Distribuir contenido

FSF endorses embedded GNU/Linux distro ProteanOS as fully free

FSF - Mié, 07/08/2015 - 21:25

The FSF's list consists of ready-to-use full GNU/Linux systems whose developers have made a commitment to follow the Guidelines for Free System Distributions. This means each distro includes and steers users toward exclusively free software. All distros on this list reject nonfree software, including firmware "blobs" and nonfree documentation.

ProteanOS is a new, small, and fast distribution that primarily targets embedded devices, but is also being designed to be part of the boot system of laptops and other devices. The lead maintainer of ProteanOS is P. J. McDermott, who is working closely with the Libreboot project and hopes to have ProteanOS be part of the boot system of Libreboot-compatible devices.

"ProteanOS combines the ease of installation of a binary distribution with the flexibility of a source distribution or build system: its platform configuration feature allows binary packages to be configured at build-time and run-time for different hardware and use cases," said McDermott.

The distro is being independently developed and is not based on other distributions. Users and potential contributors will find a complete toolchain with which the distro can build all of its own packages. Those interested in contributing to ProteanOS can start by joining the project mailing list and looking over the developer documentation.

About the Free Software Foundation

The Free Software Foundation, founded in 1985, is dedicated to promoting computer users' right to use, study, copy, modify, and redistribute computer programs. The FSF promotes the development and use of free (as in freedom) software -- particularly the GNU operating system and its GNU/Linux variants -- and free documentation for free software. The FSF also helps to spread awareness of the ethical and political issues of freedom in the use of software, and its Web sites, located at fsf.org and gnu.org, are an important source of information about GNU/Linux. Donations to support the FSF's work can be made at https://my.fsf.org/donate/. Its headquarters are in Boston, MA, USA.

More information about the FSF, as well as important information for journalists and publishers, is at https://www.fsf.org/press.

About the GNU Operating System and Linux

Richard Stallman announced in September 1983 the plan to develop a free software Unix-like operating system called GNU. GNU is the only operating system developed specifically for the sake of users' freedom. See https://www.gnu.org/gnu/the-gnu-project.html.

In 1992, the essential components of GNU were complete, except for one, the kernel. When in 1992 the kernel Linux was re-released under the GNU GPL, making it free software, the combination of GNU and Linux formed a complete free operating system, which made it possible for the first time to run a PC without non-free software. This combination is the GNU/Linux system. For more explanation, see https://www.gnu.org/gnu/gnu-linux-faq.html.

Media Contacts

Joshua Gay
Licensing & Compliance Manager
Free Software Foundation
+1 (617) 542 5942
licensing@fsf.org

Categorías: Software Libre

[20150602] - Core - CSRF Protection

Joomla Security - Vie, 07/03/2015 - 23:10
  • Project: Joomla!
  • SubProject: CMS
  • Severity: Low
  • Versions: 3.2.0 through 3.4.1
  • Exploit type: CSRF Protection
  • Reported Date: 2015-April-06
  • Fixed Date: 2015-June-30
  • CVE Number: tbd
Description

Lack of CSRF checks potentially enabled uploading malicious code.

Affected Installs

Joomla! CMS versions 3.2.0 through 3.4.1

Solution

Upgrade to version 3.4.2

Contact

The JSST at the Joomla! Security Center.

Reported By: Eric Flokstra
Categorías: Joomla

[20150601] - Core - Open Redirect

Joomla Security - Vie, 07/03/2015 - 23:04
  • Project: Joomla!
  • SubProject: CMS
  • Severity: Low
  • Versions: 3.0.0 through 3.4.1
  • Exploit type: Open Redirect
  • Reported Date: 2015-April-08
  • Fixed Date: 2015-June-30
  • CVE Number: tbd
Description

Inadequate checking of the return value allowed to redirect to an external page.

Affected Installs

Joomla! CMS versions 3.0.0 through 3.4.1

Solution

Upgrade to version 3.4.2

Contact

The JSST at the Joomla! Security Center.

Reported By: Eric Flokstra, Sharath Unni and Steven Sweeting
Categorías: Joomla

The FSF is hiring: Seeking a full-time outreach and communication coordinator

FSF - Mar, 06/16/2015 - 20:25

The Free Software Foundation (FSF), a Boston-based 501(c)(3) charity with a world wide mission to protect freedoms critical to the computer-using public, seeks a motivated and organized tech-friendly Boston-based individual to be its full-time outreach and communication coordinator.

This position, reporting to the executive director, works closely with our campaigns, licensing, and technical staff, as well as our board of directors, to edit, publish, and promote high-quality, effective materials both digital and printed.

These materials are a critical part of advancing the FSF's work to support the GNU Project, free software adoption, free media formats, and freedom on the Internet; and to oppose DRM, software patents, and proprietary software.

Some of the position's more important responsibilities include:

  • stewarding the online publication and editing process for all outreach staff; including copyediting, formatting, posting, and maintaining material on our Web sites; and sending out e-mail messages to our lists;

  • producing and improving our monthly e-mail newsletter the Free Software Supporter;

  • improving the effectiveness of our audio and video materials use;

  • editing and building our biannual printed Bulletin;

  • promoting our work and the work of others in the area of computing freedom on social networking sites;

  • helping to produce fundraising materials and assisting with our fundraising drives;

  • cultivating the community around the LibrePlanet wiki and network, including the annual conference;

  • working with and encouraging volunteers; and

  • being an approachable, humble, and friendly representative of the FSF to our worldwide community of existing supporters and the broader public, both in person and online.

A successful candidate will have strong editing skills, especially in the area of copyediting, and will take pride in working with a team to create consistently polished and effective materials.

While this is a job for a person who is passionate about technology and its social impact, it is not primarily a technical position. The main technical requirement is a willingness to learn to use many new and possibly unfamiliar pieces of software, with a positive attitude. That being said, experience with CiviCRM and GNU/Linux will be considered a big plus, and experience with any of the following technologies should be mentioned: Plone, Drupal, Ikiwiki, Subversion, Git, CVS, Ssh, JavaScript, CSS, HTML, Emacs, LaTeX, Inkscape, GIMP, Markdown, or MediaWiki.

Because the FSF works globally and seeks to have our materials distributed in as many languages as possible, multilingual candidates will be noticed. English, German, French, Spanish, Mandarin, Malagasy, and a smattering of Japanese are represented among current FSF staff.

With our small staff of twelve, each person makes a clear contribution. We work hard, but offer a humane and fun work environment.

Benefits and salary

The job must be worked on-site at the FSF's office in downtown Boston.

This is a union position. The salary is fixed at $51,646.40 and is non-negotiable. Other benefits include:

  • full family health coverage through Blue Cross/Blue Shield's HMO Blue program,
  • subsidized dental plan,
  • four weeks of paid vacation annually,
  • seventeen paid holidays annually,
  • public transit commuting cost reimbursement,
  • 403(b) program through TIAA-CREF,
  • yearly cost-of-living pay increases, and
  • potential for an annual performance bonus.
Application instructions

Applications must be submitted via email to hiring@fsf.org. The email must contain the subject line, "Outreach and Communications Coordinator". A complete application should include:

  • resume,
  • cover letter,
  • writing sample (1000 words or less),
  • links to published work online, and
  • three or more edits you would suggest to this job posting.

All materials must be in a free format (such as plain text, PDF, or OpenDocument, and not Microsoft Word). Email submissions that do not follow these instructions will probably be overlooked. No phone calls, please.

Applications will be considered on a rolling basis until the position is filled. To ensure consideration, apply before 10:00am EST on Wednesday, July 1st.

The FSF is an equal opportunity employer and will not discriminate against any employee or application for employment on the basis of race, color, marital status, religion, age, sex, sexual orientation, national origin, handicap, or any other legally protected status recognized by federal, state or local law. We value diversity in our workplace.

Categorías: Software Libre

Free Software Foundation announces Deputy Director search

FSF - Mié, 05/13/2015 - 21:56

The Free Software Foundation (FSF), a Boston-based 501(c)(3) charity with a worldwide mission to protect freedoms critical to the computer-using public, would love to find an experienced, Boston-based Deputy Director to expand our leadership team.

This new position would work closely in support of the executive director to coordinate and amplify the work of an expanding, 12-person staff; represent the FSF to conference, supporter, and donor audiences internationally; and play a key role in improving the FSF's overall effectiveness by driving initiative prioritization, fundraising, resource allocation, hiring, and internal process development.

Now is an especially exciting time to join the FSF team, since this year is our 30th anniversary. We are taking the opportunity to both reflect on the past and plan ahead for the next 30 years.

In addition to being a talented general manager and project coordinator, the right candidate will bring significant expertise to at least one of the FSF's major work areas -- technology infrastructure and software development, licensing and compliance, public advocacy and engagement, fundraising, or operations.

This role is for someone who:

  • is a dedicated free software user;
  • cares deeply about the impact of control over technology on the exercise of individual freedoms;
  • stays highly organized, even during high-stress situations,
  • inspires and motivates others;
  • is a reliably rational, diplomatic, and productive voice in discussions, both online and offline;
  • loves puzzles and problem-solving; and
  • enjoys the challenges of working in the public eye, including fielding and responding to criticisms.

Because of financial control duties, the position must be worked from the FSF's headquarters in Boston, Massachusetts. Relocation assistance is available. Candidates currently located outside the US may apply; we have sponsored visas in the past.

Salary would be commensurate with experience. Benefits include:

  • full family health coverage through Blue Cross/Blue Shield's HMO Blue program,
  • subsidized dental plan,
  • four weeks of paid vacation annually,
  • seventeen paid holidays annually,
  • public transit commuting cost reimbursement,
  • 403(b) program through TIAA-CREF,
  • a shiny silver Deputy star,
  • yearly cost-of-living pay increases, and
  • potential for an annual performance bonus.

Applications must be submitted via email to hiring@fsf.org. The email must contain the subject line "Deputy Director". A complete application should include:

  • resume or CV,
  • cover letter,
  • writing sample (1000 words or less), and
  • links to published work online, such as articles, code contributions, or conference presentation videos.

All materials must be in a free format. Email submissions that do not follow these instructions will probably be overlooked. No phone calls, please.

Applications will be evaluated on a rolling basis.

The FSF is an equal opportunity employer and will not discriminate against any employee or application for employment on the basis of race, color, marital status, religion, age, sex, sexual orientation, national origin, handicap, or any other legally protected status recognized by federal, state, or local law. We value diversity in our workplace.

About the Free Software Foundation

The Free Software Foundation, founded in 1985, is dedicated to promoting computer users' right to use, study, copy, modify, and redistribute computer programs. The FSF promotes the development and use of free (as in freedom) software -- particularly the GNU operating system and its GNU/Linux variants -- and free documentation for free software. The FSF also helps to spread awareness of the ethical and political issues of freedom in the use of software, and its Web sites, located at fsf.org and gnu.org, are an important source of information about GNU/Linux. Donations to support the FSF's work can be made at https://donate.fsf.org. Its headquarters are in Boston, MA, USA.

More information about the FSF, as well as important information for journalists and publishers, is at https://www.fsf.org/press.

Categorías: Software Libre

The FSF is hiring: Seeking a Boston-area full-time Web Developer

FSF - Jue, 05/07/2015 - 21:25

This position, reporting to the executive director, works closely with our sysadmin team to maintain and improve the FSF's Web presence. It's an especially exciting time to join the FSF team, because we will be celebrating our 30th anniversary this October.

The FSF uses several different free software web platforms in the course of its work, both internally and externally. These platforms are critical to work supporting the GNU Project, free software adoption, free media formats, and freedom on the Internet; and to opposing bulk surveillance, Digital Restrictions Management, software patents, and proprietary software.

We are looking for someone who is primarily interested in keeping these systems up-to-date and working, as well as customizing them when necessary. While the main duties will relate to the backend systems, frontend experience with templates, HTML, CSS, JavaScript, and design tools will be a big plus.

The Web Developer will also contribute to decisions about which new platforms to use or which existing ones to retire. The infrastructure of www.fsf.org, shop.fsf.org, and audio-video.gnu.org will likely be changed this year, so there will be some critically important research and work to be done right away.

We emphasize opportunities to contribute work done at the FSF to the upstream projects we use, to benefit the broader free software community.

You'll primarily work with:

  • CiviCRM
  • Drupal
  • MediaWiki
  • Plone / Zope
  • Ikiwiki
  • Request Tracker
  • Django / Satchmo
  • Etherpad
  • CAS
  • GNU social
  • GNU MediaGoblin

Because the FSF works globally and seeks to have our materials distributed in as many languages as possible, multilingual candidates will have an advantage. English, German, French, Spanish, Mandarin, Malagasy, and a little Japanese, are represented among current FSF staff.

With our small staff of twelve, each person makes a clear contribution. We work hard, but offer a humane and fun work environment at an office located in the heart of downtown Boston.

The FSF is a mature but growing organization that provides great potential for advancement; existing staff get the first chance at any new job openings. This position is a great starting point for anyone who might be interested in other roles on our technical team in the future.

Benefits and salary

The job must be worked on-site at FSF's downtown Boston office. An on-site interview will be required with the executive director and other team members.

This job is a union position. The salary is fixed at $51,646.40 annually. Other benefits include:

  • conference travel opportunities,
  • full family health coverage through Blue Cross/Blue Shield's HMO Blue program,
  • subsidized dental plan,
  • four weeks of paid vacation annually,
  • seventeen paid holidays annually,
  • public transit commuting cost reimbursement,
  • 403(b) program through TIAA-CREF,
  • yearly cost-of-living pay increases, and
  • potential for an annual performance bonus.
Application instructions

Applications must be submitted via email to hiring@fsf.org. The email must contain the subject line "Web Developer". A complete application should include:

  • resume,
  • cover letter, and
  • links to any previous work online.

All materials must be in a free format (such as plain text, PDF, or OpenDocument, and not Microsoft Word). Email submissions that do not follow these instructions will probably be overlooked. No phone calls, please.

Applications will be reviewed on a rolling basis until the position is filled. To guarantee consideration, submit your application by Wednesday, May 27th, 10:00AM EDT.

The FSF is an equal opportunity employer and will not discriminate against any employee or application for employment on the basis of race, color, marital status, religion, age, sex, sexual orientation, national origin, handicap, or any other legally protected status recognized by federal, state or local law. We value diversity in our workplace.

About the Free Software Foundation

The Free Software Foundation, founded in 1985, is dedicated to promoting computer users' right to use, study, copy, modify, and redistribute computer programs. The FSF promotes the development and use of free (as in freedom) software -- particularly the GNU operating system and its GNU/Linux variants -- and free documentation for free software. The FSF also helps to spread awareness of the ethical and political issues of freedom in the use of software, and its Web sites, located at fsf.org and gnu.org, are an important source of information about GNU/Linux. Donations to support the FSF's work can be made at https://donate.fsf.org. Its headquarters are in Boston, MA, USA.

More information about the FSF, as well as important information for journalists and publishers, is at https://www.fsf.org/press.

Categorías: Software Libre

Community is the focus of 2015's International Day Against DRM

FSF - Mar, 05/05/2015 - 23:40

The groups are united in envisioning a world without Digital Restrictions Management (DRM), technology that places arbitrary restrictions on what people can do with digital media, often by spying on them. As the largest anti-DRM event in the world, the International Day Against DRM is an important counterpoint to the pro-DRM message broadcast by powerful media and software companies. The Day is coordinated by Defective by Design, the anti-DRM campaign of the Free Software Foundation.

This year, community members are the highlight of the Day. Activists have organized twelve events in Bangladesh, Canada, England, Guatemala, Italy, the Netherlands, Portugal, the US, and Greece (as of May 5th).

Events in at least nine countries. See dayagainstdrm.org for the most up-to-date list.

Four individuals with unique perspectives also worked with Defective by Design to write community posts: two blind anti-DRM activists, an anti-DRM tech librarian, and a social scientist/activist analyzing the rise of DRM in streaming media services.

Bookstores and publishers, including O'Reilly Media, are offering sales on DRM-free media and advocacy organizations allied with Defective by Design will also be making official statements. Activists in Russia, Romania, and France have already translated the anti-DRM flyer into their native languages, and more translations are in progress. More groups are expected to join on the day itself.

Zak Rogoff, campaigns manager for the Free Software Foundation, said "Powerful entertainment and technology companies use DRM to restrict our use of digital media, demanding control over our computers and network connections in the process. Our community is doing everything we can to organize and build tools to protect our freedom. Our opponents are strong enough to have the government on their side in most countries, but when we come together, we are strong too."

Individuals can participate with a variety of online and in-person actions on dayagainstdrm.org, from media downloads to gatherings. To be part of Defective by Design's year-round anti-DRM campaigns, supporters can join the low-volume Action Alerts email list or join the discussion on the email discussion list or #dbd IRC channel. Media stores, activist organizations and other groups interested in participating in the International Day Against DRM today or in 2016 should contact info@defectivebydesign.org.

About Defective By Design

Defective by Design is the Free Software Foundation's campaign against Digital Restrictions Management (DRM). DRM is the practice of imposing technological restrictions that control what users can do with digital media, creating a good that is defective by design. DRM requires the use of proprietary software and is a major threat to computer user freedom. It often spies on users as well. The campaign, based at defectivebydesign.org, organizes anti-DRM activists for in-person and online actions, and challenges powerful media and technology interests promoting DRM. Supporters can donate to the campaign at https://crm.fsf.org/civicrm/contribute/transact?reset=1&id=40.

About the Free Software Foundation

The Free Software Foundation, founded in 1985, is dedicated to promoting computer users' right to use, study, copy, modify, and redistribute computer programs. The FSF promotes the development and use of free (as in freedom) software -- particularly the GNU operating system and its GNU/Linux variants -- and free documentation for free software. The FSF also helps to spread awareness of the ethical and political issues of freedom in the use of software, and its Web sites, located at fsf.org and gnu.org, are an important source of information about GNU/Linux. Donations to support the FSF's work can be made at https://donate.fsf.org. Its headquarters are in Boston, MA, USA.

Media Contact

Zak Rogoff
Campaigns Manager
Free Software Foundation
(202) 489-6887
campaigns@fsf.org

###

Categorías: Software Libre

Future viewport, the design

Blender - Mar, 12/02/2014 - 17:34

As outlined in the previous post there are some technical and feature targets we want to achieve. Recapping here:

1) Performance boost for drawing code. Make sure we use the best drawing method always to pass data to the GPU/Support features that are only available on new OpenGL that will enable better performance and code.

2) Node based material definition for viewport – and definition of a new real – time material system used for rendering (GLSL renderer).

3) Compositing. Includes things such as outlines, depth of field, ambient occlusion, HDR, bloom, flares.

4) Support mobile devices (OpenGL ES).

What is the state so far:

* Limited compositing (in viewport_experiments branch). When we say limited we mean that the compositor is not tied up to the interface properly, rather it just applies effects to the whole contents of the framebuffer. What we would want ideally, is to not allow UI indicators, such as wires or bones from affecting compositing. This is not too hard to enforce though and can be done similarly to how the current transparency/Xray system works, by tagging wire objects and adding them to be rendered on top of compositing.

* Some parts of our mesh drawing code use Vertex Buffer Objects in an optimal way, others do but still suffer from performance issues by not doing it right, while others do not use it at all.

How will the soc_2014_viewport_fx branch help achieving the targets?

Soc-2014_viewport_fx is providing a layer that can be used to migrate to newer or mobile versions of OpenGL with less hastle, but also tries to enforce some good rendering practices along the way, such as the requirement in modern versions of OpenGL that everything is rendered through Vertex Buffer Objects. Also it removes GLU from the dependencies (since it uses deprecated OpenGL functionality).

Also it sets in place some initial functionality so things can be drawn using shaders exclusively. This is essential if we move to modern or mobile OpenGL versions at some point.

So it mostly helps with targets 1 and 4, but more work will need to be done after merging to realize those targets fully.

At some point, if we want to support modern or mobile OpenGL, we can’t avoid rewriting a big part of our realtime rendering code. The branch already takes some care of that so the branch should be merged and worked on (merging is the first step really), unless we do not really care about supporting those platforms and features.

My estimation, from personal experiments with manual merging, is that it would take about 2-3 weeks of full time work to bring the branch to master-readiness.

Can we focus on some targets immediately?

Yes we can. Some targets such as node materials or compositing, just assume GLSL support in mesh drawing which is yet to be realized in the branch fully so it’s not really blocking their progress. However, getting the branch in as soon as possible will mean less headaches during the merge.

Viewport usability design

Draw modes

Draw modes are getting a little bit unpredictable as to what they enable and are more tied to a real time material definition limited to specular/diffuse/textured. They are also bound to the texture face data structure which is becoming less relevant since we are slowly moving to a material based approach. Often artists have to tweak a number of material and object options to get the visual feedback they need, which can also be frustrating and it is not apparent to new users either. We need a design which allows artists to easily work on a particular workflow while being able to visualize what they want without extensive guesswork of how to visualize this best. Ideally we want to drop draw modes in favour of…

Workflow modes (model, sculpt, paint, animation, game shader design)

Different workflows require different data, and different visualizations. So we can define ‘workflow modes’, which includes a set of shaders and visualization options authored specifically for the current workflow. For instance, a ‘workbench’ mode in edit mode will have a basic diffuse and specular shader with wireframe display options. For retopology, it would make sense to use more minimal, transparent mesh display, like hidden wire, with depth offsetting to avoid intersection artifacts.

Example image of edit mode display options. Some options exist to aid in specific workflows, but this is not so readily apparent

For material definition or texture painting, users might want the full final result or an unshaded version of it for detail tweaking.

Debugging (logic, rigging, etc)

Drawing can offer visual feedback to make it easier for users to examine problematic areas in their scenes. Examples include order of dependency calculation or color-encoded vertex and face counts, or even debug options available to developers.


Easy to switch from one to another, easy to config or script

Using the workflow system, users should be able to get their display to be more predictable. Each workflow mode can expose settings for the shaders or passes used but we can allow more customization than this. A node interface will allow users to request data from blender and write their own shaders to process and visualize these data in their own way. We will follow the OSL paradigm with a dedicated node that will request data from blender in the form of data attribute inputs connected to the node. The data request system is at the heart of the new data streaming design and this means that materials and custom shaders should be able to request such data. Probably even access to real time compositing will be included, though memory consumption is a concern here, and we need to better define how data will be requested in that case.


Modernize! Assume that users will always want the best, most realistic, etc.

With the capabilities modern real time shading offers, we aim to add a third render engine using OpenGL, (next to internal and cycles) which can leverage the capabilities of modern GPUs and tailored to make real time rendering a real alternative for final rendering in blender. A lot of the components are already there, but we can push it further, with shader implementations optimized especially for real time rendering instead of trying to mimic an off-line renderer.

We want to make sure that our material display is pleasing, so we are exploring more modern rendering methods such as physically based shading (a patch by Clement Foucault using notes from Unreal Engine 4 is already considered for inclusion) and deferred rendering.

Needless to say this will also mean improved preview of materials for blender internal and cycles.

Categorías: Diseño 3D