LWN.net's Journal
 
 [Most Recent Entries] [Calendar View]

Monday, December 10th, 2012

    Time Event
    2:49p
    SparkleShare 1.0 released
    Version 1.0 of the SparkleShare
    network-shared folder system has been announced.
    "SparkleShare uses the version control system Git under the hood, so
    people collaborating on projects can make use of existing infrastructure,
    and setting up a host yourself will be easy enough. Using your own host
    gives you more privacy and control, as well as lots of cheap storage space
    and higher transfer speeds.    " LWN last reviewed SparkleShare in 2010.
    5:47p
    Security advisories for Monday
    Debian has updated iceweasel (multiple vulnerabilities) and iceape (multiple vulnerabilities).

    Fedora has updated php-symfony2-HttpFoundation (F17; F16: multiple vulnerabilities) and gnome-system-log (F17: privilege escalation).

    Mageia has updated libtiff (code execution) and tor (denial of service).

    Mandriva has updated mysql (code execution).

    openSUSE has updated wireshark (multiple vulnerabilities).

    Oracle has updated mysql (code execution).

    Ubuntu has updated mysql (code execution) and gimp (code execution).

    5:58p
    An Evaluation of the Application ("App") Verification Service in Android 4.2
    NCSU Professor Xuxian Jiang has posted an assessment of
    the application verification service featured in the Android 4.2
    release. "However, based on our evaluation results, we feel this
    service is still nascent and there exists room for improvement.
    Specifically, our study indicates that the app verification service mainly
    uses an app's SHA1 value and the package name to determine whether it is
    dangerous or potentially dangerous. This mechanism is fragile and can be
    easily bypassed. It is already known that attackers can change with ease
    the checksums of existing malware (e.g., by repackaging or mutating
    it).    "
    9:49p
    Stable kernel updates
    Greg KH has released stable kernels 3.6.10,
    3.4.23 and 3.0.56. All contain important fixes throughout the tree.
    9:55p
    FSFE: European Parliament should delay vote on unitary patent
    The Free Software Foundation Europe reports that the European Parliament
    plans to vote on a "unitary patent" proposal tomorrow, December 11. The
    FSFE urges the Parliament to delay the vote until certain problems are
    addressed. "Under the current proposal, the Parliament would agree
    to give up its power to shape Europe's innovation policy. This is a dangerous
    proposition. Knowledge and innovation are crucial to our future, and we
    cannot simply delegate their management to a technocratic body such as
    the European Patent Organisation. Europe's political institutions have
    to have the final say over innovation policy. This is a responsibility
    which MEPs cannot shirk.    "
    11:12p
    Google and Facebook join forces against software patents (The H)
    A brief
    has been submitted to the US Court of Appeals; signed by Google, Facebook,
    Red Hat and several other companies; stating that the combination of an
    abstract idea and a computer should not be eligible for patent protection.
    The H takes
    a look    . "The companies argued that such bare-bones claims grant exclusive rights over the abstract idea itself with no limit on how the idea is implemented, and that granting patent protection for such claims would impair, not promote, innovation. In their 30-page brief to the US Court of Appeals for the Federal Circuit, the signatories explain that this often grants exclusive rights to people who haven't themselves contributed significantly to a development, punishing those who later create innovation and cannot market the concrete applications of these abstract ideas unless they pay royalties."

    << Previous Day 2012/12/10
    [Calendar]     		Next Day >>

LWN.net   About LJ.Rossia.org