Eugenia Loli Archive

Linux: We Have Met the Enemy, and He is Us

"Forget SCO & Microsoft. The single biggest thing keeping Linux from the desktop is Linux itself. It's time to stop adding new features, and finish what's there." Read the 3-page editorial at ExtremeTech. Our Take: While there is no such thing as "finished software", as software by definition can always be improved, it is true that Linux projects (especially desktop apps) need to outline and release full-featured, solid, well tested versions of their software and offer less smaller ones that require the user to constantly upgrade and be in a state of flactuation. What is needed in smaller projects are real release engineers that can outline goals and releases wisely (the Gnome project, PostgreSQL and Apache are good on that for example, smaller projects could learn a thing or two from these bigger projects).

Conectiva and Novell Form Service Partnership

Aiming to provide Linux users with industry acclaimed quality network services, Conectiva, leading company in Linux services in Latin America, has just announced partnership with Novell. From now on, Novell Nterprise Linux Services, which provides file, printing, message and directory management, will be supported and run on Conectiva Linux Enterprise Edition. The agreement also provides that both Conectiva and Novell shall work in close cooperation as a team to provide service to major Nterprise Linux clients.

OpenBSD: improper kernel bounds check; OS Fingerprinting in Firewall

OpenBSD's Todd Miller reports that an improper bounds check in the semget(2) system call can allow a local user to cause a kernel panic. No privilege escalation is possible, the attack simply runs the kernel out of memory. The bug was introduced in OpenBSD 3.3, previous versions of OpenBSD are unaffected. Earlier, Mike Frantzen has committed "Passive operating system fingerprinting" to PF which exposes the source host's OS to the filter language.