Language Selection

English French German Italian Portuguese Spanish

OSS Leftovers

Filed under
OSS
  • Open source predictions for 2019

    Crystal ball? Are you there? Fine. I'll go it alone.

    2018 was a rollicking fun year for open source, filled with highs, lows, and plenty of in-between. But what will 2019 hold for Linux and open source software? Let's shrug off the continued introductory dialog and prognosticate.

  • Why Mozilla Matters

    Mozilla revenue rose by over $40 million USD in 2017 which sounds good until you notice that its expenses went up by over $80 million.

    Mozilla has filed its accounts for the financial year ended December 31st, 2017 and published them along with its annual report, The State of Mozilla 2017.

  • There’s BIG open source news on our 9th birthday

    Since those first days, we’ve frequently seen developers reach the #1 spot in various app stores. We’ve seen apps that have received millions of downloads, and app developers who have made a full time career out of mobile app development. But for many, it’s also a challenging time. The mobile app market has become over saturated. There has been a race-to-the-bottom in app pricing. New challenges extend up the development toolchain and impact the quality of top app engines.

    In this evolving industry landscape and these emerging challenges, change is good and necessary. With that in mind, we would like to introduce a big change for Corona. We have decided to get you — the developer community — more involved in Corona’s development, and open-source most of the engine. There are features you want, updates you need, and it’s simply time to get you more involved in Corona’s future. Corona Labs will continue to support the engine and going open source means more transparency to the process.

    We are certain you will have a lot of questions about how this will work, and as we have more to share, we will be continuously sharing new details with you. Also, feel free to discuss this in our community forums and in the CDN Slack.

  • ETSI Open Source MANO’s Latest Release Equips for 5G

    The European Telecommunication Standards Institute (ETSI) today released the latest version of its Open Source MANO (OSM) project. OSM is an operator-led group working on delivering an open source management and network orchestration (MANO) stack that aligns with ETSI NFV models. The latest code release from the group, Release FIVE, extends its capabilities to help operators toward 5G deployments.

    OSM released its first code in 2016 and now has around 110 organizations, namely vendors and operators, participating in the project. This includes Accedian, Aricent, Oracle, Saudi Telecom, University College London — which are just a handful of the 18 that have joined in the last six months.

    The group is developing a technology-agnostic stack that is enabled by a plugin framework. The newest code release furthers this framework toward transport technologies and maintains the project’s consistent modeling of NFV.

  • Why should CSPs embrace open source and OpenStack?

    What are the main motivators for CSPs to embrace open source, and how does OpenStack fit into a multi-cloud and increasingly cloud native architecture? A recent survey from TelecomTV of CSPs found that avoidance of vendor lock-in and decreasing time to market were amongst the main reasons for embracing open source. A comprehensive 91 per cent of CSPs said they are either already using OpenStack or plan to deploy it in the near future. However, a majority felt that working with the open source community is easier for the Tier One operators than it is for the smaller tier two and threes, and almost three-quarters felt there were simply too many open source projects. Given these findings, how should CSPs work with open source and OpenStack in particular? Two of the leading CSPs in North America join the panel to discuss their experiences and give advice to others.

  • Why you should be using open-source crypto wallets

    The last couple of years have been unexpectedly great in terms of popularizing cryptocurrencies as either means of payment or speculative investments. By now, it’s pretty common to find people who store their coins in software wallets. They are quick, easy to use, and very convenient for commerce. However, the issue at stake is that a very small amount of these wallets actually benefit from the security advantages of open source software. Therefore, this article aims to point out these bad choices and highlight the better alternatives.

    The faux-open source choices.

    If you randomly ask casual crypto enthusiasts about the software wallets they’re using, the most common responses you get include Jaxx, Exodus, and Coinomi. Though some of these do include parts that are open-sourced or borrow industry-standard elements, the final versions contain multiple additions to the code that cannot be reviewed by everybody in a GitHub repository.

    There are several reasons why people use an application like Jaxx: the mobility factor (you can have your wallet on your phone as well as on your home computer), the intuitive interface, the advanced functions (such as instant Shapeshift or Changelly conversions), and the effective marketing behind the efforts. Just the idea of managing your entire crypto portfolio within the UI of a single application is appealing to lots of enthusiasts.

  • Create your own free Adobe Creative Cloud with free and open source software

    Earlier this week, I talked about the muscle memory monopoly Adobe and other vendors have on users. As we become more and more experienced with these commercial products, we also become more tied to them.

    But they are expensive. Individual, non-student licenses for Adobe Creative Cloud can be upwards of $600 per year. While there are lower cost alternatives to many of the individual applications included in Creative Cloud, buying them can add up as well.

    A number of you reached out to me asking what you could do if you wanted the capabilities of Creative Cloud, but didn't want to spend the money. In this gallery, we'll look at the 11 main Creative Cloud products and find (mostly) workable substitutes.

  • Docker commits to open source, promises to put users into a ‘state of flow’

    Docker’s CTO said he wants the company’s customers to lose all track of time in a keynote that outlined how the firm plans to reach developers that are nowhere near being cloud native.

  • Docker Inc. Open Sources Kubernetes Configuration Tool

    At the DockerCon Europe 2018 conference, Docker Inc. today announced it will make Docker Compose for Kubernetes available as an open source project. Docker Compose for Kubernetes was developed by Docker Inc. to make it easier to configure Kubernetes clusters running on top of the Docker Enterprise platform; now it is available to the broader Kubernetes community.

    Company CTO Kal De told conference attendees that Docker Inc. would remain committed to leading the development of open source projects even as the company seeks to drive revenue via commercial software and services engagements with enterprise IT organizations. Today, Docker claims it has more than 650 commercial customers and is adding new customers at a rate of over 100 per quarter.

  • Preserving software’s legacy

    All throughout our lives we are reminded of events from the past. History teaches us about what happened before us to help us understand how society came to be as it is today. But today we live in a digital age, and while leaders, laws, wars and other parts of our history will always be important to know; what about software? Technology is everywhere and it is rapidly changing every day. Should we care about where it all started?

    The Software Heritage was launched with a mission to collect, preserve and share all software source code that is publicly available. It is currently working towards building the largest global source code archive ever. The Software Heritage was founded by the French Institute for Research in Computer Science and Automation Inria, and it is backed by partners and supporters such as Crossminer, Qwant, Microsoft, Intel, Google and GitHub.

  • Living Open Source in Zambia

    In a previous article I've announced my sponsorship project, where I offered to help a motivated young Linux Professional getting certified. I found an ideal candidate, and he has taken the RHCSA exam, and now we're ready to take the next step.

    Santos Chibenga from Zambia is so engaged in the local Linux community in Zambia that we decided to host an event together: https://www.vieo.tv/event/linux-event-lusaka-zambia. In this event we will have local speakers, and I will educate nearly 200 participants to become LFCS certified. As we realised that this event was growing bigger than expected, we have opened the event for sponsors as well.

  • Toyota Builds Open-Source Car-Hacking Tool

    A Toyota security researcher on his flight from Japan here to London carried on-board a portable steel attaché case that houses the carmaker's new vehicle cybersecurity testing tool.

    Takuya Yoshida, a member of Toyota's InfoTechnology Center, along with his Toyota colleague Tsuyoshi Toyama, are part of the team that developed the new tool, called PASTA (Portable Automotive Security Testbed), an open-source testing platform for researchers and budding car hacking experts. The researchers here today demonstrated the tool, and said Toyota plans to share the specifications on Github, as well as sell the fully built system in Japan initially.

  • AWS is fashionably (or frustratingly) late to open source, but ready to party

    To the scowling, sleep-deprived developers sniping at Amazon Web Services Inc. for slacking on open source: AWS is fed up. It’s put together a team devoted to upping open-source activity and is steadily contributing new software.

    “We’re getting criticized for not making enough contributions,” said Adrian Cockcroft ‏(pictured), vice president of cloud architecture strategy at AWS. “But we’ve been making more, and we’re making more, and we’ll just keep making more contributions until people give credit for it.”

  • "Joinup, the ideal dissemination platform for our open source solutions." A testimonial from Francesca Bria from the Barcelona City Council

     

    The Barcelona City Council is actively promoting the use and reuse of free software, open source solutions and open standards beyond their City Hall. This is outlined in the Barcelona Digital City strategy set by the Commissioner for Technology and Digital Innovation. To support this strategy, Barcelona has created an open source team to help internal departments that need to migrate to open source, providing them with digitally clear ethical standards, guidelines and best practices, as well as, supporting them throughout the whole process, including licencing and publishing the solutions on the municipal’s GitHub space. The Barcelona City Council Open Source Team also started to actively promote a citywide FLOSS community and the dissemination of their solutions on platforms such as Joinup, to ensure they reach the maximum number of people and public sector organisations.

  • Highlights from the 2018 NYC DISC Sprint

    DISC Committee members went all out to spread the word for this Sprint and the effort really paid off!

    We reached out to folks across a number of different channels including dev/color, Techqueria, Taiwanese Data Professionals, and PyLadies. Even managed to include a blurb at PyData NYC during the Panel Discussion: My First Open Source Contribution.

  • How to reverse a list in Python
  • Sending Emails With Python

    You probably found this tutorial because you want to send emails using Python. Perhaps you want to receive email reminders from your code, send a confirmation email to users when they create an account, or send emails to members of your organization to remind them to pay their dues. Sending emails manually is a time-consuming and error-prone task, but it’s easy to automate with Python.

More in Tux Machines

Android Leftovers

Snake your way across your Linux terminal

Welcome back to the Linux command-line toys advent calendar. If this is your first visit to the series, you might be asking yourself what a command-line toy even is. It's hard to say exactly, but my definition is anything that helps you have fun at the terminal. We've been on a roll with games over the weekend, and it was fun, so let's look at one more game today, Snake! Snake is an oldie but goodie; versions of it have been around seemingly forever. The first version I remember playing was one called Nibbles that came packaged with QBasic in the 1990s, and was probably pretty important to my understanding of what a programming language even was. Here I had the source code to a game that I could modify and just see what happens, and maybe learn something about what all of those funny little words that made up a programming language were all about. Read more

Growing Your Small Business With An Affordable OS

Your small business needs to grow, there's no doubt about that. Expansion is the name of the game when you have a one or two man company, and you're going to want to bring on at least 20 or more people to really get the cogs grinding. And if you're working on a digital interface, slowly phasing pen and paper out of the office you operate in, you're going to need plenty of people around to oil the engine and keep the tech in a usable state. Because of this, technology helps your small business grow, and can do quite a few wonders for the time and effort you invested into it. Even if you're working on a minimal budget, there's quite a few option to look into to make sure you've got just as much of a chance as the shop next door to you that seems to have a never ending stream of customers. After all, you've got to get your internal processes working perfectly first, and with a bit of technological aid, you might manage that faster than you first thought. Read more

Security: Polkit, CSP, Ansible and Router Hardening Checklist

  • Polkit CVE-2018-19788 vs. SELinux
  • Why is your site not using Content Security Policy / CSP?
    Yesterday, I had the pleasure of watching on Frikanalen the OWASP talk by Scott Helme titled "What We’ve Learned From Billions of Security Reports". I had not heard of the Content Security Policy standard nor its ability to "call home" when a browser detect a policy breach (I do not follow web page design development much these days), and found the talk very illuminating. The mechanism allow a web site owner to use HTTP headers to tell visitors web browser which sources (internal and external) are allowed to be used on the web site. Thus it become possible to enforce a "only local content" policy despite web designers urge to fetch programs from random sites on the Internet, like the one enabling the attack reported by Scott Helme earlier this year.
  • Red Hat Ansible Playbooks Password Exposure Vulnerability [CVE-2018-16859]
    CVE-2018-16859. A vulnerability in Red Hat Ansible could allow a local attacker to discover plaintext passwords on a targeted system.
  • Router Hardening Checklist