While on the Topic of Google

While on the topic of Google, I ran across this interesting read from Jason about his predictions for Google for 2006. He was lucky enough to be backstage after the recent Google keynote at CES. He foresees a calendar (which I think most people do) and an office suite, but goes a huge step further by prophesising: by the end of the year they will come out with a Linux-based OS and offer it for free to PC makers. Those PC makers will love Google for giving them a free OS and Google will love extending the reach of their money maker: google Adsense.
Now that would be extremely interesting, although I'm not sure 2006 is the right time frame for a Linux-based GoogleOS. I think at some point one is nearly inevitable though. One bit of news that already did come from Google in 2006 is that they released their own DRM. Isn't that borderline evil? I still have never seen an argument that lead me to think that DRM was anything but extremely bad for consumers. According to this article, Google Video is only going to work on Windows, so not only are they creating yet another silo for video options, they're creating yet another silo that we can't even check out. Not exactly how I had hoped they'd start the year out.
,
–jeremy

Linux/Unix Vulnerabilities Outnumber Microsoft Windows' 3 To 1

Or do they? This is a fantastic example of numbers not meaning anything if you're just throwing something against the wall. Actually, these numbers are less than useless, they're just plain silly. The original stats are from the US-CERT site, but that fantastic headline came from this article. From the article: Tallies kept by the U.S. government's computer security group show that Linux and Unix operating systems faced nearly three times the number of vulnerabilities in 2005 than did Microsoft's often-maligned Windows.
In the US-CERT (United Stated Computer Emergency Readiness Team) year-end vulnerability summary, Linux/Unix accounted for a whopping 2,328 vulnerabilities, about 45 percent of the 5,198 total.

Now, before you get worried… let's dig into this numbers a bit. First, why are they lumping Linux, UNIX and OS X into a single group and then comparing it to a single vendor? Would you lump Lexus, BMW, Infinite, Toyota, Honda, Porsche, Volkswagen, Saab and Volvo into a single group, compare them to Chevy and then say that Chevy's are safer? I'd hope not. It gets worse though. They note only include things that are in no way related to the OS (GNU GNATS Gen-Index Arbitrary Local File Disclosure/Overwrite, Yukihiro Matsumoto Ruby Infinite Loop Remote Denial of Service (Updated), and Yapig Cross-Site Scripting & HTTP POST Requests Validity are three good examples, but you'll need to take a look at the full list to get a real appreciation) but they include multiple reports from different *NIX vendors about the same issue as different bugs. A bzip vulnerability is on there 10 times! The disturbing reality is, someone giving this a cursory glance might believe these asinine numbers. Never mind that they include safari in the *NIX number, even though that can't possibly impact you if you run Linux. Complete junk. Beyond the stupidity of the numbers though, there is a bigger issue. Security issues in Open Source actually get spotted and fixed on a regular basis. This is a *good* thing and it makes you much more secure in the end. The security by obscurity and closed source aspect of Windows means that a bug is only acknowledged and fixed when Microsoft decides to do it. Remember those png/jpeg issues from a couple years ago? They are just getting fixed now in Windows, where the Open Source world addressed them in 2003. You decide what is more security, but always look into the numbers you are given as opposed to just reading a headline that is meant to get readers. I look forward to the day when journalism like this just doesn't happen. Why do I think I'll be waiting a while?
, , , , ,
–jeremy

You Never Forget Your First Web Server

A great post from Jeremy Zawodny about the first public web server he had. I remember mine quite well also. It was a dual PentiumPro 180 with a PR440FX Intel board and would become the first machine to run LQ. I think I had the server online in 1999, although LQ didn't go up into 2000. The distro was Red Hat 5.2, aka Apollo, although by the time LQ was public it had been upgraded to zoot. As Jeremy says, you used to actually upgrade machines as opposed to just replace them. I remember having to bring LQ down for a couple hours to upgrade the machines single IDE drive to multiple SCSI drives with an Adaptec PCI controller. It also received a memory upgrade some time later. I even installed an LCD in it at one point. The machine actually sits just a few feet from my desk, right next to the second machine to run LQ (which was actually a rackmount server). LQ's come a long way since then. I've attached a old picture.

–jeremy

Dell vs. Microsoft II

A sort of follow up to this post. It looks like Dell is standing strong in its decision to back Blue-ray (which it had a hand in creating) despite Microsoft pressure and incentives to back HD-DVD. The Dell/Microsoft partnership definitely is not what it was just a few years ago. The power balance is slowly shifting and when you add in the legal scrutiny that Microsoft is under, they just can't strong arm like they used to be able to do. If a major vendor like Dell starting to preload OpenOffice.org as a default and then offer Office as an upgrade, it would have major implications. Not only would it impact the profit center of Microsoft, but the precedent would be set. Dell is poised to step out of the shadow that it has been in and be able to make decisions like this without fear of retribution. Does that mean you'll soon see real Linux preloads from Dell? I doubt it, but some day I think it'll be inevitable. It's just a matter of how far away some day is.
, ,
–jeremy

BusinessWeek Looks at How Open Source Did in 2005

Here's a BusinessWeek article that looks at what they consider the five biggest Open Source events of 2005. Not sure I agree with all of them, but it's always good to see the mainstream media report positively op Open Source. I think one thing true about 2005 is that CIO's did buy into Open Source (literally). Companies such as Red Hat did extremely well. In this initial adoption phase though, companies seem to just purchase Open Source as they did with closed source and proprietary items. In a couple years, when they realize the true benefits of buying into the ideals of Open Source, it will be interesting to see how companies like Red Hat do. I'd guess they'll adapt to the times and flourish, but it's going to be a major shift. These are fat times in a lot of ways and things are going to get much more competitive I think. That's good for everyone though, and someday I look forward to a day when the vendors that do the best monetarily are the ones who treat their clients the best and have the best product. In the past, the “No one's ever been fired for buying X” mentality has ruled far too often IMHO…
, ,
–jeremy

Infrastructure Upgrades at LQ

With the code upgrade at LQ recently completed, I decided to do some infrastructure upgrades that I had been putting off. Two weeks ago I made the switch from PHP 4.4.x-> PHP 5.1.x and just now I made the change from Apache 1.3.x -> Apache 2.2.x. So far, things seem to be running smooth – almost too smooth. With multiple changes this big I expected more problems. Maybe they're just waiting for a more inopportune time ;) I have to say that it's great to finally have a dev server to test these changes out on before I roll them out to LQ. It should be interesting to see how Apache2+PHP5 compare to Apache1+PHP4 with some serious traffic. Anecdotally it seems that Apache2 uses a bit less memory, but that may be a result of the long uptimes that I was used to seeing Apache1 at. If you notice any speed difference do let me know. One thing to keep in mind is that we ran fairly modified and tweaked versions of both Apache1 and PHP4, while Apache2 and PHP5 are mostly stock as it is now. As I am comfortable with the stability of the new setup, I'll get to the tweaking.
, , , ,
–jeremy

Dell Pre-Installing Firefox in UK?

Looks like there is a lot of speculation that Dell is preinstalling Firefox in the UK. While that is fantastic for Firefox, it may not make a huge difference in actual acceptance numbers, since IE appears to be the default. It will likely make a small difference though as some people will click it out of curiosity. The bigger news here to me is that Dell is finally standing up (albeit in a very small way) to Microsoft. They simply would not have done this 3 years ago. One can only hope that this goes well. OpenOffice.org seems like the next logical step if it does, and from there a true Linux preinstall hopefully won't be too far off. Maybe that EU decision did have an impact, even if only a psychological one.
,
–jeremy

LinuxQuestions.org Reaches Two Million Posts and Two Hundred Thousand Members

Wow. 2,000,000 posts and 200,000 members. We've certainly come a long way. When I started LQ roughly six years ago, I had no idea it would grow to become what it has. It's been a fun and interesting trip. I'm happy to say that we're still just getting warmed up though. We've recently redesigned the site and have a bunch of new things coming your way “Real Soon Now”. I'd like to thank each and every member for making the site what it is. I'd also like to give an extra special thanks to the mods. They volunteer their free time to make LQ a better place. We wouldn't be nearly where we are if we didn't have what I consider one of the finest mod teams on the planet. As always, if you have any suggestions on how we can make the site better, please do let us know (we really do listen).
, ,
–jeremy

LQ is a SCALE 4X Sponsor

LQ will once again be a SCALE sponsor – this time it's SCALE 4X. I look forward to being able to attend the expo this year as last year it was held at the same time I was at a different conference. Ilan has been great to work with and the expo looks to be quite interesting. If you'll be attending drop me a line.
–jeremy
, ,

The LQ Code Upgrade is Live

Well, we've been working on it for the last 12 hours or so straight…but as of about noon LQST the new LQ is up and running. A couple unforeseen issues arose, but they always do. Things actually went a little smoother than I thought they would. That may be due to the multiple test upgrades we did, which really allowed us to shake out a lot of kinks in the process. There are far too many feature and changes to list, so you really should go check it out. Let us know what you think. I also want to thank David for his help on this. He was a key reason why this went as smooth as it did and why it's as good as it is. FWIW, this is only the beginning really. This framework allows is to do some cool things, and we already have some additional ideas on the drawing board. Stay tuned.
–jeremy