Spring has been getting rather unseasonably hot for Apache users as far as security flaws go. First there was news of how the FREAK (Factoring Attack on RSA-EXPORT Keys) vulnerability could impact Apache. For more on FREAK see this [excellent analysis](http://blog.cryptographyengineering.com/2015/03/attack-of-week-freak-or-factoring-nsa.html) by Matthew Green, a cryptographer and research professor at Johns Hopkins University. Green points out that "Apache mod_ssl by default will generate a single export-grade RSA key when the server starts up, and will simply re-use that key for the lifetime of that server. What this means is that you can obtain that RSA key once, factor it, and …

Member Avatar
+1 forum 0

Yesterday, the [URL="http://www.businessweek.com/technology/content/dec2009/tc20091222_416170.htm"]Federal Appeals Court ruled[/URL] in what appears at first blush to be a shocking decision, that Microsoft must stop selling Word 2007 by January 11, 2010. But a closer look at the decision suggests that this isn't as big a deal as it first seems. Sure, Microsoft has to pay Canadian developer [URL="http://www.i4i.com/"]i4i[/URL] close to $300 million, but that's really chump change for a company that has tens of billions in cash reserves. Microsoft itself has tried to minimize the impact calling the disputed tool, "a little used feature." Regardless, it appears, this has no impact on product …

Member Avatar
+0 forum 0

Linus Torvalds, creator of the Linux kernel, said at the [URL="http://events.linuxfoundation.org/events/linuxcon"]LinuxCon[/URL] in Portland yesterday that, "We are not the streamlined, small, hyper-efficient kernel I envisioned 15 years ago," he said. "Our kernel is huge and bloated. Whenever we add a new feature, it only gets worse." It's time to put Linux on a diet. What we need is a very small kernel that loads support via external files. Though Linux is a modular kernel, it seems that everything gets compiled in to the central code slug but I have a solution. Instead of making the kernel impossibly huge and compiling …

Member Avatar
Member Avatar
+2 forum 7

[URL="http://www.linspire.com"]Linspire[/URL] and Microsoft in agreement over something? Although it sounds unlikely at first glance, that is exactly what is happening as the developer of the Linspire commercial and Freespire community desktop Linux operating systems announces it will join Microsoft in its efforts to improve the ability of OpenOffice.org users to work with the Office Open XML format. To this end, Linspire has confirmed that all future versions of Linspire will include Open XML bi-directional translators between ODF and Open XML. It should not come as too much of a surprise, I guess, especially as both Novell and Xandros have already …

Member Avatar
Member Avatar
+0 forum 6

Tim Berners-Lee has a [URL="http://dig.csail.mit.edu/breadcrumbs/blog/4"]blog [/URL]that is, more often than not, worth reading. Certainly that has been the case over the weekend as the inventor of the World Wide Web has been talking about reinventing HTML. Referring to the W3C HTML group Berners-Lee admits that it is important to have real developers on the ground “involved fully with the development of HTML” and just as important to have browser client developers involved and committed. In his all encompassing vision, Berners-Lee goes on to say that users and user companies and makers of related products should also be involved. Which all …

Member Avatar
+0 forum 0

I was reading the [URL="http://google-code-updates.blogspot.com"]Google Code Blog [/URL]and noticed that Google software engineer Matthias Zenger happened to announce the availability of the updated Google Base Data API last week. This lets you develop applications that can dynamically interact with Google Base, obviously. Perhaps a little less obviously it also allows you to query other users' published content, making domain-specific search mashups a possibility. The API is ReST-full and based on the GData protocol, which combines XML-based syndication formats with feed-publishing, using a mix of Atom and RSS. What excites me even more, although I admit to being fairly easily pleased, …

Member Avatar
Member Avatar
+0 forum 2

It has been a busy week for both [URL="http://www.w3.org"]W3C [/URL]and anyone who is serious about XML. The [URL="http://www.w3.org/XML/Core/"]W3C XML Core Working Group[/URL] has published the fourth edition of XML 1.0, and second editions of XML 1.1 and Namespaces in XML 1.0 and 1.1. Forming, as they do, the bedrock for W3C-defined technologies used in the querying, transforming, displaying, encrypting, and optimizing of XML their importance cannot be overestimated. As well as correcting ‘all known errata’ according to a W3C release, the revised specifications also clarify where before there was ‘potential for misunderstanding’ although I have to admit I have yet …

Member Avatar
+0 forum 0

The End.