Re: Bug#923221: ITP: libpam-fingerprint -- Pluggable Authentication Module for fingerprint authentication

2019-02-26 Thread Philipp Meisberger
This won't be an easy task (rather impossible) since libfprint is
written in C and libpam-fingerprint is written in Python.

Regards,
Philipp

Am 26.02.19 um 02:35 schrieb Paul Wise:
> On Mon, Feb 25, 2019 at 7:14 PM Philipp Meisberger wrote:
> 
>> Poorly libpam-fprintd is not suitable as libfprint0 seems to support
>> ZhianTec fingerprint sensors. libpam-fingerprint is especially for those
>> sensors. I see it would be more precise to use "Pluggable Authentication
>> Module for ZhianTec fingerprint sensors" as description and name the
>> package "libpam-fingerprint-zfm".
> 
> Is it feasible to merge the two projects upstream? It seems like
> having two different fingerprint sensor stacks and have the user
> manually decide which one they want and then install it is a bit of a
> suboptimal experience. It would be nicer if there were one stack that
> supported all the fingerprint sensors available on the market.
> 



signature.asc
Description: OpenPGP digital signature


Bug#923326: RFP: trava-jdk-11-dcevm -- Alternative VM for OpenJDK 11 with enhanced class redefinition

2019-02-26 Thread Michael Meier

Package: wnpp
Severity: wishlist
X-Debbugs-CC: debian-devel@lists.debian.org

Would be the replacement for the outdated openjdk-8-jre-dcevm package 
which is in debian stretch.
For Java Developpers having the updated package would make live a lot 
easier :-).


--- Please fill out the fields below. ---

   Package name: trava-jdk-11-dcevm

Version: 11
URL: https://github.com/TravaOpenJDK/trava-jdk-11-dcevm
License: apache



Re: Salsa CI news

2019-02-26 Thread Domenico Andreoli
On Mon, Feb 25, 2019 at 11:19:35AM -0300, Inaki Malerba wrote:
> Hi everyone !

Hi Inaki,

[...]

> We also introduced a way to monitor the pipeline's usage.
> prittiau.debian.net is a simple influxdb + grafana which shows some
> stats about the projects using the Salsa CI pipeline. You're welcome to
> log in with your salsa account.

I'm loggiagn in right now, Salsa asks for the following authorization:

  An application called Gitlab is requesting access to your GitLab
  account. This application was created by Iñaki Malerba. Please note
  that this application is not provided by GitLab and you should verify
  its authenticity before allowing access.

I find slightly confusing that "An application called Gitlab is
requesting access to your GitLab account". Maybe you could choose a
different name?

> If you have any question, you can find us on #salsaci at OFTC.

Thanks for all the good work! :)

Regards,
Domenico

-- 
3B10 0CA1 8674 ACBA B4FE  FCD2 CE5B CF17 9960 DE13


signature.asc
Description: PGP signature


Re: Salsa CI news

2019-02-26 Thread Inaki Malerba
Hi Domenico!

On 26/2/19 14:17, Domenico Andreoli wrote:
>> We also introduced a way to monitor the pipeline's usage.
>> prittiau.debian.net is a simple influxdb + grafana which shows some
>> stats about the projects using the Salsa CI pipeline. You're welcome to
>> log in with your salsa account.
> I'm loggiagn in right now, Salsa asks for the following authorization:
>
>   An application called Gitlab is requesting access to your GitLab
>   account. This application was created by Iñaki Malerba. Please note
>   that this application is not provided by GitLab and you should verify
>   its authenticity before allowing access.
>
> I find slightly confusing that "An application called Gitlab is
> requesting access to your GitLab account". Maybe you could choose a
> different name?

That's because Grafana uses Gitlab Oauth2 authentication[0]. I only
created a Oauth application at Salsa and everything else is on Grafana.

>> If you have any question, you can find us on #salsaci at OFTC.
> Thanks for all the good work! :)

My pleasure!


0_ http://docs.grafana.org/auth/gitlab/

-- 
- ina




signature.asc
Description: OpenPGP digital signature


Re: Salsa CI news

2019-02-26 Thread Domenico Andreoli



On February 26, 2019 5:32:57 PM UTC, Inaki Malerba  wrote:
>Hi Domenico!
>
>On 26/2/19 14:17, Domenico Andreoli wrote:
>>> We also introduced a way to monitor the pipeline's usage.
>>> prittiau.debian.net is a simple influxdb + grafana which shows some
>>> stats about the projects using the Salsa CI pipeline. You're welcome
>to
>>> log in with your salsa account.
>> I'm loggiagn in right now, Salsa asks for the following
>authorization:
>>
>>   An application called Gitlab is requesting access to your GitLab
>>   account. This application was created by Iñaki Malerba. Please note
>>   that this application is not provided by GitLab and you should
>verify
>>   its authenticity before allowing access.
>>
>> I find slightly confusing that "An application called Gitlab is
>> requesting access to your GitLab account". Maybe you could choose a
>> different name?
>
>That's because Grafana uses Gitlab Oauth2 authentication[0]. I only
>created a Oauth application at Salsa and everything else is on Grafana.

If I got it right, according to Gitlab docs [0], it's possible to set an 
arbitrary name for the App you want to configure.

>> Thanks for all the good work! :)
>
>My pleasure!

thanks,
Domenico

[0] https://docs.gitlab.com/ce/integration/oauth_provider.html



Re: Salsa CI news

2019-02-26 Thread Inaki Malerba
On 26/2/19 14:42, Domenico Andreoli wrote:
> If I got it right, according to Gitlab docs [0], it's possible to set an 
> arbitrary name for the App you want to configure.

My bad ! Now it should be ok :)

Thanks!

-- 
- ina




signature.asc
Description: OpenPGP digital signature


Bug#923343: ITP: pycirkuit -- GUI for Dwight Aplevich Circuit Macros

2019-02-26 Thread Aniol Marti
Package: wnpp
Severity: wishlist
Owner: Aniol Marti 

* Package name: pycirkuit
  Version : 0.2.0
  Upstream Author : Orestes Mas 
* URL : https://github.com/orestesmas/pycirkuit
* License : GPL
  Programming Lang: Python
  Description : GUI for Dwight Aplevich Circuit Macros

PyCirkuit is a frontend for Dwight Aplevich Circuit Macros,
which is a set of macros for drawing high-quality line diagrams
to include in TeX, LaTeX, etc. PyCirkuit builds a live preview
and allows it to be exported as TikZ.

PyCirkuit is written in Python 3 using the PyQt5 libraries, but is
largely inspired (in both ideas and code snippets) on Cirkuit, a C++
application written by Matteo Agostinelli using KDE4 libraries, which is
nowadays increasingly difficult to compile due to the switching, started
in 2013, of KDE project from KDE4 platform to the Qt5-based KDE
frameworks 5. It can be useful to people who need to add circuit
schematics to their LaTeX documents. Personally I use it.

I have been helping Orestes Mas with PyCirkuit development and we plan
to meet regularly to keep the package up to date. The package is
almost ready to upload.



Re: FYI/RFC: early-rng-init-tools

2019-02-26 Thread Ben Hutchings
On Mon, 2019-02-25 at 14:36 -0500, Sam Hartman wrote:
> > > > > > "Ben" == Ben Hutchings  writes:
> 
> Ben> The output of the RNG may well become public, for example in
> Ben> document UUIDs.  So when estimating the entropy that the new
> Ben> seed file will provide for the next boot, none of the entropy
> Ben> in the old seed file should be credited.
> 
> Are you saying that you believe that given output from the RNG it is
> cryptographically feasible to determine the seed?
> 
> There's a trivial reduction from that claim to a proof that the PRNG is
> not in fact a PRNG.
> 
> Unless there are cryptology results I'm unaware of--and it has been a
> few years since I studied the construction of PRNGs--then I don't think
> your argument is reasonable.
> A PRNG should be secure so long as its seed stays secret.
[...]

But if the input to the seed doesn't provide enough entropy, the seed
is not completely secret (that is, you can recover it with less work
than a brute force search).  The extreme example of this is the OpenSSL
RNG debacle of some years back, where only the pid (15 bits) was used.

Thorsten's implementation should yield rather more than 15 bits of
entropy, but I think his entropy estimate is still over-optimistic.  In
the worst case the Linux RNG is used to generate a private key
immediately on first boot, so the old seed file doesn't provide any
additional entropy.  (Either it doesn't exist or it's part of an image
and not secret.)  And in that case the space of possible keys may be
small enough that it's feasible to recover the private key.

Ben.

-- 
Ben Hutchings
The obvious mathematical breakthrough [to break modern encryption]
would be development of an easy way to factor large prime numbers.
   - Bill Gates



signature.asc
Description: This is a digitally signed message part


Subdomain Collaboration | Coupon Site

2019-02-26 Thread Citron Ngoc
Hello,

Allow me to introduce myself. My name is Citron and I am marketing manager
in affiliate marketing industry. We are launching a service platform (such
as Coupons Plus Deals) that provides special discounts and coupons for
various online retailers.

Our platform serves as deal hunter for online shoppers worldwide.

What makes us different from other competitors? We are proud of a
customized coupon-managing system which collects latest valid coupons and
discounts. During the past 2 years, we have established affiliate
partnership with over thousand online stores that offer special deals. Not
to mention 10 year experience in this industry from our team.

I would like to express our aspiration in seeking exclusive partnership
with Debian for long term mutual benefits.

This type of relationship has been applied within some other business as
subdomain such as:

https://coupons.cnn.com/
https://discountcode.dailymail.co.uk/
https://coupons.businessinsider.com/

 After comprehensive consideration on Debian reputation as well as our
smooth operation, I can see an absolutely promising opportunity for us both
to collaborate and grow together.

In this regards, I would like to have a subdomain with Debian where we
constantly update latest discounts and promotions for your audience. At the
same time, our audience can be updaDebian with useful information and
receive savings. Meanwhile, once customers purchase from the site, we both
receive revenue. Debian editors are not involved in providing coupons. It
is our mission.

Please let me know your thoughts and ideas on this in order to increase our
overall performance. i would love to have discussion with Debian via Skype
call to brainstorm on further ideas. Of course, if a call would not be
suitable for you, we can as well communicate through email. If this email
came to wrong department, please forward to someone in charge.

I am looking forward to hearing from you soon.

Best Regards,
Citron.