Showing headlines posted by Scott_Ruecker

Oracle has released a large package of security updates for Java which addresses 50 vulnerabilities in Java both in the browser and in the server. The "Critical Patch Update February 2013" (CPU) for Java had been scheduled, says Oracle, for 19 February, but due to one of the vulnerabilities being exploited in the wild, the company brought the release forward. Oracle advise users to install the update as soon as possible because of "the threat posed by a successful attack". This probably explains why Apple disabled Java at the end of the week, as they most likely knew the update was arriving early.

It's déjà vu all over again for Microsoft, as Black Duck Software has named Redmond's TypeScript project among its 2012 Open Source Rookies of the Year - despite Microsoft spending nearly a decade trying to figure out this crazy communist software manifesto. Back in 2001, Microsoft labeled open source a "cancer," "un-American," and a threat to rich software capitalists everywhere. By 2003, however, it was limping along the right track with the introduction of its Shared Source Initiative, and not long after started releasing open-source code of its own and creating its own open-source software lab. So why is Microsoft still considered an open-source rookie in 2013, 10 years later?

One of the first high-quality raw photo editors available for Linux desktops was LightZone, but although it was (initially) free of charge, it was a proprietary product. Unfortunately the small company behind it eventually folded, and both the free and paid versions went away, as did the updates required to support newer cameras. The company shut its doors for good in 2011, but the software has made a sudden—and unexpected—comeback as an open source project. Fans of the original will be pleased, but the nascent effort still has considerable work ahead before it grows into a self-sustaining community project.

The volunteers that run the Rubygems.org repository of components for Ruby applications are checking those components to ensure they haven't been tampered with after the platform was compromised. Attackers uploaded a gem to the site which had a metadata file that used the Rails YAML flaws to copy initialisation and configuration information to the Pastie clippings site.

What a difference a day makes -- or, in this particular case, eight months or so. Less than a year ago, retailer Barnes & Noble yanked an issue of Linux Format magazine from its U.S. shelves because of a cover story on the topic of "hacking." "A complaint was made," explained the announcement last May on Linux Format's TuxRadar blog.

It should not surprise you that year after year the most common resolution people make is a combination of lose weight, eat healthier, and get in better shape. This, along with my own resolutions, prompted me to think about what it means to get a company in open source shape.

Computer programming can be a fun hobby, as I learned when I programmed Apple II computers last century. Back then, I'd lie on my bed and dream up some educational game, then run over to my Apple //c to bring the game to life. Sometimes in less than two hours I could go from raw idea to working prototype. The most fun part was sharing the programs I created with friends and having them suggest improvements.

Developers at KDE are planning to merge the code for their Plasma Desktop, Plasma Netbook and Plasma Active user interfaces in the not-too-distant future, according to a blog post by Aaron Seigo. As he explains, individual programs are currently responsible for each shell; their sources, however, consist of just three to ten thousand lines of code, since they otherwise make use of a common code base.

The developers of the VLC video player have warned of a crashing bug in the latest 2.0.5 version of the application, which might be exploited to execute arbitrary code. The issue is a problem in the ASF demuxer (libasf_plugin.*), which can be tricked into overflowing a buffer with a specially crafted ASF movie. The developers note that users would have to open that specially crafted file to be vulnerable and advise users to not open files from untrusted third parties or untrusted sites.

Are you looking for a reliable virtualization package to run multiple virtual machines that handle unmodified Linux or Windows images? Then look no further than your existing Linux configuration. It already has the underpinnings to support Kernel-based Virtual Machine. You need look no further than your distro's package repository to install KVM.

A new distribution popped up on my radar last month when it was added to the Distrowatch.com database. It probably helped that its newest release was codenamed "GameOver" and featured lots and lots of games. Yesterday its team released 2.1 "Eris" Ultra. GameOver was a pretty cool release. It looked tough, but beyond that and its impressive list of games, it also featured Desura for Linux, Steam beta for Linux, and Wine & PlayOnLinux. It used LXDE on top of a Debian Wheezy base and shipped with codecs and plugins for full multimedia enjoyment, but opted for Nouveau NVIDIA graphics drivers.

LibreOffice in recent years for an office productivity suite on the Linux desktop after disturbances resulting in LibreOffice being forked from OpenOffice.org following Oracle's acquisition of Sun Microsystems. While Fedora is one of the distributions that has been living with LibreOffice, OpenOffice may come back as an option in Fedora 19.

The desktop computing landscape is rapidly changing all around us. Microsoft is now pushing Windows 8, the biggest change Microsoft has made to the desktop since Windows 95. This means that whether a Windows user chooses to switch to Mac OS X, Linux, or stick with Windows, he/she is in for a new learning experience. A transition to Linux may just be more familiar than making the jump to Window 8, and there are many open source alternatives to popular Windows applications. This large list of open source alternatives could make your transition to Linux easier than you thought possible.

We are proud to announce the return of Firefox Flicks, Mozilla’s global video competition that invites Firefox fans and filmmakers to create short videos, or “Flicks,” that help tell the Firefox story. Last year was a huge success and we received more than 400 videos submission from thousands of filmmakers all over the world.

In 1996, two Stanford University students, Larry Page and Sergey Brin, created a unique search engine called "BackRub" that ran on the school's server. After one year, BackRub's bandwidth outgrew the university's needs. Its creators rebranded BackRub into Google, a respelled reference to "googol." It is a mathematical term for the number represented by the numeral 1 followed by 100 zeros.

My experience tells me there are a lot of people interested in trying open source, but they don't know where to start. And the perception that you have to write code to contribute to is a barrier to that curiosity. So, I've outlined 10 ways that anyone can get started with open source—no code writing involved. I welcome your ideas and additions, there are without a doubt more than 10 ways—let's get started.

With the release of LGPL licensed C and Java connectors for MariaDB and MySQL in November 2012, a number of questions were raised in the community over the drivers' provenance and appropriateness of the LGPL licence. The H went looking for answers...

Aaron Swartz had many causes, some of which he all but invented himself. Now he has himself become a cause — or a number of them. Sitting through a long series of previews at a movie theater last night, I realized that a movie on Aaron's life is probably inevitable. Books too. He was that interesting and important.

No server, desktop, or laptop install is complete without Vim, and yet, there are times when I still see questions pop up on IRC about how to do basic editing of config files with vi. I remember, years ago, asking some of the same questions of an older Unix guru, and asking why I should bother learning such an eccentric and “outdated” text editor. His answer has stuck with me, he said “Because it is the only text editor guaranteed to be on every server, and some day you will need it, and have no other alternatives.” Vim, short for “vi improved” is ubiquitous, but it is also so much more, and the time you spend learning it will be repaid to you tenfold in productivity.

Pick up most items, from the soup can, to the library book, and you will find a data tag. In most cases, that tag is the simple, ubiquitous bar code that seems to have been around forever. They are the lineal representation of numbers in a machine readable format that most people do not even pay attention to any more (although some of us are old enough to remember a time before they were so common place). More recently, the shippers UPS and FedEx have moved to more complex data tags to help expedite the automated sorting and shipping of the thousands of products that they handle every day.