Home Blog Page 8735

Mandrake Linux Community Newsletter – Mandrake Clubhouse open

Author: JT Smith

MandrakeSoft is proud to announce the grand opening of the Mandrake
Linux Users Club “clubhouse” — a custom website where club members can
learn about club-related activities, take part in discussions, and enjoy
certain privileges.

We are happy to offer our members the ability to download applications 
which are normally only available as part of the Mandrake Linux Power 
Pack. New applications are being added every day, and by the end of the 
year most commercial applications from the 8.1 PowerPack should be 
available for download, followed by applications from the 8.0 and 7.2 
releases.

MandrakeSoft would like to thank the hundreds of Mandrake users who have 
joined the Users Club over the past two weeks -- your support is crucial 
to help MandrakeSoft keep its high-level of involvement in activities 
which do not provide any direct revenue, such as putting together the 
Mandrake Linux distribution & manuals while keeping them free of charge 
and easy to download; supporting Open Source projects; and providing 
high-quality news, documentation and support sites.

Visit the Mandrake Clubhouse at:
http://www.mandrakeclub.com/.
While the site is accessible to everyone, only registered members are
allowed to join the discussions, vote, download RPMs, etc.

Support your favorite distribution by joining the Mandrake Users Club
today!
http://www.linux-mandrake.com/en/club/

Many people have requested additional information about MandrakeSoft
and the Mandrake Linux Users Club. This datasheet was created to
provide answers to the most frequent questions.
http://www.mandrakelinux.com/en/club/

Category:

  • Linux

DRM patent means Microsoft just turned into big brother

Author: JT Smith

NewsFactor Network writes: “It has just come to light that Microsoft has been awarded a software patent for a “Digital Rights Management” operating system. This development shows us exactly where we as consumers stand. Microsoft doesn’t have to offer anything to the government; it only has to hold possession of a patent covering the “DRM” elements of its latest OS. In my opinion, this patent seems to provide an (almost) assured trajectory toward establishing the terms by which the public’s ability to communicate digital information will be controlled.”

MozillaZine running out of bandwidth

Author: JT Smith

MozillaZine needs your help! MozillaZine has fallen onto hard times, much like every other site on the internet these days. Our ISP has begun to limit our bandwidth down
to a number so small, the site is unreachable for more than 30% of the day. We need your help to move to a new ISP, in order to continue to bring you Mozilla news, the Build
Bar, and our new Forums. Please considering giving a small amount to help us keep the site going. We thank you for any donation you can make.”

Sharp Linux PDA promotes use of proprietary SD card, but more open MMC works just fine

Author: JT Smith

by Tina Gasperson
Sharp’s first Linux handheld, the Zaurus, has a proprietary, closed Secure Digital (SD) memory card expansion slot. Many people do not know the slot will also work with the MultimediaCard (MMC), a different kind of expansion card which is similar in power and potential, but much more open; in fact, it’s a viable alternative for Linux developers who don’t like the restrictions of the SD card. Why doesn’t Sharp mention that MMCs are interchangeable with the SD cards in any of its Zaurus product literature?Linux people everywhere have hailed the advent of Sharp’s Zaurus SL5000D handheld. It runs on Lineo’s Embedix distribution and uses the Qt Palmtop Environment and Personal Java. Interested programmers can sign up at Sharp’s developer site, order one of these cool PDAs for $399 USD, and get started creating applications to run on it.

MMCs fit into SD card slots and are readable in the same way. Sharp’s decision not to include this information in advertisements for the Zaurus could hurt its chances of attracting a large community of developers. For cost reasons and on principle, Linux developers should know the MMC is a less restrictive alternative to the SD card, although the SD card has made some advancements in I/O and speed that some critics say the MMC is not currently capable of reaching.

Of course, because it’s a Linux distribution, the source code for the Embedix OS on the Zaurus is freely available for download from Sharp — except for the Proxim Open Air driver, the 802.11b wireless LAN driver, and the SD card driver. There is at least one alternative for the Proxim driver, and there are many alternatives for the 802.11b protocol — but just try to find a driver of any kind for the SD Card.

If you do, it won’t be a legal copy of one. That’s because of the Secure Digital Card Association (SDCA). Member companies who want access to the specs for the SD card have to sign a strict non-disclosure agreement with SDCA and pay steep licensing fees. The companies are not allowed to share any SD technology, even if they’ve developed it themselves, with anyone who is not also a member company. Companies with access to the specs are not even permitted to make a photocopy; they must download separate, registered copies from the password-protected SDCA Web site.

The SD card was developed by Panasonic, SanDisk, and Toshiba specifically to produce a “memory card capable of providing a high level of copy protection for music, movies and other artistic and commercial content,” according to an August 1999 press release announcing the creation of the SDCA.

The content copy protection feature is an option in the driver specs for the SD card, and most companies using SD technology are not implementing the controls yet, according to a source close to Zaurus developers.

The SD card wasn’t the first memory card; in fact, the press release mentioned the MultiMediaCard as “gaining solid support as leading media” to meet the growing requirements for an expansion card that would increase the capabilities of PDAs, digital cameras, cell phones, and MP3 players. The MMC and the SD card both work in SD slots, they both transfer data at high speeds (although the SD card has the potential to transfer data quicker; most hardware does not use the full capabilities of the card), and they both support pure storage and applications. The MMC is slightly thinner and has seven pins for connection while the SD card has nine. Wes Brewer, SanDisk’s board representative for the SDCA and the MMCA, says the SD card has the potential to function as a modem or network card, something that he says the MMC cannot do.

The SDCA press release implied that the only thing missing in the MMC was “copy protection” that would comply with the wishes of the Secure Digital Music Initiative (SDMI), which says its goals are to “provide consumers with convenient access to music both online and in new emerging digital distribution systems; enable copyright protection for artists’ works; and promote the development of new music-related business and technologies.”

The SDMI board is heavily populated with companies who are also members of the SDCA board.

The MMC also has its own board; it was created in 1997, also by SanDisk, this time with Siemens AG. In June 1999, BusinessWire ran a press release announcing that SanDisk would begin providing Panasonic with MultiMediaCards for its line of digital cameras. Andrew Prophet, executive director of the MultiMediaCard Association (MMCA), says he doesn’t know why SanDisk decided to join with Panasonic a few months later to create the SD Card when the MMC card is virtually the same technology. “They decided they wanted to form an alliance with Panasonic,” he says. “It angered many on the MMCA board.”

SanDisk still sits on the executive boards of both the MMCA and the SDCA. Brewer says that, if people on the MMCA board were angry about SanDisk’s actions in 1999, it wasn’t apparent then.

The SDCA has grown quicker and seems to get more publicity than the MMCA; listed among its 387 members are such powerhouses as Microsoft, 3Com, IBM, NEC, Texas Instruments, Intel and the maker of the Zaurus, Sharp. Sharp, Microsoft, IBM, and Intel also sit on the board of the Secure Digital Music Initiative. Of these companies, only Intel is also a member of the MMCA — not Microsoft, not IBM, not Sharp. This might be the reason that Sharp doesn’t mention MMC compatibility in any of its product literature, although a company representative confirmed that the expansion slots, which are clearly marked “SD Card,” will work with MultiMediaCards. She also said, “We will definitely incorporate [notification that the Zaurus is MMC compatible] into our future literature.”

MMCA has recently implemented an SDMI-approved content copy control system for the MultiMediaCard, but as in the SD card, turning it on in the driver code is optional.

The bottom line for developers is, for full access to specs for the MultiMediaCard, they’ll have to cough up $500 USD. But no NDA is required, and they don’t have to become a member of the association, says Prophet, But the MMCA “would like their input and guidance on evolving the MMCA Standard.” He adds that the MMCA is “OS agnostic,” and that the MultiMediaCard is “ideally suited” for Linux platforms.

Why Microsoft is attacking embedded Linux

Author: JT Smith

Anonymous Reader writes “LinuxDevices.com founder Rick Lehrbaum offers his perspective on why
Microsoft has begun to publicly attack Embedded Linux. Read it here.”

Category:

  • Linux

FOSDEM launches community support

Author: JT Smith

The FOSDEM organisation today announced the launch of the FOSDEM Community Support operation. This operation gives the possibility to FOSDEM supporters to donate money to the FOSDEM organisation. The FOSDEM organisation will in return offer a package related to the amount of donated money. The entrance to the event is free, and donations and made on a voluntary basis.

The FOSDEM is a major European event focusing on Free and Open Source
Software
Development. It is organised by people from the Free and Open Source
Software community. It is looking to keep its independance from
commercial
interest, and hopes to get support in this goal from the community.

All information is available on the FOSDEM website (www.fosdem.org) and
more
specifically at
http://www.fosdem.org/support.

About FOSDEM
FOSDEM ‘s goal is to provide Free and Open Source developers and
communities
a place to go over the lastest developments in the Free and Open Source
arena
and to promote the development and the benefits of Free and Open Source
solutions.

Linux Game Publishing competition

Author: JT Smith

Linux Game Publishing writes, “On Janurary 2nd, Linux Game Publishing will announce the title of our second release. Until that time we are running a competition. Send an email to competition@linuxgamepublishing.com and guess the title. Any correct answers will be entered into a prize draw for a free copy of the game. This copy will be the first copy off of the printing machine, will be signed by the development team, and will be labeled as the first copy printed. A truly unique prize!”

Microsoft sues Linux start-up over name

Author: JT Smith

“The Redmond, Wash.-based software giant filed a motion with the U.S. Court for the Western
District of Washington against Lindows, which is developing a version of the Linux operating
system that will run popular applications written for Microsoft’s Windows OS.

Microsoft contends the company, which plans to formally release its product next year, purposely
is trying to confuse Lindows with Windows. The suit asks the court to order the start-up to stop
using the Lindows name and also seeks unspecified monetary damages.” More at CNET.com.

Category:

  • Linux

Connecting a wireless laptop or notebook PC to a wired PC network

Author: JT Smith

Reader writes: “MozillaQuest.com has a nice new series about wireless networking. In part 2 of the series, MozillaQuest Magazine reports : ‘All it takes to go wireless with your laptop or notebook computer is a wireless network PCMCIA card for the laptop or notebook computer and a wireless access point to bridge from the wireless network PC Card on your laptop or notebook computer to your wired network computers. These wireless network adapters and access points are very easy to install.'”

Trustix: OpenSSH vulnerability

Author: JT Smith

Trustix: “A malicious local user can pass environment variables to the login process if the administrator enables the UseLogin option. This can be abused to bypass authentication and gain root access. Note that this option is not enabled by default on TSL.”

From:	 Trustix Secure Linux Advisor <tsl@trustix.com>
To:	 tsl-announce@trustix.org
Subject: TSLSA-2001-0030 - openssh
Date:	 Thu, 20 Dec 2001 15:20:07 +0100
Cc:	 bugtraq@securityfocus.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Trustix Secure Linux Security Advisory #2001-0030

Package name:      OpenSSH
Severity:          Local root exploit if UseLogin option enabled
Date:              2001-12-19
Affected versions: TSL 1.01, 1.1, 1.2, 1.5

- --------------------------------------------------------------------------

Problem description:
  A malicious local user can pass environment variables to the login
  process if the administrator enables the UseLogin option.  This can
  be abused to bypass authentication and gain root access.
  Note that this option is not enabled by default on TSL.


Action:
  We recommend that all systems with this package installed are upgraded.


Location:
  All TSL updates are available from
  <URI:http://www.trustix.net/pub/Trustix/updates/>
<URI:ftp://ftp.trustix.net/pub/Trustix/updates/>


Automatic updates:
  Users of the SWUP tool, can enjoy having updates automatically
  installed using 'swup --upgrade'.

  Get SWUP from:
  <URI:ftp://ftp.trustix.net/pub/Trustix/software/swup/>


Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.net/support/>


Verification:
  This advisory along with all TSL packages are signed with the TSL sign key.
  This key available from:
  <URI:http://www.trustix.net/TSL-GPG-KEY>

The advisory itself is available from the errata pages at
  <URI:http://www.trustix.net/errata/trustix-1.2/> and
  <URI:http://www.trustix.net/errata/trustix-1.5/>
or directly at
  <URI:http://www.trustix.net/errata/misc/2001/TSL-2001-0030-openssh.asc.txt>

MD5sums of the packages:
- --------------------------------------------------------------------------
71f9d80630a4c08f54aacfc49e0cfec7  ./1.5/SRPMS/openssh-3.0.2p1-1tr.src.rpm
55096b921e28b5af55785b8ba5535dc3  ./1.5/RPMS/openssh-server-3.0.2p1-1tr.i586.rpm
9b657aff2f8e0ac8fa5cbb46346bc72b  ./1.5/RPMS/openssh-clients-3.0.2p1-1tr.i586.rpm
6bb5b4e99d2e413ad88bff4a4e551c8b  ./1.5/RPMS/openssh-3.0.2p1-1tr.i586.rpm
71f9d80630a4c08f54aacfc49e0cfec7  ./1.2/SRPMS/openssh-3.0.2p1-1tr.src.rpm
16b64002dc47121a50eb744762db7f4b  ./1.2/RPMS/openssh-server-3.0.2p1-1tr.i586.rpm
e0abacbfe2eb860e75b9408873338953  ./1.2/RPMS/openssh-clients-3.0.2p1-1tr.i586.rpm
459b0715a16d4043211b1e4ad46acddf  ./1.2/RPMS/openssh-3.0.2p1-1tr.i586.rpm
71f9d80630a4c08f54aacfc49e0cfec7  ./1.1/SRPMS/openssh-3.0.2p1-1tr.src.rpm
8dc43857ecc5af0fc9459639a3b9d5c8  ./1.1/RPMS/openssh-server-3.0.2p1-1tr.i586.rpm
b611b85e0c30ecd5333ae30dd225d189  ./1.1/RPMS/openssh-clients-3.0.2p1-1tr.i586.rpm
a40338ee7d06e2eb9d7c73e4787e7dd9  ./1.1/RPMS/openssh-3.0.2p1-1tr.i586.rpm
- --------------------------------------------------------------------------


Trustix Security Team
 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8Ic5zwRTcg4BxxS0RAqdzAJ4kgDeENg3rKItgELWGfaKtA3D0QgCfUn6M
6wmPHCmvdysGL4JYsN8vzaE=
=M8lD
-----END PGP SIGNATURE-----

_______________________________________________
tsl-announce mailing list
tsl-announce@trustix.org
http://www.trustix.org/mailman/listinfo.cgi/tsl-announce

Category:

  • Linux