Summary of the FreeBSD Ports and Packages Summit at BSDCan 2011

Just a quick note to point to my slides that summarize the Ports and Packages Summit at the FreeBSD DevSummit during BSDCan 2011, which can be found here. Also, we looking forward to feedback on the PKGNG project that was announced earlier and will replace the current pkg_* tools to handle ports installation and package handling and which will be a focus for portmgr over the next few months.

Skype for Mac 5.x security vulnerability

As the Leave Comment feature on Skype’s blog does not seem to work in Safari, I’ll leave some comment on this here. Some serious information is incorrect or missing from Skype’s security information for Skype for Mac 5.x (2.x is rerported not to be affected).

Skype released a very terse message on their Mac blot today pointing to an earlier post on their Security blog. The information in this post is either incorrect or there is another vulnerability out there that they haven’t informed their users about yet. The vulnerability described in the blog post explicitly states that a specially crafted, malicious “message would have to come from someone already in your Skype Contact List”. I have seen many crashes over the last few weeks with version 5.1.0.914, none of which caused by messages from people in my contact list, but by contact requests, which for obvious reasons can be sent by people not (yet) in ones contact list.

If these crashes are related to this vulnerability, it would contradict both Skype’s statement that the malicious message has to be sent by an approved contact and that the vulnerability is not exploited in the wild. Hopefully, Skype is right and they are unrelated, but to err on the safe side I would recommend anyone using Skype for Mac 5.x to not wait for Skype to release a new version next week, but to upgrade immediately to the latest release 5.1.0.922 here. This version will not show up via the Check for Updates menu as Skype deemed the hotfix non-critical, exactly because it can only be caused by approved contacts and is not seen in the wild, so their users have to find out and install the update manually themselves.

Update: Skype has released Skype for Mac 5.1.0.935 which includes unspecified Security updates with no further explanation as they wish to “wait for the majority of our users to update before detailing / discussing any of the specific issues that have been fixed”.

Update 2:Legitimate contact requests also crash Skype.

Vestamager

With the lovely spring weather during the Easter holidays, it was time to explore so-called nature around a major city like Copenhagen. Not far from here is the nature reserver Vestamager. As can be seen in the picture below, it’s actually so close to downtown Copenhagen that you can see Town Hall. Even with Copenhagen Airport, modern highrises, and a highway constantly visible and audible in the background, it’s quite a nice outting, especially only with a 15 minute metro ride.

Copenhagen Town Hall and cows

Spring is here

Also on the inside of the window

Frederiksberg Have

Last week, we saw one of the first days with warm and sunny spring weather. We decided to go for a trip to Frederiksberg Have for ice cream. Of course, we did bring the camera and shoot some of the local city wildlife. The ducks were clearly more interested in the food, but we did manage to get some actions shots. All pictures here.

FOSDEM 2011

In a few weeks, I’ll be heading to the FOSDEM conference in Brussels again this year. I’ll spend most of my time at the FreeBSD booth for the FreeBSD Foundation, so if you’re there drop by to say hi, discuss the Foundation’s work, pick up a Foundation flyer, check out the swag, or make a donation. There will also be a BSD DevRoom where there will be some interesting presentations and discussions that I might attend. Remember, FOSDEM is free to attend. Hope to see you there!

NLLGG BSD community day, Utrecht (NL)

This weekend I had the pleasure of attending the third edition of the BSD community day at the NLLGG meeting in Utrecht, the Netherlands. I was happy to see that there were at least as many, if not more, attendees at the BSD track as the general track.

The BSD track featured 4 interesting talks. Rene Laden opened the day with a talk on porting ROS (Robot Operating System) to FreeBSD, detailing some of the difficulties of getting the core bits working, which already are in ports and some ideas and plans for future work. Ed Schouten was next with an update on integrating the clang compiler into FreeBSD. A lot of work has already been done here, but still more to come. The third talk by Paul Schenkeveld had some very interesting ideas of how to combine nanoBSD‘s image building features with ZFS snapshots as generalized way to upgrade software on servers, while minimizing downtown and providing an easy rollback when the upgrade doesn’t go as expected. The day ended with Otto Moerbeek’s overview of some of the security features in OpenBSD, with special focus on privilege separation in and between processes.

A big thanks to NLLGG for hosting the event, I certainly both enjoyed the day and learned some new things. We’ll see each other again next year at EuroBSDCon.

South Africa

After sorting through hundreds of pictures, I’ve finally uploaded a selection. In quick succession, Johannesburg/Soweto, Addo Elephant National Park, Knysna, Mosselbay, Cape Town (Table Mountain), and Franschhoek. Enjoy.

Goodbye facebook

To all my dearest facebook friends, I’m sorry you all lost a “friend” today, but don’t despair I did not unfriend you, I unfriended facebook. The whole facebook experience was getting more and more of a nuisance to catch up with that life is much better without it. Highly recommended. So don’t worry and fret, there are plenty of other channels to reach me and I’ll happily share a mug of coffee, a jug of beer or a pot of hot steaming cocoa next time we meet. And to you facebook, goodbye, farewell, and good riddance.

FreeBSD Foundation End-of-Year Fundraising Campaign

While the snow falls outside and the holidays approaching fast, it is time for the FreeBSD Foundations yearly End-of-Year fundraising campaign. This year again brought an impressive list of accomplishments by the Foundation, to mention a few:

  • Provided $100,000 in grants for projects that improve FreeBSD in the areas of:
    - DTrace support
    - High availability storage
    - Enhanced SNMP reporting
    - Virtualization and resource partitioning
    - Embedded device support
    - Networking stack improvements
  • Allocated $50,000 for equipment to enhance FreeBSD project infrastructure.
  • Sponsored 8 FreeBSD related conferences.
  • Funded 16 travel grants giving increased community and developer access to conferences.
  • Provided legal support to the FreeBSD project.

We are fortunate to already have reached half of this years fund-raising goal of $350,000, so please consider a donation, no matter how large or small, to help us reach that goal and help us continue supporting the FreeBSD community through next year as well.

Read the full letter by Justin Gibbs, President of the FreeBSD Foundation.