New submitter ShawnX writes: If David Graham sounds familiar, you might know him better as cdlu (short for "confused debian linux user"). For years, cdlu was my colleague at Linux.com and Newsforge and well-known in Debian circles as well. Since then, he has been a presence in the back rooms of the Liberal Party until, in the federal election in October 2015, he was elected for the first time. He now describes himself (no doubt correctly) as "the only Member of Parliament to be in the Debian key ring." (And here's video of Graham discussing greater use of Open Source in government, from the perspective of someone with a foot in each of those worlds.)

An anonymous reader writes: For the last 17 years, the American not-for-profit MITRE Corporation has been editing and maintaining the list of Common Vulnerabilities and Exposures (CVEs). According to a number of researchers, MITRE has lately been doing a lousy job when it comes to assigning these numbers, forcing researchers to do without them or to delay public disclosure of vulnerabilities indefinitely. The problem is getting worse by the day, and the situation has spurred Kurt Seifried, a "Red Hat Product Security Cloud guy" and a CVE Editorial Board member, to create a complementary system for numbering vulnerabilities.

An anonymous reader writes: The way you move your mouse is unique, like fingerprints, and can be used by dark forces to track you on supposedly anonymous and secure networks like Tor, according to a Barcelona researcher. Because the Tor Project has failed to address a ten-month-old issue regarding "time measurement via JavaScript," there are a series of user fingerprinting techniques that are quite accurate at identifying users based on their mouse movements, scrolling speed, and how their browser and hardware reacts to certain JavaScript code. If a user visits a "fingerprinting" website via Tor and then via a normal browser, an attacker can have a general idea about their identity and can even pinpoint them to real IPs. The data that is usually logged in fingerprinting schemes is not 100% reliable or accurate for that matter, but it provides a starting point for future investigations.

An anonymous reader writes: After over a decade of ownership of the product, Google announced just a few weeks ago that it will be closing the shutters for good on Picasa, a cross-platform photo viewer and organizer with basic editing capabilities. In the official announcement, Google has set March 15 as the end of support for the desktop client, with changes to the accompanying web-album hosting service set to roll out later in the spring. On Opensource.com, Jason Baker rounded up 9 open source and Linux-compatible alternatives to the popular photo sharing service.

An anonymous reader writes: Ubuntu 16.04 LTS and newer will no longer be supporting AMD's widely-used Catalyst Linux (fglrx) driver. AMD has dropped support for this proprietary AMD driver in favor of encouraging users to use the open-source AMDGPU/Radeon drivers. While the fglrx/Catalyst driver is notorious among Linux gamers, this will represent a regression for many AMD Linux users due to the open-source driver only having OpenGL 4.1 support compared to OpenGL 4.5 in Catalyst, lower performance in common gaming workloads, incomplete OpenCL compute support, no CrossFire multi-GPU support, and other missing features. Much of the missing functionality will end up being implemented by AMD's new AMDGPU driver stack but that is still months away from being truly ready and will only benefit the very latest Radeon GPUs while the fglrx-free Ubuntu 16.04 is set to ship in April.

shutdown -p now writes: Microsoft has released the first public preview of RTVS (R Tools for Visual Studio), an extension for Visual Studio that adds support for the R (GNU S) programming language. The product is open source, and while most of the code is under the MIT license, some components are GPLv2, in accordance with the R license. That's not the first time this week (or this year) that Microsoft's open source efforts have been front-page news; with its new role in the Eclipse Foundation, too, the company's angling toward being one of the largest open source companies around, even if that's a small part of its business model. Update: 03/09 19:03 GMT by T : Speaking of which: reader Salgak1 writes with his first submission, linking the Register's report that Microsoft has released a Debian-based Linux distro, called SONIC. "It is optimized for network switching, and apparently is a localized version of the "Azure Cloud Switch" released into the Azure cloud hosting system. Question is, is it just another Microsoft "Embrace, Extend. Extinguish" strategy in action?"

An anonymous reader writes: It appears that the KeRanger ransomware that's been tormenting Mac users for the past days is actually based on a ransomware variant that targets Linux servers, and not on a ransomware family coming from Windows. That particular Linux ransomware is also based on an open-source ransomware called Hidden Tear that was uploaded to GitHub by a Turkish security researcher. So obviously, the conclusion is that GitHub is to blame for the KeRanger Mac ransomware. (Note to readers: That last bit is tongue in anonymous cheek.)

prisoninmate writes: OwnCloud Server 9.0 is without any doubt the biggest release of the world's leading file sharing and sync solution, which is used by over 8 million users around the globe. It promises to bring the collaboration and federation features to new levels thanks to the addition of new, innovative tools, as well as to improve the software's scalability. One of ownCloud 9.0's new features is code signing, which promises to offer users with a safer home for all their data by verifying the integrity of their ownCloud installations during upgrades or when installing apps, which also need to follow the new code signing specifications. The community edition of ownCloud Server 9.0 is available for download right now via Softpedia as a source package that you can deploy on your Linux kernal-based server, or straight from the project's website as binary packages for various GNU/Linux operating systems. OwnCloud Server 9.0 Enterprise Edition will be released in April 2016.

jones_supa writes: Team fail0verflow, the hacker group who made Sony PlayStation 4, has introduced another method to start Linux in the game console. Instead of the previous exploit which was based on a security hole in an old PS4 firmware version, the new trick allows a kexec call to start Linux through Orbis OS (the FreeBSD-based system software of PS4). The code can be found in GitHub. Maybe this will lead to more and better PlayStation clusters.

Mark Wilson writes: The new Microsoft has place an increased importance on the cloud, and with other companies following suit, reliance on server solutions has increased. Today the company announces that it is bringing SQL Server to Linux. Both cloud and on-premises versions will be available, and the news has been welcomed by the likes of Red Hat and Canonical. Although the Linux port of SQL Server is not due to make an appearance until the middle of next year, a private preview version is being available to testers starting today. While the full launch of SQL Server for Linux is not due until the middle of 2017, SQL Server 2016 is expected to launch later this year.

An anonymous reader writes: After almost a year of development, bug fixing and cleanup, BorgBackup 1.0.0 has been released. BorgBackup is a fork of the Attic-Backup project — a deduplicating, compressing, encrypting and authenticating backup program for Linux, FreeBSD, Mac OS X and other unixoid operating systems (Windows may also work using CygWin, but that is rather experimental/unsupported). It works on 32bit as well as on 64bit platforms, x86/x64 and ARM CPUs (maybe as well on others, but these are the tested ones). For Linux, FreeBSD and Mac OS X, there are single-file binaries which can be just copied onto a system and contain everything needed (Python, libraries, BorgBackup itself). Of course, it can be also installed from source. BorgBackup is FOSS (BSD License) and implemented in Python 3 (91%), speed critical parts are in C or Cython (9%).

An anonymous reader writes: There was much hope that Fedora 24 would be the first major Linux distribution using Wayland by default in place of an X.Org Server, that didn't pan out with Fedora 24 Workstation developers deciding not to use Wayland by default but it will remain a log-in time option. Fedora Wayland has made a lot of progress but functionality like on-screen keyboard, accessibility, remote displays, USB display hot-plugging, and other functionality is incomplete for the Fedora 24 timeline. At least there are many other Fedora 24 features that made it for this next release due out in June. Wayland will turn eight years old this year.

Freshly Exhumed writes: A series of posts on the Project Sputnik developers' forum at Dell indicate that hardware on a soon to be released XPS 13 Developer Edition laptop will support Thunderbolt 3 USB Type C, which has been tested on the device with video and USB 3.1 on non-dock devices, although Dell's Type C docks are not yet supported. Intel has already implemented Thunderbolt 3 drivers in the Linux kernel, so this Dell initiative represents a first for a physical implementation on a consumer platform.

paroneayea writes: GNU Guix, the functional package manager (and with GuixSD, distribution) got a nice feature yesterday: timely delivery of security updates with grafts. Guix's new grafts feature recursively produces re-linked packages as dependencies without waiting for all to compile when a time-sensitive security upgrade is an issue. This came just in time for this week's OpenSSL security issues, and has been successfully tested by the community. It worked so well that it was able to reproduce the ABI break issue that other traditional distributions experienced also!

Community manager Rikki Endsley writes: The open source label was created back in 1998, not long after I got my start in tech publishing. Fast forward to late 2014, when I was thinking about how much open source technologies, communities, and business models have changed since 1998. I realized that there was no easy way (like a yearbook) to thumb through tech history to get a feel for open source. Sure, you can flip through the virtual pages of a Google search and read the "Best of" lists collected by a variety of technical publications and writers, much like you can thumb through newspapers from the 1980s to see how big we wore our shoulder pads, neon clothing, and hair back then. But neither research method is particularly efficient, nor do they provide snapshots that show diversity within communities and moments of time. The idea behind the Open Source Yearbook is to collaborate with open source communities to collect a diverse range of stories from the year. We let the writers pick the criteria, which means the yearbook isn't just full of the fastest, most popular, smartest, or best looking open source solutions. Instead, the yearbook offers a mix of open source solutions and projects, from a range of writers and communities, to offer a well-rounded (albeit incomplete) glimpse at what open source communities and projects looked like in 2015. The yearbook is now available for a free download.

New submitter KGIII writes: "After a recent Steam change, there were more than 1,900 Steam Linux games listed as Valve ended up including yet-to-be-released Linux game ports. That total including unreleased Linux games is now up to 2,009! But in terms of released Linux game titles available for download right now, the 1,900 threshold was crossed tonight to end out February." It's getting there. All of you gamers might just be able to make the choice to move to Linux soon. It looks like there are quite a few more games coming down the pipe. This is a good thing as it gives gamers more options for their operating system. I imagine this bodes well for the SteamOS project and for the dedicated SteamOS devices.

StewBeans writes: At Evanta's recent CIO Executive Summit in Washington, D.C., two Enterprisers took the stage to discuss how CIOs can influence the future of business at the "tipping point" of technology and innovation today. David Bray, CIO of the U.S. Federal Communications Commission, began the talk: "2013 was the year there was the same number of network devices on the face of the planet as there were humans -- seven billion network devices on the face of the planet, seven billion humans. Now 2015, just two years later, we're at 14 billion network devices on the face of the planet." This set the stage for a conversation on the future of technology that touched on everything from Moore's Law to the consumerization of technology, global connectivity, and mass personalization. Bray and co-presenter Lee Congdon, CIO of Red Hat, shared their predictions and insights into how all businesses will need to evolve and adapt to a future in which they have less control.

SteamOS just gained support for Vulkan, the cross-platform alternative to Microsoft's DirectX 12 and Apple's Metal. This should make it easier for developers to write and optimize games for SteamOS, closing the performance gap with Windows and encouraging more developers to support Linux. This feature arrived in SteamOS Brewmaster version 2.63. Valve added version 355 of the Linux Nvidia driver, which means SteamOS offers Vulkan support when used alongside Nvidia hardware. Intel's graphics hardware should also support Vulkan on SteamOS in the near future. AMD is still working on its new driver, known as AMDGPU, that will replace the current fglrx driver for SteamOS and other Linux-based platforms. If you use Linux distribution besides SteamOS, you can download Nvidia's Vulkan-ready Linux driver or an experimental version of Intel's Vulkan-enabled graphics driver.

mikejuk writes: Details of the next in the family of the successful Raspberry Pi family have become available as part of FCC testing documents. The Pi 3 finally includes WiFi and Bluetooth/LE. Comparing the board with the Pi 2 it is clear that most of the electronics has stayed the same. A Raspberry Pi with built in WiFi and Bluetooth puts it directly in competition with the new Linux based Arduinos, Intel's Edison and its derivatives, and with the ESP8266 — a very low cost (about $2) but not well known WiFi board. And of course, it will be in competition with its own stablemates. If the Pi 3 is only a few dollars more than the Pi 2 then it will be the obvious first choice. This would effectively make the Pi Zero, at $5 with no networking, king of the low end and the Pi 3 the choice at the other end of the spectrum. Let's hope they make more than one or two before the launch because the $5 Pi Zero is still out of stock most places three months after being announced and it is annoying a lot of potential users.

prisoninmate writes: On Monday, February 22, 2016, Softpedia reported on the availability of new kernel updates for several of Canonical's supported Ubuntu Linux operating systems, including Ubuntu 15.10, for which five kernel vulnerabilities have been patched at that point in time. And from the looks of it, the respective kernel updates introduced a regression, which Canonical patched four days later, on February 26, 2016, saying that the issue was introduced along with the fixed vulnerabilities for Ubuntu 15.10 (Wily Werewolf) and it broke graphics displays for those running the OS in VMWare VMs.