nerdyH writes "The Debian project's maintainer, Luke Claes, announced in an email Saturday that he will freeze the 'testing' or 'Lenny' tree, in preparation for a new stable release of Debian Linux in ... September! The freeze means that open source software developers have only a couple more days to package any applications that they want to be included in the next release of Debian — and by extension, in the inner sanctum source lists of distributions such as Ubuntu that are based on it. After the freeze starts next week, Debian maintainers will turn their attention to 364 release-critical bugs, and half-a-dozen high-priority goals. Given the work to be done, is September really feasible? Lenny always was a little slow getting back to his right place ..."

snydeq writes "InfoWorld's Bill Snyder examines what appears to be an open source job market boom, as evidenced by a recent O'Reilly Report. According to the study, 5 to 15 percent of all IT openings call for open source software skills, and with overall IT job cuts expected for 2009, 'the recession may be pushing budget-strapped IT execs to examine low-cost alternatives to commercial software,' Snyder writes. But are enterprises truly shifting to open source, or are they simply seeking to augment the work of staff already steeped in proprietary software? The study's methodology leaves too much room for interpretation, Savio Rodrigues retorts. 'That's why the 5% to 15% really doesn't sit well with me,' Rodrigues writes. 'I suspect that larger companies are looking for developers with a mix of experience with proprietary and open source products, tools and frameworks,' as opposed to those who would work with open source for 90 percent of the work day."

An anonymous reader writes "According to a report on heise, Intel is switching from using Ubuntu to the Fedora Project for the second version of the Intel supported Mobile & Internet Linux Project Moblin, citing a desire to use RPM package management." So far, of the various subnotebooks I've been glancing at over shoulders at OSCON, though, most of the ones with an easily identified operating system seem to be running Ubuntu.

ruphus13 writes "Ubuntu and Canonical have been very active at OSCON this year. They showcased a new distro, announced improvements to their code-hosting platform, and made Mark Shuttleworth available for a couple of talks and panel sessions. Quoting: 'Ubuntu Netbook Remix, a complete distribution designed to run on Atom-based Netbook PCs. The main difference that sets it apart from its big brother Hardy Heron is the Ubuntu Mobile Edition (UME) Launcher, a user interface created specifically for use on the teensy screens and keyboards of today's popular ultra-portable computers.' Canonical also announced Version 2.0 of Launchpad, their code-hosting platform. Enhancements include 'a planned API that'll allow third-party applications to authenticate, query and modify data in the massive Launchpad database, without a user needing to manually access the system via a browser.' Mark Shuttleworth went on to state that Linux's market share will grow when it has better eye-candy than Apple's."

An anonymous reader writes with a link to Caitlyn Martin's review of the Slackware-based Vector Linux SOHO 5.9 Deluxe: "I've read past reviews by other reviewers describing Vector Linux as 'better Slackware than Slackware' or 'what Slackware should be' and I always felt that was a bit of a stretch. With this release it isn't a stretch. You get all the reliability and stability of Slackware, better performance than vanilla Slack (at least on my hardware) and the features and most of the conveniences users of distributions touted as user friendly have come to expect."

An anonymous reader sends word of the CherryPal, a tiny desktop computer that its maker says will consume just 2 watts. It uses a Freescale processor that runs Linux and has no moving parts. The CherryPal has integrated software and an embedded Linux (based on Debian) that has been stripped down to support Open Office, Firefox, iTunes, instant messaging, and multimedia access locally. More applications are available in the cloud, and 50 GB of cloud storage is included. It comes without keyboard or mouse but with ports for VGA, USB, Ethernet, and built-in Wi-Fi. It's claimed that the CherryPal will boot up in 20 seconds from 4 GB of flash. They've buried Linux so that the end user doesn't see it; the entire UI is presented through Firefox. The CherryPal site says: "There's no software or upgrades to install, no risk of viruses, and no operating system to deal with and free 24/7 support."

Corrupt brings us a ZDNet column by Jeremy Allison, who says Linux could benefit from more "tough love" in order to improve its functionality and popularity. Excerpting: "As Elie Wiesel said, 'the opposite of love is not hate, it is indifference.' LinuxHater really doesn't hate Linux, despite the name. No one takes that much time to point out flaws in a product that they completely loathe and despise. The complaints are really cries of frustration with a system that just doesn't quite do what is desired (albeit well disguised). A friend pointed out to me that the best way to parse LinuxHaters blog is to treat it as a series of bug reports. A perl script could probably parse out the useful information from them and log them as technical bug reports to the projects LinuxHater is writing about. Deep down, I believe LinuxHater really loves Linux, and wants it to succeed."

AdamWill writes "Lately it's hard to avoid the buzz about netbooks — the small, cheap laptop systems that were popularized by the Asus Eee PC. Mandriva is providing the innovative operating system for the upcoming GDium netbook system, produced by Emtec. The first GDium will be a netbook with a 10", 1024x600 resolution display and a battery life of four hours, weighing in at 1.1kg. The innovative G-Key system stores the Mandriva operating system and all the user data on a USB key — nothing is permanently stored inside the GDium. You can use your own desktop and data by plugging the G-Key into any GDium."

GDI Lord writes "BOINC, open-source software for volunteer computing and grid computing, has posted news that GPU computing has arrived! The GPUGRID.net project from the Barcelona Biomedical Research Park uses CUDA-capable NVIDIA chips to create an infrastructure for biomolecular simulations. (Currently available for Linux64; other platforms to follow soon. To participate, follow the instructions on the web site.) I think this is great news, as GPUs have shown amazing potential for parallel computing."

alexs writes "Red Hat's response to update bind through RHN, patching the DNS hole, made a fatal error which will revert all name servers to caching only servers. This meant that anyone running their own DNS service promptly lost all of their DNS records for which they were acting as primary or secondary name servers. Expect quite a few services provided by servers running RHEL to, errr, die until their system administrators can restore their named.conf. Instead of installing etc/named.conf to etc/named.rpmnew, Red Hat moved the current etc/named.conf to etc/named.conf.rpmsave and replaced etc/named.conf with the default caching only configuration. The fix is easy enough, but this is a schoolboy error which I am surprised Red Hat made. Unfortunately we were hit and our servers went down overnight while RHN dropped its bomb and I am frankly surprised there has not been more of an uproar about this."

An anonymous reader writes "The age-old full disclosure debate has been raging again, this time in no other place than at the foundations of the open-source flagship GNU/Linux operating system: within the Linux kernel itself. It beggars belief, but even Linux creator, Linus Torvalds, has advocated against the sort of openness on which Linux has thrived, arguing that security fixes to the kernel should be obscured in changelogs, saying 'If it's not a very public security issue already, I don't want a simple "git log + grep" to help find it.' Unfortunately, it's not kernel exploit writers who need to grep the changelog in order to find kernel vulnerabilities. On the contrary, it's downstream distributors who rely on changelog information in order to decide when to patch the kernels of their distributions, in order to keep their users safe."

walshy007 writes "In a recent thread it was asked what it would take for an 'unstable' 2.7 development tree to be created, to which Linus replied: 'Nothing. I'm not going back to the old model. The new model is so much better that it's not even worth entertaining as a theory to go back. That said, I _am_ considering changing just the numbering. Not to go back to the old model, but because a constantly increasing minor number leads to big numbers. I'm not all that thrilled with "26" as a number: it's hard to remember. I think the time-based releases (ie the "2 weeks of merge window until -rc1, followed by roughly two months of stabilization") has been so successful that I'd prefer to skip the version numbering model too. We don't do releases based on "features" any more, so why should we do version _numbering_ based on "features"?'"

holdenkarau writes "The North American OpenMoko FreeRunners are starting to arrive. It would appear that the OpenMoko still has problems with some 3G networks, including AT&T. Although, in my own personal completely unscientific test, 2 out of 3 AT&T SIM cards worked. Check out the unboxing of a complete FreeRunner (along with debug board) and my experience getting the FreeRunner up and running. Or a direct link to the pictures for those of you bored with text. If you feel brave enough to take the plunge, you can buy your own FreeRunner from the OpenMoko store."

diegocgteleline.es writes "After three months, Linux 2.6.26 has been released. It adds support for read-only bind mounts, x86 PAT (Page Attribute Tables), PCI Express ASPM (Active State Power Management), ports of KVM to IA64, S390 and PPC, other KVM improvements including basic paravirtualization support, preliminary support of the future 802.11s wireless mesh standard, much improved webcam support thanks to a driver for UVC devices, a built-in memory tester, a kernel debugger, BDI statistics and parameters exposure in /sys/class/bdi, a new /proc/PID/mountinfo file for more accurate information about mounts, per-process securebits, device white-list for containers users, support for the OLPC, some new drivers and many small improvements. Here is the full list of changes."

An anonymous reader writes "derStandard.at has an extensive interview with Ubuntu-founder Mark Shuttleworth, in which he seems to be pushing for a switch to QT in the GNOME-project: 'I think it would be perfectly possible to deliver the values of GNOME on top of QT.' He goes on to talk about Apple as an 'innovation leader' and problems with Hardy Heron."

jammag writes "According to Matt Hartley, many Linux desktop users don't like to admit that there's scads of closed source code commonly used with the Linux desktop. Hartley points to examples like proprietary drivers, the popularity of Skype among Linux users (in preference to the open source Ekiga), and the use of Wine. He concludes that, hey, if the code works, use it — a stance that won't sit well with purists. But his article raises the question: is it better to embrace some closed source fixes, and so create a larger user base, or to remain pure, and keep Linux for the specialists?"

AdamWill writes "The Mandriva Linux 2009 Spring Alpha 2, marking the first public pre-release of the upcoming Mandriva Linux 2009. This alpha introduces several significant changes, most obviously the inclusion of KDE 4 — 4.1 beta 2, specifically — as the default version of KDE, and the latest development version of GNOME, 2.23.4. The kernel has also been updated to release 2.6.26rc7. Another feature of interest to many users will be the addition of orphan package tracking (and optional automatic removal) to the urpmi package manager. Of course, many applications have been updated (although the default version of Mozilla Firefox is still currently 2.0.x), and most of the distribution has been rebuilt with a new GCC version, 4.3. Mandriva warns that this is a true alpha, likely to contain many bugs related to the new version of KDE. Please install it only in a test environment, and especially do not use it as an upgrade from any earlier Mandriva Linux release."

sammydee writes "Phoronix reports that GPU based video decoding acceleration will be implemented in Gallium3d sometime this year. Drivers currently using Gallium3d include the open source nouveau driver for NVIDIA cards and experimental Intel GMA drivers. This is definitely good news for anybody who has ever tried to play high-definition 1080p content on any CPU older than about a year."

An anonymous reader writes "Researchers from the University of Arizona have released a study that takes a look at the security of ten popular package managers. They were able to show all ten were vulnerable to attacks from a mirror or man-in-the-middle that allow an attacker to (along with other things) crash the system or obtain root access. Furthermore, the researchers created a fictitious administrator and company name and were able to lease a server and get it listed as an official mirror for all the distributions they tried (Ubuntu, Debian, Fedora, CentOS, and OpenSUSE). This raised the question: What keeps you up at night, the thought of attacks on your package manager or previously discussed and patched vulnerability in DNS?" justin samuel (one of the Arizona researchers) also points out a synopsis on CERT's blog.

benuski writes "Today at GUADEC, the Gnome User and Developer European Conference, the gtk+ team announced their plans for gtk+ 3.0; immediately after, the Gnome release team announced their plans for Gnome 2.30 to be changed into Gnome 3.0. This would mean a release date a year and a half to a year in the future. Details are short at the moment, but the Gnome team seems to be following in KDE's footsteps, but hopefully will avoid the problems that plagued KDE 4.0's release."