MariaDB Fixes Business Source License, Releases MaxScale 2.1 Slashdotby BeauHD on opensource at January 1, 1970, 1:00 am (cached at February 15, 2017, 11:34 pm)

Creator of The Open Source Definition and longtime Slashdot reader Bruce Perens writes: MariaDB is releasing MaxScale 2.1, a new version of their database routing proxy, and has modified its timed-transition-to-Open-Source "Business Source License" to make it more acceptable to the Open Source community and more easily usable by other companies. I've blogged the issues I had with the license and how MariaDB has fixed them, and Kaj Arno has blogged the MariaDB side of the story. Here's an excerpt from Perens' blog post: "The BSL is a parameterized license. The licensor chooses the license which is transitioned to, the date of the transition, and the limitation. The problem with this is that it was so parameterized that if you told someone the license was 'BSL 1.0,' they would not have any idea what license they really had. It might transition to any of 100 Open Source licenses, or to a non-Open-Source license. The transition might happen in a month, or next century. The limitation might be that you could only have three commercial servers, or that you indentured your firstborn son (OK, that's going overboard, but you get the picture)." He continues, "So, I didn't like that 'BSL' didn't really say what the license did, and I didn't feel that was the best thing for the users or the community. I asked MariaDB to fix it. Together we have arrived at constraints on the parameters and minimum privileges that will take the new BSL much closer to being one license while still allowing licensors some latitude to choose parameters."

Read more of this story at Slashdot.

Status report Scripting News(cached at February 15, 2017, 11:33 pm)

We're watching the western alliance crumble waiting for the Repubs in Congress to give up on their fantasy of looting the treasury.

The seven most dangerous attack techniques: A SANS Institute rundown (ZDNet) SANS ISC SecNewsFeed(cached at February 15, 2017, 11:30 pm)

Utilities Vote To Close Largest Coal Plant In Western US Slashdotby BeauHD on power at January 1, 1970, 1:00 am (cached at February 15, 2017, 11:04 pm)

An anonymous reader quotes a report from Ars Technica: At 2.25 gigawatts, Arizona's Navajo Generating Station is the biggest coal-burning power plant in the Western U.S. The plant, and the nearby Kayenta coal mine that feeds it, are located on the Navajo Indian Reservation, and the Navajo and Hopi peoples have had a conflicted relationship with coal since the plant opened in the 1970s. Almost all the 900-plus jobs at the mine and plant are held by Native Americans, and the tribes receive royalties to account for large portions of their budget. Negotiations were underway to improve the tribes' lease terms, which expire in 2019. But on Monday, the four utilities that own most of the plant voted to close it at the end of 2019. They decided that the plant's coal-powered electricity just can't compete with plants burning natural gas. A press release from Salt River Projects, which runs the plant, explained, "The decision by the utility owners of [Navajo Generating Station] is based on the rapidly changing economics of the energy industry, which has seen natural gas prices sink to record lows and become a viable long-term and economical alternative to coal power."

Read more of this story at Slashdot.

Yahoo Notifies Users of Sophisticated Breach Methods (SecurityWeek) SANS ISC SecNewsFeed(cached at February 15, 2017, 11:00 pm)

Yahoo Notifies Users of Sophisticated Breach Methods (SecurityWeek) SANS ISC SecNewsFeed(cached at February 15, 2017, 11:00 pm)

Dutch Town Pilots Lightlines To Help Distracted Smartphone Users Cross the Road Slashdotby msmash on transportation at January 1, 1970, 1:00 am (cached at February 15, 2017, 10:34 pm)

An anonymous reader writes: A Dutch municipality has introduced pedestrian traffic lights specifically designed to help smartphone users avoid stepping into traffic by displaying a colorful strip of light on the pavement. Built by Dutch firm HIG Traffic Systems, the new +LightLine light comes with a LED strip that illuminates the pavement with a horizontal strip before the road crossing. Smartphone users looking at their phone will see the color of the strip beneath their feet before stepping out into the road.

Read more of this story at Slashdot.

US to NATO: Pay more or we will reduce support AL JAZEERA ENGLISH (AJE)(cached at February 15, 2017, 10:30 pm)

Defence Secretary tells NATO that US will moderate its commitment, if fellow members do not increase military spending.
Is Indonesia a tolerant country? AL JAZEERA ENGLISH (AJE)(cached at February 15, 2017, 10:30 pm)

Millions voted in regional elections seen as a test for diversity.
Yahoo Notifying Users of Malicious Account Activity as Verizon Deal Progresses Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at February 15, 2017, 10:04 pm)

Kate Conger, writing for TechCrunch: Yahoo is continuing to issue warnings to users about several security incidents as it moves toward an acquisition by Verizon. Users are receiving notifications today about unauthorized access to their accounts in 2015 and 2016, which occurred due to previously disclosed cookie forging. "As we have previously disclosed, our outside forensic experts have been investigating the creation of forged cookies that could have enabled an intruder to access our users' accounts without a password. The investigation has identified user accounts for which we believe forged cookies were taken or used. Yahoo is in the process of notifying all potentially affected account holders. Yahoo has invalidated the forged cookies so they cannot be used again," a Yahoo spokesperson told TechCrunch.

Read more of this story at Slashdot.

Yahoo Notifying Users of Malicious Account Activity as Verizon Deal Progresses Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at February 15, 2017, 10:04 pm)

Kate Conger, writing for TechCrunch: Yahoo is continuing to issue warnings to users about several security incidents as it moves toward an acquisition by Verizon. Users are receiving notifications today about unauthorized access to their accounts in 2015 and 2016, which occurred due to previously disclosed cookie forging. "As we have previously disclosed, our outside forensic experts have been investigating the creation of forged cookies that could have enabled an intruder to access our users' accounts without a password. The investigation has identified user accounts for which we believe forged cookies were taken or used. Yahoo is in the process of notifying all potentially affected account holders. Yahoo has invalidated the forged cookies so they cannot be used again," a Yahoo spokesperson told TechCrunch.

Read more of this story at Slashdot.

IO-Socket-SSL-2.046 search.cpan.orgby Steffen Ullrich at January 1, 1970, 1:00 am (cached at February 15, 2017, 10:03 pm)

Nearly transparent SSL encapsulation for IO::Socket::INET.
IO-Socket-SSL-2.046 search.cpan.orgby Steffen Ullrich at January 1, 1970, 1:00 am (cached at February 15, 2017, 10:03 pm)

Nearly transparent SSL encapsulation for IO::Socket::INET.
Test-Mockify-0.9.4 search.cpan.orgby Christian Breitkreutz at January 1, 1970, 1:00 am (cached at February 15, 2017, 10:03 pm)

minimal mocking framework for perl
Object-Base-1.09 search.cpan.orgby Orkun Karaduman at January 1, 1970, 1:00 am (cached at February 15, 2017, 10:03 pm)

Multi-threaded base class to establish a class deriving relationship with parent classes