jfruh writes "Stratasys, one of the world's biggest 3D printer manufacturers, routinely uses 3D-printed objects as displays for its booths at trade shows. The problem: It's been using objects designed by popular designer Asher Nahmias, whose creations are licensed under a noncommercial Creative Commons license — and he says Stratasys's use violates the licensing terms. This is just one example of how the nascent 3D printing industry is having to grapple with the IP implications of creating physical objects out of downloadable designs. Another important problem: IP law distinguishes between purely decorative and useful objects, but how should the digital files that provide a design for those objects be treated?" The models are copyrighted and licensed NC, but what about the resulting object? Precedent seems to imply that the resulting object cannot be controlled (e.g. the output of a GPLed program is not GPLed, so why should executing a program on a 3D printer be any different?).

An anonymous reader writes "VideoLAN revealed some very exciting news today: VLC for iOS will be back in Apple's App Store by tomorrow (July 19). The company tells TNW the app will be available for free worldwide, requires iOS 5.1 or later, as well supports the iPhone, iPad, and iPod touch. As you can expect, VLC for iOS version 2.0 will be open-source. This time, however, its code will be available online (also by tomorrow), bi-licensed under both the Mozilla Public License Version 2 as well as the GNU General Public License Version 2 or later."

Last week you had a chance to ask Jon "maddog" Hall about his work on Project Caua and FOSS in general. Below you'll find his answers to those questions.

Gunkerty Jeb writes "A security researcher has uncovered a number of serious vulnerabilities in one of the core security components of several secure telephony applications, including the Silent Circle system developed by PGP creator Phil Zimmermann. The vulnerabilities in the GNU ZRTPCPP library already have been addressed in a new version of the library and Silent Circle has implemented a fix, as well. ZRTPCPP is a library that implements the ZRTP protocol that Zimmermann and others developed to establish secure sessions over a pre-existing connection. Silent Circle, which sells a cryptographically secure mobile phone application, and several other products implement the ZRTPCPP library, and Mark Dowd of Azimuth Security has identified several vulnerabilities in the library that could give an attacker the ability to get remote code execution. Dowd said that the bugs can be exploited by remote, unauthenticated users."

New submitter sobolwolf writes "It has been apparent for some time that many developers (mainly theme designers) are split-licensing PHP-based GPL distributions, releasing proprietary files alongside GPL files with the excuse that CSS, JavaScript and Images are 'immunized' from the GPL because they run in the browser and not on the server. This is almost always done to limit the distribution of the entire release, not just the proprietary items (most extensions will not function in any meaningful way without the accompanying CSS, Images and JavaScript). Some of the more popular PHP-based GPL projects, like WordPress, have gone as far as to apply sanctions to developers distributing split-licensed themes/plugins. Others, such as Joomla, have openly embraced the split-licensed model, even changing their extension directory submission rules to cater specifically to split-licensed distributions. In light of all this, I would like to ask the following question: While it seems to be legal to offer split-licensed GPL distributions, is it in the spirit of the GPL for a project such as Joomla (whose governing body has the motto 'Open Source Matters') to openly embrace such a practice when they can easily require that all CSS, Images and JavaScript be GPL (or GPL-compatible) for extensions that are listed on the Joomla Extensions Directory?"

alphadogg writes "Start-up Cumulus Networks this week has emerged with a Linux network operating system designed for programmable data centers like the ones Google and Facebook are building. The company's Cumulus Linux OS operating system includes IPv4 and IPv6 routing, plus data center and network orchestration hooks. Much like OpenFlow for independent, software-defined control of network forwarding, Cumulus Linux is intended to run on commodity network hardware and bring Open Source extensibility to high capacity data centers. The head of the company used to work for Cisco and Google." The distribution is based on Debian and ported to several router platforms. They claim to release most of their code Open Source, but there are at least a few proprietary bits for interfacing to the routing hardware itself.

An anonymous reader writes "The MariaDB blog is reporting a small change to the license covering the man pages to MySQL. Until recently, the governing license was GPLv2. Now the license reads, 'This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.'"

mpol writes "We're all aware of PRISM and the NSA deals with software houses. Just today it was in the news that even Microsoft gives zero-day exploits to the NSA, who use them to prepare themselves, but also use the exploits to break into other systems. At my company we use Git with some private repositories. It's easy to draw the conclusion that git-hosting in the cloud, like Github or Bitbucket, will lead to sharing the sourcecode with the NSA. Self-hosting our Git repositories seems like a good and safe idea then. The question then becomes which software to use. It should be Open Source and under a Free License, that's for sure. Software like GitLab and GNU Savane seem good candidates. What other options are there, and how do they stack up against each other? What experience do people have with them?"

Today's interviewee, Andrew Dougherty, has a Web page that says he is "...an autodidact mathematician and computer scientist specializing in Artificial Intelligence (AI) and Algorithmic Information Theory (AIT). He is the founder of the FRDCSA (Formalized Research Database: Cluster Study & Apply) project, a practical attempt at weak AI aimed primarily at collecting and interrelating existing software with theoretical motivation from AIT. He has made over 90 open source applications, 400 (unofficial) Debian GNU/Linux packages and 800 Perl5 modules (see http://frdcsa.org/frdcsa)." Tim Lord says Andrew's project "brings together a lot of AI algorithms, collects large sets of data for those algorithms to chew on, and writes software to do things like ... guide your whole life." As you might guess, Andrew occupies a pretty far edge of the eccentric programmer world, as you'll see from this video (and transcript). He calls himself "a serious Stallmanite" (his word), and has chosen the GPL for his software in the hopes that it will therefore help the greatest number of people. (Speaking of help, he's looking for interesting data sets and various "life rules" that can be integrated with his planning software, and one of the reasons he presented at the recent YAPC::NA was to solicit help in putting his hundreds of Perl modules onto CPAN.)

New submitter m.alessandrini writes "I've been using Debian for a long time, and I'm not a novice at all; I install system updates almost daily, I avoid risky behaviors on Internet, and like all Linux users I always felt safe. Yesterday my webcam suddenly turned on, and turned off after several minutes. I'm pretty sure it was nothing serious, but I started thinking about malware. At work I use noscript and other tools, but at home I have a more relaxed browser to be used by other family members, too. Here I'm not talking about rootkits or privilege escalation (I trust Debian), I think more of normal user compromise. For example, these days much malware come from malicious scripts in sites, even in advertising banners inside trusted sites, and this is more 'cross-platform' than normal viruses. So, what about non-root user malware? How much could this be real? And how can you diagnose it?"

jrepin writes "The GNU Hurd is the GNU project's replacement for the Unix kernel. It is a collection of servers that run on the Mach microkernel to implement file systems, network protocols, file access control, and other features that are implemented by the Unix kernel or similar kernels (such as Linux). The Debian GNU/Hurd team announces the release of Debian GNU/Hurd 2013. This is a snapshot of Debian 'sid' at the time of the Debian 'wheezy' release (May 2013), so it is mostly based on the same sources. Debian GNU/Hurd is currently available for the i386 architecture with more than 10,000 software packages available (more than 75% of the Debian archive)."

First time accepted submitter anarcat writes "After two years since the last Debian release (6.0, nicknamed "squeeze"), the Debian release team has finally published Debian 7.0 (nicknamed "Wheezy"). A newly created blog has details on the release, which features multi-arch support (e.g. you can now install packages for both i386 and amd64 on the same install), improvements to multimedia support (no need for third party repositories!) and improved security through hardening flags. Debian 7.0 also ships with the controversial Gnome 3 release, and the release notes explicitly mention how to revert to the more familiar 'Gnome classic' interface. Finally, we can also mention the improved support for virtualization infrastructure with pre-built images available for Amazon EC2, Windows Azure and Google Compute Engine. Debian 7.0 also ships with the OpenStack suite and the Xen Cloud Platform. More details on the improvements can be found in the release notes and the Debian wiki." An anonymous reader points out (from the announcement) that "[t]he installation process has been greatly improved: Debian can now be installed using software speech, above all by visually impaired people who do not use a Braille device. Thanks to the combined efforts of a huge number of translators, the installation system is available in 73 languages, and more than a dozen of them are available for speech synthesis too. In addition, for the first time, Debian supports installation and booting using UEFI for new 64-bit PCs (amd64), although there is no support for Secure Boot yet."

gnujoshua writes "In a new article, GNU Project founder Richard M. Stallman speaks out against the proposal to include hooks for DRM in HTML5. While others have been making similar arguments, RMS strikes home the point that while companies can still push Web DRM themselves, the stance taken by the W3C is still — both practically and politically — vitally important: '[...] the W3C cannot prevent companies from grafting DRM onto HTML. They do this through nonfree plug-ins such as Flash, and with nonfree Javascript code, thus showing that we need control over the Javascript code we run and over the C code we run. However, where the W3C stands is tremendously important for the battle to eliminate DRM. On a practical level, standardizing DRM would make it more convenient, in a very shallow sense. This could influence people who think only of short-term convenience to think of DRM as acceptable, which could in turn encourage more sites to use DRM. On the political level, making room for DRM in the specifications of the World Wide Web would constitute an endorsement in principle of DRM by the W3C. Standardization by the W3C could facilitate DRM that is harder for users to break than DRM implemented in Javascript code. If the DRM is implemented in the operating system, this could result in distribution of works that can't be played at all on a free operating system such as GNU/Linux.'"

nk497 writes "Mozilla has sent a cease-and-desist order to Gamma International, after it was revealed the controversial creator of spyware for governments was disguising itself as Firefox on PCs. 'We cannot abide a software company using our name to disguise online surveillance tools that can be — and in several cases actually have been — used by Gamma's customers to violate citizens' human rights and online privacy,' Mozilla said." DavidGilbert99 writes on the wider implications of the Citizen Lab report: "Governmental spying software has been in the news a lot in recent months and today Citizen Lab has revealed its latest findings, showing that one of the most prolific tools in use, Finfisher, is now in use in 36 countries around the world [beware the auto playing video ads with sound]." And, Voulnet adds "According to analysis and report by CitizenLab of the Gamma FinFisher trojan spyware used against dissidents in the middle east and around the world, the FinFisher codebase uses the LGPL GNU Multiple Precision Arithmetic Library, possibly without adhering to its distribution restrictions."

gnujoshua writes "You may recall that last Fall, the LulzBot AO-100 3D printer was awarded the use of the Free Software Foundation's Respects Your Freedom certification mark. Today, the FSF announced certification of the ThinkPenguin TPE-N150USB, Wireless N USB Adapter, which uses the Atheros ARAR9271 chip. The FSF's RYF certification requirements are focused on the software (not the hardware designs) of a product, which in this case was primarily the device firmware and ath9k-htc module in the Linux-libre kernel. (Disclosure: I work for the FSF.) There's also a cool story that is within this story... which is that the firmware for the Atheros AR9271 chipset was released as a result of a small device seller (ThinkPenguin) striking a deal with a large electronic device manufacturer (Qualcomm Atheros) to build a WLAN USB adapter that shipped with 100% free software firmware. This deal was possible largely because two motivated Qualcomm Atheros employees, Adrian Chadd and Luis Rodriguez, made the internal-push to get the firmware released as free software."

jrepin writes "The government of Spain's autonomous region of Extremadura has begun the switch to open source of it desktop PCs. The government expects the majority of its 40,000 PCs to be migrated this year, the region's CIO Theodomir Cayetano announced on 18 April. Extremadura estimates that the move to open source will help save 30 million euro per year. Extremadura in 2012 completed the inventory of all the software applications and computers used by its civil servants. It also tailored a Linux distribution, Sysgobex, to meet the majority of requirements of government tasks. It has already migrated to open source some 150 PCs at several ministries, including those for Development, Culture and Employment."

I've been really, really excited about digital video distribution lately: first Netflix greenlights jms's return to science fiction TV, and then Amazon announces their new pilots. Perhaps the decade long dearth of any good television is nearing its end! So, with that in mind, I finished up editing Slashdot for the day and sat down to watch some of these new pilots. Only to discover that Amazon has taken away my ability to watch entirely in the name of Digital Restrictions Management.

DeviceGuru tipped us to the release of the latest single board computer from Beagle Board. It's been two years since the previous BeagleBone was released, and today they've released the BeagleBone Black (including full hardware schematics) at a price competitive with the Raspberry Pi ($10 more, but it comes with a power brick). Powered by a Cortex-A8, it has 512M of DDR3 RAM, 2G of onboard eMMC, two blocks of 46 I/O pins, a pair of 32-bit DSPs, the usual USB host/client ports, Ethernet, and micro-HDMI (a much requested feature). Support is provided for Ångstrom GNU/Linux, Ubuntu, and Android out of the box. Linux Gizmos reports where some of the cost savings came from: "According to BeagleBoard.org cofounder Jason Kridner, interviewed in a Linux.com report today, cost savings also came from removing the default serial port as well as USB-to-serial and USB-to-JTAG interfaces, and including a cheaper single-purpose USB cable. (Three serial interfaces are available via the expansion headers.) In addition, the power expansion header for battery and backlight has been removed."

When you call your business Penguin Computer & Telephone Solutions, it's obvious that Linux is your favorite operating system. Company owner Frank Sflanga, Jr. happily works on Windows, Mac and whatever else you want or have around, but he is a Linux person at heart; in fact, he's a founder and leading member of The Southwest Florida GNU/Linux Users Group. But the point of this interview, which some will want to label an ad (although it's not), is to show how Frank started his one-man consulting business and made it successful so that other Slashdot readers can follow in his footsteps and become self-employed -- if they are so inclined. You might want to note that most of Frank's clients were not familiar with Linux when he first started working with them, and most are not particularly interested in software licensing matters as long as Frank keeps their stuff working. You might also want to note that Ft. Myers, FL, where Frank is located, is not exactly famous as a hotbed of leading-edge technology, which means that even if you live someplace similar, where business owners ask "What's a Linux?" you might be able to make a decent living running a Linux-based IT consulting business.

An anonymous reader writes "With the latest development work on Clang ahead of the release of LLVM version 3.3, Clang is now C++11 feature complete. The last remaining features of the ISO C++11 feature specification have been implemented. C++11 support for GCC is also more or less complete."