KDE-CVS-Digest for August 1, 2003

In this week's CVS Digest: QtRuby, Ruby bindings for Qt are now in the kdebindings module.
KDevelop has a new class browser.
An OBEX kio-slave has been added. KWallet is enabled for compilation and testing. Plus KWin improvements, lots of work on KPilot conduits and many bugfixes.

Dot Categories: 

Comments

by Jilks (not verified)

Erm... I'm pretty sure that when Apple first started work with KHTML, KHTML was already independant from Qt.

by SadEagle (not verified)

Wrong.

by Russ Dill (not verified)

> I am not one of this people, but I see that
> many tend to switch to GTK because
> there are no GPL limitations, KDE has GPL
> limitation and it's QT.

So you like GTK because it is a good mix of GPL and LGPL? So its not about GPL tyranny then, its about libraries not being LGPL when they should be? Stop ranting about Linux and GPL then, calm down dude. Focus on the real issues. (BTW, if open software doesn't exist under a license people like, those people when often write their own software to get around the limitation)

by CE (not verified)

Furthermore this isn't actually the right place to discuss this issue.
He should go to Slashdot.org.

by Eric Laffoon (not verified)

> Quanta is GPL, it's free, and will not be sold, someone pays for development of quanta and it get's improved, one day it will became good app and a web designer will not consider buying some - this eats market share from commercial apps.

I'm not at all honored to be name in this diatribe. BTW according to this I'm "someone". One day Quanta *will* become a good app? Any chance you will switch your creme rinse with gasoline and take up chain smoking? Or am I too late with that suggestion? Quanta Plus *IS* a very good app used by a lot of professional web developers. As far as eating market share from commercial apps... well if we do that then I think it's obvious that they should not have prduced such crappy product that a hand full of guys could have produced better software because a good web developer can easily pay for the software they need with a days work so price is not really an issue... Then again a lot of people not living in industrialized luxury can't and they don't need to either.

> Quanta Gold is Commercial app, for building it thekompany uses commercial QT license. If the free quanta gets much improved, people will not buy quanta gold and the quanta gold project will die. Then eventually thekompany will not renew one QT license

They use Qt for a lot of other projects and will continue so that's not an issue. Also not an issue is the number of emails I get saying the GPL'd program is preferred. I've also seen reviews to this effect. In all fairness both programs have things the other doesn't but Quanta Plus has distinct advantages expressly because of the GPL and the code we can reuse. So my point here really is that you're using examples incorrectly which clearly demonstrate that you have no idea what you're talking about.

Now on to another topic... business. How many times has your hame been in the incorporation papers or at the top of a DBA? How many times have you been the guy people come to asking for money where you make the decisions? Business is not a spectator sport. Owning one (ore several) gives you new perspective. Let's talk real property. How many times can you sell a piece of real estate? It can have esssentially one entity owning it at a time. Someone here said that 80% of all software is this type, however you seem focused on software as a product. It's not! It's a tool. Software as a product is the lottery. You can sell it again and again and again... there is no real production cost past the design stage. If you're coding for somebody doing shrink wrap software look elsewhere for work because there's plenty of it. If you're looking to hit the jackpot with the magic program then understand something... greed killed the industry. It's a walking corpse waiting to be buried.

You want to talk capitalism? Captialism is rendering a service or product for a reasonable price and expanding on that model... but intellectual property, patents run amok and shrink wrap lottery mentality have people in high tech running around looking for that "magic combination" where they have one idea which they apply for government protection of and sit back to enjoy the massive revenue as everyone who ever touches their idea is forced to pay and pay. This isn't captalisim! It's feudalism revisited where economic and information serfdoms are formed and the haves milk the essence of the have nots. Let's face it. You don't pull this deal off without backing so once you have one of these "great ideas" it takes a fat wallet to do it so you sell it to the predatory companies who no longer care about an equitable business model and only care about returns mandated by laws set forth when economics supplemented your farming and trading rather than ran mega corporations.

Today small business people have no choice but to pursue an ethical model because people shun dishonesty, but some businesses have a choice because they can afford to mandate their products and services without option. Some would point to M$ but you could point to RIAA and MPAA members too as obvious participants in callusion and price fixing where there is no economic competition and the common man is having their money siphoned away for absurd profit margins.

Commercial software is failing as a business model because it's long since proven it is not about meeting the needs of customers near so much as creating wealth in an inequitable fashion. Soon it will become clear to businesses that they can participate in a collaborative manner to produce all the software tools they could ever want way cheaper than they can buy them and it will be impossible to sell shrink wrap software (unless you've established a solid niche with a tool at a reasonable price like Trolltech has with Qt - but I guess you are upset that they can make money off of what you make money off of too - another irrational perspective because if you're making money you can affort the captial investment... that's capitalism.)

BTW the GPL protects not only users by insuring the code will be there but as compared to BSD it protects me from you taking my program, modifying it and selling it without ever sending me a dime. You call that freedom. I call it a free lunch. I'm not buying yours. RMS may be quirky and out there some days, but at the core he's dead on. I can also sell web work while giving my tool away. It's free... though anyone is welcome to send me money in appreciation. ;-)

by Alex (not verified)

Is this a joke, it better be, nobody in the right mind would say such a load of shit.

Not only is that the poorest english I've seen in a long while it is also ridiculously misinformed, he can't even remember the name of the company's name, calling Qt a company.

'There is a belief that companies like QT that force GPL tirany can survive, I would say that this is not exactly true. Following a trends of growing share of GPL apps will lead to always free stuff and one will never sell an app and not buying a commercial licence."

He also does nto understand the way TT's dual licensing works. TT does not force you to make your software GPL as the misinformed A(sshole) suggests. All TT says is if you don't want to make GPL software and you want to sell it, than they should be rewarded for their work too.

In addition thee price is not so high for a company for what you get. TT is a startup and they have to charge thi price because they live off of innovation. The price was always the same, even before TT had a GPLd Qt. The GPL did not eat into tehir business anyway because programmers which write free software would not pay a company so much to do so and would instead use something else such as GTK+. The dual licensing as TT said has done nothing but help them, they now have better brand recognition and KDE to show just how good their product is. In addition, TT has increased their profits each year.

Another point from the A(sshole) is that you can't sell apps which are GPL. This is simply not true, the GPL does not say this and besides you do not need to choose the GPL as your license of choice. You only neeed to select it if you are already using GPLd code which automatically counters his other point that GPL soft is of poor quality. If it is of such poor quality why would a company use it and furthermore why would he see it as a threat?

The A(sshole) also says that people will fork Qt and therefore it will become of poor quality. Again another illogical point from his side. A fork is separate from the original Qt and so no matter how bad the fork was Qt would remain the same. IMO if Qt is forked it would not make it worse at all, it would mean that TT was not giving its user base what it wanted and so a fork was necessary.

The poor misinformed A(sshole) also jumps to MS's side and calls them "just a market winner". How naieve to believe that this si all ti is. Perhaps he has never read these two articles:

http://www.lindows.com/lindows_michaelsminutes_archives.php?id=65
http://microsuck.com/content/whatsbad.shtml

Another misguided example was the Quanta plus vs Quanta Gold arguement. The A(sshole) seems to think taht Quanta Plus came from Quanta Gold, while it is actually the other way around. TK hired people working on Quanta Plus. And than Eric Laffoon did not want the project to go to waste and hired Andras. Quanta Plus constantly presures Quanta Gold to be better, and so its a win for everyone.

He also says that Apple is successfully competing against MS by using a commercial license. HOW!? MS has a whopping 2.3% market share, you call that sucessfully competing!

He also seems to like the BSD license which I think is good for the short run but terrible for the long run. The GPL allows companies to use the code which many people might have worked on and donated to OSS and not give anything back to the project. This is good in the short run because many companies will use your code, but bad in the long run for the project. It only benefits companies.

He also says again that if something is GPL, it is always GPL or you have to pay someone a lot of money. But he doesen't realize that in the pure commercial licesnes it is always pay a lot of money and there is no other choice.

Companies that make money can also be companies based on the GPL and other companies will just need to compete.

"4) not Free (when you try to make soft) because it chains you with GPL and you are FORCED to GPL your code too"

It is free if it is GPL and also it doe snot force you to GPL your program unless you decided to use GPL code. So fi you don't like the GPL don't use it. You can use GPL programs and not have to GPL your code btw. For example if I make a program in kdevelop it does not need to be GPL.

H also calls the GPL a monopoly. THE GPL is a license and it can't be a monopoly unless it controls most of the market share which it does not by any measure.

This is just a anti GPL misinformed asshole who clearly has not read any books explaining the way OSS works or even the way software in general works.

Sorry about not quoting everything I am responding to and not fixing my spelling/structure errors. But, it simply is too much time wasted on one idiot. I only responde dto his 1st post, since he si pretty much repeating the same shit.

by uga (not verified)

A new little toy to play with :-)

by Tom (not verified)

More than a toy, kwallet will finally let me manage passwords so I don't have to keep typing them into dialogues every time I revisit a web page in a new session. Finally!

by George Staikos (not verified)

Please note: kwallet is enabled for compilation, but not integrated into anything in KDE yet. Integration will happen over the month of August. Any wallets that are created at this point are subject to be summarily broken in half, or more, so don't use it for anything other than personal entertainment right now.

That being said, I would appreciate feedback on the direction the GUI is taking (kwalletmanager), and perhaps the client API (kwallet.h).

by anonymous (not verified)

Is it just me or does kwalletmanager not have a visible system tray icon? I'm running kwallet (3.2.0-0+cvs20030801+orth) on Debian Sid with XF86 4.3 and KDE CVS HEAD (orth's debs).

by George Staikos (not verified)

The tray icon was not done yet. I have a wonderfully ugly one in CVS right now, not installed yet. I'll put a Makefile in tomorrow night.

I really need someone with artistic talent to make ~6-7 icons for this, if anyone is interested.

by Jeff Johnson (not verified)

Stupid question: why does it need to have a tray icon? That just wastes screen space and sound like it's hard to use (who will be able to understand the relation of password in Konqueror and some symbol in the system tray?).

by George Staikos (not verified)

It is used to notify the user that a wallet is unlocked and in use. It's very important IMO. If I get enough options together to justify a kcm, I'll make the tray icon optional.

by Jeff Johnson (not verified)

Unlocked? Does that mean that I need to enter a master password?
What about people like me (and the majority of the population), who never use passwords? All my passwords in Mozilla are unprotected, I even have all my passwords list in a text file...

by Datschge (not verified)

Does that mean you run as root, auto login included etc.? You know everyone here will tell you that this all is discouraged due to security reasons? ;)

by Jeff Johnson (not verified)

No, I have one passwort for my user account (and a trivial-to-guess&type password for my root account). But I don't want more passwords. They do not make sense anyway, if somebody hacked my account he can easily install a key sniffer, or replace the application that reads them with a trojan horse, or... it's pseudo-security.

by R.E. Craig (not verified)

Jeff,

Don't be a fool. Passwords are not pseudo security. It is not so easy to hack a well protected system, no matter how good a hacker you are. Remember that the best hacker will not be on a personal system that is unimportant. Only the mass of hacker wanna-be's would try to hack YOUR system, unless you work for our so-called President or someone else important. Otherwise, your computer is not the target of some super hacker. With that in mind, if you have your firewall up and configured properly, you are running with other security measures in place, and you use secure passwords (easiest with a password manager) then you will not be hacked successfully.

Also, remember that the passwords should be secure passwords. This means you should NOT store them in a text file, but in an encrypted file. You should NOT use words that can be found in the dictionary and passwords related to your personal information (i.e. social security number, birth date, name, place of birth, wife's name, wife's birth date, even your dog's name, etc...). They should be a combination of upper and lower case letters as well as contain some none alpha-numeric symbols. They should also be more than 8 letters in length, but some programs and websites limit passwords to 5-8 letters. With these things as your guidelines you should be pretty much hacker proof on your passwords. If you ignore these very commonly accepted practices after they have been explained to you then God help you.

R.E. Craig

by uga (not verified)

I called a toy, just because I'd like to "play" with it in my apps :-) Not because I consider it a toy. It's something everyone has been waiting for loooooong time

by Lee (not verified)

Yea, I've been waiting on something like this for unix. I really hope it'll include everything -- web passwords, ssh, gpg, remote filesystem passwords, etc. That would rock. Even better, if it syncs with gnu keyring on my palm :D

by George Staikos (not verified)

It will do web passwords, and all KIO related items. I have no provisions in place for handling gpg, for instance. It is possible to do this, but I'll leave that up to the kgpg developers to deal with. KWallet is quite generic and really can do anything - it's effectively an encrypted binary data store with serialisation and a fancy GUI. If you want to synchronize with devices, again, you will need to write the code to do it but it's really not hard. I'll be fully documenting things approximately around the time of my talk in Nove Hrady.

by Lee (not verified)

That sounds great. It would be nice to hear that there'll be a guideline which makes apps USE it, but either way, I think they probably will. KDE's usually pretty good with integration :)

by annonimous (not verified)

Please, helpme.
I forgot the kwallet password.
Is the root able to change it? I still have the root password.

I have been looking for one solution on the net. Nothing found yet.

Were can i ask about one solution?

by Anonymous (not verified)

No. If root would be able to read them then it would be an design flaw.

by annonimous (not verified)

I don't want to read then, i want to delete then.

I want to be at starting point. Is it possible?

by Dale (not verified)

Just create a new wallet from the wallet manager, and set it to use as default. that is what I did, the dumbass that forgot the password as soon as I typed it in...

by J (not verified)

Great feature.

by Burrhus (not verified)

What happened to the Swedish translation? They have consistently maintained the most complete translation. Now they aren't even on the list.

http://i18n.kde.org/stats/gui/HEAD/index.php

by Gaute Hvoslef K... (not verified)

1. That link points to the HEAD translations, which one day will be KDE 3.2. Few translation teams have started working on HEAD.

2. The statistics list seems to have been cut off right below 'Russian'. All teams behind Russian in the alphabet are left out, not just Swedish. (The i18n.kde.org server has been down for a few days. I guess it's not quite up to speed again yet.)

3. The 3.1.x statistics page is complete, and looks really impressive for Swedish. I wouldn't worry yet ;-)

http://i18n.kde.org/stats/gui/KDE_3_1_BRANCH/index.php

by Anonymous (not verified)

It looks like that all i18n teams and statistics are now restored.

by bobbob (not verified)

I thought everyone in Sweden spoke perfect English :) As do everyone in Denmark, Norway, Slovenia...

by Ale (not verified)

Almost scared me, thought there wouldn't be any CVS Digest for Friday =( glad to see I was wrong! =)

I like the new features included now and I'm glad to see some work on the UI though I wish tehre was more and I also like the speedups especially for PIM and Artsd. Great stuff =)

by Ruediger Knoerig (not verified)

I've got trouble with the kget of kdenetworks-3.1.3. If I make a "save target as" nothing happens. If I do it again I get the message "The location is still being saved" and kget pops up, with the download stopped. It starts if I click the "play" button. What's wrong?

by Jan (not verified)

Does that mean some malicous app can access all my FTP accounts because
the passwords are stored in the wallet? I hope not.
It would be really cool if it worked like this:

1. You enter ftp://www.example.com in Konq
2. Some dialogue opens which asks if you want to "spend" your wallet information
on that domain. This dialogue is protected in a way that makes it impossible
to automatically circumvent it.

This would make it quite safe because I'd get suspicious if some dialogue requesting
access to ftp accounts I'm currently not working on popped up all of a sudden.
Optionally you might enable that you always have to enter your root password
to "spend" a password. At least I wouldn't have to remember all the various passwords
at once.

by AC (not verified)

If you have a malicous app on your computer, running with your account, it can get every piece of data on your computer. Period.

Every file. Every keystroke. The attacker can see everything on your screen. Everything.

If you would have to enter the root password, the only difference would be that the attacker would also learn your root password. But the value of root accounts on desktop machines is completely overrated, all important data is stored with the user's account. Root is only useful for an attacker if the machine is used by several people, or for using your computer for some distributed DOS attacks that require root permissions.

by Sami Kyöstilä (not verified)

Does anyone know where to find further info about the new OBEX kio-slave?

by Thomas Vollmer (not verified)

I tried it from CVS/kdenonbeta today.

But I have a SE T68i and had no success. Get and put with openobex ftp works on the command line.

For the KIO stuff I will try a little bit more this weekend and then I also test with a T610