- wlug - University of Waikato Mail Lists

Report Finds Few Open Source Projects are Actively Maintained
by Peter Reutemann 16 Oct '23

16 Oct '23

'"A recent analysis accounting for nearly 1.2 million open source software projects primarily across four major ecosystems found that only about 11% of projects were actively maintained," reports InfoWorld: In its 9th Annual State of the Software Supply Chain report, published October 3, software supply chain management company Sonatype assessed 1,176,407 projects and reported an 18% decline this year in actively maintained projects. Just 11% of projects — 118,028 — were receiving active maintenance. The report also found some new projects, unmaintained in 2022, now being maintained. The four ecosystems included JavaScript, via NPM; Java, via the Maven project management tool; Python, via the PyPI package index; and .NET, through the NuGet gallery. Some Go projects also were included. According to the report, 18.6% of Java and JavaScript projects that were being maintained in 2022 are no longer being maintained today. Other interesting findings: - Nearly 10% reported security breaches due to open source vulnerabilities in the past 12 months. - Use of AI and machine learning software components within corporate environments surged 135% over the last year.' -- source: https://news.slashdot.org/story/23/10/15/0225241 Don't fully agree with that... Just because a project isn't pushing out releases, doesn't mean that it is dead. I have a bunch of small libraries that haven't received any updates for years (and therefore new releases), because there was no need for it (i.e., I didn't find any bugs). It almost seems that if you follow the "do one thing and do it well" philosophy, then you can end up in that "dead project" category... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Juice TV Hiccup
by Lawrence D'Oliveiro 15 Oct '23

15 Oct '23

Currently when I switch to FreeView Channel 200, it shows a frozen image with the text “Cinegy” and “Demo Version” on it. Searching for that name takes me to a site that talks about “software defined television”. Either their product licence has expired, or they never had one in the first place ...

2 2

USB Over IP
by Lawrence D'Oliveiro 15 Oct '23

15 Oct '23

Came across this video <https://www.youtube.com/watch?v=9RAR1lo_Yc0> a few days ago, giving an example of the use of USB over IP. This lets you access a device physically connected to one machine from an entirely different machine. The presenter is an SDR (Software-Defined Radio) enthusiast. He has his SDR dongles attached to a machine in his garage, where they can be connected to antennas that give good reception. But he prefers to access the radio channels from the comfort of his living room. USB/IP is a platform-independent protocol, not restricted to Linux. Note also that the protocol has no authentication or encryption capability; so it’s best run only over a network (either physical or virtual) that you trust. The ever-dependable ArchLinux Wiki has an intro page <https://wiki.archlinux.org/title/USB/IP> with further useful links.

2 2

MariaDB Financial Trouble
by Lawrence D'Oliveiro 13 Oct '23

13 Oct '23

MariaDB, the company, is abandoning its SkySQL cloud product and distributed Xpand backend to try to cut costs <https://www.theregister.com/2023/10/13/mariadb_restructure/>. This after putting a lot of effort into promoting those products. One big customer that’s going to be impacted is Samsung, which has been relying on Xpand to support “tens of billions of transactions per day” by its customers to manage their user and device profiles.

1 0

Yet Another Excel Screwup
by Lawrence D'Oliveiro 13 Oct '23

13 Oct '23

How many ways can you use Microsoft Excel wrong in just one job? Let me count the ways <https://www.theregister.com/2023/10/12/excel_anesthetist_recruitment_blunde…> ... * A ranking column in the Wales region’s spreadsheet somehow got misinterpreted as an interview score. Since there were fewer candidates in that region than the minimum acceptable interview score, all candidates from there were deemed “unappointable”. * This scoring issue could have affected applicants across the country, since replacements would have been needed for the Welsh positions that became vacant. * To add to the difficulties, different regions used different conventions in their spreadsheet layout. Some tried to use VLOOKUP to guard against manual copy-paste errors (give them some credit there), but not everyone did. This kind of thing just added to the headaches in the merging process, which took several days of manual work. * After discovering their mistake, the recruitment office then tried to notify the wrongly-rejected candidates about the problem, and offer them jobs anyway. Unfortunately, due to a bug in the messaging system (OK, this wasn’t an Excel problem), the message went out to more candidates than intended. * All of this comedy of errors was kept quiet, until someone made a Freedom-Of-Information request.

1 0

Ubuntu 23.10 is a smidge smaller, a bit snappier, and has some desktop upgrades
by Peter Reutemann 12 Oct '23

12 Oct '23

'Ubuntu 23.10, codenamed Mantic Minotaur, is the 39th Ubuntu release, and it's one of the three smaller interim releases Canonical puts out between long-term support (LTS) versions. This last interim before the next LTS doesn't stand out with bold features you can identify at a glance. But it does set up some useful options and upgrades that should persist in Ubuntu for some time.' -- source: https://arstechnica.com/gadgets/2023/10/ubuntu-23-10-is-a-smidge-smaller-a-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Microsoft Gives Unexpected Tutorial on How To Install Linux
by Peter Reutemann 11 Oct '23

11 Oct '23

'Hell freezes over and pigs fly south to their winter feeding grounds. Microsoft has published guidance on how to download and install Linux. From a report: The Seattle-area proprietary OS vendor has published a helpful guide entitled "How to download and install Linux," inspiring reactions from incredulity to amusement. In the humble opinion of The Reg FOSS Desk, it really isn't bad at all. Microsoft suggests four alternative installation methods: using Windows Subsystem for Linux 2, using a local VM, using a cloud VM, or on bare metal. It almost feels cruel to criticize it, but it seems that this really amounts to two methods. WSL version 2 is a VM. It's right there in the screenshots, where it says: Installing: Virtual Machine Platform Virtual Machine Platform has been installed. So the choices boil down to either on the metal, or in a VM. That leaves only the question of what kind of VM: the built-in one, an add-on VM, or a cloud VM. Perhaps the subtext of the article is something more subtle. Could it be a tacit admission that you might need a free-of-charge OS for your PC? The Windows 10 upgrade program that began back in 2015 was meant to end a year later. In fact, it didn't. We described a documented workaround in 2016, but the free upgrades continued to work, even in 2020. Which? magazine reported it was still working in July 2023.' -- source: https://linux.slashdot.org/story/23/10/11/1521249 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

GNOME Merge Requests Opened To Drop X11 Session Support
by Peter Reutemann 11 Oct '23

11 Oct '23

'"A set of merge requests were opened to drop X.ORG (X11) from GNOME desktop," writes Slashdot reader motang. Phoronix reports: This merge request would remove the X11 session targets within gnome-session: "This is the first step towards deprecating the x11 session, the systemd targets are removed, but the x11 functionality is still there in so you can restore the x11 session by installing the targets in the appropriate place on your own. X11 has been receiving less and less testing. We have been defaulting to the wayland session since 2016 and it's about time we drop the x11 session completely. Let's remove the targets this cycle and maybe carry on with removing rest of the x11 session code next cycle." That was followed by this merge request that would land later on -- more than likely, one cycle later -- for actually removing the X11 session code. Dropping that code would lighten up gnome-session by 3.6k lines of code directly.' -- source: https://tech.slashdot.org/story/23/10/10/2139213 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Flash Animations Live Again
by Lawrence D'Oliveiro 10 Oct '23

10 Oct '23

Recently came across this project <https://ruffle.rs/> to implement a new player for Adobe’s ancient, obsolete Flash format. If you recall, Adobe’s Flash Player implementation (before it was discontinued) suffered from many problems, not least of which was the never-ending trickle of security vulnerabilities. However, this new player, called “Ruffle”, is written entirely from scratch in Rust, a language designed to automatically protect the programmer from many common memory-manipulation mistakes. The expectation is clearly that this will lead to far fewer security problems, as well as making the code easier to maintain. Ruffle can be built as a standalone player application, or as a JavaScript+WASM package that you can install on your website, or as a browser extension. That way, if you like to visit ancient web sites that still serve up .swf files in the expectation that you have Flash Player installed, you can install the browser extension to take the place of Flash Player. Or if you are a web admin who has animations in Flash format that you want to serve up to users without having to require them to install anything special, you can include the JavaScript+WASM package on your site, and have it automatically handle the playback in the user’s browser. GNU used to have a similar project called Gnash (predating Rust, just written in C and C++), which could be built as an old-style browser plugin, like Flash Player itself (no longer supported by current browsers), or as a standalone application. But it seems to have been abandoned. Will this project lead to a resurgence in the creation of animations in Flash format? I sincerely hope not ...

1 0

Greg Kroah-Hartman Chastises Critic, Says Linux Foundation Strongly Supports Kernel Developers
by Peter Reutemann 09 Oct '23

09 Oct '23

'It started when Linux blogger Bryan Lunduke complained about how the Linux Foundation was reducing the six-year long-term support (LTS) window for the Linux kernel to two years. Lunduke argued that the Foundation seemed more interested in funding compliance best practices — as well as artificial intelligence and blockchain projects. In an online discussion, Linux kernel maintainer Greg Kroah-Hartman had this response: Did anyone think to actually ask the developer who is maintaining the long-term support kernel versions why he made that change (back in February?), i.e. me...? No, I guess that would take too much effort, and wouldn't result in such a click-bait headline. "LTS kernels are no longer supported for 6 years because it turns out no one used them." doesn't have that same fun sound... In a second comment Kroah-Hartman also clarified that in fact "The amount of resources and other stuff that the Linux Foundation provides to the Linux kernel community has increased over the years, including last year. " Just because new people are brought in with new projects (that the LF member companies want to host) does not mean that somehow less is being given to the kernel community at all. It is not a zero-sum game here at all, that's not how the LF works in any way. Again, this would have been easy to verify if someone just asked us. So to repeat, no "abandonment" is happening here at all, the opposite is happening, just like it has for the entirety of the Linux Foundation's existence, support has grown every year. ' -- source: https://linux.slashdot.org/story/23/10/08/0131214 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1