I think previous posters got it wrong. They say the cracker access to the code is just as easy as anyone else's who can fix it. But a developer looks only for the code he's involved to, while the cracker is looking for any exploitable program. That, and although coders eventually search for security holes, he's goal is to build features. So, it indeed is making it easier for the crackers.
Which is a good thing, if you realize bad environment also leads to evolution. More bugs exposed, the more developers will fix them, and maybe one day software designers will get it right, stop using insecure programming language, and write safer code.
Is putting the software on an embedded device you sell use or distribution? And what about network services (such as webpages)?
If you take the game I wrote, I think it's ok to modify it to adapt to the gaming gadget you made. You don't want to release the code for that modification because you don't want to help the eventual competition, or that glue code would reveal details of your hardware. So far, so good.
But if you start modifying the game core, I want you to contribute back. Maybe the solution to this situation is to release the source files of the game core and the back end code as different licenses? If so, which is which? It's a bit confusing...
the so-called TiVoisation clause would inhibit open-source adoption in embedded devices among entities
GPLv3 is one more option added, it will not erradicate GPLv2 (duh), so why all the fuss?
Well, I can tell one reason: to help developers be aware of these questions, and decide carefuly which license to use. The best one will depend on each situation. I understand Linus' concerns, he's pobrably right picking v2.
I second that. Mplayer is not only a fantastic player, but a nice encoder too. It does it all, and is very simple. Being a cmdline program makes it perfect for a server.
It's true that not a lot of people write COBOL today, but the submiter was talking about legacy code. No wonder they're not on the Internet: not only they are from a pre-Internet era, but the vast majority of it is from corporations that keep their code very closed.
Not only it's full of flaws, but the interface is awful. Trac is the way to go. We need more large-scale sites offering Trac hosting.
The game I'm currently working on, QonkD, is hosted at a site that uses Trac, and I'm very happy with it. (Note that they accept only projects in the D programming language, and their site is a bit slow, probably cause it's small and lack resources.)
Here you go, a complete bounced message from sf.net: X-Gmail-Received: ecfafb0784517c3cc7f903105542834cd33fde22 Delivered-To: rodolfo.borges@gmail.com Received: by 10.35.42.5 with SMTP id u5cs205830pyj;
Sat, 30 Sep 2006 21:26:16 -0700 (PDT) Received: by 10.35.61.2 with SMTP id o2mr4364526pyk;
Sat, 30 Sep 2006 21:26:16 -0700 (PDT) Return-Path: Received: by 10.35.61.2 with SMTP id o2mr5005562pyk;
Sat, 30 Sep 2006 21:26:16 -0700 (PDT) From: Mail Delivery Subsystem To: rodolfo.borges@gmail.com Subject: Delivery Status Notification (Delay) Date: Sat, 30 Sep 2006 21:26:16 -0700 (PDT)
This is an automatically generated Delivery Status Notification
THIS IS A WARNING MESSAGE ONLY.
YOU DO NOT NEED TO RESEND YOUR MESSAGE.
Delivery to the following recipient has been delayed:
albert@users.sf.net
Message will be retried for 2 more day(s)
Technical details of temporary failure: TEMP_FAILURE: SMTP Error (state 9): 451-Could not complete sender verify callout 451-Could not complete sender verify callout for . 451-The mail server(s) for the domain may be temporarily unreachable, or 451-they may be permanently unreachable from this server. In the latter case, 451-you need to change the address or create an MX record for its domain 451-if it is supposed to be generally accessible from the Internet. 451 Talk to your mail administrator for details.
----- Message header follows -----
Received: by 10.35.61.2 with SMTP id o2mr1893905pyk;
Fri, 29 Sep 2006 20:41:07 -0700 (PDT) Received: by 10.35.42.5 with HTTP; Fri, 29 Sep 2006 20:41:07 -0700 (PDT) Message-ID: Date: Sat, 30 Sep 2006 00:41:07 -0300 From: "Rodolfo Borges" To: procps-feedback@lists.sf.net Subject: pkill -l Cc: "Kjetil Torgrim Homme" ,
"Albert Cahalan" MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
Why a.out? It's very old, nobody uses it. Unless you have a specific ancient binary-only software, go elf-only. I'm doing it for many years now without a single issue.
A blank vote means "I don't care". A null vote mean "I'm not satisfied with any of the candidates".
Blank votes goes for the candidates with the most votes in the last turn. On the other hand, if in the last turn no candidate reaches 50%+1 votes (because of the null votes), the election is cancelled, and the current candidades may not run for the next one.
Try Hit a Hint, it's a Firefox extension that lets you "click" with the keyboard. You press space (keep it pressed) and numbers (or any keys you configure, I prefer the home-row letters) appear on the clickable elements of the page (check the screenshot). Press the key(s) corresponding to the link you want, and it will "click" when you release the space bar. You can use the Ctrl key at the moment of the release to make it open in a new tab.
In my new job they gave (assigned) me a machine with two monitors.
I'm used to do well with one screen, and instead of spreading windows around I use them mostly maximized. The Fluxbox window manager has three level deep tree of windows (workspace, window, and tabs), all very costumisable and accesible with the keyboard. I can reach any window with easy with a few keystrokes (apart from attaching/detaching tabs, which can only be done with the mouse by now, or automatically based on the window class). Then, with GNU Screen, I can have a limitless tree of "windows" within a single text terminal.
To make it short: I just keep the second monitor turned off most of the time, which pisses off the other employees which have only one monitor.
I will not buy this record, it is scratched.
I think previous posters got it wrong. They say the cracker access to the code is just as easy as anyone else's who can fix it. But a developer looks only for the code he's involved to, while the cracker is looking for any exploitable program. That, and although coders eventually search for security holes, he's goal is to build features. So, it indeed is making it easier for the crackers.
Which is a good thing, if you realize bad environment also leads to evolution. More bugs exposed, the more developers will fix them, and maybe one day software designers will get it right, stop using insecure programming language, and write safer code.
Is putting the software on an embedded device you sell use or distribution?
And what about network services (such as webpages)?
If you take the game I wrote, I think it's ok to modify it to adapt to the gaming gadget you made. You don't want to release the code for that modification because you don't want to help the eventual competition, or that glue code would reveal details of your hardware. So far, so good.
But if you start modifying the game core, I want you to contribute back. Maybe the solution to this situation is to release the source files of the game core and the back end code as different licenses? If so, which is which? It's a bit confusing...
GPLv3 is one more option added, it will not erradicate GPLv2 (duh), so why all the fuss?
Well, I can tell one reason: to help developers be aware of these questions, and decide carefuly which license to use. The best one will depend on each situation. I understand Linus' concerns, he's pobrably right picking v2.
Perhaps he just prefers to wonder.
It's very easy to write a frontend to MPlayer.
It's based on standard text input/output, so even a shell script can do it.
http://www.mplayerhq.hu/DOCS/tech/slave.txt
I second that.
Mplayer is not only a fantastic player, but a nice encoder too.
It does it all, and is very simple. Being a cmdline program makes it perfect for a server.
But eldavojohn found non-free code with it.
Looks like the "Any license" option disable license checking.
It should be replaced by these two options:
"Any free license bellow"
"Other licenses"
Haskell is nice indeed. I have read about it, but not used it yet.
They also missed D, which I hope will became more popular.
That's surprising to me.
I never made that typo, and never saw it on other's code.
Impressive.
But wait, aren't all those licenses listed in the combobox free (as in open source) licenses?
But you can study the code, and try to apply the general idea to your own code.
It's true that not a lot of people write COBOL today, but the submiter was talking about legacy code. No wonder they're not on the Internet: not only they are from a pre-Internet era, but the vast majority of it is from corporations that keep their code very closed.
The actual address was there in the original email I copied from.
Someone (/.?) has filtered it out. The same happened to the CC: addresses.
Yeah, Sourforge sucks.
Not only it's full of flaws, but the interface is awful.
Trac is the way to go.
We need more large-scale sites offering Trac hosting.
The game I'm currently working on, QonkD, is hosted at a site that uses Trac, and I'm very happy with it.
(Note that they accept only projects in the D programming language, and their site is a bit slow, probably cause it's small and lack resources.)
Here you go, a complete bounced message from sf.net:
X-Gmail-Received: ecfafb0784517c3cc7f903105542834cd33fde22
Delivered-To: rodolfo.borges@gmail.com
Received: by 10.35.42.5 with SMTP id u5cs205830pyj;
Sat, 30 Sep 2006 21:26:16 -0700 (PDT)
Received: by 10.35.61.2 with SMTP id o2mr4364526pyk;
Sat, 30 Sep 2006 21:26:16 -0700 (PDT)
Return-Path:
Received: by 10.35.61.2 with SMTP id o2mr5005562pyk;
Sat, 30 Sep 2006 21:26:16 -0700 (PDT)
From: Mail Delivery Subsystem
To: rodolfo.borges@gmail.com
Subject: Delivery Status Notification (Delay)
Date: Sat, 30 Sep 2006 21:26:16 -0700 (PDT)
This is an automatically generated Delivery Status Notification
THIS IS A WARNING MESSAGE ONLY.
YOU DO NOT NEED TO RESEND YOUR MESSAGE.
Delivery to the following recipient has been delayed:
albert@users.sf.net
Message will be retried for 2 more day(s)
Technical details of temporary failure:
TEMP_FAILURE: SMTP Error (state 9): 451-Could not complete sender verify callout
451-Could not complete sender verify callout for .
451-The mail server(s) for the domain may be temporarily unreachable, or
451-they may be permanently unreachable from this server. In the latter case,
451-you need to change the address or create an MX record for its domain
451-if it is supposed to be generally accessible from the Internet.
451 Talk to your mail administrator for details.
----- Message header follows -----
Received: by 10.35.61.2 with SMTP id o2mr1893905pyk;
Fri, 29 Sep 2006 20:41:07 -0700 (PDT)
Received: by 10.35.42.5 with HTTP; Fri, 29 Sep 2006 20:41:07 -0700 (PDT)
Message-ID:
Date: Sat, 30 Sep 2006 00:41:07 -0300
From: "Rodolfo Borges"
To: procps-feedback@lists.sf.net
Subject: pkill -l
Cc: "Kjetil Torgrim Homme" ,
"Albert Cahalan"
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
----- Message body suppressed -----
Why a.out? It's very old, nobody uses it. Unless you have a specific ancient binary-only software, go elf-only. I'm doing it for many years now without a single issue.
Blank votes are very different from null votes.
A blank vote means "I don't care". A null vote mean "I'm not satisfied with any of the candidates".
Blank votes goes for the candidates with the most votes in the last turn. On the other hand, if in the last turn no candidate reaches 50%+1 votes (because of the null votes), the election is cancelled, and the current candidades may not run for the next one.
And you find libpng is nice?
Twice I tried to use it in my programs, and it was so unessessarly complicated that I gave up.
Why can't it have a simple function like:
bool load_png( const char* filename, char* data, int* width, int* height, int* bpp );
The way it is you need to write pages and pages of intrincate code just to load an image.
Zoom out, put in map mode, and you'll se it's in the same country as Berlin, so it's Germany.
Or, how long will they integrate this and moon.google.com to Google Earth, allowing one zoom out of earth and hop to other solar system bodies?
Problem is: will we really get there? I hope so, but do trust it as a fact.
Try Hit a Hint, it's a Firefox extension that lets you "click" with the keyboard. You press space (keep it pressed) and numbers (or any keys you configure, I prefer the home-row letters) appear on the clickable elements of the page (check the screenshot). Press the key(s) corresponding to the link you want, and it will "click" when you release the space bar. You can use the Ctrl key at the moment of the release to make it open in a new tab.
In my new job they gave (assigned) me a machine with two monitors.
I'm used to do well with one screen, and instead of spreading windows around I use them mostly maximized. The Fluxbox window manager has three level deep tree of windows (workspace, window, and tabs), all very costumisable and accesible with the keyboard. I can reach any window with easy with a few keystrokes (apart from attaching/detaching tabs, which can only be done with the mouse by now, or automatically based on the window class). Then, with GNU Screen, I can have a limitless tree of "windows" within a single text terminal.
To make it short: I just keep the second monitor turned off most of the time, which pisses off the other employees which have only one monitor.
cm'on, give the man a link