mbanck writes "James Troup (part of the Debian System administration team) has published more information on the recent compromise of four debian.org machines. The attack vector seemed to be a sniffed password of an unprivileged account, from which the attacker somehow managed to gain root and install the suckit rootkit and crack the other machines. As the machines were fairly uptodate with respect to security, an as-of-yet unknown local root exploit might be in the wild, so keep an eye on your boxen.Note that the main ftp archive running on a sparc machine was not compromised, so the exploit might not yet be ported to non-i386 architectures."

emgarf writes "Today, on the first anniversary of the MEPIS Project, MEPIS LLC announced the release of MEPIS Linux 2003.10 for Pentium processors. MEPIS Linux is a desktop Linux that is designed for both personal and business users. MEPIS Linux offers a live/installation/recovery CD, advanced automatic hardware configuration, XP/NTFS support, ACPI power management, WiFi support, personal firewall, KDE 3.1.4, OpenOffice 1.1, Mozilla 1.5, and much more."

smarquard writes "Open source has arrived in Africa in a big way. Idlelo: First African Conference on the Digital Commons, in almost-the-southern-tip-of-Africa Cape Town from 11-15 Jan 04, has attracted a strong lineup of African OSS advocates, as well as international OSS and IPR figures like Richard Stallman (FSF), Loic Dachary (FSF France), Rishab Ghosh (Infonomics), Wendy Seltzer (EFF) and Dimo Calovski (UNCTAD). Could this be the turning point for a continent that least needs to be locked into paying inflated license fees to US corporations ? The conference is co-hosted by African OSS lobby group FOSSFA and the University of the Western Cape."

An anonymous reader writes "Linus Torvalds has released his final 2.6.0-test kernel, calling it the 'Beaver In Detox'. Following this release, Linus says that 2.6 development will be led by Andrew Morton. The kernel's name refers in jest to the previous release, which Linus had named "Stoned Beaver". It contains a fix for the aic7xxx driver, proper error handling in do_fork(), some firewire fixes, and correction of a few skbuff leakage points. Download it from a kernel.org mirror."

prostoalex writes "Open Source Development Labs announced a new initiative to increase customer confidence in using Linux in business. The initiative is launched in answer to legal claims by SCO Group. So far managers and developers around the world are supposed to boost their confidence in Linux with the help of this little poster, which explains the kernel development process."

Time Doctor writes "Linux and Mac gamers will be happy to hear that America's Army 2.0 is out of private beta, and available via mirrors at 3DGamers and HappyPuppy, among others. See this news post on the AA site for the gameplay changes." We covered the release of the Windows version of AA 2.0 a couple of weeks back, as this free FPS recruiting tool continues toward its goal of "providing civilians with an inside perspective and a virtual role in today's premiere land force, the U.S. Army."

jasonbowen writes "In this article from ZDnet, Redhat claims a 90% return subscription rate for its Enterprise line. Sounds like Redhat is doing just fine providing a quality product for people that want to pay the money for it." (And for people who don't want to pay money for it, too.)

Ridgelift writes "CRN is reporting the release of Linux 2.6.0 in mid-December. 'Torvalds, Linux's lead developer and now an OSDL Fellow, and Linux kernel maintainer Andrew Morton this week released the test10 version of Linux 2.6 after a three-year development effort. A final test11 version is expected before they sign off on the production version next month.' Get ready for 'major scalability improvements, faster performance, enhanced support for embedded systems and, to a lesser extent,' a kernel that 'supplies desktop systems with better USB and FireWire support.'"

DeckerEgo writes "InfoWorld reports on the Linux desktop and how Novell, Sun and RedHat (wha?) are working on making 2004 the year corporations start adopting open desktops. But which desktop? Most interesting to note is how Novell is planning to beef up the number of Ximian, Gnome, Mozilla and OpenOffice developers after its SuSE aquisition is complete. Does this mean that SuSE will stop being one of the best KDE distros out there and follow the way of the Gnome?"

ErrorBase writes "In this Infoworld article, Logan G. Harbaugh makes a great deal about an ancient (2.44) version of SpamAssassin comparing it with newer comercial variants. Quote : You get what you pay for. [...] However, it took more than 10 times as long to install and configure SpamAssassin as it did any of the other products. " Why did he not ask Kevin Railsback who had the whole thing working some while ago?)"

Ridgelift writes "The Open Source Development Labs have released a paper entitled SCO: Without Fear and Without Research [PDF, HTML version at the FSF] where Eben Moglen debunks SCO's claims to copyright infringement, and also discusses how they contradict themselves by citing that the GPL is both invalid and provides them legal protection. More information at the OSDL site and via an Internet.com article."

antrix angler writes "Linus Torvalds released the 2.6.0-test10 Linux kernel today, tentatively calling it the "stoned beaver" release. Linus plans to hand the kernel over to Andrew Morton in a few weeks, and then it will be up to Andrew to decide when we see the final 2.6.0 stable kernel. Download it from a mirror."

FrankoBoy writes "As announced on DistroWatch, Debian 3.0r2 has been released this weekend, with some security issues fixed... and Rock 'n Diamonds dropped because of license problems. Here's the official announcement. This release had been slowed by an attack on Debian boxes discussed Friday."

An anonymous reader writes "John Terpstra and Eric S. Raymond have started the ball rolling on LinuxWorld's poll of the community for what they think will happen in the world of Linux in 2004. Terpstra says 'I predict that during 2004 at least one significant USA government body will adopt Linux on the desktop.'" Depending on how you define "significant", this has already occurred.

null-und-eins writes "A new webservice offers automatic debugging of Linux binaries. It takes a (with "-g" compiled) binary and two invocations where one fails and the other doesn't. The service repeatedly runs the two programs and tries to find the smallest difference between the two that causes the failure. Nice google-like interface with statistics about its own performance."

securitas writes "CNet has published an interview with Caldera (now SCO Group) co-founder Ransom Love, in which he talks about the Novell acquisition of SuSE, Novell's Linux history, the early history of Caldera, the SCO-IBM lawsuit, his new role at Progeny and open standards. It's a good read that covers a lot of ground in a relatively short space."

The "Call for Questions" post for Mr. Szulik generated over 650 questions and comments, 32 of which were moderated +5 at the time we selected questions to send him. And unlike many CEO responses, Szulik's answers to the selected questions are his own, not PR-generated. (One clue is that they are not in perfect English, as interview responses or articles that are 'laundered' by PR or media relations departments almost always are.)

Sean was one of many to pass along the bad news from the debian-announce mailing list: "Some Debian Project machines have been compromised. This is a very unfortunate incident to report about. Some Debian servers were found to have been compromised in the last 24 hours. The archive is not affected by this compromise! In particular the following machines have been affected: 'master' (Bug Tracking System), 'murphy' (mailing lists), 'gluck' (web, cvs), 'klecker' (security, non-us, web search, www-master). Some of these services are currently not available as the machines undergo close inspection. Some services have been moved to other machines (www.debian.org for example). The security archive will be verified from trusted sources before it will become available again." They were going to announce 3.0r2 this morning; they've checked it and it's unaffected but obviously they're still postponing that release.

gnewton writes "One angle of Open Source software that perhaps has not been emphasised enough is how the lower cost of software and operating systems as compared to proprietary/commercial solutions can allow for greater creativity and actually open up markets and solutions that were previously unavailable, in the area of Recycling. This article talks about a new startup which recycles old LCDs into cool and fun digital picture frames."

Carl Lagoze points out that a pre-existing software project is already using the Fedora name, dating back to 1998. They're unhappy with Red Hat's claim to the name, and have objected.