Dnia 2015-01-23, o godz. 17:27:16
Michael Orlitzky <m...@gentoo.org> napisał(a):

> On 01/23/2015 05:07 PM, Michał Górny wrote:
> > 
> >> Even `wget --no-check-certificate` would be a big improvement.
> > 
> > ...because?
> > 
> 
> You rule out some 13-year-olds in coffee shops as attackers. I
> overstated -- since the user isn't replying with any data, it's not a
> big improvement, but it's still a little better.

So I have a few options at hand:

1. put a checksum in the news item. The item is GPG-signed, so
the checksum will be protected. Of course, nobody bothers to check
the signature but anyway... Bad news is that I don't know of any
command to check signature that would really fit in 80 chars.

2. Put it .gpg-protected. Then oneliner is simple 'wget -O - ... | gpg
-d | python' (I have no idea how far gpg verifies there). But it means
that people who don't care and don't have GPG won't be able to use
the one-liner.

3. Put it in an ebuild, after all. This will add a lot of complexity
but GPG comes for free, plus some people will actually test
and stabilize it.

Do you like 3.?

> >>
> >> No, but the error says to set it, not export it =)
> > 
> > Thanks, mr troll. REALLY HELPFUL.
> > 
> 
> Ok it looks stupid, but I was serious. I source my make.conf in
> ~/.bashrc, so I have PORTDIR and friends set in my shell. I have PORTDIR
> set, and the thing is telling me to set PORTDIR? It took me a moment to
> realize what was wrong. It will certainly stump others.
> 
> If what you really want them to do is prepend PORTDIR="..." before the
> wget command, then why give them the wget command without it? Or if the
> environment variable needs to be set and then exported, why not just say
> that? The news items go out to tens of thousands of people so the more
> explicit the instructions are, the better. Because then people won't bug
> you about all the ways in which they misinterpreted the instructions.

People usually won't need to do that. Unless they do something stupid
like switching to a Python interpreter they disabled in the eclass...

-- 
Best regards,
Michał Górny

Attachment: pgpKaJdGqdNTc.pgp
Description: OpenPGP digital signature

Reply via email to