Discussion September 2016

discussion@lists.fsfe.org

13 participants
8 discussions

Please help us spread the word on Roundcube Next
by Georg C. F. Greve 29 May '17

29 May '17

Dear all, In the spirit of full disclosure, let me start by pointing out that I am CEO and - along with other employees, some of whom you will also know - shareholder of Kolab Systems AG (https://kolabsystems.com) and that Kolab Systems has been the driving force behind Roundcube for the past years. Kolab Systems has also agreed to help the Roundcube Next team in its aim to refactor and build the next technology generation. So I am not neutral. That said, I genuinely believe it is extremely important for the Free Software community to get behind Roundcube Next and help us push it forward, as well as bring others on board with it. The longer story is here: http://blogs.fsfe.org/greve/?p=676 TL;DR, Part I: As a community we *require* technologies that compete with Google Apps, Office 365 and the likes in features, convenience, UI/UX, yet provide full control and freedom to users. TL;DR, Part II: Application Service Providers should get on board with that push *right now* because otherwise they will find themselves forced into becoming re-sellers for Office 365 and Google Apps -- and increasingly unable to compete with their features & networking effects. Some already understood this, and have joined the Roundcube Next community, such as cPanel (http://blog.cpanel.com/on-to-the-next/), Tucows, and now also Fastmail (http://blog.fastmail.com/2015/06/05/fastmail-supports-roundcube-next-develo…). But there are many more providers using Roundcube today who have not joined, nor have they contributed in the past. For them it should be obvious to join. And then there are those that have their own home-brew interfaces (such as Fastmail) who get the unique opportunity to become part of a new, growing community that will create a technology that will make them fully competitive against the "big clouds" in 18 months from now. Unfortunately, most of them have not realized this yet. So unless your provider is cPanel, Tucows, Fastmail or Kolab Now, all of who are part of this already, please encourage them to step up and join the community to push for Roundcube Next. Direct link for your convenience: https://www.indiegogo.com/projects/roundcube-next--2/x/4658765#/story Best regards, Georg -- Georg C. F. Greve <greve(a)fsfeurope.org> Member of the General Assembly http://fsfe.org/about/greve/ http://blogs.fsfe.org/greve/ http://identi.ca/greve

8 17

Article "FRAND And The Clash Of Industries"
by Matthias Kirschner 28 Nov '16

28 Nov '16

Dear all, Simon (in CC) wrote an article "FRAND And The Clash Of Industries". https://meshedinsights.com/2016/07/12/frand-clash-of-industries/ We would be interested in feedback about it. (This is related to the article "Why is FRAND bad for Free Software?" <https://fsfe.org/activities/os/why-frand-is-bad-for-free-software.en.html>) Regards, Matthias -- Matthias Kirschner - President - Free Software Foundation Europe Schönhauser Allee 6/7, 10119 Berlin, Germany | t +49-30-27595290 Registered at Amtsgericht Hamburg, VR 17030 | (fsfe.org/donate) Contact (fsfe.org/about/kirschner) - Weblog (k7r.eu/blog.html)

3 4

Uncorrectable freedom and security issues on x86 platforms
by Timothy Pearson 25 Oct '16

25 Oct '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, It has recently come to my attention that many in the free software movement are unaware of a relatively new development on x86 platforms that permanently removes the ability to use these platforms without also continually executing signed, proprietary code at the highest possible privilege level. All post-2013 (AMD) and virtually all post-2009 (Intel) systems contain this mandatory technology, and therefore, by design, can never be converted to run using pure FOSS. Prior to these changes projects such as coreboot could be used to replace the boot firmware with a FOSS alternative. The technologies in question are the Intel Management Engine (ME) and the AMD Platform Security Processor (PSP). Both serve effectively the same purpose; to ensure that the physical owner of the machine never has full control of said machine. These technologies, in turn, are used to implement various forms of remote control and Digital Rights Management (DRM) technologies, including Secure Boot, which even now requires FOSS users to purchase a license from Microsoft to boot FOSS on affected machines that lack an appropriate Secure Boot override. This includes, for example, many newer laptops. Major distributions have worked around this issue by purchasing a signing key from Microsoft for their binary packages, but the end user is unable to modify the signed software without a license from Microsoft, even though they have the source code available to them under the GPL. Furthermore, these signed, proprietary, binary-only firmware blobs must execute on the service processor(s) before the main x86 CPU cores are even released from reset (AMD), or will hard reset the entire system after around 30 minutes of non-operation (Intel). These blobs continue to operate on the service processor(s) as long as the system is powered on, and in the case of the Intel ME they also continue to operate while the system is powered off but still has access to power (e.g. plugged in or charged battery attached). These services processors have full access to system memory and all system peripherals, effectively giving the binary blobs executing on them a higher privilege level than even the operating system kernel. Due to the ability to access system peripherals, these proprietary blobs could easily contain code to exfiltrate encryption keys, remotely activate microphones and cameras, plant unwanted data, or simply remotely disable the ability of the machine to boot FOSS operating systems entirely. Finally, the Intel ME firmware can be forcibly updated by a remote entity; it is unknown whether the AMD PSP contains similar functionality at this time. So, what can an average user do? The obvious answer is to simply switch away from using the x86 architecture entirely. As Intel owns all rights to the x86 architecture, there will never be any new manufacturers licensed to make x86 chips, and therefore there will never be any competition to remove these DRM-laden antifeatures. There are numerous alternative architectures available, especially for those already using software with the source code available (i.e. FOSS), all of which can be licensed by other manufacturers should the need arise. ************************************************************************ General Overview of Alternate Architectures ************************************************************************ === ARM === While the ARM architecture may be more wildly known for locked-down computing products, there are several ARM devices on the market that allow full FOSS replacement of the boot firmware. Generally these are laptops, tablets, and embedded systems, with one example laptop being the ASUS C201 Chromebook: https://libreboot.org/docs/install/c201.html Using ARM in a mobile form factor also provides advantages of low cost and long battery life, albeit at the expense of overall system performance. === POWER === IBM has recently released their high-performance POWER8 architecture for third party licensing, and has also released a small treasure trove of firmware and documentation for these devices. POWER is the only architecture currently competitive with Intel in terms of raw performance, and boots using a fully FOSS firmware with no DRM antifeatures embedded. The primary disadvantage of power is cost, as it is currently targeted at the server and datacenter markets. We are attempting to bring POWER to the high-end workstation market in a FOSS-friendly form via the Talos™ Secure Workstation, but need additional interest to make this a reality: https://raptorengineeringinc.com/TALOS/prerelease.php === MIPS === Less well known than ARM, and with less vendor choice, MIPS is often overlooked. However, China has revived this architecture for general purpose computing with the Loongson core, and several machines are available using this processor. As a niche processor it has far worse performance than even a low-end ARM processor, but marginally better energy efficiency. Not recommended in light of ARM and POWER8: http://www.lemote.com/html/product/atx/2015/1227/8.html === RISCV === While this architecture is extremely limited in performance, price, and performance per watt compared to x86, ARM, or POWER, it is also one of the only fully open source CPU architectures available outside of an FPGA. and may eventually be competitive with MIPS in terms of raw performance. Currently there are no RISCV SoCs in production, however projects such as lowRISC aim to change that: http://www.lowrisc.org/ ************************************************************************ So, what are your thoughts on the current x86 proprietary software situation? Are you willing to continue to use FOSS software inside the ever-shrinking x86 "software jail", or are you possibly willing to give up some cost or performance advantages in order to retain full control of the software running on your hardware? This is a question that will need to be answered soon; the long-term consequences of a fully TiVo-ized computing world are not to be taken lightly, and thus far the free software community has put up very little resistance to the antifeatures being forced into modern x86 platforms. I hope to provoke wider discussion on these topics via this message. Thank you for your attention! - -- Timothy Pearson Raptor Engineering +1 (415) 727-8645 (direct line) +1 (512) 690-0200 (switchboard) http://www.raptorengineeringinc.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJXAoLsAAoJEK+E3vEXDOFbstsH/0BrB1VLKuSDDPdV4C7qJQOc 5euFCVc3cjZJhl+oGHQ2LuSuDM6J9DuYRxJQq53Xx9WYrNMSuqNjcnaagIhew+Ci ocMEQNB3G7ob4+56kyYrOTL7YoqrFcqa9Y5rpBXBt5ufnYt/g3n1Zin7xQycJ/rP ldLeADsaTJpsRgWLBTDnOAmMGBh1Xv4d4w1ZYAgoNfGJD6nc7NhihajIMZRIgHIn /Uo2brToF6exizHFMGWLwYdEKLOkoau7Bmz5yaGKI0JJF7hzq/G9dpecKf42G1ra Fr9q07JHCre7JJrq6SlbjapJyDB+OOK+YoFDjTsxaikV8E20AIQG4VkS3DsL7rU= =47/v -----END PGP SIGNATURE-----

6 13

Gigablast OSS search engine
by Paul van der Vlis 19 Sep '16

19 Sep '16

Hello, I found an open source search engine, what looks-like useable: https://gigablast.com/ Strange that I've never heard of it before, it's OSS since 2013: http://www.prnewswire.com/news-releases/gigablast-now-an-open-source-search… When I search for the word "license" in the source code I find many different licenses like GPL2 or higher, LGPL, MIT, Apache, Lucent, OpenSSL, Eric Young. https://github.com/gigablast/open-source-search-engine/search?p=2&q=license… The search engine did not found all pages, but after adding them everything was found directly. http://www.gigablast.com/addurl And many sites are allready indexed. There is an advanced search with many possibilities: http://www.gigablast.com/adv.html Disadvantage: There is also a "commercial version" what seems to be faster, not sure about the license there. Not sure what I am using when I use the webinterface at Gigablast.com. Does somebody know someone who uses for sure the OSS version? Yes, I've heard about YaCy. But when I tested it, I found it not useable. e.g. here: http://5.45.105.16:18091/ more sites here: http://www.yacyweb.de/peers.htm Any comments? With regards, Paul van der Vlis. -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/

4 5

FSFE starts sale of older T-shirts
by Reinhard Müller 19 Sep '16

19 Sep '16

Dear friends of Free Software! We have just started to sell some T-shirt remnants for a reduced price of 10 Euro. So if you are interested in making a bargain while at the same time helping us to tidy up our merchandise stock, just have a look at https://fsfe.org/order/order.html and watch out for the red numbers. Have fun shopping :-) Regards, -- Reinhard Müller * Financial Officer * Free Software Foundation Europe *

1 0

[summit] Please share your feedback and pictures
by Erik Albers 16 Sep '16

16 Sep '16

Dear friends and Fellows of FSFE, the summit is over and so far from the feedback we received, it seems like participants enjoyed it and had a great time. Still, we are seeking for more input and if you have been to the summit, we are eager to hear your feedback! Please let us know what did you like and what not, what we should improve if we would do it for another time or anything else you would like to let us know. For the evaluation of our PR-activity it would also be interesting to know from where did you hear about the summit? You can give us feedback by sending an email to summit2016(a)fsfe.org or by writing into this etherpad: https://fsfe.titanpad.com/72 Also, we are preparing a page for everyone who could not have been with us at the summit. The page shall collect the video recordings of the talks and slides but also pictures of the venue, the speakers and the surrounding. Besides archiving this information for our community, the page might also he helpful this year in christmas fundraising. (many donors like visible activities and pictures) So, in case you made some pictures and videos of the summit, we would be really delighted if you share (some of) them with us. You can upload your pictures/videos here: https://web.3rik.cc/nextcloud9/index.php/s/TRizefznhSY2zpm You should be fine that if we choose your picture(s), they will be published CC-BY 4.0 or CC-BY-SA 4.0 or CC0. Means that if you have a preference, please let us know. Also, when you upload your pictures, do not forget to let us know who the author is! The easiest way to do so, would be to put your pictures in a container with your name as container-name. Best regards and thanks to everyone who made this event possible and who made it worth happening by participating. Best regards, Erik PS: please share this email with everyone you know who was at the summit but maybe is not on this list. -- No one shall ever be forced to use non-free software Erik Albers | Free Software Foundation Europe OpenPGP Key-ID: 0x8639DC81 on keys.gnupg.net

1 1

Is there a small hacker friendly firewall for home use?
by Miguel Tavares 07 Sep '16

07 Sep '16

Hi all, With everything wanting for some reason or another to connect to the internet I was wandering if anyone has some piece of advise on how to protect a home from data leaks. I was thinking of finding a device that would allow me to create a wifi network for this home devices (such as TV and what's not), monitor the connections created and have a white list of names and/or IP address that connections would be allowed. Thanks in advance, Miguel

6 10

page for the summit
by Cellini Bedi 05 Sep '16

05 Sep '16

Dear All, In the upcoming weeks we will set up a page for the summit that will show in back sight our talks, videos, pictures, press feedback etc. Done carefully, that page can be helpful for various things, among them PR activities and Christmas fundraising. For this, you will receive another email to give your feedback and to please send us your pictures, most probably at the end of the week. Today and with this email we only kindly ask you to help us in collecting whatever link that you have or have found in the internet about the summit in our pad: https://fsfe.titanpad.com/70 (which this time is public and editable for everyone : ) Best, Team Summit -- Imagine no European is any longer forced to use non-free Software! Save the date: September 2 - 4, 2016 - BCC Berlin, Germany Spread the word: https://fsfe.org/summit16#spread

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

Discussion September 2016