A German state is ditching Windows and Microsoft Office for Linux and LibreOffice on the 30,000 PCs it uses for local government functions

ForgottenFlux@lemmy.world to Technology@lemmy.world – 1146 points –
German state ditches Windows, Microsoft Office for Linux and LibreOffice
theregister.com

Schleswig-Holstein, Germany's most northern state, is starting its switch from Microsoft Office to LibreOffice, and is planning to move from Windows to Linux on the 30,000 PCs it uses for local government functions.

Concerns over data security are also front and center in the Minister-President's statement, especially data that may make its way to other countries. Back in 2021, when the transition plans were first being drawn up, the hardware requirements for Windows 11 were also mentioned as a reason to move away from Microsoft.

Saunders noted that "the reasons for switching to Linux and LibreOffice are different today. Back when LiMux started, it was mostly seen as a way to save money. Now the focus is far more on data protection, privacy and security. Consider that the European Data Protection Supervisor (EDPS) recently found that the European Commission's use of Microsoft 365 breaches data protection law for EU institutions and bodies."

162

The idea that a state government is unnecessarily at the mercy of any corporation is hard to comprehend. Especially, as in this case, a foreign corporation.

Open source shouldn't only be the standard for governments. It should be the minimum requirement.

IMO it should be further than that.

Open source software is, more often than not, used as digital infrastructure.

Governments around the world should absolutely be investing in open source software and actively contributing to it.

Good, we need to stop supporting products that try to strong arm you into a perpetual subscription.

If governments actually employed most of the development teams who build their services, and cut out most of the private middlemen consultants, managers, sales staff etc they could 1) build an engineering and cybersecurity capability without surveillance capitalism, focused on data security and privacy 2) save money 4) create productivity multipliers by unifying and sharing code for common functions across governments around the world 5) return our tax dollars to us through FOSS software that benefits us, instead of enriching big tech corporations who are already richer and more powerful than most nation states.

For example, covid tracking apps — instead of every dumb cunt government paying tens/hundreds of millions for consultants to reinvent the wheel or reskin someone else's code, they could have had in house devs coordinate common FOSS codebases and collectively saved 80+% of the cost. This is the same for most standard or common services using bespoke or proprietary software and systems.

Politicians are criminally corrupt idiots though, so they'll continue enriching big tech and surveillance capitalism at the expense of civilisation.

If governments actually employed most of the development teams who build their services, and cut out most of the private middlemen consultants, managers, sales staff etc

You mean this? They've been working on it for a while, this is about adopting stuff they've already done.

For example, covid tracking apps

Germany's is open source. Developed by Telekom and SAP, most of the money didn't go towards development (it's simple enough of an app, after all) but infrastructure and end-user support. You can't just tell random FLOSS people to deal with 80 million DAUs.

Yes. I'm aware there are a few who appear to be moving in the right direction, but I have strong doubts it'll become more than an outlier.

Let me tell you a story about proprietary software:

The German police force have a contract with a software firm that wrote their program to file and archive emergency calls. Basically just a form that goes to a database. Now, one day, an update got pushed. The problem with that update was that the hotkey for quitting out of the current form (q) now also fired when inside an editing field. The software firm did not acknowledge that as a problem and it took months of complaints to fix and it cost the taxpayer around 300,000€ in "maintenance fees".

As someone who works with government agencies as a software developer: they are absolutely awful.

You'll get no specification at all, those you do get will change at least three times and every stupid little decision needs at least 20 people from different states, cities or agencies to agree.

Yes, the bug is pretty bad, but I'm also very sure that what you're describing is not the whole story.

That bug should have been a hotfix. Or a rollback.

You never worked with bureaucracy, did you?

From a technical standpoint, you are absolutely correct, but reality and bureaucracy don't always match.

I've had instances, where we had glaring holes in our security, but were not allowed to fix them, because the datacenter (operated by a public agency) only does deployment in a fixed schedule.

I've had officials of some sort who wrote in the contract, that each and every change has to be on the staging environment for at least one week for testing and signoff.

It's absurd and stupid, but realistically, you often can't change it.

I did, that's why I'm talking about it.

In my experience, what you say is absolutely true, but glaring bugs like that are deployed as a hotfix.

That's one of the reasons why dataport (who are going to do the migration as the state's IT consultant / dev house) was founded in the first place: So that IT can work like IT does and not be beholden to bosses who think in bridge construction terms in one place, and tax collection terms in another. Now those bosses are mere clients of an inter-state agency that does nothing but IT, and IT can speak with authority when it comes to IT matters.

That won't change a thing, unfortunately.

My employer currently works with a bunch of agencies and I've been involved with some of them. I can deliver the best product ever with the best process and lightning fast deployment - if the client doesn't get its shit together, you won't deliver on time/in budget.

Anecdote I'm currently part of: an agency bought a new app, we're 98% done, we could go live on Tuesday. But there's one agency/department/guy (I seriously don't know) who has to confirm that the data of our staging system reached their system and was processed correctly. This agency however doesn't react. At all. And because it's something like 5mm outside of the jurisdiction of the agency that is our direct client, there's nothing we can do. So the system is just sitting there waiting.

I could go on and on. Dataport is a good idea, but if all their clients are overworked, understaffed or straight up incompetent, there's not much they could do.

But there’s one agency/department/guy (I seriously don’t know) who has to confirm that the data of our staging system reached their system and was processed correctly.

There's no "their system": The boxes under the desks of civil servants are managed by dataport, talking to backend infrastructure managed by dataport.

If there's some new administrative procedure agencies or ministries want their civil servants to do and it can't be implemented because it's under-specced or just incoherent then dataport gets to send that spec back saying "fix your shit": It's not like the agencies have a choice in who's running their infrastructure. The tax office can't do jackshit if the fire inspector doesn't like their new plans either. If things are implemented as specced and people complain and want a rework then dataport can say "well it's your budget, not ours". If they do that all the time at some point the court of accounts will take them aside for a polite conversation. Just this one thing, making IT external to whatever it is that the agency is doing, provides lots of accountability.

That is: The solution isn't so much to eradicate bullshit but to make sure that it stays in the silo where it got generated.

but if all their clients are overworked, understaffed or straight up incompetent

I'll just leave this here.

I think you don't understand. It's not about "physically reached the machine under the desk" it's "was processed correctly by a system". Operations can only tell if a technical error occurred, they have no idea what the data is supposed to look like. So dataport can do jack shit.

IT de facto already is outsourced, there's hardly any internal IT left, simply because the pay is shit. I'd get at least 1k less after taxes if I'd do the same work for the agency, not a contractor.

And if you think his joke is funny in this context, it's not. I work with these agencies everyday. They are structurally broken, but most people there are really passionate about what they're doing.

This isn't going to happen.

This headline comes up every year that it's time for the government to negotiate contracts with Microsoft. Once they get the best price they think they can, they will accept it and issue a news release that "we're staying in Windows after all".

It's lame, but it's what is going to happen.

I remember some city in Germany actually doing it some years back and then eventually giving up and switching back.

googles

It's a little unclear exactly what software was and wasn't switched, but sounds like it's Munich, and now they're back on LibreOffice again.

https://winbuzzer.com/2020/05/14/munich-ditches-microsoft-office-and-windows-in-favor-of-open-source-xcxwbn/

By 2006, the city had started a concerted effort to move away from Microsoft products and onto Linux. Fast forward to 2013 and 80% of all workstations in the government and related organizations were running LiMux. However, Microsoft’s Windows and Office services were still used.

As we reported back in 2017, the government made a controversial decision to abandon open source and return to Windows.

A newly elected government in Munich, Germany has said it will aim to use open source solutions in its offices. In doing so, the government is moving away from Windows and Microsoft Office despite committing to the products several years ago.

https://en.wikipedia.org/wiki/LiMux

LiMux was a project launched by the city of Munich in 2004 in order to replace the software on its desktop computers, migrating from Microsoft Windows to free software based on Linux.[citation needed] By 2012, the city had migrated 12,600 of its 15,500 desktops to LiMux. In November 2017 Munich City Council resolved to reverse the migration and return to Microsoft Windows-based software by 2020.[1][2][3] In May 2020, it was reported that the newly elected politicians in Munich, while not going back to the original plan of migrating to LiMux wholesale, will prefer Free Software for future endeavours.[4]

EDIT: I guess I should have just read the other comment responding to the parent, which mentioned Munich.

Amd just after Munich announced it will go back to Windows, Microsoft decided to move its German central to Munich. What a coincidence.

Munich did exactly that in 2017, so let's see how far Sleswig-Holstein is willing to go, hopefully they won't be falling for Microsofts sweet talk.

The reason Munich switched back to Windows, when users were just fine working with Limux, was a corrupt politician who ordered the return to windows, probably pocketing a hefty bribe in the process.

Source?

https://www.zdnet.de/88202452/stadt-muenchen-erwaegt-abkehr-von-linux/

The article from 2014 explains how this was mostly a political quarrel, with a former administration transitioning away from Microsoft (which as a US corporation has no business in any government administration of another country), and the conservatives pushing (under a "social democrat" mayor, admittedly) to go back to MS against technological advice.

Im Stadtrat hingegen steht den Berichten zufolge eine fraktionsübergreifende Mehrheit hinter LiMux. Bettina Messinger, Sprecherin der SPD-Fraktion für Personal, Verwaltung und IT, sagte Heise Online, dass man keine neue Haltung zu dem Thema habe. Sie bezeichnete die Umstellung auf Linux als „mutige Entscheidung“. Kritische Stimmen und Beschwerden seien im EDV-Bereich nichts Ungewöhnliches. Man müsse LiMux und das Umfeld nun stetig verbessern und nutzerfreundlicher gestalten. Unter anderem sei dafür mehr IT-Personal in der Verwaltung nötig.

Auch die CSU-Fraktion unterstützt LiMux weiter. Deren IT-Experte Otto Seidl nannte Schmidts Kritik „eine sachfremde Einzelmeinung eines Juristen“. Die Grünen warnen Heise zufolge vor einem „teuren Schildbürgerstreich“, sollte die Stadt zu Microsoft zurückkehren. Demnach wollen die Abgeordneten in einer Ausschusssitzung klären, woher die Beschwerden stammen.

In other words: the "manyfold complaints" were an "ad populum" argument without sources and were most likely made up.

This is the sexiest thing Germany has done since that German couple that drives the Porsche in Super Troopers.

I genuinely hate AI art

This one is terrible because it's like a montage of a penguin colony over a generic historic painting of a port city. Very little creativity and quality control. I'd just combine some actual photo of the Kiel port and penguins jumping out of water. (Not necessarily these two)

Kiel port, cathedral in background Penguins jumping out of water

What you actually want is a nice picture of either a market place or seafront promenade and a fat and content (as usual) Tux munching a Fischbrötchen

Cool but that would require some cultural awareness, and the reporters cannot be bothered.

1 more...

You mean collage? I agree. I think your suggestion would work best if it was also made to look like an obvious collage. If it was accurately photoshopped to look like the penguins were actually there it would look silly.

1 more...

Right? The rash of AI images used in journalism is genuinely troubling. It seems like at least 50% of news article thumbnails I see are AI these days.

And, like…are those penguins in the back cheering with human arms? Is that an orca jumping out of the water? What the fuck is going on.

2 more...

Unrelated to the question but on the picture:

The AI nicely drew a german city but ... put the naziflag on the ships Rather than the current german flag.

Why is that image even there? It's not in the original article unless my adblocker is removing it for some reason.

EDIT: before anyone states the obvious, yes, I know how OG metatags work. What I'm asking is why would they chose that particular image, with the penguins and all, to accompany an article like that, and not, say, just a regular stock image of a German city?

Even stranger, the filename in the URL implies that this was potentially even intended: https://regmedia.co.uk/2024/04/04/shutterstock_kiel.jpg Almost makes me wonder if some intern put an AI image there for shits and giggles to see if anyone notices.

Finally, where exactly do you see any Nazi flags? All I can see is a red, white, and black livery, which ARE the colors that the Nazis used, but not in that arrangement. There are no swastikas anywhere (as far as I can see), so it seems as if this rather the flag of the German Empire, which also used the same colors, but predates the Nazis by a good 60 years.

A stock image of Kiel is really not out of place for an article about Schleswig-Holstein, it being our capital and all. It's also a fleet base. And you can find vaguely similar towers there.

What doesn't make sense is the rest: The penguins, the what galleons I think with Imperial livery, Schwarz-Rot-Gold in combination with Imperial livery, what looks like a Lübeck flag (of all cities!) but rotated, and whatever the other flag is supposed to be. This is Kiel's flag, for reference. Oh: Half-timbered houses. Those look like copy+pasted out of Swabia or something.

Okay but the penguins do make sense, right? Penguins are like the mascot of linux

Penguin, singular. Also none of them are fat and content enough to be Tux but fair point, that's probably how they ended up there.

Its a meta property in the HTML. Viisible to software, but not shown in the article.

Afaik, it was the flag of the Third Reich from 1933 to 1935 (so before the Swastika flag).

Or more noticably all the southern hemisphere penguins

Wasn't it Munich who did that a few years back, only to backtrack sometime later?

Yes, it was Munich. And all things considered it worked quite well for a while.

After a while AFAIK the then new mayor called himself a "Microsoft fan" and tried to get Microsoft to build their new German HQ in Munich. So I am pretty sure there is no connection whatsoever between canceling Limux and switching back to Windows and Microsoft building a huge campus in Munich Freimann...

I fully expect this to get backtracked almost immediately. From my experience most government employees can barely handle a browser upgrade with a UI change, and they will 100% throw a collective fit if their Word and/or Outlook goes away.

It's not just office, SH and many other parts of the German government have been slowly replacing the entire O365 suite with OpenDesk, which is an open source product based on Matrix, Jitsi, LibreOffice, and a few other tools.

The goal is to have a fully integrated solution for calender, chat, calls, documents, cloud storage, etc.

My employer is developing parts of that solution and we recently switched our internal communication over to it, and tbh, it's working really well.

Now is the perfect point in time to do it, with the GDPR ruling regarding O365 and Microsoft fumbling the migration between old teams and new teams.

Which is good, since M$ Office is still one of (if not the) biggest security holes in all of software due to its macros and how no one uses them securely.

Also also doing things the OS way will lead to less changes in the long run since Microsoft can and will change their layouts as they please, but a well maintained FOSS-fork can stay one way indefinitely.

You are right. But what epic dunces.

Employer could pass the savings onto the staff with a payrise though.

"Staff who learn to use these new Linux applications will receive a bonus/payrise. Staff who do not will go to corner and wear the special hat"

I think trying to sell a switch to opensource as a saving is wrong on two counts...

Firstly it just sets the platform up for hatred. "We know you guys like expensive wine at the Christmas party, but this year we decided to get cheap-but-still-ok wine! Yaay, go team!".

Secondly, any savings should be poured straight back into training and support. Users should be able to ask dumb questions like "how do I create a new word document" and get a more or less instant response.

Eh, it's civil servants. They'll be sent to training, if it turns out they can't be trained they'll have choice between quitting or working where their qualifications suffice. Have them walk dikes to find rabbit burrows if need be.

I love this, but having used ms office extensively for work, we all know it has many more features. Libreoffice isn't a drop in replacement, but maybe with the increased user base it can become one.

It really depends on the needs.

When my entire company (10k employees) switched to LibreOffice, it was almost fine. There was like 50 ppl who were frustrated at breaking changes. But many adapted and it was a pretty clean transition.

As for LibreCalc, fuck that. What a nightmare. Employees resorted to creating Google accounts to use Google Sheets instead. We still don't have a solution, and if one particular director gets his way, that whole department might switch back to Windows just for Excel.

Meanwhile another german city (munich) is going back to MS

but maybe with the increased user base it can become one.

You think the state will contribute? I highly doubt that. At best it will be gov specific functionalities.

Well, Munich decided to switch back around the time Microsoft was negotiating about building their Germany HQ there. There have been allegations of backroom dealings, but I dunno if there's ever been anything proven. There is a very big, very shiny building with a sign that says Microsoft near where I lived when I was there, though.

Though I also read some articles about them partially going back to FOSS, so who knows what they'll do in the end.

You'd need a massive increase in tech support. Likely more than you'd spend on ms in the first place. Seems a political gambit or a political gaff.

Switching to an open-source project is easy, but the concern is more about the context in which they are used and how long they will persist in using these. It might be more convenient for the government to initially try Linux for some pilot projects that require less human intervention. This is because I’m not sure how familiar civil servants are with Linux and LibreOffice. On the other hand, open-source projects don’t provide after-sales services and may have technical or compatibility issues. It requires time for them to get accustomed to them.

According to the article,

  1. They are also migrating backend infrastructure such as emails servers etc.
  2. They already have Linux migration experience in some German states as well as the current proposer.
  3. Companies such as RedHat, Canonical and OpenSuse do offer enterprise level support. So open source software doesn't have "after sales" support is a myth.
  4. They say that the goal of the migration is privacy and security, no necessarily cost driven. They may very well be prepared to pay a premium for enterprise level support.
  5. They have already identified compatibilities issues in their previous project. They got them because they mixed Windows and Linux, the article says. That's why they migrate everything to Linux this time.

Your clarification helps me understand their swtiching. Thanks 👍

I wish my country would also stop subsidising M$ and transition to Linux as well.

It is all about private "dinners".

They've thought about that too, and see training as vital where others before them have failed. Also OS and programs will look somewhat similar to what users are used to, from what I can recall.

Producing documents or e-mails can't be that functionally different, right? Many don't need much more than that. However, I could see integration of third-party software as a challenge, but one that in most cases could be easily overcome.

Producing documents or e-mails can't be that functionally different, right?

If you do complicated stuff in docx and then try open it in something like Libre the formatting will be interpreted differently.
Source: I partly create forms for templats in Libre/OpenOffice at work.

Yeah for the simple stuff LibreOffice will be just fine but for anything complex like mail merges and such it's probably going to require a lot of work re-doing things.

When someone uses a text editor like LibreOffice, whenever someone mentions complex tasks, I'd imagine writing a thesis, a series of books, a big ass report or the like. Mail merges sound like something another app should do...

Yeah LibreOffice will do things like mail merges, but I mean it will probably require relearning the process. It will be different than the process they used with MS Office.

If you just porting over simple things like letters and simple documents you should be able to move back and forth between MS Office and LibreOffice with few changes.

I wonder what they will choose for their base. I was surprised LiMux was based off Debian since Suse is headquartered in Luxembourg City. I personally would welcome a large organization choosing Suse products as we need more competition for RHEL (which would be a huge boon in productivity since we won't need like 3 projects to spend a decent amount of time repackaging RHEL).

According to an old interview, pretty much whatever: They're saying "five big distributions are suitable".

They're starting the switch with apps, not the OS. From a technical POV it'd be nice to see NixOS as it's devops / managed deployment heaven. It also happens to be European and, just like Debian, it's a community distro.

For a project of this size, doubly and triply if it gets even more states as users, it absolutely does make sense to have your own release channel, have a team working on nothing but pushing patches (security and otherwise) onto an LTS branch and upstream as well as integration testing for the precise desktop you're shipping to users: The states are paying them to support a desktop, not an OS to run whatever on.

Nix does have an interesting package manager.

The states are paying them to support a desktop, not an OS to run whatever on.

Don't they need money to fund both aspects? Is there any support to lean on someone goes with Nix?

A lot of governments in the US pretty much go through Microsoft for simplicity. There's a lot of software obtained from a single vendor. I suppose that's why rhel is so popular.

Dataport is big enough (5200 employees) to support that kind of thing themselves, and they precisely are the single vendor for the participating states (it's an inter-state public corporation). More than twice the employees Suse has, quarter the size of RedHat.

Good to know. I did not realize that this team was this large. I hope it works out.

Redhat and Debian are separate projects, tmk.

I don't know if you understood my original post, it was too get an alternative to an enterprise distro with vendor paid support. In this regard the alternatives to Debian are more OpenSuse and Rocky, not RHEL (this is not a comparison of quality).

Yeah, the other alternative would be to set up a consultation company that is based around Debian. I guess that is what Dataport is supposed to be then, the support. It's s different route but still works.

Maybe soon a unified CSV handling might be possible.

I can confidently say that CSV support is one of those problems that even the brightest computer scientists will be pondering for the decades to come.

Supporting CSVs sounds like an easy problem, but it's not. It's like a whole different complexity type. Time complexity, space complexity, and now, the dreaded subclass between spec complexity and organisational complexity.

You can't just make the users agree which delimiter to use and how quotes are supposed to work. That's nearly impossible. No no no.

Commas are too common, we should go with semicolons. And \n and UTF-8 by default. And a header that defines changes from defaults, plus metadata such as data logger model and settings. These are some significant quality-of-life improvements but I'd guess it will take another file extension before that happens.

I just don't like that CSV exists as a format and has no standards currently. If you remove commas from CSV then you're taking the C out of CSV.

SCSV (semicolon separated values) at least sounds like an upgrade to CSV. Or maybe just use something that is flexible but is standard like JSON?

Yeah, SCSV would work, with a .ssv file extension for FAT compatibility.

JSON is overkill, tabular data is often recorded by 8-bit devices. Yes, you can use a dishwasher to cook salmon, but building a dishwasher is difficult and it can break in many more places. Each piece of salmon also needs to be carefully wrapped.

Yeah, I get what you mean. I'm so overprotective of my dishwasher I actually pre-scrub plates very quickly so not to clog the dishwasher (which is pretty similar to sanitizing inputs for putting them in a database I guess). 😊 It's still much faster than doing the dishes by hands.

But the point is something simple can run on a simple device with minimal supervision.

At that point why not use TSV?

ASCII 0x1f, unit separator and 0x1e, record separator. There's also 0x1d group separator and 0x1c file separator.

Both CSV and TSV have been a mistake from the start it's not like they'd be suitable for binary data anyway and not using ASCII control codes specifically made for in-band messaging of record fields means they ate into the printable characters (and yes \n and \t are printable, they move the print head that's a printing action).

If you want binary compatibility either use bencode or throw ASN.1 at it. The important thing is to have a simple enough data model, don't try to save code in the base compatibility version, evaluate the whole sheet before export if you have to. Using sqlite as interchange format is a bit hacky, but honestly defensible especially with the code (which kinda is the spec) being public domain.

Good. This makes them less vulnerable to the malware that Windows innately is.

I wouldn't say that Windows is malware itself, but rather it wasn't created with a security-first stance, which we absolutely need for all OSes going forward. I say this as someone who ditched Windows as my DD ("I use Arch, btw"). I left Windows more for their policies and subscription models that are becoming increasingly anti-consumer.

With that said, let's not pretend that Linux is immune as has been proven in the past week with xz and liblzma being compromised. Yes, it took 3 years to get to the point their long game paid off, but it still happened through a series of credibility social engineering steps by a single person. (Yes I know others were also trying to do exactly this, but only Jia Tan was successful)

(Yes I know others were also trying to do exactly this, but only Jia Tan was successful)

The reason you know is because the target software is FOSS. Care to bet other similar schemes have been successfully pulled off with proprietary software?

There are so many surveillance built into proprietary software, countries like U.S. probably can just ask for any information from Apple, Google, Facebook, Microsoft.

On the other hand, countries like China and Russia would probably need to compromise these product like Jia Tan did. Except for Apple, because every apple service in China is maintained by a Chinese company with no encryption allowed.

You only know this happened because one dev was benchmarking their system and noticed a 0.5s anomaly in resource usage, and was able to track it down to this. For every one of these that are caught, there are countless more that slip past.

I actually look at it a completely different way. There are so many users optimizing and digging into the core of open source versus proprietary that with so many randoms actions there's less "vulnerable" dark spots available. If we think there's a limitless X amount of vulnerabilities (since we don't know the true ceiling limit), open source will always be "X (vulnerabilities) - 1" compared to proprietary. Completely a math metaphor but gets the point across, It's a path that lessens the impact which we should be striving for over profit/monopoly motives.

1 more...

Of course, there can be malware for open-source systems such as Linux, but it's generally caught and patched a lot faster.

1 more...

In the enterprise space, Windows isn't an issue at all.

This is because enterprise manages security properly - layered, minimum perms to perform a task, etc.

Windows laptops have been tightly locked down since the early 2000's, including USB ports.

I've never seen a virus or malware on a machine in enterprise, and if it were to occur, the most it can damage is the local machine, as network shares are minimal (most data is kept in databases), the shares with write access are limited to small user groups, etc.

Users simply lack permissions to change stuff, so malware lacks it too.

Have you been near some sort of news in the last years? Corporations using windows get hacked regularly and they are far off from having everything in a database somewhere. You have no fucking clue. What you are describing is the dream of corporate security newbies, but no big corporation let alone some state government is anywhere close to that.

They have massive shares, where all the people can read and overwrite everything, they open all attachments directly on their machine and click away all warnings without reading them. (Who needs USB if you can mail malware directly?)

This is hell and in Germany dozens of smaller or bigger government networks were hacked and massive amounts of data encrypted last year alone.

I can from personal experience that there is a huge push to get much more secure in the local government space in the US, including adhering to NIST 800-53, and be audited on it. It's not foolproof, but it's a much needed step forward towards preventing big events becoming breaches. But if they are a breach they'll be lower impact. It's painful to get there, but I've been involved heavily in the conversion in policies and procedures to get there.

This is because enterprise manages security properly - layered, minimum perms to perform a task, etc.

Apparently Microsoft itself isn't Enterprise?

I’ve never seen a virus or malware on a machine in enterprise...

Change Healthcare - https://www.msn.com/en-us/money/companies/change-healthcare-hack-what-you-need-to-know/ar-BB1kvg2t

MGM Grand - https://www.cnn.com/2023/10/05/business/mgm-100-million-hit-data-breach/index.html

HP Enterprise - https://apnews.com/article/russian-hackers-hewlett-packard-enterprise-microsoft-sec-breach-cozy-bear-d4e88ded0a47d010216e11f41132f72c

Here's 12 more - https://www.kaspersky.com/blog/ransowmare-attacks-in-2023/50634/

Users simply lack permissions to change stuff, so malware lacks it too.

Oh something is lacking in your world and I'm not talking about permissions.

1 more...

Hey, can you hear that? That's the sound of hundreds of IT support workers silently crying out at the thought of having to explain a whole new OS and new office software to some boomer.

Doubt it. Most users are point-and-droolers with no understanding nor desire to learn the base concepts behind the interfaces they're using. No IT worker has ever successfully explained a technical concept to an (l)user in the history of ever. By now we're smart enough not to try.

These people learn how to use computers at their jobs by rote, not by comprehension, and to them one word processor, spreadsheet, or browser is much the same as any other once they learn where all the buttons are that make it do what they want, and their interest in any of it stops precisely at that point and no further. There will be some grumbling about "the new system is so much worse than the old system," but that very same grumbling always happens whenever the "system" changes, regardless of whether or not the new one or the old one was actually the worse of the two.

Furthermore, these days I guarantee you the majority of the work they do is entirely within a browser via some ghastly intranet site which will not look or behave any differently on Linux vs. Windows vs. Mac vs. a Chromebook vs. a graphing calculator, etc.

I hired an accountant to do my taxes this year and her company had just switched to Libre Office and she, a boomer, could t figure out how to open a fucking CSV with it. She kept complaining about it just being a string of numbers and letters.

I resorted to providing her with PDFs instead.

I am one of the sysadmins that will have to deal with the Fallout of this. I dont worry to much about the desktop side of things, Users can offen adapt well enough to clicking a different icon to do the same task. What worries me is moving away from Exchange and Microsoft AD, these systems include a lot of features we take for granted and will likely be missed.

IIRC, the plan is to switch to LO. Linux is also planned, but not in the foreseeable future. So you might have some time left ;)

I think it is fine if everything they used to do have a replacement, my wife has been using my laptop running silverblue for personal laptop, doing homework and everything, until she want to use affinity photos or forced to use docx.

That being said, docx is invented specifically sabotage of open document standard and cross compatibility, but I installed onlyoffice for her, and everything is fine now. And if she spent as much time in GIMP and dark table, she should be as happy as in affinity photo, since she doesn't use that many features anyway.

Same happened with her father in law, he was trying to do some business work, I give him the silverblue laptop, and opened only office. He can work just as normal, after I told him how to use the super key in gnome.

Most office worker, and students only uses very limited functionality of some software, if all of which has a decently intuitive replacement, I think they will be happy.

Ad I said yesterday when this was posted. They tried this about 15 years ago, reverted to Windows after a few years.

I wish them all the luck in the world with this, truly. But I'm not sure a government has the drive, management, and flexibility to pull this off successfully.

If we want to see Linux compete with Windows for the desktop, it will need to start at the opposite end of the spectrum: small environments where the need for specialized apps is minimal, IT is a smaller group, flexibility is much higher, end users are a smaller group (from a training perspective) and reduced cost realizations are more apparent and impactful.

We may be seeing the beginning of this with VMWare's new, exorbitant licensing costs causing a push to other solutions such as Proxmox/TrueNAS for virtualization/virtualization backup in the SMB.

And if we really want to see a sea change, we need to get Linux as a desktop in education. But that would require settling on a single shell, and generally a single distribution (or at a minimum ensure there's a consistent set of tools in the OS).

Seems like an "Education Build" would be a great idea. But, again, who's going to back it, and which Linux distro gets the nod?

If we want to see Linux compete with Windows for the desktop

Linux could have the Desktop now. You could throw a lightly massaged Mint install down on nearly anyone's desk and they'd be fine.

However Linux is an Operating System, yeah yeah kernel I know, and vanishingly few people actually give a shit about the OS, what they care about is the application set and that's where FOSS, not Linux, completely falls apart.

Linux on the desktop for 30,000 Government PC's? No problem. Removing Microsoft Office from those 30,000 Government PCs? Major problem!

...small environments where the need for specialized apps is minimal...

Nearly everyone uses MSO and even Google hasn't been able to successfully work around this after plowing untold billions and a decade of effort into G-Suite...only to have it widely viewed as an inferior product. When you get to "specialized apps" territory it gets even worse since outside of STEM they're almost all entirely written for Windows. You literally can't get away because the software isn't there to do it.

...IT is a smaller group...

Smaller group means that there's less, or even NO, resources to find, maintain, and train people for "alternate" applications. It's vastly less expensive to simply use the applications that users are already familiar with and that everyone else in their industry is using.

...reduced cost realizations are more apparent and impactful....

The "reduced cost realizations" only come from not buying licenses, which can be impactful, but that expense gets quickly overwhelmed by lost productivity, increased training cost, and higher support burden.

Yes SOME organizations are able to make it work but those orgs are usually staffed with highly technical people and they've got leadership willing to bleed money while everything gets sorted out. Those two conditions don't describe very many businesses and they are certainly not found in Governments.

Linux the OS works just fine but that's not the hurdle. The hurdle is the applications. To quote a famous sweaty guy on a stage one time this fight is about "Developers, Developers, Developers!".

Debian Edu has existed for over a decade, originally as a Norwegian distro called Skolelinux ("school Linux"). I'm not sure how they differ from regular Debian at this point, but a big part of the original project was high quality translations.

It's done before in Munich. It can work.

Yeah but they switched back to Windows in 2017 for no reason. :( some Bad rumors say it had to do with Microsoft building its headquater in munich 2016. But no one knows if the decision to build it in munich is indeed related to the switch back to. Windows.

Seriously? With the amount of political corruption in Germany I really don't think there's any reason to doubt that at all

"Linux could have the desktop now"

And yet doesn't.

Again, why do enterprises prefer to pay tens of millions per year in licensing rather than deploy Linux as a desktop?

You think these places don't have hundreds or thousands of IT folks with Linux expertise?

Blame game, simple.

Proprietary software comes with a price tag (some people think free = bad), a license (which implies some sort of ownership) and a company behind it which you can sue if something hits the fan. Zero responsibility for the licensee.

FOSS, in the other hand, is no strings attached (for the most part, some sw is dual-licensed and/or there are paid services): if it hits the fan, you clean it up.

So proprietary-mentality managers either cough up money for an IT department, which they almost never do, or fork off money to a proprietary company and write it off as an expense and externalize everything, including resposibility.

I saw this 10yrs ago about how some government body of Germany was not a fan of MS Suite at all! Great news overall.

I like the Math program as it has LaTeX compatibility, but if we don't start adopting this worldwide it might become a nagging problem for the next quarter century.

I am not aware that libreoffice math is compatible with latex. How do you enable it?

German is a good country about open culture

LibreOffice is perfectly fine for your Dear Princess Celestia letters (which 99 percent of Word users do is write simple letters), but once you start doing more advanced formatting (such as tables and text boxes and other embeddings), LibreO really doesn't like it. And good luck if you have to convert such a Word document.

This is disingenuous and misleading.

Yes compatibility with Word with complex formatting is problematic, but is that really libreoffice or is it Ms office?

For documents drafted in LibreOffice complex formatting is rock solid. It's patently false to say its just generally inferior to Word in this regard.

Yeah it is always funny when people shit on non-MS office suites for not being 100% comaltible with MS Office, when it is Microsoft who doesn't stick to the international standards.

How can they be international standards if they don’t include Microsoft? Doesn’t Microsoft and all its employees count as part of this global international world? See, Microsoft is the victim here.

edit /s /s /s /s /s /s

Malarkey. It does give with tables and boxes. I've been digitizing my home be brew ttrpg system slowly over the last few years, using libreoffice. Zero issues, zero difficulty.

And I've now written three novels, a novella, and many short stories with it. The native epub output isn't perfect, but it does fine for alpha/beta reading. And that's the only flaw it has for prose.

I've converted older word documents in the process of the ttrpg formatting, btw, with no issues.

The word processing part is all I really use, so I can't say much about anything else in the suite, but librewriter is fully capable.

I do lots of advanced formatting in LibreOffice and it works a LOT better than Microsoft Office ever has, mostly because the functionality is consistently found in the same dialogues across versions. Also, references are not permanently broken like those in documents submitted by my windows using colleagues.

Does Word like advanced formatting? I've found LaTeX easier to use for typesetting, and I don't like LaTeX.

Wait a second lemme just quickly program my letter

You don't compose your letter in word either... Nor do most people need "advance" formating for letter. I doubt you are formating floating subfigures, aligning equations, and organizing citations for every email.

I'm not knowledgeable enough to know if that's true or not, but having it be pushed to the test with serious work at that scale will hopefully get those compatibility issues ironed out quickly. Anyone can contribute after all, and no doubt the government will have programmers that are looking to help.

That's a blatant lie. LibreOffice Writer works better than M$ Word for every single purpose and application.

Does LibreOffice finally have ribbon or does it still look like MS Office 2003? You can hate on Microsoft all your want (and I'd gladly join you in most cases) and I get the privacy concerns but the Office suite is, after all those decades, still unmatched (well maybe except Outlook).

while it does have a ribbon, the exclusive ribbon while discarding the menu is the main reason why Microsoft Office is fucked up beyond repair.

Ribbon is one of the best inventions Microsoft ever came up with and I will die on this hill. I'm old enough to remember very well the suffering when I was trying to find something in the classic menus or among the billion equal sized icons scattered across multiple toolbars in old MS Office versions. When Office 2007 came out, everything was suddenly so much easier to find, often with less clicks. I don't see any reason why I'd need the old style menu in addition to ribbon.

There was something faster and more reliable: keyboard shortcuts.

The ribbon is for people who use the mouse for stuff that is much faster to do with a keyboard.

You can't possibly have every feature on a keyboard shortcut, even just all those various formatting features in Word for example where you often have to choose something from a list of options. And even if you somehow did manage to have a shortcut for everything, you'd still only remember those you use frequently enough.

Not to mention, I'm pretty sure most of those shortcuts from 2003 still work today.

Okay, let me rephrase my initial criticism:

  • let have whoever would like to have three rows of ribbon icons whose description is only visible as a mouse-over hint
  • fuck Microsoft for forcefully removing the regular office drop-down menus

The second part in this process was completely unnecessary and made office a worthless pile of bloatware.