Bonum Certa Men Certa

Links 18/11/2011: Android/Google Support at Motorola





GNOME bluefish

Contents





GNU/Linux



Free Software/Open Source



  • How misinformation can still hurt FLOSS
    There seems to be a bit of confusion out there about what open source means in terms of security: specifically, there's a pervasive notion that because software is open source, it's inherently insecure.

    Seriously?

    Apparently these folks have completely forgotten about software like sendmail, Apache, MySQL, SSH, and oh, what's that platform called… the one with the penguin… oh yeah: Linux. The applications and platforms are regarded in the industry has highly secure and generally free of malware in the wild.

    And yet, when Google Open Source Programs Manager Chris DiBona recently quoted an article that said that "critics have been pounding the table for years about open source being inherently insecure," I decided to locate that article... I found myself running smack into what I believe is a serious error.


  • Open source biometrics technology for mobile devices, PCs and servers
    DigitalPersona has open sourced its new MINEX-certified FingerJetFX fingerprint feature extraction technology.

    FingerJetFX, Open Source Edition (OSE), is free, portable software that device manufacturers and application developers can use to convert bulky fingerprint images into small, mathematical representations called fingerprint “templates” for efficient storage or comparison.


  • FOSS over Miami
    Here’s a little Larry-the-Free-Software-Guy history for those of you who don’t already know it: I grew up in Miami and didn’t move to San Francisco until I was 29 (and that was the summer of 1987, so you can do the math). More specifically, I grew up in a strip of unincorporated Dade County sandwiched between North Miami and North Miami Beach. So you’ll understand why I have a tendency to pull for the Dolphins and the U on occasion, and I don’t think twice about driving 30 or so miles down Highway 1 into Monterey County to visit The Whole Enchilada because it has the only Key Lime Pie in this region close enough to be considered Miami-class. Listening to Jimmy Buffett puts me back among the palm trees, retroactively sweating in the 80 degree/90 percent humidity coziness for which South Florida is known worldwide.


  • Web Browsers



  • FSF/FSFE/GNU/SFLC

    • Nov. 21: Free Software's Stallman
      Richard Stallman, the founder of the GNU Project and the Free Software Foundation, will present a visiting lecture from 7-9 p.m., Monday, Nov. 21, in Mitchell Hall at the University of Delaware.




  • Standards/Consortia





Leftovers

  • Wintel is Fragmented
    UPDATE A part of the changes to make “8″ will be a consolidation of re-re-reboots into one reboot per month where possible. The trolls here who claim re-re-reboots are no problem for competent users are again proven wrong. Even M$ admits re-re-reboots are a problem that needs fixing. Of course re-re-reboots don’t bother those of us who use GNU/Linux because we get to choose when and if we reboot. I have enjoyed that capability for a decade and love it.


  • The OS Wars: We Have A Winner
    You would not have shown your face at, say, ApacheCon, with a MacBook.


  • Google's Brin and wife plop half-million into Wikipedia's hat
    The Wikimedia Foundation, the non-profit publisher of Wikipedia and its affiliate sites, has received a $500,000 grant from the Brin Wojcicki Foundation, a philanthropic organization set up by Google cofounder Sergey Brin and his wife Anne Wojcicki, cofounder of "personal genetic information" website 23andMe.


  • Security/BIOS



    • Attacks on secure boot
      This is interesting. It's obviously lacking in details yet, but it does highlight one weakness of secure boot. The security for secure boot is all rooted in the firmware - there's no external measurement to validate that everything functioned as expected. That means that if you can cause any trusted component to execute arbitrary code then you've won. So, what reads arbitrary user data? The most obvious components are any driver that binds to user-controlled hardware, any filesystem driver that reads user-provided filesystems and any signed bootloader that reads user-configured data. A USB drive could potentially trigger a bug in the USB stack and run arbitrary code. A malformed FAT filesystem could potentially trigger a bug in the FAT driver and run arbitrary code. A malformed bootloader configuration file or kernel could potentially trigger a bug in the bootloader and run arbitrary code. It may even be possible to find bugs in the PE-COFF binary loader. And once you have the ability to run arbitrary code, you can replace all the EFI entry points and convince the OS that everything is fine anyway.


    • UEFI Debugging Tools
      One of the many things I work on is UEFI support. It’s an interesting thing to work on, in part because there’s a lot of new development and it’s at a fairly low level, which is just the sort of thing I like.

      Often during UEFI development, we’ll see a bug and need to diagnose whether it’s a problem with the hardware, the firmware, the bootloader, the OS kernel, or even a userland program. One case of this is when console graphics don’t work right.


    • GPT disks in a BIOS world
      Starting with Fedora 16 we're installing using GPT disklabels by default, even on BIOS-based systems. This is worth noting because most BIOSes have absolutely no idea what GPT is, which you'd think would create some problems. And, unsurprisingly, it does. Shock. But let's have an overview.






  • Finance

    • State orders Goldman Sachs to repay investors for misleading sales tactics
      Florida's securities regulators announced a settlement agreement with Goldman, Sach & Co. that has required the investment firm to back back an estimate $20 million in so-called "auction rate securities" because the company claimed they were liquid and secure when they were not.


    • Middle-class areas shrink as America divides into 'two-tiered society' of rich and poor
      The portion of American families living in middle-income neighborhoods has declined significantly since 1970, according to a new study, as rising income inequality left a growing share of families in neighborhoods that are mostly low-income or mostly affluent.


    • Our friends from Goldman Sachs…
      Serious and competent, they weigh up the pros and cons and study all of the documents before giving an opinion. They have a fondness for economics, but these luminaries who enter into the temple only after a long and meticulous recruitment process prefer to remain discreet.

      Collectively they form an entity that is part pressure group, part fraternal association for the collection of information, and part mutual aid network. They are the craftsmen, masters and grandmasters whose mission is "to spread the truth acquired in the lodge to the rest of the world."

      According to its detractors, the European network of influence woven by American bank Goldman Sachs (GS) functions like a freemasonry. To diverse degrees, the new European Central Bank President, Mario Draghi, the newly designated Prime Minister of Italy, Mario Monti, and the freshly appointed Greek Prime Minister Lucas Papademos are totemic figures in this carefully constructed web.




  • Privacy

    • Wintel is Fragmented
      When I wrote about Google making it possible to opt-out of their Wi-Fi access point mapping program, I made a mistake. I thought Google was still using its StreetView cars to pick up Wi-Fi locations. Nope, Eitan Bencuya, a Google spokesperson, tells me that Google no longer uses StreetView cars to collect location information. So, how does Google collect Wi-Fi location data? They use you.




  • Civil Rights

    • Going Incognito
      The Internet can be a dangerous place. Once it was the scam artists and the damage they wrought that users had to watch. These days it seems it's more governments trying to oppress citizens and so-called respectable companies looking to track and sell your movements that strike fear in the hearts of Penguistas. Perhaps it's time to go Incognito.




  • Internet/Net Neutrality

    • EU Adopts Resolution Against US Domain Seizures
      The European Parliament has adopted a resolution which criticizes domain name seizures of “infringing” websites by US authorities. According to the resolution these measures need to be countered as they endanger “the integrity of the global internet and freedom of communication.” With this stance the European Parliament joins an ever-growing list of opposition to the Stop Online Piracy Act .






Recent Techrights' Posts

BASIC Predates Microsoft by Over a Decade, Microsoft-Controlled Sites Like The Register MS Don't Want You to Know This
The state of the media is really bad when it relies a lot on oligarchs' money and is appointing editors who are working for oligarchs
Brian Kernighan, "Only Third to Dennis Richie and Ken Thompson" (UNIX), Agreed With Someone Who Said Rust Was Just Hype, Should Not Replace C
17 hours ago
Reminder: Microsoft's "Secure Boot" Certificate for "Linux" Will be Expired in One Week
Many PCs won't manage to 'rotate' to another certificate
 
Gemini Links 05/09/2025: Logitech Lift and DIY Gemini Servers
Links for the day
Links 05/09/2025: Sainsbury's Caught Spying on In-Store Shoppers and Microsoft "OpenAI is Using Legal Threats to Harass its Critics"
Links for the day
Analogies for "Memory Safety" in Rust
Don't worry, it's Rust! It can do anything!
"Many of the Red Hat Employees Are Still Looking for Work"
Shame on IBM's CEO
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 04, 2025
IRC logs for Thursday, September 04, 2025
Microsoft Started With Code Literally From The Trash, Nothing Has Improved Since
The reality is, there are systems and code that are reliable. But they're not Microsoft's.
Hypothesis That New McKinsey/Microsoft Executive Inside Red Hat Will Outsource Research and Development Operations to India (Like They Do in IBM)
IBM is floundering
Slopwatch: Scams, Fake Articles About "Linux", Plagiarism, and Worse
Perhaps some time soon the LLMs or the "Big LLMs" will run out of money (to borrow) and go offline, leaving those slopfarms in a tough place
Gemini Links 04/09/2025: Means of Production and Rusting Out
Links for the day
Links 04/09/2025: Science, Hardware, and Eyes on China
Links for the day
Gemini Links 04/09/2025: Digital Minimalism and Social Control Media
Links for the day
IBM's GNU/Linux Divestment, Based on Hard But Anecdotal Evidence (IBM Fails to Recognise How Much Money It Made and Can Still Make From "Linux")
Love us or hate us, a lot of what we've been saying about Red Hat under IBM turns out to be rather accurate
Links 04/09/2025: Massive Microsoft Staff Cuts (Barely Reported), "Strange Conspiracy Theory Is Reportedly Spreading Inside OpenAI"
Links for the day
Activists Can Win, But Keep an Eye on the Ball and on the Trophy
GitHub is dying, it was a loss-making trap, not free hosting
Gemini Links 04/09/2025: Katrina Remembered, Distracted Driving, and Virtual Economics
Links for the day
At This Point It's No Longer Matthew Garrett But People Who Fund Matthew Garrett (or Companies That Fund His SLAPPs Against My Wife and I)
The only thing worse than misogynists are misogynists who fail to respect other people's right to go on holiday
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 03, 2025
IRC logs for Wednesday, September 03, 2025
The UEFI 9/11 - Part VI - This Serious Harm Was Planned for Over a Decade, Not an Accident or Merely Some Misfortune
The term "Serious Harm" is legally meaningful here
GNOME Unfit for Diversity and Inclusion
GNOME's leadership is using "bad words"
Brodie Robertson Addressing the Recently-Discovered Comments
Most people probably knew nothing about this until he wrote a response
Red Hat QA Team "Had Shrunk by Half Over the Past Year." (After IBM Divestment)
If Red Hat's workforce is being moved to the East, then RHEL can become a national security problem
Slopwatch: "Open Source" and "Linux" News Faked, Made by Bots and Entered Into Google News
Spam combined with slop about "Linux" has entered Google News
Links 03/09/2025: Microsoft Causes Mass Layoffs Outside Microsoft Also, "Google Can Keep Paying for Firefox Search Deal"
Links for the day
Gemini Links 03/09/2025: calendar.txt, Alhena 5.3.1, and ROOPHLOCH
Links for the day
The Theory That the Man From McKinsey, Whom Red Hat Took From Microsoft a Month Ago as Executive, Wants 'Efficiency' (Lower Salaries)
So far... no "official" word
When Your Site's Articles Are Being 'Cheapened' by Slop as Feature Images
Dr. Farnell should become an advisor to The Register MS
Certificate Authority Let's Encrypt Drops to Only Half a Dozen Capsules and 0.2% of the Whole in Geminispace, Self-Signed is the Way to Go
It used to have hundreds, according to Lupa
Doing to Red Hat What They Already Did (and Still Do) to IBM
there seems to be a drive to hire cheaper staff, and it may be led by somebody Red Hat hired from Microsoft
Links 03/09/2025: Salesforce's Latest Mass Layoffs, 93% in Large Poll at The Register MS Say UK Government Should Dump Microsoft
Links for the day
Preparations for Our 19th Anniversary Have Already Begun
When we get back we'll probably sort out some balloons and venue for the next party
Pleased After 2 Years With team.blue
Moving from a Content Management System (CMS, dynamic) to a Static Site Generator (SSG) was a wise decision that made life so much easier
The Free Software Foundation (FSF) is Being Attacked by Organisations Jealous of Its Principled Stance and Longevity
Nobody is perfect, but imperfection does not instantaneously imply sinister intent
If You Reject the Google Verdict in the US, Then You Should Also Reject the "Modern" Web (Do Something About It)
Gemini Protocol is still open; it cannot be hijacked or subverted because it's frozen by design and by intention
Open Source Initiative IRS Filing: Almost All the Money is Corporate, Stefano Maffuli (Executive Director) Takes About a Quarter of That Money for Openwashing of "AI" Ponzi Scheme
OSI is currently little but a PR/marketing agency of Microsoft
Many People Are "Leaving" Red Hat, Even High-Level Managers
Something is definitely going on at Red Hat
Techrights Has Been Subjected to Calls of Violence (and Death Threats), It Never Condoned Violence
I have no sympathy for people who call violence "free speech" and then get in trouble
Condoning Violent Behaviour and "Free Speech"
perhaps Microsoft Lunduke lost touch with what constitutes violence
Takeaway From the Google Verdict: GAFAM Has Too Much Control (Even Over the US Government and Courts With Government Appointees)
Many people feel disappointed but hardly surprised by the verdict
The Free Software Foundation (FSF) Turns 40 in One Month
As noted a few days ago, several times in fact, many people now recognise the importance of the FSF's mission, even if most people don't know what the FSF is
Many Microsoft "Assets" Are Fabricated Baloney (to Game the Numbers)
At times it seems like what we deal with are many weak patents (on algorithms), valuations or speculations based on hype ("hey hi"), and stocks held by Microsoft and its own staff
"Voluntary" Layoffs at Microsoft (to Game the Numbers, Sugar-Coating a Crisis)
"Employees interested have until the end of October to volunteer."
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 02, 2025
IRC logs for Tuesday, September 02, 2025