First Draft of GPL Version 3 Released

The first draft of the GPL V3 was released earlier today. I found this HTML diff of v2 vs. v3 useful for quickly seeing what has changed. I am not a lawyer, and the GPL sure does contain a lot of legalese. Of course, as a legal document that hopes to stand up in court it actually has to be written in that language, but the “human readable” version of the CC is always something I've liked. It gives the average person the ability to see what the legalese means, while keeping the full version for lawyers, judges and masochists. A cursory glance at the text and I noticed a couple valuable additions. The anti-DRM clause, the “Licensing of Patents” section and the fact that this version seems to have slightly more hope of being compatible with other open licenses. The one thing I didn't see but expected, was clarification of how the proliferation of web services impacts the GPL. What I mean by that is, if someone takes a GPL'd program, edits the source and then only offers it as a web service – are they required to release their modifications? I don't see that addressed in any way – but if someone with more legal knowledge than me does, please do drop me a line. The one thing that I've always found interesting about v3 of the GPL is that the Linux kernel itself will probably never use it. The kernel includes this:Also note that the only valid version of the GPL as far as the kernel is concerned is _this_ particular version of the license (ie v2, not v2.2 or v3.x or whatever), unless explicitly otherwise stated.
It's my understanding that the above means that anyone who has contributed code is doing so only under GPL v2, so moving to v3 would require every person who has ever submitted code to agree to the upgrade, which seems like an unsurmountable barrier to me. I've always found the auto-upgrade by default clause odd anyway. I can see how it's useful – you always get the latest and greatest without too much hassle. But what if the latest version contains a clause you'd not have released your program under?
, , , , ,
–jeremy

An Answer from the Blogosphere

Gotta love the blogosphere. I asked a question about full referrer info in Google Analytics a while back, and just noticed that someone linked back to my post with an answer …Or almost an answer that is. While that is much closer than I was able to get on my own, it's still not full info. It will give you a list if domains (which is oddly available elsewhere also) and a list of files from that domain (which is new info to me) but it strips all parameters. This makes a lot of the information useless unfortunately. Let's take Distrowatch as a referrer. With the striping of parameters, 100% of the traffic comes from table.php. It would be much more useful to be able to see which distros actually referred the visitor, for a variety of reasons. I'd say it's more than useful actually – it's critical. In the end it means that I also have to run an additional tool if I want to see what's really driving traffic to LQ. It sure would be convenient if I didn't have to.
, , , ,
–jeremy

Use of Linux at NASA

A different perspective on Linux use, from the NASA Jet Propulsion Laboratory (JPL) in Pasadena, Calif. Contrary to what you'll see almost anywhere else, they use and love Linux on the Desktop, but don't consider it viable for the server. From the article: “Our personal view is that Linux, period, is only for the desktop. We don't run our main servers on Linux, because there are too many flaws in main Linux kernel,” he said.
I must admit that Linux stability is not what it needs to be in a certain context for some applications. I'm not talking stability as far as crashing (although I still see more cases than I'd like, Linux is rock solid if you configure it correctly on known good hardware). What I am talking about is from a life-cycle standpoint. RHEL and SLES have done a ton in this regard, but they are both relatively new and still have a little to learn. They both will get there though, it's just a matter of when. What is truly exceptional about Linux is that it's scaling in two nearly diametrically opposed directions (big iron vs. embedded) at the same time. Not only that, but it's doing a good job in both directions. Awesome.
, ,
–jeremy

Sun and Apple Almost Merged Three Times

So says the legendary Bill Joy in this Register article. There are some definite similarities between the companies. Both produce higher cost, slick products (note that for Apple slick means styling and for Sun slick means something different). Both are California based companies with a focus on UNIX-related technologies. Apple has a strong desktop showing and is trying to get into the server market. Sun has a strong server showing and has tried multiple times to get into the desktop market. So, there are some obvious synergies (although I cringe just typing that word) between the two companies. I see one huge problem that would prevent them from merging though. Steve Jobs and Scott McNealy are both high profile CEO's that have lengthy ties to their respective companies. They are both founders in fact. Who would the CEO of this new company be? Since it's clear they both have differing vision of future direction, what direction would this new company follow? Do you think either of these two are ready to split the limelight? Additionally, having to maintain two UNIX-based OS's would be a huge expense but getting rid of either one would alienate way too many people. In the end, I just can't se it happening (although these days you never know).
, , ,
–jeremy

While on the Topic of Google

While on the topic of Google, I ran across this interesting read from Jason about his predictions for Google for 2006. He was lucky enough to be backstage after the recent Google keynote at CES. He foresees a calendar (which I think most people do) and an office suite, but goes a huge step further by prophesising: by the end of the year they will come out with a Linux-based OS and offer it for free to PC makers. Those PC makers will love Google for giving them a free OS and Google will love extending the reach of their money maker: google Adsense.
Now that would be extremely interesting, although I'm not sure 2006 is the right time frame for a Linux-based GoogleOS. I think at some point one is nearly inevitable though. One bit of news that already did come from Google in 2006 is that they released their own DRM. Isn't that borderline evil? I still have never seen an argument that lead me to think that DRM was anything but extremely bad for consumers. According to this article, Google Video is only going to work on Windows, so not only are they creating yet another silo for video options, they're creating yet another silo that we can't even check out. Not exactly how I had hoped they'd start the year out.
,
–jeremy

Google Pack Released

Contrary to many of the rumors that were swirling, Google did not announce a cheap PC at CES. What they did announce was the Google Pack. Am I the only one this doesn't make sense to? Let's put aside the “Google Pack is only available for Windows XP” requirement for a moment (although it's actually worse than that… it's Windows XP with Administrator privileges). A cobbled together mix of unrelated software (some of questionable stability) from a variety of vendors with no integration seems like an uncharacteristically poor decision for Google. Add to that the fact that Norten is actually a time limited product and it gets even stranger. Some of the products focus on some segments and some focus on completely different ones. Firefox is a great decision, but no gaim when they recently hired the projects lead developer? What is the vision for this product and where is it bringing Google and the consumer? I have no idea. What's worse, this actually would seem to help one of their biggest competitors (Microsoft) in multiple ways. Strange indeed.
,
–jeremy

Linux/Unix Vulnerabilities Outnumber Microsoft Windows' 3 To 1

Or do they? This is a fantastic example of numbers not meaning anything if you're just throwing something against the wall. Actually, these numbers are less than useless, they're just plain silly. The original stats are from the US-CERT site, but that fantastic headline came from this article. From the article: Tallies kept by the U.S. government's computer security group show that Linux and Unix operating systems faced nearly three times the number of vulnerabilities in 2005 than did Microsoft's often-maligned Windows.
In the US-CERT (United Stated Computer Emergency Readiness Team) year-end vulnerability summary, Linux/Unix accounted for a whopping 2,328 vulnerabilities, about 45 percent of the 5,198 total.

Now, before you get worried… let's dig into this numbers a bit. First, why are they lumping Linux, UNIX and OS X into a single group and then comparing it to a single vendor? Would you lump Lexus, BMW, Infinite, Toyota, Honda, Porsche, Volkswagen, Saab and Volvo into a single group, compare them to Chevy and then say that Chevy's are safer? I'd hope not. It gets worse though. They note only include things that are in no way related to the OS (GNU GNATS Gen-Index Arbitrary Local File Disclosure/Overwrite, Yukihiro Matsumoto Ruby Infinite Loop Remote Denial of Service (Updated), and Yapig Cross-Site Scripting & HTTP POST Requests Validity are three good examples, but you'll need to take a look at the full list to get a real appreciation) but they include multiple reports from different *NIX vendors about the same issue as different bugs. A bzip vulnerability is on there 10 times! The disturbing reality is, someone giving this a cursory glance might believe these asinine numbers. Never mind that they include safari in the *NIX number, even though that can't possibly impact you if you run Linux. Complete junk. Beyond the stupidity of the numbers though, there is a bigger issue. Security issues in Open Source actually get spotted and fixed on a regular basis. This is a *good* thing and it makes you much more secure in the end. The security by obscurity and closed source aspect of Windows means that a bug is only acknowledged and fixed when Microsoft decides to do it. Remember those png/jpeg issues from a couple years ago? They are just getting fixed now in Windows, where the Open Source world addressed them in 2003. You decide what is more security, but always look into the numbers you are given as opposed to just reading a headline that is meant to get readers. I look forward to the day when journalism like this just doesn't happen. Why do I think I'll be waiting a while?
, , , , ,
–jeremy

You Never Forget Your First Web Server

A great post from Jeremy Zawodny about the first public web server he had. I remember mine quite well also. It was a dual PentiumPro 180 with a PR440FX Intel board and would become the first machine to run LQ. I think I had the server online in 1999, although LQ didn't go up into 2000. The distro was Red Hat 5.2, aka Apollo, although by the time LQ was public it had been upgraded to zoot. As Jeremy says, you used to actually upgrade machines as opposed to just replace them. I remember having to bring LQ down for a couple hours to upgrade the machines single IDE drive to multiple SCSI drives with an Adaptec PCI controller. It also received a memory upgrade some time later. I even installed an LCD in it at one point. The machine actually sits just a few feet from my desk, right next to the second machine to run LQ (which was actually a rackmount server). LQ's come a long way since then. I've attached a old picture.

–jeremy

Dell vs. Microsoft II

A sort of follow up to this post. It looks like Dell is standing strong in its decision to back Blue-ray (which it had a hand in creating) despite Microsoft pressure and incentives to back HD-DVD. The Dell/Microsoft partnership definitely is not what it was just a few years ago. The power balance is slowly shifting and when you add in the legal scrutiny that Microsoft is under, they just can't strong arm like they used to be able to do. If a major vendor like Dell starting to preload OpenOffice.org as a default and then offer Office as an upgrade, it would have major implications. Not only would it impact the profit center of Microsoft, but the precedent would be set. Dell is poised to step out of the shadow that it has been in and be able to make decisions like this without fear of retribution. Does that mean you'll soon see real Linux preloads from Dell? I doubt it, but some day I think it'll be inevitable. It's just a matter of how far away some day is.
, ,
–jeremy

BusinessWeek Looks at How Open Source Did in 2005

Here's a BusinessWeek article that looks at what they consider the five biggest Open Source events of 2005. Not sure I agree with all of them, but it's always good to see the mainstream media report positively op Open Source. I think one thing true about 2005 is that CIO's did buy into Open Source (literally). Companies such as Red Hat did extremely well. In this initial adoption phase though, companies seem to just purchase Open Source as they did with closed source and proprietary items. In a couple years, when they realize the true benefits of buying into the ideals of Open Source, it will be interesting to see how companies like Red Hat do. I'd guess they'll adapt to the times and flourish, but it's going to be a major shift. These are fat times in a lot of ways and things are going to get much more competitive I think. That's good for everyone though, and someday I look forward to a day when the vendors that do the best monetarily are the ones who treat their clients the best and have the best product. In the past, the “No one's ever been fired for buying X” mentality has ruled far too often IMHO…
, ,
–jeremy