Trailrunner7 (1100399) writes "Perhaps no company has been as vocal with its feelings about the revelations about the NSA's collection methods as Google has, and the company has been making a series of changes to its infrastructure in recent months to make it more difficult for adversaries to snoop on users' sessions. The biggest of those changes landed Thursday when the company switched its Gmail service to HTTPS only, enforcing SSL encryption on all Gmail connections. The change is a significant one, especially given the fact that Google also has encrypted all of the links between its data centers. Those two modifications mean that Gmail messages are encrypted from the time they leave a user's machine to the time they leave Google's infrastructure. This makes life much more difficult for anyone—including the NSA–who is trying to snoop on those Gmail sessions." GMail also does TLS for SMTP, but regrettably Talk (what's left of it) does not do TLS for XMPP server-to-server connections, effectively forcing XMPP server admins to lower their security if they want to federate with Google.

waderoush (1271548) writes "A blog post at OLPC News last week went viral with the claim that the nine-year-old One Laptop Per Child project is dead. Media outlets quickly controverted the assertion, but the response from the OLPC Association itself was brief, saying that its mission is 'far from over' and citing ongoing projects to distribute laptops in Central America. In a more lengthy Q&A this week, OLPC chairman and CEO Rodrigo Arboleda says the organization has achieved many of its goals, including demonstrating the value of the 'Constructionist' 1:1 learning philosophy originally espoused by Negroponte. With 2.5 million laptops distributed so far, the OLPC vision is 'on track to being fully realized,' Arboleda says. He sees 'commercial greed' and a 'status-quo mentality' within ministries of education and teachers' unions as the main hurdles holding back faster progress."

Related to yesterday's story about the NSA, Advocatus Diaboli (1627651) writes with this excerpt from The Guardian: "Rajesh De, the NSA general counsel, said all communications content and associated metadata harvested by the NSA under a 2008 surveillance law occurred with the knowledge of the companies – both for the internet collection program known as Prism and for the so-called 'upstream' collection of communications moving across the Internet. ... nearly all the companies listed as participating in the program – Yahoo, Apple, Google, Microsoft, Facebook and AOL – claimed they did not know about a surveillance practice described as giving NSA vast access to their customers’ data. Some, like Apple, said they had 'never heard' the term Prism. De explained: 'Prism was an internal government term that as the result of leaks became the public term,' De said. 'Collection under this program was a compulsory legal process, that any recipient company would receive.'"

Via Bits from Debian, comes news that the security team is considering adding a Long Term Support suite for Squeeze (Debian 6) after Jessie (Debian 8) is released sometime next year. From the mailing list post: "At the moment it seems likely that an extended security support timespan for squeeze is possible. The plan is to go ahead, sort out the details as as it happens, and see how this works out and whether it is going to be continued with wheezy. The rough draft is that updates will be delivered via a separate suite (e.g. squeeze-lts), where everyone in the Debian keyring can upload in order to minimise bottlenecks and allow contributions by all interested parties. Some packages will be exempted upfront due to their volatile nature (e.g. some web applications) and others might be expected to see important changes. The LTS suite will be limited to amd64 and i386. The exact procedures will be sorted out soon and announced in a separate mail. ... It needs to be pointed out that for this effort to be sustainable actual contributions by interested parties are required. squeeze-lts is not something that will magically fall from the sky. If you're dependent/interested in extended security support you should make an effort to contribute." If successful, the LTS idea would possibly be carried over to Wheezy. With all of the changes coming in Jessie and its aggressive release schedule, this sysadmin really likes the idea of having a bit more breathing room for updating infrastructure between releases. The email also contains a bunch of other info on changes coming to the security process.

In related news, the Debian Installer team announced the first alpha of debian-installer for Jessie. Just the installer, not the distro as a whole (Jessie will be frozen in November). XFCE remains the default desktop, ia64 was kicked out of the archive, and a few new ARM variants are supported.

Rambo Tribble (1273454) writes "Coronal mass ejections, with severity comparable to the 1859 Carrington event, missed Earth by only 9 days in 2012, according to researchers. The Carrington event caused widespread damage to the telegraph system in the U.S., and a similar occurrence would be devastating to modern electronics, it is thought. From the Reuters article, 'Had it hit Earth, it probably would have been like the big one in 1859, but the effect today, with our modern technologies, would have been tremendous.' The potential global cost for such damage is pegged at $2.6 trillion."