesh, evil *and* a jerk. -- Jade
    3. Re:OSS can't be used everywhere by mpe · · Score: 2

      I was at a talk once where a guy from Lockheed was saying how they were using more and more commercial off-the-shelf systems to reduce costs. They were moving away from specialized systems custom developed for each plane, to a more general system that didn't need as much work.

      How often does COTS mean that you end up with a bespoke system built on top of proprietary software?

      But he said that even though Linux would be great, they could not have a foreign national have control over their system. Sure, they could see exactly what they have, but any changes to the kernel would have to be checked out completely (expensive), so they would be right back at having a specialized system. Politics maybe, but they ended up with a proprietary OS.

      Whereby they can't even audit it at all, let alone find out the nationality of whoever wrote a specific bit of code...

  29. Re:NEWS FLASH by s20451 · · Score: 5, Insightful

    you can have them due to some deeply held beliefs with religious fervor, or you can arrive at your opinion through a process of reasoning.

    It's my experience that people first tend to form their opinions based on deeply held beliefs (or otherwise) and later use reasoning to give justification to their beliefs. It is extremely rare for someone to start without preconceptions and use reasoning to develop an objective opinion. It is even rarer for someone to start with a deeply held belief and change their mind based on reasoning.

    For example, do most people who share files have liberal views on intellectual property because it justifies swapping copyrighted files, or do most people who swap copyrighted files do so because it validates their predeveloped liberal views on intellectual property?

    --
    Toronto-area transit rider? Rate your ride.
  30. Re:My take by bstadil · · Score: 2
    the best solution for the problem - irrespective of it's licence.

    You can not do this. The license does not exist in a vacuum relative to the problem that the SW is trying to solve.

    --
    Help fight continental drift.
  31. The lead-in is misleading. by Rip!ey · · Score: 2, Insightful

    The lead-in is misleading.

    They do not recommend that "the DOD drop plans for further adoption of Open Source software". They are saying that all software, regardless of the developement model, should have equal consideration if it meets the criteria for a specific purpose.

    "Public entities should procure the software that best meets their needs and should avoid any categorical preferences for open source software, commercial software, free software, or other software development models."

    The article itself is also misleading.

    "Proprietary software companies such as Microsoft have labeled open-source software as a serious threat and have begun to oppose its use by governments."

    Whilst we know this to be true re: Microsoft, the Initiative for Software Choice (whom the article discusses) expresses no such opposition.

  32. I work for the DoD... by ZeLonewolf · · Score: 5, Informative

    I work for the DoD, in a branch that plans technology policy for various projects. Over the last 5-10 years, the push for "Open Standards Architecture" (OSA) has been at the forefront. It's the stated policy of the DoD, which comes from the mouth of a former Secretary of Defense, to push for open standards, open interfaces, and in general to be as far from proprietary as possible. Proprietary software means more expense for the government due to non-competition, and it also puts the government in the hands of a private corporation.

    Open Source, while not specifically targeted by the DoD, is the next logical step. Although the previous generation of nuclear submarines ran HP-UX, the next generation (due to be delivered starting 2006) will run about half Solaris, half Linux. So yes, open source is on the way in in the government. Slightly off-topic, but if you want a good example of why proprietary software is no good for mission-critical work, look up on Google the problems the USS Yorktown had with Windows NT about 5 years ago...

    --
    "If at first you don't succeed, lower your standards."
    1. Re:I work for the DoD... by tomhudson · · Score: 3, Interesting
      for those to lazy to look it up here

      <quote> "Because of politics, some things are being forced on us that without political pressure we might not do, like Windows NT," Redman said. "If it were up to me I probably would not have used Windows NT in this particular application. If we used Unix, we would have a system that has less of a tendency to go down." </quote>

    2. Re:I work for the DoD... by IamTheRealMike · · Score: 5, Informative
      As a possibly interesting aside, I work for QinetiQ, the newly privatized DERA which was UK Military of Defense research. They do a lot of consulting for the MoD and the government. About a year or two ago they produced a report which was the definitive report for the UK government on open source.

      It was very positive. I don't know if it was ever made public (I don't see why it wouldn't be) but I have a copy at home, and it made for pleasant reading. And here at work, Linux and open source is everywhere. When I was doing a demo of my project about a week ago, as I demoed it my boss was talking and he said "Oh yes, this is all done using only open source and free software" which got lots of approval from the customers and other project managers etc (in fact my brief was, do it with open source if possible). My boss uses windows but with cygwin and the Gimp. There are several Linux workstations in my small dept alone. They are big into open source here. This reflects into the next generation of technologies for the military

      I think it must just be a government/civil service thing, but they seem to have a soft side for it. One thing I do think is dumb is that if the US DoD has made up its mind on open source that Microsoft amongst others should be telling them they are wrong, and denying choice. Uh, what? So people can no longer choose products based on what they think, in case it's "discrimination" or something? Hmmm.

    3. Re:I work for the DoD... by mpe · · Score: 2

      Proprietary software means more expense for the government due to non-competition, and it also puts the government in the hands of a private corporation.

      Worst case senario with the latter is that the corporation has links with someone you are about to go to war with.
      Considering the number of "easter eggs" which make it into proprietary software you probably really don't want it running on a weapons system.

  33. In related news... by Tseran · · Score: 2, Funny

    the heavy metal rock band Metallica recently realized that their battle against MP3's wasn't over and that Microsoft's attempt to squash MP3 with the changes in the Windows Media Player, proved that they were a good ally. The two groups have joined forces and will now fight against free music and free software. To seal the alliance, the next version of Windows, codenamed Longhorn, will be renamed to 'Sandman' and the familiar Start button will be replaced with an 'Enter' button. When asked to comment on this recent alliance, drummer James Hetfield had this to say. "Linux bad! Windows good!"

    --
    .sig: It's what's for dinner.
  34. DrinkOrDie? by jhol · · Score: 4, Funny

    Strange,

    I thought the warez group Drink Or Die already used Open Source software to distribute their stuff... ;-)

    1. Re:DrinkOrDie? by gl4ss · · Score: 2

      it's not as bad as reading THG every time as the humble guys and remembering your 30k score in ski or die..

      --
      world was created 5 seconds before this post as it is.
  35. Sarcasm Noted, but... by Greyfox · · Score: 5, Interesting
    I was just forced to take my company's "Security Refresher" cdrom course, a flash presentation on what my company considers to be good security practises.

    The first thing it told me was, "You can introduce hostile code into your network by opening an E-Mail" and therefore intructs you not to open E-Mail from anyone you don't know. They go on to say that you can also compromise the company's security by reading your Yahoo or Hotmail mail at work. Later in the course it instructs you to keep your system up to date by installing the latest Microsoft security patches, which is ironic because a co-worker just trashed his system by installing a Microsoft security patch and is looking at 3 days downtime while the technicians reinstall the OS (Technicians have an 8 hour response time and due to the holiday they were pretty close to that time. They took his computer away but they won't be able to deliver it on Friday because no one's going to be there.)

    Great. So we know we have a problem but instead of taking steps to solve the underlying problem, we're just going to tell everyone in the company to modify their behavior because if they don't, the company's network and billions of dollars of assets will be compromised. Does anyone else see a problem with this?

    Frankly, with the company's assets at stake, it would be a damn good idea to roll your own client code just so you can audit the source code. I did some auditing with Data General for a while and they had it right. Every auditing test was extremely well documented and available on the network, along with the automated code generated to test each function (In the C Library in this case.) But if rolling your own clients makes sense, you could save yourself a lot of time and money by grabbing open source projects for the applicaitons you need and feeding those to your audit and programming teams. You save some money and the open source community gets free high quality auditing of their source code and any additional features you decide to add to it. Everyone wins.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    1. Re:Sarcasm Noted, but... by parliboy · · Score: 2

      But, to install the security patch, he probably went to Microsoft Update. This means he was asked to install an ActiveX component from Microsoft. As discussed previously, Microsoft has warned all users not to accept Microsoft as a trusted publisher. Therefore, it was your own friend's fault for not listening to Microsoft's warning.

      Or at least, that's what tech support would say...

      --
      "You're never ready, just less unprepared."
    2. Re:Sarcasm Noted, but... by muzzmac · · Score: 2

      I tried to follow your logic on this. A patch not working suddenly jumps to audit teams being able to audit client source code.

      Your proposal has a slight cost problem...

      Firstly, I don't think something as complex as Linux or Windows which changes as often as it does is going to be audited by one comapanies audit team. It is just too expensive. I still struggle with justifying the cost of a simple business application code security audit in our company. It is just too expensive. What you're saying is needed is unrealistic for any company who's business is not creating software.

      The bank I work for would never go for it.

      I can imagine some projects with high availability requirements like airplane "fly by wire" systems being heavily audited but an insurance quoting system. Forget it.

      The patch/test/break cycle is not infallible but it's cheap and usually works. Until corporations find a lot more dollars to throw at this problem it won't change.

      On the flip side and perhaps the thing that supports some of what you say is, most large corporates can't handle massive patch update rollouts. How do you do rollouts of unknown patches to server/workstation environments of greater than 10 000 PC's and not be worried that half your environment will stop working?

      I still don't see how opening the source fixes that problem though.

      I think it's clear that current open source operating systems still have to patch often and frequently. Noone is infallible. Even OpenBSD is not infallible. We have to recognise and respect this. The classic example is we are still finding holes in "security projects" like OpenSSH and Kerberos years after their releases. Audits just don't happen often enough and aren't effective enough to get everything.

      The real problem is the distributed computing model.

      Change that!

    3. Re:Sarcasm Noted, but... by Greyfox · · Score: 3, Insightful
      The whole problem is they're not fixing the root cause of the problem. Why should I have to fear the simple act of opening E-Mail? Why does one of the largest IT companies in the country simply accept that they must fear opening E-Mail? And why is it that when we follow the company's "Experts'" advice, we can end up doing as much damage to our system as opening that unknown E-Mail is likely to?

      We're always hearing on the news that poor IT security is costing the country billions of dollars each year. So what's it going to take to get people to take IT security seriously? They're certianly not doing so right now. An audit team would be a small price to pay to be able to have a reasonable level of faith that day to day operation of your applications will most likely not compromise your system or your network.

      There's no sense in re-inventing the wheel either. Distributing an open source package (assuming it was GPLish) would require you to share your audit results back with the project. This would be a good idea anyway since you wouldn't have to re-patch in your diffs every time the authors published an upgrade. If your bank looks over the audit results from my company's audit of blargmail and decide that we know what we're doing, you can reasonably comfortably use blargmail without having to go to the trouble yourselves. If you read the audit docs and say "Hey! They weren't looking for buffer overflows at all" you can either audit it yourselves or go with some other package.

      Either way you look at it, Good IT security or the results of having poor security are a cost of doing business. You'll pay the price either way. Over time, the cost of having good security should be far less than what could happen if your security is not so good. Would you want to put your money in your bank if you think it's not secure? How would you feel if your hospital were run like (you seem to indicate) your bank is? Your power grid? Your water supply?

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    4. Re:Sarcasm Noted, but... by Lumpy · · Score: 2

      Later in the course it instructs you to keep your system up to date by installing the latest Microsoft security patches, which is ironic because a co-worker just trashed his system by installing a Microsoft security patch and is looking at 3 days downtime

      you have to be kidding... What braindead Manager wrote that policy? he needs to be fired and then publically impaled as an example to others..

      the ONLY operating system patches and updates that whould EVER be installed are the ones that were tested by your companies IT department. your company doesnt have an IT department? Why not? there is no excuse for blindly installing things, it does nothing but cause the problems you outlined. If your company has a decent firewall, transparent proxy, and a decent email server you can PROTECT your entire network of computers from the access point. Yes another example of why you must have a full-time IT department... even if that department is one person.. get one skilled and COMPETENT (the hard part in a sea of MCSE's) admin. and your troubles fade from a firestorm to a bunch of small fires that are easily extinguished.

      --
      Do not look at laser with remaining good eye.
  36. big freaking surprise by MORTAR_COMBAT! · · Score: 4, Insightful

    A group comprised completely of proprietary software vendors is recommending the use of proprietary software.

    In the end, it is up to those who want their government to "choose" other software to let their voices be heard. This will work as long as politicians listen to the populace they supposedly represent, instead of listening with their wallets to companies from other states.

    Of course, it may be that both the People and the "Software Choice" group of mega-corps both favor the use of proprietary software in government. My vote happens to be that our tax money which buys the software that runs our infrastructure should not be used to place our infrastructure under the control of a proprietary software vendor.

    --
    MORTAR COMBAT!
    1. Re:big freaking surprise by Jim+Norton · · Score: 2
      Of course, it may be that both the People and the "Software Choice" group of mega-corps both favor the use of proprietary software in government.

      I didn't recognize many of the names on the members list. I noticed Cisco, Intel, Stardock and (of course) M$, but what about Sun? What about Oracle? Novell? IBM?

      After doing a little bit of research, i've noticed that many of the companies on the members list are simply system integrators, consultants and web companies -- very few large companies and not many developers either, which is ... odd.

      --
      -- Jim
  37. That's odd by quantaman · · Score: 2

    I on the other hand recommended that they do use open source software.

    --
    I stole this Sig
  38. Hey I agree... by Anonymous Coward · · Score: 2, Funny

    Fine, closed systems... Then just switch to using MacOS... Think of how bitchin' and intimidating our tanks, subs and planes would be in indiglo, lime green or dalmation...

  39. Re:NEWS FLASH by Proaxiom · · Score: 3, Insightful
    On the other hand, reasoning that it's better to move to an open source product just because said OS product is currently attacked less, is fallacious.

    The argument is roughly analogous to reasoning it's better to move to a given neighborhood just because said neighborhood currently has a lower crime rate.

    As a parent and homeowner, that logic sounds pretty good to me.

  40. ignoring proprietary software by MORTAR_COMBAT! · · Score: 5, Insightful

    Even if the government only considered open source software, that does not exclude Microsoft from participation. Microsoft would be free to produce software which meets the requirements set, basically set there to ensure that software running our vital infrastructure, paid for by our taxes, does not place our government at the behest and mercy of a software company.

    One way to ensure that safety is through the use of open source software. There are undoubtedly other ways, such as Microsoft could provide source licenses only to the government for software the government buys, etc.

    However one of the main factors into considering open source software is the rising cost of software licenses. Since our tax money is used to buy this software, I for one would prefer we don't have to pay year after year for what amounts to yearly abandonware.

    --
    MORTAR COMBAT!
  41. Re:My take by KjetilK · · Score: 3

    No, you are a troll. Sincere Choice promotes the idea that people should have a choice. Software Choice promotes the idea that the best choice is proprietary software. That's their choice, but they shouldn't pretend that a policy that promotes that idea is the best for my needs.

    --
    Employee of Inrupt, Project Release Manager and Community Manager for Solid
  42. Many interests involveds by famazza · · Score: 2

    American Security and Justice Departments are world wide know for their secret investigations among themselves.

    Of course that keeping computers not as secure as they could get is very interesting if you want information "secure" enough to avoid a regular hacker to access it, but to enable a power hacker to access with the correct tools obtained with privileged information.

    Don't worry about this, you can keep using your free software and keep you own privacy. Unfortunately we can't say the same about your information stored at DoD. :oP

    --

    -=-=-=-=
    I know life isn't fair, but why can't it ever be un-fair in MY favor!?
  43. Very precise choice of words by sjbe · · Score: 2

    "Not inherently less secure" is a strange way of advocating your position. Double-negatives like this usually betray a defensive mind set. Why didn't they have the conviction to say "we're *more* secure"?

    My guess would be that he wasn't saying they were more secure, just that they weren't necessarily less secure. The second later argument is true though misleading. Closed source can be at least as secure as open source even though it tends not to be in practice. Claiming that closed source in general is more secure however would be a very easy argument to shoot down because the results rather strongly show the opposite.

    Anyway I don't read this as a double negative, just a very carefully chosen argument. I do think you are right though in that it probably reflects a defensive mindset.

  44. not if but when by zogger · · Score: 3, Interesting

    --note: I have zero way to tell and zero insider knowledge of what intel might or might not do.

    With that said, I would bet that if push came to shove, intel would fall on the side of millions of cpu chips to desktops (trusted and see-cure microsoft yada yada) instead of thousands to servers (terrible open source linux that any al queda teenager can hack open in 2 minutes yada yada). Public perception and marketing and outright lying and word twisting and propogandaizing will prevail in the short term. Not long term but the short term. The pushing and shoving being mandated "by law" with snoopervision hard coded into the chip itself, probably to "fight software and music and movie piracy and to help stop terrorism and them e-vile hackerz ,please, think of the childrenz" or some such new law probably coming to a nation near you soon.

    Really, just guessing though. Microsoft's alleged "punishment" was too wussy, I am guessing there's a sub tosa deal in place now between the government and microsoft, there will be a slew of trojans hidden in their software and only a matter of time before they are inside the chips. The government has stated quite clearly that their goal is TOTAL surveillance, I mean, how many more clues are needed now? Intel will play ball with this if they are forced to choose. So will AMD probably as well, and it never has to be made public, at least past the plausable deniability level.

  45. Nothing stops MS from offering an OSS solution by Badanov · · Score: 5, Interesting
    Nothing stops MS from offering specialially tweaked software for each department's use. If they are offering only off the shelf solutions and no chance for government to change the software to behave the way they want, they shouldn't gripe because a departments chooses an open source solution.

    Open source software, the way it is marketed is perfect for DoD work simply because the software itself is tweakable. The IT people in govement departmenrs have a large degree of control over how software is used should they choose open source; they are not as reliant on MS's vision of how their software is used, nor should they be.

    Should open source be required? I used to say yes, but then I realize, that is not choice. So of course no, but then neither should closed source be. It all comes down to what it will do for you. On one hand you get a product that MS does not warrent for any particular purpose, nor allow themselves to be held liable for any such use, versus a software product that does the same thing but at least allows the purchaser to to alter the code to suit their own preference, but retaining the decision as to whether to distribute it, under some liberal conditions.

    --
    Dawn of the Dead
    1. Re:Nothing stops MS from offering an OSS solution by aero6dof · · Score: 2

      The DoD also must use their equipment for many years beyond the typical lifespan of a commercial software product. Look at when various peices of military equipment that's designed, rolled out, and supported for decades. Open source is perfect for this usage, as they can archive the source code for long-term maintenance.

    2. Re:Nothing stops MS from offering an OSS solution by jbolden · · Score: 2

      Analog computers.

      Just to add to this; the Navy recently retired the last of their analog computers abord ships.

    3. Re:Nothing stops MS from offering an OSS solution by mpe · · Score: 2

      The DoD also must use their equipment for many years beyond the typical lifespan of a commercial software product. Look at when various peices of military equipment that's designed, rolled out, and supported for decades.

      The time between design and rollout could easily be longer than the "lifespan" according to a proprietary software company.

  46. Et tu Cisco? by xchino · · Score: 2

    I had no idea Cisco had such a strong stance against Open Source. I guess all the Linux router projects out there are cutting into their market share.

    --
    Everyone is entitled to their own opinion. It's just that yours is stupid.
  47. A better idea? by qzulla · · Score: 2, Funny

    Shouldn't they be telling the DOD why their software is better?

    Oh, wait... strike that...

    qz

  48. Re:Microsoft argues they are as good as open sourc by Black+Parrot · · Score: 2


    > I think its funny that Microsoft didn't say that their stuff is better. They can only argue that their stuff isn't worse.

    Yes, it is amusing to reflect on how far that goalpost has moved in the past five years.

    On c.o.l.a. I've also seen "Linux is too hard to install" shift to "Windows is just as easy to install as Linux is".

    --
    Sheesh, evil *and* a jerk. -- Jade
  49. Perhaps not on purpose... by bhsx · · Score: 2

    Perhaps you sincerely believe what you said; but it is trolling nonetheless. As the AC who snipped from the sincere choice site has already pointed out, you have it backwards. Sincere Choice does promote open protocols and file formats, and makes it very clear that proprietary solutions can happily commingle with Free solutions. Software Choice backs only the proprietary software that its members own (of course all other proprietary software reap the PR benefits Software Choice spews).

    --
    put the what in the where?
  50. win EVERY battle? by bstadil · · Score: 2, Insightful
    they don't have to win EVERY battle.

    Agree totally. Interestingly you do not really need to win any battles, only make sure you will be around for the next skirmish.

    MS lost every battle aganist DOJ but still won the war, the Vietcong hardly fought any battles let alone won one.

    OpenSource will not go away, it can't as long as individual programmers are "scratching itches".

    --
    Help fight continental drift.
  51. Isn't this in the dictionary as an example... by Techmaniac · · Score: 2, Insightful

    of irony?

    I mean, a group called software choice telling the goblement (.gov) what software they should choose. Please destroy this government Mr. Terrorist.

  52. Re:NEWS FLASH by Anonymous Coward · · Score: 2, Insightful

    Dude, I just want the latest Eminem CD. Sometimes piracy is just piracy.

  53. Built by the cheapest bidder ? by Cedric+C.+Girouard · · Score: 3

    Now the cheapest bidders can be even cheaper, by not having to include liscensing fees in it's quotation.

    Of course MS will freak out. This is going directly for their main artery. If I was in business, I'd try to fight it. It might not be "socially" correct, but it makes good business sense to try and counter the competition.

    Now, let's just hope that the DoD will not fold to commercial power.
    --

    Marriage is considered capital punishment for the theft of a goat in some third world countries...

  54. Errm... by ActiveSX · · Score: 2

    but is recommend on using it more.

    Oh, they is, is they? That are very interest.

  55. Pretty smart people at Mitre by Stonent1 · · Score: 2

    The general manager of the division of the company that I work for used to work at Mitre. He has multiple masters degrees, and a doctorate. Not only that, he's a pretty cool guy. I'm sure this is OT, but I just wanted to give you some background on Mitre.

  56. Selection Criteria by Valar · · Score: 2

    What does it matter if a microsoft group says the DOD shouldn't use open source software. The DOD will continue to use whatever gets the job done. They are capable enough to make their own decisions, and I'm sure they can see the motive behind a microsoft backed group pushing against open source. So, this is really a non-issue.

  57. Re:Innovation by tomhudson · · Score: 2
    I am *so* sick of Microsoft thinking they are the only people capable of innovation. <quote>

    And in other news (stealing still another idea from another business - The Microsoft Way!) Microsoft Corp. today announces Microsoft Windows Classic, a more secure OS. Features include Windows 3.0, DOS 5.0 and DOSShell. With no browser or networking support, and with Windows Solitaire removed, you can rest assured that your droids^H^H^H^H^H^H^Hemployees devote more time to WORK!. Micro$oft Cla$$ic! The choice of a nuked generation!

  58. Re:My take by miffo.swe · · Score: 2

    "The "Sincere Choice" group (Bruce Perens et al) are pushing for greater adoption of Open Source. "Software Choice" is (as far as I can tell) pushing for, what appears to be, the best solution for the problem - irrespective of it's licence."

    And by some strange reason Software Choice tends to skew things a hefty bit towards closed source proprearity. That is, all things is best if that terrible cancer of Linus is avoided at all cost and that no university, government or entity within the state use it or develop anything for it. You have blue eyes i presume?

    "This, to me, seems to be the most sensible thing. You don't go and purchase a TV, Video or DVD system without doing the research and finding out what suits you. You look at the facts, you look at what you want and you pick what is best for the situation."

    A government is suppossed to give the tax payers the most possible for their money. Cost should be a big part in the decision process, pick the thing that does the job at the least cost just like in other areas. They are as of today very poor at choosing anything else than Microsoft and they want to keep it that way.

    "So, if a closed source solution is the best one, then hell why can't they go for it? I don't know many people who deliberately pick an inferior product unless they have very strong moral or cash-flow problems."

    I cant see that closed source is the best in every case. Running a webserver on IIS seems to me as a sign that they DONT choose the best tool for the job. I know many times that inferior products have been choosen, call it stupidity moral or whatever but it happens all the time because "nobody get fired for buying Microsoft".

    "Sure, people will point out that people should be using open file formats, the ability to look at the code and the freedom (as in speech) of it all."

    This is a key element. I pay taxes right? I have the right to access material right? To force me to buy a proprearity product to enjoy my rights is very bad. Its favorism in its highest form and just as bad as if they would mandate linux everywhere. Open formats lets everybody use whatever they want. I cant see where this would hurt anybody but the monopoly.

    "They are right. But even when you apply the ideals of Software Choice to Open Source - it should (unless it's really really appallingly bad) still come out smelling sweeter BECAUSE OF THESE VERY FREEDOMS THAT IT GIVES. "

    The "freedom" it gives is status qou for MS. They are very happy in forcing upgrades down everybodys throat.

    " I was always told, use the best tool for the job. If OSS advocates are getting worried about a group of companies advocating picking the best tool for the job, then I would like to know what they're worried about. OSS stuff should be able to stand up to this sort of criteria."

    If governments start using theese tools they get a synergy effect that so far has never been seen. A sheriff in Idaho can take benefit from an application made in NY police office without double cost. What one entity make the others can benefit of without cost. The tools will be as good as they want them to be. OSS dont market themselves but rely on educated users that knows what they are doing. Thats hard when marketdroids is running rampant calling it cancer and warning about how it will destroy the country.

    " If a product still looks crap (even after all the benefits that come with OSS licencing) against something closed and propriatory, then maybe it's time to realise that it quite well could be crap?"

    Ofcourse it will still be crap! Crap is crap is crap, get my drift? They should though have the choice of building their own software, with the help of OSS community. Thats not what Software Choice wants. They want all software to be bought, preferable again and aganin every third year.

    "(if of course, Software Choice have changed their tack - then feel free to mod me into oblivion)"

    Nope, i still see a little Mini-gates on their shoulders, they havent changed.

    --
    HTTP/1.1 400
  59. Microsoft: Secure Computing (Yeah right!) by Maul · · Score: 2

    Just a little Thanksgiving tidbit for you all.

    I come to my Parents' for the Thanksgiving Holiday. Sometime last night I use their PC to check my email.

    I notice an advertisement sent to them via Windows Messenger. I ask my mom how long she's been getting these, and she replies that she has for a few weeks repeatedly.

    I disable Windows Messenger and told her that what I did should have fixed the problem.

    However, my parents know very little about computers. They had no clue how all these ads for pr0n were coming in to them. They don't read up on this type of stuff, nor would they like to have to.

    Microsoft brands their OS as being user friendly and secure, yet they don't even set the default configurations on their own OS to respect the privacy of their customers.

    I'm not about to suggest Linux to them. I use Linux and Windows XP, but I also have the knowhow to configure them at least decently. I suggested that my parents ditch their PC and get a Mac.

    --

    "You spoony bard!" -Tellah

  60. Re:What about a GPL binary? by grub · · Score: 2


    Use "Ask Slashdot"!

    A cleaned up 'strings' of the binary along with MD5 hashes of the binaries off the CD will be stored on slashdot for all to see. The supplier will not be able to deny anything, especially if those hashes match the hash generated from the binaries available via public sources.

    Then let RMS know so he can don his suit with the big "S" and cape.. :)

    --
    Trolling is a art,
  61. MITRE Is Not Just Another Contractor by John+Hasler · · Score: 5, Informative

    > This comes after MITRE, a defense contractor,
    > published a report stating that not only does the
    > Department of Defense use opensource, but is
    > recommend on using it more.

    MITRE is one hell of a lot more than just another defense contractor. Look into it's history and you'll see that DoD will value its opinion far above that of some Microsoft lobbiest.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    1. Re:MITRE Is Not Just Another Contractor by John+Hasler · · Score: 2

      Whether or not all MITRE employees are idiots is irrelevant to my point. The fact is that most DoD officials have great respect for MITRE, which has been advising the DoD on technical and policy issues since long before Microsoft was founded.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    2. Re:MITRE Is Not Just Another Contractor by jc42 · · Score: 2

      Some years back, I worked on a contract at Mitre for about a year. We were repeatedly reminded of the legal situation: Mitre was created by an act of Congress as a *consulting* firm, and is not permitted to engage in any commercial operations.

      Mitre's sole purpose is to do studies and write reports for its contractor, the US government. (Well, actually the Air Force is their prime contractor, but they do like to drag in any government agencies that they can. ;-)

      Some of those reports are secret. Most are not, and are handed out to anyone who will read them. For all the usual reasons, Mitre's management treats publication and publicity as a Good Thing. They especially like to approach discussions with the comment "We did a study of that 5 years ago; would you like a copy of our report?"

      I wrote a fair amount of code on the project, and it was all put into the public domain. Unfortunately, most of the project was developing OSI protocols.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    3. Re:MITRE Is Not Just Another Contractor by BoneFlower · · Score: 2

      MITRE is one of the biggest consultants for the military. They are involved in damn near evey major exercise and many higher echelon units have MITRE personnel on their staff with the same security clearance the intelligence personnel have.

  62. Re:Microsoft argues they are as good as open sourc by Greedo · · Score: 2

    I think its funny that Microsoft didn't say that their stuff is better. They can only argue that their stuff isn't worse.

    Actually, they aren't even saying that!

    They are saying that their stuff isn't necessarily worse just because it's their stuff. It still could be worse.

    --
    Tuus crepidae innexilis sunt.
  63. Re:that's what ISC was saying by Spellbinder · · Score: 2, Insightful

    but government gets it's money from the people..
    therefore they should spend it to our benefit!!!
    if they buy m$ just the employes and shareholder benefit!!!
    with open source everybody benefits!!! (at least everybody using software)
    with this in mind there is nothig to decide if the open source software
    can do the same job at the same price as a closed source option

    --


    stop supporting microsoft with pirating their software!!!!!
  64. Is Intel involved in this mess too? by miffo.swe · · Score: 2

    Why that was the last time an Intel CPU ever got into any of my servers, workstations or anything else. One would think that intel would want to get rid of master Microsoft and be able to build their own software again. Right now they are not able to because of their tight lockin to MS. If linux succed at a greater scale it could very well be the start of a move away from that hideous platform of x86 and possibly leave Intel behind. Linux is pretty easy to port compared to Windows.

    --
    HTTP/1.1 400
  65. DoD Commies! by stinkbomb · · Score: 2, Insightful
    One particularly nasty bit:

    "Thus, because of the GPL's "transitive user rights," at least half of the DoD's OSS efforts, were they to be more widely disseminated, would largely foreclose proprietary and/or hybrid companies from further developing the
    software and commercializing the results. The same is true for any outside R&D funded
    by the DoD - if it is GPL-based, proprietary companies cannot directly benefit from it."


    Oh no! If the DoD develops it's own GPL'd software, we (MS, Cisco, Intel, et al) can't sell it as our own for ridiculous prices!

    Stop the commies at the DoD!

  66. Choice? by valisk · · Score: 2, Insightful

    Is it just me, or do the ever increasing numbers of Industry pressure groups seem to all be formed by the same small group of companies?
    This is a measure designed to 'gull' the general public (Im tempted to add the word license there, don't know why :) ) into believing that industry has mobilised itself against OSS.
    When in fact only Microsoft its distribution partners, and occasionaly Adobe has taken issue with it.

    --

    Economic Left/Right: -0.62
    Social Libertarian/Authoritarian: -3.69
  67. GPL claims are totally bogus. by RichMan · · Score: 2, Interesting

    Claims that the GPL will affect government usage of software have zero basis in reality.
    1) If the Government wants to modify GPL software for internal usage they are free to do so. As long as they do not distribute outside of the government they are clearly within the GPL.
    2) The Government is GPL proof. If the Government wants to declare that they are void from the provisions of the GPL they have any number of options for avoiding the provisions.
    a) claim national security
    b) claim national provenince and take ownership
    c) change copyright law

    The real claims of the movement are that it will cut into proprietary software houses right to earn a buck. This are also useless claims based on continued extortion of government dollars. These companies wish to continue taking excessive amounts of money from the government.

    The government should own the software it uses. Would you be happy if all the tanks owned by the government were actually owned by Laidlaw and were supplied to the government on contract? A contract that could be cancelled at any time. That software controlling the battleship-sub-airplane-tank is owned by Microsoft. Microsoft reserves the right to disable it at any time should the government not keep it happy. (See why other governments are moving away from Microsoft)

    Also if the government has the code all contractors are on an equal starting point. This presents the most competition into the contracting and supply route and will get the government the best price.
    The only way to do this is to make it that the government will have the rights to the source code for all software used in any government project. The GPL achieves this. All contracts the govenment puts out for supply and services of computing contracts should require that the source code be supplied with all rights to modify to the government.

    1. Re:GPL claims are totally bogus. by mpe · · Score: 2

      The real claims of the movement are that it will cut into proprietary software houses right to earn a buck. This are also useless claims based on continued extortion of government dollars. These companies wish to continue taking excessive amounts of money from the government.

      In a capitalist system a commercial enterprise has no right to make money in the first place. What they appear to be asking for is "socialism", "communism" or "corporate welfare".

      The government should own the software it uses. Would you be happy if all the tanks owned by the government were actually owned by Laidlaw and were supplied to the government on contract? A contract that could be cancelled at any time. That software controlling the battleship-sub-airplane-tank is owned by Microsoft. Microsoft reserves the right to disable it at any time should the government not keep it happy.

      Or even worst what would happen if the software used turns out to be owned by OBL. Or there is an "easter egg" in the software which activates when you attempt to target certain places...

  68. Rocket Scientists theorize that... by cyber_rigger · · Score: 2


    Rocket Scientists today comtemplated the theory
    that Microsoft software could be "open sourced".

    This of course violates all known laws of particle physics.

  69. DoD Security Policy 8500.1 by xiitone · · Score: 5, Informative
    DoDD 8500.1, *the* authoritative overarching DoD document concerning Computer Security contains this paragraph:
    Public domain software products, and other software products with limited or no warranty, such as those commonly known as freeware or shareware, shall only be used in DoD information systems to meet compelling operational requirements. Such products shall be thoroughly assessed for risk and accepted for use by the responsible DAA.
    The part that I wonder about is "other software products with limited or no warranty, such as those commonly known as freeware or shareware". I wonder if this was meant to indicate Open Source Software? IANAL, but I've never seen a EULA for software that didn't indicate a limited warranty. In fact, from my layman's point of view, all the standard EULAs seem to indicate that the software has no warranty, since they seem to claim that the software doesn't have to do anything at all...
    --
    Elegance is for tailors. -A. Einstein
    1. Re:DoD Security Policy 8500.1 by inode_buddha · · Score: 2

      Cool point, may I try and reinforce it?

      here goes:

      "I do hereby disclaim thee, O liability"

      Noting with interest that the seldom-read EULA (WinNT) specifically disclaims liability from financial, medical, and nuclear disasters...

      So, it's really just six of one, half a dozen of the other as far as I'm concerned. Perhaps the real difference is that the one has a static target to sue for damages where the other does not. Not that they'd get anything; after all, liability was disclaimed in both cases!

      --
      C|N>K
    2. Re:DoD Security Policy 8500.1 by BoneFlower · · Score: 2

      This is where companies like Mandrake and RedHat can come in, offering some sort of warranty and technical support.

  70. Guide to software choice policies by Anarchofascist · · Score: 2, Informative

    Bookmarking this handy page to keep track of how well OSS is doing! Naughty software procurement policies.

    Incidentally, don't use put a single quote in the zipcode field on their registration form...

    --
    Once more unto the breach, dear friends, once more, Or close the wall up with our American dead!
  71. Nat actually what the art by jbolden · · Score: 5, Insightful

    If you read the actual article recommendation the /. summary is simply incorrect. The recommendation was:

    a) The choice of open source vs. closed source be made on a project by project basis and not be a matter of policy. In particular the DoD should not adobt a preferential policy favoring open source over closed source when possible,

    b) While BSD licenses are OK using GPL licenses violate congressional norms (in particular they make commercial software impossible)

    In addition things not mentioned in the summary

    a) DoD is far and away the largest user of open source in the government

    b) Security issues are ambigious with regard open source vs. closed source

    c) A great deal of open source software violates all sorts of other government regulations and the government would end up having to bring these systems into compliance.

    Yes the comments were hostile to open source particularly GPL they certainly where nowhere near the summary though.

    1. Re:Nat actually what the art by JPelorat · · Score: 3, Funny

      "congressional norms"

      now that's a classy oxymoron..

      --
      Hokey statistics and ancient misconceptions are no match for a good thought in your head, kid!
    2. Re:Nat actually what the art by stephanruby · · Score: 2
      c) A great deal of open source software violates all sorts of other government regulations and the government would end up having to bring these systems into compliance.

      I don't know what regulations open source is suppose to violate, but a great deal of closed source software violates second sourcing regulations. Second sourcing, having a minimum of two suppliers, has been in use for fifty years by the DoD and the military. Suppliers didn't like it then, suppliers are not going to like it now.

    3. Re:Nat actually what the art by inode_buddha · · Score: 3, Insightful

      er, "congressional norms"? After re-reading my local copy of the GPL, version 2, I don't see how using the GPL makes commercial software impossible. Please excuse me while I read the rest of this discussion for clarification. Especially the "actual article" (thanks for the link!)

      --
      C|N>K
    4. Re:Nat actually what the art by mpe · · Score: 2

      While BSD licenses are OK using GPL licenses violate congressional norms (in particular they make commercial software impossible)

      Nothing in the GPL licence procludes commercial software. N.B. "commercial" and "proprietary" do not mean the same thing. AFAIK the US DoD isn't in the business of selling software anyway. Nor is the US Congress.

    5. Re:Nat actually what the art by mpe · · Score: 2

      I don't know what regulations open source is suppose to violate, but a great deal of closed source software violates second sourcing regulations. Second sourcing, having a minimum of two suppliers, has been in use for fifty years by the DoD and the military.

      Plenty of other government related organisations and even commercial businesses supposedly have similar rules.

      Suppliers didn't like it then, suppliers are not going to like it now.

      The point is to protect against suppliers holding the customer hostage.

    6. Re:Nat actually what the art by jbolden · · Score: 2

      The GPL requires the release of source code and the right to redistribute thus defeats most commercial models of software sales. Lets not be silly even the FSF agrees that widespread use of GPL would result in a transformation of the commercial software industry from sale of software towards customization and implementation (i.e. from Microsoft like to IBM global services like).

      As for the DoD not being in the business a great deal of defense research is passed to the private sector directly. Further the DoD most certainly does sell and direct the sale of weapons systems which is one of the US's primary exports.

    7. Re:Nat actually what the art by mpe · · Score: 2

      The GPL requires the release of source code and the right to redistribute thus defeats most commercial models of software sales.

      Not models, one single model, that of pretending that a computer program is like a physical object.

  72. Open Interfaces by hughk · · Score: 5, Interesting
    Open Source wouldn't be necessary if proprietary solutions had completly documented external interfaces and file formats. I think a major plaer like the government has the right to demand open interfaces and the implicit ability to replace a module from any vendor with another written to the same specification.

    As we have seen with Microsoft's efforts to complicate other formats, the best way of wnsuring this is to demand source code. If Microsoft doesn't like it, well there is always OSS.

    --
    See my journal, I write things there
    1. Re:Open Interfaces by mmol_6453 · · Score: 2

      Unfortunately, Microsoft does have a "Shared Source" program.

      Now, assuming that the gov't can demand source code from a vendor before using their software, is that source code then available under the Freedom of Information Act? Without signing an NDA?

      Even if it is, anyone who sees the code is tainted; Microsoft can probably still patent portions of its source code, even after other people make modifications and extionsions. After all, does "prior art" refer to before the patent or before the invented device?

      (In other words, "Kids, don't try this at home.")

      --
      What's this Submit thingy do?
    2. Re:Open Interfaces by hughk · · Score: 2
      Unfortunately, Microsoft does have a "Shared Source" program.
      The source you get is not guaranteed to be part of the binaries and may be incomplete. It also does not tend to be updated as regularly as the binaries. The point being, if you are sufficiently paranoid that you want to audit and build in house, Microsoft's shared source is not the answer. If you want to guarantee that you or a third party can implement a replaceable system component, then Shared Source is an incomplete answer. You may have the source, but other vendors may not, and in any case, your source may be out of date.
      --
      See my journal, I write things there
    3. Re:Open Interfaces by hughk · · Score: 2

      You get my point, but note that I said all external interfaces. This means also any files or databases used by the module. For example, have you ever had to dig your way through a corrupt Exchange database? It's horrible and would be even with complete documentation. Without, it is very, very difficult.

      --
      See my journal, I write things there
  73. Re:NEWS FLASH by SpoonMeiser · · Score: 3, Insightful
    The argument is roughly analogous to reasoning it's better to move to a given neighbourhood just because said neighbourhood currently has a lower crime rate.

    In a sense, yes, but that's not the point... Moving to an open source product because it is attacked less, means that you are at less risk from skiddie and worms. But a real attacker won't be randomly trying machines for known exploits, (s)he'll be attacking just the box/site that he wants access to.

    To keep with the neighbourhood analogy, it's like moving to a safer neighbourhood when a hit-man's after you, it doesn't really matter how many petty criminals are in the area, there's still a goddamn hitman!

    --

    --
    Hollywood representatives have publicly stated that skipping commercials is "stealing."

  74. Palladium by jbolden · · Score: 3, Interesting

    What they say is that closed source is not inherently less secure than open source. They are kind of arguing that its a tie. In reality this undersells the commercial world.
    For example every security class A operating system for example is commercial (and presumably closed source). No open source has even gone for a high security certification though the NSA was going to build a high security version of Linux before they got stopped (nowhere near class A though). The issue though is that while there are excellent closed source secure systems Microsoft doesn't make any of them; vendors like IBM (with Z-OS) do.

    However Palladium will move MSFT towards a capability system and these are substantially more secure (in practice) than systems based on file permissions (like Unixes). I wouldn't be so sure this is a permanent win for Linux rather than a short term victory based on:

    a) Microsoft's poor execution on security
    b) Services running with excessively high permissions
    c) Security not being a focus of the company until recently.

  75. Re:What about a GPL binary? by grub · · Score: 3, Funny


    On Windows box I honestly don't know. If you could FTP (in binary mode!) to a *NIX box, you could just "md5 filename"

    Sorry, my Windows skills are limited to playing games.

    Personally, I'd resubmit the story; they repeat stories that ran just a day before, your odds of getting approved are pretty good, eh? :)

    --
    Trolling is a art,
  76. Looks like MSFT is trying to play catch-up by varun · · Score: 2, Insightful

    >arguing that proprietary products are not inherently less secure

    "not inherently less" - looks like Microsoft is trying to prove that it's products are "not worse" that open source ones. One would imagine that they would want to show how their software is "inherently" more. Just goes to show that they are (or at least feel that they are) lagging behind.

  77. Re:NEWS FLASH by rseuhs · · Score: 3, Insightful
    Wrong, to keep with the neighbourhood analogy, you are moving from a tent to a house with security doors and alarm system.

    Sure it's not perfectly secure and some criminals will overcome the defensive measures.

    But it's better than the tent (=Windows) you had before, so I don't see why this move should be wrong.

  78. Re:that's what ISC was saying by rseuhs · · Score: 2
    They don't think it's fair for the government to only consider open source software and ignore software made by, say, Microsoft.

    But they seem to have absolutely no problems when government organizations implement Microsoft and only Microsoft policies, at least I have never heard them complain about that.

    With OpenSource, you have an open market for supporters and companies - with a MS-only policy you have to swallow anything MS throws at you. (including rising fees and license costs, changing EULAs and registration/activation hassles)

    A MS-only policy is much more restrictive than a OSS-only policy. If ISC's main goal is to "educate policymakers about the need to remain neutral with respect to government purchase of software" why don't they critizise MS-only policies?

    Face it: ISC is just the long arm of Microsoft.

  79. Strange company they keep by dackroyd · · Score: 2

    No other big names

    Yeah but as the Register said it's a pretty odd selection of companies from a pretty odd selection of countries.

    In fact if you take away companies from the USA then it seems to leave lot's of companies from Egypt, United Arab Emirates, Kuwait and Saudi Arabia. Odd, all these countries have very strong ties with the CIA, oil and defence industries and all have either (effectively) dictatorships or incredibly bad human rights records.

    If someone had a couple of months to investigate this they could probably come up with a pretty good conspiracy theory.

    --
    "Free software as in beer, copy protection as in racket" - Telsa Gwynne
    1. Re:Strange company they keep by pVoid · · Score: 2
      all have either (effectively) dictatorships or incredibly bad human rights records

      Dude, I'm by no way defending anyone, but please spare your anti-non-US-country-FUD.

      If anything, it's probably *thanks* to the CIA (because the US has so much interest in the oil in those countries) that those countries will remain the way they are now forever more (until oil depletes).

      Human rights? It's a fad. Human rights is a tool politicians use to appease the pavlovian masses. Human rights are broken everywhere on this planet...

      Sorry I'm so grim. =)

  80. Re:My take by Dirtside · · Score: 2
    You have a problem. This:
    pushing for, what appears to be, the best solution for the problem - irrespective of it's licence.
    directly contradicts this:
    it should (unless it's really really appallingly bad) still come out smelling sweeter BECAUSE OF THESE VERY FREEDOMS THAT IT GIVES.
    If it "comes out smelling sweeter" because of the freedoms it gives, then you are taking the license into account. You can't have it both ways.

    The license of a piece of software is just one factor when it comes to whether it's the best solution for the problem. You can't reasonably ignore the license when making your decision, and neither should you focus entirely on the license -- either way lies madness. A balanced approach, taking into account all relevant factors (quality of software, up-front and continuing monetary costs, license, etc.), is the only reasonable way to go.

    --
    "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
  81. open source and Microsoft advocacy are different by g4dget · · Score: 3, Interesting
    Well, there are differences. Most importantly, open source advocates usually are users or developers of open source, not sellers. For example, MITRE makes no more money by advocating open source than by advocating Microsoft. But Microsoft makes enormous amounts of money by selling software. Therefore, Microsoft has big financial incentives to mislead and lie about the security and cost of their software. With open source, however, if another open source user saves money using open source software and tells me about it, they may tell me about it because my participation in open source further lowers their cost, but their gain is my gain: I'm in the same boat.

    For a simple analogy, ask yourself: all things being equal, who do you trust more: the used car salesman making a pitch (Microsoft) or the common views of a dozen of his ex-customers (other open source users)?

    Also, this isn't like the Coke-vs.-Pepsi debate--two more-or-less equivalent products, where one can debate endlessly which one is better. Open source and closed source software are profoundly different development models. I think open source really is better for most users, in a clearcut economic sense. I have concluded that, in contrast to many economic arguments for open source, Microsoft's arguments are mostly logically and economically unsound. You may reach different conclusions, but the point is that this is something one can think about and determine the truth of logically. Therefore, it is not a question of advocacy and bias but putting forward logical arguments and empirical proof.

  82. and we're supposed to care because? by alizard · · Score: 2
    MITRE's fairly well known and has done some useful things... from their site:
    MITRE is a not-for-profit national resource that provides systems engineering, research and development, and information technology support to the government. It operates federally funded research and development centers for the DOD, the FAA, and the IRS, with principal locations in Bedford, Massachusetts, and Northern Virginia

    Check the site out. Interesting tech publications.

    The word "Institute" implies that it's a brain trust of qualified academic researchers, which is bullshit. As far as they've bothered to reveal to the rest of us, The Institute for Software Choice is simply a PR front group. They are in no position to speak authoritatively on any technical issue whatsoever. Their sole purpose for existence is to crank out press releases and hold press conferences if they can find any journalists inexperienced enough to show up. Declan should know better than to print their press releases as news.

    The "Institute" would be called The Klingon Alliance or the Ku Klux Klan if MS thought it would help.

    1. Re:and we're supposed to care because? by mpe · · Score: 2

      The "Institute" would be called The Klingon Alliance or the Ku Klux Klan if MS thought it would help.

      Like other lobbying groups they pick a name which makes them sound more authoriative and more representative than they actually are. same thinking as having a preassure group called "moral majority".

  83. Re:NEWS FLASH by Sj0 · · Score: 2

    In this case, it would make the hitman resort to hitman tactics instead of script kiddie tactics. Besides which, it doesn't matter who breaks into a box -- if an important server(or even workstation) is compromised, it has been compromised. It helps if you don't have to worry about being killed in a carjacking while you're trying to figure out how to keep the hitman from getting you.

    --
    It's been a long time.
  84. A few comments by dwheeler · · Score: 2

    You can find the original MITRE 2002 report here.

    --
    - David A. Wheeler (see my Secure Programming HOWTO)
  85. Not a big shock by Black+Copter+Control · · Score: 2
    This isn't a big shock. .MIL web servers are about 75% Microsoft -- and they've had hackers walking all over them. I'm betting that microsoft also charges them full list price, too (It's not a question of them buying a Windows server -- it's a question of which, and how many). For .MIL to move over to Open source would be a big hit.

    For Microsoft to try and claim that they're as secure as open source so soon after the 'format your hard drive' bug created such a big fluff is likely to backfire on them. I think that they're shotgunning flies here, and more likely than not to hit their foot. They're actuzlly making it clear that they really do consider the security issue to be a real problem with their software. If these people start to look at the security differences between MS and OS.MIL usage of MS may just drop precipitiously.

    --
    OS Software is like love: The best way to make it grow is to give it away.
  86. Re:NEWS FLASH by egreB · · Score: 3, Interesting

    But wouldn't it be even better if FAA (no idea what it is, but it probably has something to do with airplanes and america (Flying Assosicaition of America?)) developed an in-house system with good auditing AND make it open source? The more eyes, the better.

    You could argue that if the source is open, a nasty cracker (133t, is that it?) might stumble upon a security hole (3xp101t?) and take advantage of it. But it wouldn't take long before the rest of the 'net (or whatever the fora) knew it as well, and some smart people at FAA would at that time probably pick up the information, and have patches from the community waiting for in-house auditing. It's a better scenario than if a cracker found a security hole (3XpL0itz?) in a closed source, and nobody would know but the cracker. Your airplane goes down just like the servers..

    I dunno if this is my honest opinion. I'm just asking, trying to establish a position. If I'm wrong, enlighten me!

  87. blah blah by rsax · · Score: 2, Informative
    This week, the Initiative for Software Choice counterattacked, telling the Defense Information Systems Agency that the Pentagon should not "openly promote the use" of open-source software, arguing that proprietary products are not inherently less secure.

    Might not be less secure but I think the difference is how opensource projects respond to and handle security issues compared to some proprietary software companies. The latter have to consider reactions from shareholders, etc when informing users of vulnerabilities in their products, they have the choice to stay quiet more often since the source isn't open. That isn't the case with opensource projects, the source is right there for everyone to poke and prod at.

    http://www.infoworld.com/articles/hn/xml/02/09/0 5/020905hnmssecure.xml

    "I'm not proud," Valentine said, as he spoke to a crowd of developers here at the company's Windows .Net Server developer conference. "We really haven't done everything we could to protect our customers ... Our products just aren't engineered for security."

  88. Re:heh by DarkVein · · Score: 2

    The Initiative for Software Choice was featured on Slashdot a while ago, when their opposition was formed: Sincere Choice . More than a tad tounge-in-cheek.

    Don't be so surprised. When in politics, label yourself the opposite of your intention. Remember the "non-discriminatory" RANDs licensing that certain W3C members were promoting a while back? I particularly like the prefix "non-", as opposed to "anti-". Consider it.

    Then there's the "homeland security" bill. A bill genuinely about "homeland security", but without the prepositional explanation of who's being secured.

    Really, it's pretty easy to spot when people try this. Remember, organizations, people, or bills, act. They are not "about terrorism" or "about protecting". They do things. When someone says this [noun] is about [noun], the preposition is not the verb. When they say "[noun] is about [noun]", they're avoiding answering you by stating "[noun] is". It exists! Don't question it!

    They're always actions. Reasonable And Non-Discriminatory licensing proposed to slacken the W3C's vigilance against proprietary siezure of W3C recommendations. Initiative for Software Chioce proposes choices to improve the economic conditions of its members. Homeland Security proposes intercommunication with agencies and increased surveilance of the populace for the purpose of securing the homeland against threats. Now, I can't stress this enough. Fuck the prepositions. They're there to tell you about intentions and ideas, not about what's actually going to happen.

    Ranting? You bet! I bet you never thought that high-school grammar would ever be useful!

    --

    I'm as mimsy as the next borogove but your mome raths are completely outgrabe.

  89. Re:NEWS FLASH by Lumpy · · Score: 2

    I swap Mp3's because I could give a rats ass about some overpaid rich jerk's claims that I am making him poor.

    I swaped Casette tapes of CD's back in the early 90's and late 80's and (THE HORROR) recorded music off the radio for my own use.

    The RIAA and the artists had no problem with this back in the 80's and 90's.. now they start whining like babies...

    I dont care, and actually I now flip them a collective bird due to their stupid bitching.

    Music trading IS NOT NEW and has been around cince the late 70's... my brother used to trade reel to reel copies of albums and (OH THE HORROR!) copies of radio shows.

    it didn't hurt them then and it certianly is not hurting them now (with record sales on the books... only a complete idiot would say otherwise.)

    trading music is piracy? only the stupidest people on the planet make that statement... and if you dont believe me... just look at the people saying it.

    --
    Do not look at laser with remaining good eye.
  90. Re:Not surprising... but the DOD is heading twds O by steve_l · · Score: 2

    Interesting to hear about the takeup of linux in DOD embedded, as it is creeping into the rest of the embedded space too. Same reason: Vxworks costs too much, they dont give you the source, annual update fees are silly, etc.

    Whereas linux/freebsd not only have lower NRE and distribution costs, you can get much of your code running on your laptop while they are still getting the hardware to work. But I do like the vxworks debuggers, esp. for real time stuff.

    -steve

  91. Pharma business needs OS too! by bubbha · · Score: 2, Insightful

    We have data we keep on clinical trials that must be saved for 15 years after the patient dies. So we have to store data for 20 to 40 years. We also have to be able to revive the data and possibly process it. Clearly the storage strategy to meet this REQUIREMENT should not include proprietary data formats or programs.

    --
    I want to be alone with the sandwich
    1. Re:Pharma business needs OS too! by mpe · · Score: 2

      We have data we keep on clinical trials that must be saved for 15 years after the patient dies. So we have to store data for 20 to 40 years.

      Depending on the age of your trialists that 20-40 years could turn into somewhere in the region of a century.

  92. It may become illegal . . . by Eric+Damron · · Score: 2

    Representative Adam Smith from Washington State is cosponsoring a bill that would make it illegal for Federal tax dollars to be spent on Open Source code that is under the GPL and similar licenses.

    The Microsoft lobbyists are fighting hard to buy our lawmakers. Clearly Adam Smith's loyalties lie with Corporate America rather than the average American.

    Please help me to convince Adam Smith and all Representatives that they should represent the average American and not just Corporate America.

    His Washington D.C. Address is:

    116 Cannon House Office Building
    Washington, D.C. 20515

    His Tacoma Address is:

    1717 Pacific Avenue #2135
    Tacoma, Washington 98402

    I wrote him a letter laying out my concerns and he replied as follows:

    Thank you for contacting me regarding open source software. I
    appreciate you taking the time to share your thoughts and concerns
    with me on this important matter. Please allow me a moment to
    explain the situation as well as my position on this matter.

    The debate over open source software revolves primarily around
    information security and intellectual property rights. As you may
    know, open source software refers to a computer program whose
    source code is made available to the general public to be improved
    or modified as the user wishes. Closed source programs are those
    whose source code is not made available and can only be altered by
    the software manufacturer. In the case of closed source software,
    updates to a program are usually distributed in the form of a patch
    or as a new version of the program that the user can install but not
    alter.

    For some, open source software is viewed as a means to reduce an
    organization's dependence on the software products of a few
    companies while possibly improving the security and stability of
    one's computing infrastructure. For others, open source software
    is viewed as a threat to intellectual property rights with unproved
    cost and quality benefits. Critics of open source software suggest
    that it is less secure than closed source software because it allows a
    potential hacker to search the source code to discover and exploit
    flaws. Some computer security experts suggest that it is not
    possible to conclude that either open source or closed source
    software is inherently more secure.

    The use of open source software by the federal government has
    been gaining attention as organizations continue to search for
    opportunities to enhance their information technology operations
    while containing costs. Public-private partnerships have been
    hallmarks of technological innovation and government has played
    a positive role in fostering innovation by allowing the private
    sector to develop commercial products from the results of publicly
    funded research.

    During my time in Congress questions over cyber-security have
    been of growing concern. At the same time, it is vital that we
    continue to encourage and foster technological growth and new
    and innovative ideas.

    It is my belief that cyber-security will improve if federally funded
    research and development is made available to Americans under
    intellectual property licenses that allow for further development
    and commercialization of that work-product.

    Please be assured that I am a strong supporter of research and
    development and I will work hard to increase our investment in
    new ideas and new technology. I hope that you have found this
    information helpful and that I have clarified any questions you
    might have had.

    --
    The race isn't always to the swift... but that's the way to bet!
    1. Re:It may become illegal . . . by emptybody · · Score: 4, Informative

      It already is. The newly signed homeland security bill saw to it.(all 420+ pages could not have been adequately examined by those who voted for it but that is another rant.) Download the PDF from the govt web site.
      Page 323 Line 15.
      ...the selection of specific technical hardware and software information security solutions should be left to individual agencies from among commercially developed products.

      --
      comment directly in my journal
    2. Re:It may become illegal . . . by janda · · Score: 2, Interesting

      RedHat, SuSe, etc are all commercial entities.

      --
      Karma: Food Fight (Mostly affected by Date Plate).
  93. Re:What about a GPL binary? by mpe · · Score: 2

    If I BUY a piece of software, I do have the right to do just about anythign I want to it EXCEPT distribute it, for free or profit.

    Often with proprietary software you are buying a permission to use the software, with conditions which go far beyond any incarnation of copyright law. Though what a court might think of the blatent "bait and switch" sales tactics which are frequently involved is an open question.

  94. Re:Microsoft will fight it, but not hard. by mpe · · Score: 2

    I am a taxpayer. Most programmers are. So are corporations.

    At least in theory, many large corporations appear to be very good at tax avoidance.

    And, for the love of Bob, I'd pray that if the DoD considers any sort of open source licensing, they have legal attack dogs go over the license with ten fine toothed combs. The last thing we need is some jackass managing to snag targetting programs for ICBM's.

    How would having the targetting program help you if you came under attack from such missiles?