Oracle CEO Larry Ellison: I don't know if Java is free

Found on CNet News on Tuesday, 17 April 2012
Browse Software

Asked by Google's lead attorney, Robert Van Nest, if the Java language is free, Ellison was slow to respond. Judge William Alsup pushed Ellison to answer with a yes or no. As ZDNet reporter Rachel King observed in the courtroom, Ellison resisted and huffed, "I don't know."

The Java programming language is in the public domain and free, but some aspects of Java require a specific license from Oracle. The complexities, such as different licensing schemes and their applications, will make it difficult for the jury to get a black-and-white view of this central issue.

Or you could just not use Java at all. I haven't installed JRE for years now, and I don't miss a single thing.

MySQL founder's latest MariaDB release takes "enterprise" features open-source

Found on ArsTechnica on Friday, 13 April 2012
Browse Software

MontyProgram AB, the company formed by MySQL creator Michael "Monty" Widenius in the wake of his break with Sun Microsystems, has released the latest version of MariaDB, a “drop-in replacement” for MySQL built on the MySQL 5.5 codebase.

Oracle has continued development of MySQL, but stirred discontent in the MySQL community when the company shifted the development model away from a fully open-source approach to an "open core," with new enterprise features offered under a commercial license only.

One would have thought that after it's failure to control OpenOffice, which let to the LibreOffice fork, Oracle would have learned that it cannot change the rules whatever way it wants and expect people to accept them like mindless sheep.

Flashback the largest Mac malware threat yet, experts say

Found on CNet News on Saturday, 07 April 2012
Browse Software

Unless you've been living under a rock for the past week, you've probably heard about Flashback, a piece of malware targeting users of Apple's Mac OS X that's now estimated to be quietly running on more than 600,000 machines around the world.

While earlier versions that relied on a piece of software meant to look like Adobe's Flash installer were squashed as part of security updates, this latest variant went through Java instead. Oracle updated Java to patch the vulnerability the attackers were going through in February, though Apple took longer to patch the version it maintains and delivers to users through its software update tool.

"Flashback was patched by Adobe for all major platforms back in February, but Apple only patched it this week," Schoewenberg said. "Waiting two months is not acceptable, and we see OS X threats evolving."

The easy times for Mac users are over. They never were as secure as the fanboys claimed; they were just such a small minority that nobody bothered to target them. However, now that they have gained a little more of the market, they get attacked, like every other OS out there. Plus, before it's forgotten: say no to Java and avoid Adobe.

PHP 5.4 - A Major Update

Found on I Programmer on Sunday, 04 March 2012
Browse Software

PHP 5.4 brings improvements in memory management and performance, which in turn will make it faster, a built-in webserver for testing purposes, and features that had been destined for PHP 6.0.

Another important change is that Magic Quotes, a features that was supposed to improve security by preventing SQL Injection but in fact was notoriously insecure and had already been deprecated is finally removed. Other deprecated features have also been removed to provide a cleaner code base.

It will be interesting to see how many will blindly update their install without checking the release notes and changelog before doing so and then whine about all the problems the update causes.

Oracle extends Linux support to 10 years

Found on The Register on Thursday, 23 February 2012
Browse Software

Oracle has reaffirmed that it's in the Linux business to stay by extending the support lifecycle of its own-brand build to ten years, and tempting Red Hat users with a trial offer of its Ksplice patching system.

"With the innovative zero-downtime update capabilities delivered through Ksplice, and the extended support lifecycle for Oracle Linux, Oracle continues to set the industry standard for Linux in the enterprise," said Wim Coekaerts, Oracle vice president of Linux and virtualization engineering, in a canned statement.

Not really much of a surprise when you know that Redhat has extented its support for the RHEL spins to 10 years. You also need to know that Oracle's Linux is simply a respin from the sources released by Redhat, sold by Oracle. So Redhat is doing the work and Oracle is leeching from it. Summing all this up, I'll stay away from Oracle's copy; after all, who would prefer the chinese knockoffs?

Why Guru3D probably never will review Ubisoft titles anymore - Anno 2070

Found on Guru3D on Tuesday, 17 January 2012
Browse Software

We know (well at least we figured we knew), that the game key can be used on three systems. That's fair, the first activation is used on my personal game rig. The second we installed on the AMD Radeon graphics test PC and the 3rd on our NVIDIA graphics test PC.

For the NVIDIA setup I take out the GTX 580, and insert a GTX 590. When I now startup the game 'BAM', again an activation is required. Once again I fill out the key and now Ubisoft is thanking me with the message that I ran out of activations.

Their reply goes like this: 'Sorry to disappoint you - the game is indeed restricted to 3 hardware changes and there simply is no way to bypass that. We also do not have 7 copies of the game for you'.

We have been contacted by bluebyte over the weekend, the company that developed the Anno series. Our key has been pretty much unlocked allowing us to properly work on this article.

So much for "there simply is no way to bypass that". Any company that has to do with gamers should know that they change their systems quite often and replace hardware to get the best performance. Ubisoft practically forces customers to stick to a system without changes in order to play their game; and as the past has proven numerous times, the pirated version will have that DRM removed, delivering a way better experience for free.

Hackers threaten to release Symantec source code tomorrow

Found on CNet News on Monday, 16 January 2012
Browse Software

Several reports surfaced earlier this month that hackers had managed to access the source code for certain Symantec products. Symantec identified the products as Symantec Endpoint Protection (SEP) 11.0 and Symantec Antivirus 10.2 but said the attack did not affect any current Norton consumer products.

Rob Rachwald, director of security strategy at Imperva, told CNET's Lance Whitney that the incident was "embarrassing on Symantec's part" but not likely to "keep the Symantec folks awake too late at night, and certainly not their customers."

Who would want any software from Symantec anyway? It's only a burden on any system.

Adobe Plans Fixes for Critical 3D Bugs in Reader, Acrobat X

Found on eWEEK on Saturday, 07 January 2012
Browse Software

Adobe will fix a slew of security flaws in Reader and Acrobat, including the critical 3D vulnerabilities that were discovered in December, as part of its quarterly update.

Adobe's quarterly updates will include fixes for two vulnerabilities that Adobe patched on Dec. 16 in the Windows versions of Acrobat and Reader 9 and earlier as part of an emergency update.

Best bugfix for Adobe products? Uninstall them. Their flash player and pdf reader are the main attack vectors. Flash will be pointless in the wake of HTML5 and when it comes to pdf, there are quite a few alternatives which, as an added bonus, are by far smaller and faster than Adobe's bloatware.

What's coming in Firefox 11

Found on CNet News on Tuesday, 03 January 2012
Browse Software

This is more than a new look, though, as many of the browser's features have been stripped out. This includes Firefox Sync, which allows seamless synchronization of personal data like bookmarks, passwords, and browsing history, and Mozilla's popular add-ons.

More HTML5 code is supported, Google's SPDY protocol for faster site loading can now be tested, Tilt support allows for 3D Web page visualization, and the HTML5 video controls have been redesigned.

Honestly, I don't really care anymore. Mozilla has messed up with its project changes and I won't bother with a new release every few weeks.

Duqu, Stuxnet Built on Common Platform With Other Similar Super-Malware

Found on eWEEK on Saturday, 31 December 2011
Browse Software

Further analysis of the Duqu Trojan has revealed that the platform that was used to develop Stuxnet and Duqu may have been used to create similar Trojans, according to Kaspersky Lab.

Stuxnet took advantage of multiple zero-day vulnerabilities in Microsoft Windows, including an escalation-of-privilege flaw and exploited Microsoft's AutoRun functionality to spread across computers via infected USB drives.

Duqu also took advantage of a zero-day vulnerability in the Microsoft Windows kernel.

Gostev said "with a fair degree of certainty" that the Tilded platform had been created around the end of 2007 or early 2008 and underwent significant changes in the summer and autumn of 2010.

It makes sense that, when you already have the level of knowledge to build one of those trojans, you also build others. Just like Microsoft releases various different software packages, a blackhat company can release different high-level trojans.