Home Home > Marketing
Sign up | Login

Deprecation notice: openSUSE Lizards user blog platform is deprecated, and will remain read only for the time being. Learn more...

Archive for the ‘Marketing’ Category

Saschas Backtrace: Interview with Petko D. Petkov on Netsecurify

December 24th, 2008 by

Petko D. Petkov is one of the founding-members of the Gnucitizen-hacker-network. They work inbetween internet, computers and security and always have very interesting projects going on, for example the “House of Hackers” a social-network for hackers and security experts. The Gnucitizen define themself as “a leading information security think tank, delivering solutions to local, national and international clients“.

Thier latest project is Netsecurify, an automated, webbased, remote testing tool, that enables security-testings of applications. One of the primary goal of the projects is not only to have a pioneering sort-of feeling, but foremost to support low-profit or non-profit organisations to have a robust and stable security-testing tools for free. They think of organisations, that otherwise would not be able to affort security experts and testing. We had a short interview with Petko D. Petkov on Netsecurify, their motivation, software design and overall goals.

What does the tool Netsecurify exactly do?

Netsecurify is a remote, automated, vulnerability assessment tool. The tool follows the SaaS (Software as a Service) model, i.e. it is a service which runs from Amazon’s scalable computing infrastructure. In it’s core, the tool performs several assessments, all based on open source technologies, and also provides recommendations through a flexible recommendation engine. The tool also allows 3rd-party organizations to enhance the reports.

Netsecurify is very simple to use. All the user has to do is to login and schedule a test for a particular network range. Once we approach the specified scheduled data, we run the test. When the test is done, the user is notified via email or by other means which we are working on at the moment. The user then logs in and downloads a copy of the report. For security reasons, the report is destroyed 30 days after it has been completed.

What was your motivation for starting the project?

The primarily motivation for starting this project is to provide free, quality, flexible, automated information security testing tool which can be employed by charity organizations, 3rd world countries, and in general, organizations and companies who cannot afford to spend money on security. Also, a huge motivational factor is the fact that no one has done a project like this. We are the first to do it. 🙂 This is pretty cool.

Who are the people behind the project and how is the project organized (agency, virtual, decentralized)?

Technically speaking, the people behind Netsecurify are GNUCITIZEN. However, we welcome anyone who is interested to join us and help us improve it. Because the testing engine is based on open source technologies which we have glued together and we are continually enhancing, we are planning to contribute back to the community everything that we do and as such close the circle of energy. In theory, this makes the entire security community part of the Netsecurify project.

What is the basic design concept and how do you think will the project develop and evolve?

We have a scalable backend and very easy to use and flexible frontend. In between we have several APIs which allow us to expand the service as we go. The tool hasn’t been just built from scratch. There was a lot of thought and design considerations put into this project before the actual code. We follow the KISS (Keep it Simple Stupid) principle. We find that this approach works quite well for us. In the future we are planning to continue simplifying and enhancing the product.

Do you have other projects planned, that will be coming at us in the future?

We always have. Expect to see more from the GNUCITIZEN team soon.

Thanks to Martin Wisniowsky (mw@node300.com)

Original Link to this Interview: http://digitaltools.node3000.com/5minutes/interview_with_petko_d_petkov_on_netsecurify_testing_tool.php

Fate Internal, Up- and Downstream

December 16th, 2008 by

motivated by Aaron’s blog post More downstream fun I was thinking about how Fate could be a more important part of infrastructure in the Linux landscape. Fate is now an important part of the Novell/SUSE infrastructure and we are currently in the process to open it up for the openSUSE community. But could Fate also be useful for upstream integration? To let you participate in the discussion I think I should start with some explanations what Fate is and in which environment we are with it.

Fate is a system developed at SUSE over the last few years to track features and requirements for Novell Linux products.  The term “feature” is already is a topic for scientific papers, but how we understand a feature is a functionality  that is not yet in the product but required or wanted. It references future products, in most cases more than one such as SLE and openSUSE.

Fate Feature Tracking EnvironmentThe little sketch illustrates the dilemma in which we are when it comes to product planning. Basically it is all about one  thing: decision taking. Decisions have to be taken about the new functionality  that goes into a product and the tasks internal people work on. This is based on the decision how the product should look alike from a high level point of view. To make a solid decision about the high level product it needs to be clear what we are actually able to put into the product at a given time. That is only a part of what is really going on but let’s leave it with that for simplicity.

You see that lots of the base information which is needed to make
good decisions comes from different people: Product managers have a strong idea of how products should be, the technical project manager knows about dates and technical possibilities and can plan with the engineering managers how that can be achieved with the given amount of people in a given time frame. Technical feasibility is worked out with the developers as they’re the experts. The colored arrows try to visualize the communication ways, different colors mark different topics.

Since we work with the communities we have more input of information: The user community tells what is needed and the upstream communities announce what they plan to do by when.

The part with the internal decision taking is very much based on Fate in the Linux part of Novell and that is working fine. Features come in by a requester and all involved parts can give their thoughts in  a discussion forum. The key functionalities add their priority for the feature and finally PM and TPM come to a decision. Features with a high priority have to make it into the product. Engineering managers can assign developers and they can mark features as finished. All the processes are covered by a set of configurable rules. The Fate system is integrated into other infrastructure parts. There are several clients for different needs, the most mature is the KDE fat client.

What is not yet optimal are two things: There is no good way yet for the user community to community their wishes for upcoming products. We are facing that with opening up a new web based openSUSE Fate client soon. That will involve the user community not only in testing and using the product but already in its planing in a defined way.

A more tricky part is how to involve the upstream communities. It would be great for a Product Manager of a Linux distribution to see the feature plans for upcoming releases of big upstream projects, maybe somehow integrated into the Fate for his product. Would the Fate model as described here in a nutshell suitable for upstream projects?

For example, could KDE or GNOME make use of parts of the process for them internally and provide a structured interface to the downstream parties? If so, that could add a lot of transparency. Transparency is the precondition for flexibility and trust and as a result for better collaboration which would benefit all.

I hope that helps for a basic understanding and would love to hear your opinion. I promise to come up with more information about the Fate system and improve my drawing skills 😉

openSUSE-Education success history : OpenSource ECDL in Milan

November 29th, 2008 by

As i annunced on marketing mailing list this 21 November, in Milan (italy) as been presentated the OpenSource ECDL version.

Yes, your red well… OPEN-SOURCE. That means, instead talk about MS Windows and MS Office, it talk about an opensource Operating System and OpenOffice.org. This free operating system is openSUSE 😉 , improved with our Education Project. I was not in Milan, because if i have to say the true i was out of money, i live 1000 Km far, and i i wasn’t able to buy train ticket 🙁 . Mr. Carugo , the DIDASCA Rector told me about a “SOLD OUT”, 650 peoples in a room where only 500 was allowed… so.. a GREAT DAY!! Oh, i forgot.. Thanks to marketing team that sent me 50 Promo DVDs. Thanks

KIWI-LTSP at the Brindisi’s Linux-Day (Italy)

October 26th, 2008 by

Yesterday, 25 October, ILS (Italian Linux Society) and italian LUGs (Linux User Groups) had organized Linux Day. A day, where we spread words about Linux

Me and my LUG (BriLUG – Brindisi Linux User Group) worked to it, on my City (Brindisi indeed).

Here some photos:

me with suse gadgets

in particular, in the morning i talked about GnuPG keys.

The evening was an “installation party” where i presented KIWI-LTSP to teachers and schools representatives.

(same child plays with openSUSE-edu on LTSP laptops)

The project likes and infact, the press talked about it to. (check second colomn)

A great Day isn’t it?

(all photos will be available on BriLUG website)

Andrea

PageRank 6 for Indonesian openSUSE Community Website

October 9th, 2008 by

openSUSE-ID PRToday, I have a good news for Indonesian (and for all off) openSUSE community, our community website have PageRank 6 (PR 6). It would be not an important news for all of us, but it’s a good news for me because I know how difficult to get PR 6 with my personal blog 😛

Indonesian openSUSE community website built on July 23, 2007 and serve as the first place for discussion, finding tutorial and supporting openSUSE fans.

Google PageRank trend is consistent with the increase in the number of users of openSUSE (user who install openSUSE in their PC or laptop) in Indonesia and in tune with the increasing number of forums and mailing lists user. It’s also consistent with the frequency of users who accessing the page tutorial on website.

Hopefully PR 6 can be the extra spirit to continue the improvement of the openSUSE community in Indonesia. We hope to provide best support for users of openSUSE and it’s variants distro.

Our next project is increasing tutorial page and encourage the member to create their personal blog within openSUSE blogger community. We hope to see more and more openSUSE related articles, with English or Indonesian or another language.

openSUSE spokesperson/lizard/evangelist/coordinator

September 30th, 2008 by

I probably could make here the longest title just naming everything we have so far as designation for the job 🙂

So what is it about?

We want to have an official program to support local communities better. We already have some strong supporters which are doing an awesome job, now we need more of them. You might think of fedora ambassador or Ubuntu LoCo, but for a unique project like openSUSE we also should have a unique name. But of course it’s not all about the name, i posted yesterday a draft with more details and some open questions. We think that this program will help the project, and the people who are doing the job (without a name right now 🙂 ), a lot.

Join the discussion at openSUSE-marketing!

opensuse-tutorials is up online

September 7th, 2008 by

There are fedora-tutorials, ubuntu-futorials website on the web, for anyone who envies, of course, we have opensuse-tutorials either.

This link is for those who doesn’t don’t know it yet.

feel free to register and contribute to it.

http://opensuse-tutorials.com/

openSUSE TV update

August 21st, 2008 by

Ok now that my tubes to the net are back with gusto, I have been able to get all of tube.o.o onto openSUSE TV.  Actually oTV has some videos that aren’t on tube.o.o 🙂

With HackWeek 3 coming up this week, I’m hoping to get more videos up there.  So calling all Geecko Stations, if your make some videos of you escapades, please let me know and we’ll get them uploaded.  As it isn’t an official corporate sponsored site rules are a touch looser, e.g: video format doesn’t have to be in OGG, yes it would be preferable but not final.  I have a HackWeek project relating to the openSUSE Broadcasting Corporation, so the weeks after HackWeek should hopefully be good.  I’m hoping to be able to do some updates during the week too, but they may have to wait.

Remember if you have any suggestions or (preferably) any content to share with folk about openSUSE and it’s ecosystem please let me know.  You can get hold of me by leaving a comment here or mail me (you may need to edit the address 😉 ).

openSUSE TV

August 5th, 2008 by

Some may know about the Geeko’s Tube, I’m not so sure that many do though.  There has been for a while now tube.opensuse.org, this is the official repository of videos by openSUSE people.  All the video is in .ogg format, and as such will play straight out of the box regardless of whether users are purists/pragmatists/whatever.

There are several services out on the web that offer video streaming in flash, one that caught my attention is blip.tv.  So why is blip different to YouTube et al?  Well for starters they openly use Open Source (they’re not ashamed of it), they support multiple formats for uploading and playback, and they provide multiple mechanisms to get your shows out there.

After some consultation on the mailing lists and IRC, I have created an openSUSE channel on blip.tv – http://opensuse.blip.tv The aim is for videos by the openSUSE Community for the openSUSE Community can get uploaded there and reach a much wider audience.  There are only a few videos on there at the moment but the content will grow (I’m just having a few ISP issues over here :-/ ).  So what content is able to go on there?  The short answer is any, yes there are only a couple of catches: they must preferably be clean (remember the audience is varied from young to old), have an openSUSE twist (the whole reason for the channel).  At present there are a few screencasts and some presentations by community members at events (granted they’re all employees, but that doesn’t make them any less a member of our community).

Just to show some of the ways you can watch the channel:

Banshee (out of the box openSUSE 11.0 install)

Browser (again out of the box openSUSE 11.0 install)

Miro which you can download, just look here.

As the channel is syndicated via RSS you can subscribe to it using Banshee/Miro and it will automatically download the latest episode for you (sorry I haven’t tried in KDE, but I believe it should work).  You can also add the RSS feed into your preferred reader and pull the attachments from there.

I would be really keen on getting people’s feedback and also if people have content they would like to get on there.

LRL UK 08 – Not The Last

July 21st, 2008 by

So LUG Radio Live UK is over for another year, yes the event will be back next year but not the podcast.  openSUSE were represented by yours truly and Roger Whittaker (also representing the Big N), and to be honest I didn’t have to get my baseball bat out once to get people to come by – I was slightly disappointed with that as knocking some sense into some of those Ubuntu zombies would have been fun 😛  Part of the reason may have been the fact that the Furry Geekos were out in force

March of the Geekos

Roger also did a sterling job of getting the new openSUSE 11.0 Live/Installable DVD into almost all the “NutSacks” (The bags attendees received when entering the event).  Those that didn’t get one in there pretty quickly came over to ensure they did get one.  Everyone agreed that we had the best mascot and the best swag, talking of which can anyone guess what this is?

Mystery Swag

Only a few folk were lucky enough to get one, and to be honest it is a much better one than what RedHat/Fedora were dishing out.  It is of course a USB stick

Mystery Swag Revealed

Another piece of openSUSE swag that was being dished out but not by us was the Linux Magazine openSUSE 11.0 Special.  This is actually quite a good issue and is a great companion for anyone new to the distro.  I have a couple that I can send to people (UK/Europe preferably due to cost) if requested.  The issue was created aimed predominantly at the US market where Linux Magazine is trying to get a foot hold:

Linux Magazine openSUSE 11.0 Special Edition

Wandering around, I spoke to quite a lot of people about Linux in general and openSUSE and the feedback from people was tremendous.  Those that have actually tried 11.0 really really like it, and those that haven’t were adamant that they would.  So much so that one rather intimidating chap mentioned that “A friend of mine needed to re-install her machine and she was very scared of the process, I gave her a DVD of 10.3 and told her to ring me if she was stuck.  She rang me a short while later and exclaimed at how easy and straight forward it was.  She hasn’t looked back since!” The praise also came from a fair few die hards of other distros, which was pleasant to see and hear.  There was a friendly swag exchange with RedHat and Fedora, although their offering was pretty poor in comparison but still better than Ubuntu who had nothing but a type of crummy sticker and a million and one CDs of assorted variants of the same crud 🙂  The Fedora guys took it upon themselves to try and sully the image and spirit of our beloved Geeko by hanging it by one of their lanyards

Hung Geeko

Thankfully the kind chaps from Debian rescued it, although I’m pretty sure it was for their own gains.  The atmosphere was light hearted and pleasent with no trolls in sight or in earshot.  This even extended to my lightning talk which was pretty well attended, around 30 people almost none of which were involved with openSUSE in any way.  You can get my slides here, and there will be a video of it shortly.

All in all it was a fairly good weekend, and from an openSUSE perspective a very productive one 😉  I would like to thank Roger for his hard work in doing the stand, helping out and support as well as for the photos (some of which I used here).  I would also like to thank Zonker and Novell for arranging for the brilliant swag and DVDs, without which we could have looked like dull dorks.  Till next year!