- wlug - list.wlug.org.nz

All 500 of the World's Top 500 Supercomputers Are Running Linux
by Peter Reutemann 19 Dec '17

19 Dec '17

'Linux rules supercomputing. This day has been coming since 1998, when Linux first appeared on the TOP500 Supercomputer list. Today, it finally happened: All 500 of the world's fastest supercomputers are running Linux. The last two non-Linux systems, a pair of Chinese IBM POWER computers running AIX, dropped off the November 2017 TOP500 Supercomputer list. When the first TOP500 supercomputer list was compiled in June 1993, Linux was barely more than a toy. It hadn't even adopted Tux as its mascot yet. It didn't take long for Linux to start its march on supercomputing. >From when it first appeared on the TOP500 in 1998, Linux was on its way to the top. Before Linux took the lead, Unix was supercomputing's top operating system. Since 2003, the TOP500 was on its way to Linux domination. By 2004, Linux had taken the lead for good. This happened for two reasons: First, since most of the world's top supercomputers are research machines built for specialized tasks, each machine is a standalone project with unique characteristics and optimization requirements. To save costs, no one wants to develop a custom operating system for each of these systems. With Linux, however, research teams can easily modify and optimize Linux's open-source code to their one-off designs. The semiannual TOP500 Supercomputer List was released yesterday. It also shows that China now claims 202 systems within the TOP500, while the United States claims 143 systems.' -- source: https://linux.slashdot.org/story/17/11/14/2223227 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Fear And Loathing In Open-Source Clothing Design
by Lawrence D'Oliveiro 18 Dec '17

18 Dec '17

Seems the Valentina project, to create an open-source clothing design package, has split in two over the usual reason--disagreements among the project members <http://libregraphicsworld.org/blog/entry/valentina-seamly2d>. In that article, Alexandre Prokoudine tries to give an even-handed account of the saga, which can sometimes be quite difficult. The proprietary software in this field is extremely expensive--to the point where it becomes hard for clothing makers/designers to hire people who are familiar with using it. An alternative project, called SodaCAD <http://www.sodacad.org/>, takes a very different view: more direct control over the design (as I understand it), rather than trying to automatically fit a predefined design to given measurements, as Valentina does. It hasn’t seen much activity in over three years, though.

1 0

Undoing Data Anonymization Is Trivial
by Lawrence D'Oliveiro 18 Dec '17

18 Dec '17

Yet another demonstration <http://www.theregister.co.uk/2017/12/18/no_hack_needed_anonymisation_beaten…> of the seeming impossibility of publishing “anonymized” sets of personal data that cannot be traced back to specific individuals. The response of the Australian Government to a previous demonstration of such “de-anonymization” techniques was to seek laws to ban them.

1 0

Why Linux HDCP Isn't the End of the World
by Peter Reutemann 17 Dec '17

17 Dec '17

'"There is no reason for the open-source community to worry..." writes Daniel Stone, who heads the graphics team at open-source consultancy Collabora. mfilion quotes Collabora.com: Recently, Sean Paul from Google's ChromeOS team, submitted a patch series to enable HDCP support for the Intel display driver. HDCP is used to encrypt content over HDMI and DisplayPort links, which can only be decoded by trusted devices... However, if you already run your own code on a free device, HDCP is an irrelevance and does not reduce freedom in any way.... HDCP support is implemented almost entirely in the hardware. Rather than adding a mandatory encryption layer for content, the HDCP kernel support is dormant unless userspace explicitly requests an encrypted link. It then attempts to enable encryption in the hardware and informs userspace of the result. So there's the first out: if you don't want to use HDCP, then don't enable it! The kernel doesn't force anything on an unwilling userspace.... HDCP is only downstream facing: it allows your computer to trust that the device it has been plugged into is trusted by the HDCP certification authority, and nothing more. It does not reduce user freedom, or impose any additional limitations on device usage.' -- source: https://linux.slashdot.org/story/17/12/16/0320227 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Net Neutrality Repeal --- What It Means For NZ
by Rowan Schischka 17 Dec '17

17 Dec '17

<https://list.waikato.ac.nz/pipermail/wlug/2017-December/015504.html> So you are agreeing with me that USA has a problem of poor competition? In NZ if my provider gives me crap access to certain services, I have options, but in many places in the US they do not. Net Neutrality rules did not increase competition in USA, and I do not see how dropping regulations in US will affect NZ's access. Just like Internet censorship from the department of internal affairs is optional, so will any media business arrangement with our ISPs. I can choose one that does it and I can choose one that does not.

1 0

Should Google Be Paying News Sites For Linking To Them?
by Lawrence D'Oliveiro 16 Dec '17

16 Dec '17

News agencies in Europe, particularly, have been claiming for a long while that Google has been unfairly profiting from linking to their articles (and quoting snippets from them). So they want Governments to force Google to pay a “link tax” <https://www.techdirt.com/articles/20171214/16352638814/european-new-agencie…>. The reality of such things is that, regardless of laws to the contrary, the money tends to flow from the ones benefiting to the ones providing the value (cf the “Payola” scandals in the US). Which explains what happened in Spain after it brought in its link-tax law <https://www.techdirt.com/articles/20150725/14510131761/study-spains-google-…>. Maybe the news agencies’ real complaint is that Google is such a massively profitable advertising company.

1 0

Net Neutrality Repeal --- What It Means For NZ
by Rowan Schischka 16 Dec '17

16 Dec '17

>Doesn?t mean we shouldn?t have network neutrality here, though. It just >means the abuses have not been quite as flagrant to date. The article is about ghost problems. In America, with or without net neutrality, providers abuse their market position. Every argument to keep the net neutrality rules comes back to poor competition in telco providers, which previous regulations did not address. The article correctly states that we will not see problems here because of Chrous' position but they incorrectly state we do not have links between media and ISP; Vodafone currently offers package deals https:// www.vodafone.co.nz/pass/ The internet is still working and there is no barrier to stop you or me to start a competing business. If a company like Duco or the rugby union did a deal with an ISP, I would want a deal that gives me uninterrupted live sports streaming, but it wont happen if the government thinks they need to regulate this.

2 1

Net Neutrality Repeal --- What It Means For NZ
by Lawrence D'Oliveiro 15 Dec '17

15 Dec '17

<http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11960493>: "Since so many of the services we use online have been developed in America, what is bad for the internet there is bad for us all." But fortunately, Carter added, New Zealand didn't have the market problems that made network neutrality such a pressing issue in the US. Doesn’t mean we shouldn’t have network neutrality here, though. It just means the abuses have not been quite as flagrant to date.

1 0

Avast Launches Open-Source Decompiler For Machine Code
by Peter Reutemann 14 Dec '17

14 Dec '17

'To help with the reverse engineering of malware, Avast has released an open-source version of its machine-code decompiler, RetDec, that has been under development for over seven years. RetDec supports a variety of architectures aside from those used on traditional desktops including ARM, PIC32, PowerPC and MIPS. As Internet of Things devices proliferate throughout our homes and inside private businesses, being able to effectively analyze the code running on all of these new devices becomes a necessity to ensure security. In addition to the open-source version found on GitHub, RetDec is also being provided as a web service. Simply upload a supported executable or machine code and get a reasonably rebuilt version of the source code. It is not possible to retrieve the exact original code of any executable compiled to machine code but obtaining a working or almost working copy of equivalent code can greatly expedite the reverse engineering of software. For any curious developers out there, a REST API is also provided to allow third-party applications to use the decompilation service. A plugin for IDA disassembler is also available for those experienced with decompiling software.' -- source: https://news.slashdot.org/story/17/12/14/006237 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

AT&T Versus Carterfone Revisited
by Lawrence D'Oliveiro 14 Dec '17

14 Dec '17

Or, it takes a certain amount of Government regulation to maintain a free market <https://arstechnica.com/tech-policy/2017/12/carterfone-40-years/>. I like the closing remarks: We do not begrudge the CEOs of these great corporations their legal positions. But they are, as Andrew Carnegie would put it, stewards of the system, not its owners. They are not there to tell us to Go Away. They are there to keep the system running while we discover it, use it, develop it, innovate it, game it, finesse it, and reinvent it to our heart's content. The great enterprise of telecommunications is no better than our right to participate in it as individuals.

1 0

AMD Is Open-Sourcing Their Official Vulkan Linux Driver
by Peter Reutemann 13 Dec '17

13 Dec '17

'While many of you have likely heard of the "RADV" open-source Vulkan driver, it's been a community-written driver up to this point in the absence of AMD's official, cross-platform Vulkan driver being open-source. That's now changed with AMD now open-sourcing their official Vulkan driver. The code drop is imminent and they are encouraging the use of it for quick support of new AMD hardware, access to the Radeon GPU Profiler, easy integration of AMD Vulkan extensions, and enabling third-party extensions. For now at least it does provide better Vulkan performance than RADV but the RADV developers have indicated they plan to continue development of their Mesa-based Vulkan driver.' -- source: https://news.slashdot.org/story/17/12/13/016211 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

1998 attack that messes with sites’ secret crypto keys is back in a big way
by Peter Reutemann 12 Dec '17

12 Dec '17

'A surprisingly big number of top-name websites—Facebook and PayPal among them—recently tested positive for a critical, 19-year-old vulnerability that allowed attackers to decrypt encrypted data and sign communications using the sites' secret encryption key. The vulnerability in the transport layer security protocol for Web encryption was disclosed in 1998 when researcher Daniel Bleichenbacher found it in the TLS predecessor known as secure sockets layer. A flaw in the algorithm that handles RSA encryption keys responded to certain types of errors in a way that divulged potentially sensitive information. With enough specially formed queries, attackers could exploit the weakness in a way that allowed them to decrypt ciphertext even when they didn't have the secret decryption key. SSL architects responded by designing workarounds that suppressed the error messages rather than removing or rewriting the faulty RSA algorithm. Researchers call the class of crypto vulnerability an Oracle because it provides only "yes" or "no" answers that, over time, can reveal detailed information about the contents of encrypted data. The information allows hackers to carry out what's known as an "adaptive chosen-ciphertext attack."' -- source: https://arstechnica.com/information-technology/2017/12/a-worrying-number-of… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Should Service Providers Be Liable For Content?
by Lawrence D'Oliveiro 11 Dec '17

11 Dec '17

It is commonly accepted that ISPs should not generally be held liable for things done by their customers--or indeed, anybody else’s customers over their pipes. This is currently the case in Australia, for example. But should protections be extended to what we might describe as “secondary” service providers--such as social media sites like Facebook, and of course Google? Seems like Australia agrees the answer should be mostly “yes”, but not for those specific companies. Not sure how they are going to decide who is eligible for such legal protections and who is not. <https://www.techdirt.com/articles/20171207/09383538762/mpaa-wins-australia-…>

1 0

Intel's ME May Be Massively Infringing on Minix3's Free Software License
by Peter Reutemann 10 Dec '17

10 Dec '17

'Almost all Free Software licenses (BSD, MIT, GPL...) require some sort of legal notice (legal attribution) given to the recipient of the software, both when the software is distributed in source and in binary forms. The legal notice usually contains the copyright holder's name and the license text. This means that it's not possible to hide and keep secret the existence of Free Software that you have stuck into your product that you distribute. If you do so, then you are not complying with the Free Software license and you are committing a copyright infringement! This is exactly what Intel seems to have done with the Intel ME. The Minix3 operating system license requires a legal notice, but so far it seems like Intel has not given the necessary legal notices. (Probably because they want to keep the inside of the ME secret.) Thus not only is Minix3 the most installed OS on our recent x86 CPUs -- but it might also the most pirated OS on our recent x86 CPUs!' -- source: https://slashdot.org/story/17/12/09/0610203 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

The FCC Still Doesn’t Know How the Internet
by Peter Reutemann 10 Dec '17

10 Dec '17

'The EFF describes the FCC's official plan to kill net neutrality as "riddled with technical errors and factual inaccuracies," including, for example, a false distinction between "Internet access service" and "a distinct transmission service" which the EFF calls "utterly ridiculous and completely ungrounded from reality." "Besides not understanding how Internet access works, the FCC also has a troublingly limited knowledge of how the Domain Name System (DNS) works -- even though hundreds of engineers tried to explain it to them this past summer... As the FCC would have it, an Internet user actively expects their ISP to provide DNS to them." And in addition, "Like DNS, it treats caching as if it were some specialized service rather than an implementation detail and general-purpose computing technique." "There are at least two possible explanations for all of these misunderstandings and technical errors. One is that, as we've suggested, the FCC doesn't understand how the Internet works. The second is that it doesn't care, because its real goal is simply to cobble together some technical justification for its plan to kill net neutrality. A linchpin of that plan is to reclassify broadband as an 'information service,' (rather than a 'telecommunications service,' or common carrier) and the FCC needs to offer some basis for it. So, we fear, it's making one up, and hoping no one will notice." "We noticed," their editorial ends, urging Americans "to tell your lawmakers: Don't let the FCC sell the Internet out."' -- source: https://yro.slashdot.org/story/17/12/09/0545230 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Updated Debian Linux 9.3 and 8.10 Released
by Peter Reutemann 10 Dec '17

10 Dec '17

'The Debian project is pleased to announce the third update of its stable distribution Debian 9 (codename stretch). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available. The Debian project also announces the tenth update of its oldstable distribution Debian 8 (codename jessie). Please note that the point release does not constitute a new version of Debian 9 or 8 but only updates some of the packages included. There is no need to throw away old jessie or stretch DVD/CD media. After installation, packages can be upgraded to the current versions using an up-to-date Debian mirror. This stable update adds a few important corrections to packages. New installation images will be available soon at the mirrors. Those who frequently install updates from security.debian.org won't have to update many packages, and most such updates are included in the point release. One can use the apt command or apt-get command to apply updates. A step-by-step update guide is posted here.' -- source: https://linux.slashdot.org/story/17/12/09/1958254 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Canadian ISPs And Hollywood Agree On Plan To Make Themselves Judge, Jury and Website Executioner
by Lawrence D'Oliveiro 08 Dec '17

08 Dec '17

Think it could happen here <https://www.techdirt.com/articles/20171205/03452738742/canadian-isps-hollyw…>? A bunch of Canadian ISPs, together with various entertainment groups, is submitting a plan to the Canadian Radio-television and Communications Commission (CRTC), which is the regulatory body for broadcasting and telecoms, to maintain a list of sites which will be blocked by the ISPs at the request of the entertainment groups. Is there any recourse, any review process, any independent oversight? Nope. Any prospect for, shall we say, “mission creep”? Oh boy, is there... The CRTC seems less than enthused. I like this comment from their spokesperson: “Our government supports an open internet where Canadians have the ability to access the content of their choice in accordance to Canadian laws,” Sasseville says. “While other parts of the world are focused on building walls, we’re focused on opening doors‎.”

1 0

Google Vs Amazon Smackdown
by Rowan Schischka 06 Dec '17

06 Dec '17

> There is a tussle going on at the moment between a couple of large > corporations--but then, isn?t there always? There is a saying in some > parts of Africa that ?when elephants fight, the grass gets trampled?. > The ?grass?, in this case, being ordinary consumers like you and me. > > * Once Amazon started offering its own video-streaming hardware, it > banned competing products offered by Apple and Google from its store. > (Can you say ?conflict of interest??) > * Google/YouTube retaliated by blocking YouTube from Amazon?s Echo Show. > * Amazon upped the ante by denying sales of Google?s Nest devices as > well. > > And so it goes... so each store does not list their competitors spyware? no loss to me.

1 0

Google Vs Amazon Smackdown
by Lawrence D'Oliveiro 06 Dec '17

06 Dec '17

There is a tussle going on at the moment between a couple of large corporations--but then, isn’t there always? There is a saying in some parts of Africa that “when elephants fight, the grass gets trampled”. The “grass”, in this case, being ordinary consumers like you and me. * Once Amazon started offering its own video-streaming hardware, it banned competing products offered by Apple and Google from its store. (Can you say “conflict of interest”?) * Google/YouTube retaliated by blocking YouTube from Amazon’s Echo Show. * Amazon upped the ante by denying sales of Google’s Nest devices as well. And so it goes... <https://www.techdirt.com/articles/20171206/10385638755/google-amazon-are-ha…>

3 2

Windows RT Strike 2
by Lawrence D'Oliveiro 06 Dec '17

06 Dec '17

The first Windows-10-on-ARM machines are due to ship from HP and Asus in the autumn <https://arstechnica.com/gadgets/2017/12/hp-asus-announce-first-windows-10-a…>. It will include some kind of x86 emulator to run 32-bit regular-Windows apps. Of which I didn’t realize that there were still many around. Of course you can have either the ARM native performance and the long battery life, or you can have the Windows compatibility, but you are not going to get both at once. Prognosis: whenever either member of the Wintel symbiote has tried to step out on their own, the results have been uniformly disastrous. I expect this foray to be no different.

2 1

MacOS High Sierra Bug Allows Login As Root With No Password
by Peter Reutemann 04 Dec '17

04 Dec '17

'A trivial-to-exploit flaw in macOS High Sierra, aka macOS 10.13, allows users to gain admin rights, or log in as root, without a password. The security bug is triggered via the authentication dialog box in Apple's operating system, which prompts you for an administrator's username and password when you need to do stuff like configure privacy and network settings. If you type in "root" as the username, leave the password box blank, hit "enter" and then click on unlock a few times, the prompt disappears and, congrats, you now have admin rights. You can do this from the user login screen. The vulnerability effectively allows someone with physical access to the machine to log in, cause extra mischief, install malware, and so on. You should not leave your vulnerable Mac unattended until you can fix the problem. And while obviously this situation is not the end of the world -- it's certainly far from a remote hole or a disk decryption technique -- it's just really, really sad to see megabucks Apple drop the ball like this. Developer Lemi Orhan Ergan was the first to alert the world to the flaw. The Register notes: "If you have a root account enabled and a password for it set, the black password trick will not work. So, keep the account enabled and set a root password right now..."' -- source: https://it.slashdot.org/story/17/11/28/2135236 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 5

Researchers Run Unsigned Code on Intel ME By Exploiting USB Ports
by Peter Reutemann 04 Dec '17

04 Dec '17

'A pair of security researchers in Russia are claiming to have compromised the Intel Management Engine just using one of the computer's USB ports. The researchers gained access to a fully functional JTAG connection to Intel CSME via USB DCI. The claim is different from previous USB DCI JTAG examples from earlier this year. Full JTAG access to the ME would allow making permanent hidden changes to the machine. "Getting into and hijacking the Management Engine means you can take full control of a box," reports the Register, "underneath and out of sight of whatever OS, hypervisor or antivirus is installed." They add that "This powerful God-mode technology is barely documented," while The Next Web points out that USB ports are "a common attack vector."' -- source: https://it.slashdot.org/story/17/11/11/237236 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 3

Is Open Source Innovation Now All About Vendor On-Ramps?
by Peter Reutemann 03 Dec '17

03 Dec '17

'InfoWorld published an interesting essay from Matt Asay, former COO at Canonical (and an emeritus board member of the Open Source Initiative), about innovation from the big public cloud vendors, which "even when open-sourced, doesn't really help the community at large... All this innovation is available to buy; none of it is available to build. Not for mere mortals, anyway." Google in particular has figured out how to both open-source code in a useful way and make it pay. As Server Density CEO David Mytton has underlined, Google hopes to "standardize machine learning on a single framework and API," namely TensorFlow, then supplement it "with a service that can [manage] it all for you more efficiently and with less operational overhead," namely Google Cloud. By open-sourcing TensorFlow and backing it with machine-learning-heavy Google Cloud, Google has open-sourced a great on-ramp to future revenue. My question: why not do this with the rest of its code? The simple answer is "Because it's a lot of work." That is, Google could open-source everything tomorrow without any damage to its revenue, but the code itself would provide other providers and enterprises only limited ability to increase their revenue unless Google did all the necessary prep work to make it useful to mere mortals not running superhuman Google infrastructure. This is the trick that AWS, Microsoft, and Google are all racing to figure out today. Not open source, per se, because that's the easy table stakes. No, the AWS/Microsoft Azure/Google Cloud trio are figuring out how to turn their innovations into open source on-ramps to their proprietary services. Companies used to lock up their code to sell it. Today, it's the opposite: They need to open it up to make their ability to operate the code at scale more valuable. For them.' -- source: https://news.slashdot.org/story/17/12/02/0833217 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

Understanding the New Red Hat-IBM-Google-Facebook GPL Enforcement Announcement
by Peter Reutemann 03 Dec '17

03 Dec '17

'Bruce Perens co-founded the Open Source Initiative with Eric Raymond -- and he's also Slashdot reader #3872. Bruce Perens writes: Red Hat, IBM, Google, and Facebook announced that they would give infringers of their GPL software up to a 30-day hold-off period during which an accused infringer could cure a GPL violation after one was brought to their attention by the copyright holder, and a 60 day "statute of limitations" on an already-cured infringement when the copyright holder has never notified the infringer of the violation. In both cases, there would be no penalty: no damages, no fees, probably no lawsuit; for the infringer who promptly cures their infringement. Perens sees the move as "obviously inspired" by the kernel team's earlier announcement, and believes it's directed against one man who made 50 copyright infringement claims involving the Linux kernel "with intent to collect income rather than simply obtain compliance with the GPL license." Unfortunately, "as far as I can tell, it's Patrick McHardy's legal right to bring such claims regarding the copyrights which he owns, even if it doesn't fit Community Principles which nobody is actually compelled to follow."' -- source: https://linux.slashdot.org/story/17/12/02/2024240 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 2

'24 Pull Requests' Suggests Contributing Code For Christmas
by Peter Reutemann 03 Dec '17

03 Dec '17

'"On December 1st, 24 Pull Requests will be opening its virtual doors once again, asking you to give the gift of a pull request to an open source project in need," writes UK-based software developer Andrew Nesbitt -- noting that last year the site registered more than 16,000 pull requests. "And they're not all by programmers. Often the contribution with the most impact might be an improvement to technical documentation, some tests, or even better -- guidance for other contributors." This year they're even touting "24 Pull Requests hack events," happening around the world from Lexington, Kentucky to Torino, Italy. (Last year 80 people showed up for an event in London.) "You don't have to hack alone this Christmas!" suggests the site, also inviting local communities and geek meetups (as well as open source-loving companies) to host their own events. Contributing to open source projects can also beef up your CV (for when you're applying for your next job), the site points out, and "Even small contributions can be really valuable to a project." "You've been benefiting from the use of open source projects all year. Now is the time to say thanks to the maintainers of those projects, and a little birdy tells me that they love receiving pull requests!"' -- source: https://developers.slashdot.org/story/17/12/03/2018213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0