Laxitive writes "Virtualization systems currently have a pretty easy time oversubscribing CPUs (running lots of VMs on a few CPUs), but have had a very hard time oversubscribing memory. GridCentric, a virtualization startup, just posted on their blog a video demoing the creation of 16 one-gigabyte desktop VMs (running X) on a computer with just 5 gigs of RAM. The blog post includes a good explanation of how this is accomplished, along with a description of how it's different from the major approaches being used today (memory ballooning, VMWare's page sharing, etc.). Their method is based on a combination of lightweight VM cloning (sort of like fork() for VMs) and on-demand paging. Seems like the 'other half' of resource oversubscription for VMs might finally be here."

c0mpliant writes "The Irish government has invested a further €5 million, after already having invested €5 million one year ago, in a new system of fiber optics which heralds an era of virtualization of fiber networks, using color coding to enable multiple fiber providers to serve businesses and homes, often on a single strand of fiber. The technology, which has already sparked interest from companies such as BT and IBM, is already in its first phase and boasts an impressive 2.5 terabytes capacity, double the capacity of the London phone system. The company behind the technology, Intune Technology, is comprised of a group of ex-UCD photonics researchers and has been around since 1999 and are based in Dublin. The project is set to be completed by 2020."

nk497 writes "Microsoft has said that nearly half of machines running Windows 7 are using the 64-bit version, up from just 11% of PCs running Vista. The 32-bit version is limited to 4GB RAM, while the 64-bit version allows 192GB, as well as added security and virtualization capabilities. While Microsoft is pushing 64-bit as a way to gain performance in the OS, it earlier this year advised users to install the 32-bit version of Office 2010, 'because currently many common add-ins for Office will not function in the 64-bit edition.'"

The Opposable Thumbs blog has an interview with Jerome McDonough of the University of Illinois, who is involved with the Preserving Virtual Worlds project. The goal of the project is to recognize video games as cultural artifacts and to make sure they're accessible by future generations. Here McDonough talks about some of the technical difficulties in doing so: "Take, for example, Star Raiders on the Atari 2600. If you're going to preserve this, you've got a couple of problems. The first is that it is on a cartridge that is designed to work on a particular system that is no longer manufactured. And as long as you've got a hardware dependency there, you're really not going to be able to preserve this material very long. What we have been looking at is how feasible is it for things that fundamentally all have some level of hardware dependency there — even Doom has dependencies on DLLs with an operating system, and on particular chipsets and architectures for playing. How do you take that and turn it into something that isn't as dependent on a particular physical piece of hardware. And to do that, you need information about that platform. You need technical specifications that allow you to basically reproduce a virtualization that may enable you to run the software in its original form in the future. So what we're trying to do is preserve not only the games, but preserve the knowledge that you would need to create a virtualization platform to play the game."

kthreadd writes "The LLVM project is now working on a debugger called LLDB that's already faster than GDB and could be a possible alternative in the future for C, C++, and Objective-C developers. With the ongoing success of Clang and other LLVM subprojects, are the days of GNU as the mainstream free and open development toolchain passé?" LLVM stands for Low Level Virtual Machine; Wikipedia as usual has a good explanation of the parent project.

infoLaw passes along this excerpt from Threatpost: "Carnegie Mellon University's Computer Emergency Response Team has released a new fuzzing framework to help identify and eliminate security vulnerabilities from software products. The Basic Fuzzing Framework (BFF) is described as a simplified version of automated dumb fuzzing. It includes a Linux virtual machine that has been optimized for fuzz testing and a set of scripts to implement a software test."

Julie188 writes "Details on this are admittedly sketchy, but both Red Hat and Xen.org have gone on record promising that some kind of support for the Xen hypervisor is forthcoming for Fedora users. As we know, on Monday, Fedora 13 was released, chock full of features to appeal to business users. One of the ballyhooed improvements to 13 is virtualization — meaning KVM and only KVM — for Red Hat. Xen was dropped from Fedora a few releases ago and it hasn't come back in 13, except that 13 still supports Xen guests. Meanwhile, 'work is underway in Xen.org to add platform support to Fedora 13 post-release,' promises Xen.org's Ian Pratt."

Degrees writes "Although Novell rejected the bid from Elliott Associates earlier this year, reports now indicate Novell has decided to embrace the inevitable. According to the Wall Street Journal (sub. required): 'As many as 20 companies have expressed interest in Novell, according to people familiar with the matter. Most, if not all, of the companies expected to lodge serious bids are private equity firms. ... Novell has four separate businesses, each of which could be attractive to a rival technology company. However, it's unlikely that a tech company would bid for all of Novell, these people said. Private equity firms, however, could break up Novell and either sell off the pieces or run them as standalone businesses.' Are there any companies that don't have an enterprise grade Linux distribution, and ought to? Ditto workstation management, directory services, legacy email, and virtualization suite?"

darthcamaro writes "Enterprise Linux kernels, from Red Hat or Novell, don't change version numbers inside of a release, right? While that has been the case for the last decade of Red Hat and Novell releases, Novell is breaking the mold with SUSE Linux Enterprise 11 service pack one. Instead of backporting new kernel features to the kernel they originally shipped with — which maintains software and hardware vendor certification — they've re-based their Linux kernel version altogether. '"There were some things that led us to update the kernel itself, which is something that we normally don't do: Neither SLES 9 or SLES 10 got a kernel update," Markus Rex, director of open platform solutions at Novell, told InternetNews.com. "But in this particular case, after deep discussion with our ISV and hardware vendors that gave us certifications, we felt in this case a kernel update was the appropriate step to take.'"

Pickens writes "eWeek reports that Microsoft has announced it will pay $200 million to settle a patent-infringement suit against it by VirnetX, which alleged that the software giant infringed on its patents related to communications, virtualization and collaboration technology. This payment represents a substantial markup from the $105.7 million that a Texas jury awarded in March when it found that Microsoft had infringed on two US patents held by VirnetX. Microsoft will license VirnetX technology for its own products. 'We believe that this successful resolution of our litigation with Microsoft will allow us to focus on the upcoming pilot system that will showcase VirnetX's automatic Virtual Private Network technology,' says Kendall Larsen, VirnetX Holding Corp.'s CEO. East Texas courts have a reputation as a good place to pursue intellectual property suits against larger corporations. While many of these cases seem to be settled out of court — or dismissed as totally frivolous — recent lawsuits such as those leveled by i4i and VirnetX are notable for at least extending to the Big Judgment phase."

schliz writes "NCSU researchers are attempting to address today's 'blind trust' of virtualization with new security techniques that 'guarantee' malware does not infect hypervisors. Their HyperSafe software uses the write-protect bit on hypervisor hardware, as well as a technique called restricted pointer indexing, which characterizes the normal behavior of the system and prevents any deviation. A proof-of-concept prototype has been tested on BitVisor and Xen, in research that will be presented (PDF) at an IEEE conference today."

Prof. Nix writes "I have been given the opportunity to redesign the Linux course for the community college I work for. This course will be taking students from the 'What's Lee-nux?' stage to (hopefully) Linux+ Certifiable in about three to four months. However, one issue I haven't solved is finding a semi-stable, highly portable, and readily accessible platform the students may pound on, and have root access, independently of their peers. The powers-that-be have already vetoed any sort of server environment accessible from off campus. We've already tried live USB drives, but we ran into many issues with non-supported hardware on students' home computers. So I'm left with the idea of virtual machines run from flash drives. My ultimate goal is to have some sort of portable system that students can use with equal ease on lab systems and personal laptops — regardless of hardware. Preferably this system would be installable on a 4GB flash drive and run an Ubuntu- or Fedora-derived OS. So I ask the people who have been in the trenches a lot longer than I — what distros should I look at?"

An anonymous reader writes "We have approximately 20 workstations which all have different hardware specs. Every workstation has two monitors and generally runs either Ubuntu or Windows. I had started using Clonezilla to copy the installs so we could deploy new workstations quickly and easily, when we have hardware failures or the like, but am struggling with Windows requiring new drivers to be installed for all new hardware. Obviously we could be booting into Ubuntu and then load a Windows virtual machine after that, but I'd prefer not to have the added load of a full GUI underneath Windows — we want maximum performance possible. And I don't think the multi-monitor support would work. Is it possible to have a very basic virtual machine beneath to provide hardware consistency whilst still allowing multi-monitor support? Does anyone have any experience with a technique like this?"

miller60 writes "As cloud computing gains traction, some Wall Street firms running armadas of servers to power high-frequency trading operations are contemplating leasing out their excess computing capacity after the trading day ends at 4 p.m. 'Once 4:30 rolls around, we don't need those machines,' said one CTO of a market data firm. 'There may be an opportunity there.' A similar revelation led to the creation of the cloud computing operation at Amazon.com, which built its infrastructure to handle peak Christmas-season loads that lasted just a few weeks each year."

Trailrunner7 writes "Joanna Rutkowska, a security researcher known for her work on virtualization security and low-level rootkits, has released a new open-source operating system meant to provide isolation of the OS's components for better security. The OS, called Qubes, is based on Xen, X and Linux, and is in a basic, alpha stage right now. Qubes relies on virtualization to separate applications running on the OS and also places many of the system-level components in sandboxes to prevent them from affecting each other. 'Qubes lets the user define many security domains implemented as lightweight virtual machines (VMs), or 'AppVMs.' E.g. users can have 'personal,' 'work,' 'shopping,' 'bank,' and 'random' AppVMs and can use the applications from within those VMs just like if they were executing on the local machine, but at the same time they are well isolated from each other. Qubes supports secure copy-and-paste and file sharing between the AppVMs, of course.'" Xen's also just reached 4.0; some details below.

An anonymous reader writes "This week, Microsoft published a patch that allows Windows XP Mode to run on PCs without hardware-assisted virtualization. Which begs the question: Why the bizarro requirement in the first place? Was it an honest attempt to deliver an 'optimal' user experience? Or simply a concession to the company's jilted lover, Intel Corporation — 'a kind of apology for royally screwing up with the whole Windows Vista “too fat to fit” debacle,' as the blog post puts it."

CWmike writes "Microsoft has announced service packs for Windows 7 and Windows Server 2008 R2, but declined to set a release date or a schedule for getting a beta in users' hands. A company spokesman said Windows 7 Service Pack 1 (SP1) will primarily contain 'minor updates,' including patches and hotfixes that will have been delivered earlier via the Windows Update service, rather than new features. One of the latter: an updated Remote Desktop client designed to work with RemoteFX, the new remote-access platform set to debut in SP1 for Windows Server 2008 R2. Windows Server 2008 R2 will also be upgraded to SP1, Microsoft said, presumably at the same time as Windows 7 since the two operating systems share a single code base. Besides RemoteFX — which Microsoft explained Wednesday in an entry on the Windows virtualization team's blog — Server 2008 R2 will also include a feature dubbed 'Dynamic Memory,' which lets IT staff adjust guest virtual machines' memory on the fly. Microsoft did not spell out a timetable for the service packs, saying only that it would provide more information as release milestones approach."

Coop's Troops writes "An exploit writer at Core Security Technologies has discovered a serious vulnerability that exposes users of Microsoft's Virtual PC virtualization software to malicious hacker attacks. The vulnerability, which is unpatched, essentially allows an attacker to bypass several major security mitigations — DEP, SafeSEH and ASLR — to exploit the Windows operating system. As a result, some applications with bugs that are not exploitable when running in a not-virtualized operating system are rendered exploitable if running within a guest OS in Virtual PC."

FrankPoole writes "CRN takes a look at the past five years of Microsoft's acquisition history, which totals $13 billion and more than 7,000 new employees, and highlights 10 deals and how they've affected the software giant. While some larger acquisitions stand out for better or worse, such as Danger and aQuantive, there are some smaller, blink-and-you'll-miss-it deals that have proved pivotal for Microsoft's push into new areas such as virtualization. And Microsoft's recent acquisition track record may lend credence to the heavy criticism levied against the company by former employees like Dick Brass."

bridges writes "The V3VEE project has announced the release of version 1.2 of the Palacios virtual machine monitor following the successful testing of Palacios on 4096 nodes of the Sandia Red Storm supercomputer, the 17th-fastest in the world. The added overhead of virtualization is often a show-stopper, but the researchers observed less than 5% overhead for two real, communication-intensive applications running in a virtual machine on Red Storm. Palacios 1.2 supports virtualization of both desktop x86 hardware and Cray XT supercomputers using either AMD SVM or Intel VT hardware virtualization extensions, and is an active open source OS research platform supporting projects at multiple institutions. Palacios is being jointly developed by researchers at Northwestern University, the University of New Mexico, and Sandia National Labs." The ACM's writeup has more details of the work at Sandia.