
Congratulations to all developers (DDs or not, we have sponsored uploads,
Debian contributors and such, too!) who contributed to the release of Debian
GNU/Linux "lenny" 5.0. I must admit that I've been largely inactive recently,
I just managed to keep the bugs on my remaining packages low. Funnily, just
the day lenny was released I learned about a bug in Enigma on AMD64 that is
probably worth fixing through proposed updates ...

Alright, Debian GNU/Linux 5.0
AKA as Lenny
has been released. Time for a Debian unstable unfreeze party!

What does the new stable release bring for system administrators? I ll give an overview what news you might expect when upgrading from Debian GNU/Linux 4.0, codename Etch (released on 8th April 2007) to the current version Debian GNU/Linux 5.0, codename
Lenny (released on
14th February 2009). I try to avoid duplicated information so make sure to read
the release announcement and
the official release notes for Lenny beforehand.
Noteworthy Changes
- initrd-tools got replaced by initramfs-tools
- netkit-inetd got replaced by openbsd-inetd
- the default syslog daemon sysklogd got replaced by rsyslog
- new defaults when creating ext2/ext3 file systems: dir_index and resize_inode feature enabled by default and use blocksize = 4096, inode_size = 256 and inode_ratio = 16384 (see /etc/mke2fs.conf)
- improved IPv6 support
- init.d-scripts for dependency-based init systems
- Debian-Volatile (hosting packages providing data that needs to be regularly updated over time, such as timezones definitions, anti-virus signature files, ) is an official service
- EVMS (Enterprise Volume Management System) was removed
- compatibility with the FHS v2.3
- software developed for version 3.2 of the LSB
- official Debian Lenny live systems for the amd64 and i386 architectures
- several new d-i features
Virtualisation
Virtualisation related new tools:
- ganeti: Cluster-based virtualization management software
- libvirt-bin: Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The library aims at providing a long term stable C API for different virtualization mechanisms.
- virtinst: Programs to create and clone virtual machines
- virt-manager: desktop application for managing virtual machines
- xen-shell: Console based Xen administration utility
- xenstore-utils: Xenstore utilities for Xen
- xenwatch: Virtualization utilities, mostly for Xen
Desktop oriented packages like
virtualbox and
qemu are available as well of course.
Noteworthy Updates
This is a (selective) list of some noteworthy updates:
- apache2: upgrade from 2.2.3-4+etch6 to 2.2.9-10+lenny2
- apt: upgrade from version 0.6.46.4-0.1 to 0.7.20.1, bringing apt-get autoremove
- aptitude: upgrade from version 0.4.4-4 to 0.4.11.11-1~lenny1, bringing aptitude safe-upgrade which replaces aptitude upgrade and aptitude full-upgrade replacing aptitude dist-upgrade
- bash: upgrade from 3.1dfsg-8 to 3.2-4
- bind: upgrade from 1:8.4.7-1 / 1:9.3.4-2etch4 to 1:9.5.0.dfsg.P2-5.1
- cfengine: upgrade from 2.1.20-1 to 2.2.8-1
- courier: upgrade from 0.53.3-5 to 0.60.0-2
- dpkg: upgrade from 1.13.26 to 1.14.24, bringing dpkg triggers
- drbd: upgrade from 0.7.21-4 to 2:8.0.14-2
- dstat: upgrade from 0.6.3-2 to 0.6.7-1, the new version for example provides the topcpu and topmem modules so you can run dstat -c -M topcpu -dng -M topmem to identify cpu and memory intensive jobs
- fai: upgrade from 3.1.8 to version 3.2.16, see NEWS
- gcc/g++: upgrade from 4:4.1.1-15 to 4.3.2-1.1
- git: upgrade from 1:1.4.4.4-4+etch1 to 1:1.5.6.5-2
- initramfs-tools: upgrade from 0.85i to 0.92o, see new Lenny features
- iproute: upgrade from 20061002-3 to 20080725-2
- iptables: upgrade from 1.3.6.0debian1-5 to 1.4.2-5
- gnu libc: upgrade from 2.3.6.ds1-13etch9+b1 to 2.7-18
- lighttpd: upgrade from 1.4.13-4etch11 to 1.4.19-5
- linux-kernel: upgrade from kernel 2.6.18 to 2.6.26, see wiki.debian.org/KernelFAQ#new-features-in-lenny
- lvm2: upgrade from 2.02.06-4etch1 to 2.02.39-6
- mdadm: upgrade from 2.5.6-9 to 2.6.7.1-1, see README.upgrading-2.5.3
- mercurial: upgrade from 0.9.1-1+etch1 to 1.0.1-5.1
- mount: upgrade from 2.12r-19etch1 to 2.13.1.1-1, bringing read-only binds, make-shared, make-slave, make-private, make-unbindable
- mysql: upgrade from 5.0.32-7etch8 to 5.0.51a-23
- nagios: upgrade from 2.6-2+etch1 to 3.0.6-3, see Upgrading From Nagios 2.x and What s New in Nagios 3 for details
- openldap: upgrade from 2.3.30-5+etch2 to 2.4.11-1
- openssh: upgrade from 1:4.3p2-9etch3 to 1:5.1p1-5
- postgresql: upgrade from 7.5.22 / 8.1.15-0etch1 to 8.3.5-1
- perl: upgrade from 5.8.8-7etch6 to 5.10.0-19
- php: upgrade from 5.2.0-8+etch13 to 5.2.6.dfsg.1-1+lenny2
- postfix: upgrade from 2.3.8-2+etch1 to 2.5.5-1.1
- puppet: upgrade from 0.20.1-1 to 0.24.5-3
- python: upgrade from 2.4.4-2 to 2.5.2-3
- ruby: upgrade from 1.8.5-4etch4 to 1.8.7.72-3
- samba: upgrade from 3.0.24-6etch10 to 2:3.2.5-4
- subversion: upgrade from 1.4.2dfsg1-2 to 1.5.1dfsg1-2
- tcl/tk: upgrade from 8.4.12-1etch2 to 8.5.3-4
- utilx-linux: upgrade from 2.12r-19etch1 to 2.13.1.1-1, brings new utilities like:
- chrt: manipulate real-time attributes of a process
- ionice: get/set program io scheduling class and priority
- rename.ul: rename the specified files by replacing the first occurrence of from in their name by to
- taskset: retrieve or set a process s CPU affinity
- zsh: upgrade from 4.3.2-25 to 4.3.6-6
New packages
Lenny ships over
7000 new packages. Lists of new/removed/replaced packages
are available online. I ll name
238 sysadmin related packages that might be worth a look. (Note: I don t list addon stuff like optional server-modules, docs-only and kernel-source related packages. I plan to present some of the following packages in more detail in separate blog entries.)
- ack-grep: A grep-like program specifically for large source trees
- acpitail: Show ACPI information in a tail-like style
- adns-tools: Asynchronous-capable DNS client library and utilities
- aggregate: ipv4 cidr prefix aggregator
- aosd-cat: an on screen display tool which uses libaosd
- apt-cacher-ng: Caching proxy for distribution of software packages
- apt-cross: retrieve, build and install libraries for cross-compiling
- aptfs: FUSE filesystem for APT source repositories
- apt-p2p: apt helper for peer-to-peer downloads of Debian packages
- apt-transport-https: APT https transport, use deb https://foo distro main lines in the sources.list
- arp-scan: arp scanning and fingerprinting tool
- array-info: command line tool reporting RAID status for several RAID types
- balance: Load balancing solution and generic tcp proxy
- bash-completion: programmable completion for the bash shell
- blktrace: utilities for block layer IO tracing
- daemonlogger: simple network packet logger and soft tap daemon
- daemontools: a collection of tools for managing UNIX services
- dbndns: Debian fork of djbdns, a collection of Domain Name System tools
- dcfldd: enhanced version of dd for forensics and security
- dctrl2xml: Debian control data to XML converter
- debomatic: automatic build machine for Debian source packages
- desproxy: tunnel TCP traffic through a HTTP proxy
- detox: utility to replace problematic characters in filenames
- di-netboot-assistant: Debian-Installer netboot assistant
- dish: the diligence/distributed shell for parallel sysadmin
- djbdns: a collection of Domain Name System tools
- dns2tcp: TCP over DNS tunnel client and server
- dnscache-run: djbdns dnscache service
- dnshistory: Translating and storing of IP addresses from log files
- dnsproxy: proxy for DNS queries
- dsyslog: advanced modular syslog daemon
- etckeeper: store /etc in git, mercurial, or bzr
- ext3grep: Tool to help recover deleted files on ext3 filesystems
- fair: high availability load balancer for TCP connections
- fatresize: FAT16/FAT32 filesystem resizer
- flog: dump STDIN to file and reopen on SIGHUP
- freeradius-utils: FreeRadius client utilities
- ganeti: Cluster-based virtualization management software
- gfs2-tools: Red Hat cluster suite - global file system 2 tools
- gitosis: git repository hosting application
- gptsync: GPT and MBR partition tables synchronisation tool
- grokevt: scripts for reading Microsoft Windows event log files
- grub2: GRand Unified Bootloader, version 2
- gt5: shell program to display visual disk usage with navigation
- haproxy: fast and reliable load balancing reverse proxy
- havp: HTTP Anti Virus Proxy
- heirloom-mailx: feature-rich BSD mail(1)
- hfsprogs: mkfs and fsck for HFS and HFS+ file systems
- hinfo: Check address ownership and DNSBL listings for spam reporting
- hlbr: IPS that runs over layer 2 (no TCP/IP stack required)
- hobbit: monitoring system for systems, networks and applications - server
- hotwire: Extensible graphical command execution shell
- hunchentoot: the Common Lisp web server formerly known as TBNL
- ifupdown-extra: Network scripts for ifupdown
- ike: Shrew Soft VPN client - Daemon and libraries
- incron: cron-like daemon which handles filesystem events
- inoticoming: trigger actions when files hit an incoming directory
- iodine: tool for tunneling IPv4 data through a DNS server
- iotop: simple top-like I/O monitor
- ipplan: web-based IP address manager and tracker
- ips: Intelligent process status
- iscsitarget: iSCSI Enterprise Target userland tools
- isns: Internet Storage Naming Service
- itop: simple top-like interrupt load monitor
- iwatch: realtime filesystem monitoring program using inotify
- jetring: gpg keyring mantainance using changesets
- john: active password cracking tool
- kanif: cluster management and administration swiss army knife
- keepassx: Cross Platform Password Manager
- keysafe: A safe to put your passwords in
- killer: Background job killer
- kpartx: create device mappings for partitions
- kvm: Full virtualization on x86 hardware
- latencytop: A tool for developers to visualize system latencies
- lbcd: Return system load via UDP for remote load balancers
- ldb-tools: LDAP-like embedded database - tools
- ldnsutils: ldns library for DNS programming
- lfhex: large file hex editor
- live-helper: Debian Live build scripts
- live-magic: GUI frontend to create Debian LiveCDs, netboot images, etc.
- logapp: supervise execution of applications producing heavy output
- lsat: Security auditor tool
- lustre-utils: Userspace utilities for the Lustre filesystem
- lwat: LDAP Web-based Administration Tool
- maatkit: Command-line utilities for MySQL
- mantis: web-based bug tracking system
- memdump: memory dumper
- memlockd: daemon to lock files into RAM
- metainit: Generates init scripts
- mirmon: monitor the state of mirrors
- mkelfimage: utility to create ELF boot images from Linux kernel images
- mongrel: A small fast HTTP library and server for Ruby
- monkey: fast, efficient, small and easy to configure web server
- monkeytail: tail variant designed for web developers monitoring logfiles
- mpy-svn-stats: Simple and easy to use svn statistics generator
- mr: a Multiple Repository management tool
- msr-tools: Utilities for modifying MSRs from userspace
- mtd-utils: Memory Technology Device Utilities
- munge: authentication service to create and validate credentials
- mxallowd: Anti-Spam-Daemon using nolisting/iptables
- mylvmbackup: quickly creating backups of MySQL server s data files
- myrescue: rescue data from damaged harddisks
- mysql-proxy: high availability, load balancing and query modification for mysql
- mysqltuner: high-performance MySQL tuning script
- nagvis: Visualization addon for Nagios
- ncdu: ncurses disk usage viewer
- netrw: netcat like tool with nice features to transport files over network
- netsend: a speedy filetransfer and network diagnostic program
- network-config: Simple network configuration tool
- nfdump: netflow capture daemon
- ngetty: getty replacement - one single daemon for all consoles
- nilfs2-tools: Continuous Snapshotting Log-structured Filesystem
- ninja: Privilege escalation detection system for GNU\Linux
- noip2: client for dynamic DNS service
- nsd3: authoritative domain name server (3.x series)
- ntfs-3g: read-write NTFS driver for FUSE
- nulog: Graphical firewall log analysis interface
- nuttcp: network performance measurement tool
- ocsinventory-server: Hardware and software inventory tool (Communication Server)
- odt2txt: simple converter from OpenDocument Text to plain text
- olsrd: optimized link-state routing daemon (unik-olsrd)
- onesixtyone: fast and simple SNMP scanner
- openais: Standards-based cluster framework (daemon and modules)
- opencryptoki: PKCS#11 implementation for Linux (daemon)
- openvas-client: Remote network security auditor, the client
- ophcrack: Microsoft Windows password cracker using rainbow tables
- op: sudo like controlled privilege escalation
- otpw-bin: OTPW programs for generating OTPW lists
- packeth: Ethernet packet generator
- paperkey: extract just the secret information out ouf OpenPGP secret key
- paris-traceroute: New version of well known tool traceroute
- password-gorilla: a cross-platform password manager
- pathfinderd: Daemon for X.509 Path Discovery and Validation
- pathfinder-utils: Utilities to use with the Pathfinder Daemon
- pcaputils: specialized libpcap utilities
- pcp: System level performance monitoring and performance management
- perlconsole: small program that lets you evaluate Perl code interactively
- pgloader: loads flat data files into PostgreSQL
- pgpool2: connection pool server and replication proxy for PostgreSQL
- pgsnap: PostgreSQL report tool
- pmailq: postfix mail queue manager
- pnputils: Plug and Play BIOS utilities
- policykit: framework for managing administrative policies and privileges
- postfwd: Postfix policyd to combine complex restrictions in a ruleset
- postpone: schedules commands to be executed later
- powertop: Linux tool to find out what is using power on a laptop
- prayer: standalone IMAP-based webmail server
- prelude-correlator: Hybrid Intrusion Detection System [ Correlator ]
- privbind: Allow unprivileged apps to bind to a privileged port
- pssh: Parallel versions of SSH-based tools
- ptop: PostgreSQL performance monitoring tool akin to top
- pyftpd: ftp daemon with advanced features
- rancid-core: rancid Really Awesome New Cisco confIg Differ
- rancid-util: Utilities for rancid
- rdnssd: IPv6 recursive DNS server discovery daemon
- rdup: utility to create a file list suitable for making backups
- reglookup: utility to read and query Windows NT/2000/XP registry
- rgmanager: Red Hat cluster suite - clustered resource group manager
- rinse: RPM installation environment
- rofs: Read-Only Filesystem for FUSE
- rsyslog: enhanced multi-threaded syslogd
- safe-rm: wrapper around the rm command to prevent accidental deletions
- samba-tools: tools provided by the Samba suite
- samdump2: Dump Windows 2k/NT/XP password hashes
- scalpel: A Frugal, High Performance File Carver
- scamper: advanced traceroute and network measurement utility
- scanmem: Locate and modify a variable in a running process
- schedtool: Queries/alters process scheduling policy and CPU affinity
- screenie: a small and lightweight GNU screen(1) wrapper
- scrounge-ntfs: Data recovery program for NTFS filesystems
- ser: Sip Express Router, very fast and configurable SIP proxy
- serverstats: a simple tool for creating graphs using rrdtool
- shutdown-at-night: System to shut down clients at night, and wake them in the morning
- sipcrack: SIP login dumper/cracker
- sks: Synchronizing OpenPGP Key Server
- slack: configuration management program for lazy admin
- sma: Sendmail log analyser
- smbind: PHP-based tool for managing DNS zones for BIND
- smbnetfs: User-space filesystem for SMB/NMB (Windows) network servers and shares
- softflowd: Flow-based network traffic analyser
- speedometer: measure and display the rate of data across a network connection
- spf-milter-python: RFC 4408 compliant Python SPF Milter for Sendmail and Postfix
- spf-tools-perl: SPF tools (spfquery, spfd) based on the Mail::SPF Perl module
- spf-tools-python: sender policy framework (SPF) tools for Python
- sqlgrey: Postfix Greylisting Policy Server
- ssdeep: Recursive piecewise hashing tool
- sshfp: DNS SSHFP records generator
- sshm: A command-line tool to manage your ssh servers
- sshproxy: ssh gateway to apply ACLs on ssh connections
- sslscan: Fast SSL scanner
- strace64: A system call tracer for 64bit binaries
- sucrack: multithreaded su bruteforcer
- supercat: program that colorizes text for terminals and HTML
- superiotool: Super I/O detection tool
- system-config-lvm: A utility for graphically configuring Logical Volumes
- system-config-printer: graphical interface to configure the printing system
- tack: terminfo action checker
- taktuk: efficient, large scale, parallel remote execution of commands
- tcpwatch-httpproxy: TCP monitoring and logging tool with support for HTTP 1.1
- terminator: Multiple GNOME terminals in one window
- timelimit: Simple utility to limit a process s absolute execution time
- tipcutils: TIPC utilities
- tor: anonymizing overlay network for TCP
- tpm-tools: Management tools for the TPM hardware (tools)
- tracker-utils: metadata database, indexer and search tool - commandline tools
- tumgreyspf: external policy checker for the postfix mail server
- ucspi-tcp: command-line tools for building TCP client-server applications
- unbound: validating, recursive, caching DNS resolver
- unhide: Forensic tool to find hidden processes and ports
- uniutils: Tools for finding out what is in a Unicode file
- unsort: reorders lines in a file in semirandom ways
- uphpmvault: upload recovery images to HP MediaVault2 via Ethernet
- usermode: Graphical tools for certain user account management tasks
- utf8-migration-tool: Debian UTF-8 migration wizard
- uuid-runtime: universally unique id library
- vblade-persist: create/manage supervised AoE exports
- vde2: Virtual Distributed Ethernet
- vdmfec: recover lost blocks using Forward Error Correction
- virtinst: Programs to create and clone virtual machines
- virt-manager: desktop application for managing virtual machines
- virtualbox-ose: x86 virtualization solution - binaries
- virt-viewer: Displaying the graphical console of a virtual machine
- watchupstream: Look for newer upstream releases
- whirlpool: Implementation of the whirlpool hash algorithm
- win32-loader: Debian-Installer loader for win32
- xavante: Lua HTTP 1.1 Web server
- xdelta3: A diff utility which works with binary files
- xen-shell: Console based Xen administration utility
- xenstore-utils: Xenstore utilities for Xen
- xenwatch: Virtualization utilities, mostly for Xen
- xfingerd: BSD-like finger daemon with qmail support
- xl2tpd: a layer 2 tunneling protocol implementation
- xrdp: Remote Desktop Protocol (RDP) server
- yersinia: Network vulnerabilities check software
- zerofree: zero free blocks from ext2/3 file-systems
- zipcmp: compare contents of zip archives
- zipmerge: merge zip archives
- ziproxy: compressing HTTP proxy server
Further Ressources
In this age of bits and bytes, there are many virtual organizations and networks which produce all sorts of stuff we use on a daily basis. My two favorite institutions are Debian (not a surprise) and Wikipedia, not just because they oh-so-useful to me and many others, which they are, but because the social organizations behind these two entities are so (at times maddeningly) complex and full of nuance, they provide for endless analytical fascination.
One of my friends, Joe Reagle, who has recently graduated from my home department, is presenting is work on Wikipedia and I thought some local New York geeks might be interested. Information below:
All welcome
4:30 - 6:00 PM, Tuesday February 17
206 Vanderbilt Hall, 40 Wash. Sq. So.
Wikipedia: Nazis and Norms
Joseph Reagle, NYU Department of Media, Culture, and Communication
Abstract: In 1990 Mike Godwin coined his Law of Nazi Analogies to capture the common devolution of Usenet discourse into insulting comparisons with Nazis or Hitler. Eleven years later, Jimmy Wales wrote that it was important that the Wikipedia community preserve and extend our culture of co-operation, with all of us standing as firmly as possible against the culture of conflict embodied in Usenet. I argue Wikipedia is a realization even if flawed of a long-held vision for a universal encyclopedia: a technology inspired vision seeking to wed increased access to information with greater human accord. And I claim Wikipedia s collaborative culture is a big factor for this success: the norms of Neutral Point of View ensures that the scattered pieces of what we think we know can be joined and good faith facilitates the actual practice of fitting them together.
In this age of bits and bytes, there are many virtual organizations and networks which produce all sorts of stuff we use on a daily basis. My two favorite institutions are Debian (not a surprise) and Wikipedia, not just because they oh-so-useful to me and many others, which they are, but because the social organizations behind these two entities are so (at times maddeningly) complex and full of nuance, they provide for endless analytical fascination.
One of my friends, Joe Reagle, who has recently graduated from my home department, is presenting is work on Wikipedia and I thought some local New York geeks might be interested. Information below:
All welcome
4:30 - 6:00 PM, Tuesday February 17
206 Vanderbilt Hall, 40 Wash. Sq. So.
Wikipedia: Nazis and Norms
Joseph Reagle, NYU Department of Media, Culture, and Communication
Abstract: In 1990 Mike Godwin coined his Law of Nazi Analogies to capture the common devolution of Usenet discourse into insulting comparisons with Nazis or Hitler. Eleven years later, Jimmy Wales wrote that it was important that the Wikipedia community preserve and extend our culture of co-operation, with all of us standing as firmly as possible against the culture of conflict embodied in Usenet. I argue Wikipedia is a realization even if flawed of a long-held vision for a universal encyclopedia: a technology inspired vision seeking to wed increased access to information with greater human accord. And I claim Wikipedia s collaborative culture is a big factor for this success: the norms of Neutral Point of View ensures that the scattered pieces of what we think we know can be joined and good faith facilitates the actual practice of fitting them together.

So in 2009 I've started using Social Media Accounts alot more like Facebook, Twitter,Wordpress ( self hosted ), and plan to use more as time goes on and I discover new services and new services are introduced.
<rant>
One of the issues I've noticed is most "tweet flows" want you to update your status across multiple services, like your IM status would be the same as your Twitter status and again the same as your Facebook status and so on. See the problem with this is not all "status" messages on Social Media sites are used for the same purpose , e.g. the Facebook status allows comments and the Tweet allows replies and RT's ( Re-Tweets ) and IM status doesn't allow any feedback at all, at least not publicly. An posting to both identi.ca and twitter causes replies and such to be checked on both.
Where is our "Digital Convergence" / Digital Universe for Social Media ?
How do any of you keep all the different forms of social media updated ( an relevant ) to the media its self, e.g. not posting the wrong status to the wrong service and not using 100000(.5) web interfaces constantly.
</rant>

Well, no, neither FOSDEM nor Debian are dead. But FOSDEM
'09
is gone, over, and dealt with.
It was a breeze, for the most part. I'm
still not very happy
with the booth; that needs to be done better next year. Help and
suggestions in that area are more than welcome.
One thing that more than deserves a follow-up is
Lucas'
post about FOSDEM:
On a more sad note, the worst talk of the week-end was
without any possible doubt Frans Pop's release team bashing. Nobody is
claiming that the release management of the lenny release cycle was
perfect: there's always room for improvement. But given the context and
the constraints, I think that they did a very good job. Frans' talk
boiled down to: "The release team doesn't know what they are doing, I
would have done much better because I'm so qualified."
As the person responsible for allowing Frans on the schedule in the
first place, while being fully aware of the relationship between Frans
and the release team (not at first, but certainly in time to kick him
off if I'd have wanted to), I'd like to comment on that.
First of all, I do not agree that the last statement in the above is
true. Frans showed a few stories of things that went on in the release
team, and gave his opinion on what he believed went wrong. He also
explicitly said, at the beginning of the talk, that
none of the
talk was meant personally; that he wanted to offer some constructive
criticism instead. I believe he did not fail in doing that, but of
course YMMV.
Secondly, and more importantly, I do not believe it is healthy for
Debian (or any project, for that matter) to reject criticism. Indeed,
nobody is claiming perfection. I do not believe any venue where talks
can be had should be a
good news show
. People in a position of
power not just the release team, but also, say, the DPL,
ftp-masters, buildd maintainers and whatnot have received our
trust to do what they need to do to the best of their abilities. If
someone in the project would believe that I can significantly improve my
work as buildd maintainer, it is not just their right, but indeed their
duty to inform me of that fact. This is exactly what Frans was
attempting to do, and there is nothing wrong with that.
It is also not as if he's not tried reasoning with the release team
first. He has made suggestions, which have gotten ignored. I feel that
talking to more people about what he feels is right, to see whether
they agree with him, is the next logical step to take, and that this it
is exactly what Frans was attempting to do at FOSDEM.
Having said that, I agree that finishing the talk late was a very bad
thing. If anything, a talk on a subject like this should have
more, not less, time for discussion. So while I do not agree
that his
intentions were wrong, I do agree that the execution
could have been better.
There, that was criticism too. Now, what's next?
Oh yes, suggestions. If people have suggestions on how to improve the
Debian presence at FOSDEM next year (especially, as above, ideas for
creative use of the booth would be welcome), then please send me an
email, making sure the subject contains the word 'FOSDEM', so my
mailfilters know what to do with it. You'll preferably do so now, while
FOSDEM is still somewhat fresh in your memory; I'll take notes and use
those for doing better next year.
Thanks,
Rumour has it that some types of spammer target the secondary MX servers. The concept is that some people have less control over the secondary MX server and less ability to implement anti-spam measures. Therefore if they accept all mail from the secoondary then a spammer will have more success if they attack the secondary server.
True secondary servers are becoming increasingly uncommon, the lower priority servers listed in MX records tend to have the same configuration as the primary, so the benefit for the spammer in attacking the secondary server is probably minimal. But it would be good to know whether they do this.
I decided to analyse the logs from a mail server that I run to see if I can find evidence of this. I chose a server that I run for a lient which has thousands of accounts and tens of thousands of messages delivered per day, my own server doesn t get enugh traffic to give good results.
I analysed the logs for a week for the primary and secondary MX servers to see if the ratio of spam to ham differed. Now this does have some inherent inaccuracy, some spam will slip past the filters and occasionally a legitimate email will be rejected. But I believe that the accuracy required in a spam filter to avoid making the users scream is vastly greater than that which is required to give a noteworthy result.
I produced totals of the number of messages delivered, the number rejected by SpamAssassin (which has a number of proprietary additions), the number of message delivery attempts that were prevented due to rate limiting (most of which will be due to spammers), and the number of attempts to deliver to unknown accounts (some of which will be due to spammers having bad addresses in their lists).
For each of these rejection criteria I produced a ratio of the number of rejections to the number of delivered messages for each of the servers.
The rate limit count didn t seem useful. While the primary server had a ratio of 0.75 messages rejected due to rate limiting to every message accepted the secondary had a ratio of 0.08. It seems that the secondary just didn t get enough traffic to trigger the limits very often. This is an indication that the more aggressive bots might not be targetting the secondary.
The ratio of messages rejected by SpamAssassin to legitimate mail was 0.76:1 on the primary server and on the secondary server it was 1.24:1. The ratio of messages addressed to unknown users to successful deliveries was 3.05:1 on the primary and 7.00:1 on the secondary! This seems like strong evidence to show that some spammers are deliberately targetting the secondary server.
In this case both the primary and secondary servers are in server rooms hosted by the same major ISP in the same region. The traceroute between the two mail servers is only 7 hops, and there is only one hop between the two server rooms. So it seems unlikely that there would be some connectivity issue that prevents spammers from connecting to the primary.
One other factor that may be relevant is that the secondary server has been in service for some years while the primary is only a few months old. Spammers who store the server IP address with the email address (which happens - change the DNS records to send your mail to a different server and you will see some spam go to the old server) will be sending mail to what is now the secondary server. The difference in the rejected mail volume on the secondary server and the amount that would be rejected if it had the same ratio as the primary amounts to 7% of all mail rejected by SpamAssassin and 14% of all mail addressed to unknown users. I think it s unlikely that any significant fraction of that would be due to spammers caching the server IP address for months after the DNS records were changed. So therefore it seems most likely that something between 7% and 14% of spam is specifically targetted at the secondary server.
While the ratio of spam to ham seems significantly worse on the secondary it is still a relatively small portion of the overall spam sent to the service. I had been considering setting up secondary mail servers with extra-strict anti-spam measures but the small portion of the overall spam that is targetted in such a way indicates to me that it is not going to be worth the effort.
Another thing that has occurred to me (which I have not yet had time to investigate) is the possibility that some spammers will send the same messages to all MX servers. If that happens then the ratio of spam to ham would increase every time the number of MX servers is increased. In that case it would make sense to minimise the number of MX servers to reduce the amount of CPU power devoted to runing SpamAssassin.
Note that I have intentionally not given any numbers for the amount of mail received by the service as it is a commercial secret.
Update: One thing I realised after publishing this post is that the secondary MX server is also the main server for mail sent between local users. While the number of users who send mail to other users on the service is probably a small portion of the overall traffic (it s not a really big ISP) it will make a difference to the ratios. Therefore the ratio of spam to ham would be even worse on the secondary MX (assuming for the sake of discussion that local users aren t spamming each other).

37 years since I first heard Peter Gabriel's voice (Genesis' Nursey Crime, one of the first LP I ever bought) and about 34 since I first saw him on stage in what turned out to be Genesis' last show in France (St-Etienne, my home city, may 1975).
Since then, I tried to keep up with PG's appearances here and there and he has always been my favourite artist.
So, if any of this blog's readers happen to be in Latin America and enjoy PG's music, just try to go there:
- March 20 Lima, Peru / Esplanada Del Monumental
- March 22 Buenos Aires, Argentina / Estadio Velez Sarsfield
- March 24 Santiago, Chile / Arena Santiago
- March 27 Mexico City / Distrito Federal
- March 29 Guadalajara, Mexico / Jalisco
- March 31 Monterrey, Mexico / Nuevo Leon

After the Google employee went back to New Jersey with Jarjar, I
somehow ended up paying $9 for a good slice of pizza and what
is potentially the second-most-disgusting piece of vegan pizza
I have ever encountered.

Life sometimes has extreme ways of waking people up and making them realize what matters for them. I'm going through such a phase right now in my romantic life. I won't discuss what happened here, but suffice it to say that I haven't felt
so depressed in a long, long, long, long time.
The good news is that life has proven to me once again how having good friends who truly care for me makes a whole world of difference. The big slap in the face that life gave me over these last few days was a harsh lesson, but I think that it was worth it. Of course, it helps that people like Gilles, Jaana, Henni, Pia, Linda, Arno and Sailesh beleived in me enough to support me through this rough spot in my life. Although their advices were vastly different, they all pointed in a very positive direction and gave me the strenght to carry on.
I also must thank my beloved Anastassija; what she did was cruel beyond beleif and yet, if her few SMS from the last 24 hours are any indication, there's still hope after the storm. I'll be seeing her tonight again, after a few days of separation and I prepared her a truly romantic evening. It ain't much, but I hope that it truly succeeds in bringing the point accross that Love is stronger than everything and that even the unforgivable can be forgiven, over time, if everyone involved has enough faith in each other's future as a couple.
Tonight, I truly could use the prayers of a million voices to support me and Anastassija in this difficult time. Life slapped me hard and I got the message... I think... and whatever happens after tonight, I
need to know that I gave it my best shot and that, whatever her and I decide, Life can only take a turn for the better from now on.
Some stuff I want to reminder for next year s FOSDEM:
- Carry a power bar with at least 3 outlets. Power plugs are a limited resource. With a power bar at FOSDEM you always will be able to get power for your laptop/gadgets and make new friends. All at the same time!
-
Make a backup schedule, in case the talk you wanted to attend run out of space.
-
H agen-Dazs next to LUIZA/LOUISE metro station is good for breakfast and dessert. And there is wifi!

I have been trying to make a script that should put my laptop into hibernate, run automatically from cron, so it forces me to get to sleep.
I had managed to make it work from a console (tty1), but it seemed as if it refused to work from cron.
During the tests my local mailbox was getting the output of the command, and I stood and watched at this error message for more than an hour trying to figure out what was wrong. I couldn't understand what was wrong:
This option is not available. Please see --help for all possible usages.This was from zenity and I was starting to suspect that it was failing to expad properly the text variable since it worked with a fixed text.
This was failing:
(...) /usr/bin/zenity --progress --auto-close --text "'$NOTIFICATION$XMSG'"And this was working:
(...) /usr/bin/zenity --progress --auto-close --text "OH!MY!GOD!"I couldn't figure it out. Until I tried this:
(...) /usr/bin/zenity --progress --auto-close --text "OH!MY!GOD! "
And it failed.
God damn! Setting LANG in the script fixed the issue right away!
So, if you ever want zenity to show up from cron dont forget to:
zenity is a pice of shit when it doesn't work. It could have printed the "option which wasn't available".
I use
Google Reader to manage most of the sites
that I regularly read. Today it occurred to me that it would be very useful to
have some functionality whereby feeds in a common folder could be read in one
aggregated display, a bit like how
planetplanet
works. I then learned that Google Reader does exactly that already: It's
fairly obvious to use in the normal reader, a little bit more subtle in the
mobile version (you must click the folder once to load it up in a new page,
then click it again to see the aggregated contents).
That prompted me to try and tidy up my subscriptions and sort them in a way
that took advantage of this feature. Deciding that the Google Reader interface
was too primitive to properly organise all of my subscriptions (there are
about 100 or so of them), I exported my subscriptions as OPML and imported
them into
liferea.
I then dutifully pruned the list and sorted the remainder into a heirarchy of
folders. In most cases I categorised things according to their topic: e.g.,
"computing", "friends", etc.; with two important exceptions: feeds that I
track for debugging purposes but don't actually read (such as my own weblog) I
put in a folder "don't read". Feeds that I have decided I need to read every
post to (and there are very few of those) I moved into a top-level folder
called "essential".
I note that liferea 1.4.18 at least does not support the planet-style
aggregation feature for folders that Google Reader does.
On re-importing to Google Reader, I discovered another facet of it's behaviour
that I'd neglected to pay attention to: it does not support heirarchical
folders. (How could I use this software for so long and not really understand
how it works?) In fact, folders are more like tags, with feeds
existing in multiple folders. To make matters even more confusing,
there is an entirely separate notion of tags, which applies to items inside
subscriptions.
Regarding the concept of an "essential" list. If you cut down your firehose
consumption to just feeds which met the "essential" criteria, would you find
yourself short on information, or just short on noise?
Sometimes I read a book that for one reason or another (perhaps just one:
excellent writing?) I cannot put down. I utterly devour the book and finish it
much more quickly than average. Wouldn't it be nice if other information could
be consumed so vociforously?
When trying to read things such as academic papers or bid proposals, someone
unused to them may find them very hard going. Someone with more practise might
managed to "read" such a document much more quickly. Perhaps there is a point
to all the firehose noise: maybe we need long immersion in the culture or
context to train ourselves up so we can optimally consume the good stuff?
DDE, Debian Data Export
After testing the idea and the prototype with my presentation at
Fosdem, I'm proud to announce
DDE, Debian Data Export.
The problem
In Debian, we publish all sort of information, using all sorts
of data formats (often ad hoc and obscure), in obscure places. Try
to think of an application, for example, that wants to access all
this information together:
- Maintainer <-> Source package mapping
- Popcon rankings
- Changelogs
- .desktop files of packages not installed
- What is in the new queue
- Package screenshots
- Some
statistics
- Localisation information
- uscan status
- Buildd logs
- sloccount run results
- Debian Weather
- Debian Pure Blend specific information
A nightmare, uh?
The solution
DDE is a way to make it simple to publish and download data. The
aim is to be able to access all sorts of Debian information without
worrying about data formats, protocols and access control, and to
make it easy to discover what data is available.
DDE exports data as a big virtual tree. You can pick a node in
the tree by its URL and download all the data that it contains, in
a format of your choice: currently it supports JSON/JSONP, YAML,
CSV and Python pickled objects.
This means that you can now get Debian data using a trivial HTTP
client tool or library, and read it using commonly available
decoders: both should be available in almost any programming
language nowadays. Since JSON and JSONP are supported, this even
includes JavaScript in Ajaxy web pages.
DDE is not a competitor to
UDD: UDD is about creating a
central location where all the data can be accessed, while DDE is
about giving people a simple way to access data or subsets of
data.
In a way, DDE and UDD complete each other: the more data enters
UDD, the more data is available for DDE. In turn, DDE gives a
simple interface to the most popular and useful UDD queries.
The dream
Here are some hints at what can be done with this:
- Autocompletion in HTML fields
- Export data to feed external sites like or
- Have a way for package managers to easily access all sorts of
data
- Have a way to implement fancy tools that can query massive data
sets without needing to download them locally
A call for action
You can add data to the DDE tree by just putting a data file in
yaml, json or pickle format under
~/.dde (I've written
a specific
guide to this on the
Debian wiki).
If you wish to create new and fancy Debian statistics or compute
other sorts of data, or if you already maintain tools that generate
Debian data, including but not limited to, for example:
- Popcon rankings
- .desktop files of packages not installed
- Content of the new queue
- Screenshots
- All sorts of statistics
- Debian Weather
Then please have a look at
http://wiki.debian.org/DDE/StaticData
and try to publish your data in
~/.dde on
merkel.debian.org.
For more complicated cases (like accessing a remote database),
it is possible to extend DDE via
python plugins. You
can get in touch with me if you need to go that way.

Since several month,
awesome users have reported a bug with
OpenOffice.org. When using OOo and clicking on a menu, or using the mouse wheel to read a document, the currently selected tag (desktop) will change automagically to another one.
I've digged into awesome and found that awesome received a _NET_CURRENT_DESKTOP request. As defined by
EWMH, this kind of request are sent by a pager to change the active desktop.
That was weird. Nobody is using a pager here. So, I just kicked my gdb out, attached it to OOo, breaking on
XSendEvent call. And I got it:
Breakpoint 1, XSendEvent (dpy=0x1a00080, w=483, propagate=0, event_mask=1572864, event=0x7fff1fd70d70)
at ../../src/SendEvent.c:46
(gdb) bt
#0 XSendEvent (dpy=0x1a00080, w=483, propagate=0, event_mask=1572864, event=0x7fff1fd70d70)
at ../../src/SendEvent.c:46
#1 0x00007f8c0ab4193f in vcl_sal::WMAdaptor::switchToWorkArea ()
from /usr/lib/openoffice/basis3.0/program/libvclplug_genlx.so
#2 0x00007f8c0aafdbd8 in X11SalFrame::Show ()
from /usr/lib/openoffice/basis3.0/program/libvclplug_genlx.so
#3 0x00007f8c1378623c in Window::Show ()
from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#4 0x00007f8c13785f40 in Window::Show ()
from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#5 0x00007f8c1372cb54 in FloatingWindow::StartPopupMode ()
from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#6 0x00007f8c1373c877 in ?? () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#7 0x00007f8c1373ccf2 in ?? () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#8 0x00007f8c1373ce84 in ?? () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#9 0x00007f8c13795e7f in ?? () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#10 0x00007f8c13797e74 in ?? () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#11 0x00007f8c13796748 in ?? () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#12 0x00007f8c0aafe6f8 in X11SalFrame::HandleMouseEvent ()
from /usr/lib/openoffice/basis3.0/program/libvclplug_genlx.so
#13 0x00007f8c0ab040c2 in X11SalFrame::Dispatch ()
from /usr/lib/openoffice/basis3.0/program/libvclplug_genlx.so
#14 0x00007f8c0ab31625 in SalX11Display::Yield ()
from /usr/lib/openoffice/basis3.0/program/libvclplug_genlx.so
#15 0x00007f8c0ab356f3 in ?? () from /usr/lib/openoffice/basis3.0/program/libvclplug_genlx.so
#16 0x00007f8c0ab2df1f in SalXLib::Yield () from /usr/lib/openoffice/basis3.0/program/libvclplug_genlx.so
#17 0x00007f8c135b050e in Application::Yield ()
from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#18 0x00007f8c135b0587 in Application::Execute ()
from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#19 0x00007f8c17517e80 in ?? () from /usr/lib/openoffice/program/../basis-link/program/libsofficeapp.so
#20 0x00007f8c135b4b24 in ?? () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#21 0x00007f8c135b4bc5 in SVMain () from /usr/lib/openoffice/program/../basis-link/program/libvcllx.so
#22 0x00007f8c1754ca6c in soffice_main ()
from /usr/lib/openoffice/program/../basis-link/program/libsofficeapp.so
#23 0x000000000040105b in main ()
I started digging more into the code, and this is what I finally found in
salframe.cxx:
// #i45160# switch to desktop where a dialog with parent will appear
if( mpParent && mpParent->m_nWorkArea != m_nWorkArea )
GetDisplay()->getWMAdaptor()->switchToWorkArea( mpParent->m_nWorkArea );
Beautiful! It even has a comment with a IssueZilla bug number. Let's go and see where it comes from.
After 10 minutes of research to find that fucking IZ, I finally found the link to the
issue #45160. The bug is IMHO not related to OOo but to a window manager doing poor job.
I've found that an awesome user already reported an bug err, wait, I mean an issue as
issue #96684 (remember there's no bug in OOo, only issues) and I commented about it.
UPDATE: It seems OOo developers have agreed to fix that bug eventually.

I have spent a couple of days working into
dh-make-drupal. Yes, you guessed right: An idea based on the wonderful
dh-make-perl, but applied to the
Drupal Content Management System.
Drupal's greatest strengths, IMHO, are:
- Drupal offers a huge number of modules and themes
- Drupal has an amazingly sane configuration handling, where -contrary to what usually happens in PHP-land and, in general, among webapps- you set up the code only at a single place, with only the site-specific configuration (usually a single file) handling all of the differences
Yup, even though I am quite fond of its flexibility and power, I fell for Drupal in no small part because of its sysadmin-friendliness.
Now, I
hate having non-Debian-packaged files spilled over my
/usr/share partition. Drupal modules want to be installed in
/usr/share/drupal5/modules/module_name (or s/5/6/ for Drupal6, to which I have not yet migrated). For that reason, over the last year I have been growing my personal apt repository of Drupal stuff. Yes, it is still on, and I don't plan on taking it off. You can access it by adding
deb http://www.iiec.unam.mx/apt/ etch drupal to your
/etc/apt/sources. However, you can now also do the process locally. Do you fancy the wonderful
Biblio module? Or the
very nice Abarre theme? Great!
0 gwolf@mosca 4 /tmp$ ~/code/dh-make-drupal/dh-make-drupal --drupal 5 biblio
0 gwolf@mosca 5 /tmp$ cd drupal5-mod-biblio-1.16/
0 gwolf@mosca 6 /tmp/drupal5-mod-biblio-1.16$ debuild -us -uc >& /dev/null
0 gwolf@mosca 7 /tmp/drupal5-mod-biblio-1.16$ cd ..
0 gwolf@mosca 8 /tmp$ su
Password:
0 root@mosca[1]/tmp# dpkg -i drupal5-mod-biblio_1.16-1_all.deb
Selecting previously deselected package drupal5-mod-biblio.
(Reading > database ... 275110 files and directories currently installed.)
Unpacking drupal5-mod-biblio (from drupal5-mod-biblio_1.16-1_all.deb) ...
Setting up drupal5-mod-biblio (1.16-1) ...
Yay!
Yes, still many more things to come (i.e. including the debuild call and whatnot), but... Enjoy!
BTW, this piece of software owes a couple of beers to
Why the lucky stiff, author of
Hpricot. You are insane (but we are all well aware of that). You deserve to go to the webscraping heaven. Yes, besides the
programming-languages-teaching-cartoon heaven. You find out how to split the time between them.
[Update]: Of course,
ITP bug #514786 has been filed, and I will soon be uploading this into Debian.

From the local paper, yesterday, in a larger article about the bushfires
roaming hither and yon:
While arsonists are allegedly responsible for the fatal fires in Victoria,
it was "idiots" who laid the groundwork for a potential blaze in the Royal
National park near Helensburgh yesterday.
Rural Fire Service Illawarra manager Richard Cotterill said that despite a
total fire ban being in effect for the Illawarra and most of southern NSW,
weekend bushwalkers in the park lit a campfire and then left it to
smoulder.
Mr Cotterill said two trucks with about 10 firefighters tended to the
bushfire hazard just before 1pm, after being alerted to the smoking logs
by a resident.
"Obviously someone has not taken the fire ban rules into account and we
are just lucky that we haven't had any significant wind conditions being
as hot as it is," Mr Cotterill said.
"Something like that is obviously potentially very, very dangerous. You
get a wind blowing embers into the bush and it is downhill from there.
"It's a very stupid thing to do and obviously people don't realise just
how dangerous it can be."
I like Richard. Nice bloke, works hard for the local area, speaks
straight and doesn't mince words. "Idiots" indeed. Several thousand
homes are threatened if the Royal National Park burns. We've got easier
evacuation paths than a lot of the people down in Victoria had, but it
still could have been pretty bad.
Meanwhile, the weather up here has turned grey and cold, which will be a
mixed blessing for the firefighters working up at Peats Ridge and
Singleton, and down around Bega. It's a lot nicer to fight a fire at 24
degrees celsius rather than 40, but the misty rain we've had around home
would be enough to make backburning impossible, whilst not being enough to
really knock down the fire. The winds we got on Sunday night would have
made life far more exciting than is comfortable, too.
We recently bought a Canon Vixia HG20 camcorder. The HG20 records in AVCHD format (MPEG-4 h.264) at up to 1920 1080. To get from the camcorder to a DVD (or something we can upload to the web), I need some sort of video editing software. This lets me trim out the boring bits, encode the video for DVD, etc.
Background
In addition to DVD creation and web uploading, I want the ability to burn high-definition video discs. 1920 1080 is significantly higher resolution than you get from a DVD. There are two main ways to go: a blu-ray format disc, or an AVCHD disc. A blu-ray disc has to be burned onto BD-R media, which costs about $5 each, using a blu-ray burner, which costs about $200. AVCHD discs use the same h.264 encoding that the camcorder does, meaning they have better compression and can be burned onto regular DVD+R media, fitting about 30 minutes onto a DVD. Moreover, it is possible to move AVCHD files directly from a camcorder to an AVCHD disc without re-encoding, resulting in higher quality and lower playing time. The nicer blu-ray players, such as the PS3, can play AVCHD discs.
AVCHD seems pretty clearly the direction the industry is moving. Compared to the tape-based HDV, ACVHD has higher quality with lower bitrates, better resolution, and much greater convenience. Hard disk or SD-based AVCHD camcorders are pretty competitive in terms of price by now too, often cheaper than tape-based ones.
The downside of AVCHD is that it takes more CPU power to process. Though as video tasks are often done in batch, that wouldn t have to be a huge downside. The bigger problem is that, though all the major video editing software claims to support AVCHD, nobody really supports it well yet.
The Contenders
Back when I got my first camcorder in about 2001 the one that I m replacing now you pretty much had to have a Mac to do any sort of reasonable consumer or prosumer-level video editing. We bought our first iMac back then to work with that, and it did work well with the MiniDV camera.
Today, there s a lot more competition out there. The Mac software stack has not really maintained its lead some would even say that it s regressed and the extremely high cost of buying a Mac capable of working with AVCHD, plus Final Cut Express, makes that option completely out of the question for me. It would be roughly $2500.
Nobody really supports AVCHD well yet, even on the Mac. Although most programs advertise support of smart rendering a technique that lets the software merely copy unchanged footage when outputting to the same format as the input none of them have smart rendering that actually works with AVCHD source material. Though this fact is never documented, though discussed on forums.
Another annoyance, having used Final Cut Express in the past, is that with these programs you can t just go to the timeline and say delete everything between 1:35 and 3:52 ; you have to go in and split up clips, then select and delete them. They seem to be way too concerned about dealing with individual clips.
I briefly used Cinelerra on Linux to do some video editing. It s a very powerful program, but geared at people that are far more immersed in video editing than I. For my needs, it didn t have enough automation and crashed too much and that was with MiniDV footage. It apparently does support AVCHD, but I haven t tried it.
I ve tried three programs and considered trying a fourth. Here are my experiences:
Ulead/Corel VideoStudio Pro X2
Commonly referenced as the go to program for video editing on Windows, I started with downloading the Free Trial of it from Corel. Corel claims that the free trial is full-featured all over on their website, but I could tell almost instantly that it wasn t. I wound up buying the full version, which came to about $65 after various discounts.
I wanted to like this program. Its output options include AVCHD disc, Blu-ray disc, DVD+R, and the like. Its input options include MiniDV, AVCHD, ripping from DVD, ripping from Bluray, and just about every other format you can think of. And it heavily advertised proxy editing , designed to let you edit a scaled-down version of AVCHD video with a low-CPU machine, but refer back to the original high-quality footage for the output.
It didn t pan out that way.
The biggest problem was the constant crashing. I really do mean constant. It probably crashed on me two dozen times in an hour. If you are thinking that means that it crashes pretty much as soon as I can get it re-opened, you d be correct. Click the Play button and it hangs. Click a clip and it hangs. Do anything and it hangs.
It did seem to work better with the parts of the source that had been converted to a low-res version with Smart Proxy, though it didn t eliminate the hangs, just reduced them. And every time I d have to End Task, it would forget what it had already converted via Smart Proxy even if I had recently saved the project and have to start over from scratch.
I spent some time trying to figure out why it always thought my project was 720 480 even when it was 1920 1080, and why the project properties box didn t even have an option for 1920 1080. After some forum searching, it turns out that the project properties box is totally irrelevant to the program. Yay for good design, anyone?
VideoStudio Pro X2 does have good output options, allowing combination of multiple source files onto a single DVD or AVCHD disc as separate titles. Unfortunately, its DVD/AVCHD rendering process also yes hangs more often than not.
The documentation for VideoStudio Pro X2 is of the useless variety. It s the sort of thing that feels like it s saying The trim tool is for trimming your clips without telling you what trimming your clips means, or making it obvious how to remove material from the middle of a clip.
The proxy editing feature isn t what it should be either. Instead of being something that just automatically happens and Works in the background, you have to manage its queue in the foreground and it forgets what it was doing whenever the program hangs.
On the rare occasion when pressing Play did not cause a hang, the AVCHD footage played back at about 0.5fps far, far worse than PowerDirector manages on the same machine. Bits that had been rendered for proxy editing did appear to play at full framerate.
I have applied for a refund for this purchase from Corel under their 30-day return policy, and have already uninstalled it from my disk. What a waste.
CyberLink PowerDirector 7 Ultra
This was the second program I tried, and the one I eventually bought. Its feature set is not quite as nice as Corel s, especially when it comes to versatility of output options. On the other hand, it feels done. It only crashed two or three times on me apparently that s GOOD on Windows? Things just worked. It appears to have proxy editing support, but it is completely transparent and plays back with a decent framerate even without it. It can output to AVCHD, Bluray, and DVD, though smart rendering doesn t work with AVCHD source material.
Its weakness compared to the Corel package is that it doesn t have as many options for formatting these discs. You can have only one title on a disc, though you can have many chapters. You have some, but not much, control over compression parameters. The same goes for exporting files for upload to the web or saving on your disk.
The documentation is polished and useful for the basics, though not extensive.
Overall, this package works, supports all the basics I wanted from it, so I m using it for now.
Adobe Premiere Elements 7
I downloaded the trial of this one too. I opened it up, and up popped a dialog box asking what resolution my project would be, interlacing settings, etc. I thought YES now that s the kind of program I want. As I tried out the interface, I kept thinking the same. This was a program not just for newbies, but for people that wanted a bit more control.
Until it came to the question of output. Premiere Elements 7 was the only package I looked at that had no option to burn an AVCHD disc. DVD or Blu-ray only. That s a deal-breaker for me. There s no excuse for a program in this price range to not support the only affordable HD disc option out there. So I didn t investigate very much farther.
Another annoying thing is that Adobe seems to treat all of their software as a commercial. I m a user, not an audience, dammit. I do not want to buy some photoshop.net subscription when I buy a video editing program. I do not want to see ads for stuff when I m reading PDFs. LEAVE ME ALONE, ADOBE.
I just felt sleazy even giving them my email address, let alone installing the program on my system. I think I will feel like a better person once I reboot into Windows and wipe it off my system.
Pinnacle Studio 12
Another program that comes highly rated. But I never installed it because its minimum system requirements state that it needs an Intel Core 2 Quad 2.66GHz or higher for 1920 1080 AVCHD editing. And I have only a Core 2 Duo 2.66GHz half the computing horsepower that it wants. And since they offer no free trial, I didn t bother even trying it, especially since PowerDirector got by fine with my CPU.
Conclusions
This seems to be a field where we can say all video editing software sucks; some just suck a little less. I m using PowerDirector for now, but all of the above programs should have new versions coming out this year, and I will be keeping a close eye to see if any of them stop being so bad.