Automatix 'Actively Dangerous' to Ubuntu 284
exeme writes "Ubuntu developer Matthew Garrett has recently analyzed famed Ubuntu illegal software installer Automatix, and found it to be actively dangerous to Ubuntu desktop systems. In a detailed report which only took Garrett a couple of hours he found many serious, show-stopper bugs and concluded that Ubuntu could not officially support Automatix in its current state. Garrett also goes on to say that simple Debian packages could provide all of the functionality of Automatix without any of the problems it exhibits."
Why? (Score:4, Insightful)
I read this while it was in the Firehose, and came up with one question: Why?
What would this tool provide above apt and dpkg? A graphical way of installing programs? There are front ends for dpkg and apt like Synaptic that don't have any of these downsides. Is this just to get things like some of these codecs? That has always been available through other package repositories. You just add a line to the config file (or use a program like Synaptic which lets you do the same thing) and all those packages just show up and work great.
I could see it a bit if it helped with commercial applications (like Click-N-Run does). But reading this stuff I just wonder... what was the point of using a program like this on a Debian based distro? Even with it's faults, even Yum makes these seem quite unnecessary.
So I ask: has anyone used this? Why?
"...could provide..." (Score:4, Insightful)
Automatix only exists because there is a need for it. If it's so simple to make the package provide the functionality, why hasn't anyone done it? Automatix seems to be the (only?) ones who have tried to do something that many people need.
I never understood (Score:2, Insightful)
Re:I think it screws up when upgrading. (Score:1, Insightful)
Money quote (Score:3, Insightful)
Duh
Re:Illegal? (Score:3, Insightful)
The summary said "illegal software installer", which could be read as not implying that the "software installer" is illegal, but that it installs illegal software.
Now the "illegality" depends on which software you install and your local laws. I think that the DVD decoder violates the DMCA (is that right?), and MP3 encoders/decoders is a dicier issue. IANAL, but AFAIK you are not required to pay for an MP3 patent license for using an MP3 encoder or decoder, but only if you're distributing MP3 encoders, decoders, or MP3s. So there it's probably legal for users to have and use, but possibly illegal for distros to include.
However, I think sometimes distros steer clear in just to be on the safe side. I don't know-- like I don't really understand whether LAME is legal or not. They used to distribute it uncompiled and say it was for educational purposes, because otherwise they would have to pay a license fee for distributing (hence the name Lame Ain't an Mp3 Encoder, right?) But then they said they engineered their way around the patent issues and they have been distributing it for a while now. Still, some distros seem hesitant to include it.
So yeah, I don't get what the deal is with all of this stuff, legally.
Re:I think it screws up when upgrading. (Score:3, Insightful)
Why'd you give her 64 bit Linux? Does her computer have more than 3 gigs of RAM?
In a year or two we may be to the point where a 64 bit OS is essential, but we're not there yet. Give your non-technical friends the 32 bit version.
Re:Why? (Score:1, Insightful)
Personally I'm happy that these people are trying out Linux, and if they find it suits them, than great. Sure, they're using stuff that might infringe, just like they would be on Windows. There are even "illegal codec packs" for Windows as well, it's impossible to properly license every codec to play every file released, but Windows users are used to having everything bundled so they don't have to worry about dependancies. Programs in Windows are not normally so modular so users expect all claimed supported functionality to be implemented and present in every application.
However, they may eventually get used to different Linux applications and doing things the OSS way and like that experience, so why prevent them from getting settled and discovering these other elements as they slowly ween themselves from the Windows world? They may just eventually change their ways. If we make them comfortable, they'll be more likely to do so. If we just yell "no!" and put a gun to their head, they might just act resentful and not open their minds. WE don't have to use the software, just don't download it, it's a choice. I'm not even developing that software, I wouldn't use it, and I don't PREFER the idea that others are, but it's leading them to Linux in ways that they wouldn't have experienced had people just said "no", and the more ways to experience Linux, the better.
Re:Old News (Score:2, Insightful)
When Linux distros finally sort out the farce that is installing vendor provided graphics card drivers, software and codecs etc, then tools like Automatix won't be needed.
Re:I think it screws up when upgrading. (Score:4, Insightful)
Re:And the reason Automatix exists? (Score:5, Insightful)
Re:Old News (Score:5, Insightful)
Re:Illegal? (Score:5, Insightful)
"illegal software" installer
and not
illegal "software installer"
Re:Illegal? Misleading and Misconstrued FUD (Score:5, Insightful)
If you were to learn Linux you would not need Automatix,
Re:Bigger Question (Score:4, Insightful)
Mr. Stallman and the FSF's approaches, that software patents are a bad and evil thing, and that we need to protect ourselves from licenses that deny us the rights to use or modify our computers to do the things we want, continue to be a source of excellent guidance on these issues. The MP3 patents are a classic example of where software licenses break down: they not only are used to reward the authors, but to actively prevent other competitive use of related or improved products.
Re:I think it screws up when upgrading. (Score:3, Insightful)
This is pure FUD. On Windows, it takes me several hours to install decent image retouching support, a feed reader, a PDF reader, a vector graphics editor, a decent audio player (what WMP is not), a decent browser, a decent Office suite, a decent mail client etc.etc. And still you have to download codecs for a LOT of widespread formats.
On Linux you just have to look a bit for mp3 and dvd codecs, but everything else you need is there. On Windows, yeah, maybe WMP plays mp3s by default, but on a nearly unusable system.
Warning: a little rant about multimedia thingies (Score:4, Insightful)
First I have to admit that it is community's fault, well, at least, part of it. Automatix is kinda one of those hacks for mass installations when you install distro on multiple boxes - no more, no less. It is a "hack" in a sense to provide urgent solution to a problem, but in long term more sane solution are required. I just wonder why those guys didn't submit those packages to universe/multiverse and dealed with it? (Ahhh, problem is w32codecs, but they are *illegal* anyway, in ANY country. Let me explain that later). What about commit yourself as community developer of Ubuntu project? Why working separately, instead of collaboration? Thanks for everything, Automatix finally let's use repository and community start to suggest Ubuntu "standard" way of doing things, via apt-get install gstreamer* or Add/Remove...
Second my ripe is that Automatix popularized solution, which works, but leads nowhere - therefore it is a hack without further direction (although, it is not Automatix devs nor users fault). In result, solutions which *might* be answer to problem, although not immediate, were left out from sight (because everyone uses ffmpeg + mplayer + xine combo, what a fun). We all remember Gstreamer and how it was in "cursed if you do, cursed if you don't" situation due of everyone blasting it and installing everything with Automatix instead. Yeah, it was very buggy, but they have won big fight with quality issues and moving faster now than before. They COULD escape such scenario, if there was enough community support. Instead of that, everyone hyped about Automatix and how it "deal with everything" - so in fact we lost at least several years to get us a proper media framework.
Thanks to Ubuntu devs, situation is much clearer now. You can install almost any set of codecs from Ubuntu repositories (Gstreamer plugins or Xine/ffmpeg combo, Gstreamer can use ffmpeg lib too) and they are working. But still lot of manuals and guides suggest just don't waste time and install Automatix. Strangely, but as a geek, I enjoy clearness of my system and install everything trough apt-get/synaptic, dpkg -i (or GUI eq.) and Add/Remove...
I am happy that more and more people use Ubuntu solutions for installation of multimedia codecs, not Automatix. It is also gives bigger test ground for Gstreamer/Xine/ffmpeg and bugs can be reported and collected to be submitted upstream.
In post scriptum, about w32codecs. I might be wrong, but w32codecs consists of hacked together dlls from various distributions of RealMedia, WMA, etc. etc. Licenses for those programs isn't even close to free distribution and doing that is violation of copyright. So they are not legally distributable in ANY form, period. In any country of the world which supports concept of copyright.