Mackenzie Morgan: Finding more women to speak at Ohio LinuxFest: success!

Cross-posted on Geek Feminism. Co-authored by Moose J. Finklestein, OLF's Content Chair.

Some conference organisers will say "we didn't get any submissions from women" to explain the lack of women on their stages. As of two years ago, the Ohio LinuxFest was in that category. With a little outreach effort, and embracing diversity as a core value, the Ohio LinuxFest has successfully recruited more women to share their experience at OLF.

How'd we do? While last year only five of the speakers at Ohio LinuxFest were women, out of a total of 31, this year 14 of the 38 speakers are women. That's a third of the conference speaking slots! One of the two keynoters is a woman. There were 107 talk proposals for the 27 general speaking slots. Before anyone tries to suggest that we simply took them all, it should be noted that a full 48% of the proposals for talks categorised as not assuming high levels of prior knowledge (making them suitable for the most attendees) were from women.

We believe that much of this success is attributed to community outreach. This year, we contacted Ubuntu Women, Debian Women, LinuxChix, DevChix, and the FSF's Women's Caucus mailing list about the call for presentations, and did it have an effect!

Recognising the various concerns women speakers can face, we tried to specifically address potential issues in the email sent to women-focused mailing lists. Some of these known issues include lack of confidence in new speakers, not being clear what the intended audience is, or the "imposter syndrome," where someone doesn't recognize that they are qualified to speak on a topic. The woman to woman dialog made the difference.

We wanted to make sure people weren't refraining from submitting because they lack confidence in their technical abilities (an excuse we'd heard before), so we explained the attendees' demographics, hoping to get more proposals that would fill the gap we had for user-aimed talks. Ohio LinuxFest has everything from home desktop users who started using Ubuntu a week ago (or even that day!) to seasoned system administrators who love Slackware, Gentoo, or NetBSD. Nevertheless, beginner proposals have tended toward introduction to development topics, not leaving enough for people who want to be users, not developers. We also made sure to mention that it's a great crowd who is very welcoming of first-time speakers.

Women are involved with more than just speaking at the Ohio LinuxFest. Beth Lynn Eicher has been actively involved as a director for 6 years now, and the current staff, all volunteers, is about 35% female.

The Ohio LinuxFest takes pains to create a weekend conference friendly to all people, not just women. The diversity statement includes gender, ethnicity, disability, sexuality, and even operating system -- folks who don't use Linux are just as welcome as those who love it. There are regularly talks about or including BSDs, interoperability in heterogeneous environments, and cross platform free software.

Additionally, all speakers are instructed to keep the content of their presentations clean. The Ohio LinuxFest bills itself as a family friendly conference and aims to keep it that way. As an effort to make a positive effect with the community at large, the Ohio LinuxFest will host the second annual Diveristy in Open Source Workshop on September 12, 2010.

Looking at the growing trend of more female influence on the OhioLinuxFest we'd like to see it be the leader for more women to attend and become more involved with other free software interests.

For those interested in pretty graphs, I've been graphing women speaker proportions at various LinuxFests on the GeekFeminism Wiki.



Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu
Article :: An Interview with Watts Humphrey, Part 27: Formal Methods, the Failure of PSP, and Tragedy of Beautiful Software

In this transcript of an oral history, Grady Booch interviews SEI Fellow Watts Humphrey. In Part 27, Humphrey discusses his work with formal methods, why he had to move away from the PSP process, and why beautiful work in software does not get noticed.

Categories: Computers | InformIT | InformIT Programming | Programming | Technology
Is Your PC Frozen?

Bob was in the process of shutting down a software company that he had built over the past seven years. He had found a buyer for all of the software that he'd developed, collected his "eff you money" and was now retiring.

In fact, things were at the point where Bob had already closed the building and redirected the phones to his home phone with a distinctive ring so that he could tie up loose ends while the building was up for sale.

Bob woke one morning at 8:00am to the phone ringing, crawled out of bed and picked up the ‘Bat Phone,' as he called it, in the living room.

"Hello?" Bob said, and gave the name of the company.

Without preamble or introduction, Bob was informed by a woman's voice, "Hi this is Sally Brumbaker, my user id is smb1985. My computer's frozen."

Bob didn't recognize the voice and certainly not the name. Also, it was before coffee. "Your computer's frozen?" Bob affirmed.

"Yes."

"Is the side cold?" Bob asked matter of factly.

"Wait a minute," replied Sally, and then after a pause, "No not at all."

"Ok, then," Bob assured her. "Your computer's not frozen, then, it's probably just running a program. Give it a minute."

"I don't understand, what do…" the woman began, and then, "Oh, ok. There is goes." and that, she hung up the phone and Bob did the same, thinking about how much cream to put into his coffee.

THREE MONTHS LATER

The ‘Bat Phone’ rings. Though the company had long been put to bed, Bob was suddenly reminded of was that he’d forgotten to stop the phone service.

"Hello?" Bob asked, and with a little hesitation, gave the name of his (now non-existent) company.

"Hello,” introduced the caller in a very serious tone, “I need to speak to someone in charge of your technical support."

"Well, that's pretty much me,” replied Bob, “What do you need?"

"Did you or someone working for you tell Sally So-And-So that she could tell if a computer was frozen by feeling the side?"

"What?"

"Sally says she called this number three months ago, and was informed by a support tech that she could tell if a PC was frozen by feeling for the side being cold. Since then, she's been feeling the sides of people's computers, and she's completely humiliated."

"Sally works in your IT department?" Bob asked.

"No, Sally is the Director of our human resources department," Bob was informed.

"And this is...?"

"I sit on the board for Plainston-Princeboro Teaching Hospital."

"I see. So, Sally hires doctors and nurses."

"She does - and now she's been humiliated by you or someone at your company,” huffed the voice on the phone,” What do you have to say for yourself?"

"Well, first," Bob answered, "I'd like to say that, if I get seriously hurt, I'll drag myself right past YOUR hospital."

"WHAT!?"

"Sir," Bob said, with great sincerely, "you have to admit, that's pretty dumb."

Suddenly, the man on the other end of the line was at a sudden loss for words.

"Ok," he said finally, a little deflated, "Sally isn't the most computer savvy person we have, but that doesn't give you the right to prey on her..."

"Sir," Bob said, "I took that call, Sally didn't identify herself, and as soon as she thought she had an answer from me, she hung up the phone before I could explain that I was kidding. I'm sorry if I humiliated her, but I have no idea how she got my number and this isn't a computer technical support company."

"Oh, I see," the person informed Bob. "We’ll, just be more careful, next time,” and with that, hung up the phone.

Since then, Bob disconnected the ‘Bat Phone’ for good, officially severing himself from his old life, but still gets a chuckle thinking of a smartly dressed executive going through the hospital, troubleshooting issues by feeling the sides of PC's and telling their users whether they were frozen of not.




Categories: Computer Humor | Computers | Humor | Programming | Technology | The Daily WTF
Error'd: Logon-ing Off

Andrew Carpenter writes, "I guess this is like turn-oning off a switch?"

 

"While trying to signup for a Windows Live account, I found myself without my best friend Neil," wrote Rob, "unfortunately, my second-best friend Ray, third-best friend Jane, and fourth-best friend Tom are also excluded."

 

"I got this rather odd message when trying to install the Evo Java client," wrote Nick Edwards, "I clicked OK and it worked... even though I wasn't SURE_IT_WORKS!"

 

"I'm not sure why Google would omit entries and return zero results," Michael noted, "clicking on the link, I received 0 omitted results which were indeed very similar."

 

"YUM!! Blank Insert bear claws," wrote Matthew Sowders

 

"This came up while configuring Neverwinter Nights on my PC," Ville Rastas writes, "I was worried the game might not support today's high resolution screens, but I guess it's quite the opposite."

 

"I knew IKEA has some funny names on it's furniture," writes Patrik, "but who knew they were into the new fashion trend of nerd chic?

 

"According to Virgin Mobile," writes Glenn Jones, "Unlimited is twice as big as 10G (so maybe around 20G), except for videos where Unlimited is only 1.3 times 10G."

 




Categories: Computer Humor | Computers | Humor | Programming | Technology | The Daily WTF
CodeSOD: Accounting for Complexity

"I was recently assigned to work on a team that maintains a fairly large product," writes Aaron, "at first, I was a bit overwhelmed by the complexity of the architecture. There were countless layers of abstraction, thousands and thousands of classes, and design patterns galore. Since it was such a large project – and my first large project – I figured that the architectural complexity was simply par for the course."

“Then I started looking at the code a little more closely. If I had two words to describe it, they’d be ‘unnecessary complexity.’ And if I had one snippet to describe it, it would be this.”

private void SetAccount(RequisitionData.RequisitionItem requisitionItem, 
                        AccountData.Account account, bool automation)
{
    bool allowSetAccount = false;

    if(account != null)
    {
        // if the account entry is being set by automation, ensure that 
	// the user hasn't already set a value
        if (automation)
        {
            if (!requisitionItem.IsAccountCodeNull())
            {
                if (requisitionItem.AccountCode == string.Empty)
                    allowSetAccount = true;
                else
                    allowSetAccount = true;
            }
            else
                allowSetAccount = true;
        }
        else
            allowSetAccount = true;

        if (allowSetAccount)
        {
            requisitionItem.AccountID = account.ID;
            requisitionItem.AccountCode = account.Code;
        }
    }
}

Aaron continued, "the beauty of it is that the method is private within the class, and has an 'automation' boolean parameter. This parameter is always passed as true."




Categories: Computer Humor | Computers | Humor | Programming | Technology | The Daily WTF
Amber Graner: Ohio LinuxFest Registration and Contest Deadline Extended

According to the Ohio LinuxFest website the Registration and Contest Deadline for OLF has been extended.  Below is the announcement from their website.  I’ll be speaking at the UbuCon and on Saturday at OLF  - Hope to see you there!!

Columbus, Ohio — September 1, 2010 — Registration for the 2010 Ohio LinuxFest has been extended through September 8th, and theregistration contest has also been extended until the 1,000the registration has been reached.

One lucky registrant will win an upgrade to the Supporter Pass, or a  Professional Pass registration for Ohio LinuxFest 2011 worth $350, at  the choice of the winner. Full details are available at  http://ohiolinux.org/node/37 – sign up today and have a chance to win!
Online registration also qualifies attendees for door prizes and  giveaways the day of the conference.

As always, the main schedule takes place on Saturday. The schedule  kicks off with a keynote from GNOME Foundation Executive Director  Stormy Peters, followed by five tracks of talks from open source and  Linux experts like Taurus Balog, Amber Graner, Catherine Devlin, Dru  Lavigne, Paul Frields, and Jon ‘maddog’ Hall. This year’s OLF also  features a special medical track for those interested in the use of  free and open source software in medicine.

The final keynote will be a real treat for Linux and open source  enthusiasts interested in free media. Christopher “Monty” Montgomery  of Xiph.org will be talking about next generation open source media  formats.

Once again the Ohio LinuxFest is free to all, but space is limited.  Sign up today at  http://ohiolinux.org/register.html If you want to  support OLF, the organizers have made a supporter package available  for $65 that includes lunch and an OLF t-shirt. For those who want to  attend Friday’s OLF University sessions, a professional pass is also
available for $350.

The Ohio LinuxFest is a grassroots conference for the open source  community that started in 2003 as an inter-LUG meeting and has grown  steadily since to become the midwest’s largest open source event. It’s  an annual event for Linux and open source enthusiasts to gather, share  information, and socialize.



Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu
PHP 5.3.3 Released!

The PHP development team would like to announce the immediate availability of PHP 5.3.3. This release focuses on improving the stability and security of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users are encouraged to upgrade to this release. Backwards incompatible change:Methods with the same name as the last element of a namespaced class name will no longer be treated as constructor. This change doesn't affect non-namespaced classes. There is no impact on migration from 5.2.x because namespaces were only introduced in PHP 5.3.Security Enhancements and Fixes in PHP 5.3.3:Rewrote var_export() to use smart_str rather than output buffering, prevents data disclosure if a fatal error occurs (CVE-2010-2531).Fixed a possible resource destruction issues in shm_put_var().Fixed a possible information leak because of interruption of XOR operator.Fixed a possible memory corruption because of unexpected call-time pass by refernce and following memory clobbering through callbacks.Fixed a possible memory corruption in ArrayObject::uasort().Fixed a possible memory corruption in parse_str().Fixed a possible memory corruption in pack().Fixed a possible memory corruption in substr_replace().Fixed a possible memory corruption in addcslashes().Fixed a possible stack exhaustion inside fnmatch().Fixed a possible dechunking filter buffer overflow.Fixed a possible arbitrary memory access inside sqlite extension.Fixed string format validation inside phar extension.Fixed handling of session variable serialization on certain prefix characters.Fixed a NULL pointer dereference when processing invalid XML-RPC requests (Fixes CVE-2010-0397, bug #51288).Fixed SplObjectStorage unserialization problems (CVE-2010-2225).Fixed possible buffer overflows in mysqlnd_list_fields, mysqlnd_change_user.Fixed possible buffer overflows when handling error packets in mysqlnd.Key enhancements in PHP 5.3.3 include:Upgraded bundled sqlite to version 3.6.23.1.Upgraded bundled PCRE to version 8.02.Added FastCGI Process Manager (FPM) SAPI.Added stream filter support to mcrypt extension.Added full_special_chars filter to ext/filter.Fixed a possible crash because of recursive GC invocation.Fixed bug #52238 (Crash when an Exception occured in iterator_to_array).Fixed bug #52041 (Memory leak when writing on uninitialized variable returned from function).Fixed bug #52060 (Memory leak when passing a closure to method_exists()).Fixed bug #52001 (Memory allocation problems after using variable variables).Fixed bug #51723 (Content-length header is limited to 32bit integer with Apache2 on Windows).Fixed bug #48930 (__COMPILER_HALT_OFFSET__ incorrect in PHP >= 5.3). For users upgrading from PHP 5.2 there is a migration guide available on http://php.net/migration53, detailing the changes between those releases and PHP 5.3. For a full list of changes in PHP 5.3.3, see the ChangeLog.

Categories: Computers | PHP | PHP Hypertext Preprocessor | Programming | Technology
Ubuntu Server blog: Server Team 20100831 meeting minutes

Here are the meeting minutes. They can also be found
here
with full irc logs.

  • Agenda
    • Review ACTION points from previous meeting
      • SpamapS to submit rubygems change proposal as Important bug in Debian and CC ubuntu-devel
      • jjohansen to review bug 493156
      • zul to review papercut status of bug 582963
      • ttx to make burnup charts available to people who want them
    • Maverick development (jib)
      • Beta milestone release (ttx) – Beta-milestoned bugs and ISO testing
      • Post-beta work – Maverick bugs and release status page (ttx)
    • Weekly Updates & Questions for the QA Team (hggdh)
    • Weekly Updates & Questions for the Kernel Team (jjohansen)
      • pv-ops kernel status update
    • Weekly Updates & Questions for the Documentation Team (sommer)
    • Weekly Updates & Questions for the Ubuntu Community Team (kim0)
    • Papercuts Maverick retrospective (ttx)
    • Open Discussion
    • Announce next meeting date and time
      • Tuesday 2010-09-07 at 1800 UTC – #ubuntu-meeting
  • Minutes
  • Meeting Actions
    • jjohansen to provide tests for bug 582963 and request SRU
  • ACTIONS from previous meeting
    • SpamapS to submit rubygems change proposal as Important bug in Debian and CC ubuntu-devel
      • submitted, discussion had, consensus reached…
      • rubygems 1.9.1 to be merged into ruby 1.9, and gems to be placed in /usr/local/bin
      • copious congratulations and kudos from all around to Spamaps
    • jjohansen to review bug 493156 (“Please enable CONFIG_TASK_DELAY_ACCT”)
      • test kernel built, but not yet submitted for SRU
    • zul to review papercut status of bug 582963
      • Done, in apache now
      • side effect in the form of a new SSl bug
      • zul may revert
    • ttx to make burnup charts available to people who want them
      • http://people.canonical.com/~ttx/current-milestone-progress.svg is refreshed hourly
  • Maverick development (jib)
    • beta cycle is winding down (ends this thursday)
      • we are mostly on track
    • iso testing coming up soon
    • jib and ttx finalizing RC plan on friday
    • ttx described in detail how to prioritize work
      • https://wiki.ubuntu.com/ServerTeam/MaverickReleaseStatus
      • Milestoned bugs — those have high priority
      • high priority meaning, spec work is even secondary
      • then you have “High, release targeted bugs”
      • and finally “Other release-targeted bugs” – targets of opportunity
    • ttx points out that week between Beta release and FinalFreeze is time to fix seemingly basic bugs
  • Weekly Updates & Questions for the QA Team (hggdh)
    • QA team changing the way regression tags are used – RFC out soon
    • mathiaz announces that he has automated all of the iso testing
  • Weekly Updates & Questions for the Kernel Team (jjohansen)
    • Bug #606373 – sporadic console output – looking for a race
    • Bug #620994 (xen kernel BUG) – after extensive testing doesn’t affect, Maverick or Lucid
    • Bug #614853 (kernel panic divide error) – could not replicate
    • Bug 621175 (virtual kernel contains too many modules) – will have to be fixed post-beta
  • Papercuts Maverick retrospective (ttx)
    • 48 targets; 25 bugs fixed; 8 invalidated; 3 waiting on upstream; 12 postponed
    • ttx frets that the effort failed in bringing in new contributors
    • kirkland asks how many users were made happier with Ubuntu Server
      • tough to quantify
    • kirkland and mathiaz agree that it is nice dedicating time to fix small bugs
    • hallyn and Spamaps concur that it was a useful exercise for learning about packaging
    • We will further discuss at UDS-N
  • Agree on next meeting date and time
    • Next meeting will be on Tuesday, September 7th at 18:00 UTC in #ubuntu-meeti



Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu
PHP 5.3.1 Released!

The PHP development team would like to announce the immediate availability of PHP 5.3.1. This release focuses on improving the stability of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users of PHP are encouraged to upgrade to this release.Security Enhancements and Fixes in PHP 5.3.1:Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion.Added missing sanity checks around exif processing.Fixed a safe_mode bypass in tempnam().Fixed a open_basedir bypass in posix_mkfifo().Fixed failing safe_mode_include_dir.Further details about the PHP 5.3.1 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

Categories: Computers | PHP | PHP Hypertext Preprocessor | Programming | Technology
Martin Owens: Random Genetic Wallpaper

I’m breaking my two week blog holiday early to bring you a super cool genetic wallpaper video:

View Video on Blip

As I show in the video, once you have a nice svg (manually edited of course) you can use the script to nudge elements in it. Comment here if you think this is cool.



Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu
Alberto Milone: How to set up "Web CoopVoce" (3G) APN on Android

I’m a satisfied owner of a Nexus One (loving Android Froyo 2.2) and today I decided to try a (volume based) 3G plan by CoopVoce.

There are 2 options available: either buy a 3G usb key or simply use 3G directly from your phone. In the former case (which I wasn’t interested in) the usb key works with Linux and you can even download a QT based dashboard which is supposed to set up the connection for you and it works on Ubuntu, Fedora, etc. While this definitely was a pleasant surprise, the lack of instructions to configure your phone wasn’t as pleasant. The website suggests to contact customer service so that they can provide you with the right configuration for your phone (but it seems that they’re not ready for Android phones). Long story short, I decided to download the dashboard instead and explore its contents hoping to find something useful to set up the APN myself. My research was successful and I thought I would share my findings with you.

Enter the “Settings” tool, then select “Wireless & network settings” -> “Mobile networks” -> “Access Point Names” and add a new profile with “New APN”.

Fill in the fields below as follows:

Name: CoopVoce
APN: web.coopvoce.it
MCC: 222 (set by default)
MNC: 01 (set by default)
Authentication type: PAP
APN type: default,supl

Note: I’m not really sure if MCC and MNC are actually useful.

Leave the rest unset. Save and select your new profile, then go back to the Mobile networks settings screen and select “Data enabled” to turn on your 3G connection.

Since this is mostly aimed at people who live in Italy, here’s the Italian translation:

Per configurare una connessione 3G con CoopVoce (web 500 mega nel mio caso) su di un telefonino con Android, entrare nel pannello delle impostazioni e scegliere la schermata di configurazione delle reti (“Wireless e reti”), poi quella per le “Reti mobili” e in seguito quella dei punti d’accesso (“Nomi punti di accesso”). Aggiungere un nuovo APN e riempire i campi come segue:

Nome: CoopVoce
APN: web.coopvoce.it
MCC: 222 (impostato di default)
MNC: 01 (impostato di default)
Tipo di Autenticazione: PAP
Tipo APN: default,supl

Nota: non sono sicuro dell’utilità di MCC e MNC.

Lasciare il resto non settato. Salvare e selezionare il nuovo profilo e infine tornare alla schermata di impostazione delle reti mobili e attivare la connessione 3G abilitando il traffico dati (opzione “Dati attivati”).



Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu
PHP 5.3.2 Released!

The PHP development team is proud to announce the immediate release of PHP 5.3.2. This is a maintenance release in the 5.3 series, which includes a large number of bug fixes. Security Enhancements and Fixes in PHP 5.3.2:Improved LCG entropy. (Rasmus, Samy Kamkar)Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)Key Bug Fixes in PHP 5.3.2 include:Added support for SHA-256 and SHA-512 to php's crypt.Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check.Fixed bug #51059 (crypt crashes when invalid salt are given).Fixed bug #50940 Custom content-length set incorrectly in Apache sapis.Fixed bug #50847 (strip_tags() removes all tags greater then 1023 bytes long).Fixed bug #50723 (Bug in garbage collector causes crash).Fixed bug #50661 (DOMDocument::loadXML does not allow UTF-16).Fixed bug #50632 (filter_input() does not return default value if the variable does not exist).Fixed bug #50540 (Crash while running ldap_next_reference test cases).Fixed bug #49851 (http wrapper breaks on 1024 char long headers).Over 60 other bug fixes. For users upgrading from PHP 5.2 there is a migration guide available here, detailing the changes between those releases and PHP 5.3. Further information and downloads: For a full list of changes in PHP 5.3.2, see the ChangeLog. For source downloads please visit our downloads page, Windows binaries can be found on windows.php.net/download/.

Categories: Computers | PHP | PHP Hypertext Preprocessor | Programming | Technology
PHP 5.2.13 Released!

The PHP development team would like to announce the immediate availability of PHP 5.2.13. This release focuses on improving the stability of the PHP 5.2.x branch with over 40 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. Security Enhancements and Fixes in PHP 5.2.13:Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)Fixed a possible open_basedir/safe_mode bypass in session extension identified by Grzegorz Stachowiak. (Ilia)Improved LCG entropy. (Rasmus, Samy Kamkar) Further details about the PHP 5.2.13 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

Categories: Computers | PHP | PHP Hypertext Preprocessor | Programming | Technology
Article :: An Introduction to Service-Oriented Design with Ruby and Rails

This chapter explores the basic goals of service-oriented design and design guidelines for splitting applications into separate services.

Categories: Computers | InformIT | InformIT Programming | Programming | Technology
Ronnie Tucker: Full Circle Side-Pod #3: Where's the Neurotic Numbat?

Full Circle Side-Pod #3: Where’s the Neurotic Numbat?

In this episode; with great power, comes a big utility bill.

This is an extra, irregular, short-form podcast, which is intended to be a side-branch of the main Full Circle Podcast. Somewhere to put all the general technology, non-Ubuntu news and opinions, hobby-horses and general kipple that doesn't fit anywhere else. Be prepared for a healthy dose of British sarcasm.

It’s been a while. We’re maybe half way through our summer recess from the Full Circle podcast, so this is either goodbye to season one or hello and welcome to season two.

News: Products die, divorce by Facebook, yet more lawsuits…

Interview: Matt Grove from Miserware describes Granola’s energy-saving ability

Expert Spot: Editing the Full Circle Podcast pt. 3: The Edit Environment

Feeds for both MP3 and OGG:

RSS feed MP3RSS feed, MP3: http://fullcirclemagazine.org/category/podcast/feed

RSS feed OGG audio   fileRSS feed, OGG: http://fullcirclemagazine.org/category/podcast/feed/atom

The podcast is in MP3 and OGG formats. You can either play the podcast in-browser if you have Flash and/or Java, or you can download the podcast with the link underneath the player. Show notes after the jump. Your Hosts:

Additional audio by Victoria Pritchard

Show Notes

1.06 | WELCOME and INTRO

2.25 | NEWS: round-up of some news items that caught my eye during the break.

13.07 | INTERVIEW: Matt Grove from Miserware

Energy-saving computing. It’s a neat concept, saving you money by saving you electricity. That’s money off your utilitiy bill while you do your bit to save the planet. Granola is software that improves the energy efficiency of your PC or laptop. A few weeks ago I spoke to Matt Grove from Miserware, who explained who it works…

34.57 | EXPERT SPOT: Editing the Full Circle Podcast – Part 3: The Edit Environment

45.05 | FEEDBACK: How to get in touch with us

45.55 | WRAP and OUTRO

Comments: on this page, using the comment form, OR; Send us a comment to podcast@fullcirclemagazine.org.
You can also send us a comment by recording an audio clip of no more than 30 seconds and sending it to the same address.
Comments and audio may be edited for length. Please remember this is a family-friendly show.

Please note: this podcast is provided with absolutely no warranty whatsoever; neither the producers nor Full Circle Magazine accept any responsibility or liability for content or interaction which readers and listeners may enter into using external links gleaned from this forum or podcast series.

Creative Commons Music Tracks

File Sizes:

OGG 24.5Mb
mp3 19.8Mb

Runtime: 45 minutes 55 seconds

Full Circle Side-Pod #3: Where's the Neurotic Numbat? In this episode; with great power, comes a big utility bill. This is an extra, irregular, short-form podcast, which is intended to be a side-branch of the main Full Circle Podcast. Somewhere to put all the general technology, non-Ubuntu news and opinions, hobby-horses and general kipple that doesn't fit anywhere else. Be prepared for a healthy dose of British sarcasm. It's been a while. We're maybe half way through our summer recess from the Full Circle podcast, so this is either goodbye to season one or hello and welcome to season two. News: Products die, divorce by Facebook, yet more lawsuits... Interview: Matt Grove from Miserware describes Granola's energy-saving ability Expert Spot: Editing the Full Circle Podcast pt. 3: The Edit Environment Feeds for both MP3 and OGG: RSS feed, MP3: http://fullcirclemagazine.org/category/podcast/feed RSS feed, OGG: http://fullcirclemagazine.org/category/podcast/feed/atom The podcast is in MP3 and OGG formats. You can either play the podcast in-browser if you have Flash and/or Java, or you can download the podcast with the link underneath the player. Show notes after the jump. Your Hosts: Robin Catling (blog at http://catlingmindswipe.blogspot.com/) Additional audio by Victoria Pritchard Show Notes 1.06 | WELCOME and INTRO 2.25 | NEWS: round-up of some news items that caught my eye during the break. Mark Shuttleworth announced the codename for Ubuntu 11.04, We're disappointed; where's the Neurotic Numbat? The Numbat is a real, and endangered marsupial. Myrmecobius Fasciatus. Microsoft Kin phone cancelled after a month Google Wave RIP; wave developments ceases, Schmidt says 'celebrate our failures.' Everybody sues everybody: Lexmark sues 3rd party cartridge supplier Interval Research sues everyone but the yacht club (summarised in arstechnica coverage) Patents in question: Browser for use in navigating a body of information 2005, Attention manager for occupying the peripheral attention of a person 2008 , Alerting users to items of current interest 2004 Intel buying McAfee, which probably means lock-down or DRM in more future hardware. Google voice calls to gmail (gmail blog announcement and TechWatch on VOIP integration). GoogleVoice Rate card for 'insanely low rates' but only til 2011. Philadelphia's $300 blog tax - Business Privilege Tax MPEG-LA declares H.264 codec to be royalty free in perpetuity Facebook entries admissable as evidence in divorce cases 13.07 | INTERVIEW: Matt Grove from Miserware Energy-saving computing. It's a neat concept, saving you money by saving you electricity. That's money off your utilitiy bill while you do your bit to save the planet. Granola is software that improves the energy efficiency of your PC or laptop. A few weeks ago I spoke to Matt Grove from Miserware, who explained who it works... 34.57 | EXPERT SPOT: Editing the Full Circle Podcast – Part 3: The Edit Environment 45.05 | FEEDBACK: How to get in touch with us 45.55 | WRAP and OUTRO Comments: on this page, using the comment form, OR; Send us a comment to podcast@fullcirclemagazine.org. You can also send us a comment by recording an audio clip of no more than 30 seconds and sending it to the same address. Comments and audio may be edited for length. Please remember this is a family-friendly show. Please note: this podcast is provided with absolutely no warranty whatsoever; neither the producers nor Full Circle Magazine accept any responsibility or liability for content or interaction which readers and listeners may enter into using external links gleaned from this forum or podcast series. Creative Commons Music Tracks Opening: ‘Knights of the darkness' by Zero Project (http://www.jamendo.com/en/track/516745) Main theme: 'CCMixter' by Code (http://ccmixter.org/files/Mix

Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu
CodeSOD: Role-based Canary

Role-based security requires, at a minimum, two key elements: users and roles. Roles (such as Administrator, Clerk, and ViewOnlyUser) are defined by the application code and then assigned to users to restrict which functions of the application they may use. It's a pretty simple concept that involves all of two database tables, or one if the user names come from some external source like Active Directory.

In Adam's case, the Role-based security feature served as a coalmine canary in the application he was tasked with reviewing. Although it passed all of the test cases — employees could only do certain things, customers could do other things, etc. — there was one fundamental flaw with the system. See if you can spot it.

public bool IsInRole(string roleName)
{
   return UserName.StartsWith(roleName.Substring(0, 3));
}

The roleName parameter is a string ("Employee") that's is passed in from a method to check security, and UserName is just that: it's the user's name. So, users with a name that started with "Emp" would be granted access to Employee functions, while no one else would. And why "Emp"? As it turned out, the user names created for testing were "Employee1", "Employee2", "Employee3", and so on.

As for the rest of the system, it's development was similar: it passed the test cases and little more.




Categories: Computer Humor | Computers | Humor | Programming | Technology | The Daily WTF
Mackenzie Morgan: Sharing a shell and monitoring the other party

Recently, I had a reason to allow someone else to use a shell on a machine for which I'm the admin, but I wanted a way to track what they're doing. You might think the history command is just fine for this, but it's possible to clear the history, and I wouldn't want that. Screen to the rescue!

I ssh'd into the machine and created a new user for my visitor. Then I switched to that user. Once logged in, I ran screen -L, which logs the shell (both input and output) to ~user/screelog.0). Then I called up the user, gave them the IP address, username, and password. They logged in, and I told them to run screen -ls to see a list of open screen sessions. The output looks like this:

There is a screen on:
 2119.pts-0.marlyn (09/01/2010 06:32:03 PM) (Attached)
1 Socket in /var/run/screen/S-maco.

The next step was for them to type screen -x 2119.pts-0.marlyn Once they did this, we could each see what the other saw in our SSH session, and it was all logged. Great! I could keep track of what they were doing as they were doing it and review the logs later for a double check.

It's not a VCS though. If you know what directory they'll be operating in, you might want to run bzr init ; bzr add ; bzr commit -m "starting point" first, so you can later run bzr diff | less to see what files changed and keep a record of what changed, since while it might all seem perfectly logical while it's happening, recalling the exact changes won't be easy. The point of watching can be to catch them in the act if they try to do something that violates your security policy or to be given a demonstration.

EDIT: After a question in comments about how you keep them from opening another non-screen'd connection, my friend Peter suggested adding screen -xR to the user's ~/.bash_profile, so it forcibly connects to the screen session. Thanks, Peter!



Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu
Article :: An Interview with Watts Humphrey, Part 25: SEI Strategy and the Trouble with Trivial Errors

In this transcript of an oral history, Grady Booch interviews SEI Fellow Watts Humphrey. In Part 25, Humphrey talks about how the SEI strategy came about, the value of monthly reports, and why you can't count on testing to find all of your defects.

Categories: Computers | InformIT | InformIT Programming | Programming | Technology
PHP 5.2.12 Released!

The PHP development team would like to announce the immediate availability of PHP 5.2.12. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. Security Enhancements and Fixes in PHP 5.2.12:Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus)Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia)Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas)Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com) Further details about the PHP 5.2.12 release can be found in the release announcement, and the full list of changes are available in the ChangeLog.

Categories: Computers | PHP | PHP Hypertext Preprocessor | Programming | Technology
You In Ubuntu: Ubuntu App Developer Week Announced!

Are you interested in developing applications on Ubuntu then this is the week for you! Ubuntu App Developer Week September 27 through October 1st, 2010

Categories: Computers | Linux | nix | Planet Ubuntu | Ubuntu