At a press conference dubbed "Breakfast With Sundar," Google announced two new pieces of hardware and a minor revision to Android. Complete stories and commentary are still coming in, but in the mean time you can skim a liveblog or two First is the new Nexus 7. The hardware is slightly improved (full HD screen, better graphics, etc.). The specs managed to "leak" hours before the event through Best Buy opening preordering too early. On the software side, they've announced a minor revision to Android, 4.3. It features improved Bluetooth support (including Bluetooth 4.0), OpenGL ES 3.0, enhanced internationalization, enhanced DRM, and multi-user support. The multi-user support looks most exciting: now you can share a tablet with more than one person. One of the features Google focused on was restricted profiles: a device owner can create accounts that e.g. cannot make in-app purchases (Junior won't rack up a $3000 bill again). Bad news: Google is implementing stricter DRM for books and video, locking down the entire video stack. The consolation prize is that Netflix will work on more devices and at 1080p. Also demoed were a new version of Chrome that brings the tablet experience closer to the desktop, improved hangouts, and improved maps. Google also appears to be making a push into gaming, emphasizing tablet-only games that integrate into Google+. In addition to gaming, they have secured deals with five major textbook publishers to sell students presumably DRMed electronic textbooks that can be purchased or rented, enhanced with better search and highlighting (because PDF readers don't support those features already). As usual lately, all of the really nice additions to Android are proprietary and tied to Google services, further eroding the open nature of Android. Finally, they announced a tiny $35 dongle named Chromecast that appears to be the successor of the Nexus Q. Running Chrome OS, it connects to any HDMI port, finds your Wi-Fi network, and Just Works (tm) for online video. The online and mobile Youtube and Netflix interfaces will allow you to hit a single button and forward the video to your television as well. Google Music streaming to the television is also supported. The Chromecast looks like a handy little device, hopefully it is turns out it can be reflashed. Of course, when using your browser as a remote, all of the commands go through The Cloud. An SDK and more details on the software side of things are slated for release later today, although conspiciously absent on their supported platforms list is GNU/Linux, listing only Chrome OS and Android. Update: 07/24 18:01 GMT by U L : The Chromecast SDK is out, but with an awfully restrictive license that requires written permission from Google to distribute any cast enabled applications, which appears to make it completely incompatible with Free/Open Source software.

hypnosec writes "Adapteva has started shipping its $99 Parallella parallel processing single-board supercomputer to initial Kickstarter backers. Parallella is powered by Adapteva's 16-core and 64-core Epiphany multicore processors that are meant for parallel computing unlike other commercial off-the-shelf (COTS) devices like Raspberry Pi that don't support parallel computing natively. The first model to be shipped has the following specifications: a Zynq-7020 dual-core ARM A9 CPU complemented with Epiphany Multicore Accelerator (16 or 64 cores), 1GB RAM, MicroSD Card, two USB 2.0 ports, optional four expansion connectors, Ethernet, and an HDMI port." They are also releasing documentation, examples, and an SDK (brief overview, it's Free Software too). And the device runs GNU/Linux for the non-parallel parts (Ubuntu is the suggested distribution).

Karrde712 writes "Fedora Cloud Architect Matthew Miller announced a proposal on a plan to redesign the way that the Fedora Project builds its GNU/Linux distribution. Fedora has often been described as a 'bag of bits,' with thousands of packages and only minimal integration. Miller's proposal for 'Fedora.Next' describes reorganizing the packages and upstream projects that comprise Fedora into a series of 'rings,' each level of which would have its own set of release and packaging requirements. The lowest levels of the distribution may be renamed to 'Fedora Core.' Much discussion is ongoing on the Fedora Devel mailing list. If any Slashdot readers have good advice to add to the discussion, it would be most useful to respond to the ongoing thread there." A full presentation on the plan will be given at the Flock conference next month, and draft slides have been uploaded. A few more details about the discussion are below the fold.

jfruh writes "Stratasys, one of the world's biggest 3D printer manufacturers, routinely uses 3D-printed objects as displays for its booths at trade shows. The problem: It's been using objects designed by popular designer Asher Nahmias, whose creations are licensed under a noncommercial Creative Commons license — and he says Stratasys's use violates the licensing terms. This is just one example of how the nascent 3D printing industry is having to grapple with the IP implications of creating physical objects out of downloadable designs. Another important problem: IP law distinguishes between purely decorative and useful objects, but how should the digital files that provide a design for those objects be treated?" The models are copyrighted and licensed NC, but what about the resulting object? Precedent seems to imply that the resulting object cannot be controlled (e.g. the output of a GPLed program is not GPLed, so why should executing a program on a 3D printer be any different?).

An anonymous reader writes "VideoLAN revealed some very exciting news today: VLC for iOS will be back in Apple's App Store by tomorrow (July 19). The company tells TNW the app will be available for free worldwide, requires iOS 5.1 or later, as well supports the iPhone, iPad, and iPod touch. As you can expect, VLC for iOS version 2.0 will be open-source. This time, however, its code will be available online (also by tomorrow), bi-licensed under both the Mozilla Public License Version 2 as well as the GNU General Public License Version 2 or later."

Last week you had a chance to ask Jon "maddog" Hall about his work on Project Caua and FOSS in general. Below you'll find his answers to those questions.

Gunkerty Jeb writes "A security researcher has uncovered a number of serious vulnerabilities in one of the core security components of several secure telephony applications, including the Silent Circle system developed by PGP creator Phil Zimmermann. The vulnerabilities in the GNU ZRTPCPP library already have been addressed in a new version of the library and Silent Circle has implemented a fix, as well. ZRTPCPP is a library that implements the ZRTP protocol that Zimmermann and others developed to establish secure sessions over a pre-existing connection. Silent Circle, which sells a cryptographically secure mobile phone application, and several other products implement the ZRTPCPP library, and Mark Dowd of Azimuth Security has identified several vulnerabilities in the library that could give an attacker the ability to get remote code execution. Dowd said that the bugs can be exploited by remote, unauthenticated users."

New submitter sobolwolf writes "It has been apparent for some time that many developers (mainly theme designers) are split-licensing PHP-based GPL distributions, releasing proprietary files alongside GPL files with the excuse that CSS, JavaScript and Images are 'immunized' from the GPL because they run in the browser and not on the server. This is almost always done to limit the distribution of the entire release, not just the proprietary items (most extensions will not function in any meaningful way without the accompanying CSS, Images and JavaScript). Some of the more popular PHP-based GPL projects, like WordPress, have gone as far as to apply sanctions to developers distributing split-licensed themes/plugins. Others, such as Joomla, have openly embraced the split-licensed model, even changing their extension directory submission rules to cater specifically to split-licensed distributions. In light of all this, I would like to ask the following question: While it seems to be legal to offer split-licensed GPL distributions, is it in the spirit of the GPL for a project such as Joomla (whose governing body has the motto 'Open Source Matters') to openly embrace such a practice when they can easily require that all CSS, Images and JavaScript be GPL (or GPL-compatible) for extensions that are listed on the Joomla Extensions Directory?"

alphadogg writes "Start-up Cumulus Networks this week has emerged with a Linux network operating system designed for programmable data centers like the ones Google and Facebook are building. The company's Cumulus Linux OS operating system includes IPv4 and IPv6 routing, plus data center and network orchestration hooks. Much like OpenFlow for independent, software-defined control of network forwarding, Cumulus Linux is intended to run on commodity network hardware and bring Open Source extensibility to high capacity data centers. The head of the company used to work for Cisco and Google." The distribution is based on Debian and ported to several router platforms. They claim to release most of their code Open Source, but there are at least a few proprietary bits for interfacing to the routing hardware itself.

An anonymous reader writes "The MariaDB blog is reporting a small change to the license covering the man pages to MySQL. Until recently, the governing license was GPLv2. Now the license reads, 'This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.'"

mpol writes "We're all aware of PRISM and the NSA deals with software houses. Just today it was in the news that even Microsoft gives zero-day exploits to the NSA, who use them to prepare themselves, but also use the exploits to break into other systems. At my company we use Git with some private repositories. It's easy to draw the conclusion that git-hosting in the cloud, like Github or Bitbucket, will lead to sharing the sourcecode with the NSA. Self-hosting our Git repositories seems like a good and safe idea then. The question then becomes which software to use. It should be Open Source and under a Free License, that's for sure. Software like GitLab and GNU Savane seem good candidates. What other options are there, and how do they stack up against each other? What experience do people have with them?"

Today's interviewee, Andrew Dougherty, has a Web page that says he is "...an autodidact mathematician and computer scientist specializing in Artificial Intelligence (AI) and Algorithmic Information Theory (AIT). He is the founder of the FRDCSA (Formalized Research Database: Cluster Study & Apply) project, a practical attempt at weak AI aimed primarily at collecting and interrelating existing software with theoretical motivation from AIT. He has made over 90 open source applications, 400 (unofficial) Debian GNU/Linux packages and 800 Perl5 modules (see http://frdcsa.org/frdcsa)." Tim Lord says Andrew's project "brings together a lot of AI algorithms, collects large sets of data for those algorithms to chew on, and writes software to do things like ... guide your whole life." As you might guess, Andrew occupies a pretty far edge of the eccentric programmer world, as you'll see from this video (and transcript). He calls himself "a serious Stallmanite" (his word), and has chosen the GPL for his software in the hopes that it will therefore help the greatest number of people. (Speaking of help, he's looking for interesting data sets and various "life rules" that can be integrated with his planning software, and one of the reasons he presented at the recent YAPC::NA was to solicit help in putting his hundreds of Perl modules onto CPAN.)

New submitter m.alessandrini writes "I've been using Debian for a long time, and I'm not a novice at all; I install system updates almost daily, I avoid risky behaviors on Internet, and like all Linux users I always felt safe. Yesterday my webcam suddenly turned on, and turned off after several minutes. I'm pretty sure it was nothing serious, but I started thinking about malware. At work I use noscript and other tools, but at home I have a more relaxed browser to be used by other family members, too. Here I'm not talking about rootkits or privilege escalation (I trust Debian), I think more of normal user compromise. For example, these days much malware come from malicious scripts in sites, even in advertising banners inside trusted sites, and this is more 'cross-platform' than normal viruses. So, what about non-root user malware? How much could this be real? And how can you diagnose it?"

jrepin writes "The GNU Hurd is the GNU project's replacement for the Unix kernel. It is a collection of servers that run on the Mach microkernel to implement file systems, network protocols, file access control, and other features that are implemented by the Unix kernel or similar kernels (such as Linux). The Debian GNU/Hurd team announces the release of Debian GNU/Hurd 2013. This is a snapshot of Debian 'sid' at the time of the Debian 'wheezy' release (May 2013), so it is mostly based on the same sources. Debian GNU/Hurd is currently available for the i386 architecture with more than 10,000 software packages available (more than 75% of the Debian archive)."

First time accepted submitter anarcat writes "After two years since the last Debian release (6.0, nicknamed "squeeze"), the Debian release team has finally published Debian 7.0 (nicknamed "Wheezy"). A newly created blog has details on the release, which features multi-arch support (e.g. you can now install packages for both i386 and amd64 on the same install), improvements to multimedia support (no need for third party repositories!) and improved security through hardening flags. Debian 7.0 also ships with the controversial Gnome 3 release, and the release notes explicitly mention how to revert to the more familiar 'Gnome classic' interface. Finally, we can also mention the improved support for virtualization infrastructure with pre-built images available for Amazon EC2, Windows Azure and Google Compute Engine. Debian 7.0 also ships with the OpenStack suite and the Xen Cloud Platform. More details on the improvements can be found in the release notes and the Debian wiki." An anonymous reader points out (from the announcement) that "[t]he installation process has been greatly improved: Debian can now be installed using software speech, above all by visually impaired people who do not use a Braille device. Thanks to the combined efforts of a huge number of translators, the installation system is available in 73 languages, and more than a dozen of them are available for speech synthesis too. In addition, for the first time, Debian supports installation and booting using UEFI for new 64-bit PCs (amd64), although there is no support for Secure Boot yet."

gnujoshua writes "In a new article, GNU Project founder Richard M. Stallman speaks out against the proposal to include hooks for DRM in HTML5. While others have been making similar arguments, RMS strikes home the point that while companies can still push Web DRM themselves, the stance taken by the W3C is still — both practically and politically — vitally important: '[...] the W3C cannot prevent companies from grafting DRM onto HTML. They do this through nonfree plug-ins such as Flash, and with nonfree Javascript code, thus showing that we need control over the Javascript code we run and over the C code we run. However, where the W3C stands is tremendously important for the battle to eliminate DRM. On a practical level, standardizing DRM would make it more convenient, in a very shallow sense. This could influence people who think only of short-term convenience to think of DRM as acceptable, which could in turn encourage more sites to use DRM. On the political level, making room for DRM in the specifications of the World Wide Web would constitute an endorsement in principle of DRM by the W3C. Standardization by the W3C could facilitate DRM that is harder for users to break than DRM implemented in Javascript code. If the DRM is implemented in the operating system, this could result in distribution of works that can't be played at all on a free operating system such as GNU/Linux.'"

nk497 writes "Mozilla has sent a cease-and-desist order to Gamma International, after it was revealed the controversial creator of spyware for governments was disguising itself as Firefox on PCs. 'We cannot abide a software company using our name to disguise online surveillance tools that can be — and in several cases actually have been — used by Gamma's customers to violate citizens' human rights and online privacy,' Mozilla said." DavidGilbert99 writes on the wider implications of the Citizen Lab report: "Governmental spying software has been in the news a lot in recent months and today Citizen Lab has revealed its latest findings, showing that one of the most prolific tools in use, Finfisher, is now in use in 36 countries around the world [beware the auto playing video ads with sound]." And, Voulnet adds "According to analysis and report by CitizenLab of the Gamma FinFisher trojan spyware used against dissidents in the middle east and around the world, the FinFisher codebase uses the LGPL GNU Multiple Precision Arithmetic Library, possibly without adhering to its distribution restrictions."

gnujoshua writes "You may recall that last Fall, the LulzBot AO-100 3D printer was awarded the use of the Free Software Foundation's Respects Your Freedom certification mark. Today, the FSF announced certification of the ThinkPenguin TPE-N150USB, Wireless N USB Adapter, which uses the Atheros ARAR9271 chip. The FSF's RYF certification requirements are focused on the software (not the hardware designs) of a product, which in this case was primarily the device firmware and ath9k-htc module in the Linux-libre kernel. (Disclosure: I work for the FSF.) There's also a cool story that is within this story... which is that the firmware for the Atheros AR9271 chipset was released as a result of a small device seller (ThinkPenguin) striking a deal with a large electronic device manufacturer (Qualcomm Atheros) to build a WLAN USB adapter that shipped with 100% free software firmware. This deal was possible largely because two motivated Qualcomm Atheros employees, Adrian Chadd and Luis Rodriguez, made the internal-push to get the firmware released as free software."

jrepin writes "The government of Spain's autonomous region of Extremadura has begun the switch to open source of it desktop PCs. The government expects the majority of its 40,000 PCs to be migrated this year, the region's CIO Theodomir Cayetano announced on 18 April. Extremadura estimates that the move to open source will help save 30 million euro per year. Extremadura in 2012 completed the inventory of all the software applications and computers used by its civil servants. It also tailored a Linux distribution, Sysgobex, to meet the majority of requirements of government tasks. It has already migrated to open source some 150 PCs at several ministries, including those for Development, Culture and Employment."

I've been really, really excited about digital video distribution lately: first Netflix greenlights jms's return to science fiction TV, and then Amazon announces their new pilots. Perhaps the decade long dearth of any good television is nearing its end! So, with that in mind, I finished up editing Slashdot for the day and sat down to watch some of these new pilots. Only to discover that Amazon has taken away my ability to watch entirely in the name of Digital Restrictions Management.