Slashdot Log In
A Gut Check On Gutsy Gibbon
Posted by
kdawson
on Thu Sep 20, 2007 10:27 AM
from the who-you-callin-windows-like dept.
from the who-you-callin-windows-like dept.
jammag writes "Linux pundit Bruce Byfield looked inside the pre-release of Gutsy Gibbon and found what he calls 'Windows thinking.' His article, Divining from the Entrails of Ubuntu's Gutsy Gibbon, notes that Ubuntu is the dominant distro, having achieved a level of success that might be leading to complacency. He opines: 'Only once or twice did I find a balance between accessibility to newcomers and a feature set for advanced users. At times, I wondered whether the popularity might be preventing Ubuntu from finishing some rough edges.'"
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Wait for next (Score:5, Funny)
Re:Wait for next (Score:4, Insightful)
TFA:
Ok, not being able to install additional packages at installation is a big deal, but calling it a "security issue" is a little silly. No ports are listening on a default Ubuntu install. It doesn't need to be "secured".
I don't understand how not having sudo means the attacker has to gain control of two passwords. Does that even make any sense? They only need ONE password either time, the root password, or the password for a user that has sudo privs.
I'm glad someone is really giving a critical eye towards Ubuntu (which can only result in further improvements), but talking out of your ass isn't going to get anything done.
Parent
Re:Wait for next (Score:5, Insightful)
For years I've never installed sudo because I liked the forced separation of privileges with different passwords. However, in an environment where numerous users need escalated privileges for different things, I have revised my thinking and enjoy the ability to provide fairly fine-grained controls on who/what people are able to access when raising privileges for specific tasks. Short of implementing SELinux, sudo gives me what I need for right now. I can see a day where SELinux will be more appropriate for some things, but until then...
Parent
Re:Wait for next (Score:5, Informative)
I think that you have misunderstood what SELinux is all about. It is not a replacement for su or sudo, it is a completely different system. It allows the vendor/administrator to explicitly specify what privileges a specific process should have in fine-grained detail. Even though e.g. the apache account has read access to every file that everyone can read, SELinux enables you to specify that the apache process should be denied access to anything beyond its configuration file, its plugins and the web tree, even if it would have access according to the ordinary permissions system.
By restricting rights on this level of detail, a cracker exploiting a security hole in the apache process would not be able to access any file beyond those explicitly specified in the SELinux policy.
Parent
Re:Wait for next (Score:5, Interesting)
Of course, most of those exploits involve gaining control of daemon users, like the httpd user or whatever, and if you have any of those users in your sudoers file you're asking for trouble anyway.
There may also be the assumption that most people will choose stronger passwords for their root user than they do for their normal user account. I'm not so sure that this really holds true in a desktop environment, but it may in a server environment. Of course, there's also the issue that a frequently used password may be easier for someone to shoulder surf. So, while a normal person may only very rarely log in as root, so shoulder surfing opportunities are likewise rare, they probably log into their user account (which on Ubuntu will likely have sudo access) many times.
So, while I think there is a lot of hand waving involved in whether or not Ubuntu's model is really more or less secure, there is at least an argument to be made.
Parent
Security of Users vs Root security (Score:5, Insightful)
Just because it happens to be Unix, some people seem to have a sysadmin reflex that tells them root is more worthy than others.
Parent
Re:Security of Users vs Root security (Score:5, Insightful)
a root compromised means a full system rebuild. reformatting all drives & reinstalling from trusted media & the last known good backups. you cant trust anything on the system, or any backups taken since the hack. you might not even know the date of the hack, nevermind how they got in, or what they did, if they cleaned the logs.
if a normal user account gets hacked & you're sure root hasnt been compromised, you could just delete the user, fix the vulnerability & restore the files from backups. you still have the log files, which will help give clues to how & when you were hacked.
having your user account hacked is obviously very bad, but if they get root, its as bad as it gets, even on a single user system.
btw, if your personal files mean a lot to you, you should take regular backups.
Parent
Re: (Score:3, Insightful)
Once someone with malicious intent can access your machine, you can pretty much kiss it goodbye. You can never really be sure that root wasn't compromised without an extensive investigation.
Re: (Score:3, Insightful)
Because "desktop" computers are often multiuser machines for, e.g., families, and may even be used to perform server roles on a home network as well as a desktop functions. Its not "big iron" thinking, its "multiuser environment" thinking.
Yes, compromising any user account is a Bad Thing, but compromising one that provides root access (whether root itself or one th
Re:Wait for next (Score:5, Insightful)
No!
Not having to make choices at install time is EXACTLY the reason that ubuntu is good. After a couple of simple questions, you are up and running with a very well configured system with the best one of each type of app installed that most people want. You dont have a huge stack of apps installed that you dont need.
If that idea doesn't suit you, then I think you need a different distro. Dont go raining on ubuntu because its executing its plan well. (And by the way, that plan is exactly what the general population want/need).
Parent
Re:Wait for next (Score:5, Informative)
Sensible defaults and the ability to make changes later on is much preferable.
Now how about installing ntp by default.
Parent
Paradox of choice. (Score:4, Insightful)
It's a deliberate break from the "GNOME or KDE" question you get asked at install time. If you don't know and don't care, you get GNOME. If you know, there's always a way to get more choice -- you could download Kubuntu if you want KDE, for example.
And if you really know what you're doing, you could download the Alternate or Server install CD, install from that (a more powerful installer anyway), and add packages as you need them. Or you can do a normal install, and remove packages, add other ones in later.
In fact, I believe it's possible to "upgrade" a system between Ubuntu and Kubuntu and back.
Now, granted, maybe it would be a good thing to have all of this power as a convenient GUI option. But the choice is there, if you know where to look.
Parent
Re:Wait for next (Score:5, Insightful)
The "limited choice" installer is the one that runs in graphical mode after the end user has already chosen the *default* boot option - indicating that they're interested in defaults. People who want more options will examine the first menu they're presented with, or download something other than the "desktop live CD".
Reporters who don't take the time to read "what's on the CD" before they download the
Parent
Re:Wait for next (Score:5, Insightful)
Parent
Re: (Score:3, Funny)
So I can't compile 32-bit c++ apps on Gutsy, when this really is a basic thing that, for example, Fedora gets right. This is something that most "users" probably won't notice... but isn't that Windows mentality?
And I'm not really just complaining pedantically -- my CS c
Re:Wait for next (Score:4, Insightful)
No it's pre-release software...
Parent
Re: (Score:3, Interesting)
Re: (Score:3, Funny)
The review is hilarious (Score:3, Funny)
My response? Open a shell.
evidence (Score:3, Funny)
Re:evidence (Score:4, Funny)
Parent
Re: (Score:3, Informative)
https://wiki.ubuntu.com/HardyHeron [ubuntu.com]
Re:evidence (Score:5, Insightful)
Don't believe me? Check out the "Ubuntu Development Code Names Wiki [ubuntu.com]", from which future codenames will be chosen!
Parent
Choices and Plurality (Score:5, Insightful)
Re:Choices and Plurality (Score:5, Interesting)
TFA is not wrong in what it says, but perhaps it misses a point. For years people were begging for a "user-friendly" Linux distribution, where the user would "not be inundated with choices" and so on. Ubuntu arose with the aim to be "Linux for human beings," where an ordinary person would be able (with some guidance) to install, learn, and productively use the OS. The aim of Ubuntu is to fill that niche.
TFA discusses needing to find the balance between "simplicity for beginners" and "power for advanced users." But he seems to think that each Linux distro should be finding that balance--rather than accepting that the point of having multiple distros is that each one can strike a different balance. Ubuntu, clearly, is a distro that favors simplicity, because it is trying to capture some of the "mass market" of beginners. If you want the installation to expose lots of details to you, then there are distros that will make that happen (e.g. Debian).
Now, having made the case that each distro can and should strike a different balance, I still find the argument misses the mark. I like to consider myself a "power user" who tries to do technical things (run webservers, programming, etc.), and Ubuntu (Kubuntu actually) is my distro of choice. Frankly, once you "know Linux" it's trivially easy to find and modify all the hidden features. Once you open a terminal, you have access to all the power, customization, and advanced features of any other Linux distro.
Furthermore, many experts may prefer Ubuntu's simplicity, because it lets you get to the tasks you actually care about (and care about customizing) faster. It's nice to be able to complete a full install in 15 minutes (yes, I timed it), with no hassles, and then fine tune it as needed. As I said before--it's not like the customizations are not there. Just open a terminal, edit a config file, just like any other distro.
Parent
Re:Choices and Plurality (Score:5, Insightful)
The funny thing about that is that he complains when Ubuntu provides tools for people with different levels of Linux familiarity. Like here, where he complains about package managers:
If he doesn't think Synaptic is less flexible that apt-get, what are the reasons? Is he arguing that we should just have apt-get and not Synaptic or Add/Remove Applications? Of course Add/Remove Applications is basic. If I was going to hand Ubuntu over to my mom, I would be happy that there is a basic Add/Remove Applications menu item she can click on to see what's available. It is easy to see what it does, and it can get the job done for someone who wouldn't even know what to do with the flexibility of more advanced commands. I prefer Synaptic, because it lets me see all of the packages, categorized in several different ways, and gives me clear, easy to see information about each of them. I'm not scared of the CLI, but how is apt-get easier to use than Synaptic? Maybe if you already know the exact name of the package you want to install, but if you need any information about the packages available, I think Synaptic is very easy to use. The author seems to only like apt-get, but if that's all Ubuntu included, how would my mom install or remove apps?
It sounds like he really wants Ubuntu to be less tailored for the average home user... He seems to be upset that the distro that home users would prefer is geared towards not confusing them.
Parent
Re:Choices and Plurality (Score:4, Insightful)
Parent
Come ON, how full of crap is this? (Score:5, Interesting)
Use the alternative LiveCD. Note you don't need to "secure the system", since the default install does not bind any sockets listening. I actually consider it one of Ubuntu's strongest feats that you are not facing any choice of package selection whatsoever, so you can be sure you will end up with a sanely organized system you can build upon, if you want, or just walk on with the preset choices.
Next hilarious thing on his list is the boot menu - if you're actually an advanced-enough user to know about the possibility of testing your memory at bootup, I figure you also know about how to hit Escape to have GRUB's full menu appear.
He's got one point on fonts, as there can never be enough fonts included in an install. I personally do like Gentium though, and consider freetype's font rendering as Ubuntu sports it very pleasing to the eye.
On page two, where he's going to whine about "Proliferating package managers", the author imho show severe lack of understanding concerning Debian-ish package management. Well, let there be a lightweight update-checking-utility that does not come up with the whole bunch of X11-windows that is synaptic. It's a good thing it's there - it uses the same backends as apt-get, aptitude, synpatic, dpkg, adept, whatthefuckever use, and it saves you from manually checking for updates every so often. So would you please stop being anal about it? Thanks.
Also on page 2: "At any rate, the only way to judge how useful a package might be is to use it yourself." Oh wow, movie at eleven. I won't even comment on this, Cpt. Obvious to the rescue.
Page 3 is about security, and once again tha author seems clueless to me. An "intruder" on a default Ubuntu system can pretty much by definition (due to the lack of running network-interfacing daemons) only be a local attacker with physical access to your machine. Well, in case of physical access you're hosed anyway.
The point in criticizing default group memberships for the "desktop"-class of users is also beyond me. Well, that is how UNIX tends to work, and if it weren't for the desktop user to be able to, e. g., adjust the sound system's mixer levels or burn a CD, what's left for "desktop" usage to be done? No access via `sudo` means no (write-)access to other account's files and data. Besides, if you let people you don't trust gain local access to a machine via their very own personal account, you should probably check for your very own mental sanity/security first.
My point is, if Ubuntu actually behaved like he now states he'd like it to in his article, it'd be a flamefest of a different kind: namely criticizing how Ubuntu lacked in "usability", and how it would shy away "novice users".
Ubuntu is a very fine choice for someone starting out with GNU/Linux or computers all together. It's also a fine choice for someone more knowledgeable, since it's perfectly possible to stray away from the sane defaults the Ubuntu devs chose for the distro. If you happen to find your demands outstrip Ubuntu's capabilities, you're probably better off by creating a distribution of your own.
My 2 cent.
Re:Come ON, how full of crap is this? (Score:5, Interesting)
I'm the first to agree that in a high-tech-level setting Ubuntu has MANY shortcomings. As an example, it takes me about 5 seconds to get a RedHat based machine configured on our Kerberos network using authconfig. I spent a half hour with it (I'm no Kerberos expert), and I still can't get Ubuntu working correctly since I have to do everything manually. My point, however, is that NO home user is EVER going to want to set up Kerberos, so that's not what Ubuntu is geared for and I can't get upset with them for that. Same goes for partitioning in the installer. Anyone remember the options in the Windows installer? They're on the same level: let the installer wipe the drive and commit it to Linux, or set up a few paritions on your own and tell the installer which one it can use.
Lastly, I have to disagree with the author regarding the user account classifications. He claims, erroneously, that by allowing for the use of 'sudo', an attacker only needs one password to break a system, whereas with a root account he claims you need 2. Umm . . . hello . . . you still only need one password, root's password! Unless your savy enough to not allow root logins . . . It seems perfectly acceptable to me to provide those three levels of user accounts and even that is more than most people will need.
Parent
Re:Come ON, how full of crap is this? (Score:4, Interesting)
Wrong. A buffer overflow in Firefox can be the attack vector. As can be a hole in any internet facing software that use internet data (Synaptic, FreeAMP, Media players) or even applications that open any files(if GIMP has a vulnerability parsing JPEG files, even JPEG files could possibly result in a "intruder" gaining access to your machine(not root access though, unless you run GIMP as root).
Parent
Re: (Score:3)
I dunno. What if there was a wiki, conveniently linked straight from the package manager?
who (Score:3, Interesting)
duhh (Score:5, Insightful)
With Linux I've noticed that user control is inversely proportional to user-friendliness. Operating systems like Ubuntu are made with user-friendliness in mind and that comes at the price of user control. It's quick and easy to set-up and use which garners alot of favor from the Windows crowd.
Similarly, Gentoo gives the user complete control over what applications, drivers, daemons are installed but is by no means user-friendly.
The writer of TFA really did a whole lot of whining about how little control he had over the installation and initial software packages. What did he expect? It's Ubuntu.
Re:duhh (Score:4, Informative)
With Linux I've noticed that user control is inversely proportional to user-friendliness.
That's not so. A user who expects a large amount of control is going to find a "user friendly" OS that limits him to be very unfriendly.
Operating systems like Ubuntu are made with user-friendliness in mind and that comes at the price of user control. It's quick and easy to set-up and use which garners alot of favor from the Windows crowd.
Except that it doesn't come at the price of user control. A Ubuntu system can do pretty much everything a plain debian system can. The shell is still there and fully functional, same with apt-get.
Parent
Re:duhh (I disagree completely) (Score:5, Interesting)
I completely disagree. I don't think Ubuntu is successful because of Windows users. At all. It is successful because it fills a need that Linux users have been waiting for - a distro that is easy to maintain. Unless you are maintaining multiple machines, you shouldn't be doing many installs. (even if you are, you shouldn't be doing many 'installs') I don't really care if the install takes 15 minutes or 2 hours. I only install once. I have never really understood why so many reviews focus on the installation! Yes, it is important, I have done some really tough installs in my day. It is a critical step, but the MORE important thing is how you maintain the system. That is where Ubuntu really stands out. It is why I switched to it. I was on Mandrake (before it changed names) and before that SuSE and various RedHat distros. This was dependency hell. Even though SuSE and Mandrake said you could update your system, you could not. I ran into ALL kinds of issues, my packages were getting outdated and I couldn't easily update them. So I have now been on Kubuntu for over 2 years, and even did an Upgrade with minimal hassle (damn NVIDIA). Dependency hell is pretty much a thing of the past for me.
Ubuntu lets me USE Linux, and I can tinker where I want to - not where I have to. I still feel like the tinker-factor is still a little high for the average user (esp Windows users) but the strides that Ubuntu has made over other distros is immense.
Parent
Gentoo binaries (Score:3, Insightful)
Clash of new vs. old-school users (Score:5, Insightful)
- By default, the user never has to select any partitioning options, or even know what it is.
Well, most people don't know what partitioning is.
- Want to choose which software to install.
Once again, new linux users won't know the names of all the programs they might want. Ubuntu installs what I consider a reasonable selection. Talk of knowing exactly what is installed sounds more like server talk, for which you probably want Ubuntu server, which does install a much smaller selection of packages by default
- Doesn't send hundreds of confusing messages past at high speed on boot-up (me paraphrasing)
Well good, particularly because most start-ups have at least one thing which looks to the untrained eye like a failure
Other problems, including fonts, are possibly more valid. I'd be interested to know what an Ubuntu expert's opinion is on them.
User Friendliness (Score:5, Interesting)
FTFA
and
I think this is where us techies fall down sometimes. We assume that everyone who uses a computer wants to "Explore their system" or take "control over them".
Let's face it, probably about 90% of computer users use an office type application, a browser and an email client and the more advanced of them may use a feed reader of some sort. The most "control" they want over their system is to change the background and perhaps the colour scheme, and they want to do it easily, no code, no hassle.
And that's fine! Their computer is a tool to do their job. They learn how to do what they need to do and that's it.
So, it's a good thing that Ubuntu is easy to use. Us techies who want to "stray beyond the defaults" will find the way to do it anyway.
Yes it is like Windows (Score:3, Insightful)
I can see the author's point to an extent, but Ubuntu isn't aimed at him, and he won't be able to approach it from the target user'sperspective.
Power user features? (Score:4, Informative)
As long as there's a terminal available and gcc, you just can't complain about lack of power user features in Linux.
He complains about the multiple package management programs. There's no problem here, since they all use the same underlying database, and a newbie would never know about the command line ones, and wouldn't need to.
A new user will get along just fine with the simplicity of Ubuntu on the desktop. A power user will hit the command line and have no problems.
It seems like this guy knows just enough about Debian to be dangerous, and is now cranky that Ubuntu is slightly different.
A different take... (Score:3, Informative)
For crying out loud! (Score:4, Informative)
If you want gentoo use gentoo , If you want debian use debian, please don't expect every distro to follow your own ideas of the perfect distro and for god's sake, don't even think that your idea of the perfect distro should be considered dogma.
I think that as much as the author blames ubuntu for complacency out of popularity, the things the author is complaining about are not specific to this release which kind of destroys the whole article, as if the guy didn't know the things he is complaining about are exactly the reason ubuntu is so popular.
I RTFA this is a summary:
Color me unimpressed by this article.
Re:Name? (Score:5, Interesting)
Simply put, the name "Gutsy Gibbon" (and "Feisty Fawn," etc.) are developer code-names, just like "Longhorn" was for Windows Vista. The final released version of Gutsy Gibbon will be called "Ubuntu 7.10". So, if you are talking to your CEO, you will presumably mention "Ubuntu 7.10 Server" and not "teh Gibbon!!" Note that you won't see the term "Gutsy Gibbon" mentioned in an installed OS (except in the sources file for aptitude, but a normal user is unlikely to ever see that).
You can hardly fault the developers for wanting to have codenames for the releases. It's a useful means of differentiating between pre-release and final versions. Now, I fully admit that many users of Ubuntu stick to the codenames afer the release. If you read ubuntuforums, lots of people will ask things like "are you running Feisty or Dapper?" and so on. I guess that just means that Linux enthusiasts enjoy the whimsical names.
So, the developers are not interested in dropping the codenames, since the community seems to enjoy them. But please bear in mind that they are not "names of releases"--they are codenames that do not appear on the official releases. (For instance, check the download page [ubuntu.com]: it mentions "Ubuntu 7.04" and "Ubuntu 6.06".)
Parent
Re: (Score:3, Informative)
Re:Name? (Score:5, Insightful)
Who's to say that any name is lame or not? More importantly, who cares? A cursory glance beyond whatever moniker a distribution has is really needed before a decision is made to adopt it. If you judge based on a name, you probably shouldn't be in a position to decide anyway!
If you are really worried about the name as it relates to non-geek circles, use their numbering scheme instead. Gutsy Gibbon is Ubuntu 7.10 (https://wiki.ubuntu.com/GutsyGibbon).
Personally, as long as the Ubuntu guys continue to churn out an excellent product, I could not care less about the name.
Parent
Re:Name? (Score:5, Funny)
I just refer to it as Gibbon when necessary; when questioned about why the name Gibbon was chosen, I tell them it's to recognize the hard work of all the codemonkeys.
I haven't yet been challenged on the fact that Gibbons are apes, not monkeys, so I'm sticking to my story.
Parent
Re:Name? (Score:5, Funny)
Parent
Re: (Score:3, Insightful)
Yes, because OS X isn't limited at ALL in the hardware it can run on, right? Please.
Re:According to distrowatch.org, Ubuntu is NOT #1 (Score:4, Informative)
The Distrowatch ranking is only a count of how many people click through distrowatch.org to get to a distribution.
Because the Ubuntu name is so well known, the vast majority of people downloading Ubuntu do it by going to ubuntu.com directly, or get directed to ubuntu.com by Google.
PCLOS, on the other hand, is practically unknown. I would imagine that most people have never heard of it until they went to Distrowatch and saw it near the top of the list, and decided to click on it. In fact, that is how I first learned about PCLOS.
Since most people are discovering PCLOS through Distrowatch, while most people are downloading Unbuntu via ubuntu.com, it makes sense that PCLOS would show up higher on the Distrowatch ranking.
In fact, if you look at Google Trends [google.com] more and more people are searching for "Ubuntu" on Google, even as the amount of people searching for "Linux" is dropping. You could argue that Ubuntu is becoming a replacement for Linux in the common lexicon. Meanwhile, "PCLOS" and "PCLINUXOS" hardly even show up in any Google searches.
Parent
Re: (Score:3, Informative)
Option "Rotate" "UD"
To your device section to show the display upside down by default. It'll work with most X.org drivers.