Sign up for our Technology Newsletter 
Is Changing Your Password Often A Good Idea?
Comments Off on Is Changing Your Password Often A Good Idea?
Carnegie Mellon University professor Lorrie Cranor, who is the US FTC’s technology guru, has debunked a myth that it is a good idea to change your password often.
Talking to Ars Technica she said that while frequent password changes can lock hackers out they make make security worse.
She told the BSides security conference in Las Vegas that frequent password changes do little to improve security and very possibly make security worse by encouraging the use of passwords that are more susceptible to cracking.
A study published in 2010 by researchers from the University of North Carolina at Chapel Hill more or less confirmed her views. The researchers obtained the cryptographic hashes to 10,000 expired accounts that once belonged to university employees, faculty, or students who had been required to change their passcodes every three months. Researchers received data not only for the last password used but also for passwords that had been changed over time.
By studying the data, the researchers identified common techniques account holders used when they were required to change passwords. A password like “tarheels#1″, for instance (excluding the quotation marks) frequently became “tArheels#1″ after the first change, “taRheels#1″ on the second change and so on. Or it might be changed to “tarheels#11″ on the first change and “tarheels#111″ on the second. Another common technique was to substitute a digit to make it “tarheels#2″, “tarheels#3″, and so on.
“The UNC researchers said if people have to change their passwords every 90 days, they tend to use a pattern and they do what we call a transformation. They take their old passwords, they change it in some small way, and they come up with a new password.”
The researchers used the transformations they uncovered to develop algorithms that could predict changes with great accuracy.
A separate study from researchers at Carleton University showed that frequent password changes hamper attackers only minimally and probably not enough to offset the inconvenience to end users.
Courtesy-Fud
Microsoft Surprises And Goes Ubuntu
Microsoft has announced a partnership with Canonical which means it is possible to install Canonical’s Ubuntu on Windows 10.
The software is available to all through the Developer Mode on Windows Settings and it is not a virtual machine. Microsoft will allow native ELF binaries, written for Linux, to run under Windows through a translation layer. It is a bit like the WINE project, which runs native Windows binaries on Linux.
Normally you have to recompile Linux software under Cygwin, or run a Linux virtual machine to get it to run in Windows.
Microsoft claims the new feature offers a considerable advantage in performance and storage space. It also includes the bulk of Ubuntu’s packages, installed via the apt package manager directly from Canonical’s own repositories.
The big question is why. Redmond does not appear to be targeting the server market with this launch but desktop and laptop users. It appears to be mainly of use to developers, who need access to Linux software but for whatever reason wish to keep Windows 10 as their main OS.
Canonical’s Dustin Kirkland said the Windows Subsystem for Linux nearly has equivalent performance to running the software natively under Linux. The only downside is the software is free, but not open source.
General release is scheduled for later this year as part of the Windows 10 Anniversary Update, which will also include support for running Windows Universal Apps on the Xbox One, turning any Xbox One into a development system, the ability to disable V-sync for games installed through the Windows software storefront, ad-blocking support by default in Microsoft Edge, and improved stylus support.
Courtesy-Fud
Acer Shifts Focus To IoT
Acer is still churning out PCs, but the Taiwanese vendor is far more bullish about the Internet of Things (IoT), a market the company doesn’t want to miss out on.
Acer held a news conference not for a new consumer product, but to promote an upcoming miniature PC that will be sold to developers.
The PC, called the aBeing One, will arrive in the third quarter, and is aimed at developers working in the IoT area. It’s designed to connect to smart home and wearable products, and act as a hub that can analyze incoming data from the devices.
The PC vendor has spoken to many IoT companies looking for an affordable hardware system they can develop on, said Robert Wang, a general manager with Acer.
“Fast-moving IoT developers keep running into this issue,” he said after Acer’s news conference. “Now they can buy from us.”
It’s a big change for the vendor, given that it once focused on selling consumer notebooks. However, with PC sales sagging and competition rife in the mobile devices area, the company has been shifting toward enterprise products.
That emphasis was apparent at this week’s Computex show in Taipei. Acer notebooks and tablets were still on display, but equal billing was given to itscloud computing business, which is starting to power IoT devices, not only from Acer, but also its clients.
In addition, Acer is hoping to pave the way for more third-party IoT devices. It has partnered with Canonical to install a version of Ubuntu on its aBeing product, so that the hardware can serve Ubuntu developers working on smart connected gadgets.
RedHat And Canonical Discuss Linux 4.0
Comments Off on RedHat And Canonical Discuss Linux 4.0
Red Hat has been telling everyone its plans to integrate the latest Linux 4.0 kernel into its products.
In a statement, a spokesman told us, “Red Hat’s upstream community projects will begin working with 4.0 almost immediately; in fact, Fedora 22 Alpha was based on the RC1 version of the 4.0 kernel.
“From a productization perspective, we will keep an eye on these integration efforts for possible inclusion into Red Hat’s enterprise portfolio.
“As with all of our enterprise-grade solutions, we provide stable, secure and hardened features, including the Linux kernel, to our customers – once we are certain that the next iterations of the Linux kernel, be it 4.0 or later, has the features and maturity that our customer base requires, we will begin packaging it into our enterprise portfolio with the intention of supporting it for 10 years, as we do with all of our products.”
Meanwhile, Canonical Head Honcho Mark Shuttleworth has confirmed that Linux Kernel 4.0 should be making its debut in Ubuntu products before the end of the year.
In an earlier note to The INQUIRER, Shuttleworth confirmed that the newly released kernel’s integration was “likely to be in this October release.”
The news follows the release of version 4.0 of the Linux kernel in a flurry of what T S Eliot would describe as “not with a bang but a whimper”.
Writing on the Linux Kernel Mailing List on Sunday afternoon, Linux overlord Linus Torvalds explained that the new version was being released according to schedule, rather than because of any dramatic improvements, and because of a lack of any specific reason not to.
“Linux 4.0 was a pretty small release in linux-next and in final size, although obviously ‘small’ is relative. It’s still over 10,000 non-merge commits. But we’ve definitely had bigger releases (and judging by linux-next v4.1 is going to be one of the bigger ones),” he said.
“Feature-wise, 4.0 doesn’t have all that much special. Much has been made of the new kernel patching infrastructure, but realistically that wasn’t the only reason for the version number change. We’ve had much bigger changes in other versions. So this is very much a ‘solid code progress’ release.”
Come to think of it, it is very unlikely that T S Eliot would ever have written about Linux kernels, but that’s not the point.
Torvalds, meanwhile, explained that he is happier with releasing to a schedule rather than because of any specific feature-related reason, although he does note that there have been four billion code commits, and Linux 3.0 was released after the two billion mark, so there’s a nice symmetry there.
In fact, back in 2011 the version numbering of the Linux kernel was a matter of some debate, and Torvalds’ lacklustre announcement seems to be pre-empting more of the same.
In a subsequent post Torvalds jokes, “the strongest argument for some people advocating 4.0 seems to have been a wish to see 4.1.15 – because ‘that was the version of Linux Skynet used for the T-800 Terminator.’”
SUSE Goes OpenStack Cloud 5
SUSE has released OpenStack Cloud 5, the latest version of the its infrastructure-as-a-service private cloud distro.
Version 5 adds the OpenStack brand front and centre, and its credentials are based on the latest Juno build of the OpenStack open source platform.
This version includes enhanced networking flexibility, with additional plug-ins available and the addition of distributed virtual routing. This enables individual computer nodes to handle routing tasks together, or if needs be, clustering together.
Increased operational efficiency comes in the form of a new seamless integration with existing servers running outside the cloud. In addition, log collection is centralized into a single view.
As you would expect, SUSE OpenStack 5 is designed to fit perfectly alongside the company’s other products, including the recently launched Suse Enterprise Storage and Suse Linux Enterprise Server 12 as well as nodes from earlier versions.
Deployment has also been simplified as part of a move to standardise “as-a-service” models.
Also included is the company’s new Sahara data processing project designed to run Hadoop and Spark on top of OpenStack without degradation. MapR has released support for its own service by way of a co-branded plug-in.
“Furthering the growth of OpenStack enterprise deployments, Suse OpenStack Cloud makes it easier for customers to realise the benefits of a private cloud, saving them money and time they can use to better serve their own customers and business,” said Brian Green, managing director, UK and Ireland, at Suse.
“Automation and high availability features translate to simplicity and efficiency in enterprise data centers.”
Suse OpenStack Cloud 5 becomes generally available from today.
Dell Debuts Ubuntu Based Mobile Workstation
Comments Off on Dell Debuts Ubuntu Based Mobile Workstation
Dell has unleashed a mobile workstation aimed at developers, designed to be the “beast” to the already available XPS 13 ultra-mobile system “beauty”.
The Precision M3800 was previously available only with Microsoft Windows 8.1, but the new Precision M3800 Developer Edition will ship with the Ubuntu 14.04 Long Term Support Linux distro.
The developer version was unveiled by Barton George, Dell’s director of developer programmes, who talked about the company’s “beauty and the beast” strategy for Linux-powered PCs to produce an ultra-portable laptop as the XPS 13 and then a more capable machine.
Work on making the Precision M3800 a more Ubuntu-friendly machine started soon after the XPS 13 release thanks to developer Jared Dominguez, who improved the code in his personal time and put together instructions on how to run the OS on the machine.
After listening to “tremendously positive” feedback, George said that Dell has now officially added a Ubuntu 14.04 LTS customisation option to the company’s official online shop.
The Precision M3800 Developer Edition weighs 1.88kg, and is less than 18mm thick. It runs a 4th-generation Intel Core i7 quad-core CPU coupled with an Nvidia Quadro K1100M GPU, 16GB of RAM and a 4K Ultra HD screen option.
Dominguez explained that there are still problems with Ubuntu support for the Precision M3800 hardware as the distro shipped with the first M3800 units doesn’t include support for Thunderbolt ports.
The updated kernel of Ubuntu 14.04.2 will add “some” Thunderbolt support, however, thanks to the hardware-enablement stack in Ubuntu, the developer said.
RHEL Finally Available On IBM’s Power8
Comments Off on RHEL Finally Available On IBM’s Power8
IBM has made the Power8 version of the latest Red Hat Enterprise Linux (RHEL) beta available through its Power Development Platform (PDP) as the firm continues to build support for its Power systems.
IBM and Red Hat announced in December that RHEL 7.1 was adding support for the Power8 processor in little endian instruction format, as the beta release was made available for testers to download.
This version is available for developers and testers to download from today through the IBM PDP and at IBM Innovation Centres and Client Centres worldwide, IBM announced on its Smarter Computing blog.
“IBM and Red Hat’s collaboration to produce open source innovation demonstrates our commitment to developing solutions that efficiently solve IT challenges while empowering our clients to make their data centres as simple as possible so they can focus on core business functions and future opportunities,” said Doug Balog, general manager for Power Systems at IBM’s Systems & Technology Group.
The little endian support is significant because IBM’s Power architecture processors are capable of supporting little endian and big endian instruction formats. These simply reflect the order in which bytes are stored in memory.
The Power platform has long had Linux distributions and applications that operate in big endian mode, but the much larger Linux ecosystem for x86 systems uses little endian mode, and supporting this in Red Hat makes it much easier to port applications from x86 to Power.
Suse Linux Enterprise Server 12 launched last year with little endian support for the Power8 processor, as did Canonical’s Ubuntu 14.04 LTS.
However, Red Hat and Suse are understood to be continuing to support their existing big endian releases on Power for their full product lifecycles.
IBM sold off its x86 server business to Lenovo last year, and has focused instead on the higher value Power Systems and z Systems mainframes.
In particular, the firm has touted the Power Systems as more suitable for mission critical workloads in scale-out environments like the cloud than x86 servers, and has been forging partnerships with firms such as Red Hat through its OpenPower Foundation.
Is RedHat Being Open?
Red Hat has responded to claims that its implementation of Openstack isn’t as open as it should be.
A report at the Wall Street Journal this week suggested that Red Hat was blocking customers from using alternatives to the bespoke version of Openstack that it offers.
Red Hat provides Openstack with extended support by the company, however in spirit of open source, users should be entitled to use another vendor’s Openstack software, the generic Openstack, or create their own fork.
In reality though, the Wall Street Journal report suggests that Red Hat customers have been advised that Red Hat will not support mixed vendor software, that it has claimed it would cost the company too much to support multiple Openstack distributions and that Red Hat Linux and Red Hat Openstack are too closely intertwined to be separated.
Openstack’s open character is part of what makes it what it is, it’s embedded in the name, and Red Hat has been quick to distance itself from the report, though it does hedge a bit.
In a blog post, Paul Cormier, president of the company’s Products and Technologies division said, “Red Hat believes the entire cloud should be open with no lock-in to proprietary code. Period. No exceptions. Lock-in is the antithesis of open source, and it goes against everything Red Hat stands for.”
However, he went on to warn, “[Red Hat Enterprise Linux OpenStack Platform] requires tight feature and fix alignment between the kernel, the hypervisor, and Openstack services. We have run into this in actual customer support situations many times.”
In other words, its advice to customers is seemingly ‘of course you can do it, but you’d have to be a bit daft’.
He went on to explain, “Enterprise-class open source requires quality assurance. It requires standards. It requires security. Openstack is no different. To cavalierly ‘compile and ship’ untested Openstack offerings would be reckless. It would not deliver open source products that are ready for mission critical operations and we would never put our customers in that position or at risk.”
Which suggests that Red Hat will let you use your own version, unless it’s not happy with it, in which case it won’t.
In a swipe at HP, Cormier concluded by attacking its rival, saying, “We would celebrate and welcome competitors like HP showing commitment to true open source by open sourcing their entire software portfolio.”
HP, which recently launched its HP Helion brand for Openstack, would probably argue that it has already done this, so the war of words might just be beginning.
Ubuntu Cross-Platform Delayed
Ubuntu will not offer cross-platform apps as soon as it had hoped.
Canonical had raised hopes that its plan for Ubuntu to span PCs and mobile devices would be realised with the upcoming Ubuntu 14.04 release, providing a write-once, run-on-many template similar to that planned by Google for its Chrome OS and Android app convergence.
This is already possible on paper and the infrastructure is in place on smartphone and tablet versions of Ubuntu through its new Unity 8 user interface.
However, Canonical has decided to postpone the rollout of Unity 8 for desktop machines, citing security concerns, and it will now not appear along with the Mir display server this coming autumn.
This will apply only to apps in the Ubuntu store, and in the true spirit of open source, anyone choosing to step outside that ecosystem will be able to test the converged Ubuntu before then.
Ubuntu community manager Jono Bacon told Ars Technica, “We don’t plan on shipping apps in the new converged store on the desktop until Unity 8 and Mir lands.
“The reason is that we use app insulation to (a) run apps securely and (b) not require manual reviews (so we can speed up the time to get apps in the store). With our plan to move to Mir, our app insulation doesn’t currently insulate against X apps sniffing events in other X apps. As such, while Ubuntu SDK apps in click packages will run on today’s Unity 7 desktop, we don’t want to make them readily available to users until we ship Mir and have this final security consideration in place.
“Now, if a core-dev or motu wants to manually review an Ubuntu SDK app and ship it in the normal main/universe archives, the security concern is then taken care of with a manual review, but we are not recommending this workflow due to the strain of manual reviews.”
As well as the aforementioned security issues, there are still concerns that cross-platform apps don’t look quite as good on the desktop as native desktop versions and the intervening six months will be used to polish the user experience.
Getting the holistic experience right is essential for Ubuntu in order to attract OEMs to the converged operating system. Attempts to crowdfund its own Ubuntu handset fell short of its ambitious $20m target, despite raising $10.2 million, the single largest crowdfunding total to date.
LibreOffice Going After MS Office
February 10, 2014 by admin
Filed under Around The Net
Comments Off on LibreOffice Going After MS Office
Libreoffice 4.2 is out and is a major upgrade release.
The popular alternative to Microsoft Office has been retooled to increase compatibility with that expensive proprietary productivity applications suite, including compatibility with Visio and Publisher files.
In addition to a much improved formula process for its spreadsheet application, Libreoffice 4.2 also includes a new startup screen and improved round trip compatibility for newer formats such as .docx.
Java accessibility features are being phased out in favour of the IBM IAccessibility2 package, which will supercede the Java version in future editions.
iOS users can take advantage of the Impress Remote Control feature that allows users to control presentations from their smartphones. This feature has been available on Android for some time but now Apple fans can use it too.
Libreoffice claims that this is the biggest recoding of its office suite yet and says that it now offers better integration with Windows 7 and Windows 8, with documents grouped on the taskbar and quickview thumbnails.
The news comes after UK cabinet minister Francis Maude recently announced that Parliament will move towards using open source software for its documents, and said that interoperability improvements such as those Libreoffice has introduced will be key to ensuring that all areas of government communicate a lot more effectively than they do right now.
Libreoffice has also made contributing to continued development of the open source office suite even easier with a new code submission and review portal known as Gerrit.