Uncle Alex writes "My niece just turned one year old and her parents have asked that, instead of the usual gifts, we each contribute something to a time capsule to be opened on her 17th birthday. Multiple members of my family want to contribute digital data — text, video, music files. They came to me (the closest thing to a geek our family has) wondering: what's the best way to save the data to ensure she'll actually be able to see it in 16 years? Software might be out of date, hardware may no longer be used... any suggestions?"

sukotto writes "Ubuntu recently released an unannounced and experimental 'multisearch' extension to Firefox alpha 3, apparently in an effort to improve the default behavior of new tabs and of search. In a response to one of the initial bug reports the maintainers mentioned that the extension's other purposes were 'collecting the usage data' and 'generating revenue.' Since this extension installs by itself and offers no warning about potential privacy violations, quite a few people (myself included) feel pretty unhappy. The only way to opt out is to disable the extension manually via Tools > Add-ons." Most posters to this Ubuntu forum thread are not happy about multisearch.

frenchbedroom writes "The ongoing Debconf 9 meeting in Cáceres, Spain has brought a significant change to Debian's project management. The Debian project will now freeze development in December of every odd year, which means we can expect a new Debian release in the spring of every even year, starting with 'Squeeze' in 2010. Until now, development freezing was decided by the Debian release team. From the announcement: 'The project chose December as a suitable freeze date since spring releases proved successful for the releases of Debian GNU/Linux 4.0 (codenamed "Etch") and Debian GNU/Linux 5.0 ("Lenny"). Time-based freezes will allow the Debian Project to blend the predictability of time based releases with its well established policy of feature based releases. The new freeze policy will provide better predictability of releases for users of the Debian distribution, and also allow Debian developers to do better long-term planning. A two-year release cycle will give more time for disruptive changes, reducing inconveniences caused for users. Having predictable freezes should also reduce overall freeze time.' We previously discussed talks between Canonical and the Debian release team about fixed freeze dates."

An anonymous reader writes "Linux distributions track upstream projects, releasing a particular version with each official release. But how far behind the latest versions do these releases linger? Scott Shawcroft did an interesting new study into this relationship between distributions and upstream projects. Shawcroft says: 'Over the last 10 months I've been working on Linux evolution research. Similar to distrowatch, I track the current versions of packages in a number of distributions and the current upstream version. Based on that data I then graph a number of metrics to understand the relationship between upstream and downstream.' His presentation on the topic scheduled for [this] week's open source convention, OSCON, should provide an interesting insight into that relationship. Currently he is tracking 20 projects including the Linux kernel, Firefox, GCC, OpenSSH and GNOME on Arch, Debian, Fedora, Gentoo, openSUSE, Sabayon, Slackware, and Ubuntu."

suka writes "In a fresh interview with derStandard.at, Ubuntu founder Mark Shuttleworth talks about GNOME 3.0 — its strengths, but also about what he thinks is missing. He also mentions ongoing talks for a common meta-release-cycle with Debian which could delay the next LTS."

christian.einfeldt writes "The Munich decision to move its 14,000 desktops to Free Open Source Software created a big splash back in 2003 as news circulated of the third-largest German city's defection from Microsoft. When it was announced in 2003, the story garnered coverage even in the US, such as an extensive article in USA Today on-line. Currently, about 60% of desktops are using OpenOffice, with the remaining 40% to be completed by the end of 2009. Firefox and Thunderbird are being used in all of the city's desktop machines. Ten percent of desktops are running the LiMux Debian-based distro, and 80% will be running LiMux by 2012 at the latest. Autonomy was generally considered more important than cost savings, although the LiMux initiative is increasing competition in the IT industry in Munich already. The program has succeeded because the city administration has been careful to reach out to all stakeholders, from managers down to simple end users."

twitter writes "There's been a lot of fuss about mono lately. After SCO and MS suing over FAT patents, you would think avoiding anything MS would be a matter of common sense. RMS now steps into the fray to warn against a serious mistake: 'Debian's decision to include Mono in the default installation, for the sake of Tomboy which is an application written in C#, leads the community in a risky direction. It is dangerous to depend on C#, so we need to discourage its use. .... This is not to say that implementing C# is a bad thing. ... [writing and using applications in mono] is taking a gratuitous risk.'" Update: 06/27 20:22 GMT by T : Read on below for one Mono-eschewing attempt at getting the (excellent) Tomboy's functionality, via a similar program called Gnote. Update: 06/27 21:07 GMT by T: On the other side of the coin, reader im_thatoneguy writes "Jo Shields, a Mono Developer, has published an article on 'Why Mono Doesn't Suck,' why it is not a threat to FOSS, why it is desirable to developers and why it should be included in Ubuntu by default."

pallmall1 writes "OS News reports that Debian developer Josselin Mouette got Tomboy accepted as a dependency for gnome in the next release of Debian (codenamed Squeeze). While that may seem like nothing big (except for the 50 MByte size of the Tomboy package), Tomboy requires Mono — meaning that Mono will now be installed by default. Apparently, Debian doesn't have the same concerns over using specifications patented by Microsoft and licensed under undisclosed terms that Red Hat does. Perhaps Debian doesn't believe that Microsoft might do something like Rambus did."

alimo20 writes "Researchers at the Royal Holloway, University of London have discovered a flaw in Version 4.7 of OpenSSH on Debian/GNU Linux. According to ISG lead professor Kenny Patterson, an attacker has a 2^{-18} (that is, one in 262,144) chance of success. Patterson tells that this is more significant than past discoveries because 'This is a design flaw in OpenSSH. The other vulnerabilities have been more about coding errors.' The vulnerability is possible by a man-in-the-middle intercepting blocks of encrypted material as it passes. The attacker then re-transmits the data back to the server and counts the number of bytes before the server to throws error messages and disconnects the attacker. Using this information, the attacker can work backwards to figure out the first 4 bytes of data before encryption. 'The attack relies on flaws in the RFC (Request for Comments) internet standards that define SSH, said Patterson. ... Patterson said that he did not believe this flaw had been exploited in the wild, and that to deduce a message of appreciable length could take days.'"

jamie found a note on debian-administration.org, the first in a promised series on migrating off of SHA-1 in OpenPGP. "Last week at eurocrypt, a small group of researchers announced a fairly serious attack against the SHA-1 digest algorithm, which is used in many cryptosystems, including OpenPGP. The general consensus is that we should be 'moving in an orderly fashion toward the theater exits,' deprecating SHA-1 where possible with an eye toward abandoning it soon (one point of reference: US govt. federal agencies have been directed to cease all reliance on SHA-1 by the end of 2010, and this directive was issued before the latest results). ... So what can you do to help facilitate the move away from SHA-1? I'll outline three steps that current gpg users can do today, and then I'll walk through how to do each one..."

ceswiedler writes "Aurelien Jarno has just uploaded a fork of glibc called eglibc, which is targeted at embedded systems and is source- and binary-compatible with glibc. It has a few nice improvements over glibc, but the primary motivation seems to be that it's a 'more friendly upstream project' than glibc. Glibc's maintainer, Ulrich Drepper, has had a contentious relationship with Debian's project leadership; in 2007 the Debian Project Leader sent an email criticizing Drepper for refusing to fix a bug on glibc on the ARM architecture because in Drepper's words it was 'for the sole benefit of this embedded crap.'"

ruphus13 writes "When Mark Shuttleworth was asked what role WINE will play in Ubuntu's success, he said that Ubuntu cannot simply be a better platform to run Windows apps. From the post, according to Shuttleworth, '[Windows and Linux] both play an important role but fundamentally, the free software ecosystem needs to thrive on its own rules. it is *different* to the proprietary software universe. We need to make a success of our own platform on our own terms. if Linux is just another way to run Windows apps, we can't win. OS/2 tried that ...' The post goes on to say, 'Linux simply isn't Windows (nor is Windows Linux) and to expect fundamentally different approaches (and I'm not just thinking closed versus open) to look, feel, and operate the same way is senseless.'"

An anonymous reader writes in with an opinion piece from ZDNet Australia. "Here's what the official press release won't tell you about Ubuntu 9.04, which formally hit the streets yesterday: its designers have polished the hell out of its user interface since the last release in October. Just like Microsoft has taken the blowtorch to Vista to produce the lightning-quick Windows 7, which so far runs well even on older hardware, Ubuntu has picked up its own game."

Mohamed Zaian writes "The Ubuntu team has released the release candidate for Ubuntu 9.04; 'The Ubuntu team is happy to bring you the latest and greatest software the Open Source community has to offer. This is their latest result, the Ubuntu 9.04 release candidate, which brings a host of excellent new features.' The various other Ubuntu-derived distributions, like Kubuntu, have also had their RCs released."

An anonymous reader writes "With Jaunty Jackalope scheduled for release in 12 days on April 23, this blog posting describes how to switch to apt-p2p in preparation for the upgrade. This should help significantly to reduce the load on the mirrors, smooth out the upgrade experience for all involved, and bypass the numerous problems that have occurred in the past on Ubuntu release day. Remember to disable all third-party repositories beforehand."

palegray.net writes "Inspired by a recent Ask Slashdot, I've written a step-by-step tutorial for setting up an Openfire server on Debian Linux, for those interested in running their own open source collaboration server. Aimed at those just getting started with collaboration software, the tutorial shows precisely how to get Openfire up and running quickly on a base Debian install, and offers a basic feature tour of the software's plugin and IM gateway functionality."

mu22le writes "Today Debian gets one step closer to really becoming 'the universal operating system' by adding two architectures based on the FreeBSD kernel to the unstable archive. This does not mean that the Debian project is ditching the Linux kernel; Debian users will be able to choose which kernel they want to install (at least on on the i386 and amd64 architectures) and get more or less the same Debian operating system they are used to. This makes Debian the first distribution, and probably the first large OS, to support two completely different kernels at the same time."

Observer writes "Bugs in software are nothing new, but when they're discussed in the open, how do open source projects adapt policy? A major regression in the Gnome project's session manager has seen some major distributions choose to refuse to follow the update rather than drop a major feature. Between Gnome's public bug tracker and similar trackers from distributions which released (and still distribute) the buggy version, months of debate provide an interesting case-study in the way front-line users and developers interact for better or for worse. What lessons can be learned here for release planning, bug triage, and marketing for a major open source project?"

An anonymous reader writes "I've got an Eee PC 1000HD, and frankly, I can't stand XP. I know it's odd, because I actually like Vista, but XP is such a giant piece of crap on here that I struggle to use it day-by-day. Anyway, my question is this: which Linux distro should I run on it? Plain Ubuntu just doesn't have driver support. I tried Ubuntu-eee, which, to put it bluntly, does not work for me at all (slow, terrible battery life, even worse interface). I've heard that Jaunty Jackalope is going to have better netbook support, but that's all the way in April! Is there a distro out now that will free me from XP's terribleness without being terrible itself?" Getting wireless working on an Eee PC (though in my experience imperfectly) with stock Ubuntu is possible; for me it took some googling, though I've been told with great enthusiasm that it actually works "out of the box." What distros are you running on your netbook, and what problems do you find?

Alexander "Tolimar" Reichle-Schmehl writes "The Debian Project is pleased to announce the official release of Debian GNU/Linux version 5.0 (codenamed Lenny) after 22 months of constant development. With 12 supported computer architectures, more than 23,000 packages built from over 12,000 source packages and 63 languages for the new graphical installer, this release sets new records, once again. Software available in 5.0 includes Linux 2.6.26, KDE 3.5.10, Gnome 2.22.2, X.Org 7.3, OpenOffice.org 2.4.1, GIMP 2.4.7, Iceweasel 3.0.6, Apache 2.2.9, Xen 3.2.1 and GCC 4.3.2. Other notable features are X autoconfiguring itself, full read-write support for NTFS, Java programs in the main repository and a single Blu-Ray disc installation media. You can get the ISOs via bittorrent. The Debian Project also wishes to announce that this release is dedicated to Thiemo Seufer, a Debian Developer who died on December 26th, 2008 in a tragic car accident. As a valuable member of the Debian Project, he will be sorely missed."