Slashdot Mirror


Linux Netwosix Creator Discusses 2.0 Vision

An anonymous reader writes "LinuxWorld recently took the time to talk to Linux Netwosix creator Vincenzo Ciaglia to answer why there are two releases (1.3 and 2.0-rc1) within a week of each other, among other questions. From the article: "We think that its light structure could make Linux Netwosix suited for all network security work. For a good network plan, the sysadmin needs a light system that is highly configurable. Every sysadmin wants to configure networks, and work with them, with the possibility of doing everything alone."

72 comments

  1. Huh? by Ydna · · Score: 2, Interesting

    Neo asks, what is the Wosix?

    --

    "The great thing about multitasking is that several things can go wrong at once." -me

    1. Re:Huh? by NewKimAll · · Score: 2, Interesting

      Yup, that's my reaction too. When I first saw it, I couldn't help thinking, "The Nets-a-What's-it? What's-a-Who's-it?" WTF!

  2. sys-con? by Anonymous Coward · · Score: 5, Insightful

    Aren't they the ones that allowed Maureen O'Gara to attack/smear PJ on Groklaw?

    I'm sure it's an interesting article but I'll wait to see it somewhere else before I read anything on a sys-con site.

    1. Re:sys-con? by Anonymous Coward · · Score: 0

      Wasn't that LinuxBusiness[World|News] ?

    2. Re:sys-con? by Anonymous Coward · · Score: 0

      All owned by sys-con. Also, when it comes to open source and linux they can be rather two-faced at times. (from what I have read when I used to visit their sites) I don't know if this is still the case though.

  3. Coral Cache by FST · · Score: 1, Redundant

    Yet another server getting bombed. Heres the Coral Cache Link.

    --
    46487 466780 252994 376409 96920 39622 205366 244315 622115 512361 668040 63608 259203 955314 811176 652718 166330 23922
  4. Popup window by Frogbert · · Score: 2, Insightful

    Wow a DHTML popup window covering the text. Great way to get me to read the article. Hint: If I can't see popup windows it means that I have gone out of my way to block them, making me see them again means you just wasted your bandwidth.

    1. Re:Popup window by draziw · · Score: 1

      Yup - super lame ad. Not quite sure which source ya need to pick in adblock plus to keep it from poping either. :( Hint to sites: I don't block non PITA text ads - Sometimes, I even click them...

      In this case, it doesn't make a good slashdot story. This isn't distro news. Should slashdotters submit every story that pops up on distrowatch? bah!

    2. Re:Popup window by Anonymous Coward · · Score: 0

      Try http://banners.sys-con.com/*

      Works for me anyway.

      And, if you want to block their bug, also add:
      http://www4.sys-con.com/*

    3. Re:Popup window by Urza9814 · · Score: 0

      Yea, ya know, I was gonna read the article, I really was, but since the page is coated with so many ads it throws the actual article into an inch wide strip on my 21 inch monitor, and they cover that up with a popup ad...screw that, anything important will be somewhere else later.

    4. Re:Popup window by Anonymous Coward · · Score: 0
    5. Re:Popup window by raventh1 · · Score: 1

      It's ok, I just won't RTFA.

    6. Re:Popup window by draziw · · Score: 1

      Looks like banners.sys-con.com/* isn't it...  It is done as a div...
          <div id="elementDiv" class="welcomemat" style="z-index: 1000; width:620; height:420; background-color:white; visibility:hidden; position:absolute; top:0; left:0; border-color:black;"><centeR><table cellspacing="0" cellpadding="0"><tr><td>

      <a href="http://www.ajaxseminar.com"><img src="http://res.sys-con.com/section/1/Ajax_Dec_31_ Deadline_Pop_Up.gif" border="0"></a>
      </td></tr></table>
      <div align="center"><a onclick="closeElement();">close this window</a></div></div>
          <script>loadElement();</script>

  5. Is it me... by slashdotnickname · · Score: 3, Insightful

    Or does the article never answer it's lead question of why the two releases within a week of each other?

    I saw a lot of product pitches but why, of why, why the close releases!? Not that it's that important, in fact I'm sure they were worked on semi-independetly of each other... but now I must know... I smell a cover-up...

    1. Re:Is it me... by kfg · · Score: 4, Funny

      . . .does the article never answer it's lead question of why the two releases within a week of each other?

      Dunno. I had a huge buzzword stuck in my eye.

      KFG

    2. Re:Is it me... by Anonymous Coward · · Score: 0

      does the article never answer it's lead question of why the two releases within a week of each other?

      Because one's a maintenance release and one's a testing release? It's pretty obvious even without RTFA.

      Oh, and possessive "its" has no apostrophe.

  6. editors, help me out here... by Anonymous Coward · · Score: 0

    Could someone please describe what Netwosix so we can appreciate the purported dilemma?

    Maybe I'd have a better idea once this article is written.

    1. Re:editors, help me out here... by commodoresloat · · Score: 3, Funny
      Could someone please describe what Netwosix so we can appreciate the purported dilemma?

      You remember Netwofive? This is one more.

    2. Re:editors, help me out here... by kfg · · Score: 1

      You remember Netwofive? This is one more.

      I'm just going to spin my own Netwoven.

      KFG

    3. Re:editors, help me out here... by bcnstony · · Score: 1

      Could someone please describe what Netwosix so we can appreciate the purported dilemma?

      It's just like NetwoEight (Minute Abs) but you can accomplish the same thing in Six Minutes. And if you're not satisfied . . . (I'm sorry, this joke's not going to get any funnier if I finish it. You know the rest)

    4. Re:editors, help me out here... by Minwee · · Score: 1

      And twice as good as Netonethree.

  7. Every by nacturation · · Score: 5, Funny

    "Every sysadmin wants to configure networks, and work with them, with the possibility of doing everything alone."

    Also, every generalization is false.

    --
    Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
    1. Re:Every by Anonymous Coward · · Score: 0

      *head explodes*

  8. Everything alone, eh? by SheeEttin · · Score: 5, Funny

    with the possibility of doing everything alone

    Yes, that's the problem with geeks... we end up doing literally everything alone.

  9. geek by goarilla · · Score: 4, Insightful

    i am the creator of neo linux triumph U are a huge nerd

    no seriously, it's very good this youngster creates a distro. But it's aimed at security
    I don't trust a 19 year old to know everything about security, he maybe be a genius
    although they say the same about me knowing that i went through my senior two years
    in highschool without books. I'm a european ... had 6 hrs chem, 6 hrs math, 5 hrs
    physics and 3 hrs biology/ a week in my last 2 yrs. But hell i'm now a 4 years slackware user and i'm not even near to making a security based distro, i damn well
    hope this guy has a team or some backup. because damn man u must be either lonely
    or have way too much spare time

    1. Re:geek by 0racle · · Score: 2, Insightful

      I don't expect people who have worked for years as admins to know everything about security. I wouldn't expect a 19yr old to really know anything about security.

      --
      "I use a Mac because I'm just better than you are."
    2. Re:geek by Anonymous Coward · · Score: 1, Insightful

      i'm 25 yrs old, and while i'm not saying this guys knows "everything" about security, i'd probably feel a lot more comfortable about a 19yr old "hacker" (i'm referring to old school purist version not current media twisted version) putting out a security distro than many of the 45+yr "i've been doing this since mainframes" types out there. One of the stereo types that I am constantly beat down w/ is that i'm some young upstart kid who only has a few years under his belt, so why should the people w/ twice as much yrs of experience listen to me? What they don't take into account is that I've been programing (admittedly it was BASIC on a c64) since I was 6, and using the internet since I was 12, accessing various systems through a sun box, until i was 16 and started using linux. So am I the kid with 5 years as a sys admin? or the veteran w/ over 12 yrs of systems experience, and almost 20 programming?

      Not saying they[older techs] dont know their stuph too, I just think you will find that the younger ones find weaknesses in the systems faster due to the fact that they seldom have a strongly established sense of how things work, thus allowing them to explore avenues the more experienced people might not even consider.

      That being said, having only one person working on the project is almost as bad as thinking that years of experience would improve the quality. Multiple participants are a definite requirement towards a properly implemented anything, because no1 is perfect.

    3. Re:geek by Anonymous Coward · · Score: 0

      Dude; I went through my B.S. in Mathematics at a major university (top level) in two years with a nearly perfect GPA--and I'm no where *near* to being a genius (this would be 140 hours of school). The speed with which you complete school has no correlation what-so-ever with your intelligence and thus has no bearing on this topic: your personal witness and testimonials are bogus.

      OTOH, this Ciaglia guy and the article seems to be just as clueless as you are to the real world, so perhaps it's just what goes with the territory for teenage geek-testosterone.

  10. Re:And the Response Is.... by Anonymous Coward · · Score: 1, Funny
  11. Gentoo based? by oglueck · · Score: 5, Interesting

    I'm planning to expand the portage tree, doing other 300/400 packages ports, with everyone security oriented.

    Is this distro based on Gentoo's portage? If so, what is this distribution trying to fix? And is this guy "porting" packages all alone? He probably never figured how much work it will be to maintain his own distro.

    1. Re:Gentoo based? by Anonymous Coward · · Score: 0

      Nope, it claims to be base on a pretty obscure distribution called CRUX.

      http://www.crux.nu/

  12. Worst. Advert. Ever. by cortana · · Score: 1, Interesting

    Good god, why do people put up with this crap!

  13. This must be a joke by oglueck · · Score: 5, Interesting

    Netwosix will try to offer the first valid alternative to historically secure systems like the *BSD
    stability, performance, and support for mission-critical application deployments
    users can benefit from outstanding robustness, scalabilty, and reliability

    Big words. If he wants stability why does this 19 year old jerk use the latest 2.6.14.5 stable kernel? Where do all those features come from? You won't get security and robustness by just repackaging software. Is Ciaglia saying he reviews all the code in his distro and fixes broken stuff? All on his own? On several platforms? Look at their site: Their "community" consists of merely two people.

    Goodness, just because every kid can burn a bootable Linux CD that doesn't mean he just created a new distro!

    Call this a flame. But I really don't see the point of Netwosix.

    1. Re:This must be a joke by Anonymous Coward · · Score: 0

      agreed.

    2. Re:This must be a joke by recharged95 · · Score: 1
      Being that linux is designed with security in mind and that most gentoo packages are designed in similar fashion, I see this effort as a "best of breed" distro.

      But then again, isn't every other distro out a Best of Breed? And considering security architecture requires a lot of experience (i.e. a seasoned linux developer at minimum)...hence, I'm leaning towards the "why was this slashdotted?" thought.

    3. Re:This must be a joke by Anonymous Coward · · Score: 0
      Being that linux is designed with security in mind

      Linux has never really been designed with security in mind from the start, that would be OpenBSD. Is a GNU/Linux system relatively secure if you keep it patched and up to date? Heck yea, but I don't think you can say that the developers go out of their way to harden it like the OpenBSD team does.

    4. Re:This must be a joke by Kookus · · Score: 1

      Did you take a look at the screenshots? Those are awesome! I especially love the progress bar for the security related program code named vim! That must be like viably impenetrable machine or something right? In all seriousness, he's up to 9 people registered for his forums, doesn't show a single screenshot of anything proprietary, doesn't explain why his distro would be better then anything else. I don't know of any security experts that run through hundreds of secrity aplications let alone even know of hundreds of them. I would imagine the best security experts have maybe a good 3-12 apps they use that are specifically security related and that's it!
      A better idea for a security related machine is to make something that has a gui that any person can use and understand. The people that need the most help are the ones that never heard of nessus or care to take the time to find out on their own. You basically need to put it in front of their face and say see? isn't this handy?

    5. Re:This must be a joke by jaseuk · · Score: 1

      His tool set isn't very complete.

      The Knoppix-STD distribution is excellent and I've seen it used and recommended by professional penetration testers.

      Example uses of Knoppix-STD in computer forensics, image and checksum the hard drive. Mount a windows partition, crack off the administrator password, browse internet explorer histories and cookies, undelete files, view recycle bins etc. etc. All with well packaged Linux tools.

      Knoppix-STD also has a pretty much all you'll need for emergency firewalling, packet sniffing and IDS, vulnerability scanning and pretty much anything else you'd want to do wether you are wearing the white or black hat.

      Professional penetration testers use a large number of apps, they might use something like nessus or nmap to get started, but then depending on what they find on the network they'll adjust the tools accordingly. When we were professionally penetration tested we had our internet facing services (ie. e-mail, web, dns, firewall, vpn) checked, plus all our internal servers wether windows, linux, BSD or whatever. Wardialling our dial-in ranges, attempting to hack our Wifi installation and also working out what information could be leaked by a stolen windows laptop.

      They used a good chunk of the tools on Knoppix-STD, an assortment of exploits, plus assorted other testing tools such as brute forcers for SQL Server and some of their own internally developed testing tools and scripts.

      There is a great deal more to penetration testing than running nessus on a network, particularly if you really want to find where your holes are. Another big area of penetration testing is testing web services and software testing which we didn't cover with our test.

      Jason.

  14. Netwosix? by hmccabe · · Score: 4, Insightful

    Are there any marketing students out there who can contribute to OSS projects by coming up with product names that aren't (in my opinion) the types of things businesses are going to immediately disregard because they sound retarded. Gimp may be a passable image editor, but it shares its name with a failure to walk correctly, or worse, the dude in the mask in the basement. Divx may be an ok codec, but naming it after someone else's failed technology on a lark hardly seems like a good idea. Netwosix sounds like something Homer Simpson would make. It's not all bad, but there's so much that is.

    1. Re:Netwosix? by kfg · · Score: 1

      . . .it shares its name with a failure to walk correctly, . . .

      Yeah, but at least today I was able to hang the cane up.

      . . .or worse, the dude in the mask in the basement.

      Ok, now you're just being an insensitive clod.

      KFG

    2. Re:Netwosix? by Anonymous Coward · · Score: 0
      . . .or worse, the dude in the mask in the basement.

      Ok, now you're just being an insensitive clod.
      It looks like you're missing the 'Pulp Fiction' reference he's making. Rent the movie, learn something.
    3. Re:Netwosix? by kfg · · Score: 1

      It looks like you're missing the 'Pulp Fiction' reference he's making.Rent the movie.

      Seen it.Big Screen.Like it.Bought a trunk.

      KFG

    4. Re:Netwosix? by SheeEttin · · Score: 0

      the dude in the mask in the basement

      Jason Voorhees?

    5. Re:Netwosix? by Pollardito · · Score: 1
      Netwosix sounds like something Homer Simpson would make
      actually when i try to sound it out i picture someone more along the line of Julius Caesar from Life of Brian. that "w" in there seems to be the source of most of the problem, so i figure it must have been added by the person who made famous the phrase "thwow him to the fwow"
    6. Re:Netwosix? by Slashcrap · · Score: 1

      Are there any marketing students out there who can contribute to OSS projects by coming up with product names that aren't (in my opinion) the types of things businesses are going to immediately disregard because they sound retarded.

      Divx may be an ok codec, but naming it after someone else's failed technology on a lark hardly seems like a good idea.

      Dude, do you not think that including a perfect example of a commercial non-OSS project with an awful name rather detracts from your point about OSS projects having terrible names? Or did you think that DivX is a free software project?

      The OSS version is called XviD, which is a much better name. It doesn't mean anything at all and it includes a big "X". That probably means it's "Xtreme" and as we all know, you can't get much better than that. In fact I doubt you will find a better example of 21st Century corporate naming than "XviD". Just introducing a counter-example.

    7. Re:Netwosix? by poot_rootbeer · · Score: 1

      Netwosix sounds like something Homer Simpson would make.

      OK, I get the concept behind the name. It's like NetBSD, except based on a Linux 2.6 kernel. Hence, Net-Two-Six.

      And yet everytime my eyes scan the name, my brain thinks, "Net-Wos-Ix". It's poorly portmanteaued.

      Beyond that, the name is poor because it doesn't account for future kernel revision numbers, which are pretty much a statistical certainty. Can we look forward to a "Net-Woe-Ight" somewhere down the line? Or will it just be "Net-Wosix Version 2.8"?

  15. BSD style portage over apt-get - what advantage ? by ravee · · Score: 2, Interesting

    I really wonder what is the advantage of using portage over apt-get in handling repositories. I mean more and more linux distro makers are moving to portage. Gentoo has it. Now netwosix also have it. Is it because of a flaw or drawback that they see in apt-get ?

    It would be good if there is an article giving the pros and cons of portage over apt-get and clear the matter once and for all. Both are very popular amoung *nix users.

    --
    Linux Help
    for all things on Linux
  16. 95% Cpu Solid by Skylinux · · Score: 1

    Nice Webiste, my 1900+ Laptop runs mozilla at 95% on their site and slows way down.

    --
    Everyone who buys Wild Hunt will receive 16 specially prepared DLCs absolutely for free, regardless of platform.
    1. Re:95% Cpu Solid by MichaelSmith · · Score: 1
      95% on their site and slows way down.

      Its the little javascript scrolling frame 70% of the way down.

      Some moron put one on our intranet home page at work, to advertise our achievements. Its a great way to justify a new PC.

    2. Re:95% Cpu Solid by Anonymous Coward · · Score: 1, Funny
      Some moron put one on our intranet home page at work, to advertise our achievements. Its a great way to justify a new PC.
      1. Moron makes a simple change to intranet home page
      2. Everybody in the moron's department gets new PCs

      So... how is he a moron, exactly?
    3. Re:95% Cpu Solid by m50d · · Score: 1

      That's a duff browser. My 2600+ desktop runs konqueror at 2% and displays it fine, even the great big cover-up-the-page ad.

      --
      I am trolling
  17. What the FUCK? by Anonymous Coward · · Score: 0
    answer why there are two releases (1.3 and 2.0-rc1) within a week of each other, among other questions.

    How about this question: What the fuck is Netwosix, and why the fuck should I care?

  18. This is news? by Anonymous Coward · · Score: 1, Insightful

    Let me get this straight. Yet another lightweight linux distribution has a BSD-like packaging system and claims to be all about security. They release a new version and then a separate tree based on a slightly new architecture. How is any of this news? How is this different from about a dozen other linux distributions out there?

  19. Looks like to much work ?? by Bluesuperman · · Score: 2, Interesting

    Hey, I read through the install doc, you have to manually setup fstab plus a few other things. I do not see why anyone would pick this distro. Using kickstart or custom tag files (Slackware) we can easily have a minimal install done. I would like to see how this distro compares to NetBSD .... It looks like a "wag the dog"

    --
    Linux: For those able to think out side of a window
  20. Re:BSD style portage over apt-get - what advantage by lachlan76 · · Score: 2, Informative

    You don't need to make a package for it, just a script to built it. The sources/packages can be downloaded from the original site at build time, and not from a central repository, if seen fit. Of course you can always download from a mirror.

  21. Knowing what not to say by datafr0g · · Score: 3, Informative

    From the article:
    Also, if your company wants to contribute to Netwosix development, let us know, because we're seeking business partners for financial support!

    Should have left that out, dude - or at least be a little more subtle. You can't be that blatantly honest when asking for cash!

    --
    "Who says nothing is impossible? Some people do it every day!" - Alfred E. Neuman
  22. infected webpage by Anonymous Coward · · Score: 0

    WTF did that page just download to my computer?
      I tried to read the source code of the page, but it comes up blank.

  23. OK, how about calling it "D'oh"-S-X? by Anonymous Coward · · Score: 0

    That's a Homer Simpson operating system name if ever there was one...

  24. What the hell is Netwosix? by zsau · · Score: 1

    Aside from something with a godawful name, what the hell is Netwosix? (Something to do with "Linux" and network security, but *what*? And when it says "Linux" does it mean the Linux kernel, or a distribution based on it?) Submitters, please actually say what something is when submitting an article about it. Editors, please damn well edit submissions to don't.

    --
    Look out!
  25. Your own distro is easy by houghi · · Score: 1

    Just download the SUSE 10.0 delete all the packages you do not like, add the ones you DO like, as for example libdvdcss and MPlayer. Next you can look her on how to make your own CD or DVD and read up on the my.sel information.

    Several different distro's have been made. SUPER will be the best known. Somebody also made a pure Spanish one and I know of a person who was writing a book and wanted to add its own version.

    How much changes you do later is up to you. Some experience with RPM building would be very handy.

    --
    Don't fight for your country, if your country does not fight for you.
  26. Re:BSD style portage over apt-get - what advantage by Omicron32 · · Score: 1

    More and more are moving over to Portage? Where did you get that idea from? Apart from Netwosix and Gentoo, and maybe a few Gentoo-derivatives, I don't know of any other Linux distros that use Portage - hell, 80% of them all seem to use apt-get!

    I use Gentoo and love Portage, but I wouldn't say there are more and more people moving over to it. I would switch to a system with apt-get immediately if I knew the packages were going to be as up-to-date as the Portage tree. (K/Ubuntu isn't as up-to-date, I've tried it, I know.)

  27. Re:BSD style portage over apt-get - what advantage by dodobh · · Score: 1

    The ability to have custom compile time library dependencies. I don't have a printer. USE=-cups means that I don't have to worry about cups at all. It isn't just the extra package, it it maintaining it, tracking vulnerabilities..

    Similarly, I can build without LDAP support. Often things that Debian's default builds do not do. And if it boils down to rebuilding a significant part of the distro for my customisation, apt-get really offers no benefits.

    apt offers incredible benefits if the binaries provided by the distro do what you want. Ports works when they don't.

    --
    I can throw myself at the ground, and miss.
  28. The W in the name by Anonymous Coward · · Score: 0

    Im pretty sure that the W stands for Walker.... as in GWB .... George Walker Bush.......

  29. give the guy a break by sl4shd0rk · · Score: 1

    One person posts a something negative about this thing and everyone wants to turn it into a slamfest. Has anyone installed this and checked it out? Does anyone know the developer personally? Age is not the end all measuring stick for intelligence, and neither is a Phd in whatever. stfu.. christ.

    --
    Join the Slashcott! Feb 10 thru Feb 17!
  30. geek?! he's a liar bastard spammer! by Anonymous Coward · · Score: 0

    hey. it's actually *bad* that every poor boy who messed with linux for a few yars decides to pollute the world with yet another crap and spam about it.

    google for "netwosix" and compare the amount of buzz to what he actually have done.

    to spare your time (i've already lost more than enough of mine on this), here are some tips:

    - the permissions in tarballs of the very first "release" i've stumbled upon were plain broken (that is, world-writable files and dirs where they just must not be -- too)
    - some dozen and a half of "security announces" on bugtraq@; these ended last year (apparently no "advisories" were put out for the literally handful of those who participate in a ML)
    - the "author" has apparently no understanding of security (let alone manageability) at all. Ports aren't manageable (hint: no branches), security is a process, and he has long parted with it.

    so, if he drools around to get any attention, don't repeat my mistakes in paying *any* time to stupid students who are ignorant enough not to understand that rolling out yet another pretentious BS just isn't a renowned investment of time at all. he'd better work on gentoo if he likes ports that much, or stay with beloved slackware fiddling on one and only localhost.

    while the rest of the world tries to actually do something useful...

    --
    Michael Shigorin

  31. but he *is* a Simpson, no? by Anonymous Coward · · Score: 0

    if the aggravated comments on a single-man over-plugged pile-of-crap aren't enough, here's another one from someone who actually tried to fix this boy's DNA regarding work-to-noise ratio:

    http://old.linux.kiev.ua/~mike/docs/misc/netwosix- vaporware.txt