David A. Wheeler’s Personal Home Page

The magic cookie parable

DoD Open Source Software (OSS) Pages Moved

Insecure open source software libraries?

• Security
  • Secure Programming for Linux and Unix HOWTO -- Creating Secure Software
  • flawfinder, a source code scanner
  • Securing Microsoft Windows (for Home & Small Business Users)
  • Filenames and Pathnames in Shell: How to do it correctly
  • Presentation: Securing Open Source Software [Editable Slides]*
  • Presentation: Open Source Software and Software Assurance (Security) [Editable Slides]*
  • SCM Security
  • Countering Trusting Trust through Diverse Double-Compiling (countering Trojan Horse attacks on Compilers)
  • Java Security, a tutorial
  • Easier Email Security is on the Way?
  • Write It Secure: Format Strings and Locale Filtering
  • "Techniques for Cyber Attack Attribution" by David A. Wheeler (Oct 2003) (discusses attacker traceback / source tracking on a TCP/IP-based Internet)
• Software Innovations
  • The Most Important Software Innovations
  • Microsoft, the Innovator?
  • Innovation and OSS/FS
• Open Standards
  • Is OpenDocument an Open Standard? Yes!
  • Presentation: Open Standards and Security [Editable Slides]* [OGG] [MP3] [FLAC]
  • Open Standards, Open Source
• Countering Spam
  • Countering Spam Using Email Passwords
  • Comments on Email Authentication for Countering Spam
  • Stop Spam! (Essay)
  • Guarded Email Protocol
• Chess
  • A Garden of Chess Openings
  • Fischer Random Chess (Chess960)
  • FEN2Wikipedia
  • Famous chess games: The Game of the Century (PGN/Text), The Immortal Game (PGN/Text), The Evergreen Game (PGN/Text), Deep Blue - Kasparov, 1996, Game 1 (PGN/Text)
  • ChessClub
• Ada
  • Lovelace, Ada95 tutorial
  • Steelman papers
• Mathematical Recreations
  • The Definitive Four Fours Answer Key
  • Way Off Base, discussing weird bases
  • When Adding and Multiplying are the Same
• Formal Methods
  • How to prove stuff automatically
  • Simplify released as open source software
• Text Adventures / MUDs / Interactive Fiction (IF)
  • Accuse, text adventure puzzle-game
  • Adventure/Colossal Cave
  • Anchorhead
  • Bronze (by Emily Short) transcript
  • Scepter of Goth (history)
• Miscellaneous Essays
  • Intellectual Rights, not Intellectual Property
  • Ask Not Who Holds the Copyright
  • Man as the World-Builder
  • How to Throw a Matrix Party
  • Crystal City Name Changes
  • Move Spaceship Earth!
  • Reviews of Books, Movies, and Other Stuff
  • CISCO VPN / Wireless incompatibility
  • Liberty Bill 2
  • Treat Washington, DC as Part of Maryland for Congressional Elections
  • Random Opinions
  • Miscellaneous links
• High School Advanced Math/Precalculus info (I teach)
• My web attic - where I put older things.

• Open Source Software / Free Software (OSS/FS or FLOSS)
  • Why OSS/FS? Look at the Numbers! (Paper)
  • Why FLOSS? Look at the Numbers! (Presentation)
  • FLOSS is commercial software
  • How to Evaluate OSS/FS Programs
  • Generally Recognized as Mature (GRAM) OSS/FS Programs
  • Make Your Open Source Software GPL-Compatible. Or Else
  • Releasing Free/Libre/Open Source Software (FLOSS) for Source Installation
  • FLOSS License Slide
  • High Assurance (for Security or Safety) and Free-Libre / Open Source Software (FLOSS)... with Lots on Formal Methods (aka high confidence or high integrity)
  • OSS/FS References
  • Comments on Open Source Software / Free Software (OSS/FS) Software Configuration Management (SCM) systems
  • What Should Governments Examine in Acquiring COTS Open Source Software (OSS)? (presentation)
  • Presentation: Open Source Software and the U.S. Department of Defense (DoD) [ODP] [PPT]
  • Presentation: Open Source Software (for U.S. Acquisitions) (2007-03) [ODF]* [OGG] [MP3] [FLAC]
  • OSS and the DoD (2008 webinar) / Questions and Answers, OSS and DoD
  • Open Source Software (OSS) in U.S. Government Acquisitions (this is a gentle introduction to FLOSS)
  • “Publicly Releasing Open Source Software Developed for the U.S. Government”, Journal of Software Technology, Feb 2011, Vol. 14, Number 1
• Source Lines of Code (SLOC)
  • Counting SLOC papers, inc. "More than a Gigabuck: Estimating GNU/Linux’s size"
  • SLOCCount, a program to measure SLOC
  • Linux Kernel 2.6: It’s Worth More!
• Other Documents
  • Geek Video Franchises
  • George Mason University (GMU) Thesis/Dissertation Sample Document in OpenDocument format [PDF]
  • Uri(7), documentation on URI/URLs for Linux
• Miscellaneous Software
  • Totro, a random name generator (also: Totro.pl)
  • Auto-DESTDIR (automates installation)
  • User-union (Union filesystem for unprivileged users)
  • Readable s-expressions and sweet-expressions for Lisp-like languages
  • html2wikipedia
  • quoter, translates HTML, SGML, and XML quotation marks
  • Apple ][ stuff
  • 6502 development approaches
• Computer-related essays
  • Eliminate Software Patents
  • Fixing Unix/Linux/POSIX Filenames (discusses newlines/tabs in file names, etc.)
  • How to easily open files and URLs from the command line
  • Introduction to the Autotools (autoconf, automake, and libtool)
  • Automating DESTDIR for packaging
  • Python 3 in Python 2
  • Microsoft Outlook TNEF handling (aka Winmail.dat or "Part 1.2" problem of unopenable email attachments)
  • Comments on Open Source Software / Free Software (OSS/FS) Software Configuration Management (SCM) systems
  • Easy and Cross-Platform GUI development FLOSS tools with Unix/Linux support
  • SCM Security
  • How to revive an old laptop
  • Suggestions for Palm users
  • My FOSDEM 2002 Travelogue
  • My FISL 6.0 (2005) Travelogue
  • My review of Debugging by David J. Agans
  • Simple and Readable Text Markup Languages vs. Rich Web Text Editing
  • Quotes in HTML
  • Notes on Fedora Linux
  • Virtualbox and Fedora Linux
  • Configuring Apache for Client Certificates (such as DoD CAC cards) on Red Hat Linux/CentOS