Bringing you the latest news from the Linux World.
Dedicated to keeping Linux users up-to-date, with concise news for all interests
Linux in the news
All in one big page
Here is the permanent site for this page.
A quick report from the Linux Business Expo. Your editor managed to make a pass through the Linux Business Expo in Chicago on Wednesday. This LBE is somewhat smaller than the Las Vegas version, which is not entirely surprising: the Comdex event in general is quite a bit smaller. A number of fairly high-profile Linux companies (i.e. Red Hat, VA Linux) were not to be found on the exhibit floor. Nonetheless there was a good turnout, and the LBE floor was busy enough to make walking difficult. Doubtless it was helped by being physically located on the same floor as the rest of Comdex, rather than in a separate building.
A few notes from the show:
Once one got bored with Linux, the first booth one stumbled across was pushing wrist rests with a built-in telephone - something many of us were not aware of needing...
Microsoft's FrontPage back door. Most LWN readers will by now have seen the news that Microsoft's FrontPage server software, shipped with a number of versions of Windows, contains a back door deliberately inserted by a Microsoft engineer. This hole is amazing not only in its simple existence, but also in that it has been there for years. It says a lot about the security of closed-source systems; see Eric Raymond's take on the issue for one view.
Nobody would say that free software is immune from security problems. And some fear that the availability of source makes some sorts of problems easier for crackers to find. But it really is true that open source makes this sort of deliberate back door difficult to get away with. And it is almost inconceivable that a back door would remain undetected for years. (Do see, however, this week's LWN Security page for a chilling example of a deliberate back door in source-available code. And yes, Ken Thompson's paper demonstrates that there are no guarantees, no need to send the URL to us again).
Lest we laugh too much at Microsoft's expense, it is worth reflecting on the fact that Linux has vulnerabilities of its own. Open source is great, but very few people build their systems from source. Does that RPM or .deb file really contain a binary built from the source in the source package? Only your trust in the package builder can determine how you feel about that. One might assume that an engineer building packages for a Linux distributor is more strongly motivated to do the right thing than a Microsoft engineer, but that is never guaranteed. Sooner or later, somebody will probably get burned by a bad binary package. It can happen to us too.
Update on Corel Word Perfect Office 2000. Last week's mini-review of Corel's recently released Word Perfect Office 2000 product drew a fair amount of attention, and a small amount of criticism. It also got us the attention of some engineers at Corel, who were most interested in tracking down the problems that we reported.
One result of that conversation is that we owe Corel an apology for saying that Word Perfect did not show up in the GNOME menus. The reviewer simply did not look in the right place. Corel's preferred environment is KDE, of course, but they have worked hard at supporting GNOME as well. Installing WPO 2000 does, in fact, fix up the GNOME applications menu in the proper way.
Corel recognizes some residual problems with interactions with the Enlightenment window manager. The file opening problem we reported was confirmed, though it (surprisingly) has to do with files served via NFS, rather than ownership issues. Sample files have been sent back to Corel to enable them to reproduce the QuattroPro crashes.
They were unable to provide a date for a new release with fixes for the problems we (and others) have experienced. But Corel's engineers were clearly responsive, interested, and wanting to make things better. Even if the first release turns out to be a little rocky for some people (not everybody has reported problems), the indications are good that subsequent releases will be more stable.
Inside this week's Linux Weekly News:
This Week's LWN was brought to you by:
April 20, 2000