Archive

Archive for the ‘Software’ Category

MorphOS 2.5 Released, Adds eMac Support

August 13th, 2010 js No comments

And the MorphOS team continues to expand their hardware support. They released MorphOS version 2.5 today, which adds support for Apple’s eMac computers (the 1.25Ghz models, the 1.42 models have not yet been tested). Of course, there’s also a whole load of fixes and improvements, too.

Link to the original site

Categories: Software Tags:

Native ZFS Port for Linux

August 13th, 2010 js No comments

Employees of Lawrence Livermore National Laboratory have ported Sun’s/Oracle’s ZFS natively to Linux. Linux already had a ZFS port in userspace via FUSE, since license incompatibilities between the CDDL and GPL prevent ZFS from becoming part of the Linux kernel. This project solves the licensing issue by distributing ZFS as a separate kernel module users will have to download and build for themselves.

Link to the original site

Categories: Software Tags: ,

NetBSD 5.1 RC2 Released

August 13th, 2010 js No comments

NetBSD 5.1 RC2 has been announced. A complete list of changes between 5.0 and 5.1 is available in diff format here for the more technical individuals. Fire up those VMs and give it a test run.

Link to the original site

Categories: Software Tags:

[Heads-UP] Sobre a falha do HSC no XP e no 2003

August 13th, 2010 js No comments

Este apontamento é dirigido, sobretudo, aos profissionais que gerem sistemas empresariais. Sobretudo, mas não só. Seguem as bullets:

  • O contexto: Estações com Windows XP e/ou servidores com Windows Server 2003;
  • O problema: Uma vulnerabilidade grave, passível de ser usada para executar código remotamente, no serviço Help and Support Center (HSC);
  • A nota oficial MS: 2219475;
  • O patch: Ainda não existe, nem foi estimada uma data para o seu lançamento;
  • Como contornar o problema: Há um conjunto de sugestões na nota oficial da Microsoft; e
  • A minha sugestão: Para além das recomendações da Microsoft, se não usam o HSC, e é muito provável que não usem, desactivem o serviço. Mesmo. Não é uma sugestão MS — é minha.

Para os utilizadores de máquinas pessoais, aqueles que não perceberam nada do que aqui foi escrito, se usam algum destes sistemas, peçam a alguém que saiba e siga as instruções anteriores.

Finalmente, uma nota adicional para justificar este apontamento: apesar de optar, normalmente, por não escrever sobre estas vulnerabilidades (porque já fazem parte dos processos normais de gestão da segurança em muitas organizações, e escrever sobre elas não acrescenta grande coisa), parece-me que esta é muito atractiva para quem faz programas maliciosos. E, como ainda não foi publicada uma correcção, parece-me importante prevenir desde já, mesmo cortando um bocado a direito, antes que seja explorada sem ter sido corrigida. Em relação à minha recomendação, no final, quando for publicada uma correcção, se o HSC for um serviço mesmo relevante, podem sempre activá-lo novamente.

Link to the original site

Categories: Security, Software Tags: , ,

Month of PHP Security Finds 60 Bugs

August 13th, 2010 js No comments

darthcamaro writes “More than 60 bugs were reported in PHP over the last 30 days by the Month of PHP Security project. Most of the flaws, however, are ones that developers themselves can protect against with proper coding practices, according to Andi Gutmans, CEO of commercial PHP vendor Zend. He argues that PHP security is a matter of setting expectations. In his view, PHP — like all development languages — is only as secure as the code developers write with it. ‘People should not expect PHP to be able to enforce security boundaries on a developer [who] has permissions to run custom PHP code,’ Gutmans said. ‘It’s an inherently flawed scenario — and it’s the wrong layer to protect in. People must rely on properly configured OS-level permissions for securing against untrusted developers.’ Gutmans also praised the MOPS effort for elevating the profile of PHP security throughout the community, and for responsibly alerting the PHP project first with the bugs they found.”

Read more of this story at Slashdot.

Link to the original site

Categories: Developement, Security Tags: ,

Ubuntu: We Have No Plans to Fork GNOME

August 13th, 2010 js No comments

Ubuntu’s community manager Jono Bacon talks in an interview with derStandard.at about the relationship between Ubuntu and GNOME, GNOME Shell, Unity and why the netbook market is that important to Canonical.

Link to the original site

Categories: Software Tags: , ,

Oracle Details Solaris 11, OpenSolaris’ Future Shaky

August 13th, 2010 js No comments

Due to me not working for OSNews these past eight weeks, I’ve been a bit out of the loop, as I didn’t really follow technology news. I did notice that a lot is going on in OpenSolaris land, and today, Oracle has outlined what it has planned for Solaris 11 – and according to some, the fears about OpenSolaris’ future were justified.

Link to the original site

Categories: Software Tags:

Google’s Chrome OS to Launch In Fall

August 5th, 2010 js No comments

Kidfork writes “On Wednesday Google’s vice president of product management said that this fall Google will launch Chrome OS to compete with Microsoft Windows. More than 70 million users already use the Chrome Browser, and Google expects at least 1 million users of the OS by day one of release.”

Read more of this story at Slashdot.

Link to the original site

Categories: Software Tags: ,

Linux Kernel 2.6.35 Released

August 5th, 2010 js No comments

eldavojohn writes “Linus has announced the release of 2.6.35 for people to download and test after he found not a lot of changes between this week and last. The big features to look out for include: ‘Transparent spreading of incoming network traffic load across CPUs, Btrfs improvements, KDB kernel debugger frontend, Memory compaction and Support for multiple multicast route tables’ as well as various performance and graphics improvements. Linus also praised the community saying that ‘regression changes only’ after rc1 improved this time around and gave numbers to back it up saying ‘in the 2.6.34 release, there were 3800 commits after -rc1, but in the current 35 release cycle we had less than 2000.’ Good to see the process is becoming more refined and controlled after the first release candidate — hopefully there’s no impending burnout.”

Read more of this story at Slashdot.


Link to the original site

Categories: Software Tags: ,

What’S New in Linux 2.6.35

August 5th, 2010 js No comments

Measures to support the power saving mechanisms of AMD graphics chips, network code optimizations for multi-core processors, features for de-fragmenting the working memory and an improved support of the power management and turbo features offered by modern processors are among the highlights of the new kernel version. After a development time of almost two-and-a-half months, Linus Torvalds has released version 2.6.35 of the Linux kernel.

Link to the original site

Categories: Software Tags: ,