Comments for Open Source Security http://www.ratliff.net/blog A blog about open source and security and open source security Sat, 17 May 2008 03:59:50 +0000 http://wordpress.org/?v=2.5.1 Comment on Not with a bang, but a whimper by Have you ever kissed a girl? » Snoopy’s Home http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3468 Have you ever kissed a girl? » Snoopy’s Home Sun, 04 May 2008 01:55:41 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3468 [...] source camp, instead it’s more like they just want to take some advantage. OpenSolaris is slow in development progress, and there are complains. For MySQL, they announed some of the new features [...] [...] source camp, instead it’s more like they just want to take some advantage. OpenSolaris is slow in development progress, and there are complains. For MySQL, they announed some of the new features [...]

]]> Comment on Not with a bang, but a whimper by Thoughts by Ted » Blog Archive » What Sun was trying to do with Open Solaris http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3467 Thoughts by Ted » Blog Archive » What Sun was trying to do with Open Solaris Wed, 23 Apr 2008 14:18:31 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3467 [...] So that explains why it’s take three long years to try to get basic open source development tools (such as putting Open Solaris source code in a distributed SCM located outside of the Sun firewall) for Open Solaris. It was never was Sun’s intention to try to promote a kernel engineering community, or at least, it was certainly not a high priority for them to do so. This can be shown by the fact that as of this writing they still are using the incredibly clunky requestor/sponsor system for getting patches into Solaris; setting up a git or mercurial servier is not rocket science. This lack is why Linux gets more contributions while brushing his teeth than Open Solaris gets in a week. [...] [...] So that explains why it’s take three long years to try to get basic open source development tools (such as putting Open Solaris source code in a distributed SCM located outside of the Sun firewall) for Open Solaris. It was never was Sun’s intention to try to promote a kernel engineering community, or at least, it was certainly not a high priority for them to do so. This can be shown by the fact that as of this writing they still are using the incredibly clunky requestor/sponsor system for getting patches into Solaris; setting up a git or mercurial servier is not rocket science. This lack is why Linux gets more contributions while brushing his teeth than Open Solaris gets in a week. [...]

]]> Comment on Not with a bang, but a whimper by Simon Phipps http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3273 Simon Phipps Thu, 28 Feb 2008 15:16:45 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3273 > previous versions of documents (SCA and roadmap) just disappearing, Just so you know, I have now made sure that all previous versions of the SCA are available at http://www.sun.com/software/opensource/contributor_agreement.jsp > previous versions of documents (SCA and roadmap) just disappearing,

Just so you know, I have now made sure that all previous versions of the SCA are available at http://www.sun.com/software/opensource/contributor_agreement.jsp

]]> Comment on Not with a bang, but a whimper by Watching the ripples » Untangled http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3258 Watching the ripples » Untangled Thu, 21 Feb 2008 21:03:11 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3258 [...] sense that anything would change. There were a few blog mentions from people outside the community (Emily Ratliff on the 14th, rippling to Michael Dolan on the 15th, which in turn rippled to Jim Grisanzio on the [...] [...] sense that anything would change. There were a few blog mentions from people outside the community (Emily Ratliff on the 14th, rippling to Michael Dolan on the 15th, which in turn rippled to Jim Grisanzio on the [...]

]]> Comment on Not with a bang, but a whimper by David Comay http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3243 David Comay Wed, 20 Feb 2008 06:35:06 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3243 Emily, as Simon says I believe it's up to each facility. At the Silicon Valley OpenSolaris group meeting, which does meet at a Sun facility in Santa Clara, there is no NDA required to be signed. In fact, the last couple times I attended there was no formal sign in at all. I don't know how long the transition will take - I could make excuses as to why it's taken so long but I'm sure you don't want to hear those. Instead, I believe that substantial progrss has been made on a number of fronts. I believe the primary Merucurial repository will be out in the next several months along with at least one of the other consolidations. All of the work for the Indiana project is already being done completely out in the open and there are a number of outside contributors integrating changes directly with any sponsor. And there has finally been progress on a bug tracking system, something which has been tricky since Sun has its own internal bug system which is used for previous versions of Solaris and coordinating those will require an effort. If you look at the mail archives for opensolaris-arc@opensolaris.org, you'll see the architectural review for almost all of the work being done for OpenSolaris is completely out in the open (yes, there are still an occasional closed case but those either are due to clerical mistake or for the rare but real proprietary case.) Perhaps it's a difference in seeing things as being half-full versus half-empty. I'm as frustrated as anyone that certain things have taken as long as they have but I believe strongly that there will be significant improvements seen on a number of fronts this year. Emily, as Simon says I believe it’s up to each facility. At the Silicon Valley OpenSolaris group meeting, which does meet at a Sun facility in Santa Clara, there is no NDA required to be signed. In fact, the last couple times I attended there was no formal sign in at all.

I don’t know how long the transition will take - I could make excuses as to why it’s taken so long but I’m sure you don’t want to hear those. Instead, I believe that substantial progrss has been made on a number of fronts. I believe the primary Merucurial repository will be out in the next several months along with at least one of the other consolidations. All of the work for the Indiana project is already being done completely out in the open and there are a number of outside contributors integrating changes directly with any sponsor. And there has finally been progress on a bug tracking system, something which has been tricky since Sun has its own internal bug system which is used for previous versions of Solaris and coordinating those will require an effort.

If you look at the mail archives for opensolaris-arc@opensolaris.org, you’ll see the architectural review for almost all of the work being done for OpenSolaris is completely out in the open (yes, there are still an occasional closed case but those either are due to clerical mistake or for the rare but real proprietary case.)

Perhaps it’s a difference in seeing things as being half-full versus half-empty. I’m as frustrated as anyone that certain things have taken as long as they have but I believe strongly that there will be significant improvements seen on a number of fronts this year.

]]> Comment on IBM to contribute to Mifos by Emily Ratliff http://www.ratliff.net/blog/index.php/2007/11/29/ibm-to-contribute-to-mifos/#comment-3233 Emily Ratliff Tue, 19 Feb 2008 14:12:25 +0000 http://www.ratliff.net/blog/index.php/2007/11/29/ibm-to-contribute-to-mifos/#comment-3233 Hi, The easiest way is to use svn to pull the code from the source code repository. See http://sourceforge.net/svn/?group_id=124589 for more instructions. Emily Hi, The easiest way is to use svn to pull the code from the source code repository. See
http://sourceforge.net/svn/?group_id=124589
for more instructions.

Emily

]]> Comment on IBM to contribute to Mifos by anbu http://www.ratliff.net/blog/index.php/2007/11/29/ibm-to-contribute-to-mifos/#comment-3227 anbu Tue, 19 Feb 2008 04:30:38 +0000 http://www.ratliff.net/blog/index.php/2007/11/29/ibm-to-contribute-to-mifos/#comment-3227 hi, how to download the source code of mifos hi,
how to download the source code of mifos

]]> Comment on Not with a bang, but a whimper by Emily Ratliff http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3217 Emily Ratliff Mon, 18 Feb 2008 05:19:56 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3217 > all corporations attempt to make visitors sign-in like this by default Just to be clear, I am not objecting to signing in. I'm objecting to signing an NDA as part of the sign in procedure. I don't mind letting the company know my identity, I do mind being compelled to sign a legal agreement that says that I won't share anything confidential that I learn while on site. As it was explained to me by the receptionist, they were worried that attendees would glean confidential information from print-outs that might have been left laying around and thus wouldn't waive the NDA built in to the visitor's access application. Emily > all corporations attempt to make visitors sign-in like this by default

Just to be clear, I am not objecting to signing in. I’m objecting to signing an NDA as part of the sign in procedure. I don’t mind letting the company know my identity, I do mind being compelled to sign a legal agreement that says that I won’t share anything confidential that I learn while on site. As it was explained to me by the receptionist, they were worried that attendees would glean confidential information from print-outs that might have been left laying around and thus wouldn’t waive the NDA built in to the visitor’s access application.

Emily

]]> Comment on Not with a bang, but a whimper by Simon Phipps http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3214 Simon Phipps Mon, 18 Feb 2008 03:17:16 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3214 > Shame on Google As I recall, even IBM used to have the same requirements when we held BCS meetings at Hursley Park. That was over 8 years ago, but you should expect to see all corporations attempt to make visitors sign-in like this by default. I now assume it will be the case (wherever I am holding meetings, Sun or elsewhere) and negotiate it away or pick another venue. > Best of luck Thank-you. There are many different approaches to open source and I think OpenSolaris can devise a path of its own. > Shame on Google

As I recall, even IBM used to have the same requirements when we held BCS meetings at Hursley Park. That was over 8 years ago, but you should expect to see all corporations attempt to make visitors sign-in like this by default. I now assume it will be the case (wherever I am holding meetings, Sun or elsewhere) and negotiate it away or pick another venue.

> Best of luck

Thank-you. There are many different approaches to open source and I think OpenSolaris can devise a path of its own.

]]> Comment on Not with a bang, but a whimper by Emily Ratliff http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3213 Emily Ratliff Mon, 18 Feb 2008 02:39:37 +0000 http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comment-3213 Hi Shawn and Simon, I do draw a distinct difference in assigning the rights to a non-profit foundation versus a for-profit company. As for the comment about wreckage, I meant that as my own characterization not as an indicator that I polled the OpenSolaris community and speak for them. I speak merely as an observer. I have not returned. Shame on Google. What percentage of the voters were Sun employees vs. non-Sun employees? Best of luck to you both, if the OpenSolaris community has any chance of survival it will be due to your efforts. Emily Hi Shawn and Simon,

I do draw a distinct difference in assigning the rights to a non-profit foundation versus a for-profit company.

As for the comment about wreckage, I meant that as my own characterization not as an indicator that I polled the OpenSolaris community and speak for them. I speak merely as an observer.

I have not returned. Shame on Google.

What percentage of the voters were Sun employees vs. non-Sun employees?

Best of luck to you both, if the OpenSolaris community has any chance of survival it will be due to your efforts.

Emily

]]>