James Morris writes: "Here's an update on the Linux Security Modules project (LSM). In April last year, the NSA proposed SELinux at the first Linux Kernel Summit. Following feedback from Linus, the LSM project was initiated by Crispin Cowan to develop a generic access control framework for Linux which would allow different types of security policies to be implemented as loadable kernel modules. Rather than having to choose one security model, LSM aims to provide a framework for incorporating a variety of advanced security mechanisms into Linux with a minimal effect on the base kernel. This week, Chris Wright (the principal maintainer) formally announced patches for the 2.4 and 2.5 kernels. Chris will be presenting LSM at this year's Kernel Summit and giving a talk at OLS, hopefully kicking off discussion on acceptance of LSM into the main kernel. Projects which have already been ported to LSM include SELinux, LIDS, DTE, Openwall and Posix.1e Capabilities. Check out the newly re-vamped web site for downloads, documentation and general information."

Anonymous Coward writes "We have just finished a study that shows how user interface design flaws allow users on Kazaa to share their personal files without their knowledge. In a laboratory user study, only 2 out of 12 subjects were able to correctly determine that Kazaa was sharing their entire hard drive. We looked at the current Kazaa network and discovered that many users are sharing personal information such as email and data for financial programs such as Microsoft Money. To see if other users on Kazaa were aware of this and taking advantage of users ignorance, we ran a Kazaa client for 24 hours with dummy personal files. During this time, files named "Inbox.dbx" and "Credit Cards.xls" were downloaded from our client by several unique users. The tech report is online, or see our lab web page."

ignipotentis asks: "I've been given the task to find a multi-platform (windows, macintosh, linux) version control system. Currently, CVS is being used, and it isn't working quite as we expected it to. We are creating large Flash files and CVS is having problems keeping everything straight. It apparently doesn't like the large file sizes. I was wondering what other decent version control software is available that doesn't require a huge sum of money?"

FunkyGibbin' asks: "I've just started with a new company that has outsourced a project to translate a 4GL language - some 1.5 million lines of it - into J2EE. It's way behind schedule, and keeps on tripping over itself at acceptance test points (one item is fixed, others are broken). The outsourcing company chose as their conversion tool IBM's Rexx. They don't parse the 4GL to a syntax tree and then generate from that. They 'match patterns' which then generates the output. In addition, they're not even using the object oriented features of Rexx; it's in procedural Rexx! They have no regression test suite that runs through the original system and the newly generated system to ensure that they produce the same result [this apparently was 'our job' to do it manually]. Frankly, I consider the outsourcing company to have adopted completely the wrong approach, but I'm happy to be proven wrong if compiler construction or language translation experts can tell me that Rexx was their best choice, or even a reasonable choice! Any and all information gratefully accepted - this project has so far cost many dollars, and the board is unsure what to do with it."

AlainRoy writes "A new article was just published in First Monday, which suggests that most open source projects have rather few developers." He excerpts from the study, done by Sandeep Krishnamurthy: "Based on a study of the top 100 mature products on Sourceforge...most OSS programs are developed by individuals, rather than communities. The median number of developers in the 100 projects I looked at was 4 and the mode was 1."

RoosterT writes: "QNX released its new IDE, called Momentics, for the QNX Neutrino RTOS today. Why is this significant? It is the first commercial product based on the Eclipse platform. The new version of the OS and a 'Standard' version of the IDE are both available here. There is also a nifty reference platform for hacking QNX onto an iPAQ."

FeeDBaCK writes: "As many of you may not know, Wine is currently being ported to Mingw for the ReactOS project. An update to the status of some of the Wine native Dlls under Windows was posted to the wine-devel mailing list. What this means is that there are now some Wine Dlls, which contain no Microsoft code, that appear to be interchangeable with the official Microsoft Dlls with no apparent loss in functionality. These Dlls include imagehlp.dll and riched32.dll. This comes as a great win for Wine, and brings them one step closer to bringing Windows applications to Linux." There's still a list of not-yet-functioning ones, but this is nice news.

Simon Cozens writes "The Apocalypses are Larry Wall's explanation of the design of Perl 6. In Apocalypse 5, Larry turns to redesigning regular expressions. He set out to intentionally 'break' a lot of the regular expression culture we're all used to, and these are the results - and they're mindblowing."

BlackGriffen writes "Anyone who is interested in making their own Gameboy Advance ROMs can go get an unofficial GBA SDK . With this and a flash ROM kit from someplace like lan-kwei.com, we could see a flourishing indie game making community. Available for Linux and Mac OS X only (for now, it's open source)."

retsofaj queries: "Almost all of the introductory programming books I've looked at focus on syntax, with possible digressions into a bit of semantics. What I haven't found are any great discussions that go beyond syntax and semantics and make it all the way to conceptual models. My goal is to develop a set of resources that can be used in an introductory course that teaches students programming starting with conceptual models, as opposed to starting with syntax."

mbadolato writes "use Perl; is reporting that the long-awaited Perl 5.8 has just been released in the form of RC1. It is a release candidate, and is not recommended for use in a production environment, but downloading and testing is strongly encouraged. Read the story for the announcement, and also read perldelta to see what's changed." I think this might be the best .0 release in Perl 5's history, and is will also be the first release of perl to ship with full support for Mac OS X (perl 5.6.1 had a few nagging issues), as well as Classic Mac OS.

Karin Kosina writes: "Real-time Free Software solutions are moving forward with the first release of ADEOS, a hardware abstraction layer allowing a real-time kernel and a general purpose kernel to co-exist. RTAI will eventually use ADEOS services, thus offering a real-time kernel based on a principle clearly different from the 5,995,745 US Patent. Read the official press release by Philippe Gerum, Karim Yaghmour, Paolo Mantegazza et al. for details."

An Anonymous Coward writes "LinuxDevices.com has just published a very detailed review by Jerry Epplin of the new book by Craig Hollabaugh, Embedded Linux -- Hardware, Software, and Interfacing, published by Addison Wesley Professional. Quoting briefly from the review, "A system developer planning to use Linux for an embedded design is faced with a number of decisions, not the least of which is whether to use a packaged commercial Embedded Linux distribution or to devise a homebrew solution from the available free tools and components. The custom approach has much appeal because of its low cost and radical flexibility, allowing one to choose any approach or tool rather than those chosen by the toolkit vendor. But with this flexibility and low cost comes the chaotic documentation typical of Linux. Thus, books like [this one] fill a significant void . . .""

Ryan writes "Apple recently published an article on using CVS with Mac OS X. 'This article covers some of the most commonly used features of CVS, with emphasis on using CVS with static and interpreted web files (HTML, PHP, Perl, etc).'" It's a decent article, a good primer on how to get started, and it's nice that Mac OS X comes with a CVS server. Personally, I really dig maccvs for my CVS client, and there are plenty of other clients for Mac OS out there too.

asqui writes "The First Annual Google Programming Contest, announced about 4 months ago has ended. The winner is Daniel Egnor, a former Microsoft employee. His project converted addresses found in documents to latitude-longitude coordinates and built a two-dimensional index of these coordinates, thereby allowing you to limit your query to a certain radius from a geographical location. Good for difficult questions like "Where is the nearest all-night pizza place that will deliver at this hour?". Unfortunately there is no mention whether this technology is on its way to the google labs yet. There are also details of 5 other excellent project submissions that didn't quite make it."

Aengus asks: "We have a round of job interviews coming up and the people we will be interviewing will be of different backgrounds, so we are looking for a core set of general questions that you could apply to any IT/CS candidate that would display that they knew what they were talking about. ie questions that are not language or job specific. So far all we have come up with 'What algorithm is your favourite or most commonly used?'....." What questions have you been asked on interviews you have participated in?

An Anonymous Coward writes: "This whitepaper at linuxdevices gives an introduction to Asterisk, an open source project which implements a Linux-based Private Branch Exchange (PBX) and Interactive Voice Response (IVR) platform. Asterisk turns a Linux system to the task of switching calls, and offers a large number of features to support communication in a business environment. According to the whitepaper, "Asterisk can do just about anything in software that a traditional PBX would do with specialized hardware. It unifies systems to provide tremendous possibilities for information services. Seamless use of Packet Voice allows Asterisk servers to intercommunicate throughout LANS, private WANS, and the Internet. Asterisk provides a sophisticated solution for IVR platforms, wide hardware interoperability, flexible wide area phone networks, and advanced telephony features -- all at reasonable cost." Apparently, Asterisk is supported on the Linux-based snom 100 VoIP phone, which has an embedded computer based on a Motorola PowerQUICC processor with 16MB of RAM and runs a Linux 2.4.18 kernel."

Dare Obasanjo writes: "XML namespaces are an integral aspect of most of the W3C's XML recommendations and working drafts, including XPath, XML Schema, XSLT, XQuery, SOAP, RDF, DOM, and XHTML. Understanding how namespaces work and how they interact with a number of other W3C technologies that are dependent on them is important for anyone working with XML to any significant degree." Some heavy reading below, as Dare completes the thought.

paul_harrison asks: "I am trying to introduce a new P2P protocol. It's technically superior in several respects to existing protocols, but there's one big problem: too few people using it. Now this is not a new problem, there's even a name for it, "Network Effect". It crops up all over the place: which websites become popular, which formats and protocols people use, which operating systems people use, even which side of the road people drive on... So my question is this: how do things like these overcome network effects and become popular?"

josephfeller writes: "'Meeting Challenges and Surviving Success: The 2nd Workshop on Open Source Software Engineering' was held last week at the 24th International Conference on Software Engineering (ICSE 2002), in Orlando, FL. The 15 workshop position papers and the workshop introduction are available for free download."