An anonymous reader writes "If you are a security developer and need to interface a Java application with the local operating system user registry, what do you do? IBMDeveloperWorks gives you the answer: 'UNIX/Linux PAM (Pluggable Authentication Module)-compatible systems that use authentication based on the GNU MD5 extensions to the crypt() system call. It will describe these extensions and show you a Java implementation of MD5 crypt (using FreeBSD as my UNIX).'"

B Man asks: "I have been working in IT related jobs since 1994, and in that time, I have held the following positions: Security Administrator, Systems (Linux) Administrator, Network Engineer, Computer Consultant, and Project Manager. Almost all of my experience has been in medium sized businesses, but mow I have come to be in the situation of having two job offers that would be in totally different environments, and I am at a crossroads. My choices are: a position which allows me to work with cutting edge technologies, being the main technical contact to a Fortune 10 company; or a position in a higher education facility, in the Unix Administrator role. Both jobs have their good and bad points, but I would like to hear which one Slashdot readers recommend, and why."

Slashback tonight brings some corrections, clarifications, and updates to previous Slashdot stories, including a possible release date for the long awaited Optimus keyboard, yet another extension in the Blackberry court case, lakebed theory on Mars possibly all wet, US-CERT statistics perhaps not all they are cracked up to be, stem cell investigation reveals papers were faked, the FTC objects to the Netflix settlement, and a new Crossover Office fixes the WMF exploit among other things. Read on for details.

Will Wilkinson writes "Jaron Lanier's recent essay, The Gory Antigora: Illusions of Capitalism and Computers, kicks off a discussion of 'Internet Liberation: Alive or Dead?' at the Cato Institute's new blogazine, Cato Unbound. In Lanier's essay today, find out how the 'brittleness' of software has kept the Internet from realizing its potential as 'a cross between Adam Smith and Albert Einstein; the Invisible Hand accelerating toward the speed of light.' Also, find out why, upon meeting Richard Stallman, Lanier's reaction was: 'An open version of UNIX! Yuk!'"

ooglek asks: "FM radio seems to be falling out of favor, with many stations putting their streams online. Unfortunately, many choose bad codecs and low bandwidth feeds, which make them practically unappealing. There seem to be a fair number of PCI-based TV Tuner cards that come with a built in FM receiver, and I'm interested in what it might take to stream my local FM stations to the Windows, Unix and Mac boxes in my house over my LAN, as well as my TiVo and Slim Devices SqueezeBox. Is this merely a pipe-dream?"

Joe Barr writes "Joe Brockmeier and I have teamed up in a story on NewsForge to point out how the mainstream and trade press misrepresent the annual summary of vulnerabilities from US-CERT. They're doing it again this year to make it appear as if it is more secure than UNIX/Linux. Pamela Jones did a similar report at Groklaw over the weekend." From the article: "One figure represents the vulnerabilities found in Windows operating systems: XP, NT, 98, and so on. The other represents a total figure not just for Solaris, AIX, HP-UX, the BSDs, and Linux, but for a hundred different versions of Linux. The sum of all the unique vulnerabilities from all the Linux distros does not equate to the sum of vulnerabilities in any single Linux distro, and one could say the same about the various versions of Windows. That's why it is a completely meaningless exercise to discuss those totals as if they present an accurate picture of the relative security of Windows and Linux. " We've reported on the US-CERT list already this year. NewsForge is a sister site to Slashdot.org, both of whom are owned by OSTG.

rm69990 writes "According to Groklaw, SCO now seeks to amend their complaint against Novell. SCO says it 'seeks leave to file a Second Amended Complaint in significant part in consideration of the counterclaims that Novell asserted in its Answer and Counterclaims.' SCO now accuses Novell of infringing SCO's copyrights by distributing SUSE Linux, of breaching a non-compete clause between the two companies, and SCO is also asking for specific performance forcing Novell to turn over the Unix copyrights to SCO. So SCO is essentially admitting that Novell owns the copyrights at this point, but is saying that Novell breached the contract (that specifically excluded copyrights) by failing to transfer them to Santa Cruz."

BeanBunny writes "I realize that this topic is almost as volatile around here as Intelligent Design, but I think this is interesting nonetheless. US-CERT has released their year-end vulnerability summary. According to InformationWeek.com, Linux/Unix (including Mac OS) had almost three times the number of OS-specific vulnerabilities reported last year compared to Microsoft Windows. Obviously, statistics are meaningless without the proper conjecture, speculation, and opinionation, so let the debate begin again over which OS is really more secure."

An anonymous reader writes "Security researchers uncovered nearly 5,200 software vulnerabilities in 2005, almost 40 percent more than the number discovered in 2004, according to Washingtonpost.com. From the article: 'According to US-CERT...researchers found 812 flaws in the Windows operating system, 2,328 problems in various versions of the Unix/Linux operating systems (Mac included). An additional 2,058 flaws affected multiple operating systems.'"

greenBeard asks: "I work for a government contractor, and have recently convinced them to purchase a Beowulf cluster, and start moving their numeric modelers from Sun to Linux. Like most historically UNIX shops, they don't allow users even low-level SUDO access, to do silly things like change file permissions or ownerships, in a tracked environment. I am an ex-*NIX admin myself ,so I understand their perspective and wish to keep control over the environment, but as a user, I'm frustrated by having to frequently call the help-desk just to get a file ownership changed or a specific package installed. If you're an admin, do you allow your users basic SUDO rights like chmod, cp, mv, etc (assuming all SUDO commands are logged to a remote system)? If no, why don't you? If you allow root access to your knowledgeable users (ie developers with Linux experience), what do you do to keep them 'in line'?"

pgsqlDao writes "CRN is reporting that Oracle is joining IBM's AIX Collaboration Center. 'IBM announced the center Dec. 16 as a $200 million investment where it will centralize AIX development, customer relations and advanced features for independent software vendors. While the figure represents existing salaries and equipment drawn together under one roof, it also represents some shift in emphasis by IBM from Linux back to its mature Unix operating system.' In November Oracle announced that it has chosen Solaris 10 as it's preferred development and deployment platform for X64 computing."

Tiberius_Fel writes "TechWorld is running an article saying that Vista's graphics will not be in the kernel. The goal is obviously to improve reliability, alongside the plan to make most drivers run in user mode." From the article: "The shift of the UI into user mode also helps to make the UI hardware independent - and has already allowed Microsoft to release beta code of the UI to provide developers with early experience. IT also helps make it less vulnerable to kernel mode malware that could take the system down or steal data. In broader terms, this makes Windows far more like Linux and Unix - and even the MacOS - where the graphics subsystem is a separate component, rather than being hard-wired into the OS kernel."

cyclop asks: "I am a close friend of a Ph.D. student on human interface usability. She's now working to tailor a KDE-vs-Gnome usability study (a pretty hot topic these days), and I have been called to help, as a long time GNU/Linux desktop user. What kind of advice -- both technical and theoretical -- would you give us on conducting a deep and objective study on the Unix desktop, that can be useful for the developers and the OSS community?"

missing_myself writes "Linux.com has nice summary on 'How major distributions are dealing with potential violations of patents and trademarks, cryptography, packaging proprietary software and consequential damages' from Bruce Byfield (a journalist from OSTG)." From the article: "Slowly, some commercial distributions are taking a different route. In the last few years, indemnification has become an increasingly important issue in FOSS communities, largely because of the SCO-IBM case. Claiming ownership of Unix, SCO alleges that IBM has allowed copyrighted code to pass from System V Unix to GNU/Linux. Although no evidence has been released and the trial is not scheduled until February 26, 2007, the issues in the case have made both commercial and community FOSS participants reevaluate their practices."

duffbeer703 asks: "My employer runs alot of desktop and laptop computers -- something in the neighborhood of 40,000 PCs. Currently they are all Windows 2000 & XP managed by Active Directory and other big, complicated enterprise management tools, all of which can support Linux in one form or another. I'm looking for ways of making Linux (and maybe Unix or even Apple desktops) an option as we replace or add PCs. The problem is, most of the resources that you find online about deploying Linux focuses on server environment, and the articles that I do find about desktop Linux focus on standalone developer workstations, the IBM conversion to Linux (which doesn't seem to have happened) or things like LTSP, that won't integrate well with our infrastructure. Is anyone out there successfully using Linux for regular users? How did it go, and how did your IT and user communities adapt to the new kid on the block?"

Last week you submitted questions for Dr. Herb Thompson, author of the latest Microsoft-sponsored Windows vs. Linux study. Here are his answers. Please feel free to ask follow-up questions. Dr. Thompson says he'll respond to as many as he can. He's registered a new Slashdot username, FFE4, specifically to participate in this discussion. All others claiming to be him are imposters. So read, post, ask, and enjoy.

That the Internet is a big, scary place is hardly worth mentioning. For every respectable site, there are three or four seedy places that you wouldn't want to be seen surfing by relatives. While LiveJournal has a reputation as an angst-fest, there are many individuals using the power of self-publishing to impressive ends. Every once in a while, one of those self-publishers even moves beyond the confines of the electronic medium to the world of dead-tree publishing. Movies in Fifteen Minutes (M15M) is just such a project, born on the Internet to high acclaim, with the core idea transferred extremely successfully to a traditional book format. Read on for my impressions of the only book on the market today to feature a hilarious version of Braveheart's evisceration scene. Good times.

Spencerian writes "The surge of Unix-derived operating systems such as Mac OS X, Linux, and the now-free Solaris is not slowing against the fortified but embattled breakwaters of the Microsoft operating system family. But new power users of other operating systems, including those just starting with Unix as well as the graphical interface of the operating system (such as the Mac OS Finder, or the navigators of KDE or Gnome), remain in need of a comprehensive primer for Unix that complements their previous knowledge. The fourth edition of Dave Taylor's "Teach Yourself Unix in 24 Hours" should remain on the top of the buy list for computer users in need of a strong Unix reference where they may find themselves managing or using the subtle variants of Unix flavors." Read the rest of Spencerians' review.

Mortimer.CA writes "In a weblog entry, Paul Murphy mentions a Microsoft report (40 page PDF) that in many instances FreeBSD 5.3 and Linux perform better than Windows XP SP2. The report is about MS' Singularity kernel (which does perform better than the OSS kernels by many of the metrics they use), and some future directions in OS design (as well as examination of the way things have been done in the past)." From the post: "What's noteworthy about it is that Microsoft compared Singularity to FreeBSD and Linux as well as Windows/XP - and almost every result shows Windows losing to the two Unix variants. For example, they show the number of CPU cycles needed to "create and start a process" as 1,032,000 for FreeBSD, 719,000 for Linux, and 5,376,000 for Windows/XP."

sunBoy asks: "A number of OpenSolaris-based Operating Systems are popping up on the map. BeleniX (screenshots), SchilliX and Nexenta (screenshots) are a few OSes which have hit the headlines in the past couple of weeks. Some say OpenSolaris has a leg up on Linux - 'For Linux, we're trying to push many distributions through to compress them into a standard. With OpenSolaris, we are already at the small end of standardization. What will follow is more OpenSolaris distributions spreading out from that core.' Is OpenSolaris really a threat to Linux?" Less of a threat and more of an alternative. Would more Unix-based alternatives on the market really be a bad thing?