iceco2 writes "MySql.com and associated sites were hacked today. Among other items some simple passwords were recovered and private emails were revealed. Ironically the attack was performed using a blind sql injection attack."

darthcamaro writes "Red Hat is almost at its goal of being the first pure-play open source vendor to hit $1 billion in Revenues. Red Hat reported its fiscal 2011 revenues this week which hit $909 million. Going forward, Red Hat has already taken steps to protect its business by changing the way it packages the Red Hat Enterprise Linux 6 kernel, making it harder for Oracle to clone. 'We are the top commercial contributor to most of the components of the Linux kernel and we think we have a lot of value and we want to make sure that, that value is recognized,' Red Hat CEO Jim Whitehurst said. 'In terms of competition, I don't think we necessarily saw anything different from before but I'd say better to close the barn door before the horses leave than afterwards.'"

Blacklaw writes "Intel's ill-fated Itanium line has lost another supporter, with Oracle announcing that it is to immediately stop all software development on the platform. 'After multiple conversations with Intel senior management Oracle has decided to discontinue all software development on the Intel Itanium microprocessor,' a company spokesperson claimed. 'Intel management made it clear that their strategic focus is on their x86 microprocessor and that Itanium was nearing the end of its life.'"

jbrodkin writes "Linux kernel creator Linus Torvalds has scoffed at a new claim that Android violates the Linux license. Google's use of the Bionic Library does not result in a derivative work that has to be licensed under GPL, as some lawyers are claiming, Torvalds says. 'It seems totally bogus,' Torvalds said. 'We've always made it very clear that the kernel system call interfaces do not in any way result in a derived work as per the GPL.' While some claims against Android can be dismissed outright, Google and its partners still must fend off patent lawsuits filed by rivals Microsoft and Oracle."

joabj writes "Last week, Oracle announced that it is decommissioning the Sun.com site, which it acquired as part of the $7 billion purchase of Sun Microsystems. So what will Oracle do with the domain name, which is the 12th oldest .com site on the Internet? Domain brokers speculate Oracle could sell it for $1 million or more, if it chose to do so."

jfruhlinger writes "Yesterday, news broke that Android might have a Linux copyright problem, which would be big trouble for Google, already locked in an IP struggle with Oracle over the mobile platform. Blogger Brian Proffitt looks deeper into the alleged violations. He notes that, while it's possible that Google's on shaky ground, the motivations behind the news release are murky: the lawyer who outlined the violation is an ex-Microsoft hand, and the news was widely propagated by gadfly Florian Mueller, who's tangled with Google over patent issues in the past. Moreover, the alleged violations are in header files, and it's not clear that those are copyrightable; if they are, no actual copyright holders have come forward to complain."

An anonymous reader writes "Ars is reporting that the CCIA, a trade group representing companies like AMD, Facebook, Oracle, Yahoo, Google and Microsoft, is calling the copyright wiretaps requested by the IP Czar 'Hollywood's PATRIOT Act.' For those who don't remember, IP Czar Victoria Espinel recently wrote a report calling for more charges of felony copyright infringement under the NET Act, as well as felony charges for illegal web streaming, authorization for the use of wiretaps in going after copyright infringement cases, and several other measures. In short, this means that the copyright cops are coming online."

snydeq writes "MySQL fork Drizzle has been released for general availability, giving companies a viable alternative to Oracle-owned MySQL, InfoWorld reports. 'Organizations that have been seeking a less-expensive alternative to Oracle's brand of MySQL — or a variant devoid of feature bloat — now have an option that Drizzle's creators deem ready to package in Linux distributions.'"

mvar writes to point out a report from h-online about the Red Hat kernel source controversy. From the article: "Red Hat has changed the way it ships the source code for the Linux kernel. Previously, it was released as a standard kernel with a collection of patches which could be applied to create the source code of the kernel Red Hat used. Now though, the company ships a tarball of the source code with the patches already applied. This change, noted by Maxillian Attems and LWN.net, appears to be aimed at Oracle, who like others, repackage Red Hat's source as the basis for its Unbreakable Linux. Although targeted at Oracle, the changes will make work harder for distributions such as CentOS."

linuxwrangler writes "It's used in Java. It's used in nearly every flavor of UNIX/Linux. In PostgreSQL, Oracle and other databases. Several RFCs refer to it. But where does the timezone database come from? I never gave it much thought but would have assumed that it was under the purview of some standards body somewhere. It's not. Since the inception of the database Arthur David Olson has maintained the database, coordinated the mailing list and volunteers and provided a release platform and now he is retiring. IANA is developing a transition strategy. Jon Udell has an interesting literary appreciation of the timezone database."

jfruhlinger writes "Despite the fact that Oracle is suing Google over claims that Android violates Java IP, Android is roaring ahead in the marketplace. Still, some groups are wondering if they can implement Android without incurring Oracle's current or future wrath by avoiding the Dalvik VM. A project called IcedRobot aims to create a GNU-compatible version of Android, and rumors abound that RIM is planning on putting an OpenJDK-version of Android on its upcoming PlayBook tablets."

darthcamaro writes "Oracle trashed a lot of former Sun technologies — not the least of which is Sun's open source identity platform which included OpenSSO and OpenDS. Now open source startup ForgeRock has taken those castoffs and created a business that has been running successfully for year. 'My personal goal here is to prove that you can have an open source business that is profitable,' said Simon Phipps, former chief open source officer at Sun and now chief strategy officer at ForgeRock. 'Having principles and having profit are not mutually exclusive.'"

An anonymous reader writes "The Document Foundation, the group responsible for forking the OpenOffice.org project away from Oracle's control and into the shiny new LibreOffice suite, has announced a drive to raise €50,000 to set up as a legal entity. The Foundation, formed by numerous OpenOffice.org community members tired of the overbearing hand of Oracle preventing them from progressing the development of the popular open source productivity suite, has passed several recent milestones. It's released a full feature-complete version of its LibreOffice productivity suite, and announced deals with companies including Canonical to have LibreOffice replace OpenOffice.org as the default productivity suite in several Linux distributions."

An anonymous reader writes "Google leaves no stone unturned in its defense against Oracle's patent and copyright infringement allegations. eWEEK reports on the latest development: Google has asked the USPTO to reexamine four of the seven patents asserted by Oracle. Patent watcher and skeptic Florian Mueller believes 'the world would be a better place without those virtual machine patents,' which he considers excessively broad and not really technical inventions. He also reports on a Google letter to the court, asking for permission to file a motion to throw out Oracle's copyright infringement allegations as soon as possible, without further discovery."

CWmike writes "About eight out of every 10 Web browsers run by consumers are vulnerable to attack by exploits of already-patched bugs, a security expert said Thursday. The poor state of browser patching stunned Wolfgang Kandek, CTO of Qualys, which presented data from the company's free BrowserCheck service Wednesday at RSA. 'I really thought it would be lower,' Kandek said. BrowserCheck scans Windows, Mac and Linux machines for vulnerable browsers, as well as up to 18 browser plug-ins, from Adobe's Flash to Windows Media Player. When browsers and plug-ins are tabulated together, between 90% and 65% of all consumer systems scanned with BrowserCheck since June 2010 reported at least one out-of-date component. In January 2011, about 80% of the machines were vulnerable. The most likely plug-in to require a patch: same as last year, Oracle's Java."

GMGruman writes "Oracle's imposition of fees for some OpenOffice capabilities caused some of the venerable open source office suite's creators to head out on their own and create LibreOffice as a truly free OSS tool. InfoWorld's Neil McAllister reviews the two OSS productivity tools side by side to figure out where they differ, and whether you can jettison Oracle's OpenOffice safely for the fully free LibreOffice."

angry tapir writes "Google is developing a set of extensions for Java that should aid in better securing Java programs against buffer overflow attacks. Google has announced that it open sourced a project that its engineers were working on to add a new functionality into Java called Contracts, or Design-By-Contract. 'Contracts exist to check for programmer error, not for user error or environment failures. Any difference between execution with and without runtime contract checking (apart from performance) is by definition a bug. Contracts must never have side effects.'"

GMGruman writes "Oracle has steadily provoked the open source community since its acquisition of Sun, raising the question of whether the move will simply destroy Sun. But as Paul Krill observes, Oracle has been steadfast in upgrading Sun-derived technologies — and making them profitable, which should mean they will stick around a long time."

An anonymous reader writes "Here we go again: Just like the recently-reported PHP Floating Point Bug causes servers to go into infinite loops when parsing certain double-precision floating-point numbers, Sun/Oracle's JVM does it, too. It gets better: you can lock up a thread on most servers just by sending a particular header value. Sun/Oracle has known about the bug for something like 10 years, but it's still not fixed. Java Servlet containers are patching to avoid the problem, but application code will still be vulnerable to user input."

An anonymous reader writes "Ruby/RoR in NetBeans made headlines three years ago, but after Sun was acquired by Oracle there where fears that support for dynamic languages would suffer, as this IDE would be downsized. This has become a reality, since as of version 7, NetBeans will no longer support Ruby."