heise online news 10/12/2008

heise online news 10/12/2008 www.heise-online.co.uk Overview of the news from the past 24 hours heise online news More Microsoft open source: Oxite, a CMS and blogging system What started out as a demonstration app for the ASP.NET MVC framework has grown into a complete personal blogging program and basic CMS - and it's all being published as open source › Read article     Dojo Toolkit gets a bug fix release to 1.2.3 The Dojo JavaScript toolkit gets a bug fix release in what will be the last of the 1.2 releases › Read article     Linux Defender - A new free initiative to protect open source software A consortium of technology companies, including IBM, has launched a new initiative designed to protect open source software against aggressive patents › Read article     Security vulnerability found in MS SQL Server 2000 An attacker could exploit a memory leak to remotely execute code in the server and no update is available. The security consultant who discovered the vulnerability recommends removing the stored procedure from SQL Server › Read article     Second beta of Firefox 3.1 available The second beta of the forthcoming version of Firefox contains several new features - notably, a "private browsing" function and the TraceMonkey JavaScript accelerator › Read article     Appcelerator Titanium; open source competitor to AIR? An open source competitor to AIR emerges in the form of Appcelerator Titanium, a Webkit based RIA platform › Read article     OpenCL programming language adopted The Khronos Group has issued specification 1.0 for the Open Computing Language, which is intended to ease the programming of heterogeneous parallel computers › Read article     Google goes Native Client A research project at Google aims to let downloaded native x86 code run in any web browser, safely › Read article     New guide to finding and fixing the misuse of free software The FSF Europe has co-published a guide for users and developers. It offers help on how to identify license violations and advice what to do about them › Read article     Unofficial Port of Android Comes to Nokia's N810 Nth Code write an unofficial port of Android for the Nokia N810 and document the process in a white paper › Read article     Vulnerabilities in Linksys WVC54GC wireless network camera By delivering a specially crafted packet to the camera, an attacker can obtain the majority of its system configuration. The camera also provides an insecure ActiveX control › Read article     Cooperation between Adobe and SpringSource Adobe and SpringSource are cooperating to combine Rich Internet Application techniques with the Spring framework › Read article     Windows worm builds a large Botnet A recent Windows worm continues to spread rapidly due to users not applying MS updates. Reports say the worm has built a large botnet › Read article     Apache Jackrabbit jumps to 1.5.0 Apache Jackrabbit 1.5.0 is now available to download; the incremental feature release is backwards compatible and includes a development preview of JSR 283 › Read article     PHP 5.2.8 fixes withdrawn PHP 5.2.7 PHP 5.2.8 is released, to fix PHP 5.2.7's magic quotes problem. The PHP developers also give a workaround for 5.2.7 users › Read article     This newsletter is sent to in a multipart format. If you want to read it as plain text, you will have to change the display mode of your e-mail program. You are receiving heise online news because you subscribed at our website. If you no longer wish to receive the newsletter, you can cancel your subscription at http://www.heise-online.co.uk/newsletter/manage/news. For more news from the world of technology, subscribe to our other newsletters: Newsletter heise open source: All the latest about Free and Open Source software from heise online, including news, features, analysis and case studies. www.heise-online.co.uk/newsletter/manage/open Newsletter heise Security: IT security news and alerts to keep your systems secure, with features giving an in-depth look at the world of IT security. www.heise-online.co.uk/newsletter/manage/security Newsletter heise networks features: In-depth articles, tools and techniques for networking and communications. www.heise-online.co.uk/newsletter/manage/networks Legal notice Publishers: Christian Heise, Ansgar Heise, Christian Persson Editor-in-chief: Jonathan Bennett All rights reserved. Any copies or dissemination on any medium, either in part of whole, requires the written consent of the publisher. Copyright (c) 2008 Heise Media UK Ltd.

Re: Fedora Weekly News #155

On Tue, 09 Dec 2008 07:55:01 +0100, "Thorsten Leemhuis"

> I wanted to put it in proper words, but I didn't get around to it, so
> maybe I'll do it just quickly here:

It's really appreciated that you took the time to give some feedback
Thorsten.

> I like the FWN in general. But I noticed I often do not read them. They
> for me are to long and contain way to many details -- the section "The
> PATH to CAPP Audits" and "The Looming Py3K Monster" for example contain
> a lot of information (which were hard work to collect),

I've frequently wondered about that. Does anyone else agree that it's
too long? One problem with making things much shorter is that we can
either produce what is essentially a simple list of topics, i.e.

=== CAPP Certification Requirements Cause Unease ===

Changes made in 2005 to the permissions of shadow-utils tools in order
to achieve CAPP certification were called[1] into question. It seems
that they may complicate many of what are claimed to be the common use
cases of Fedora. Steve Grubb, the shadow-utils maintainer, defended the
permissions and explained CAPP certification.

[1] Link to start of thread.

> but if I want
> that in-depth details I'll go and read the thread on the list directly.

Why wouldn't you just go and skim the archives directly then? It's easy
enough to see what might be the interesting threads.

> I think a little bit less (1/3 or 1/4 the length of what it is now)
> could me more/better here.

1/3 or 1/4 would actually be a hell of a lot more work. The choices are
either: 1) short, nearly content-free summaries which essentially
mention the thread and nothing else, or 2)an attempt to provide an
unpredjudiced digest.

Writing something in between would take a much greater amount of time
and probably give rise to a lot more complaints about bias.

>
> And all those links in the text with sections like
> ----
> > [1] http://www.redhat.com/archives/libvir-list/2008-November/msg00420.html
> >
> > [2] http://libvirt.org/remote.html
> >
> > [3] http://www.avahi.org
> ----
> IMHO make it really hard to read.

I would prefer all the links at the bottom of each item. Would that be
better or do you just not want to see links except at the end like an
attached bibliography?

>
> The OpenSUSE weekly news
> http://en.opensuse.org/OpenSUSE_Weekly_News/49
> look much more professional,

For what value of "professional"? To me, like the Ubuntu Weekly News and
other distro news I'm not bothered to read them because they're just a
collection of links to blog posts.

> are likely a whole less work and they even
> get them translated because they are shorter/focus on the more important
> things.

"More important" than what? My impression is that you'd prefer it if
there were no "Developments" or "Virtualization" sections and simply a
list of what gets posted to @fedora-announce and some entries from
Planet.

> Just my 2 cent as seldom reader. I thought you guys maybe wanted to
> know. And don't let my option confuse you to much. Maybe it's just me.

Specifics would be useful (like the comment about the links), otherwise
I'm just left with the disappointed feeling that you don't like FWN.

Thanks again for the feedback though and it would be nice if you could
spare more time to deepen the critique.
--
Oisin Feeley
http://fedoraproject.org/wiki/OisinFeeley

_______________________________________________
Fedora-news-list mailing list
Fedora-news-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-news-list