- wlug - list.wlug.org.nz

Do Alternative Software Licenses Represent Open Source's 'Midlife Crisis'?
by Peter Reutemann 16 Dec '18

16 Dec '18

'"it is clear to me that open source -- now several decades old and fully adult -- is going through its own midlife crisis," writes Joyent CTO Bryan Cantrill. [O]pen source business models are really tough, selling software-as-a-service is one of the most natural of them, the cloud service providers are really good at it -- and their commercial appetites seem boundless. And, like a new cherry red two-seater sports car next to a minivan in a suburban driveway, some open source companies are dealing with this crisis exceptionally poorly: they are trying to restrict the way that their open source software can be used. These companies want it both ways: they want the advantages of open source -- the community, the positivity, the energy, the adoption, the downloads -- but they also want to enjoy the fruits of proprietary software companies in software lock-in and its concomitant monopolistic rents. If this were entirely transparent (that is, if some bits were merely being made explicitly proprietary), it would be fine: we could accept these companies as essentially proprietary software companies, albeit with an open source loss-leader. But instead, these companies are trying to license their way into this self-contradictory world: continuing to claim to be entirely open source, but perverting the license under which portions of that source are available. Most gallingly, they are doing this by hijacking open source nomenclature. Of these, the laughably named commons clause is the worst offender (it is plainly designed to be confused with the purely virtuous creative commons), but others...are little better... "[T]heir business model isn't their community's problem, and they should please stop trying to make it one," Cantrill writes, adding letter that "As we collectively internalize that open source is not a business model on its own, we will likely see fewer VC-funded open source companies (though I'm honestly not sure that that's a bad thing)..." He also points out that "Even though the VC that led the last round wants to puke into a trashcan whenever they hear it, business models like 'support', 'services' and 'training' are entirely viable!" Jay Kreps, Co-founder of @confluentinc, has posted a rebuttal on Medium. "How do you describe a license that lets you run, modify, fork, and redistribute the code and do virtually anything other than offer a competing SaaS offering of the product? I think Bryan's sentiment may be that it should be called the Evil Proprietary Corruption of Open Source License or something like that, but, well, we disagree."' -- source: https://news.slashdot.org/story/18/12/15/2221232 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

The Last Independent Mobile OS
by Peter Reutemann 16 Dec '18

16 Dec '18

'The year was 2010 and the future of mobile computing was looking bright. The iPhone was barely three years old, Google's Android had yet to swallow the smartphone market whole, and half a dozen alternative mobile operating systems -- many of which were devoutly open source -- were preparing for launch. Eight years on, you probably haven't even heard of most of these alternative mobile operating systems, much less use them. Today, Android and iOS dominate the global smartphone market and account for 99.9 percent of mobile operating systems. Even Microsoft and Blackberry, longtime players in the mobile space with massive revenue streams, have all but left the space. Then there's Jolla, the small Finnish tech company behind Sailfish OS, which it bills as the "last independent alternative mobile operating system." Jolla has had to walk itself back from the edge of destruction several times over the course of its seven year existence, and each time it has emerged battered, but more determined than ever to carve out a spot in the world for a truly independent, open source mobile operating system. Jolla's Sailfish OS rose from the ashes of Nokia and Intel's ill-fated collaboration, MeeGo. The MeeGo project launched in 2010 in an attempt to merge Intel's Linux-based Moblin OS and Nokia's Maemo software platform into a single open-source mobile operating system that could take on Google. By 2011, Android had already surpassed Nokia in the smartphone market, a fact that wasn't lost on Nokia's CEO Stephen Elop, who in a memo described the company as standing on a "burning platform." Nokia only ever released one phone running MeeGo: the Nokia N9, which ended up being well received despite its limited release. But it was too little, too late. By 2011, Nokia was bleeding talent and it was clear that MeeGo wasn't going to keep the company competitive in the rapidly changing smartphone market. In a last-ditch effort, Nokia struck a partnership with Microsoft to provide the hardware for its next generation of Windows Phones, abandoning MeeGo entirely. The same couldn't be said for those developers who had worked on MeeGo and, before that, an open source mobile OS called Mer, based on Intel's Maemo system. In October 2011, three developers that had worked on Mer sent a message on a mailing list calling for the creation of a "MeeGo 2.0." At the same time, developer Sami Pienimaki and two others left Nokia to found their own company, which would use this new version of MeeGo as the basis for an open source mobile OS. And thus, Sailfish was born. In a cheeky homage to the "burning platform" memo, Pienimaki and his fellow defectors decided to name their company Jolla, a Finnish word connoting a small boat or life raft. Jolla has since turned to Russia and China, both of which were hungry for a secure alternative to Google-based systems. In late 2016, Sailfish OS achieved domestic certification in Russia for government and corporate us. Around the same time, Sailfish was also making moves in China. In early 2017, the Sailfish China Consortium gained the exclusive rights and license to develop a Chinese OS based on Sailfish.' -- source: https://hardware.slashdot.org/story/18/12/16/0758215 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Tesla Model 3 Modded To Run Ubuntu
by Peter Reutemann 16 Dec '18

16 Dec '18

'CleanTechnica is reporting that someone hacked the infotainment system of a Tesla Model 3 and got root access and installed Linux distribution Ubuntu. Redditor trsohmers is able to show an Ubuntu command shell running alongside the Tesla OS. Since Tesla supports a browser that allows you to visit any site, could this be leveraged into remote hacks? It could also mean that if Tesla sells a long-range version of the Model 3, but limits it via software, people might try to remove the block. One could potentially get a 15-day trial of full self-driving for free and extend that 15-day window forever. At least he had some guts messing with $50,000 hardware that phones home all the time. Will Tesla brick his car to attempt to disprove the security issue?' -- source: https://news.slashdot.org/story/18/12/15/0355250 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Evelyn Berezin Has Died
by Lawrence D'Oliveiro 15 Dec '18

15 Dec '18

Among her many achievements: While IBM had been producing word processors of a sort for a few years when Berezin developed hers in 1968, she was the first to use semiconductor chips to make a true computing system for this purpose. IBM's solution used a typewriter and a magnetic tape drive and was much less efficient to use. <https://arstechnica.com/gadgets/2018/12/evelyn-berezin-creator-of-the-first…>

1 0

Automatically Generating Fake Photos
by Lawrence D'Oliveiro 15 Dec '18

15 Dec '18

Look at the photo grid about halfway down this article <https://www.theregister.co.uk/2018/12/14/ai_created_photos/>: as I understand it, the main facial features are taken from the photos down the leftmost column; these are then resynthesized into a new orientation, expression and other embellishments (including hair colour/style, gender and apparent age!) to match the photos across the topmost row. Or something like that. Apparently, Nvidia is planning to publish its source code. Kids, you may not be able to afford the hardware to try this at home ...

1 0

Windows Server 2019 Officially Supports OpenSSH For the First Time
by Peter Reutemann 13 Dec '18

13 Dec '18

'Microsoft said in 2015 that it would build OpenSSH, a set of utilities that allow clients and servers to connect securely, into Windows, while also making contributions to its development. Neowin: Since then, the company has delivered on that promise in recent releases of Windows 10, being introduced as a feature-on-demand in version 1803. However, Windows Server hadn't received the feature until now, at least not in an officially supported way -- Windows Server version 1709 included it as a pre-release feature. But that's finally changed, as Microsoft this week revealed that Windows Server 2019, which was made available (again) in November, includes OpenSSH as a supported feature.' -- source: https://slashdot.org/story/18/12/13/1947257 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

In a Test, 3D Model of a Head Was Able To Fool Facial Recognition System of Several Popular Android Smartphones
by Peter Reutemann 13 Dec '18

13 Dec '18

'Forbes magazine tested four of the most popular handsets running Google's operating systems and Apple's iPhone to see how easy it'd be to break into them with a 3D-printed head. All of the Android handsets opened with the fake. Apple's phone, however, was impenetrable. From the report: For our tests, we used my own real-life head to register for facial recognition across five phones. An iPhone X and four Android devices: an LG G7 Linq, a Samsung S9, a Samsung Note 8 and a OnePlus 6. I then held up my fake head to the devices to see if the device would unlock. For all four Android phones, the spoof face was able to open the phone, though with differing degrees of ease. The iPhone X was the only one to never be fooled. There were some disparities between the Android devices' security against the hack. For instance, when first turning on a brand new G7 Linq, LG actually warns the user against turning facial recognition on at all. No surprise then that, on initial testing, the 3D-printed head opened it straightaway. [...] The OnePlus 6 came with neither the warnings of the other Android phones nor the choice of slower but more secure recognition.' -- source: https://apple.slashdot.org/story/18/12/13/1438218 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Kernel Developers Discuss Dropping x32 Support
by Peter Reutemann 12 Dec '18

12 Dec '18

'It was just several years ago that the open-source ecosystem began supporting the x32 ABI, but already kernel developers are talking of potentially deprecating the support and for it to be ultimately removed.. [...] While the x32 support was plumbed through the Linux landscape, it really hasn't been used much. Kernel developers are now discussing the future of the x32 ABI due to the maintenance cost involved in still supporting this code but with minimal users. Linus Torvalds is in favor of sunsetting x32 and many other upstream contributors in favor of seeing it deprecated and removed.' -- source: https://linux.slashdot.org/story/18/12/12/1336210 More information on x32 ABI: https://en.wikipedia.org/wiki/X32_ABI Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

3 2

Getting Shown Pregnancy Ads After Child Was Stillborn
by Lawrence D'Oliveiro 12 Dec '18

12 Dec '18

An op-ed on the pitfalls of algorithmically-targeted advertising, originally from the Washington Post <https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=121760…>: Please, Tech Companies, I implore you: If your algorithms are smart enough to realize that I was pregnant, or that I've given birth, then surely they can be smart enough to realize that my baby died, and advertise to me accordingly - or maybe, just maybe, not at all. Unfortunately, the old adage “if you’re not paying for the product, then you are the product” applies yet again. Notwithstanding a personal reply from a high-up Facebook exec at the end of the above article, don’t expect these algorithms to be “smart enough” to do anything more than maximize advertising revenue. Anything more ends up counting as “unnecessary expenditure”.

2 1

FreeBSD 12 Released
by Peter Reutemann 12 Dec '18

12 Dec '18

'The 12th version of the FreeBSD has been released, bringing support for updated hardware. Some of the highlights include: OpenSSL has been updated to version 1.1.1a (LTS). Unbound has been updated to version 1.8.1, and DANE-TA has been enabled by default. OpenSSH has been updated to version 7.8p1. Additonal capsicum(4) support has been added to sshd(8). Clang, LLVM, LLD, LLDB, compiler-rt and libc++ has been updated to version 6.0.1. The vt(4) Terminus BSD Console font has been updated to version 4.46. The bsdinstall(8) utility now supports UEFI+GELI as an installation option. The VIMAGE kernel configuration option has been enabled by default. The NUMA option has been enabled by default in the amd64 GENERIC and MINIMAL kernel configurations. The netdump(4) driver has been added, providing a facility through which kernel crash dumps can be transmitted to a remote host after a system panic. The vt(4) driver has been updated with performance improvements, drawing text at rates ranging from 2- to 6-times faster. Various improvements to graphics support for current generation hardware. Support for capsicum(4) has been enabled on armv6 and armv7 by default. The UFS/FFS filesystem has been updated to consolidate TRIM/BIO_DELETE commands, reducing read/write requests due to fewer TRIM messages being sent simultaneously. The NFS version 4.1 server has been updated to include pNFS server support. The pf(4) packet filter is now usable within a jail(8) using vnet(9). The bhyve(8) utility has been updated to add NVMe device emulation. The bhyve(8) utility is now able to be run within a jail(8). Various Lua loader(8) improvements. KDE has been updated to version 5.12.' -- source: https://bsd.slashdot.org/story/18/12/12/1510202 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1