Linux

add news feed

tweet a story

Hugh Pickens DOT Com writes "Ed Felton writes about an incident, in 2003, in which someone tried to backdoor the Linux kernel. Back in 2003 Linux used BitKeeper to store the master copy of the Linux source code. If a developer wanted to ...
Hugh Pickens DOT Com writes "Ed Felton writes about an incident, in 2003, in which someone tried to backdoor the Linux kernel. Back in 2003 Linux used BitKeeper to store the master copy of the Linux source code. If a developer wanted to propose a modification to the Linux code, they would submit their proposed change, and it would go through an organized approval process to decide whether the change would be accepted into the master code. But some people didn't like BitKeeper, so a second copy of the source code was kept in CVS. On November 5, 2003, Larry McAvoy noticed that there was a code change in the CVS copy that did not have a pointer to a record of approval. Investigation showed that the change had never been approved and, stranger yet, that this change did not appear in the primary BitKeeper repository at all. Further investigation determined that someone had apparently broken in electronically to the CVS server and inserted a small change to wait4: 'if ((options == (__WCLONE|__WALL)) && (current->uid = 0)) ...' A casual reading makes it look like innocuous error-checking code, but a careful reader would notice that, near the end of the first line, it said '= 0' rather than '== 0' so the effect of this code is to give root privileges to any piece of software that called wait4 in a particular way that is supposed to be invalid. In other words it's a classic backdoor. We don't know who it was that made the attempt—and we probably never will. But the attempt didn't work, because the Linux team was careful enough to notice that that this code was in the CVS repository without having gone through the normal approval process. 'Could this have been an NSA attack? Maybe. But there were many others who had the skill and motivation to carry out this attack,' writes Felton. 'Unless somebody confesses, or a smoking-gun document turns up, we'll never know.'" Read more of this story at Slashdot.
about 7 hours ago
Using RoundCube Webmail With ISPConfig 3 On Debian Wheezy (nginx) This guide explains how to install the RoundCube webmail application on a Debian Wheezy server running ISPConfig and nginx, and how to enable the ISPConfig 3 plugins f...
Using RoundCube Webmail With ISPConfig 3 On Debian Wheezy (nginx) This guide explains how to install the RoundCube webmail application on a Debian Wheezy server running ISPConfig and nginx, and how to enable the ISPConfig 3 plugins for RoundCube so that users can perform actions like changing their email passwords from within RoundCube. Roundcube webmail is a browser-based multilingual IMAP client with an application-like user interface; it comes with functions like MIME support, address book, folder manipulation, message searching and spell checking.
about 7 hours ago
Almost every time he got off the bus for the past month and a half, Jacob started his afternoon in the same way. Before toys, before his trains and his toy bus, before anything indoors, he went for our cats. Here he is, cradling his fa...
Almost every time he got off the bus for the past month and a half, Jacob started his afternoon in the same way. Before toys, before his trains and his toy bus, before anything indoors, he went for our cats. Here he is, cradling his favorite, Tigger: Laura and I both grew up around cats. We had been talking about kittens, and shortly after we got engaged, one of my relatives offered us some free kittens. We went to his place one evening and selected two of them – one calico and one tiger-colored. Since what is now my place will soon be our place, they came to live with me. Our cats were one of the first things we did to prepare for our lives together. Oliver wanted to name them some rather impractical sentence-long names (“The Cat Who Always Likes To Run”), so Laura and I suggested some names from one of their favorite books: Tigger and Roo. They both liked the names, but Oliver thought they should be called “Tigger the Digger” and “Roo the Runner”. Never mind that they were just 6 weeks old at the time, and not really old enough to either dig or run. Here’s Oliver with Roo, the day after the kittens arrived here. I have always had outside cats, both because I’m allergic to cats so I need them to be outside, and because they sometimes literally quiver with joy of being outdoors. Tigger and Roo often chased insects, wrestled with each other, ran up (and slowly came back down) trees, and just loved the outside. Sometimes, I have taken my laptop and wireless headset and work from the back porch. The kittens climb up my jeans, inspect the laptop, and once Roo even fell asleep on my lap at one of those times. Jacob has been particularly attached to Tigger, calling him “my very best friend.” When Jacob picks him up after school, Tigger often purrs while cradled in Jacob’s arms, and Jacob comments that “Tigger loves me. Oh dad, he knows I am his friend!” The kittens have been growing, and becoming more and more comfortable with their home in the country. Whenever I go outside, it isn’t long before there are two energetic kittens near my feet, running back and forth, sometimes being very difficult to avoid stepping on. I call and I see little heads looking at me, from up in a tree, or peeking out from the grain elevator door, or from under the grill. They stare for just a second, and then start running, sometimes comically crashing into something in their haste. Yesterday when I went to give them food, I called and no cats came. I was concerned, and walked around the yard, but at some point either they come or they don’t. Yesterday afternoon, just after the bus dropped off Jacob, I discovered Tigger on the ground, motionless. Once Jacob was in the house, I went to investigate, and found Tigger was dead. As I was moving his body, I saw Roo was dead, too. Both apparently from some sort of sudden physical injury — a bit mysterious, because neither of them were at a place where they had ever gone before. While all this was happening, I had to also think about how I was going to tell the boys about this. I tried to minimize what he could see, Jacob had caught an unavoidable glimpse of Tigger as we were walking back from the bus, but didn’t know exactly what had happened. He waited in the house, and when I came back, asked me if Tigger was dead. I said he was. Jacob started crying, saying, “Oh Dad, I am so sad”, and reached up for a hug. I picked him up and held him, then sat down on the couch and let him curl up on my lap. I could quite honestly let him know he wasn’t alone, telling him I am sad, too. Oliver arrived not long after, and he too was sad, though not as much as Jacob. Both boys pretty soon wanted to see them. I decided this was important for them for closure, and to understand, so while they waited in the house, I went back out to arrange the kittens to hide their faces, the part that looks most unnatural after they die. The boys and I walked out to where I put them, then I carried both of them
about 7 hours ago
Newspapers in Korea and China have both reported that Lenovo and HTC have been in talks over a partnership or sale since August. HTC doesn't have an official statement on the rumours but the Korean manufacturer told the WSJ that is is &#...
Newspapers in Korea and China have both reported that Lenovo and HTC have been in talks over a partnership or sale since August. HTC doesn't have an official statement on the rumours but the Korean manufacturer told the WSJ that is is "not interested in selling" and neither HTC nor Lenovo would say whether they have a different kind of partnership under way. It's no secret that HTC's bank balance is in freefall as it reported its first ever loss earlier this week, despite the fact that it has made what TechRadar deems to be the world's best phone in the form of the HTC One. Fire saleTop smartphone skills haven't seen HTC nabbing a seat at the top table with the iPhone 5S and Samsung Galaxy S4 though. Last month the company sold off its Beats shares for a sweet $265 million cash injection (around £165m / AU$284m).As for Lenovo, while it still rides high in the ailing PC market, it hasn't had much luck on the smartphone or tablet side of things; linking up with HTC could give it a boost in this arena. We'd be very surprised to see an outright sale a la Microsoft/Nokia but a partnership could be on the cards. Neither company is commenting for now, however, so we'll just have to wait and see. What makes the HTC One the best in the world? Find out in our official HTC One review
about 9 hours ago
Thom Yorke took another swipe at Spotify this week, saying that we're seeing "the last gasp of the old industry" and that once it dies, "something else will happen". In other words, he's not happy about thinks Spotify nee...
Thom Yorke took another swipe at Spotify this week, saying that we're seeing "the last gasp of the old industry" and that once it dies, "something else will happen". In other words, he's not happy about thinks Spotify needs to stop trying to be "gatekeepers".But Spotify thinks it's in line with the times, where access and discovery have become more important than ownership."To be fair to him, he's tried some really radical things with the release of his albums," said Chris Maples, Europe VP of Spotify, on Yorke. "I think people are perfectly entitled to their views"However, Maples added that Spotify also "fully understand that the way people consume music and discover music has changed. They've definitely moved from a model of ownership to instant access and we're helping to drive that as well."He went on: "The industry is difficult at the moment, though, and the world has shifted so much so people are figuring out the platforms and the ways that they interact with these platforms in order to get the best out of what they want as artists."Knives outAccording to Maples, the proof is in the pudding, and Spotify is serving up a sizable desert this year."By the end of this year we'll have given a billion dollars back to the record industry," he said. "We know what since we launched in Sweden five years ago... piracy has reduced by over 25% while Spotify has grown. "We know that we're doing a good thing."Yesterday Spotify announced its partnership with the new BBC Playlister service, which has gone live today.
about 10 hours ago
You've probably already done some basic maths in shell scripts, but do you know what else you can actually do?Pick at least 4 operations that you can do in bashisms-free shell scripts:$((n+1))$((n>8))$((n^4))$((--n))$((n*=5))$((n++))...
You've probably already done some basic maths in shell scripts, but do you know what else you can actually do?Pick at least 4 operations that you can do in bashisms-free shell scripts:$((n+1))$((n>8))$((n^4))$((--n))$((n*=5))$((n++))$((n==1?2:3))The POSIX:2001 standard defines the arithmetic expansion requirements, which leads us to selecting all of the above operations except two:$((--n))$((n++))"--" and "++" are not required to be implemented, and in some cases they may lead to unexpected results, such as the following:$ bash -c 'n=1; echo $((++n))'2$ dash -c 'n=1; echo $((++n))'1Remember, if you rely on any non-standard behaviour or feature make sure you document it and, if feasible, check for it at run-time.
about 15 hours ago
Qualcomm looks as if it's calming its chief marketing officer, who dismissively called Apple's 64-bit iPhone 5S processor a gimmick in a recent interview."I think they are doing a marketing gimmick," said Anand Chandrasekher last...
Qualcomm looks as if it's calming its chief marketing officer, who dismissively called Apple's 64-bit iPhone 5S processor a gimmick in a recent interview."I think they are doing a marketing gimmick," said Anand Chandrasekher last week. "There's zero benefit a consumer gets from that."Maybe not zero benefit now. You see, the San Diego-based chipmaker issued a statement to sites like CNET, backtracking from Chandrasekher's harsh criticism."The comments made by Anand Chandrasekher, Qualcomm CMO, about 64-bit computing were inaccurate," said Qualcomm.Going for the same 'gimmick'Qualcomm's newfound stance on 64-bit processors could indicate that the company is likely going down the same path, as evidenced by its additional remarks today."The mobile hardware and software ecosystem is already moving in the direction of 64-bit" wrote the company."The evolution to 64-bit brings desktop class capabilities and user experiences to mobile, as well as enabling mobile processors and software to run new classes of computing devices."Likewise, the semiconductor company probably doesn't want to become an enemy of Apple right now.After all, the iPhone maker is looking for ways to ditch Samsung, which still manufacturers its A7 processor.At least Qualcomm fessed up to Chandrasekher's comments being "inaccurate" instead of trying to explain them away by saying 64-bit isn't a "gimmick," but something it wants to "mimic."This, from the company that wants to give you the 'digital sixth sense'?
about 22 hours ago
How To Set Up Advanced Call Center Monitoring Using Free Tools In this tutorial, I'll try to demonstrate how to set up monitoring for a small call center based on Cisco hardware and software using free monitoring ...
How To Set Up Advanced Call Center Monitoring Using Free Tools In this tutorial, I'll try to demonstrate how to set up monitoring for a small call center based on Cisco hardware and software using free monitoring system (Verax NMS & APM in that case). The architecture of your call center may be different; however the procedure itself will stay more or less the same.
1 day ago
Be it Ubuntu or any other platform, one thing I learned over the years is the fact that people like to download their favorite YouTube videos and would want to keep a local copy of it no matter how hard it is. Luckily, there are plenty o...
Be it Ubuntu or any other platform, one thing I learned over the years is the fact that people like to download their favorite YouTube videos and would want to keep a local copy of it no matter how hard it is. Luckily, there are plenty of tools to do this in Ubuntu without any hassles. Here, we'll explore 5 of the most capable YouTube video downloading tools for Ubuntu. Minitube: When it comes to "conventional" YouTube video streaming and downloading in Ubuntu, nothing beats Minitube. You can type any keyword, and Minitube will give you an endless stream of videos to watch, as simple as that. Minitube does not use the Flash Player either, which means lesser CPU consumption. And of course you can download videos in the quality you choose with the click of a button. What more, Minitube is available for download in default Ubuntu repositories (for Ubuntu 12.04, Ubuntu 12.10 and Ubuntu 13.04). Youtube-dl: Command line tools are a big no-no to many. But I would argue otherwise. Youtube-dl is the best and easiest way to download YouTube videos in Ubuntu. It is fast and obviously nimble. And make no mistake, it has quite a wide range of functionalities. But if all you need is to download the best quality version of a particular video, open up the Terminal and type "youtube-dl". Does that look complicated? A more detailed installation and how-to-use instructions can be found in our previous post on Youtube-dl. Gmediafinder: A good Minitube alternative loaded with YouTube streaming and downloading capabilities. In my experience, Minitube has been more stable and a little bit more easier to use when compared Gmediafinder. But it gets the job done. To install it though, you have to add the following PPA and it is not readily available in Ubuntu Software Center (Ubuntu 12.04, Ubuntu 12.10 and Ubuntu 13.04 supported). Just do the following in Terminal. sudo add-apt-repository ppa:s-lagui/ppa sudo apt-get update sudo apt-get install gmediafinder Movegrab: Yet another command-line tool for downloading YouTube videos in Ubuntu. Somehow, I am finding it difficult to download YouTube specific videos using Movgrab at the moment, even though I didn't had any problem with sites like Dailymotion. Many consider Movgrab to be a superior alternative to my favorite Youtube-dl. More details and how-to-use instructions on Movgrab at WebUpd8. Do the following in Terminal to install Movgrab. sudo add-apt-repository ppa:nilarimogard/webupd8 sudo apt-get update sudo apt-get install movgrab YouTube Downloader Script: Here's a simple cross-browser script that will add a download button to the YouTube page, literally. It will let you download your favorite videos in MP4 format (HD, Full HD and even 4K supported). See installation instructions below, For Firefox: You need to download Greasemonkey extension for Firefox first. Afterwards, simply visit the script download page and install it. For Chrome/Chromium: Install Tampermonkey extension first. And then, like before, visit the script download page and hit Install button on top. Make no mistake, almost all the tools featured above (except the cross-browser script) does support other popular sites like Dailymotion, Vimeo, Metacafe, Liveleak, Blip.tv etc. apart from YouTube. Try them out and let us know your feedback. Thanks for reading. Recommended: Top 5 Video Editors for Ubuntu/Linux
1 day ago
The term "business laptop" used to evoke images of bulky, drab slabs of plastic, something that Toshiba is staying clear of with its consumer-inspired Z-range of enterprise notebooks.The 13-inch Portege Z30 is joined by new 14-in...
The term "business laptop" used to evoke images of bulky, drab slabs of plastic, something that Toshiba is staying clear of with its consumer-inspired Z-range of enterprise notebooks.The 13-inch Portege Z30 is joined by new 14-inch Z40 and 15-inch Z50 models in Toshiba's Tecra range. All of the laptops share compatible internals meaning IT departments can chop and change when installing disk images and using Toshiba's docking stations.And don't worry if your business isn't prepared to leap headlong into the til-based world of Windows 8.1 as Toshiba will give you the option to pick them up with Windows 7 pre-installed instead.Design and displayFirst up is the 13-inch Portege Z30, which succeeds Toshiba's flagship Z930 and is offered in two flavours.The standard Z30 comes with a 1366 x 768 pixel-resolution matte display that looks fairly washed out compared to the comparatively lively 1920 x 1080 pixel-resolution panel found on the touchscreen Z30t.All of the models look the part thanks to being constructed of a gunmental grey magnesium alloy that gets its sturdiness from what Toshiba calls a Tough Body chassis.Not that you'll be able to tell without a high-powered microscope (and everybody has one of those lying about), but the laptops use a honeycomb-style lattice to make the material tough, yet lightweight.Even the 15-inch Z50 can be held at the corner in one hand without giving any noticeable flex in the chassis (the largest model was particularly impressive for its weightlessness).Their lids offer sturdy resistance when opened and closed in one hand but stop short of feeling stiff, and the chrome finish on the shoulder hinges adds a nice touch.SpecsThe Z30 gives you plenty of choice depending on what level of internal horsepower you require. All of them come with Intel's fourth generation Haswell processor, starting at i3 and ranging up to an i7 chip, which Toshiba says should help battery life last around 12 hours.You'll have to put up with shared graphics with this model, which gets a Intel HD 4400 GPU that should prove adequate for everyday tasks. It's available with a SSD drive up to 512GB and up to 8GB DDR3L RAM.ConnectivityToshiba tells us that it aims to provide business users will the necessary connectivity options to help you out in any given situation, and the Z30 doesn't disappoint.It offers three USB 3.0 ports, a Gigabit Ethernet port, an SD card slot, and two video outputs in the form of HDMI and RBG. You can also opt for a SmartCard reader and 4G SIM slot for hooking up to the internet on the move.Also present are the usual stereo speakers with DTS Studio Surround, a full HD stereo microphone, Toshiba's EasyGuard security software and a Trusted Platform Module.Keyboard and trackpadThe Z30's spill-resistant keyboard packs a bright trackpad that gives off an electric blue glow in the dark, which both looks impressive and should serve well for typing out documents into the early hours.The keys gave a surprising amount of travel, feeling comfortable to type on but not overly springy. In the middle of the keyboard is an "accupoint" trackpoint that can be used as in conjunction with the roomy trackpad.The laptops will be available to pick up during the fourth quarter of 2013, with pricing yet to be announced. We'll let you know when we do.What are the top 10 business laptops?
1 day ago