- WLUG - wlug.mailman3.com

Fwd: consulting assistance

by Andy Stewart

If anybody has any interest in this opportunity, please contact Ralph Fasano directly at rfasano(a)risd.edu. -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

March 16, 2004

Re: [Wlug] Open source = security

by Michael Long

Thanks to everyone who replied. I am now able to explain the benefits of open source much more clearly. I have since had a very interesting followup conversation with the architect and I believe he may be starting to understand the benefit of open source. Mike

March 12, 2004

Re: [Wlug] Open source = security

by Theo Van Dinter

On Fri, Mar 12, 2004 at 11:09:37AM -0500, Michael Long wrote: > guess it is not. I was wondering how others would answer this question? I was working at RSA Security for a while, and my manager gave me the same sort of line: We make security products here, you definitely don't want that open source! <some other reference about open source being less secure> My response was along the lines of: Actually, that's _exactly_ the software I would want open source. Security through obscurity (which is what most non-open source relies on) doesn't work. He wasn't happy. <G> Anyway, yeah, "real" security people want as many people looking at their code/algorithm/etc as possible to make sure it's secure in and of itself. There's reasons that things like MD5, SHA1, AES, etc, all went through a rigorous review process before they're made a "standard". -- Randomly Generated Tagline: s Blind, Lingerie makes Great Braille!

March 12, 2004

Re: [Wlug] Open source = security

by orbitz＠ezabel.com

The security of an application is not hidden in a trick in the code but the algorithm it is using. Being able to see the code (assuming it were bug free) should never reveal a bug in the security framework. Obfuscation is not security. On Fri, 12 Mar 2004 11:09:37 -0500 (EST) "Michael Long" <mlong(a)datalong.com> wrote: > Hi, > > During a discussion with an application architect, while trouble shooting SQL > Servers "security" behavior, he asked how an application can be more secure > when anyone can view the security related code. I thought this was self > evident, but I guess it is not. I was wondering how others would answer this > question? > > Thanks, > Mike > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

March 12, 2004

Re: [Wlug] Open source = security

by Scott Venier

It's all about auditing. The more people who can look at the code can find AND FIX any bugs. And the bugs do get fixed. For historical evidence of that look at how quickly the Linux kernel was fixed when the "teardrop" bug was revealed. It took Windows much longer to release a patch. There are probably more recent examples, but that's the first one that comes to mind that effected both open and closed source software. This is the excat same reason that professional software developers have code reviews. Many eyes make all problems simple. Scott Michael Long said: > Hi, > > During a discussion with an application architect, while trouble shooting > SQL > Servers "security" behavior, he asked how an application can be more > secure when > anyone can view the security related code. I thought this was self > evident, but I > guess it is not. I was wondering how others would answer this question? > > Thanks, > Mike > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

March 12, 2004

Open source = security

by Michael Long

Hi, During a discussion with an application architect, while trouble shooting SQL Servers "security" behavior, he asked how an application can be more secure when anyone can view the security related code. I thought this was self evident, but I guess it is not. I was wondering how others would answer this question? Thanks, Mike

March 12, 2004

RE: [Wlug] Fwd: Software Freedom Day: August 28, 2004

by Martin, Eric

Gentoo has a live cd for mac, although it's not gui based...also there's a bit of config for oldworld macs... -----Original Message----- From: doug waud [mailto:douglas.waud@umassmed.edu] Sent: Thursday, March 11, 2004 10:59 AM To: andystewart(a)comcast.net; Worcester Linux Users Group Subject: Re: [Wlug] Fwd: Software Freedom Day: August 28, 2004 Hi all Andy Stewart wrote: > Subject: > Software Freedom Day: August 28, 2004 snip,snip > We will be handing out printed materials and CDs with good > quality FOSS, like TheOpenCD and Knoppix. ..... > Our role will be to help coordinate the event and > provide ..... > high quality (pressed) CDs that local > teams can give out to the general public on Software Freedom Day. Andy, at our meetings, you have asked what we might do with our accumulated $. This FOSS initiative makes me wonder whether making a lot of Knoppix discs which we could all carry around and hand out when queried about Linux, might be a good use of our resources. It would strike me as being right on target with our objective of proselytizing. I, for one, continually run into people curious about Linux and free software in general. If I could hand them a Knoppix disk and say "Here, see for yourself!" I think I would get good bang for buck. In particular the term "free" would sink in well. Any thoughts? doug PS A lot of non Linux users use MACS. Does Knoppix work there/is there a MAC Knoppix alternative? It would be a shame to miss this constituency; MAC users may be human too! :-) _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

March 11, 2004

Re: [Wlug] Fwd: Software Freedom Day: August 28, 2004

by doug waud

Hi all Andy Stewart wrote: > Subject: > Software Freedom Day: August 28, 2004 snip,snip > We will be handing out printed materials and CDs with good > quality FOSS, like TheOpenCD and Knoppix. ..... > Our role will be to help coordinate the event and > provide ..... > high quality (pressed) CDs that local > teams can give out to the general public on Software Freedom Day. Andy, at our meetings, you have asked what we might do with our accumulated $. This FOSS initiative makes me wonder whether making a lot of Knoppix discs which we could all carry around and hand out when queried about Linux, might be a good use of our resources. It would strike me as being right on target with our objective of proselytizing. I, for one, continually run into people curious about Linux and free software in general. If I could hand them a Knoppix disk and say "Here, see for yourself!" I think I would get good bang for buck. In particular the term "free" would sink in well. Any thoughts? doug PS A lot of non Linux users use MACS. Does Knoppix work there/is there a MAC Knoppix alternative? It would be a shame to miss this constituency; MAC users may be human too! :-)

March 11, 2004

Re: [Wlug] Softpro to close Marlboro, MA store...

by jeff

Andy Stewart wrote: >>From Softpro - FYI: > > ------------------------------------------------------------------------ > Marlborough Softpro to Close - Last Day is March 20. > Softpro Books Waltham will Serve as Single Location > ------------------------------------------------------------------------ > It is with great sadness that we've decided to consolidate our > operations into our one Waltham store. > > The economy has taken its toll on our Marlborough location which we opened > with great optimism over 4 years ago. Our last day will be Sat., March 20. > Between now and then, we're selling all of our Marlboro inventory at 25% off > (sorry, no special orders). Gift certificates will continue to be honored > at our Waltham store. > > We apologize for any inconvenience to our Marlborough area customers and > hope that you will visit us in our Waltham store, conveniently located on > Route 128/95 at the Totten Pond Road exit. For directions, please visit our > web site (www.softpro.com/info.html) or call us at 781-487-2220. > yup yup. it's all true. stopped in there tonight. the books are literally flying off the shelves so, do those guys a favor - stop by.. at least buy 2600 mag or something. 10% wlug discount + 25% store closing discount? don't know if that applies. what a bummer man. seriously. that store rocks. anyway... on with life... -jeff

March 11, 2004

Fwd: Software Freedom Day: August 28, 2004

by Andy Stewart

-- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

March 11, 2004