11.01.07

Gemini version available ♊︎

Critical Problem for Novell

Posted in Finance, Microsoft, Novell, Security at 9:28 pm by Dr. Roy Schestowitz

Yes, it’s pretty much as it sounds, but it’s ambiguous.

Hey, Novell, watch this flaw. It’s “Critical”. Heise Security says more:

The Novell BorderManager 3.8 network administration software includes a Client Trust agent for network clients, in which a security vulnerability has been discovered by the Zero Day Initiative (ZDI).

There’s a bit of a flamebait here. Indeed, it’s just a technical flaw and it’s not even a key Linux product, but Novell has some more critical flaws which will actually affect its future. Examples include:

  1. Microsoft’s betrayal against Novell
  2. Novell’s financial dependence on a Microsoft lifeline
  3. Departure of many SUSE developers
  4. Bad image

All of the above would have been avoid if Novell did not sign an insane deal.

Novell is losing

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

6 Comments

  1. Eric Gearhart said,

    November 2, 2007 at 2:50 am

    Gravatar

    The image is really lame, and this is FUD. Man why do I subscribe to this RSS feed still jeez.

  2. Roy Schestowitz said,

    November 2, 2007 at 3:16 am

    Gravatar

    Could it be that you see a company that you care about doing damage to itself and as much as it hurts to watch this as it develops, you simply can’t look away? This was my among my reasons for joining Shane. I used to love Novell and I still care for the company. Watching and tolerating what it does is like coping with an abusive spouse or sibling. By pointing out problems, maybe (just maybe) change can be brought.

  3. Eric Gearhart said,

    November 2, 2007 at 3:45 am

    Gravatar

    Yes but what I mean is that where is the news in this story? You tie a vulnerability that’s been patched to what you call a “critical flaw” in Novell’s strategy, by linking mainly to your own blog posts. I think anyone that reads any of the articles on boycottnovell would get the idea that you really, really hate the MS deal, but why devote a blog post to pointing it out?

  4. Roy Schestowitz said,

    November 2, 2007 at 4:02 am

    Gravatar

    The items that we cross-reference in turn point to external Web sites. Since many site, in due time, retire, change CMS, remove pages, etc. links are bound to break.

    We can’t trust external (direct) links, so I try to link internally (with context and fragments of relevant text) where it’s possible. In the long term it ensures fewer 404s and limited use of the Web Archive, aka Time Machine, which is unreliable and slow.

    Shane and I are committed to making this resource available for a long time to come. This resource not even a target that’s sensitive to factors like acquisitions; not even litigation and C&Ds for all I can tell, particularly because all statements are backed by a lot of external (and factual) sources. Where needed, corrections are being made here, so we cannot be blamed for negligence. The comment system, which embraces no censorship, ensures that everyone gets a voice.

    …why devote a blog post to pointing it out?

    Because no other site (let alone press outlets) does this. We explore and carefully study this one particular problem and make the truth as we see it — based on overlooked facts that we collect — available for others to learn from.

  5. Eric Gearhart said,

    November 2, 2007 at 9:06 am

    Gravatar

    I meant more along the lines of why did you turn the patching of a security vulnerability into a sensationalist headline? I know you talk about things here that the traditional media won’t pick up, I’m just saying you degrade your credibility with posts like this one (in my opinion – I’m no professional journalist by any means).

    Just trying to help.

  6. Roy Schestowitz said,

    November 2, 2007 at 9:16 am

    Gravatar

    Professional journalists do it as well nowadays, for various reasons including the line-by-line competition for sensationalist headlines in RSS feeds

    Just look at The Register and the Inquirer here in the UK. They’ve earned dis-reputation of ‘gutter press’ or tabloid by some.

    I always try to make accurate statements in the post summary (assuming you read in RSS mode without full HTML previews).

    The reason I included the headline was the fact that I had found an item on the critical flaw. There was no way to include it as a post and still making it sound informative enough to be worth reading. The second part of the post was appended to fit the context (flaw) and the site’s theme/topic.

DecorWhat Else is New


  1. Phoronix: Microsoft and Phoronix Sponsor (and Close Microsoft Partner) AMD All Over the Place

    When you’re taking massive 'gifts' from AMD (and also some from Microsoft) maybe it’s not surprising that editorial decisions change somewhat…



  2. EPO Has No F-ing Oversight

    Earlier today SUEPO mentioned this new article demonstrating that EPO President António Campinos can very obviously and blatantly violate the Code of Conduct of the Office without facing any consequences; there are translations too, so the report is now available in four languages



  3. [Meme] Linux-Rejecting Foundation

    The Linux Foundation never really leads by example; by default, it uses proprietary software



  4. Linux Foundation Almost Never uses Open Source

    The Linux Foundation uses proprietary software (look where they hire and take money from) and be sure they're probably not even aware of it



  5. Links 17/05/2022: Many More Games on GNU/Linux, YaST Development Report

    Links for the day



  6. Links 17/05/2022: Rocky Linux 8.6 and Budgie Desktop in Fedora

    Links for the day



  7. Patent Examiners Rising Up Against EPO Abuse

    Unhappy with the law-breaking autocracy (the EPO‘s management breaks the law as a matter of routine), fast-deteriorating working conditions and rapidly-decreasing quality of work (or lack of compliance with the law), workers have escalated further, topping off strikes and industrial actions with a large-scale petition



  8. [Meme] What Managers (Really) Mean by Acting Professionally

    The myth of 'professionalism' needs to die along with the façade of conformity as prerequisite for employment (Linus Torvalds can work just fine in a bathrobe in his own home)



  9. Internal Poll: 93% of European Patent Office (EPO) Workers Are Unhappy With the EPO

    On top of strike/s and industrial action/s there are now also petitions; at the EPO, almost all staff is "disgruntled" because of utterly corrupt and defunct leadership



  10. Links 17/05/2022: OpenSUSE Leap 15.4 Release Candidate

    Links for the day



  11. IRC Proceedings: Monday, May 16, 2022

    IRC logs for Monday, May 16, 2022



  12. Links 16/05/2022: FreeBSD 13.1 and Inkscape 1.2 Released

    Links for the day



  13. Archiving Latest Posts in Geminispace (Like a Dated Web Directory But for Gemini)

    Earlier today we saw several more people crossing over from the World Wide Web to Gemini; we're trying to make a decent aggregator and archive for the rapidly-expanding Geminispace, which will soon have 2,500 capsules that are known to Lupa alone



  14. Microsoft Vidal Does Not Want to Listen (USPTO is Just for Megacorporations)

    Microsoft Vidal knows her real bosses. They’re international corporations (multinationals like Microsoft), not American people.



  15. Links 16/05/2022: China Advances on GNU/Linux and Maui 2.1.2 is Out

    Links for the day



  16. Jim Zemlin: Chief Revenue Officer in 'Linux' Seat-Selling Foundation

    Board seats in the Linux Foundation are basically a product on sale, based internal documents



  17. Reminder: Linux Foundation's Last IRS Filing is Very Old (Same Year the CFO Left)

    People really need to ask the Linux Foundation, directly, why its filings are years behind; this seems like a sensitive subject



  18. Linux Foundation Does Not Speak for GNU/Linux Users

    There's a serious problem in the "Linux" world as the so-called 'Linux' Foundation claims to speak for us (the GNU/Linux community) while in fact speaking against us (on the payroll of those looking to extinguish us)



  19. IBM's Lennart Poettering on Breaking Software for Pseudo Novelty

    Recently-uploaded ELCE 2011 clip shows a panel with Linus Torvalds, Alan Cox, Thomas Gleixner, Paul McKenney, and Lennart Poettering (relevant to novelty or perceived novelty that mostly degrades the experience of longtime users, e.g. Wayland and systemd)



  20. IRC Proceedings: Sunday, May 15, 2022

    IRC logs for Sunday, May 15, 2022



  21. Links 15/05/2022: Linux 5.18 RC7 and Calls for More Mass Surveillance

    Links for the day



  22. Audio: Mark Shuttleworth Marketed to Young Males, With Sexy Pictures

    The Web is rotting away, old links become broken links within months or years, so I’ve decided to encode a 3-minute segment of the whole as Ogg



  23. What a Difference Half a Decade Makes (When Linux Foundation is 'Having Fun')

    Media shaming campaigns may have taken their toll on the founder of Linux, who is now bossed by someone who rejects Linux and is married to a Microsoft booster. Like Richard Stallman under FSF guidance (and conditions for return, mostly for fear of further media assaults and attack dogs), he has become a more publicity-shy and private person. The Linux Foundation has in effect reduced the founder of what it’s called after (Linux) into a weekly release manager and mascot, whose brand it is gradually diluting/cheapening.



  24. Links 15/05/2022: GNU libiconv 1.17

    Links for the day



  25. [Meme] Unitary Patent and Unified Patent Court (UPC) Cannot Be Reconciled With the Law

    Unitary Patent and Unified Patent Court (UPC)? Impossible. But Team UPC counts on an endless torrent of fake news managing to convince you (and more importantly politicians) otherwise.



  26. Even Team Battistelli is Sometimes Admitting -- Out in Public! -- That Unified Patent Court (UPC) is Neither Legal Nor Desirable

    Daniel X. Thomas and other people who are “too old to punish” (consequences to their career profoundly minimised owing to seniority) are among those who push back against the Unitary Patent or Unified Patent Court (UPC); any sane person — not a career-climbing litigation zealot — can identify the pertinent facts and realise that what’s going on here is an injustice of unprecedented proportions in the patent discipline



  27. [Meme] Common Sense at EPO

    The European examiners who deal with patents prefer a system that works for science, for Europe, not for foreign megacorporations that amass millions of low-quality patents and weaponise these to discourage competition



  28. Patent Granting at the EPO Has Collapsed by 24% Owing to Much-Needed Industrial Action

    Seeing that the EPO’s management routinely violates the law and even the very legal basis of the EPO’s existence (it is a monopoly in Europe; no body has the authority to compete against it), the EPO’s examiners have embarked on a ‘Work-to-Rule’ campaign — working in compliance with the rules as defined 49 years ago and revised over the decades — and the European Patent Convention (EPC) takes priority over unlawful demands from middle and upper management; this is proving highly effective so far and it will carry on until demands are met, i.e. until the law is obeyed and staff is treated with respect/dignity



  29. [Meme] Milan is a Suburb in London

    As long as Italy is not the UK and London means London “proper” (not the French town called London) the UPCA is invalid and no matter how much Team UPC (and its puppets in EPO management) may plead, this whole system is bound to implode



  30. The Latest Propaganda Tactics of Team UPC: Pretending Unified Patent Court Already Exists and Unitary Patents Are Default When If Fact None Even Exists

    8 years ago Benoît Battistelli said that the UPC was imminent; now, after 4 years of António Campinos, it’s still not here and Team UPC speculators say it won’t happen this year, either; just like the EPO constantly lies (both to the public and to its very own staff) Team UPC continues to lie to itself (self-delusion) and to us; both also routinely break the law, engage in deliberate violations of longstanding conventions, and scrap constitutions, which in turn becomes a breaking point for the EU’s credibility and the legal profession


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts