Peter Avalos committed two OpenSSH fixes (CVE-2008-1483 and CVE-2008-1657); there’s enough of these little changes that 1.12.2 is going to be released tomorrow.
Apparently, with a simple plugin, it’s possible to telnet to your FireFox browser and issue Javascript commands. (Via) Is FireFox becoming the Emacs Operating System of this century?
Peter Avalos has updated bzip2 to version 1.0.5, which fixes the Denial of Service issue described in CVE-2008-1372.
BSDTalk 147 is out, with an 16-minute interview of Alexander Motin.
I’ve put a page on the DragonFly wiki describing my procedure for building all the packages in pkgsrc using Joerg Sonnenberger’s tool ‘pbulk‘. Suggestions are welcome.
Matthew Dillon posted a HEADS UP: that the vm_page structure has changed. This will probably not affect you unless you are working in the kernel. He didn’t specify in the message, but it’s probably a good idea to do a full buildworld/buildkernel if you’re running bleeding edge code.
Matthew Dillon commited significant changes to pf in DragonFly; his commit message describes the differences and advantages.
(Yes, I’m running behind on news. Yes, there’s a lot. We’re drinking from the firehose these days.)
BSDTalk 146 had Will Backman asking for links to other BSD-oriented sites. I linked to the interview before, but the comments now have a nice list of BSD sites. I list them all after the jump:
Continue reading “More BSD places to visit”
Matthias Schmidt has set up (in CVS) a page for new items for the 2.0 release of DragonFly. If you’re committing something big to DragonFly, write it down there. Consistent use will give us a pre-prepared list for the actual release, which will probably be late summer.
Matthew Dillon’s recent parallelization of cpdup brought up some interesting features: it can do third-party transfers, copying data from one remote machine to another, and while not faster than rsync, it’s relatively easy to use. Vincent Stemen followed up with a mention of his ‘rbu’ (Remote Back Up) product, that serves as a wrapper around rsync and simplifies the backup process.
Sepherosa Ziehau has posted some work he’s done to reduce serializer contention in an effort to improve network forwarding throughput. His detailed technical explanation also includes some benchmarks; he found a way to improve speeds but finds that there’s still a penalty from multiprocessing support.
The USENIX Annual technical Conference is happening June 22-27 in Boston, Massachusetts, and registration for it has opened. Theres a whole lot of events happening, including a separate poster session, so read the link for details. (via)
The most recent quarterly release of pkgsrc, 2008Q1, is out. I’m working on building it on pkgbox.dragonflybsd.org right now. I’ve been running into a wierd problem with lang/python21, though.
I’m not technically qualified to answer the question Josh Triplett asked in comments on my ‘dolt’ article:
If you want to fix that, feel free to send me a patch, or just tell me that DragonFly uses the same -fPIC -DPIC that Linux and FreeBSD use.
Tell him at/send patch to josh@freedesktop.org, and if you do, thank you for helping.
The recent release of the RadeonHD 1.2 driver lists DragonFly support as a new feature, among other changes. Can someone test and confirm? (found via Google Alerts)
cpdup will now perform multiple copies at a time over a network link, from changes by Matthew Dillon. How much more efficient is cpdup with these changes? If someone wants a project, a cpdup benchmark wouldn’t be a bad thing…
Hasso Tepper has made a ginormous update to Citrus, an API for character conversion, syncing it with NetBSD.
BSDCan 2008 is in mid-May, and the schedule is posted. Make your travel plans soon if you plan to go!
This article, titled “Myths Open Source Developers Tell Ourselves“, dates back to 2003, but is surprisingly accurate. I suspect these myths will become even more prevalent; the number of open source projects out there has been increasing year after year, or at least that’s my impression. (Is there any person or organization that’s trying to track the number?) My favorite myth in the article: “End Users Love Tracking CVS”.
Not necessarily about me, but I read an article about the continuous stress of blogging, in the New York Times. Entertainingly, the article says:
Blogging has been lucrative for some, but those on the lower rungs of the business can earn as little as $10 a post, and in some cases are paid on a sliding bonus scale that rewards success with a demand for even more work.
$10 a post? Given that I’ve been doing this for near-free (the Google Ads buy me a sandwich every now and then) for years, that seems like a lot. Not much to live on, though.