Kuliax Log

We had a notification from DokuWiki when we logged in to wiki in kuliax.org on July 19, 2007. It told us that there was a XSS vulnerability discovered in DokuWiki and we should read the bug report for manual fix or upgrading the current version.

Actually the vulnerability is discovered in spellchecker backend and affected all version to 2007-06-26, even when spellchecker is disabled. But we’ve just known from the bug report that the vulnerability only exploitable with IE browser because of its broken MIME handling.

Continue Reading »

Frappr.com is one of map services on the Internet targeted for mapping communities. We just think that what if we can mapped people around Kuliax: developers, contributors, users, and supporters in one map. So we’ve created a map in frappr.com: www.frappr.com/kuliax.

So add yourself to the map and show your support to Kuliax Project

Kernel patch developed by Con Kolivas (CK) for 2.6.22 has been released. This is the last -ck patch ever. We planned to use this patchset in Kuliax 7.0 to improve the responsiveness and interactivity, like we did in our first 6.0 release. Why CK discontinued this project? quoted from ck.wikia.com, CK stated the following reasons:

• If whatever performance advantage it has is all but abolished compared to mainline then there is no point maintaining alternate patches to achieve the same endpoint.
• All interest I have in kernel development, even out of the mainline spotlight, has been… abolished (I had nastier words but decided not to use them.) It is clear that I cannot develop code for the linux kernel intended only to be used out of mainline and not have mainline get involved somewhere along the line. Whether it be the users or even other developers repeatedly asking “when will this be merged”. This forever gets me into a cycle of actually trying to merge the stuff and … well you all know what happens at that point (again I had nastier words but decided not to use them.) So, I’ve had enough. I’m out of here forever. I want to leave before I get so disgruntled that I end up using windows.”

Continue Reading »

Linux Kernel 2.6.22 has been released on July 8, 2007. Torvalds said in the git web interface:

Linux 2.6.22. Woo-hoo. I’m sure somebody will report a “this doesn’t compile, and I have a new root exploit” five minutes after release, but it still feels good ;)’.

And that sounds good for us too, because we can use this kernel version in Kuliax 7.0 and start building it with our planned patches, configuration, and optimization.

Continue Reading »

Maybe you want to know how we examined RAM problem in the previous post. We have tried several ways to do it:

• fsck.ext3 -c, ex: as root run fsck.ext3 -c /dev/hda6, it will check ext3 filesystem in the logical partition number 6 with badblocks checking.
• badblocks, this is separated program used for searching badblocks in a storage device. The recomended way to run this app is by using option -c via fsck.ext3. But if you want to run it directly never mind, it’s your choice, I’ve told you. Just run: badblocks -n /dev/hdaX for non-destructive mode instead of running it with option -w. You can’t combined the options in a single command. Continue Reading »

Finally, Kuliax Project has migrated all infrastructure to the new place, but there is one more thing to be done, that is Kuliax Bugtracker. We still try to import the database from the old one.

We are learning FOSS engineering by now, and start the development of learning resource center (lrc) software. Also there are some people proposed to join this project.

Kuliax 6.0 SE-01 released on January 23, 2007. It includes papers and presentations of all presenters at Seminar Open Source & Hacking WiFi.

We received an e-mail from the author/architect of Metalinker, Anthony Bryan, on Monday, Dec 18, 2006 (sorry if it’s somewhat “oldies”).

He said that Kuliax may take the advantages of Metalinker, for fast, easier, reliable, checksum-verified download, as he saw our mirror servers in download.html. Anthony said that:

Downloads can be distributed between mirrors and checksums are automatically verified when it finishes. Mirrors have location and priority information to make the download more efficient.

Now, we’ve studied Metalinker, how the system works, how to do it, etc. So, we’ll start with the generator :-D, but the problem is: all sites that serve Metalinks need to add a MIME type for .metalink files of “application/metalink+xml”. We need to know each site listed in download.html, and their admins of course, allow us to use Metalinker and ask them to add the MIME type on their servers config.

For all admins of Kuliax mirror servers, are you ready and allow your server to do Metalinker?