Show Notes: linuxactionnews.com/246

The post Linux Action News 246 first appeared on Jupiter Broadcasting.

Show Notes: linuxactionnews.com/233

The post Linux Action News 233 first appeared on Jupiter Broadcasting.

Show Notes: linuxunplugged.com/412

The post Going Deepin on Fuchsia | LINUX Unplugged 412 first appeared on Jupiter Broadcasting.

Show Notes: linuxactionnews.com/124

The post Linux Action News 124 first appeared on Jupiter Broadcasting.

Show Notes: linuxunplugged.com/319

The post Positive in the Freedom Dimension | LINUX Unplugged 319 first appeared on Jupiter Broadcasting.

Show Notes: fridaystream.com/12

The post Storage Heartbreak | The Friday Stream 12 first appeared on Jupiter Broadcasting.

Kaia is the CEO cofounder of keyboardio – premium ergonomic keyboard using open source and open hardware!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed

Become a supporter on Patreon:

Show Notes:

• Keyboardio: heirloom-grade keyboards for serious typists
• keyboardio (@keyboardio) | Twitter
• (1) Keyboardio
• Keyboardio (@keyboardio) • Instagram photos and videos
• Adafruit Industries, Unique & fun DIY electronics and kits
• Welcome to delightful, modern payroll | ZenPayroll
• HipChat – Private group chat, video chat, instant messaging for teams | HipChat
• Kaia Dekker (@quince) | Twitter

Transcription:

ANGELA: This is Women’s Tech Radio.
PAIGE: A show on the Jupiter Broadcasting Network, interviewing interesting women in technology. Exploring their roles and how they’re successful in technology careers. I’m Paige.
ANGELA: And I’m Angela.
PAIGE: So, Angela, today we’re interviewing Kaia, she is from Keyboardio, which is a badass software company that is trying to reinvent the way that we use keyboards, and we talked to her about the Kickstarter process, the open hardware process, the open software process, and how she got involved in all that, so it’s a really fascinating interview.
ANGELA: And before we get into that, I just want to mention that you can support Women’s Tech Radio and the Jupiter Broadcasting Network by going to Patreon.com/today. That is a general bucket of Jupiter Broadcasting support. We have a bunch of other shows, but specifically if you go there and you donate, it is also contributing to Women’s Tech Radio.
PAIGE: And we get started by asking Kaia what she’s up to in tech today.
KAIA: I am Kaia Dekker and I’m currently the co-founder and CEO of a company called Keyboardio. We make premium ergonomic keyboards that are also open hardware, so they’re super hackable. We give you the firmware source, we give you schematics for the electronics, and still are selling it fully assembled as a finished product, but at the same time, it’s also open hardware. So if you want to open it up and hack it, you can.
PAIGE: So, an open hardware keyboard. How did you get there?
KAIA: My co-founder who is also my husband had really bad wrists and cubital tunnel, like a repetitive stress injury from typing too much. He professionally had been a programmer for most of his life, and had tried out something like 20 or 30 different ergonomic keyboards, and none of them were really working for him. So he started out as sort of a hobby project trying to build his own that would be tailored specifically to him and have a working keyboard that wouldn’t make his wrists hurt too much. And he started sort of spending more time on this and I was just getting out of business school and was trying to kind of what I wanted to do next. I knew I didn’t want to go back to the companies that I had worked at before, but hey, we may be able to spin this into a business! And keyboards in particular were really interesting to me, mostly from a blank slate design perspective where it’s this thing that most of us are using for eight hours plus almost every day that we literally have our hands on every day. It’s a very intimate, long lasting relationship with an object, but it’s not something that had seen a lot of design or really thought put into the design. Innovation, the basic keyboard design, it’s based on what a typewriter looked like in the nineteenth century which was based on how you could build something in the nineteenth century. The technology has come a lot farther, the understanding of what makes for good design has come a lot farther, and there is no reason not to make something that would be better. So I was really attracted to the idea of being able to rethink this tool that we use all the time and what would it be like if you were to start over a little bit. We ended up with something, it’s a little weird, a little different. So the materials are different. We have an enclosure made out of wood as opposed to plastic or aluminum. The shape is really different. It’s based around originally research on different hand shapes and what keys people can reach easily, and iterated probably two dozen times before we ended up where we are today. It’s fully programmable, so it’s trying to be a little bit smarter as a piece of hardware as opposed to just sort of a dumb input device.
ANGELA: Right, and specifically one of the first things I pick up when I see your keyboard is that it’s the left and the right hand are separated. They’re broken in the middle if that makes sense. And we’ve seen Microsoft put out a keyboard like that, but what they did was they took a standard keyboard and just broke it in half essentially and moved it at an angle, whereas yours, the actual keys are placed differently with more focus on thumb work than any other keyboard that I’ve seen.
KAIA: Yeah, so we’ve put the keys in columns because that’s the way, if you look at your hands and sort of bend your fingers, they move in a column. They don’t move in a sort of strange diagonal method, the staggered layout of a traditional keyboard. And we’ve actually somewhat subtly arched them to follow the actual arch that your fingers make. It takes a bit of retraining to follow an ergonomic layout, but once you do, it just feels a lot more natural, which makes sense. It’s building something designed around how your hands work as opposed to just following the sort of cargo culting the same thing that we’ve done for a very long time.
ANGELA: Now, I have a question. It is reprogrammable, but when I was taking typing classes back in seventh and eighth grade, I learned some history about keyboards, and that is that they used to be in alphabetical order, and this may or may not be accurate.
PAIGE: It’s accurate.
ANGELA: Okay. And that it was scrambled onto the keyboard because people were too fast. They learned it, they knew the prediction of where the letters would be based on the alphabet was too fast, so they scrambled them up to slow people down because the technology couldn’t keep up. Well, I think technology can keep up now, and I am wondering have you, well, because it’s reprogrammable, I think anybody can change how the letters are, but have you done any specific keyboards with it in alphabetical order instead of scrambled?
KAIA: Yeah, so there are a lot of stories. It’s actually really fascinating the history of why people stuck with QWERTY when it isn’t a particularly good design. I still type QWERTY because I’ve been typing it for decades, and for me, learning a new layout wasn’t going to be enough faster, enough more efficient. For me the limiting factor isn’t usually how fast I can type, it’s how fast my brain goes. And so, until I learn how to think faster, I’m not going to worry too much about optimizing for speed. Definitely, some of the people we’ve had beta testing are people who used vorac or other alternative key layouts. There’s actually a very fascinating group of people who have a community online where they will basically track all of their key presses and then feed it into a program to figure out their own personal custom layout that minimizes finger movement. So you can have your own thing that’s completely different from anyone else’s. Otherwise, QWERTY is pretty standard. Vorac is pretty common, and then there is something sort of similar to vorac but based on a more recent and bigger purpose of data to figure out where to put the keys called culmac and that’s actually built into Mac OS and other things as well, so it’s pretty popular. Not as popular as vorac, and of course, not nearly as popular as qwerty, but those three plus one other alternative are built into the firmware by default, and then if you want to change what any particular key does, you are able to do that as well.
ANGELA: Now, if I go to keyboard.ao, there is a lot of information on here, and it shows the keyboard, but I’m wondering, what I don’t see is, and/or, are you planning to put out a ten key?
KAIA: We’ve thought about it. Right now we are just about to ink a contract for manufacturing our first product, the model one, which is what’s called a 60 percent keyboard. It doesn’t have a separate tenkey pad, and I think once we’ve got that produced, or a little further down the line, we’re going to really kind of look at the product road map and figure out what comes next. Right now we’re a small company and we don’t quite have the resources.
ANGELA: Honestly, if the keyboard were better and more functional, easier to reach the numbers, maybe ten key, maybe it would eliminate that need which I think is what Paige was kind of snobbily implying with her–you didn’t even comment, but you said you and your tenkeys or whatever.
PAIGE: I have a lot of friends that I’ve gotten into this argument, because I have friends who won’t buy laptops that don’t have tenkeys.
ANGELA: Well, you could always get a USB tenkey.
PAIGE: How often do you actually use a ten key?
ANGELA: That’s the thing, if your work is in numbers, it is very handy.
PAIGE: If you’re an accountant or something.
ANGELA: Well, even some things I do, I would really prefer a ten key, so I was just curious.
KAIA: We do have a numlock mode that turns kind of the right hand side into basically a ten key, which is definitely, I’m the one that gets stuck doing all of the accounting, and I switched to that for doing that. It’s easier.
PAIGE: That actually makes even more sense than a separate tenkey.
ANGELA: Yes, it does, you’re right.
PAIGE: So, you’ve been kind of on this journey. What was it like to go from kind of a business background kind of into this crazy tech world? You dove in deep. This is hardware, software, open source on both side, it’s a pretty complex crazy project.
KAIA: Yeah, I’ve never been one for just sticking my toe in. I’m kind of a jump all the way in kind of girl. I’d always been interested in tech. I went to a technology magnet focused high school and then I went to MIT which has a very strong engineering culture and a lot of people building things for fun on the weekends and in the evenings, and I’ve always followed that and been interested in that. I ended up sort of in business almost somewhat accidentally. I had been a physics major and undergrad and thought that I’d been sort of pushed that way by teachers and so on, and I thought okay, this is what I’ll do as a career. And then I sort of realized junior year that I didn’t have, one the type of mind that works really well doing physics research, and two, I didn’t really have the temperament to live an academic type of life. You need to be a type of person who can work by themselves and be very driven and work in a very hardworking, but in many ways, a very slow paced environment. That just wasn’t, I realized by that time, that wasn’t the kind of environment where I did my best work or where I was happiest. I preferred working with other people, like things that are much more fast paced, even if you’re working on something that’s not as fundamental as understanding new things about the universe, I’m just happier when I’m working on fast paced things with a lot of different people to bounce ideas off of and to learn from. So I kind of pivoted I guess into doing then technology investment banking which has paid very well, but I sort of left as soon as I got my first bonus check, and I did managing consulting for a while, and then software marketing, then ended up doing this. It’s interesting. There is definitely things that you get used to when you’re working for large companies or on behalf of very large companies that just don’t apply in the startup world where you have to learn to get by with a lot fewer resources when you’re a startup, and there’s no one a lot of times where you can go out and find the person in such and such department who knows about something because you are the such and such department.
PAIGE: You’re every department.
KAIA: Yeah, but it’s been great. We relocated to the San Francisco Bay Area which has been amazing just in terms of there is a community of hardware startups out here, and anything from you need to borrow a part last minute or getting someone to take a second look at your boards and trying to figure out why they’re not working or getting advice on how to choose a manufacturer, whether or not paying for a sourcing agent is worth it. Anything from the business end to a big architectural type decisions to just day to day prototyping help, like it’s been so amazing to be around so many really talented, really interesting people working on hardware. It’s really been amazing.
PAIGE: That’s really neat that the community would still play such a role. You would think hardware is so much more of a, I don’t know, a set thing, that there’s more like set ways to do it, but I think it’s just as mutable as software.
KAIA: It’s much more so now than it was 20 years ago or even five or ten years ago and I think it’s still shaking out a little bit. Historically, at least, hardware was something that took huge investment and had very low returns and was something that you could only do if you were a big company or had a lot of money. The prototyping phase of things has gotten so much easier with it being very accessible to have rapid prototyping technologies like 3D printing or laser cutters and CNC mills and so on being much more accessible due to things like tech shop or Hackerspaces where they have these machines available and let people from the community access them, to things like Arduino or teensy or other microcontrollers or environments where the first embedded programming is done for you, so you don’t really have to start from scratch, you can hook together things and do a quick prototype without having to put in quite as much of an investment as you used to. And things like Digikey or Adafruit where being able to access, I need ten of a part is very easy and affordable now, and you don’t have to buy an entire real component to get it, you can find pretty much any component you want and order it in pretty much any quantity that you want. So the prototyping phase is a lot easier.
PAIGE: Yeah, it’s like we’re finally catching up with hardware where we’ve been with software for a long time. Like we’re building these hardware frameworks almost that kind of piece together in a way that makes things fast, easy, and accessible. I’ve seen so many things around Portland or other places where it’s like hey, come over and work on Arduino’s for the day, and just seeing like little kids up to big adults playing with hardware for the first time is really fascinating.
KAIA: Yeah, it’s amazing. That’s one of the reasons we wanted to make our product open source was that getting people, like the moment, whenever you have a programming language that you’re learning and you get Hello World to work, and when it’s like your first time programming anything, it’s a really magical feeling that like I got the computer to do this thing, and when you do it in hardware, when you get a light pattern to flash up or do things like that, it’s even more magical. It’s a tangible piece of the world that you are controlling through the code that you’re writing and it’s a really, really awesome feeling.
PAIGE: Yeah, I totally agree. This winter I played with my Raspberry Pie and some relays for the first time and made some lights light up and it was like as inspiring as Hello World is. This was even more like woah!
KAIA: Yeah, and I think the question for hardware is like the prototyping phase, we’re finally catching up, and it’s getting from your first working prototype into production which is obviously not something that every project wants, but if you’re trying to build a company and build products, you do eventually have to make the change away from 3D printing and hooking things together with cables and Arduino and so on. You have to make a fundamental shift in the technologies you’re using to move to even small scale mass production, and that’s something where there is a bunch of different people trying to figure out how to make it easier and make it better. But it’s still just very complicated that there is, not only do you have all of these systems where the changes you make to your electrical layout are going to make your actual physical hardware layout change, and that involves, you might need to get mechanical engineering skill and electrical engineering skill and industrial design type of skill all involved just to make what seems like it should be a really small change, which I mean, that’s a hard problem. And then figuring out what does that do when you take it into production, how does that change things, and very small changes can make very big changes and very big costs down the line.
PAIGE: Your margin for error is very small.
KAIA: Yeah, and it’s something from software where I think people have gotten so used to Agile or other sort of sprints to make quick changes in small increments and keep building on that, and it’s not something that transfers over to hardware necessarily as well, which is frustrating to someone who likes being able to fool around and try different things and realizing that there is much more kind of top down planning you have to do is not necessarily how people have trained to do it.
PAIGE: Yeah, you have to give a pivot for polish.
KAIA: Yeah that’s a great way of putting it.
PAIGE: So, in that vein, you guys ran an amazingly successful Kickstarter, originally reaching for $120,000.00 goal, you hit $650. What was that like to go through? What are some of the challenges you’ve had afterwards or during? Can you talk to us a little bit about that?
KAIA: Sure. It was an amazing experience in Kickstarter. Especially as the person who ends up being in charge of the business stuff, there is always the primary question in my mind, and before we did the Kickstarter was like I think there is a market for this. We’ve got a bunch of people on our mailing list, people seem to think it’s really interesting, but does anyone actually want this? You don’t really trust that people will want a product until they put in their credit card number. So that was great and sort of took this thing that I’ve been worrying about for months and sort of just eliminated it really quickly. It’s like yeah, there are a lot of people who kind of get what we’re trying to do and see why we’re trying to do it that way. And yeah, the whole Kickstarter experience was really cool. We did a cross country road trip from Boston where we used to live to San Francisco and stopped at Makerspaces just about every day and did little meet ups talking about here is how you could build your own keyboard with the materials and tools that are in this Makerspace, and letting people put their hands on our product. It’s a somewhat weird and different product, and so being able to put your hands on it, actually see it, actually try it out is the time when a lot of people sort of get it for the first time, and it was also kind of a great way, like Kickstarter, or any crowdfunding is a lot of work where you have people writing you every day and you have to manage are you doing ads, and there is all this stuff you have to kind of manage and being able to have something that we were doing every day that took the focus away from–its hyper focused on this campaign, and let us look and see what people were doing at different Makerspaces was really cool. We were lucky that it was sort of something that was on grand for us that we are open hardware, we did come out of kind of a hobby maker type of place, but honestly, it’s always so cool to see like what people are making and what people are doing and talk to people who do cool things and put cool things together.
ANGELA: How big is your team? Is it just you and your husband and some 1099?
KAIA: Yeah, we’ve floated up and down. We don’t have quite enough work in any one discipline to have another full time person coming on, but we have had in the past full time contractors from–currently we have a friend of mine who is working on EE, and she is, I don’t know, it will be a couple of weeks contract probably. We’re pretty close to being done with the electrical, and we’ve had people helping out with industrial design and mechanical as well at different points in the past, so I think peak size would be like five people and sometimes it’s just the two of us.
PAIGE: This is fascinating, a very cool story. I don’t know, I was wondering, so you said there is kind of embedded software for this. Do you guys actually run an embedded processor in the keyboard? Like is there something it’s actually running on like Arduino, Lennox, or whatever?
KAIA: The chip is an Apple chip. It’s an 18 mega 30T4, which is the same thing that’s in an Arduino Leonardo, so it’s not technically an Arduino because we’re not buying a board from Arduino, but we’re what we call Arduino at heart where essentially what we’ve done is take the Arduino and squish it onto our own board and made a couple of little changes, but it’s compatible with the Arduino developer environment. So right now I can just pull up the Arduino ID, use it to make changes to the firmware and use that to flash the keyboard which is cool. When we were trying to decide which architecture to use, we had actually originally been using something else and ended up switching over to this branch of Arduino because you just, you’re going to have to have some kind of processor anyway, like why not pick one that has this huge ecosystem of other people writing code and making devices that are compatible with it.
PAIGE: That makes total sense. Making that approachable is huge. So just one final question for you before we get out of here. Oh, I have two actually. First, I would love to know what you work in day to day for tools. I love to know other people’s stacks like what kind of tools are you using. You mentioned the Arduino IDE. Is there anything else that kind of keeps you going day to day? Especially I’m always interested in the business stack because I don’t touch that most of the time.
KAIA: We do sort of a mix of ad hoc tools and otherwise available tools. I would say the most important tool that we use is slack, which I’m sure you hear a lot is great for communication both within our team, with investors and contractors.
PAIGE: I think that might have actually been one of the first–you might be the first person to bring slack up on the show.
KAIA: Okay. It’s a great tool. I’m happy to evangelize about it. it’s a team communication tool, and it’s an example of really good design where it sort of sets the norms for communication being friendly and kind of fun, but also very easy to–it’s designed by the team that had made flikr back in the day, or a lot of the same team anyway, and it’s really software sort of made with love.
PAIGE: It’s a fantastic tool. I’m in slack every day, and I agree. I think it’s interesting because in my mind, like as a super old nerd, it’s like IRC with user friendliness. But super useful.
KAIA: We use hackpad for a lot of other things that don’t quite fit into slack in terms of communication, so daily to do lists, we’ve tried out probably most of the tools that are out there like Trello and so on for keeping track of thing and product management type tools, and every time we sort of just end up reverting back to Excel or Google Sheets in terms of they don’t add enough–the complexity that they add doesn’t add enough value to be worth it. And then some of the more mundane things like for payroll and accounting and stuff, I use Zero and Zenpayroll and all these SAS providers which are great and definitely much easier to use than some of the things that I had been using even a couple of years ago.
PAIGE: That’s a neat stack. I like that–slack is very cool. I definitely encourage people to check that out. I actually just signed up for the, there is a, I’m pretty sure it’s just Women in Tech Slack. It’s an invite only, but you can apply for an invitation and then you get invited and the community has been really great so far. They are very friendly and there is a lot of resource sharing and just general helping each other out which has been really cool. And my last question, before we ramble on any more is, looking at the future of kind of what’s happening in technology–be it hardware or software–what gets you the most excited?
KAIA: I think the thing that excites me the most is the fact that there are companies out there that are taking things that we already have technologies for and really applying a lot of thought and design to them. I mean, slack is an example of that where Hipchat had been around there for a long time, IRC has been around for decades, but they aren’t adding a lot of new functionality, they’re just taking a user experience that hadn’t been very good and transforming it into something that’s awesome.
ANGELA: Sounds like Apple.
PAIGE: A lot of people make that argument for things like Airbnb. Really originally it was Craig’s List, but ten percent better.
ANGELA: And focused.
PAIGE: And focused, yeah, and Uber. Uber is just a cab service.
KAIA: Yeah, and that’s a trend, as a user I completely appreciate and it’s starting to come into more enterprise tools as well. We just put in a preorder for a Glowforge which is a laser cutter which is something that is a great tool to have, but traditionally it costs $10,000.00 and you’ve ended up spending about a third to a half of your time with it trying to fix problems with different issues with it, and they’re coming out with a laser cutter at a lower price point that is also supported by software that takes away a lot of the pain points of using this tool. This is something that is a prototyping tool, it’s not used by consumers for the most part, but they’re still taking that philosophy and applying it to that. I think people’s expectations in terms of design have come up a lot, and that’s an amazing thing.
ANGELA: Thank you for listening to this episode of Women’s Tech Radio. Remember you can go to JupiterBroadcasting.com for the show notes as well as a full transcription, and you can find us on Twitter @heywtr.
PAIGE: We’d love to hear what you think about the show. If you’d like to tell us, you can use the contact form on the website or email us at wtr@jupiterbroadcasting.com. You can also follow us on Twitter @heywtr. Thanks for listening.

Transcribed by Carrie Cotter | Transcription@cotterville.net

The post Keyboardio | WTR 44 first appeared on Jupiter Broadcasting.

Coming up this time on the show, we’ll be talking with the CTO of Xinuos, David Meyer, about their adoption of FreeBSD. We also discuss the BSD license model for businesses & the benefits of contributing changes back.

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

Enabling FreeBSD on AArch64

• One of the things the FreeBSD foundation has been dumping money into lately is ARM64 support, but we haven’t heard too much about it – this article should change that
• Since it’s on a mainstream ARM site, the article begins with a bit of FreeBSD history, leading up to the current work on ARM64
• There’s also a summary of some of the ARM work done at this year’s BSDCan, including details about running it on the Cavium ThunderX platform (which has 48 cores)
• As of just a couple months ago, dtrace is even working on this new architecture
• Come 11.0-RELEASE, the plan is for ARM64 to get the same “tier 1” treatment as X86, which would imply binary updates for base and ports – something Raspberry Pi users often complain about not having

OpenBSD’s tcpdump detailed

• Most people are probably familiar with tcpdump, a very useful packet sniffing and capturing utility that’s included in all the main BSD base systems
• This video guide is specifically about the version in OpenBSD, which has gone through some major changes (it’s pretty much a fork with no version number anymore)
• Unlike on the other platforms, OpenBSD’s tcpdump will always run in a chroot as an unprivileged user – this has saved it from a number of high-profile exploits
• It also has support for the “pf.os” system, allowing you to filter out operating system fingerprints in the packet captures
• There’s also PF (and pflog) integration, letting you see which line in your ruleset triggered a specific match
• Being able to run tcpdump directly on your router is pretty awesome for troubleshooting

More FreeBSD foundation at BSDCan

• The FreeBSD foundation has another round of trip reports from this year’s BSDCan
• First up is Kamil Czekirda, who gives a good summary of some of the devsummit, FreeBSD-related presentations, some tutorials, getting freebsd-update bugs fixed and of course eating cake
• A second post from Christian Brueffer, who cleverly planned ahead to avoid jetlag, details how he got some things done during the FreeBSD devsummit
• Their third report is from our buddy Warren Block, who (unsurprisingly) worked on a lot of documentation-related things, including getting more people involved with writing them
• In true doc team style, his report is the most well-written of the bunch, including lots of links and a clear separation of topics (doc lounge, contributing to the wiki, presentations…)
• Finally, the fourth one comes to us from Shonali Balakrishna, who also gives an outline of some of the talks
• “Not only does a BSD conference have way too many very smart people in one room, but also some of the nicest.”

DragonFly on the Chromebook C720

• If you’ve got one of the Chromebook laptops and weren’t happy with the OS it came with, DragonFlyBSD might be worth a go
• This article is a “mini-report” on how DragonFly functions on the device as a desktop, and
• While the 2GB of RAM proved to be a bit limiting, most of the hardware is well-supported
• DragonFly’s wiki has a full guide on getting set up on one of these devices as well

Interview – David Meyer – info@xinuos.com / @xinuos

Xinuos, BSD license model vs. others, community interaction

News Roundup

Introducing LiteBSD

• We definitely don’t talk about 4.4BSD a lot on the show
• LiteBSD is “a variant of [the] 4.4BSD operating system adapted for microcontrollers”
• If you’ve got really, really old hardware (or are working in the embedded space) then this might be an interesting hobby project to look info

HardenedBSD announces ASLR completion

• HardenedBSD, now officially a full-on fork of FreeBSD, has declared their ASLR patchset to be complete
• The latest and last addition to the work was VDSO (Virtual Dynamic Shared Object) randomization, which is now configurable with a sysctl
• This post gives a summary of the six main features they’ve added since the beginning
• Only a few small things are left to do – man page cleanups, possibly shared object load order improvements

Unlock the reaper

• In the ongoing quest to make more of OpenBSD SMP-friendly, a new patch was posted that unlocks the reaper in the kernel
• When there’s a zombie process causing a resource leak, it’s the reaper’s job to deallocate their resources (and yes we’re still talking about computers, not horror movies)
• Initial testing has yielded positive results and no regressions
• They’re looking for testers, so you can install a -current snapshot and get it automatically
• An updated version of the patch is coming soon too
• A hackathon is going on right now, so you can expect more SMP improvements in the near future

The importance of mentoring

• Adrian Chadd has a blog post up about mentoring new users, and it tells the story of how he originally got into FreeBSD
• He tells the story of, at age 11, meeting someone else who knew about making crystal sets that became his role model
• Eventually we get to his first FreeBSD 1.1 installation (which he temporarily abandoned for Linux, since it didn’t have a color “ls” command) and how he started using the OS
• Nowadays, there’s a formal mentoring system in FreeBSD
• While he talks about FreeBSD in the post, a lot of the concepts apply to all the BSDs (or even just life in general)

Feedback/Questions

• Sean writes in
• Herminio writes in
• Stuart writes in
• Richard writes in

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
• If you’re in or around the Calgary, Alberta area in Canada, there’s an OpenBSD developer speaking event at the Southern Alberta Institute of Technology on July 20th
• It’s right after the hackathon, and they’ll be discussing some of the work that was done (maybe with a Q&A session)
• We’re looking for some new interviews – get in touch if you’re doing anything cool with BSD that you’d like to talk about (or want to suggest someone else)

The post Our Code is Your Code | BSD Now 98 first appeared on Jupiter Broadcasting.

Microsoft made headlines and has generated a lot of buzz around the open sourcing of .NET. So what does the future hold & what changes now? And why this could be more about what it says about Microsoft, than anything else.

Plus some great feedback, how to find a developer, what to expect to pay & much more!

Thanks to:

• Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

— Show Notes: —

Feedback / Follow Up:

• Follow follow follow up

• CR127 – Web Apps vs Native

• What do you think of ideas – such as unhosted

• How to find app developers?

• Digital Ocean thank you

• Has hell frozen ? Microsoft just opensourced .net framework ?

Dev Hoopla: .NET Goes Open Source

.NET Foundation – Announcing new governance model and project contributions to the .NET Foundation

Microsoft is making headlines today for its decision to open source its popular .NET development stack, which will now be maintained under the stewardship of the .NET Foundation. This should be welcome news to the millions of developers who use .NET to build high quality applications and services that can scale from needs of individual developers to large enterprises.

As part of its announcement last spring, Microsoft released .NET code to the open source community. Today’s news builds onto that, as Microsoft aims to further make .NET Core available across platforms for Linux and Mac. The company will open source additional key .NET platform components through the foundation.

• Microsoft Open Sources .NET and Mono – Miguel de Icaza

Today, Scott Guthrie announced that Microsoft is open sourcing .NET. This is a momentous occasion, and one that I have advocated for many years.

.NET is being open sourced under the MIT license. Not only is the code being released under this very permissive license, but Microsoft is providing a patent promise to ensure that .NET will get the adoption it deserves.

The code is being hosted at the .NET Foundation’s github repository.

This patent promise addresses the historical concerns that the open source, Unix and free software communities have raised over the years.

There are three components being open sourced: the .NET Framework Libraries, .NET Core Framework Libraries and the RyuJit VM. More details below.

The post .NET’s Open Future | CR 128 first appeared on Jupiter Broadcasting.

The Rosetta Mission has landed, Groupon plays nice with Gnome, a catastrophic Windows bug gets patched, the medical tricorder of today, YouTube’s music service, a quick note on open source .Net, our Kickstarter of the week & more!

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Torrent Feed

Become a supporter on Patreon:

Show Notes:

#CometLanding

• xkcd 1446

Groupon decides to leave ‘Gnome’ trademark alone | PCWorld

Groupon has dropped trademark applications that sought to use the “Gnome” name for a point-of-sale tablet it released in May, clashing with the open-source software group of the same name.

The nonprofit Gnome Foundation, which is behind the Gnome desktop for GNU/Linux and BSD, has held a registered trademark for the name since 2006.

Potentially catastrophic bug bites all versions of Windows. Patch now | Ars Technica

Microsoft has disclosed a potentially catastrophic vulnerability in virtually all versions of Windows. People operating Windows systems, particularly those who run websites, should immediately install a patch Microsoft released Tuesday morning.

The vulnerability resides in the Microsoft secure channel (schannel) security component that implements the secure sockets layer and transport layer security (TLS) protocols, according to a Microsoft advisory. A failure to properly filter specially formed packets makes it possible for attackers to execute attack code of their choosing by sending malicious traffic to a Windows-based server.

While the advisory makes reference to vulnerabilities targeting Windows servers, the vulnerability is rated critical for client and server versions of Windows alike, an indication the remote-code bug may threaten Windows desktops and laptop users as well. Amol Sarwate, director of engineering at Qualys, told Ars the flaw leaves client machines open if users run software that monitors Internet ports and accepts encrypted connections.

“If they install software that listens on port, then that machine would be vulnerable,” he said. An example would be “if they run Windows 7 but install an FTP server on it that accepts connections from outside, or a Web server on a client.”

Tuesday’s disclosure means that every major TLS stack—including Apple SecureTransport, GNUTLS, OpenSSL, NSS, and now Microsoft SChannel—has had a severe vulnerability this year.

This Device Diagnoses Hundreds of Diseases Using a Single Drop of Blood | WIRED

Called the rHEALTH

One small drop of blood is dropped into a small receptacle, where nanostrips and reagents react to the blood’s contents. The whole cocktail then goes through a spiral micro-mixer and is streamed past lasers that use variations in light intensity and scattering to come up with a diagnosis, from flu to a more serious illness such as pneumonia—or even Ebola—within a few minutes. There’s also a vitals patch that users can wear to get continuous health readings—EKG, heart rate, body temperature—delivered to their smartphone or the rHEALTH device itself via a Bluetooth link. An app called CHAS (Comprehensive Health Assessment Unit) can walk the user through the process of self-diagnosis.

The real innovation of rHEALTH, according to Chan, is in getting all the diagnostics technologies packed together into one handheld device. By shrinking its components so much compared to traditional devices, Chan says, patients will need to give 1,500 times less blood than they would for regular tests. Since it was originally developed for NASA, the device has even been tested in simulated lunar and zero gravity. “It’s a symphony of innovations, but we’ve pushed all of them individually to create the device,” Chan says.

YouTube’s music service launches in ‘weeks’ following indie deal

After a long (and frequently contentious) negotiation process, YouTube’s long hinted-at music service appears to be close to launch. Sources for the Financial Times claim that YouTube has finally signed a deal with Merlin, the rights group that represents about 20,000 indie music labels. The move gives the ad-free streaming option a well-stocked catalog ahead of its launch, which is reportedly due within “weeks.” It’s not clear just what broke the deadlock, but a tipster says that the new terms are “substantially more favorable” than what YouTube offered in June

DRIVE: Safe Messaging and Driving by RISE Devices — Kickstarter

The post From Space With Love | Tech Talk Today 90 first appeared on Jupiter Broadcasting.

We\’ll cover Dropbox’s two-factor authentication flaw, how “Team Telecom” forced fibre providers to enable surveillance, the FBI’s warning about phishing attacks.

A great big batch of your questions our answers, and much much more!

Thanks to:

GoDaddy.com Use our code tech249 to score .COM for $2.49! Get private registration FOR FREE with a .COM! code: free5
Ting.com Visit techsnap.ting.com to save $25 off your device or service credits.

Mentioned this Episode:

[asa]0312605536[/asa]
[asa]0307279391[/asa]
[asa]B000BKUSS8[/asa]

Dropbox flaw allows attackers to circumvent two-factor authentication

• If an attacker is able to get the username and password for your dropbox account, they can access your account even if you have enabled two-factor authentication
• Dropbox does not verify the email address used to signup for a new account, because of this, the attacker can signup for a new account with your email address and just append a dot to the end of the domain name
• Login to this new account and enable 2 factor authentication
• Save the ‘emergency override code’, used in case you lose your phone
• Logout and login to the victim account, when prompted for the one-time password, click “I lost my phone”
• Enter the emergency override code (it is the same for both accounts)
• It is not clear why having the dot at the end of the email (valid) is enough to make the account unique, but does not make the override code unique

US Government established “Team Telecom” to force foreign owned fibre providers to allow the government access to the data transitting them

• In 2003 the “Network Security Agreement” was signed between the US Government and Global Crossing, one of the largest internet transit providers, connecting 200 major cities in 27 nations on four continents
• “In months of private talks, the team of lawyers from the FBI and the departments of Defense, Justice and Homeland Security demanded that the company maintain what amounted to an internal corporate cell of American citizens with government clearances”
• The FCC would hold up approval of cable licenses until such agreements were in place
• The agreements required the transit providers to maintain a “Network Operations Center” (NOC) on U.S. soil. This NOC must be staffed with U.S. citizens pre-screened by the government and operating under gag orders, preventing the employees for sharing the information even with their bosses.
• Originally a US company, Global Crossing filed for Chapter 11 bankruptcy protection in 2002
• A deal was setup where a partnership between Singapore Technologies Telemedia and Hong Kong-based Hutchison Whampoa would buy Global Crossing
• The Hong Kong side of the partnership was pressured by the US Government and eventually withdrew. The US was worried that the Chinese Government would gain access to the US’s surveillance requests
• Singapore Technologies Telemedia eventually agreed to buy the majority stake in Global Crossing and that half of the new board of directors would consist of American citizens with security clearances
• This agreement has been used as a template for other foreign owned telcos and applied as foreign investors bought existing telcos from US investors
• In 2011 Global Crossing was sold to US Telecom giant Level3, however ST Telemedia maintained a minority stake, resulting in another round of review by “Team Telecom”
• A spokesman for Level 3 Communications declined to comment for this article
• Tapping undersea cables has been a key component of US intelligence collection since WWII, the US Navy used to have a number of submarines specifically outfitted for tapping undersea copper phone lines to listen to sensitive traffic in the Soviet Union
• Infographic

FBI issues formal warning about targetted spear phishing

• Many of the very large compromises that we have covered lately were made possible by the attacker establishing an initial beachhead on a single machine, via spear phishing
• The compromises at The Onion and the Financial Times were both explained in detail after the fact and showed just how much damage an attacker can do once they get inside the network, and how easily they can get inside the network with spear phishing
• Many in the defense and aerospace industries have been targeted by highly sophisticated spear phishing campaigns, including professionally produced .pdf flyers for fake conferences that took advantage of flaws in Adobe Acrobat to infect the system
• According to research by AV vendor Trend Micro, 91% of all targeted attacks involved spear phishing in the initial phases
• Training firm PhishMe says their clients usually start at around 60% susceptibility, but training reduces this to single digits
• The PhiseMe system works by sending your users different types of phishing emails, including links, attachments, etc
• When the user falls for the phishing attempt, they are redirected to training pages, teaching them what they did wrong
• Enhanced versions will even disguise themselves to look like your company\’s page, and prompt users to enter sensitive information. If they do, they are admonished and given further training
• This type of ongoing proactive training seems like the only real way to increase security, because typical training does not seem to work

MIT Media lab rolls out ‘Immersion’ tool to allow you to visualize your email metadata

• Logs in to your gmail via OAuth
• Looks at only the headers (To, From, CC, and timestamp)
• Builds a visualization of your ‘social graph’
• After you view the report, you have the option to allow them to save it, or ask them to erase it
• If you save a snapshot of your social graph, it is automatically deleted after 30 days

Feedback:

• Don’t mount an iSCSI device in two places at once

• File Server Woes

• Starting in Networking Tech?

• What happens if you get hit by a bus?

• NIC Driver Woes in FreeBSD

  • Get a different intel NIC, some of the onboard ones are less good
  • service netif restart; service routing restart

• pfSense Wifi Xtreme

TechSNAP Bitmessage: BM-GuGEaEtsqQjqgHRAfag5FW33Dy2KHUmZ

Round Up:

• Attacker who compromised .pk domain root last year, claims to have access to Pakistan’s Federal Investigation Agency (FIA)’s servers that contain files on every citizen
• The problems with debugging software on mars
• Password sharing compromises 24,000 nintendo accounts – More than 15 million login attempts were made, but only those accounts that had a common password with some other unknown (likely related) service were compromised
• 911 dispatch system in Detroit goes down, backup does not kick in. Apparently the backup had not been tested in over 2 years
• Federal Judge rejects “states secrets” claim, allows EFF case against illegal surveillance (originally filed against the GW Bush administration) to proceed
• Root SSH key for Emergency Broadcasting Systems compromised
• Audit finds US Economic Development Administration destroyed hardware after minor malware infection, including uninfected systems, printers, cameras and mice
• Team of famous security researchers write amicus brief in defense of weev in his trial against AT&T for accessing data they accidently placed on their public website
• Android master key vulnerability checker now online
• ARM’s response to high efficency – lower power: one chip for each, use as needed
• PirateBay founder brokep starts encrypted messaging service
• PC-BSD Now Uses a CDN

The post Phish and Chips | TechSNAP 118 first appeared on Jupiter Broadcasting.

We take a look at Stradivarius violins, tiger time-sharing, asteroids, hydrogel, running robots, disintegrating planets, spacecraft updates and as always take a peek back into history and up in the sky this week.

Direct Download:

MP3 Download | Ogg Download | Video | YouTube

RSS Feeds:

MP3 Feed | Ogg Feed | iTunes Feed | Video Feed

Support the Show:

[asa]B0083SBJXS[/asa]
[asa]0195218507[/asa]