Thom Holwerda Archive

OS Group of Dresden University Releases Live Demo CD

The OS Group of Technische Universitaet Dresden (TUD:OS) has released a live demo CD of their custom operating system project. TUD:OS is a microkernel-based operating system targeted at secure and real-time systems. Some highlights of the demo CD include a new approach for securing graphical user interfaces called Nitpicker, multiple L4Linux kernels running at the same time on top of a custom L4 microkernel, a survey on the reuse of device drivers on the TUD:OS platform, native Qt-applications, the DOpE windowing system, games, and much more. More information is available at the demo CD website. And yes, boys and girls, there are screenshots, too.

Ekiga 2.00 Released

"Ekiga is a SIP and H.323 compatible VoIP, IP Telephony, and Video Conferencing application that allows you to make audio and video calls to remote users with SIP or H.323 hardware and software. It supports all modern VoIP features for both SIP and H.323. Ekiga is the first Open Source application to support both H.323 and SIP, as well as audio and video. Ekiga was formerly known as GnomeMeeting. To get started: Download Ekiga for your distribution and get a free SIP-Address at ekiga.net."

Implementing IPsec on OpenBSD

"This IPv4-centric document is meant both as an overview to the IP Security Protocol (IPsec) and as an introduction to OpenBSD's implementation of it. By the end the reader will have learned how to set up various types of IPsec installations on OpenBSD. Each type of installation includes guidance regarding firewall protection using, of course, the unsurpassed OpenBSD packet filter."

No Reasons Not to Be Dual Booting Linux and OSX

Today, I decided to give Linux a try on my iBook. I've been wanting Linux on my iBook for a long time, but I've simply never had the time to do it. I ran the occasional PowerPC live CD, but live CD's are far cries from the real, installed thing. A second showstopper was that suspend never really worked-- and I cannot use my iBook without suspend. After trying out a new live CD yesterday, I found out that suspend on lid closure now worked mighty fine on Linux/PPC; hence, it was time to do the real thing. And oh how I was left surprised. Note: This is this week's Sunday Eve Column.

‘Root’ Password Readable in Clear Text on Ubuntu Breezy

A major, critical bug and possible security threat has been discovered in Ubuntu Breezy. Apparently, the 'root' password (not actually the root password because Ubuntu uses sudo) gets written into the installer's log files in clear text, and can be read by any account on the Ubuntu machine. The bug was first discovered and reproduced on the Ubuntu forums. The bug does not seem to affect Dapper, however, users upgrading from Breezy to Dapper might still be at risk because the log files are not modified. Update: Bug is fixed. Please upgrade.

MS Willing to License Windows to Apple; Support Problem Arises

Dan Kusnetzky, Apple program vice president, spoke to PC Pro News at IDC and said that Apple has no plans to support booting into Vista on the new Intel Macs. However, a Microsoft spokesman said that Microsoft would have no problem granting a Windows licence to Apple, in exactly the same way it currently provides licences to Dell and HP: "Microsoft would support Apple the same way it supports every other PC manufacturer." But Dan Kusnetzky said it would be difficult to know who would support that machine if Windows was running on a Mac. However, "no doubt someone will work out how to run Windows on the Mac, even if Apple doesn't technically support that."

Vista vs. OSX: a Superficial Look

OSNews regular Kaiwai takes a superficial look at Vista and MacOS 10.4/10.5, and concludes: "To say that the changes in Windows Vista are only skin deep is missinformed to say the least; spend some time reading those sources I have listed, and even if you don't have a desire to run Windows Vista or particular interested in Windows based technology, it does provide some good resources explaining the changes and rationale behind those choices made. So from a purely technical point of view, Windows Vista is actually looking a whole lot more interesting than what the detractors have been saying in the computer press about the current direction."

The Design of OpenBGPd

"I started OpenBGP two years ago, after getting completely fed up with Zebra, which we were running before. There were lots of bugs, bad configuration language, performance problems, and since I don't speak Japanese - I had problems understanding the documentation. Zebra makes heavy use of cooperative threads, which leads to it's main problem: combined with the central event queue, Zebra can lose sessions while busy. Zebra successor, Quagga, caught up and apparently fixed many of the bugs. However, they still used the Zebra's design, which I think is wrong. So, the issues are kind of unfixable."

Ubuntu Dapper Drake Flight 5 Released

The 5th preview release of Ubuntu Dapper Drake is out on the mirrors. As usual, there are both install and live CD's for PowerPC, x86, and x86-64. "We are now in the final stages of Dapper Drake development. Everything is stabilizing, and Ubuntu 6.04 will certainly be a top-notch professional OS. Now that all of the lower level improvements have been made, it is time to close the hood and rub on a coat of wax. With Flight 5 comes a new and improved Human look-and-feel, a few new GUI power tools, and much more." Update: Screenshot tour.

VM Rootkits: The Next Big Threat?

Lab rats at Microsoft Research and the University of Michigan have teamed up to create prototypes for virtual machine-based rootkits that significantly push the envelope for hiding malware and that can maintain control of a target operating system. The proof-of-concept rootkit, called SubVirt, exploits known security flaws and drops a VMM (virtual machine monitor) underneath a Windows or Linux installation. Once the target operating system is hoisted into a virtual machine, the rootkit becomes impossible to detect because its state cannot be accessed by security software running in the target system.

eEye Flags iTunes, QuickTime Flaws

Researchers at eEye Digital Security have pinpointed two high-risk vulnerabilities in iTunes and QuickTime that could put millions of Windows and Mac users at risk of code execution attacks. eEye issued two alerts on its upcoming advisories web page to warn of heap overflows and integer overflows in the two Apple products. eEye said the vulnerabilities affect QuickTime/iTunes on Windows NT, Windows 2000, Windows XP and Windows Server 2003. Mac OS X users are also vulnerable to the code execution attacks.

SGI Moving to Mysterious Altism Line

SGI is not very willing to communicate about any strategic changes it is plannign to make in their product line up. "Thankfully, we happen to know a couple of SGI's largest customers - the kind of folks who actually receive information from the graphics beast. In order to help out the rest of you poor, informationless sods, we're going to don SGI's marketing cap for the moment and get out the good word to customers large and small. Here's where SGI is heading according to the insiders."

IBM Germany Refutes Linux Migration Story

IBM Germany has refuted a Groklaw report that the division has decided to migrate Windows desktops to Linux rather than upgrade them to Vista. Groklaw's story was based on statements reportedly made by an IBM sales executive in a presentation at LinuxForum 2006. This morning, Hans Rehm, of IBM Germany's Press Relations department, emailed DesktopLinux.com the following, somewhat ambiguous, statement.

How to Deploy GTK+

"This article covers everything you need to get your product to the user - that is, you learn how to deploy a GTK+ application. Being unique is usually a good thing, but not in the case of libraries. With software, wider popularity means more reviews, more bugs reported (and, therefore, fixed), and a better chance that different cases and unusual circumstances are tested. All this generally leads to better and easier-to-use libraries. Fortunately, GTK+ is a big player here and one of the more widely used software packages."

Free Software History, Evolution in the Former Soviet Union

"Former Soviet Union is a term that often makes people think of a somehow original concept of freedom and democracy. You can observe some heritage looking at the facts of today's Belarus and Turkmenistan. Anyway, even there, people always have had the will to express their ideas and opinions. Think, for instance, of the samizdat, or of the dissidents. How could native geeks and computer scientists/engineers miss the opportunity to contribute to the free software movement as another expression of freedom and democracy? In this article, hopefully the first of a short series, I will try to outline the rise and growth of free software in the former USSR by interviewing some of the key individuals."

Shuttleworth Proposes Delaying Dapper; Ubuntu Runs on Niagara

"I'm writing to propose a six week delay in the release date of Dapper, in order to do additional validation, certification, localisation, and polish. Work towards our feature goals for Dapper is very much on target. However, in some senses Dapper is a 'first' for us, in that it is the first 'enterprise quality' release of Ubuntu, for which we plan to offer support for a very long time. I, and others, would very much like Dapper to stand proud amongst the traditional enterprise linux releases from Red Hat, Debian and SUSE as an equal match on quality, support and presentation." And on a related note, Ubuntu now runs on Sun's UltraSPARC T1 (Niagara) processor too.

Mac Minis Geekbenched

"The only benchmark where the PowerPC-based Mac mini outperformed the Intel-based Mac mini was Stdlib Allocate, which is also the only benchmark where the PowerBook G4 outperformed the MacBook Pro. The Stdlib Allocate benchmark depends more on standard library performance than raw hardware performance. It's also worth mentioning that the Intel-based Mac minis were, for the most part, faster than our baseline system (a PowerMac G5 1.6GHz). Yikes. Overall, we're impressed with the Intel-based Mac mini's performance."

Review: SimplyMEPIS 3.4-3

MadPenguin reviews SimplyMEPIS, and concludes: "The bottom line here is when reviewing a desktop Linux candidate, I expect to have a certain amount of functionality at hand, and a certain amount of polish. SimplyMEPIS 3.4-3 lacks both in my opinion. If you're looking for a fundamental installation and don't mind spending a bunch of time fixing/adjusting things that normally would have been done for you already, MEPIS might be for you. If you're looking for a desktop that pretty much works out of the box, handles removable media with grace, and isn't going to rob you of productive time, then I'd recommend sticking with something like Fedora, Ubuntu, Mandriva, or SUSE."