×
Security

User Forks FileZilla FTP Client After Getting Hacked (filezillasecure.com) 166

Slashdot reader Entropy98 writes: A frustrated FileZilla user took matters into his own hands after getting hacked due to the fact that his saved passwords were being saved in plain text files. Despite years of numerous requests over almost 10 years the FileZilla devs refused to add a Master Password option to encrypt the stored passwords. Finally fed up one user forked FileZilla and created FileZilla Secure with the Master Password option.
Operating Systems

Mythbuntu Linux Has Been Discontinued (softpedia.com) 49

"Mythbuntu as a separate distribution will cease to exist. We will take the necessary steps to pull Mythbuntu specific packages from the repositories unless someone steps up to take these packages over," read Friday's announcement. prisoninmate writes: Mythbuntu was an operating system based on the widely-used Ubuntu Linux distro and built around the MythTV free and open source digital video recorder (DVR) project... The Mythbuntu team recommends users who want to use Mythbuntu to install the latest release of the Xubuntu Linux operating system and then add the Mythbuntu PPA (Personal Package Archive), which will continue to provide the latest MythTV releases and other related packages...

The first release of the OS was back when Ubuntu 7.10 (Gutsy Gibbon) was announced, and the last one was Mythbuntu 16.04.1 LTS (Xenial Xerus). From this point...there will be no new ISO images anymore. Also, the mythbuntu-desktop and Mythbuntu-Control-Centre packages are now discontinued and won't be available from the Ubuntu repositories anymore. However, users will still be able to install the MythTV software and configure it as they see fit.

Open Source

US Government Launches Code.gov To Showcase Its Open Source Software (venturebeat.com) 57

An anonymous reader shares a VentureBeat report: The White House has announced the launch of Code.gov, a website that shows off U.S. government open-source projects and offers relevant resources for government agencies. By launching this site the White House is hoping to improve public access to the government's software and encourage the reuse of software across government agencies. The launch comes four months after the White House introduced the Federal Source Code policy, which specifically mandates that government agencies "make custom-developed code available for Government-wide reuse and make their code inventories discoverable" at Code.gov, with certain exceptions. The new site already has almost 50 code repositories from more than 10 agencies, U.S. chief information officer Tony Scott wrote in a blog post.
Open Source

Wordpress Founder Accuses Wix Of Stealing Code (ma.tt) 176

An anonymous reader writes: "Wow, dude I did not even know we were fighting," Wix CEO Avishai Abrahami posted on the company's blog Saturday -- responding to Wordpress creator Matt Mullenweg, who on Friday accused Wix of stealing their code. "The claim is that the Wix mobile apps distribute GPL code and aren't themselves GPL, so they violate the license," Mullenweg wrote.

Abrahami argued that "Everything we improved there or modified, we submitted back as open source," adding "we will release the app you saw as well... " Mullenweg responded "It appears you and [lead engineer] Tal might share a misunderstanding of how the GPL works," ultimately adding "software licensing can be tricky and many people make honest mistakes."

Wix had also argued they're giving back to the open source community by listing 224 public projects on their GitHub page. "Thank you for the offer to use them," Mullenweg responded. "If we do, we'll make sure to follow the license you've put on the code very carefully."
Education

How Linux Saved A School's Failing Windows Laptop Program (opensource.com) 255

OpenSource.com reports on a Minnesota school's 1:1 program -- one device per child -- where "Lots of the Windows laptops were in very poor condition and needed to be replaced." An anonymous reader writes: An Indiegogo campaign triggered extra money and donations of laptops, allowing the school's Linux club to equip much of the school with Linux laptops. "When you're using open source software you're free to use operating systems and application software without the hassle of license keys or license tracking inherent with proprietary software," says Stu Keroff, the school's technology coordinator. "This allows a school to experiment [and] gives them the freedom to make mistakes...

But there's also another benefit. "By empowering the students to be part of that process we were able to get more done, and to generate more excitement about the learning that the students were taking part in." There's now a waiting list for the school's Linux club, where they'd planned to cap membership at 35...until 62 students applied. Instead, they found themselves creating two Linux clubs, one for the sixth graders, and one for the 7th and 8th graders.

And to answer the obvious question -- they're using Ubuntu, with the Unity desktop.
AI

Is Microsoft Mainstreaming Machine Learning? (networkworld.com) 51

Tuesday Microsoft updated their open source Microsoft Cognitive Toolkit (CNTK), adding support for both C++ and Python. "This announcement is more than a point release..." argues Network World. "It's the recognition of AI and machine learning as the next big platform after mobile." This announcement represents a shift in Microsoft's customer focus from research to implementation... The toolkit is a supervised machine learning system in the same category of other open-source projects such as Tensorflow, Caffe and Torch. Microsoft is one of the leading investors in and contributors to the open machine learning software and research community. A glance at the Neural Information Processing Systems conference reveals that there are just four major technology companies committed to moving the field of neural networks forward: Microsoft, Google, Facebook and IBM.
A Microsoft engineer described CNTK as "democratizing AI," according to Microsoft's announcement, which also notes that their toolkit "has been optimized to best take advantage of the NVIDIA hardware and Azure networking capabilities that are part of the Azure offering."
Open Source

Linux Kernel 4.7 Reaches End of Life, Users Urged To Move To Linux 4.8 (softpedia.com) 77

prisoninmate writes: The Linux 4.7 kernel branch officially reached end of life, and it has already been marked as EOL on the kernel.org website, which means that the Linux kernel 4.7.10 maintenance update is the last one that will be released for this branch. It also means that you need to either update your system to the Linux 4.7.10 kernel release or move to a more recent kernel branch, such as Linux 4.8. In related news, Linux kernel 4.8.4 is now the latest stable and most advanced kernel version, which is already available for users of the Solus and Arch Linux operating systems, and it's coming soon to other GNU/Linux distributions powered by a kernel from the Linux 4.8 series. Users are urged to update their systems as soon as possible.
Open Source

Fedora 25 Beta Linux Distro Now Available For Raspberry Pi (betanews.com) 52

Slashdot reader BrianFagioli writes: Fedora 25 Beta Workstation is now available for both the Raspberry Pi 2 and Raspberry Pi 3. In addition to the Workstation image, Fedora 25 Beta Server is available too. Owners of ARMv6-powered Pi models, such as the Pi Zero, are out of luck, as the operating system will not be made available for them.
Peter Robinson (from the Fedora release engineering team) writes, "The most asked question I've had for a number of years is around support of the Raspberry Pi. It's also something I've been working towards for a very long time on my own time... The kernel supports all the drivers you'd expect, like various USB WiFi dongles, etc. You can run whichever desktop you like or Docker/Kubernetes/Ceph/Gluster as a group of devices -- albeit it slowly over a single shared USB bus!"
Encryption

VeraCrypt Security Audit Reveals Many Flaws, Some Already Patched (helpnetsecurity.com) 75

Orome1 quotes Help Net Security: VeraCrypt, the free, open source disk encryption software based on TrueCrypt, has been audited by experts from cybersecurity company Quarkslab. The researchers found 8 critical, 3 medium, and 15 low-severity vulnerabilities, and some of them have already been addressed in version 1.19 of the software, which was released on the same day as the audit report [which has mitigations for the still-unpatched vulnerabilities].
Anyone want to share their experiences with VeraCrypt? Two Quarkslab engineers spent more than a month on the audit, which was funded (and requested) by the non-profit Open Source Technology Improvement Fund "to evaluate the security of the features brought by VeraCrypt since the publication of the audit results on TrueCrypt 7.1a conducted by the Open Crypto Audit Project." Their report concludes that VeraCrypt's security "is improving which is a good thing for people who want to use a disk encryption software," adding that its main developer "was very positive along the audit, answering all questions, raising issues, discussing findings constructively..."
Ubuntu

Canonical Names Ubuntu Linux 17.04 'Zesty Zapus' (betanews.com) 67

"Linux distributions and silly names go together like peanut butter and jelly," notes BetaNews. BrianFagioli writes: One of the most well-known Linux distributions to use funny names is Ubuntu. It famously uses the convention of an adjective and a lesser-known animal, each starting with the same letter... For example, Ubuntu 16.10 uses the letter "Y" -- "Yakkety Yak". The next version of the operating system will use the letter "Z" [and] Canonical has chosen "Zesty Zapus"... It is apparently a type of jumping mouse...

"As we come to the end of the alphabet, I want to thank everyone who makes this fun. Your passion and focus and intellect, and occasionally your sharp differences, all make it a privilege to be part of this body incorporate. Right now, Ubuntu is moving even faster to the centre of the cloud and edge operations. From AWS to the zaniest new devices, Ubuntu helps people get things done faster, cleaner, and more efficiently, thanks to you...", says Mark Shuttleworth, CEO, Canonical... "we are a tiny band in a market of giants, but our focus on delivering free software freely together with enterprise support, services and solutions appears to be opening doors, and minds, everywhere. So, in honour of the valiantly tiny leaping long-tailed over the obstacles of life, our next release which will be Ubuntu 17.04, is hereby code named the Zesty Zapus".

My favorite was Xenial Xerus.
Open Source

Blockchain Platform Developed by Banks To Be Open-Source (reuters.com) 32

A blockchain platform developed by a group that includes more than 70 of the world's biggest financial institutions is making its code publicly available, in what could become the industry standard for the nascent technology, reports Reuters. From the article: The Corda platform has been developed by a consortium brought together by New-York-based financial technology company R3. It represents the biggest shared effort among banks, insurers, fund managers and other players to work on using blockchain technology in the financial markets. Blockchain, which originated in the digital currency bitcoin, works as a web-based transaction-processing and settlement system. It creates a "golden record" of any given set of data that is automatically replicated for all parties in a secure network, eliminating any need for third-party verification. Banks reckon the technology could save them money by making their operations faster, more efficient and more transparent. They are racing to build products using the technology that will generate new revenue, with dozens of patent applications filed for blockchain-based products by Wall Street's top lenders. R3 says it hopes its platform will become the industry standard, although its intention is indeed for firms to build products on top of it.
Facebook

The White House Open Sources President Obama's Facebook Messenger Bot To 'Bring the Gov't To You' (whitehouse.gov) 37

The White House has open sourced the code for President Obama's Facebook Messenger bot in a hope that this will help other governments and developers build similar services. These services will ideally foster similar connections with their citizens with significantly less upfront investment. From the official post: It's also an important part of furthering our mission to "meet the public where they are." Millions of people contact their friends and family using Facebook Messenger. Why shouldn't they be able to contact the White House, too? And President Obama really reads these messages. Since 2009, he's made it part of his daily routine to read 10 letters sent to him by citizens -- something he refers to as the best part of his day. [...] To be specific, we are open-sourcing a Drupal module, complete with easy steps and boiler plate code. This will enable Drupal 8 developers to quickly launch a Facebook Messenger bot. We also left a few lines in the repository describing our hopes for the future of the code and encouraging members of the developer community to get involved.
Open Source

France Adds Source Code To List of Documents Covered by Freedom of Information Laws (pcworld.com) 25

An anonymous reader writes: French freedom of information law now treats source code as disclosable in the same way as other government records. The new "Digital Republic" law took effect Saturday, with its publication in France's Official Journal. It adds source code to the long list of government document types that must be released in certain circumstances: dossiers, reports, studies, minutes, transcripts, statistics, instructions, memoranda, ministerial replies, correspondence, opinions, forecasts and decisions. But it also adds a new exception to existing rules on access to administrative documents and reuse of public information, giving officials plenty of reasons to refuse to release code on demand. These rules already allow officials to block the publication of documents they believe threaten national security, foreign policy, personal safety, or matters before court or under police investigation, among things. Now they can oppose publication if they believe it threatens the security of government information systems.
Open Source

Physically-Secure 'ORWL' Computer Expands Its Open Source Policy (crowdsupply.com) 68

Last month DESIGN Shift successfully crowdfunded their physically-secure (and open source) ORWL computer. But this week long-time Slashdot reader Dr. Crash raised concerns that "releasing only the equivalent of 'assembly code' (PDFs of the schematic, Gerber files) and requiring an NDA for the BIOS and mechanical security just doesn't cut it... " Slashdot contacted the company, which two hours ago posted a response: After feedback from some of you and more internal discussion, we've decided to open the schematics source files under CC-BY-NC-SA 4.0... Our reasoning is that the benefit of being able to much more easily inspect the inner workings of ORWL far outweighs the minimal risk of infringement by a third party. Even if a third party does decide to copy ORWL for profit, they would quickly discover the real work is in the layout, not the schematic, as is the case in most hardware...

[T]he firmware will be licensed under GPL 3 rather than CC-BY-SA 4.0. This change is in line with the Creative Commons's own recommendations regarding software licensing. We also realized that some of our firmware uses libraries provided under NDA. We will clearly identify which components are protected under NDA and how to go about securing such an NDA.

They've already released a .zip file of their schematics, and in addition announced that "we're committing to opening the PCB layout sources once we've sold a total of 3,000 ORWL unit." Their announcement includes a link for feedback from the community.
Open Source

FreeBSD 11.0 Released (freebsdfoundation.org) 121

Long-time Slashdot reader basscomm writes, "After a couple of delays, FreeBSD 11 has been released. Check out the release notes here." The FreeBSD Foundation writes: The latest release continues to pioneer the field of copyfree-licensed, open source operating systems by including new architecture support, performance improvements, toolchain enhancements and support for contemporary wireless chipsets. The new features and improvements bring about an even more robust operating system that both companies and end users alike benefit greatly from using.
FreeBSD 11 supports both the ARMv8 and RISC-V architectures, and also supports the 802.11n wireless networking standard. In addition, OpenSSH has been updated to 7.2p2, and OpenSSH DSA key generation has been disabled by default, so "It is important to update OpenSSH keys prior to upgrading."
Google

Google Releases An Open Source Font That Supports 800 Languages (googleblog.com) 175

An anonymous Slashdot reader quotes Hot Hardware: It's been working on the project over the past five years in collaboration with Monotype in hopes of eradicating so-called "tofu" -- the blank boxes you see when a PC or website can't display a particular text -- from the web. Noto, or No more tofu, is Google's answer, and it's available now to download...

"We are thrilled to have played such an important role in what has become one of the most significant type projects of all time," said Scott Landers, president and CEO of Monotype... Monotype played the biggest role, though Google also collaborated with Adobe and had a network of volunteer reviewers. As far as Monotype is concerned, Noto is one of the expansive typography projects ever undertaken.

There's 110,000 characters, and Google says the project "required design and technical testing in hundreds of languages."
Government

One U.S. Election-System Vendor Is Using Developers in Serbia (computerworld.com) 83

The Open Source Election Technology Foundation is trying to move U.S. voting machines from "proprietary, vendor-owned systems to ones that are owned 'by the people of the United States.'" But in the meantime, Slashdot reader dcblogs brings this report from ComputerWorld: One major election technology company, Dominion Voting Systems, develops its systems in the U.S. and Canada but also has an office in Belgrade, Serbia. It was recently advertising openings for four senior software developers in Belgrade... Dominion said it takes measures "to ensure the accuracy, integrity and security of the software we create for our products...."

Alan Paller, president and director of research at the Sans Technology Institute...said that "one shouldn't feel complacent about maintaining software development and manufacturing all within the United States because foreign agencies have successfully placed technically competent spies on the payroll of American technology companies." But Suzanne Mello-Stark, a forensic computer scientist at Worcester Polytechnic Institute with a focus on voting machines, wants software and hardware transparency in voting systems. "The systems are proprietary and we don't know what the code looks like," said Mello-Stark.

Open Source

After 22 Years, 386BSD Gets An Update (386bsd.org) 83

386BSD was last released back in 1994 with a series of articles in Dr. Dobb's Journal -- but then developers for this BSD-based operating system started migrating to both FreeBSD and NetBSD. An anonymous Slashdot reader writes: The last known public release was version 0.1. Until Wednesday, when Lynne Jolitz, one of the co-authors of 386BSD, released the source code to version 1.0 as well as 2.0 on Github.

386BSD takes us back to the days when you could count every file in your Unix distribution and more importantly, read and understand all of your OS source code. 386BSD is also the missing link between BSD and Linux. One can find fragments of Linus Torvalds's math emulation code in the source code of 386BSD. To quote Linus: "If 386BSD had been available when I started on Linux, Linux would probably never had happened."

Though it was designed for Intel 80386 microprocessors, there's already instructions for launching it on the hosted hardware virtualization service Qemu.
Software

Emacs and Vim Combined In New 'Spacemacs' Distro (spacemacs.org) 130

Long-time Slashdot reader Qbertino brings news of a new text editor offering what he calls "a modern, hipster-compliant makeover" of both Emacs and Vim: As a classic, perhaps the classic GNU project, Emacs has been marred by abysmal branding and marketing...that has improved slightly but might still leave some people unsatisfied [and] has also been engulfed in an eternal war with Vim, the editor of the beast. Mope no further, salvation is nigh! Spacemacs is a new Emacs distribution that aims to combine all the goodies of Emacs and Vim and then some...
Version .2 of Spacemacs was released this week "with more than 1700 commits since the last major version released in January 2016." With nearly 500 contributors on GItHub, Spacemacs plans to be "crowd-configured" with "curated packages tuned by power users," and is offering features like a real-time display of available key bindings, a simple query system for layers and packages, and of course, a clearly defined set of conventions.
Google

Google Releases Open Source 'Cartographer' (betanews.com) 26

BrianFagioli quotes a report from BetaNews: Machine learning and vision are essential technologies for the advancement of robotics. When sensors come together, they can enable a computer or robot to collect data and images in real-time. A good example of this technology in real-world use is the latest Roomba vacuums. As the robot cleans your dirty floor, it is using sensors combined with a camera to map your home. Today, Google releases Cartographer -- an open source project that developers can use for many things, such as robots and self-driving cars. "We are happy to announce the open source release of Cartographer, a real-time simultaneous localization and mapping (SLAM) library in 2D and 3D with ROS support. SLAM is an essential component of autonomous platforms such as self driving cars, automated forklifts in warehouses, robotic vacuum cleaners, and UAVs," says Google in a blog post. "Our focus is on advancing and democratizing SLAM as a technology. Currently, Cartographer is heavily focused on LIDAR SLAM. Through continued development and community contributions, we hope to add both support for more sensors and platforms as well as new features, such as lifelong mapping and localizing in a pre-existing map."

Slashdot Top Deals