•   Distro Watch
•   Linux Today News Service
•   News for nerds, stuff that matters
•   Read the front page news from Linux Magazine's new web site.
•   The O'Reilly Network ONLamp Articles and Weblogs
•   The O'Reilly Network's Linux DevCenter Articles and Weblogs

Source: LinuxTracker.org

Category: Trinity Rescue Kit Size: 97.85 MB Status: 2 seeders and 1 leechers Added: 2006-10-12 12:02:00

Source: LinuxTracker.org

Category: Trinity Rescue Kit Size: 99.22 MB Status: 6 seeders and no leecher Added: 2006-10-12 12:00:09

Source: elive

The development of Elive 0.5.1 has started and the first unstable release is now available for download. What's new? According to the release announcement, the most interesting new feature is the inclusion of kernel 2.6.18, complete with improved support for wireless networking and ready for deployment on machines .

Source: netbsd

Geert Hendrickx has announced that the fourth release candidate of NetBSD 3.1 is ready for testing: "We had become aware of a few OpenSSL vulnerabilities which we didn't want to leave unfixed in the NetBSD 3.1 release, hence we've extended the release cycle with a fourth release candidate ..

Source: myah

Jeremiah Cheatham has released a new version of Myah OS: "Myah OS 2.3 SE is now available for download." Some of the more interesting changes since version 2.2, released less than a month ago, include: "Firefox 2.0rc2 with support for Flash, Java and embedded video; embedded video is .

Source: sabayon

Following the "miniEdition", the complete SabayonLinux 3.1 live DVD is now also out: "Announce: SabayonLinux x86/x86-64 3.1. New features: 2.6.18 kernel; added AIGLX Support (along with Xgl) thanks to Beryl and Emerald; NVIDIA drivers 1.0-9625, ATI drivers 8.29.6; improved graphics cards detection support; X.Org resolution auto-detection support; updated .

Source: Linux Today

In 5 years time, if a few other countries were to adopt these PCs, Linux could gain serious traction

Source: Linux Today

While I doubt this situation isn't reversible (as that isn't the point of this article), I wonder how many people are actually scared of dual booting Linux

Source: Linux Today

PalmSource will adopt its parent-company's name, nearly a year after being acquired by Access Co

Source: Linux Today

Debate over the latest draft of the GPL is driving a wedge between open source and free software advocates

Source: Linux Today

Reiser4, the successor to the popular Reiserfs by Hans Reiser, has been in development for a number of years now and, for almost as long, Reiser has been pushing for inclusion of the filesystem in mainline

Source: Linux Today

There's a popular notion swirling around the high-tech sector that Microsoft's dominant position in the industry and software bugs have customers scurrying for the cover of Linux

Source: Linux Today

In one fell swoop, the nonprofit [OLPC] organization will create the largest computing monoculture in history

Source: Linux Today

From thoughtless comments on mailing lists to outright rudeness, women constantly battle the perception that there is no comfortable place for them in the predominately male world of open source software

Source: Linux Today

"Seems like this case will never, ever grind to a conclusion. And not a month goes by without something weird or pathetic or inadvertantly hilarious happening " Not labeled "Humor," but oh, it's funny

Source: Linux Today

Does SpikeSource represent the next stage in the evolution of open source software as a serious business tool ?

Source: Linux Today

Virtual Iron has launched version 3.0 of its virtualisation software, aimed directly against VMware

Source: Linux Today

A few weeks ago, Gaël Duval lifted the veil of secrecy surrounding his new project a little bit by 'leaking' some screenshots and information

Source: Linux Today

The European Commission has taken steps to promote the use of open source systems and software in the public sector

Source: Linux Today

As the news of his arrest spreads in the free and open software communities, a growing concern is the effect that the case might have on Namesys, Hans Reiser's company, as well as the future of his filesystem work

Source: Linux Today

Mergere, an open-source company offering services and support for the Apache Maven software development tool set, released an upgrade this week to its flagship offering, Maestro

Source: Linux Today

Unix and Linux may be similar, but the differences between them could boondoggle a Unix-to-Linux migration

Source: Linux Today

The ability to digitally sign OpenOffice.org documents is a boon for users who want to make their document exchange and collaboration secure

Source: Linux Today

If you use Microsoft Windows but don't have OpenOffice.org installed, you cannot open and read files in the OpenDocument text format

Source: Linux Today

Version control systems, or source management systems, are an important aspect of modern software development

Source: Linux Today

Have you been planning on getting around to learning how to use the GIMP someday? Well now that the GIMP has had its tenth anniversary, it's about time to start

Source: Linux Today

Apache Tomcat enjoys the reputation of being a small but very formidable servlet container capable of handling heavy production loads

Source: Linux Today

Desktop applications such as Firefox, Thunderbird, and the GIMP are not the only ones that can use extensions and plugins for added functionality--some Web-based programs can too

Source: Linux Today

This month, let's go one level deeper in the stack and tune your PHP installation itself

Source: Linux Today

Today we dive into writing custom udev rules. Why would you want to acquire this strange knowledge ?

Source: Linux Today

You really can't do any significant programming today without running across XML

Source: Linux Today

Today's security advisories: idle and python (rPath Linux); and libmusicbrainz-2.0 and libmusicbrainz-2.1 (Ubuntu).

Source: Linux Today

Every day someone takes a whack at installing some Linux distribution on a computer and ultimately gives up out of frustration. Follow this guide to installing Debian GNU/Linux and reduce your frustration to zero

Source: Linux Today

PHP version 5 introduced SimpleXML, a new application programming interface (API) for reading and writing XML

Source: Linux Today

Marketing hype aside, Apex is Salesforce.com's response to open source

Source: Linux Today

I noticed a recent announcement by AOL discussing its VoIP initiative, which uses the ubiquitous SIP (Session Initiation Protocol)

Source: Linux Today

No more is it just about being cheaper and more reliable and secure than proprietary software--now it's about everyone working together

Source: Linux Today

SUSE's German (well, it started out that way). I'm German (well, I started out that way). So I know that suesse means sweet in the mother tongue

Source: Slashdot: Linux

engtech writes, "There's been some hype about the Debian fork of FireFox called IceWeasel. Politics aside, this is a bad idea because it fragments the user base, divides the focus, and opens the path for Microsoft and Internet Explorer 7 to regain marketshare."

Source: Slashdot: Linux

lisah writes "Just two months after its last update, KDE has released a new maintenance and bugfix update. KDE 3.5.5 boasts over 1,200 changes including speed improvements to KHTML, an update of Kopete 0.12.3, support for Adium themes, and improved support Yahoo! and Jabber IM protocols. KDE 3.5.5 also now offers extensive support for over 65 languages. Just a day after the release of 3.5.5, developers say they are already looking toward the release of KDE4, which will include improvements in multimedia, hardware integration, and more." (Linux.com and Slashdot are both part of OSTG.)

Source: Slashdot: Linux

lisah writes "With the announcement of Hans Reiser's arrest this week, many people have been wondering what this will mean for his company, Namesys, and the future of his filesystem work. According to a report at Linux.com, employees at Namesys are circling their wagons and plan to continue working on the project 'in the short term.' One employee admits, 'we are rather shaken and stressed at the moment, although I cannot say we didn't see it coming.'"

Source: Linux Magazine Online

Cisco CEO says virtualization "inevitable."

Source: Linux Magazine Online

One especially impressive feature of zsh is its context-sensitive completion system. With zsh, you can use the tab key to complete file names, command flags, shell variable names, and even scripting language syntax.

Source: Linux Magazine Online

Showing someone zsh for the first time can be a fun experience because it's a shell with many tricks. Usually, all it takes is a short demonstration of zsh's tab-completion powers to captivate your audience. Being able to type gcc -[TAB] to see a list of its command line options is something that most users could never imagine, but zsh is full of surprises when it comes to making interactive shells as functional as possible.

Source: ONLamp.com

When concurrency and latency are your bottlenecks, synchronous IO is a problem--even in a multithreaded or multiprocess model. This is especially evident when dealing with high volumes of incoming mail, especially if much of it is spam. Stas Bekman and his team at MailChannels recently built a scalable, modern, event-based system for asynchronous IO. Here's how they did it.

Source: ONLamp.com

Reviewing software for security bugs is a highly recommended best practice. There are various techniques for doing source code reviews, one of them being “static code analysis” which (in most cases) involves the use of a ‘grepping’ (pattern matching) tool along with a database of patterns that indicate potential security flaws. There are disadvantages to static code analysis: high rate of false positives and the inability to detect logic errors that may lead to security bugs. That said, static code analysis tools can be used to perform a quick first pass on the source code to detect bugs that can be easily identified by a grepping technique (”low hanging fruit”). Some of the free static code analyzers (security) are: Flawfinder, RATS, and SWAAT.
I’ve written about using Google to find security flaws in the past. However, thanks to Google Code Search, it is now easier to scan publicly available source code for potential security issues. The idea is query Google Code Search using techniques previously reserved for local static code analysis. Here are a few interesting queries:
- SQL Injection in Java caused by executing a dynamic SQL query with user supplied input: http://www.google.com/codesearch?hl=en&lr=&q=.*executeQuery.*getParameter.*
- SQL Injection in PHP caused by executing a dynamic SQL query with user supplied input: http://google.com/codesearch?hl=en&lr=&q=.*mysql_query%5C%28.*%5C%24_%28GET%7CPOST%29.*
- Cross-Site Scripting (XSS) in Java caused by echoing user supplied input without HTML encoding: http://www.google.com/codesearch?hl=en&lr=&q=%3C%25%3D.*getParameter*
- Cross-Site Scripting (XSS) in PHP caused by echoing user supplied input without HTML encoding it: http://google.com/codesearch?hl=en&lr=&q=echo.*%5C%24_%28GET%7CPOST%29.*
See the resources below for more details and queries:
http://asert.arbornetworks.com/2006/10/static-code-analysis-using-google-code-search/
http://blogs.securiteam.com/index.php/archives/663

Source: Linux DevCenter

Web developers never visit their own sites or surf the Web at all. If they did, we would not have so many pure suck Web sites. Readability, navigability, and persistent searchable archives are apparently Crimes Against L33t Web Development. Why do site owners spend zillions of dollars for poo?
This page illustrates a fun new trend:
Pingtel News and Event
Pale fonts! A whole page of them. Fun! Perfect for people who don’t want to bother with reading the page.
Toyota.com is more of a commercial for Macromedia Flash than its own products. They don’t want visitors with slow Internet connections or non-Microsoft operating systems to visit their site. I don’t want a television experience on the Web, because it sucks rocks. Crappy video, crappy sound, and painfully slow. Expensive junk that no one looks at. What’s the point?
ftp1.digium.com/pub/asterisk is an example of a common mistake on Web indexes: truncated filenames. How the heck are you supposed to know what they are? It is very easy to display long filenames in a HTTP index, as this little howto shows. Just two little config lines fixes it.
Final rant: Web documents in .pdf only, or worse, .doc format, and no HTML page option. There are meeeelyuns of conversion utilities. Shame, shame, everybody knows your name.
I could go on and on, but what fun would that be? Tell me your fave Web horror stories.