David Adams Archive

There’s a new(ish) smartphone operating system aimed at folks who want to be able to run Android apps, but want additional security and privacy features. It’s called GrapheneOS, and it comes from Daniel Micay, the former lead developer of another security-based Android fork called CopperheadOS. After the founders of Copperhead had a falling out last year, Micay turned his attention to the Android Hardening Project, which he recently renamed GrapheneOS to better reflect what the project has become. Official images are currently available for Google Pixel 2 and Pixel 3, but source code is available if you’re interested in installing it on another device with an unlocked bootloader.

Colm MacCárthaigh, who was Principal Engineer for Amazon Web Services Elastic Load Balancer five years ago, posted an interesting recollection of his experience the day the Heartbleed bug went public. OpenSSL was in use widely across AWS, and the team there basically dropped everything to hot patch millions of deployments, then over the next hours and days took many other steps to mitigate the damage. It’s a fascinating story if you’re familiar with information security, or even just minimally familiar with the infrastructure that keeps the internet going.

OSNews reader Rui Caridade brought our attention to a YouTube channel with retrospectives about various computing devices from the past 40 years or so that would be interesting to our readers, such as RISCy Business – The Acorn RiscPC – ARM in a desktop, NeXTSTEP on a 486 Packard Bell, and The World’s First Laptop – Epson HX-20 / HC-20.

The idea that a bicycle might need an OS might seem silly, but 30 years ago may gearheads wouldn’t have anticipated that cars would become rolling supercomputers. Hammerhead crowdfunded its first product, the H1, and subsequently built Karoo, a “cycling computer” that supports navigation and training. But Morgan told me his ambitions are bigger than that.After all, he sees a future where electric bikes need smart range projections, where bike-share fleets need to be managed, where social training programs like Strava can pull data from the bike itself and where any bicycle should come with theft and crash alerts. Calling it an OS is probably a stretch. It seems to be an Android OS with cycling-specific constellation of apps, originally designed specifically for their own hardware but eventually intended to be licensed to other vendors.

PureOS has laid the foundation for future applications to run on both the Librem 5 phone and Librem laptops, from the same PureOS release, in contrast, they say, to Google and Apple’s ecosystems which still have separate OSes for mobile and desktop. Now, Google and Apple seem to be intent on converging their mobile and desktop platforms, leading to fear and consternation from desktop OS power users, who assume that the move will dumb down desktop OSes. While this technical aspects of the PureOS team’s accomplishment are interesting and laudable, I’d suspect that the bigger challenge for any mainstream platform will actually be a user experience challenge, especially bridging familiar UI elements between mobile and desktop user environments.

Security researchers at the Network and Distributed Systems Security Symposium in San Diego are announcing the results of some fascinating research they’ve been working on. They “built a fake network card that is capable of interacting with the operating system in the same way as a real one” and discovered that Such ports offer very privileged, low-level, direct memory access (DMA), which gives peripherals much more privilege than regular USB devices. If no defences are used on the host, an attacker has unrestricted memory access, and can completely take control of a target computer: they can steal passwords, banking logins, encryption keys, browser sessions and private files, and they can also inject malicious software that can run anywhere in the system. Vendors have been gradually improving firmware and taking other steps to mitigate these vulnerabilities, but the same features that make Thunderbolt so useful also make them a much more serious attack vector than USB ever was. You may want to consider ways to disable your Thunderbolt drivers unless you can be sure that you can prevent physical access to your machine.

Responding to a forum post on upcoming ARM server offerings, Linus Torvalds makes a compelling case for why Linux and x86 completely overwhelmed commercial Unix and RISC: Guys, do you really not understand why x86 took over the server market? It wasn’t just all price. It was literally this “develop at home” issue. Thousands of small companies ended up having random small internal workloads where it was easy to just get a random whitebox PC and run some silly small thing on it yourself. Then as the workload expanded, it became a “real server”. And then once that thing expanded, suddenly it made a whole lot of sense to let somebody else manage the hardware and hosting, and the cloud took over.

When we re-launched the site at the beginning of the year, I mentioned that I’d considered shuttering OSNews as a response to needing such a major overhaul, since conventional advertising was no longer sufficient for covering expenses. A few weeks ago, I decided to experiment with offering a sponsorship, wherein a patron pays a fee to be the exclusive sponsor of the site for a week. It was all just a pipe dream until someone agreed last week to be our first sponsor. So we’re cautiously optimistic that this may be a viable way to keep the site running and maybe even expand. It won’t work, though, unless we can fill our pipeline with sponsors. I doubt we’ll be able to do that just by putting up a shingle and hoping people contact us. So I wanted to reach out to you, beloved readers, to see if you could help. If you know someone, maybe your employer, who offers a product or service that might be interesting to OSNews readers, see if they’ll be willing to sponsor the site. We’re open to ideas on how to structure the sponsorship program. If you were to sponsor the site, what would you want to get in exchange for your money? We’d love feedback on the terms of the sponsorship. Do you know of any ways that we might be able to publicize the availability of sponsorships? Would you be interested in acting as a salesperson and reaching out to firms to solicit sponsorships? Let me know. And finally, sponsorships will be desirable if OSNews itself is popular and vibrant. You can do your part by reading the site, commenting, submitting news, and contacting us if you’re interested in writing a feature.

EmuTOS is designed to run on traditional Atari hardware (ST, TT, Falcon, based on Motorola 68000  or ColdFire microprocessors) and their emulators. It features functionality similar to TOS, which powered the Atari ST and its successors between 1985 and 1994. EmuTOS can run on real hardware, either as ROM replacement or from floppy, or on any Atari emulator such as ARAnyM, Hatari, or Steem SSE. EmuTOS is Free Software, and can run legacy third-party software on emulators without requiring copyrighted Atari ROMs, thereby avoiding legal issues.

Windows 7, released in July of 2009, was a gigantic leap forward in the evolution of the desktop OS. Good enough, it turns out, that a huge number of people and organizations are still using it, despite it being nearly ten years since its release. Back in February, Statscounter proclaimed that according to its analytics, Windows 10 had finally overtaken 7 in marketshare. But these kinds of measurements are never exact. They’re based on counting users that connect to various constellations of sites and services, so there’s going to be some variation depending on who’s counting.

One of the chief annoyances of Apple's closed ecosystem is the limited ability to move files to and from your device using iTunes. Utilities that open up file management have been available for ages, but generally cost money, so stingy people like me just make do with iTunes. To commemorate the iPhone 10 year anniversary, MacX is offering OSNews readers a free license to their MediaTrans tool (in exchange for your email address). It's good for moving files of various types, backup, and removing media DRM. If any OSNews readers can recommend other options for working around Apple's restrictions and managing files on their iOS devices, I'd love to read about them in the comments.

AT&T has a YouTube channel, where a few times a week they post old videos from the glory days. A few years ago, they posted a cool video from 1982 called The UNIX System: Making Computers More Productive. It's worth a watch. There's lots of other gems on the channel. For example, how about an interview with Arthur C Clarke from 1976?

The TechCrunch article is light on detail, but this project may be more interesting than it sounds at first blush. Zuckerberg isn't the first tech billionaire to sink a bunch of money into a fancy home automation project. Bill Gates famously did the same a couple of decades ago. High end homes all over the world have fancy and expensive home control systems, that provide their rich owners with frustration and hassle and absolutely confound houseguests. But these days, for a few hundred dollars, anyone can buy an Amazon Echo, any one of half a dozen automation hubs, and various switches, thermostats, and lightbulbs, and create a pretty nifty and convenient voice controlled home automation and entertainment system. Someone with the vision and the development budget that Mark Zuckerberg has at his disposal should be able, with readily available, inexpensive hardware, create something pretty amazing.

Computing old timers remember a world where computer games were decidedly lo fi. Linux Links has a list of the 21 best open source ASCII games, with screenshots and descriptions, for your nostalgic pleasure.