Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:the problem with Twitter (Score 4, Interesting) 114

140 characters isn't enough ... in English. You should see the novels that Japanese people post on Twitter. Japanese is about 2x denser per character than English, so you can fit in a lot more stuff. I was amazed when I was able to compose an elaborate explanation for someone in Japanese and it still fit in one tweet (I'm learning the language).

Comment Re:Does it really matter (Score 2) 86

SDKs are useful to investigate and develop homebrew exploits (they provide information on the system architecture), but they are not useful for actually developing homebrew unless you want to end up with a situation like the Xbox 1 (the original) where all homebrew (except for Linux) was basically illegal because compiling it meant using the SDK and the resulting binaries were not legally redistributable. As a counterexample, the Wii has a fully open source homebrew SDK (though some bits have a questionable history and are arguably non-cleanroom reverse-engineered SDK code from games, but that's a much finer point than outright using the official SDK).

Given what I've heard of the Xbox One security architecture, it's going to be a tough nut to crack, SDK or not.

Comment Re: make it easy! (Score 1) 184

That person is bitching that everybody and their dog start to depends on systemd. That is your evidence right there.

Of course you have to do the dating assumption that devs do whatever they like... It kind of crumples if you assume that there are systemd hitmen traveling the world, forcing developers to depend on systemd.

Comment Re: Their comments on trolls/trolling (Score 2) 184

The absense of CVEs can mean the absense of people looking, and with the x11 being a quagmire of protocols, often contradicting each other as new stuff gets added over the decades, there are very few people that can even understand the code. One guy started to look last a while back and he is finding appalling bugs, check the recent CVEs and his presentation at last years chaos communication congress (30C3).

Making this swamp a bit dryer by not having it have root priviledgea is something that was work in progress ever since xfree started to run on Linux.

Now you come here and tell me that this sour spot for the last thirty years is better to keep around than having a much smaller, much cleaner codebase where almost all parts run in their own security context -- usually with privileges way lower than those you have as a user. Right.

Comment make it easy! (Score 0) 184

Mid term devuan has just one chance: Make it easy for developers to provide solutions that work with multiple int systems. Systemd does bring quite a few improvements for developers. That is the reason why systemd becomes entrenched: Developers like it and start to depend on it since it makes their live easier.

If devuan wants to keep a manageable distribution they need to make it similarly easy to tackle issues in a convenient and reliable way when using multiple init systems. If they manage that, then I am pretty sure developers will support their interfaces in favor of systemd. No developer wants needless ties.

Unfortunately it is much harder to provide generic solutions than it is to provide a specific one. So devuan is in a very challenging position to make things easier for developers.

Is they blow this, then they will have more and more software that depends on systemd-only interfaces and more and more work to remove those dependencies.

Comment Lesson for Hollywood (Score 4, Interesting) 106

This fan fic already has a few episodes in the can. And it's so good, that even the most horrible episode in the bunch (the one with the Orion slavegirl), is simultaneously unwatchable, and completely watchable on its merits as a very faithful recreation of a typically bad episode from the original series. These guys have got it down pat. They know exactly how to faithfully remake an honest homage to an average bad episode from the original series. And it's certainly doesn't hurt that the episode's guest star was none other than Lou "The Incredible Hulk" Ferrigno. As an Orion slave trader. In full body green makeup!

It's eery watching Chris Doohan in this series. The guy is a spitting image of his old man. Looks like a younger Scotty. Close your eyes, and you can't tell it's not Scotty. I thoroughly enjoyed watching the episodes as they came out. They were far more entertaining than either of the two terrible reboots. I refused, on principle, to pay money to watch the crap reboots in the theaters. But if these folks ever manage to crank out a reel, and it makes it down to my local megaplex, I'll be the first in line to buy a ticket.

Submission + - Security experts believe the Internet of Things will be used to kill someone (computerworld.com)

dcblogs writes: Imagine a fleet of quad copters or drones equipped with explosives and controlled by terrorists. Or someone who hacks into a connected insulin pump and changes the settings in a lethal way. Or maybe the hacker who accesses a building's furnace and thermostat controls and runs the furnace full bore until a fire is started. Those may all sound like plot material for a James Bond movie, but there are security experts who now believe, as does Jeff Williams, CTO of Contrast Security, that "the Internet of Things will kill someone. Today, there is a new "rush to connect things" and "it is leading to very sloppy engineering from a security perspective," said Williams. Similarly, Rashmi Knowles, chief security architect at RSA, imagines criminals hacking into medical devices, recently blogged about hackers using pacemakers to blackmail users, and asked: "Question is, when is the first murder?"

Submission + - Another community gets split by systemd: Devuan is "forking" Debian (devuan.org)

jaromil writes: The so called "Veteran Unix Admin" collective announces that the "fork" of Debian will proceed as a result of the recent systemd debacle. The reasons put forward are not just technical, included is a letter of endorsement by Debian Developer Roger Leigh mentioning that "people rely on Debian for their jobs and businesses, their research and their hobbies. It's not a playground for such radical experimentation."
The fork is called "Devuan", pronounced "DevOne". A website is up on https://devuan.org/ with more information.

Submission + - Debian fork begins: Devuan

An anonymous reader writes: https://devuan.org/

"Dear Init-Freedom lovers, the Veteran Unix Admin collective salutes you!

Our project is called "Devuan".

Devuan is spelled in Italian and it is pronounced just like "DevOne" in English.

Devuan developers can be reached with an e-mail to vua at debianfork dot org.
OK guys, nevermind the names, but what's the plan?

We started setting up the first bits of a core infrastructure to host a website, mailinglists and a Dak based package repository.

We are uploading materials on the https://github.com/devuan group which we plan to use as a development platform, at least in this initial phase.

We are going to setup a BTS allowing us to inherit many useful Debian development tools and we plan to have a continuous integration system for our packages going from GitHub to a Jenkins builder and then to our repositories.

We plan to innovate many of the tools that were historically used in Debian development, still mainaining stable, testing and unstable package repositories that users and downstream can use.

Soon we will be ready to welcome package maintainers and then we will focus on refining the continuous integration pipeline and the communication and decision architecture informed by research projects as D-CENT. Besides the package-specific BTS we are going to use GitHub issues to coordinate tasks.

The first package of Devuan is devuan-baseconf: a Debian installer with preseed of sysvinit-core and a couple of devuan packages containing a keyring, repository list files and pinnings. Once installed and updated this package avoids the requirement of systemd as PID 1 and adopts systemd-shim when strictly needed.

What Devuan should be then? is it really a fork?

This is just the start of a process, as bold as it sounds to call it a fork of Debian. This exodus is ultimately being a relief for some of us and should lead to the creation a peaceful space for work we are well able to do. To help with this adventure and its growth, we ask you to get involved, but also to donate money so that we can cover the costs of setting the new infrastructure in place.

Devuan aims to be a base distribution whose mission is protect the freedom of its community of users and developers. Its priority is to enable diversity, interoperability and backward compatibility for existing Debian users and downstream distributions willing to preserve Init freedom.

Devuan will derive its own installer and package repositories from Debian, modifying them where necessary, with the first goal of removing systemd, still inheriting the Debian development workflow while continuing it on a different path: free from bloat as a minimalist base distro should be. Our objective for the spring of 2015 is that users will be able to switch from Debian 7 to Devuan 1 smoothly, as if they would dist-upgrade to Jessie, and start using our package repositories.

Devuan will make an effort to rebuild an infrastructure similar to Debian, but will also take the opportunity to innovate some of its practices. Devuan developers look at this project as a fresh new start for a community of interested people and do not intend to enforce the vexation hierarchy and bureaucracy beyond real cases of emergency. We are well conscious this is possible for us mostly because of starting small again; we will do our best to not repeat the same mistakes and we welcome all Debian Developers willing to join us on this route.

The Devuan distribution will make an effort to improve the relationship with both upstream and downstream and, particularly in its gestational phase, will do its best to accomodate needs of those downstream distributions willing to adopt it as base. We look forward to statements of interest from such distributions, as well involvement in this planning phase.

Devuan will do its best to stay minimal and abide to the UNIX philosophy of "doing one thing and doing it well". Devuan perceives itself not as an end product, but a starting point for developers, a viable base for sysadmins and a stable tool for people who have experience of Debian. Devuan will never compromise for more efficiency at the cost of the the freedom of its users, rather than leave such concerns to the independent choices made by downstream developers."

Well there it is. Discuss.

Comment Re:Here's the deal (Score 1) 215

My favorite ploy is the agencies who stalk me on LinkedIn. When I move to a new contract, they call my old employer to ask if they need any additional help.

I found a very easy solution to this problem, a long time ago: I simply do not provide enough details to precisely identify any of the companies I've worked for in the past, on my publicly visible LinkedIn profile, and I locked it down so that nobody, except me, can see my connections, and try to figure it out. All that anyone sees is my connection count, and nothing more.

Slashdot Top Deals

Software production is assumed to be a line function, but it is run like a staff function. -- Paul Licker

Working...