jferg was one of the first people to write about the coverage in today's Observer in regards to the latest business happenings at Red Hat. The article touches on the launch of RH Advanced Server, but one of the most telling statistics was "Red Hat now has 90 percent of its 630 employees working to lure corporations looking to move their computing platform from expensive systems running on the rival Unix operating system to Linux, widely considered to be the more cost-effective choice."

Just saw in Red Hat's FTP's - Redhat 7.3 (codename:skipjack) is available for download. There aren't lots of changes there, but you'll find that RedHat 7.3 comes with KDE 3.0 (rc3 is on this beta), you'll need to remove the Ximian Gnome before upgrade, and in general - read the release notes before testing this release. As always, don't try it on your main Linux partition, and use the mirrors. Annoucment is here (thanks to Linux Weekly News)

Joel Parker Henderson writes "To improve security, my company is switching servers from Microsoft to RedHat, and from FTP to SFTP. The new RedHat has SFTP-- secure FTP with SSH and host fingerprints-- and I want to upgrade our people to use it. What are good SFTP clients? Priorities: an easy user interface, point-and-click renaming of remote files and folders, recursive directory transfers. Useful: drag-and-drop, resume broken transfers, synchronization of local and remote directories, written in Java, shareware or freeware. Thanks in advance for advice!"

Milo_Mindbender writes: "Over the weekend I was attempting to improve my CD ripping performance and discovered RedHat 7.2 was running my Ultra/ATA 100 hard drive in a very slow non-DMA mode. After a fair amount of searching for how to fix this, a trivial change (look here) improved drive performance from 3MBs to 38MBs! FSCK on my 40gb partition went from over 5 minutes to under 1! This issue wasn't documented in RedHat's manuals but it effected a number of boxes in our office so I'm betting many other people in the world have the same problem. This made me wonder how many other common Linux tuning snafus there might be that a lot of people are probably missing. Do you know of any?"

hezron writes "Red Hat VP, Howard Jacobson, sent a mass email explaining their acquisition of ArsDigita's assets. Here is the press release concerning the acquisition." The press release is actually a quick FAQ about the purchase - Howard does a good job of explaining the purchase and the reasons for it. Howard's a smart guy, and I hope that the purchase of AD will mean a longer life then how AD's past management was handling it.

Steve Cowan writes "According to an article at MacCentral, Red Hat has announced that they will produce a GNUPro toolchain and cross compiler for AltiVec-enabled PowerPC processors (such as that found in the Power Mac G4). It will be interesting to see just what kind of performance gains this will bring, because many believe that the full potential of AltiVec is far from tapped."

sparrow_hawk writes: "One of Linux's strengths has always been the wide variety of older/obsolete hardware it supports. However, most modern distributions seem to assume that the user has a brand-new machine with processor and RAM to spare. Linux Journal reports on the RULE project (Run Up2Date Linux Everywhere). They are trying to come up with a low-resource-requirement, easy-to-use Linux installation for use on older hardware, intended as an option when you install Red Hat Linux. The FAQ has more information."

Dare Obasanjo contributed this followup to an article entitled The Myth of Open Source Security Revisited that appeared on the website kuro5hin. He writes: "The original article tackled the common misconception amongst users of Open Source Software(OSS) that OSS is a panacea when it comes to creating secure software. The article presented anecdotal evidence taken from an article written by John Viega, the original author of GNU Mailman, to illustrate its point. This article follows up the anecdotal evidence presented in the original paper by providing an analysis of similar software applications, their development methodology and the frequency of the discovery of security vulnerabilities." Read on below for his detailed analysis, especially relevant with the currency of security initiatives in the worlds of both open- and closed-source software.

Mr.Intel writes: "CNN released a story reviewing LinuxWorld and Linux's progress since last year. They mention new hardware and market niches coming to light in 2001. Mike Balma, a Linux strategist at HP, said 'The move to an increased array of outsourcing, migration and porting services that have been traditionally available to Unix customers is part of the continued rollout of the operating system within HP's product line. Previously, HP had informally offered such integral service and support only to its best Linux customers. But as the operating system gains momentum, more customers are seeking more services.' I hope this means as installed customer base increases, companies like RedHat will start making real money." Archie Steel writes "Interesting news for the Linux Desktop: Open For Business have an article on the partnership by HP and MandrakeSoft announced at the current Linux World Expo." Update: 01/30 16:56 GMT by H : Just a quick note: Rob is gonna be in the Golden Penguin Bowl, while I'm going to be doing a presentation with the Boston Consulting Group about the demographics of open source developers - if you are interested, it's tomorrow (Thursday) from 4:00 - 5:15.

Outland Traveller writes: "A few months ago I sent some feedback to RedHat concerning their then $30/month RHN subscription service. I asked them to consider offering a $5/month low end version more suitable for home users with multiple computers. I'm sure that a plenty of other people offered the same suggestion, but I was still surprised when I opened my email this morning and found that the exact service I asked for is not only being offered, but that fast access to iso images has been added as well, among other improvements. I guess I now have to put my money where my mouth is :) Seriously though, this should be good news for people who download RedHat's .iso images but want to financially support RedHat in a way that makes sense."

An Anonymous Coward writes: "News forge is running an interview With lokigames president Scott Draeker. Looks like the leaked email wasn't a hoax after all. A very sad day for Linux. AOL? Redhat? IBM? someone please help these guys."

keithp writes "The results of a few short hours of hacking by blizzard (with a bit of help from me) can be seen here." According to Keith, "The hope is to have a patch of less than 100 lines; currently it's more like 400 lines. ... The patch uses a new version of the Xft library available at http://keithp.com. That will be integrated into the XFree86 CVS tree after 4.2 stablizes; the existing Xft library will remain in place for backwards compatibility. One feature of the new library is that it works with older X servers that don't have the Render extension, providing AA text (including the LCD optimizations) for any screen with a TrueColor visual." Chris Blizzard provided a link to the patch itself, as it stands right now.

Paul Coe Clark III writes: "I caught Michael Tiemann, CTO of Red Hat, in Washington yesterday and grilled him about the DMCA, the SSSCA, the Sklyarov case and the future of Linux."

kengreenebaum writes: "Webtechniques has a short but interesting article on HP's approach to a secure but expensive LINUX distro. Basically they started with RedHat 7.1 and added compartments; an extension to the age-old chroot jail concept where the processes representing major services run. Kernel extensions allow HP (or the administrator) to specify which compartments can access which kernel resources including individual files, network stacks, and each other. HP has Technical Product Brief as well as other material online. Interesting to compare HP's approach to that of the NSA's Secure Linux projects. These concepts sound like a solid way to prevent buffer overflow type security holes in individual services from compromising the entire machine. At $3000 HP-LX is too expensive for many to experiment with but the NSA's code seems to be more readily available. Anybody have experience with these distributions or with similar approaches to Linux security?"

Hitch asks: "My LUG's mailing list has had a thread for about a week now arguing about Red Hat's policy which prohibits calling CD's burned from iso's available on Red Hat's site 'Red Hat Linux' or including 'Red Hat' in the name of the CD in any way. This includes things like 'Sombrero Rojo' and 'Maroon Head Covering' according to some of their pages. And according to some others, you cannot make a CD called 'My Linux' with the line 'Contains Red Hat version X.X' in small print underneath. We have, however, found another page that says precisely the opposite, also on the Red Hat website. I was wondering what the rest of the community's thoughts on this are, and perhaps since I know Red Hat people read this, what the official word is. Primarily we're concerned for Installfests, burning and handing out CD's to friends, and things like CheapBytes. How does this affect them?" According to a recent article on NewsForge, Red Hat has changed their Trademark policy. Hopefully the new changes will make the policy less confusing. What do you think about the new changes to the policy?

Several folks have e-mailed about the formation of Tungsten Graphics, which is composed of quite a number of ex-Precision Insighters. Linuxgames is carrying a bit of a conversation with Frank LaMonica, the CEO of the new company. They've got a contract with Red Hat already in place. Frank's statement summarizes what they are doing well: "The work we are doing involves Mesa ^? and XFree86, including both 2D and 3D multi-screen technology, and we are working very closely with the OpenGL ^? ARB to maintain the integrity of the OpenGL API. We believe that OpenGL 2.0 needs more industry support, so we are working to help generate that support. DRI ^? technology is still in its infancy, and TG plans to help bring it to full fruition. Our first step in that goal is to significantly improve the existing open source DRI driver for the Radeon chipset. That driver is tentatively scheduled for release in late spring or early summer of 2002. "

jeffy124 writes: "Red Hat and Lineo, the major spearheads of Embedded Linux, have said that Microsoft's recent white paper comparing Linux and Windows XP embedded is full of inaccuracies, false facts, and overall distorts the value of Linux in general. Lineo has gone as far to say it flat out lies about Linux. ZDNet has Lineo's response, Red Hat comments, and a summary article." Updated by HeUnique: LynuxWorks has also wrote a response (only this one is a bit more detailed).

You can't help but know that Microsoft and the Department of Justice (plus several of the states that joined in the suit) are attempting to settle their antitrust dispute. The rest of the states are holding out for a settlement with more teeth, or a continuation of the case. A few links from the past few days: The LA Times looks at the states still opposing Microsoft. Microsoft defended the settlement before a Senate committee, which was crippled by political maneuvering (see also the NYT story). The speech given by the CEO of Red Hat is online. Microsoft filed a brief with the court, unsurprisingly urging the court to accept the settlement. The Register has a story on the proposed settlement, which is available at the DOJ Antitrust website. Linuxplanet has some advice for people who want to comment on the settlement - you've got 60 days from November 28. Finally, Microsoft has named two people to help it comply with the proposed settlement.

Now that Linux kernel 2.5 is under development by Linus and others, the all-important job of maintaining and updating the "old" kernel series (the one that people rely on in day-to-day use) has fallen to 2.4 maintainer Marcelo. You asked Marcelo about everything from the influence of politics (age and otherwise) to his working enviroment and approach to maintainership; his answers are below.

One of the most-heard complains from people who use distributions like Red Hat, Mandrake or SuSE is the "dependency hell" problem. You want to install an RPM and bang -- you have a dependency problem. There have been a few attempts to overcome dependency problems: SuSE with their YOU (Your Online Update), Mandrake with URPMI, and Redhat with their UP2date program. There is also a solution from Aduva called Aduvizor, but it's not supporting the latest distributions yet. Read on to learn about another interesting solution ...