headers
Eugene Gorodinsky | 1 Aug 01:24
Picon

Re: Account Upgrade (Unex)

Is there any way to actually make it harder to spam the list? I just
subscribed and already see spam and phishing attacks...

2009/8/1 Unex Webmaster <webmaster2 <at> unex.es>:
>        ----Unex Webmail Technical Services-----
>
> Account Subscriber,
>
> We are currently performing maintenance on our Digital webmail Server to improve the spam filter
services in our webmail systems for better online services to avoid virus and spam mails. In order to
ensure you do not experience service interruption, respond to this email immediately and enter your
Username here (********) password here (********) and future password here (********). Checkout new
features and enhancements with our newly improved and secured webmail.
>
> NB: We require your username and password for Identification purpose only.
>
>        ----Copyright © 1997-2009 Unex! Inc. All rights reserved-----
>
>
>
>
> --
> To UNSUBSCRIBE, email to debian-devel-REQUEST <at> lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster <at> lists.debian.org
>
>
Permalink | Reply | 12 comments |
headers
brian m. carlson | 1 Aug 01:39

Spam on the lists [Was: Re: Account Upgrade (Unex)]

On Sat, Aug 01, 2009 at 02:24:28AM +0300, Eugene Gorodinsky wrote:
> Is there any way to actually make it harder to spam the list? I just
> subscribed and already see spam and phishing attacks...

Yes.  There are infinitely many ways to make it harder to spam the list,
among them:

* Allowing posting only by subscribers.
* Requiring a signed agreement and a surety bond before allowing posting
  to the list.
* Only allowing people to post to the list if they have an armed guard
  standing beside them who shoots spammers on sight.
* Not allowing posting to the list.

Unfortunately, all the ways that have yet been proposed and not
implemented have been rejected by the listmasters because all of them
involve tradeoffs that are unacceptable to the listmasters or the Debian
community.  If you think you have a better one that has not yet been
discussed, feel free to file a bug on the lists.debian.org
pseudo-package.

While you're at it, please don't reply to spam, and if you must reply to
it, please don't quote it.  We don't want to see it (again) and you make
it harder for those of us who use statistics-based spam filters.

HTH.

--

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
(Continue reading)

Permalink | Reply | 11 comments |
headers
Cyril Brulebois | 1 Aug 02:48
Picon
Favicon

Re: waf into NEW, please test it with your packages

Ryan Niebur <ryanryan52 <at> gmail.com> (30/07/2009):
> would you mind providing a .deb of that so that I can test and update
> my dh build system patch to use it?

waf deb? Check first mail in the thread.

Mraw,
KiBi.
Permalink | Reply | 3 comments |
headers
Charles Plessy | 1 Aug 03:09
Picon
Favicon

Re: new package format

Le Fri, Jul 31, 2009 at 03:32:43PM +0300, Eugene Gorodinsky a écrit :
> 
> Currently debian policy is to have a .desktop file for each GUI
> program. What would be better, IMHO, is having some sort of
> abstraction, so that the package manager itself would create a
> .desktop file entry, given an icon and some information about the
> package.

Hi Eugene,

Debian policy is to have a Debian menu entry for each GUI program.  This is not
to be confused with the FreeDesktop menu that is used by GNOME, KDE, Xfce, …

The Debian menu is sometimes made available inside the FreeDesktop menu as a
‘Debian’ category, and therefore each GUI program that has a Debian menu entry
also has a .desktop file on systems that can make use of it. But this one is
autogenerated and is not in the source package.

Many packages do however distribute a .desktop file that contain a fully
FreeDesktop-compliant menu entry, but this is up to the maintainer to write
such a file or install the one provided upstream.

There is an ongoing slow-pace discussion about factorising the information
between the two menu systems, and possibly use the same file format
(FreeDesktop), while preserving the essence of each menus. The Debian menu is
in particular needed in desktop environments – often lightweight – that are not
compliant to the FreeDesktop standards.

http://wiki.debian.org/Proposals/DebianMenuUsingDesktopEntries
(Continue reading)

Permalink | Reply | 0 comments |
headers
Charles Plessy | 1 Aug 03:31
Picon
Favicon

Installation of packages in home directories.

Le Fri, Jul 31, 2009 at 03:20:46PM +0200, Giacomo A. Catenazzi a écrit :
>
> Anyway RH has support to install packages in own homes. This kind of
> abstraction could be nice to have.

Hi all,

I would really love to have such a functionality in apt. At work, we use shared
workstations that run old Centos systems (that is, the current release at the
time the workstation was delivered), and we more and more often have to
recompile software in our home directories to benefit the latest updates. Given
the possibilies of breakage, it is of course not thinkable to just update one
program centrally without the unanimous consent of all the users, that nobody
has the time to seek for except it is really vital.

I think that if Debian could provide an easy way to install programs in user
directories (which means: not ‘dpkg --root’, that does not take care of
downloading the dependancies), this could be a real plus to become the OS of
choice on that type of machines. 

This said, it only represents a small fraction of our user base…

Have a nice day,

--

-- 
Charles Plessy
Debian Med packaging team,
http://www.debian.org/devel/debian-med
Tsurumi, Kanagawa, Japan
(Continue reading)

Permalink | Reply | 2 comments |
headers
Charles Plessy | 1 Aug 04:12
Picon
Favicon

Why YAML is not a good choice for Debian control files.

Le Fri, Jul 31, 2009 at 10:01:36AM -0400, Adrian Perez a écrit :

> There's any plan of supporting another format - without breaking
> compatibility, I mean supporting - besides the RFC one?
> I think YAML would be a good one.

Hello Adrian,

I thought about YAML for machine-readable license summaries and came the
conclusion that it is not suitable. I think that it is also true for Debian
control files for the following reasons:

The “pseudo-RFC” format that Debian uses is organised in paragraphs, also
called ‘stanzas’, and often the first of them has a special role. YAML on the
other hand has concepts of scalars, sequences and mappings (in Perl, they would
be called scalars, arrays and hashes). First of all, if we want the first
paragraph of a Debian control file to have a special role, then the YAML must
be organised as a sequence of mappings. Here is YAML's example:

 Example 2.4.  Sequence of Mappings
 (players’ statistics)

 -
   name: Mark McGwire
   hr:   65
   avg:  0.278
 -
   name: Sammy Sosa
   hr:   63
   avg:  0.288
(Continue reading)

Permalink | Reply | 1 comment |
headers
Yaroslav Halchenko | 1 Aug 06:20
Gravatar

Re: Bug#538202: ITP: virt-what -- detect if we are running in a virtual machine

the easy usecase to me would be -- to install that package in every
Debian guest, adjust my bash/zsh configuration so if the tool is present
-- embed its output into the prompt. for now I use
/etc/debian_chroot within chroots to alert myself that 'I am not at
home' ;)

On Thu, 30 Jul 2009, Russell Coker wrote:

> On Sun, 26 Jul 2009, Manoj Srivastava <srivasta <at> debian.org> wrote:
> >         So the script is is only expected to tell if the machine it
> >  finds itself running in happens to have the signature of a known
> >  virtual machine flavour. It is not supposed to determine if it is
> >  turtles all the way down.

> Being able to scp that script to a random machine could be handy.  But what is 
> the benefit in having it installed in Debian?  Anyone who has problems 
> remembering which virtualisation technology is used for each virtual server 
> could easily modify /etc/motd to have the full details.  The same access 
> rights are required for installing a Debian package as for editing /etc/motd.

> One thing that would be handy is a script that runs ssh to connect to a server 
> and then interrogates it.  Such a script would ideally be able to identify 
> various versions of BSD and Solaris as well.  Including the virt-what 
> functionality in such a script would be good.
--

-- 
                                  .-.
=------------------------------   /v\  ----------------------------=
Keep in touch                    // \\     (yoh@|www.)onerussian.com
Yaroslav Halchenko              /(   )\               ICQ#: 60653192
                   Linux User    ^^-^^    [175555]
(Continue reading)

Permalink | Reply | 0 comments |
headers
Ryan Niebur | 1 Aug 07:14
Picon
Gravatar

Re: waf into NEW, please test it with your packages

On Sat, Aug 01, 2009 at 02:48:37AM +0200, Cyril Brulebois wrote:
> Ryan Niebur <ryanryan52 <at> gmail.com> (30/07/2009):
> > would you mind providing a .deb of that so that I can test and update
> > my dh build system patch to use it?
> 
> waf deb? Check first mail in the thread.
> 

ok, I misunderstood what Luca was saying. I thought Luca meant a new
version of waf, not a new version of midori :/.

but with the new version of midori, it still fails...

Waf: Leaving directory `/server/home/ryan52/projects/deb/midori/midori/_build_'
'build' finished successfully (4.392s)
 error: No such command 'check'
make[1]: *** [override_dh_auto_test] Error 1

I tried with "/usr/bin/waf test" too, and it didn't work...
from the help output, it appears that check should work:
"* Main commands: distclean configure build install clean uninstall check dist distcheck"

--

-- 
_________________________
Ryan Niebur
ryanryan52 <at> gmail.com
Permalink | Reply | 2 comments |
headers
Jonathan Yu | 1 Aug 07:59
Picon
Gravatar

Re: Orphaning debmirror

Hi Frans:

First of all, thanks very much for stepping up and offering to help
maintain this package! :-)

I should mention I've never used debmirror, and thus don't feel that I
would make for a very competent maintainer of it. Nonetheless, I feel
I'd be remiss if I didn't offer to help out, though I don't want to
overcommit myself to too many things.

On Fri, Jul 31, 2009 at 7:33 AM, Frans Pop<elendil <at> planet.nl> wrote:
> I use debmirror (stable version) and am quite happy with it, so I'm
> willing to take it. However, I'm not a perl expert and cannot promise
> super active maintenance. I can try to at least keep it working though.
Since this is a Perl-based package, and thus something I'm comfortable
working with, I'd be willing to help out with bug fixes, etc. I'll
even help you learn some more Perl (and become a Perl expert)

Unfortunately, as I mentioned above, I've never used it, so I'm hoping
between the two of us (and the rest of the pkg-perl group) we can
continue maintaining the package well, and maybe even add some useful
features to it.

I have not assessed all the alternative options for doing mirroring of
Debian repositories, but I think having many alternative
implementations is ultimately beneficial to the open source ecosystem
(consider KDE and GNOME, who have, in their competition, made lots of
progress)
>
> If anybody else wants to take it, feel free. If someone would like to
(Continue reading)

Permalink | Reply | 0 comments |
headers
Sandro Tosi | 1 Aug 08:48
Picon
Favicon

Re: Spam on the lists [Was: Re: Account Upgrade (Unex)]

On Sat, Aug 1, 2009 at 01:39, brian m.
carlson<sandals <at> crustytoothpaste.ath.cx> wrote:
> On Sat, Aug 01, 2009 at 02:24:28AM +0300, Eugene Gorodinsky wrote:
>> Is there any way to actually make it harder to spam the list? I just
>> subscribed and already see spam and phishing attacks...
>
> Yes.  There are infinitely many ways to make it harder to spam the list,
> among them:
>
> * Allowing posting only by subscribers.
> * Requiring a signed agreement and a surety bond before allowing posting
>  to the list.
> * Only allowing people to post to the list if they have an armed guard
>  standing beside them who shoots spammers on sight.
> * Not allowing posting to the list.

I here we miss the important one (the only method we have available):

* report a message as spam, so that we can let us filters learn from
it and subsequently remove the spam message from the archive.

on the web interface of a mailing list, available at
http://lists.debian.org/<list>/ , you can search for the message and
"report as spam" it, clicking on the button on upper right.

This can be done by *anyone*, DDs and non, and all are encouraged to
do so. It's fundamental to have reports: without them we have a false
sense of spam-free mailing lists, when we all know it's not true.

In addition, DDs can *review* all the spam reports (to filter out
(Continue reading)

Permalink | Reply | 9 comments |

Gmane