Bonum Certa Men Certa

Links 18/11/2011: Android/Google Support at Motorola





GNOME bluefish

Contents





GNU/Linux



Free Software/Open Source



  • How misinformation can still hurt FLOSS
    There seems to be a bit of confusion out there about what open source means in terms of security: specifically, there's a pervasive notion that because software is open source, it's inherently insecure.

    Seriously?

    Apparently these folks have completely forgotten about software like sendmail, Apache, MySQL, SSH, and oh, what's that platform called… the one with the penguin… oh yeah: Linux. The applications and platforms are regarded in the industry has highly secure and generally free of malware in the wild.

    And yet, when Google Open Source Programs Manager Chris DiBona recently quoted an article that said that "critics have been pounding the table for years about open source being inherently insecure," I decided to locate that article... I found myself running smack into what I believe is a serious error.


  • Open source biometrics technology for mobile devices, PCs and servers
    DigitalPersona has open sourced its new MINEX-certified FingerJetFX fingerprint feature extraction technology.

    FingerJetFX, Open Source Edition (OSE), is free, portable software that device manufacturers and application developers can use to convert bulky fingerprint images into small, mathematical representations called fingerprint “templates” for efficient storage or comparison.


  • FOSS over Miami
    Here’s a little Larry-the-Free-Software-Guy history for those of you who don’t already know it: I grew up in Miami and didn’t move to San Francisco until I was 29 (and that was the summer of 1987, so you can do the math). More specifically, I grew up in a strip of unincorporated Dade County sandwiched between North Miami and North Miami Beach. So you’ll understand why I have a tendency to pull for the Dolphins and the U on occasion, and I don’t think twice about driving 30 or so miles down Highway 1 into Monterey County to visit The Whole Enchilada because it has the only Key Lime Pie in this region close enough to be considered Miami-class. Listening to Jimmy Buffett puts me back among the palm trees, retroactively sweating in the 80 degree/90 percent humidity coziness for which South Florida is known worldwide.


  • Web Browsers



  • FSF/FSFE/GNU/SFLC

    • Nov. 21: Free Software's Stallman
      Richard Stallman, the founder of the GNU Project and the Free Software Foundation, will present a visiting lecture from 7-9 p.m., Monday, Nov. 21, in Mitchell Hall at the University of Delaware.




  • Standards/Consortia





Leftovers

  • Wintel is Fragmented
    UPDATE A part of the changes to make “8″ will be a consolidation of re-re-reboots into one reboot per month where possible. The trolls here who claim re-re-reboots are no problem for competent users are again proven wrong. Even M$ admits re-re-reboots are a problem that needs fixing. Of course re-re-reboots don’t bother those of us who use GNU/Linux because we get to choose when and if we reboot. I have enjoyed that capability for a decade and love it.


  • The OS Wars: We Have A Winner
    You would not have shown your face at, say, ApacheCon, with a MacBook.


  • Google's Brin and wife plop half-million into Wikipedia's hat
    The Wikimedia Foundation, the non-profit publisher of Wikipedia and its affiliate sites, has received a $500,000 grant from the Brin Wojcicki Foundation, a philanthropic organization set up by Google cofounder Sergey Brin and his wife Anne Wojcicki, cofounder of "personal genetic information" website 23andMe.


  • Security/BIOS



    • Attacks on secure boot
      This is interesting. It's obviously lacking in details yet, but it does highlight one weakness of secure boot. The security for secure boot is all rooted in the firmware - there's no external measurement to validate that everything functioned as expected. That means that if you can cause any trusted component to execute arbitrary code then you've won. So, what reads arbitrary user data? The most obvious components are any driver that binds to user-controlled hardware, any filesystem driver that reads user-provided filesystems and any signed bootloader that reads user-configured data. A USB drive could potentially trigger a bug in the USB stack and run arbitrary code. A malformed FAT filesystem could potentially trigger a bug in the FAT driver and run arbitrary code. A malformed bootloader configuration file or kernel could potentially trigger a bug in the bootloader and run arbitrary code. It may even be possible to find bugs in the PE-COFF binary loader. And once you have the ability to run arbitrary code, you can replace all the EFI entry points and convince the OS that everything is fine anyway.


    • UEFI Debugging Tools
      One of the many things I work on is UEFI support. It’s an interesting thing to work on, in part because there’s a lot of new development and it’s at a fairly low level, which is just the sort of thing I like.

      Often during UEFI development, we’ll see a bug and need to diagnose whether it’s a problem with the hardware, the firmware, the bootloader, the OS kernel, or even a userland program. One case of this is when console graphics don’t work right.


    • GPT disks in a BIOS world
      Starting with Fedora 16 we're installing using GPT disklabels by default, even on BIOS-based systems. This is worth noting because most BIOSes have absolutely no idea what GPT is, which you'd think would create some problems. And, unsurprisingly, it does. Shock. But let's have an overview.






  • Finance

    • State orders Goldman Sachs to repay investors for misleading sales tactics
      Florida's securities regulators announced a settlement agreement with Goldman, Sach & Co. that has required the investment firm to back back an estimate $20 million in so-called "auction rate securities" because the company claimed they were liquid and secure when they were not.


    • Middle-class areas shrink as America divides into 'two-tiered society' of rich and poor
      The portion of American families living in middle-income neighborhoods has declined significantly since 1970, according to a new study, as rising income inequality left a growing share of families in neighborhoods that are mostly low-income or mostly affluent.


    • Our friends from Goldman Sachs…
      Serious and competent, they weigh up the pros and cons and study all of the documents before giving an opinion. They have a fondness for economics, but these luminaries who enter into the temple only after a long and meticulous recruitment process prefer to remain discreet.

      Collectively they form an entity that is part pressure group, part fraternal association for the collection of information, and part mutual aid network. They are the craftsmen, masters and grandmasters whose mission is "to spread the truth acquired in the lodge to the rest of the world."

      According to its detractors, the European network of influence woven by American bank Goldman Sachs (GS) functions like a freemasonry. To diverse degrees, the new European Central Bank President, Mario Draghi, the newly designated Prime Minister of Italy, Mario Monti, and the freshly appointed Greek Prime Minister Lucas Papademos are totemic figures in this carefully constructed web.




  • Privacy

    • Wintel is Fragmented
      When I wrote about Google making it possible to opt-out of their Wi-Fi access point mapping program, I made a mistake. I thought Google was still using its StreetView cars to pick up Wi-Fi locations. Nope, Eitan Bencuya, a Google spokesperson, tells me that Google no longer uses StreetView cars to collect location information. So, how does Google collect Wi-Fi location data? They use you.




  • Civil Rights

    • Going Incognito
      The Internet can be a dangerous place. Once it was the scam artists and the damage they wrought that users had to watch. These days it seems it's more governments trying to oppress citizens and so-called respectable companies looking to track and sell your movements that strike fear in the hearts of Penguistas. Perhaps it's time to go Incognito.




  • Internet/Net Neutrality

    • EU Adopts Resolution Against US Domain Seizures
      The European Parliament has adopted a resolution which criticizes domain name seizures of “infringing” websites by US authorities. According to the resolution these measures need to be countered as they endanger “the integrity of the global internet and freedom of communication.” With this stance the European Parliament joins an ever-growing list of opposition to the Stop Online Piracy Act .






Recent Techrights' Posts

Red Hat Offers DRM, TPM, and Backed Doored 'Confidential' Containers (CoCo) for Microsoft (Proprietary Spyware)
No kidding!
[Meme] Plagiarism Does Not Eliminate Jobs by Replacing Humans, It Replaces Human Knowledge With False Cruft
We need to boycott sites that fake their output
[Meme] Doing Dog's Job (Not God's Job)
The FSF did not advertise the talk by RMS (its founder), who spoke in France almost exactly 23 hours ago
 
Calling Out Windows (TCO) is Apparently Impermissible in Some News Sites
The online news sites are failing us (and corporate sponsors play a role)
Richard Stallman's Remarks on His Pain
Published two days ago
Focusing on the Issues
we'll do our best to find the news and not talk about "Mr. T"
Only About 3.6% of Web Users in Pakistan Use Vista 11, According to statCounter
It's not hard to see why so far in 2025 Microsoft has already had several waves of mass layoffs - more than any other company
Rumour: In IBM, Impending "25% Reduction in Finance Roles"
25% to be laid off?
[Meme] Fake Articles From linuxsecurity.com (Just Googlebombing "Linux" With LLM Slop)
Google should really just entirely delist that site
RedHat.com Written by Microsoft Staff, Promoting Microsoft' Proprietary Software That Does Not Even Run on Linux!
This is RedHat.com this week...
Links 22/01/2025: Mass Layoffs at Stripe, Microsoft's Illegal Accounting Practices Under Scrutiny
Links for the day
Fake 'Article' by Brittany Day (Guardian Digital, Inc) About Linux Mint 22.1 'Xia'
Apparently they've convinced themselves that this is OK
Red Hat Dumps "Inclusive Language", Puts "Master" In Official Communications and Headlines
Red Hat: you CANNOT say "master" (because it is racist). Also Red Hat: we put in it our headlines.
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, January 21, 2025
IRC logs for Tuesday, January 21, 2025
Gemini Links 21/01/2025: Media Provocations and Nazis Not Tolerated
Links for the day
Slopwatch: BetaNews Plagiarism and LLM Slop by UNIXMen
"state-of-the-art" plagiarism
What Fedora, OpenSUSE, and Debian Elections Teach Us About the State of Weak (or Fake) Communities
They show a total lack of trust in these communities
Links 21/01/2025: Mass Layoffs in "Security" at Microsoft (Despite Microsoft Promising It Would Improve After Many Megabreaches), Skype is Dead (Quietly)
Links for the day
Alternate Version of Daniel Pocock's 2024 Talk, "Technology in European Parliament Election Campaign"
There's loud ovation at the end of the talk
Gemini Links 21/01/2025: London Library, Kobo Sage, and Beyerdynamic DT 48 E
Links for the day
The January 20 Public Talk by Richard Stallman (Around Midday ET), Livestream 'Assassinated' by Google's YouTube
our guess is that the 'cancel mob' sabotaged it, possibly by making a lot of false reports to YouTube
[Meme] Free Software and Socially-Engineered Groupthink (to Serve Big Sponsors Like Google and Microsoft)
They do this to RMS all the time
[Video] Daniel Pocock's Public Talk About Free Software Politics, Social Engineering, Debian Deaths and Suicides, Coercion and Exploitation of Women
took many months to get
BetaNews Cannot Survive If Its Fake Articles Are Just SPAM for Companies Like AOHi and Aren't Even Composed by Humans
This is what domains or former "news" sites do when they die and look very desperately for "another way"
Pocock shot in the face, shot in the back, shot on Hitler's birthday saving France, Belgium and FOSDEM
Reprinted with permission from Daniel Pocock
Dr Richard Stallman in Montpellier, Robert Edward Ernest Pocock in France
Reprinted with permission from Daniel Pocock
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, January 20, 2025
IRC logs for Monday, January 20, 2025
Links 20/01/2025: Conflict, Climate, and More
Links for the day
Gemini Links 20/01/2025: Conflicted Feelings and Politics
Links for the day
Daniel Pocock's ClueCon 2024 Presentation Was Also Streamed Live in YouTube and Later Removed by Google, Citing "Copyrights". Now It's Back.
The talk covers social control media, Debian, politics, and more
Google 'Cancels' RMS
Is the talk happening?
Microsoft Revisionism Debunked by Microsoft's Own Words About “the Failure of OS/2”
The Register on “the failure of OS/2”
Improving Daily Links by Culling Spam, Chaff, and LLM Slop
the Web is getting worse
Links 20/01/2025: Indonesia to Prevents Kids' Access to Social Control Media (Addiction and Worse), Climate News Catchuo
Links for the day
[Meme] EPO Targets
Targets mean nothing if or when you measure the wrong thing
EPO Union Says Monopoly-Granting Targets at EPO "Difficult to Achieve Without Compromising [Staff] Health, Personal Time or the Quality of the Final Products" (Products as in Monopolies, Not Real Products)
To those of us (over 99.999% of people impacted by this) who do not work at the EPO the misuse of words like "products" (monopolies are not products) should be disturbing
The EPO is Nowadays Trying to Trick Staff Into Settling Instead of Solving the Underlying Problems of Corruption and Injustice
This seems like a classic case of "divide-and-rule" or using misled/weak people to harm the whole group (or "the village")
Links 20/01/2025: More PR Stunts by ByteDance and MLK’s Legacy Disrespected
Links for the day
Gemini Links 20/01/2025: Magnetic Fields, NixOS, and Pleroma
Links for the day
BetaNews Spreads Donald Trump Propaganda, Promotes Scams, and Publishes Fake 'Articles' About "Linux"
This is typical BetaNews
Richard Stallman 'Unveils' His January 20 Talk in Montpellier, France
It's free (gratis)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, January 19, 2025
IRC logs for Sunday, January 19, 2025