An anonymous reader writes "It's been found that the Btrfs file-system is vulnerable to a Hash-DOS attack, a denial-of-service attack caused by hash collisions within the file-system. Two DOS attack vectors were uncovered by Pascal Junod that he described as causing astonishing and unexpected success. It's hoped that the security vulnerability will be fixed for the next Linux kernel release." The article points out that these exploits require local access.
Migrate from GitHub to SourceForge quickly and easily with this tool. Check out all of SourceForge’s recent improvements.×
yanom writes "I'm currently a high school student using my TI-84 for mathematics courses. It has all the functionality I need (except CAS), but saying that the hardware is dated is putting it nicely. Waiting 4-5 seconds for a simple function to be graphed on its 96x64 screen just makes me want to hurl it at the wall. Recently, I've begun to notice the absurdity of doing my math homework on a 70's era microchip when I have an i7 machine with Linux within arm's reach. I've begun looking for software packages that could potentially replace the graphing calculator's functionality, including Xcas and Maxima, but both lack what I consider basic calculator functionality — xcas can't create a table of values for a function, and maxima can't use degrees, only radians. So, does anyone know of a good software package to replace my graphing calculator (and maybe provide CAS to boot)?"
jppiiroinen writes "It seems that Nokia is slowly killing existing applications for their Linux based N9 mobile phone which are available through their store. As a developer who has published paid (and free) apps, it appears after their final blow of killing the support for paid applications in China, where the main revenue came from, there is not any means to make money, and no reason to maintain apps anymore. What this means also for the end-users: no premium apps, like Angry Birds. There was no heads-up or anything, just a single email without any means to make a complaint. Nokia, So Long, and Thanks for All the Fish." Also being discussed at Maemo.org.
sfcrazy writes with news that Linus pulled a patch by Ingo Molnar to remove support for the 386 from the kernel. From Ingo's commit log: "Unfortunately there's a nostalgic cost: your old original 386 DX33 system from early 1991 won't be able to boot modern Linux kernels anymore. Sniff." Linus adds: "I'm not sentimental. Good riddance."
Jeremy Allison - Sam writes "We released Samba 4.0 today, containing the first compatible Free Software implementation of Microsoft's Active Directory protocols. 'Samba 4.0 comprises an LDAP directory server, Heimdal Kerberos authentication server, a secure Dynamic DNS server, and implementations of all necessary remote procedure calls for Active Directory. Samba 4.0 provides everything needed to serve as an Active Directory Compatible Domain Controller for all versions of Microsoft Windows clients currently supported by Microsoft, including the recently released Windows 8. The Samba 4.0 Active Directory Compatible Server provides support for features such as Group Policy, Roaming Profiles, Windows Administration tools and integrates with Microsoft Exchange and Free Software compatible services such as OpenChange.'" Full release notes are available, and you grab the files from the download page.
The wait is over; diegocg writes "Linux kernel 3.7 has been released. This release adds support for the new ARM 64-bit architecture, ARM multiplatform — the ability to boot into different ARM systems using a single kernel; support for cryptographically signed kernel modules; Btrfs support for disabling copy-on-write on a per-file basis using chattr; faster Btrfs fsync(); a new experimental 'perf trace' tool modeled after strace; support for the TCP Fast Open feature in the server side; experimental SMBv2 protocol support; stable NFS 4.1 and parallel NFS; a vxlan tunneling protocol that allows to transfer Layer 2 ethernet packets over UDP; and support for the Intel SMAP security feature. Many small features and new drivers and fixes are also available. Here's the full list of changes."
Nerval's Lobster writes "Game developer David Bolton writes: 'For my development of Web games, I've hit a point where I need a Virtual Private Server. (For more on this see My Search for Game Hosting Begins.) I initially chose a Windows VPS because I know Windows best. A VPS is just an Internet-connected computer. "Virtual" means it may not be an actual physical computer, but a virtualized host, one of many, each running as if it were a real computer. Recently, though, I've run into a dead end, as it turns out that Couchbase doesn't support PHP on Windows. So I switched to a Linux VPS running Ubuntu server LTS 12-04. Since my main desktop PC runs Windows 7, the options to access the VPS are initially quite limited, and there's no remote desktop with a Linux server. My VPS is specified as 2 GB of ram, 2 CPUs and 80 GB of disk storage. The main problem with a VPS is that you have to self-manage it. It's maybe 90% set up for you, but you need the remaining 10%. You may have to install some software, edit a config file or two and occasionally bounce (stop then restart) daemons (Linux services), after editing their config files.'"
spacenet writes "As a response to RMS speaking out against Ubuntu about its privacy-violating integrated Amazon search results, which he considers to be spyware, Ubuntu Community Manager Jono Bacon has addressed RMS's statements. In his reply, Jono claims that Stallman's views on privacy do not align with Canonical's, that some of his statements are worded in order to 'generate fear, uncertainty, and doubt about Ubuntu' and that 'it just seems a bit childish to me.' The comments on the post itself are well worth a read."
symbolset writes "The Verge is reporting that the Steam Console we discussed in November is a real thing. Gabe Newell said it will be a locked down platform for the living room. The source is a Kotaku interview with Newell at the Video Game Awards. Newell said, 'Well certainly our hardware will be a very controlled environment. If you want more flexibility, you can always buy a more general-purpose PC. For people who want a more turnkey solution, that's what some people are really gonna want for their living room. The nice thing about a PC is a lot of different people can try out different solutions, and customers can find the ones that work best for them.'"
An anonymous reader writes "After having Wine to run Windows binaries on Linux, there is now the Darling Project that allows users to run unmodified Apple OS X binaries on Linux. The project builds upon GNUstep and has built the various frameworks/libraries to be binary compatible with OSX/Darwin. The project is still being worked on as part of an academic thesis but is already running basic OS X programs."
mcloaked writes "We get all kinds of news about new developments, but one subject has been lacking for some time and that is email clients for Linux (or Windows for that matter). A number of reviews (mostly not all that recent) have pointed to the main clients as Thunderbird, Evolution, Claws-mail, and Kmail as possibilities. Up to about a year ago, Thunderbird seemed to be 'the' email client with the best mix of positives. However there are no recent reviews that I have seen. In the meantime Thunderbird has moved to monthly releases, which are more maintenance releases containing security fixes but little functional change — and little new development. Thunderbird also won't be significantly altered in the future, if one interprets the available news information. Evolution is reported to be rather prone to bugs, and Kmail even more so. Claws-mail has limitations, as does Kmail. So where is the future of Linux email clients going, absent any real innovation? We need a well maintained and capable mail client, preferably with good calendar integration (webcal/Google calendar), properly supported HTML composing, good maildir format storage for local mail, and good security support (including the capacity to deal with both GPG and S/MIME encryption and signing). It needs a modern UI and good import/export facilities, as well as good integration with its address book, including import/export of addresses. Are we likely to see this kind of package as we move into the future, or will mail clients slowly disappear? At the moment it looks like email client support is dead — Are too many users moving into web mail and the cloud instead of having a properly functional mail client on their desktops?"
jcreus writes "After struggling for some years with Nvidia cards (the laptop from which I am writing this has two graphic cards, an Intel one and Nvidia one, and is a holy mess [I still haven't been able to use the Nvidia card]) and, encouraged by Torvalds' middle finger speech, I've decided to ditch Nvidia for something better. I am expecting to buy another laptop and, this time, I'd like to get it right from the start. It would be interesting if it had decent graphics support and, in general, were Linux friendly. While I know Dell has released a Ubuntu laptop, it's way off-budget. My plan is to install Ubuntu, Kubuntu (or even Debian), with dual boot unfortunately required." So: what's the state of the art for out-of-the-box support?
Deathspawner writes "Perhaps hinting at the fact that the official Steam for Linux launch isn't too far off, Valve has begun updating some game pages to include Linux system requirements. Some games don't list only Ubuntu as the main supported distro, with some listing Linux Mint and Fedora as well. A common theme is that Valve recommends you always use a 'fully updated' OS, regardless of which distro you use. And based on the system requirements laid out so far, it's safe to say that Serious Sam 3: BFE will undoubtedly be the most system-intensive game released at launch."
An anonymous reader writes "In a post at the Free Software Foundation website, Richard Stallman has spoken out against Ubuntu because of Canonical's decision to integrate Amazon search results in the distribution's Dash search. He says, 'Ubuntu, a widely used and influential GNU/Linux distribution, has installed surveillance code. When the user searches her own local files for a string using the Ubuntu desktop, Ubuntu sends that string to one of Canonical's servers. (Canonical is the company that develops Ubuntu.) This is just like the first surveillance practice I learned about in Windows. ... What's at stake is whether our community can effectively use the argument based on proprietary spyware. If we can only say, "free software won't spy on you, unless it's Ubuntu," that's much less powerful than saying, "free software won't spy on you." It behooves us to give Canonical whatever rebuff is needed to make it stop this. ... If you ever recommend or redistribute GNU/Linux, please remove Ubuntu from the distros you recommend or redistribute.'"
hypnosec writes "The Linux 3.7 kernel has been delayed by one week as Linus Torvalds has released the Linux 3.7-rc8 instead. Because of some hiccups following the 'resurrection of a kswapd issue,' Torvalds wasn't comfortable releasing version 3.7 this week and instead went ahead with another release candidate. Torvalds revealed in his release announcement that because of this delay, the merge window for Linux 3.8 will close just around Christmas time."