Tricky Things, Ecosystems

A decade ago, I and others started wittering on about the Microsoft monoculture - the fact that practically everyone was using the same OS, the same browser, the same office suite. This made crafting attacks much easier, because certain assumptions about what was on a given machine were almost certainly true.

Nowadays, with the rise of Firefox and, to a lesser extent, OpenOffice.org, you might think we've moved on. Apparently not:

We have different versions of the OS, and we have Mac users. But we’ve only got one Flash vendor, and everyone has Flash installed. Why do you care about Flash exploits? Because in the field, any one of them wins a commanding majority of browser installs for an attacker.

Moreover:

Although this document deals specifically with the Win32/intel platform, similar attacks can most likely be carried out on the many other platforms flash is available for. In particular, some of the methodology discussed might be useful for constructing a robust exploit on Unix platforms as well as several embedded platforms.

In other words, ecosystems need to be heterogeneous everywhere: as soon as you have a monoculture in some area, that becomes a weakness for the entire system to be attacked.

Talking of Ultraportables...

Try running Windows on this. (Via Linux and Open Source blog.)

The Dirty Secret Behind 1,000,000 Viruses

On Open Enterprise blog.

It's Déjà Vu, All Over Again

A few months back, I wrote about a petition calling for ERT, the Greek national broadcaster, to make its content freely available. Now it looks like ERT is following in the misguided footsteps of the BBC in terms of platforms:

Greek Open Source developers are protesting that ERT, Greece's national broadcaster, will make its online archive available only for users of Microsoft Windows and Apple Mac OSX.

The Hellenic Linux User Group six months ago approached ERT, after finding out the public broadcaster was restricting their access to a new archive. ERT is a public organisation, the developers argue, and should not discriminate against users of Open Source.

In some ways, the situation here is even worse than for the BBC:

ERT is developing an archive of its broadcast material, digitising film, video, pictures and hosting them online. The archive is going to be developed in a 1.95 million euro project, the major part of which is funded by the European Union, the Open Source developers say.

Since the money is being paid for by the EU, it follows that access should not be limited to a couple of platforms.

The Economics of Information Security

On Open Enterprise blog.

Vista's Poor Outlook

On Open Enterprise blog.

Must Do Better, BECTA

On Open Enterprise blog.

Avoiding the Microsoft Tax

In the UK, at least....

Quote of the Day: Erik Huggers

It is my personal goal to use my industry knowledge and foresight to help the BBC create escape velocity and become the world’s leading media organization in the digital age - Erik Huggers

Industry knowledge?. Riiight.

Up and Down in the Middle Kingdom

It's still very hard to read what is happening in the Chinese GNU/Linux market:

Although China's Linux market as a whole doubled from 2003 to 2006 to $20 million per year, sales of Linux desktop software grew more slowly. In fact, the market share of Linux desktop software in China dropped from 16% to 12% in the same period. But according to CCID Consulting, sales of Linux desktop software increased 25.1% in the third quarter of this year, catching up with the quick growth of China's Linux industry as a whole. Several new developments have added fuel to the growth.

And this is very worrying:

Additionally, the low-cost advantage of Linux desktop software is diminishing. Microsoft has taken a more flexible pricing tack in the Chinese market, offering increasingly better discounts for Chinese computer producers. An anonymous executive of a Chinese computer producer says that his company considered using the Linux desktop OS at the beginning of this year, but eventually went with Windows because Microsoft didn't charge much more than the service fee of Linux companies. He suggested this could be looked at as a victory for Linux, as it had forced Microsoft to lower its price.

How do you say "Pyrrhic victory" in Putonghua?

All the World's a Stage...For Windows Users

You can now enter Arden, Ed Castronova's virtual Shakespearian world:

Arden has yet to become the world that we have envisioned. What is available here in the current version is only a small prototype of what we believe Arden could eventually become. Richard III and The War of the Roses have provided a small starting template for what we hope you will help us improve. The works of Shakespeare are vast and provide us as developers with rich settings into which we can continue to expand the content of Arden.

Well, you can if you run Windows....

On-Demand OK, But How Demanding?

The BBC, ITV and Channel 4 are to launch a joint on-demand service, which will bring together hundreds of hours of television programmes in one place.

The service is set to go live in 2008 and will offer viewers access to current shows and archive material.

Plans will have to be approved by the BBC Trust and the other broadcasters' boards, and a name for the service will be unveiled ahead of its launch.

The three broadcasters currently offer their own separate on-demand services.

The BBC's iPlayer, ITV's catch-up service and Channel 4oD will continue to exist along the new online "aggregator", which will provide a complement to the established providers.

But that still doesn't make clear what the platform requirements will be for viewing this new super-duper on-demand service: who thinks it might be Windows only....?

Update: Ashley has more details, but doesn't answer my question, although to my eyes there's an implication that the new aggregator will be even less platform agnostic than iPlayer - which Ashley says *will* support GNU/Linux....

Here We Go Round the (Open) Mulberry Bush

Mulberry started off life as a software project that was really meant to help the author learn more about the internet and internet protocols used for email. However, it became much more than that and garnered support from a small (in internet terms) group of users and institutions many of whom relied on the product as their primary email tool.

Whilst it started as only an IMAP client and only on Mac OS, it has grown to cover not only other email protocols, but also calendaring and scheduling and is available on Mac OS X, Windows and Linux systems.

Not something I use myself, but good to see it going open source, not least because calendaring and scheduling is an area where free software offerings are still rather thin on the ground:

The full code for Mulberry (Mac OS X, Windows and Linux) is now available as open source under an Apache 2 License. Full details available on the wiki.

(Via heise online.)

Adding Some Lustre to Supercomputing

Everybody knows that GNU/Linux absolutely dominates the top 500 supercomputing listings: in the latest survey it notches up an 85% share (Windows manages 1.2%). Less well-known - to me, at least - is the fact that Lustre, an open source cluster file system, also does well:

Lustre highlights include:

The #1 fastest supercomputer in the world.

Lustre is being used on 7 out of the top 10 fastest supercomputers in the world.

Out of the top 30 fastest supercomputers in the world - Lustre can be found on 16 of them.

Funk That (Gutsy) Gibbon

Like half the world and their dog, I have upgraded my Ubuntu box to Gutsy Gibbon. Many things have been written about this (the finest probably being this utterly quintessential masterpiece by Rupert Goodwins - geek writing at its finest), but one point that hasn't really been hammered home enough, in my opinion, is the fact that the upgrade required precisely three clicks (in my case - YMMV).

Think about it. For "other" operating system, you not only have *pay* to upgrade, but you have to stick in discs and god knows what. With Ubuntu, you just issue your peremptory command "upgrade", and Ubuntu toddles off to the right repositories, and does it. Automatically. I mean, how much easier can it be?

I'm sure that once people experience this they will never go back to those "other" operating systems. And that's not even taking into account the similarly trivial way in which you can install tens of thousands of new programs with the same single click command.

So, just how good does Ubuntu have to get before people see the (brown) light?

Open Tesco?

Tesco may not be a name that means much outside the UK, but the fact that this huge retailer is selling GNU/Linux-based systems - some for as little as £140 (without a screen) - is pretty significant. After all, it's not hard to imagine lots of people seeing the price tag and buying one without really noticing that it doesn't have Windows, discovering that it doesn't matter that much (aside from games). (Via 451 CAOS Theory.)

BBC iPlayer: Converted in a Flash

Well, here's an interesting confluence of two of my pet hates:

By adopting Adobe Flash Player software, the BBC will make its free catch-up TV service — BBC iPlayer — available as a streaming service across Macintosh and Linux, as well as Windows, by the end of the year. The strategic relationship will also allow the BBC to provide a single consistent user experience for the majority of streamed video and audio content on www.bbc.co.uk.

Note that this is only for the streaming service: downloads are still Windows only. Still, it's a neat partial solution for GNU/Linux. Not only that, it emphasises an interesting shift that has taken place with Flash.

Once, Flash seemed to be used only for serving up annoying ads or time-wasting games. But increasingly it's turning into the cross-platform media player of choice, a job it does rather well, I have to admit. And so I'm forced to concede that Flash might not be quite so evil as it once was.

Going a Bundle on Unbundling

I can't see this happening, but it's interesting that someone has even raised it:

This paper’s recommendation is that the European Commission should require all desktop and laptop computers sold within the EU to be sold without operating systems.

For two decades, Microsoft has enjoyed monopolistic power in the operating system market. The Competition Commissioner has signalled the desire to see more competition in this sector. Unbundling would foster a competitive market, increase consumer choice and reduce prices.

BBC: Bill's Broadcasting Corporation

You'd think they'd be a little more subtle about it, wouldn't you?

The BBC has hired another Microsoft executive in a shakeup of its digital media technology teams earlier this week.

The Register has learned that Jon Billings was appointed to a new team responsible for the development of the next generation of the BBC iPlayer earlier this week. He is a former program manager in Microsoft's digital media division.

Why don't they just rename it Bill's Broadcasting Corporation, and end the pretense of independence?

The Man from the BBC Speaketh

I've been pretty critical of many aspects of the BBC's online activities, not least its dratted Windows-only, DRM'd iPlayer. But in the interests of fairness I think I should point out this very good interview with the man responsible, Ashley Highfield, in the new UK version of PaidContent.

I still don't agree with the man, but he gives reasonable answers to the main questions, which are hard but fair. Kudos, too, to PaidContent for making both the interview recording and transcript available, and releasing the latter under a CC licence. This shows that it, at least, understands the new dynamics of the online content world. Good luck with the launch.