Red Hat: Who Needs Netscape? 405
LazyBoy points to this story on Yahoo which says that Red Hat won't be bundling Netscape with its distribution once Mozilla 1.0 is out. And since the (very nice) .9 is out, with .9.1 on the horizon, that shouldn't be all that long from now. Rather cool that the long-heralded failure of Mozilla is proving to be exaggerated, even with a lot of other good browser projects in the ring.
Death's Road. (Score:2)
Re:JWZ (Score:2)
Entertaining? It still looks pretty relevant. It's nice that Mozilla and NS 6 are mostly working now, but:
still applies. There's hardly anything innovative or to be proud of in Mozilla (or any other recent web browser, even Opera). I can easily see why a hacker, or anyone who likes doing cutting-edge stuff, would be disappointed.His complaint was that it never got to shipping, and now two years later, it's still not at 1.0. He was right.
If Mozilla teaches a lesson about sticking with it, through thick and thin, the lesson is: don't do it! It's an ok browser, but not spectacular, and a single programmer could write (and this has happened several times) a better browser in three years.
JWZ was right.
Not *quite* ready to rpm -e netscape (Score:2)
Take Datek Online for example. While I can access all parts of the site under Linux, sometimes I need to switch browsers, depending on what I want to do with it.
Netscape 4.x can access the whole site, but the Java applets sometimes (usually) hang it. It's also butt-ugly.
Mozilla can get to almost all of it, but the Account Options menu simply doesn't show up if you're screen isn't GREATER than 1024X768. Before 0.9, the PSM also hogged almost all the CPU's power when going to a secure site, and kept doing that until you closed Mozilla. Fortunately 0.9 fixed that.
Opera can get to pretty much everything but Java.
Konqueror can get to the whole site, but the JavaScript chart doesn't show up. I haven't tried Java with it yet.
Also Netscape is a little less quirky than Mozilla for Web developers in some areas still, but Mozilla and Konqueror are definitely just about there.
So...I'm finally able to get along without Netscape 99% of the time, but sometimes something just works better with it.
I understood him.. (Score:2)
You said IE on Windows is the best option.
He said that was good to know, in case he chooses to run Windows under Linux.
What's so weird about that? [vmware.com]
Re:Jamie Zawinski, is -I'm sure- Thrilled about th (Score:3)
I've been running nightlies regularly (Score:5)
I've been following the nightly builds pretty closely, and I would suggest waiting for 0.91 for most browsers. There have been a few bugs that crept in over the last two weeks or so. The most well-understood one is a problem with right-click context menus, at least on Win32. It sounds like they have the problem in hand, but it makes life painful.
I think there are some problems that have been introduced into the rendering engine, because I have gotten a few really unexpected and unusual crashes. In some cases the browser window just completely disappeared without a trace or any error.
And I have had a few *really* annoying crashes while composing messages in textareas. (Like I'm doing now.) That is extra painful because you lose what you were writing!
So your best bet is to wait on this one if you have a stable build that you're running, and pick up a nightly build or 0.91 build in a few weeks.
Other than that, recent changes in how pages are built make everything seem a lot smoother and faster. I forget what they called the one fix... it had a funny description, but the upshot was that you can now click on things on an "outgoing" page if your new page hasn't loaded yet. For us impatient browsers who give up on crappy-loading sites, that one was a real breakthrough!
Who needs it? I do! (Score:2)
Yes, I tried to convince them to use pgp/gpg, but the lack of integration with netscape and other (windows) mail clients made that no happen
There is alread a bug about this [mozilla.org] in the bugzilla database, but it looks like they aren't going to be able to get it in by 1.0
Re:Of course (Score:2)
Yup, I agree
However, there are a few projects out there, the most promising that I've dealt with is Galeon [sourceforge.net], a gnome browser based on the mozilla engine. It still requires mozilla and it's libs, but the browser itself is quite stable, has cool features (tabbed and multi window browsing, https support, cookie support, bookmark import/export... ). Lets just say that I haven't used netscape for a while now (except for flash/rm pages) and galeon is my primary browser.
Not the perfect solution, but I'm glad its around because you are absolutely right, browsers are in a sad state for linux right now. Mozilla rocks, but it's just not there (yet) for daily browsing.
I had to admit it, but IE *is* good. It used to suck, but now netscape is basically dead, it's a decent browser. I'd have liked to have seen what would have happened if NS and IE had continued along their competing paths, and if they would have just drowned in each others added useless features, or would have actually improved each other (what that whole "competition/inovation" thing is all about).
Re:Are you SURE you've tried 0.9? (Score:2)
Re:Are you SURE you've tried 0.9? (Score:2)
A natural progression (Score:2)
Netscape 6 is a miserable attempt at release software. It has completely messed up almost every box I have seen it installed on. Crash prone, bloated, and not giving any of the promised speed increases, it is a failure for a major release of software.
Mozilla, while having some of the same pitfalls as NS6, is better, though not by much.
Konqueror has become my browser of choice lately, and I think that, unless something better shows up to the game, it will be the future of web browsing and Linux.
Re:Is this a big deal? (Score:2)
KDE (and thereby Konqueror) is included with Red Hat. I just installed v. 7.1 and Knoqueror works great.
Mozilla works very well too.
It's great to have a choice isn't it?
Re:We Need Netscape (Score:2)
This isn't a big deal... (Score:2)
The only thing original about this is that Red Hat has announced it first. I'll be very, very surprised if any Linux distro ships Netscape after Mozilla is cooked. It just doesn't make sense.
Re:Mozilla (Score:2)
Re:Who needs Mozilla?!? (Score:2)
The irony.... (Score:2)
We can actually say goodbye to that awful, bloated, buggy Netscape. I never thought I would see the day.
--
"How many six year olds does it take to design software?"
OS/2 programmers (Score:2)
I'll rather ask of you. What do they think of them? Are there many of them?
__
I've tried 0.9: it sucks. (Score:2)
The new image cache, rendering code, whatever they stuck in after 0.8.1 has some serious bugs. Images getting scrambled, flickers of previous images appearing before the correct image gets rendered, images not getting rendered at all until you click on or click/drag over them, one-pixel-off placement errors with adjoining bars of color... Maybe it's faster, but "faster + incorrect" just doesn't cut it.
Maybe this is all just stuff happening on my system, but my system isn't too far off from standard RH7.1, for which I downloaded release RPMs directly from ftp.mozilla.org.
Don't get me wrong; most of the bugs that bothered me were gone by 0.8, and so it's good to see the developers turning their eyes to performance even at the cost of a little backsliding. But if you're new to Mozilla, and want to see how they've progressed, try 0.8.1 first!!
Re:Who needs Mozilla?!? (Score:2)
Even works with my Credit Union's online banking! (Score:2)
Re:If Netscape goes down what happens to Mozilla? (Score:2)
Re:what about java? (Score:2)
Based on the info in Bugzilla and the newsgroup, I made sure that the right symlink was installed, and that the environment variables were set right, and a whole bunch of other magic that was supposed to help. But no matter what I try, Mozilla will not start up and even display a window if I have the java plugin (or a symlink to it) in the plugins directory. It just silently exits. When I remove the plugin, everything is fine.
This is my ONLY major complaint with Mozilla 0.9. It's plenty fast enough on my PII-450, and it doesn't crash as often or leak as much memory as NS 4.7x.
Re:Browser alternatives (Score:2)
Re:Mozilla? (Score:2)
But benchmarks lie (especially my lame ass ones.) Do yourself a favor and test it on your system. Let us know.
Not to mention you are not tied to one platform! ;)
Re:Are you SURE you've tried 0.9? (Score:2)
Re:More frustration == more contributions? (Score:2)
Re:So they wont be hypocrites.. (Score:4)
You're missing the point. RedHat ships binaries to users. They also ship source, but that's not really their focus. They may modify the source and ship modified binaries if they feel it improves their distribution. With Bernstein's license, they can't do this.
In addition, you're quoting the GNU project out of context when you say Bernstein's license matches freedom 2 "The freedom to redistribute copies so you can help your neighbor." the same page that lists the freedoms [gnu.org] also clearly says, "The freedom to redistribute copies must include binary or executable forms of the program, as well as source code." Clearly Bernstein's license doesn't allow binary forms of modified code.
Fortunately, as you point out, Bernstein's code "NEVER" has holes in it, so we don't need to worry about it. Of course, I'm more impressed with your ability to travel into the future and confirm this. Unfortunately Red Hat is not able to visit to future to check this, so errs on the side or caution.
In addition, while Bernstein's software has never had any holes under Bernstein's narrow definition, Linux itself might have problems which require modifying qmail as a workaround. This is quite common, and while Bernstein can complain all he wants that it's the operating system's fault, the rest of us need to deal with the reality of the hole and find a workaround. This has happened before [securityfocus.com], and under Bernstein's license, Red Hat can't ship patched binary to fix it.
Re:This is a good thing??? (Score:2)
So what? We should stick with a 2 year old browser? A browser than doesn't handle Java properly?
A browser than doesn't do HTML 4.0 properly?
A suite of internet apps that doesn't handle multiple e-mail accounts?
A suite of internet apps where we CANNOT fix bugs that come up because:
And the Netscape/Mozilla project is going to lose funding?
BULLDINKY!
As Mozilla matures, Netscape his all it's future browser releases locked in right there. So it's HIGHLY unlikely that funding is just going to "go away".
Chas - The one, the only.
THANK GOD!!!
Re:So they wont be hypocrites.. (Score:2)
For the record, I feel that:
Re:So they wont be hypocrites.. (Score:2)
And, yes, I agree that Dan is free to do as he wishes with his code. The current license, for better or for worse, however, will stop it from being adopted by any of the major distributions.
- Sam (Since Dan ain't gonna change his license, back to coding my alternative [maradns.org] to BIND and DjbDNS)
Re:So they wont be hypocrites.. (Score:2)
-----
May we distribute binaries?
You may distribute a precompiled package if
* installing your package produces exactly the same files, in exactly the same locations, that a user would obtain by installing one of my packages listed above;
* your package behaves correctly, i.e., the same way as normal installations of my package on all other systems; and
* your package's creator warrants that he has made a good-faith attempt to ensure that your package behaves correctly.
All installations must work the same way; any variation is a bug. If there's something about a system (compiler, libraries, kernel, hardware, whatever) that changes the behavior of my package, then that platform is not supported, and you are not permitted to distribute binaries for it.
You may distribute an operating system that includes a precompiled package under the same rules.
-----
E-Smith Does This (Score:3)
It does this by including one RPM that includes the full, working, approved binary, plus another RPM that applies E-Smith's customizations to it.
This BS about the license not ALLOWING RedHat to include it in a distribution is false, and there is working evidence to the contrary.
Re:Rumors of Mozilla's Death Being Exagerrated (Score:2)
Netscape also runs wild on animated GIFs that have 0 pause between frames... It will use as much of the CPU as it can just to animate that stupid little GIF as fast as possible :-P
Re:Timothy said: (Score:2)
Fool that into believing your Konqueror is Netscape or IE, and I'm all ears!
I need Netscape but I wish I didn't (Score:3)
Even though Konqueror would WORK, Wells Fargo
refuses to accept any SSL connections not coming
from Netscape or IE.
Java and Javascript support are pretty good in
Konqueror, but there are still quite a few things that won't work in it that will work in
Netscape. I don't care about those though. If I could do online banking with Wells Fargo without Netscape, I'd probably never use it.
Re:So they wont be hypocrites.. (Score:3)
You realize that good security practice dictates that we can now never accept anything you ever say on the subject of security again, right?
Re:Rumors of Mozilla's Death Being Exagerrated (Score:2)
Netscape has major problems with certain plugin's, Java, and especially forms. If you open up a memory monitoring tool of some kind and use nothing but Netscape you can watch it's memory usage climb endlessly. I think it's network layer also has memory leaks because sometimes when you try to open a page it zooms way off the charts.
Is this a big deal? (Score:2)
Also, Netscape 6 and Mozilla have a virtually identical user interface, so it's not like people who can't tell the difference will, well, be able to ell the difference.
Plus you can always download Netscape anyway. Someone's bound to make RPMs of it for the tarball-challenged.
Does Red Hat bundle KDE? maybe they should leave Mozilla out and say they're bundling Konq. That'd be a story.
--
Re:Is this a big deal? (Score:2)
--
Re:JWZ (Score:2)
(And personally, I think it's pretty funny he gets called a "quitter" by people who've never started anything...)
Re:So they wont be hypocrites.. (Score:2)
I wasn't aware (read: didn't care) that RedHat was involved in any hullabaloo regarding qmail & djbdns. However:
Qmail [qmail.org] and djbdns [cr.yp.to] are each distributed under licenses which basically prohibit you from distributing modified binaries. You can redistribute the source, you can write patches for (and redistribute) it, you can distribute binaries. You may not redistribute patched binaries or directly modified source. The full text is here [lifewithqmail.org]
This makes GPL die-hards pretty upset. If I'm reading this correctly, some folks petitioned RedHat to include both qmail and djbdns in their distribution, and RedHat balked because of license issues. The thing is, they already were distributing Netscape, so the license argument sounded kind of lame.
So don't put it in /var (Score:2)
You don't have to put it in /var. Edit your conf-qmail before you compile,
and you can have qmail go anywhere you want it to.
The qmail license (and the "problems" it causes) is interesting and bizarre, because none of it actually effects the people who install and use qmail. So there's a problem, and yet, there isn't.
---
Re:Point me to an alternative (Score:2)
Mozilla 0.9:
Re:Death's Road. (Score:2)
It isn't worth it for Netscape to track the Mozilla milestones because the effort to recustomize each time would take up developer time that is better spent on the common source base. Those Netscape-brand customization branches would cause bugs that have to be fixed separately without adding to the end product. Understand this, Netscape 6.0(1) was a 'feature-complete' pre-beta/technology preview. I'm sure that Netscape knows it was pre-beta quality. It was put out there under pressure from journalists and standards advocates who immediately proceeded to about-face and blast the result. So Netscape decided that if that's the thanks they get, they'll release the next version when its ready. What did you expect when Netscape got slammed for doing what everybody else claimed they wanted?
The developers probably told management "We told you it wasn't ready!" and management certainly knew it wasn't ready, but they needed to keep up the perception that they were listening to the user base.
On the other hand, if Netscape is being kept alive by AOL to keep MS honest, Netscape 6.X is only effective as FUD if it is perceived to be a viable threat and not complete vapourware. Until the Netscape 6.X release, crappy as it was, the whole project was in serious danger of being perceived as vapourware and giving MS an effective browser monopoly. At that point it becomes ineffective for use as FUD by AOL and their funding might have dried up. All that bad publicity from NS6 meant that at least people were still talking about Netscape instead of forgetting about it. If NS 6.x was the price to keep Mozilla afloat to get to this point, then it was worth it. It's too bad they couldn't call it Technology Preview 2 instead of NS 6.0
Re:failure of open source? (Score:3)
If Microsoft loses an appeal at the Supreme Court level and gets broken up in such a way that they can no longer use IE to turn MSN into the dominant ISP, then I think you'll see AOL cutting Netscape loose and telling them to fend for themselves. Until then, it's a relatively cheap insurance policy,
Re:So they wont be hypocrites.. (Score:2)
A lot of people are yelling that there aren't holes in qmail and/or djbdns. Okay, there probably aren't, but that cash reward is small consolation for RedHat and its customers in the unlikely case the shit does hit the fan.
But what about bugs? Incompatabilities? Features that RedHat customers want that these programs might not have natively? Can't do anything about that can they? I suppose they could ship the source and patches and build them during install to get around the "distributing modified binaries" clause, but what a pain.
Imagine if RedHat could only ship the Linus kernel binary, or you had to build the modified kernel during every installation (makes installation of large clusters quite a pain). The great thing about the license of the kernel is that RedHat can modify the kernel, give those changes back to the community at large as source, and to their customers as easy to use binaries.
I am not affilated with RedHat in anyway.
Re:A sad demise (Score:2)
--
Re:A sad demise (Score:3)
And I want to paint it black.
No neutrals anymore,
I want it to turn black.
Apologies to the Stones.
--
Re:So they wont be hypocrites.. (Score:2)
And the chances of qmail or djbdns having holes in is...? Anybody...? Approximately zero, I'd say. For people that don't know, the author guarantees cash rewards [cr.yp.to] to anybody finding exploitable code in his software. The code is very very easy to audit, since most of the programs he writes are as small as they possibly can be (and split up into separate, mutually distrusting binaries), and use none of the standard I/O or string handling functions because djb doesn't trust them. Okay, so I'm biased, I love both programs, but this is someone who knows how to write secure code.
I think the reason most distros find djb's license so restrictive (not that I necessarily disagree) is his stance on distros not being allowed to shift files around to suit their view of the filesystem hierarchy-- e.g. no binary packages of qmail are allowed unless they put their binaries into
More frustration == more contributions? (Score:2)
Let's not forget most of the contributors to Mozilla are Netscape employees. You can call it Open Source all you like, but that's not the way it's supposed to work. I think having all those installations on the next release of RedHat will force everyone to have a second (or first) look, and hopefully, the bright (and lazy or bandwith throttled) among us might not bother downloading Netscape. And they'll get angry. And you know what? They just might fix it.
Laziness has been working against us - there's no incentive... perhaps this time laziness might actually help us. Hopefully, more users will mean a bigger contributor base.
Not just Wells Fargo.. (Score:2)
refuse SSL connections from Mozilla
Re:This makes sense (Score:2)
Re:Mozilla? (Score:2)
Re:Is this a big deal? (Score:2)
-1 (Misinformative) (Score:2)
I don't see anything in those terms and conditions that would prevent RedHat distributing it.
Re:Of course (Score:2)
It does take some work from the core developers to write the interfaces, but then, imho, that's important. I want Mozilla to support many pluggins, I'll just be picky about which ones I install.
I don't specifically want a browser that's an email client, but I want one that you can closely integrate with one, which Mozilla is better at for their practice at integrating their own client, and Chatzilla, etc, etc.
Re:So they wont be hypocrites.. (Score:4)
djbdns and qmail are Free Software in the GNU sense of the word.
Near as I could tell from looking at Bernstein's web site you are not allowed to distribute modified binaries or source!
According to the FSF, one of the four freedoms provided by "Free" software is "The freedom to improve the program, and release your improvements to the public". A license that requires you to distribute your improvements as patches can barely be consideded to provide that freedom. Certainly that's enough reason for me to avoid it.
This belies the point that holes are NEVER discovered in Bernstein's software
A completely foolish statement. Even if it is true that there has never been a qmail or djbdns exploit, that does not prove there never will be one. Even OpenBSD has had exploits, and those guys are DAMN careful!
It is impossible to guarentee that a non-trivial piece of software does not have vulnerabilities. Not allowing distributors, or hell just concerned sys-admins from distributing sources or binaries that with any kind of improvements is just plain fucking rediculous. IMHO Bernstein is just being a jackass. His "Free software" is about as free as Microsoft's "Shared Source" bullshit.
Why don't you just come out and admit that marketing ploys are your only reasons for including or not including something in the dist.
What marketing ploy would that be? Thier attempt to actually follow thier stated values? Thier attempt to support the Free Software that spawned them?
You are a hypocrite.
In this case, they are not. You, however, are a fool.
Everyone's doing it (Score:2)
I think its pretty clear to every operating system company that once Mozilla is good enough quality it would take over. Netscape is a boring method for AOL/Netscape to try and force other agendas.
Other browsers just aren't there yet. Konquerer is good, but its still just a little too lightweight. (My impressions). Opera has always been okay, but not quite strong enough. Lynx is great!
Really, the only hope is a good Mozilla. And the latest release shows that it is VERY close to being industrial strength.
We Need Netscape (Score:2)
Re:Mozilla? (Score:2)
It'll regularly ignore or miss out instructions, while throwing a complex table at it is a pretty good way to make it go nuts. One page I can think of will regularly produce an entirely useless and unrequested blank space, for example.
It regularly fails to send requests to the servers so I have to hammer on the link or hold the refresh key down to actually make it load the page. Its interface isn't anywhere near as powerful as Netscape's, either. Daft design, too -if I right-click to get a menu for a back command (for example) then I lose the options because it assumes it's got a link - but knows it hasn't because it doesn't give me the link options!
In many ways it's better than the alternatives, sure, but it's far from fantastic and I would happily dance on its grave. It's a lazy implementation in many ways and they could really do with some proper competition.
Re:Mozilla? (Score:2)
Re: right clicks, click on the normal background. You get Back, Forward, Save Background As, Set As Wallpaper and so on.
Now, try the same but hit an image. A normal part of the page (especially when the page _is_ an image) but the menu changes. I now get (ghosted) Open Link, Open Link in New Window, Save Target As, Print Target and so on. An inappropriate and largely useless set.
I wish we could replace IE... Looking forward to trying Mozilla, hoping it proves more stable than NS6.
qmail isn't as secure as it pretends to be (Score:2)
There are known DOSes in qmail that have been there for (literally) years with no attempt made to address them. DJB's response is always that DOSes aren't real holes and that it's impossible to be DOS-proof; there's an inkling of merit to that, but a DOS which allows an attacker with a substantially smaller pipe to swamp a server with overwhelming resources _should_ be fixed.
Use exim instead of qmail. Not only does it have no known security holes, but you can actually fix them if you find them.
http://packetstorm.securify.com/9901-exploits/qmai l-DoS-anonymous.txt
has a message from DJB on the subject from January. Excerpt: "Denial-of-service attacks have always been excluded from the qmail security guarantee"
Re:Is this a big deal? (Score:3)
Here's a list of what was still broken when I tried it again a couple of weeks ago:
1) Still can't handle reasonably populated mail files. I have many files/mailboxes that have a couple of thousand messages in them. Mozilla shows they have only a few dozen. I've had previous versions corrupt the mailfiles, too, something I can never forgive. (And yes, I know it's not done yet, but I don't expect it to corrupt my mailfiles after so many years in development...)
2) It's still completely incapable of handling serious bookmark files. (A quick wc -l on my bookmarks file returns 2516. I've yet to have a version of Mozilla that won't scrog the bookmark file within a few hours, and most of them I've tried can't even load the whole thing. Mozilla also seems to have real problems in parsing many levels of bookmark folders, too. Basically, it's bookmark capabilities are useless to me.
3) On top of all that, it still doesn't support roaming profiles, so I'm forced to going back to managing bookmark files separately on every computer I own or use, or dealling with half-assed methods like unison or other file sync programs.
Note that all of these complaints apply equally to Netscape 6 as well as Mozilla. Neither is really up to supporting anything other than a lightweight user of the tool. Netscape 4.x, for all its warts, at least has the cojones to do the job. I've never found any other tool that can... (No, IE doesn't count, because it doesn't integrate mail that can use a standard non-binary, non-proprietary mailbox format. Not to mention it's bookmark capabilites aren't even as good as Mozilla's...)
So far as I can tell, there is NO ALTERNATIVE AT ALL to Netscape 4.x, nor is there likely to be one anytime in the near future. (Oh, and anything I use must run as well or better on Win32 also, since unfortunately, that's where I need to spend 90% of my desktop time...)
Re:Browser alternatives (Score:2)
"I'm sorry Mister Jones, but because 80% of the population is totally braindead, we are unable to show our regular movie on this flight. You'll have to settle for 'Elmo In New York'."
Or
"No, no, no... 80% of our readers don't know what grammar is, so you'll just have to relearn English."
Just because something is popular, doesn't make it correct.
Re:The sooner N4 dies with a spike through its hea (Score:2)
Well, currently I need a N4 around. For some odd reason, my banks homebanking system consistantly makes Mozilla hang. At least with N4, I have a chance of using it before it crashes.
It's rather odd, though. The system is Java-based, yet with the java-plugin in mozilla, the behavior is roughly as follows: the java-applet loads, then starts, then mozilla stops rendering anything but the java-applet, then the java-applet hangs.
So while Mozilla has numerous good things, then from a strict users point of view, it's just not ready to replace N4,
Ohh, did I mention...I'm on Linux...
Re:I need Netscape but I wish I didn't (Score:2)
Re:Death's Road. (Score:2)
BTW you don't work for Netscape - you work for AOL! Deal with it!
daemontools (Score:2)
kill -HUP `ps aux (or -ef) | grep processname | grep -v grep | awk '{print $2}'
is reasonable?
"Weird" file locations (Score:2)
And in particular, it doesn't matter whether you've installed qmail yourself in
Yes, I realize that the "system stuff goes in
The alternative is to impose extra support costs on the qmail support community, for what benefit? So that YOU don't have to think qmail is installed in a weird place? That's worth nothing to me -- certainly not the cost of having to wonder where in the hell you installed qmail on your version of Unix.
-russ
Re:So they wont be hypocrites.. (Score:2)
-russ
p.s. Erik Troan said the same thing four years ago. There has not been a security hole in qmail in that whole time. So, in hindsight, Redhat could have been shipping qmail that whole time, and never had to worry about fixing a qmail hole. How many sendmail holes have there been in that time?
Re:So they wont be hypocrites.. (Score:2)
I do not believe this to be a necessity. People write patches because that is what they are used to doing. Instead, people should look at qmail as an email toolset, with a bunch of documented API's, just as Unix has documented API's and people write programs to use them.
Forbidding the change of file and directory locations has no conceivable security function,
You're quite right. The purpose is to keep qmail standard across all platforms. Nobody else tries to do it. I believe that it is a worthy goal. Often when people give answers on the qmail mailing list, they do so with shell commands. This is only possible because the helper knows where the helpee has installed qmail.
-russ
Re:qmail isn't as secure as it pretends to be (Score:3)
This is a lie. Dan has said that those DOS attacks are preventable by using ulimit. Why should qmail reproduce a system facility?
Exim has had security holes. No thank you.
a DOS which allows an attacker with a substantially smaller pipe to swamp a server with overwhelming resources _should_ be fixed.
You are being ridiculous. You want to deny service to somebody with an SMTP server? Just start opening connections, and leave them idle. Eventually you'll either crash the machine or you'll run into a connection limit. For this "discovery" you expect Dan to pay you $500???
-russ
FTP and Finger anyone? (Score:2)
Of course, there had been, but folks kept it quiet. Why air dirty laundry. Most people who worked on the code knew there were holes, but they weren't top priority.
Enter Robert "Wormer" Morris. He decided to blow the lid on this show, and made one little mistake. The rest [nec.com] is history....
One day, Mr. Bernstien will make a mistake. Everyone does. When that day comes, I dearly hope that I'm not using an OS that would take it for granted that such a mistake will never happen.
Don't get me wrong. I like the man's coding ethic, I just think he should let someone else package, license and distribute his software for him, so that it promotes, not prevents others from using his software (in the same way that RMS should let someone else do his public appearences
Re:Huh? (Score:2)
A: heh -- Mozilla M12, M13, M14, M15, M16, M17, M18,
.9 is really much nicer than all that preceded to my experience. I don't find IE any better, but I suppose I don't use it very often, perhaps there are features I ought to beg for in Mozilla;)
.9 does not crash every minute or so, I happen to prefer the aesthetics of its design to IE's (esp. the new Modern theme!
Konqui has some advantages, too, but this is not bad, not bad at all. NS 4.7X offers no advantage over Mozilla I can see, and crashes a lot more (in my experience thus far).
timothy
Re:So they wont be hypocrites.. (Score:2)
You realize that good security practice dictates that we can now never accept anything you ever say on the subject of security again, right?
Anyone who states that anything can be trusted absolutely does not understand security. Guaranteed.
Boss of nothin. Big deal.
Son, go get daddy's hard plastic eyes.
Re:So they wont be hypocrites.. (Score:3)
Every time I look at qmail, I see too many cool/needed modifications that will ONLY be distributed in a pain-in-the-ass patch format. Bernstein doesn't seem to care about his users' needs, only about his software's security reputation. It's his right, but it's reason enough for me not to run qmail; YMMV. It doesn't make the resulting binary any more secure, just more time-consuming to administer. If the qmail patch list were carefully integrated by him as options, I'd feel better. Forbidding the change of file and directory locations has no conceivable security function, and only strengthens the notion that he is a talented coder who is also an eccentric and a pain in the ass to deal with. Again, it's his right, but it doesn't make me feel safe relying on such an arbitrary person.
No marketing ploys, just practical decisions.
Boss of nothin. Big deal.
Son, go get daddy's hard plastic eyes.
Re:I need Netscape but I wish I didn't (Score:2)
You *do* know you can configure what user-agent string Konqueror sends on a per-domain basis, right?
Re:It's about time (Score:5)
Is that bad?
Re:Is there added value? (Score:2)
Re:LDAP Support? (Score:2)
Re:This is a good thing??? (Score:4)
> world to those found in the corporate mainstream.
It's really the same browser. Same code base, so everyone has a common interest in improving it. Same support for standards, so presenting a united front to Web developers (this includes Konqueror and Opera too as a matter of fact).
The only significant difference from Netscape's point of view is that they lose revenue from the buttons and bookmarks they ship with their branded browser.
Thanks for talking out of your ass (Score:5)
I interned at Netscape last summer. I worked on the Mail/News client. Let me assure you that there are most definitely phases to the project, and its not just a bunch of engineers sticking in whatever they want. Whatever new idea I had, it was shot down, because we were focusing on bugs at the time. All feature work was put on the back burner. Instead, I, and everyone else, worked on critical bugs.
And let me also assure you that the other projects in Mozilla (IRC, etc) were not created when an engineer said "Screw my bugs, I'm going to work on this." They were created when someone had some free time, or an outside contributor delivered some code.
Did NS6 ship bug free? No, but don't blame that on random engineering if you don't know what you're talking about.
--
Re:Netscape (Score:4)
BTW, feel free to ask the Mozilla team what they think about the OS/2 programmers they work with.
--
Lord Nimon
Re:So they wont be hypocrites.. (Score:3)
Read the licenses of djbdns and qmail, and you'll see why we can't ship them: If a hole is discovered, we're not allowed to distribute a fixed version in binary form.
This belies the point that holes are NEVER discovered in Bernstein's software. Besides that, you can provide the source. You can modify it for personal use. You can freely re-distribute the source. You can distribute source patches SEPARATELY from the djb source.
GNU freedoms are
The freedom to run the program, for any purpose (freedom 0).
Clearly djb's programs meet this.
The freedom to study how the program works, and adapt it to your needs (freedom 1). Access to the source code is a precondition for this.
Clearly this one is met as well.
The freedom to redistribute copies so you can help your neighbor (freedom 2).
This one is true also.
The freedom to improve the program, and release your improvements to the public, so that the whole community benefits. (freedom 3). Access to the source code is a precondition for this.
Of course, you have to distribute patches separately, and cannot distribute modified binaries.
Look, you guys at RedHat have shipped more BIND installations that have resulted in remote root compromises than anyone else. I have personally had to re-install two machines for this reason. (and no, I didn't do the original install). Bernstein writes good free software. You can safely distribute a binary and NEVER worry about finding holes in it. Of course, any improvements in the source would have to be approved by Bernstein before being broadly distributed.
But some of us consider that a good thing.
Why don't you just come out and admit that marketing ploys are your only reasons for including or not including something in the dist.
Re:So they wont be hypocrites.. (Score:3)
You are quite free to distribute patches to the djb source, so long as they are distributed separately. The FSF freedoms do not include re-distributing under the same terms as those you received. That is part of OSI and DFSG. With DJB software, you have the source, you can use it, you can modify it, you can re-distribute the original as source or binary (provided the binary does not change the directory structure and works "as intended" from the original tarball). You can also distribute patches. This qualifies as improving the software and distributing your improvements. These are the FSF essential freedoms. It doesn't make a specific point about distributing modified binaries, except in the long text after stating the basic freedoms. Note that QT 1.0 came under a more restrictive license than this...
Now then, I do not feel as a user that I am so inclined to avoid software when I am given a copy that I own. A copy that I can hack, modify, and a copy that I can distribute, as I received it, to others.
If distributions as so concerned about holes that they will not distribute djb software because they cannot distribute a modified binary - then they ought to take a good long hard look in the mirror and repeat the words "sendmail, BIND, wu-ftp, oh my" over and over again until they get it.
Crappy remote root compromisable software that is GPL'd is not worth the bits used to ship it. That has included at times wu-ftp, sendmail, and BIND multiple times each. That RedHat is free to distribute a modified binary is little solace to me as I re-install a machine. Heck, they do not even do a security review, or if they do, they are not very good at it. The cost of a single remote root compromise is well over $1000 to the admin. The cost of using qmail and djbdns is free. The cost of sleeping better at night - priceless.
The sooner N4 dies with a spike through its head.. (Score:3)
Of course, *nix users are probably the last people that need to be told this, but every little bit helps.
N4 is the single biggest ball-and-chain around the ankles of people otherwise dying to write quality, standards-compliant code. Now we just have to get the mac users to give it up, most Win people are using IE5, which is good enough for the most part.
TomatoMan
Re:So they wont be hypocrites.. (Score:3)
You mention Qt - and we fought the ideals we (well, they - I wasn't working there then) believed in and put resources into a free desktop: GNOME.
While QT may be free now, it (and thus KDE built on top of it) certainly wasn't free then - and we took the consequence of that, opening markets for people who cared less for principles and open source and more about giving a group of users the KDE they wanted.
Re:So they wont be hypocrites.. (Score:5)
Read the licenses of djbdns and qmail, and you'll see why we can't ship them: If a hole is discovered, we're not allowed to distribute a fixed version in binary form.
As for Netscape, there really wasn't an alternative when we added it - there now is. qmail and djbdns, OTOH, would have a hard time making it in anyway as there are other alternatives with better licenses. Qmail isn't a "must have", when we already have sendmail, postfix and exim
A sad demise (Score:3)
You were an annoying program,
Almost as annoying as vendor specific tags,
I'll still have to test with you,
But I'll paint my mouse black as a mark of respect.
Re: Red Hat: Who Needs Netscape (Score:3)
And IE 5.5 is the most stable browser I've ever used.
Then you haven't ever used Lynx.
Progeny Debian does this (Score:3)
Re:Opera (Score:3)
"Mozilla has the exact same look and feel of the current Netscape browser, but officials said that the reason to go strictly with Mozilla is that its open-source development model has a better fit with Red Hat's philosophy."
Even if they signed an agreement with Opera, to distribute a fast closed-source ad ridden browser with Red Hat - I doubt their corporate customers would dig having to support it. Seeing as Red Hat can't provide security fixes or patches to it to repair or improve it, it doesn't align with their open source philosophy.
They can make a Red Hat `branded' version of Mozilla using its components once it goes 1.0 and I would not be surprised to see them do it. Either way, Mozilla is looking really nice 0.9 and I am typing this post using it right now.
-Pat
Re:So they wont be hypocrites.. (Score:3)
Re:Browser alternatives (Score:5)
Are you SURE you've tried 0.9? (Score:5)
Re:So they wont be hypocrites.. (Score:3)
So, if there was a hole in djbdns, and the original author doesn't fix it (or doesn't fix it fast enough), RedHat is out of luck because they can't distribute their own fix as an RPM. There's also the issue of not being able to relocate files when you package it, which is also annoying to a distro maker trying to organize things consistently.
Now, the chance of a security hole in djbdns may be really small. I'm not familiar with the software myself. But, I can see why RedHat wants to have the ability to respond flexibly to holes if they do occur.
Jamie Zawinski, is -I'm sure- Thrilled about this (Score:3)
--CTH
--
Re:So they wont be hypocrites.. (Score:4)
djbdns and qmail are both under the DJB license, a license of their creator. You arent as free to do what you want with them as GNU applications. As such, RedHat has stated it will never distribute them unless the license changes. However, They distribute Netscape, Which is worse than djbdns/qmail. You can see more on D. J. Bernstein's site [cr.yp.to]
Re:Netscape (Score:4)
-----------------