After a week of wondering, Red Hat has confirmed that someone broke in and compromised their security. Although It doesn’t appear the attacker was able to retrieve the passphrase used to sign Fedora packages, the team is switching to new keys. In a separate intrusion the attacker tampered with and signed OpenSSH packages for RHEL. While it’s good to get the full story, no one is happy how long it took Red Hat to release these details.
[via Zero Day]
[photo: afsilva]
The Boxee blog has recently announced that they have finally released a Linux version. So far, only Ubuntu 7.10 through 8.04 support is available. We covered Boxee when they released their alpha version a few months ago. One of the unique things we found about it was the added social layer that allows the user to share their viewing and listening information on various social networking sites.
This XBMC based media streamer has won a lot of praise lately and we are excited to finally see it step into the Linux platform. Up until now, Boxee was strictly run on OSX 10.5 and thus bound to Apple’s hardware configurations. Once they get a stable version running, it will be extremely easy for anyone to build a media streamer from an old PC with various hardware configurations.
The Nokia N810 tablet is a great buy, especially for hackers. It already ships with a Linux-based operating system, called OS2008, which is based upon Maemo 4.0. However, for those who aren’t fans of OS2008, you can install Debian easily with some patience and an extra memory card. The Debian install includes OpenOffice, Firefox 3, AbiWord, and IceWM. You should be aware that there are pitfalls. Some of the applications run slowly, and you may be in danger of losing data if you run into problems.
[via Unwired View]
A first look from Ars Technica at the newly released Neo FreeRunner phone by OpenMoko reveals some interesting information. There are three different software stacks available to use; the Neo FreeRunner will ship with the GTK-based stack, referred to as om2007.2. It offers conventional smartphone applications, but most importantly, it includes “full root access to a Busybox shell with all of the standard scripting tools like sed and awk”. The ASU stack is what OpenMoko developers are currently working on; there are promises of a more user-friendly experience. The FSO stack, also currently in development, aims to resolve the issues brought up by having different software stacks for the same phone. Since none of the stacks are considered “fully functional”, OpenMoko may have a difficult time attracting a mainstream audience. Hackers may be hampered by the lack of available documentation, although there are resources for OpenMoko enthusiasts, if you just search hard enough. The final conclusion? While OpenMoko may be difficult to use, it compares favorably to competitors such as Google’s Android platform, which is less flexible.
Netgear recently launched the WGR614L wireless router targeted specifically at open source firmware enthusiasts. It can use Tomato, DD-WRT, and soon OpenWRT. The core is a 240MHz MIPS processor with 16MB of flash and 4MB of RAM. You’ll probably remember when Linksys decided to dump Linux from their iconic WRT54G line in favor of VxWorks; they released the similarly speced WRT54GL for enthusiasts. Netgear seems to be arriving pretty late in the game, but they’ve set up a community specifically for this router. Time will tell whether community support is enough to make this the router of choice for hackers. We wish someone would release an x86 based router in the same price range just to make porting stupidly simple.
[via Slashdot]
Plenty of USB storage keys are on the market, but Ironkey is the first to use military level encryption. Sold in 1GB, 2GB, and 4GB sizes, the key features a processor called the Cryptochip, which uses Public Key Cryptography ciphers linked to an online account to create encryption keys on the hardware. A Federal Information Processing standard 140-2 compliant true random number generator on the Cryptochip ensure that encryption keys are extremely secure and totally random.
Ironkeys come in different sizes, but there are also three different versions, each with unique features. The basic version has a very James Bond-esque feature to destroy the data on it in case of an emergency. The personal version is loaded with Firefox 3 with various addons that make browsing encrypted and anonymous. The enterprise version is made to order with no specific price on the IronKey site, just a form to order one built to your specifications. All of them support Windows, OS X, and a large amount of Linux distros, and they all come in tamper proof and water resistant cases with a brushed metal finish. We tend to think this level of security is overkill for the average person, but people can’t seem to get with our freewheeling approach to security; remember, we leave our WLAN open.
[via LinuxDevices]
Openmoko began selling Neo 1973 phones direct to developers last July. The phone is an open source project designed to ease development on mobile platforms. The Neo 1973 has since sold out, but a new Linux phone intended for the mass market has been released, the FreeRunner for ~$399. The screen is 640×480 with 3D acceleration and a 500MHz Samsung processor. The new phone has WiFi and 2.5G GSM support. It has some truly unique features like USB host mode support. You can find the differences between the two phones here. This new phone release should help strengthen the community since average users were discouraged from purchasing the original. Pictures of the phone’s internals and a component diagram can be found on the Openmoko wiki. We wish more manufacturers would explicitly tell us how to get console access.
[via Slashdot]
