Re: Refactoring the Debtags web interface

2009-02-22 Thread Stefano Zacchiroli
On Sun, Feb 22, 2009 at 11:15:36PM +, Enrico Zini wrote: > But did I recall reading that Alioth, or debian.org, can be OpenID > providers? If I can use that, I solved the problem, otherwise, I > may just postpone implementing authenticated stuff until handy > OpenID providers happen in Debian.

Re: Bug#516545: ITP: eprover -- The Equational Theorem Prover E

2009-02-22 Thread Petr Pudlak (Debian)
Hi, thanks for valuable comments. The original description was meant as a kind of mathematical joke, since the task of proving a theorem is in general undecidable, so any theorem prover will get stuck forever on many (or most) inputs. I didn't realize at first that tis would actually discour

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Manoj Srivastava
On Sun, Feb 22 2009, Jörg Sommer wrote: > Manoj Srivastava wrote: >> On Sun, Feb 22 2009, Jörg Sommer wrote: >>> Manoj Srivastava wrote: On Sat, Feb 21 2009, Jörg Sommer wrote: > > Right, but when I hook into apt-get, I can get the configuration file > shipped with the packages.

Re: Bug#516659: ITP: w3bfukk0r -- scan webservers for hidden directories (forced browsing)

2009-02-22 Thread Don Armstrong
On Mon, 23 Feb 2009, Paul Wise wrote: > On Mon, Feb 23, 2009 at 10:27 AM, Ron Johnson wrote: > > But what (besides web crawling) is the (legal) purpose of that? And why > > does it need a word list? > > Presumably it is a useful tool as part of a security professional's > penetration testing too

Re: Bug#516659: ITP: w3bfukk0r -- scan webservers for hidden directories (forced browsing)

2009-02-22 Thread Paul Wise
On Mon, Feb 23, 2009 at 10:27 AM, Ron Johnson wrote: > But what (besides web crawling) is the (legal) purpose of that? And why > does it need a word list? Presumably it is a useful tool as part of a security professional's penetration testing toolbox? -- bye, pabs http://wiki.debian.org/Paul

Re: Bug#516659: ITP: w3bfukk0r -- scan webservers for hidden directories (forced browsing)

2009-02-22 Thread Noah Slater
On Sun, Feb 22, 2009 at 05:18:39PM -0800, Asheesh Laroia wrote: > I think that the description explains that the purpose is to find hidden > directories on web servers, presumably either your own or other people's. Why would you need to find directories on your own server? -- Noah Slater, http:/

Re: Bug#516659: ITP: w3bfukk0r -- scan webservers for hidden directories (forced browsing)

2009-02-22 Thread Asheesh Laroia
On Sun, 22 Feb 2009, Ron Johnson wrote: On 02/22/2009 04:39 PM, Maximilian Gaß wrote: Description : scan webservers for hidden directories (forced browsing) w3bfukk0r is a forced browsing tool, it basically scans webservers (HTTP/HTTPS) for a directory by using HTTP HEAD command and brut

Re: Bug#516659: ITP: w3bfukk0r -- scan webservers for hidden directories (forced browsing)

2009-02-22 Thread Ron Johnson
On 02/22/2009 07:18 PM, Asheesh Laroia wrote: On Sun, 22 Feb 2009, Ron Johnson wrote: On 02/22/2009 04:39 PM, Maximilian Gaß wrote: Description : scan webservers for hidden directories (forced browsing) w3bfukk0r is a forced browsing tool, it basically scans webservers (HTTP/HTTPS) for

Bug#516678: RFP: sysbench -- Cross-platform and multi-threaded benchmark tool

2009-02-22 Thread Hendrik Frenzel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Package: wnpp Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org Package name: sysbench Version: 0.4.10 Upstream Author: Alexey Kopytov (kaamos at users.sourceforge.net) URL: http://sysbench.sourceforge.net L

Re: Bug#516659: ITP: w3bfukk0r -- scan webservers for hidden directories (forced browsing)

2009-02-22 Thread Ron Johnson
On 02/22/2009 04:39 PM, Maximilian Gaß wrote: Package: wnpp Severity: wishlist Owner: "Maximilian Gaß" * Package name: w3bfukk0r Version : 0.2 Upstream Author : Nico Golde and Andreas Krennmair * URL : http://www.ngolde.de/w3bfukk0r.html * License : MIT Pr

Re: Refactoring the Debtags web interface

2009-02-22 Thread Ben Finney
Enrico Zini writes: > About authenticated access: > > - I do not want to maintain another user/password database: this > should be done with Openid I heartily applaud this decision. > and a whitelist of identity providers that every DD can easily use > (like alioth or debian) What of those

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Jörg Sommer
Manoj Srivastava wrote: > On Sun, Feb 22 2009, Jörg Sommer wrote: >> Frank Küster wrote: >>> Jörg Sommer wrote: >>> Right, but when I hook into apt-get, I can get the configuration file shipped with the packages. >>> >>> You cannot, since the very purpose of ucf is to give dpkg-conffi

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Jörg Sommer
Manoj Srivastava wrote: > On Sun, Feb 22 2009, Jörg Sommer wrote: >> Manoj Srivastava wrote: >>> On Sat, Feb 21 2009, Jörg Sommer wrote: Right, but when I hook into apt-get, I can get the configuration file shipped with the packages. But that has nothing to do with ucf. >>> >>>

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-22 Thread Russ Allbery
Just a couple of process notes. Sam Hartman writes: > I propose to upload a version of krb5 to unstable in about a week that > is basically identical to the krb5 in experimental. I will include some > debconf fixes, a news file, and other minor changes. See the > experimental branch of [2] for

Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-22 Thread Sam Hartman
[There are some questions at the end; comments would be greatly appreciated on the questions if you have ever been involved in the release process or library transitions before. This is my first big transition.] The libkrb53 package (providing the MIT Kerberos shared libraries) has been stable f

Re: Refactoring the Debtags web interface

2009-02-22 Thread Enrico Zini
On Sun, Feb 22, 2009 at 04:32:06PM -0600, Raphael Geissert wrote: > Enrico Zini wrote: > [...] > > - I do not want to maintain another user/password database: this should > >be done with Openid and a whitelist of identity providers that every > >DD can easily use (like alioth or debian) >

Re: Refactoring the Debtags web interface

2009-02-22 Thread Erich Schubert
Hi, > > Why not use the DDs and DMs keyrings? just make them sign a given random > token and submit it. Debtags used to have a very liberal contribution policy - anonymous - and that helped a lot getting the intial data in. It has always been a goal to make contributing to Debtags as easy as poss

Bug#516659: ITP: w3bfukk0r -- scan webservers for hidden directories (forced browsing)

2009-02-22 Thread Maximilian Gaß
Package: wnpp Severity: wishlist Owner: "Maximilian Gaß" * Package name: w3bfukk0r Version : 0.2 Upstream Author : Nico Golde and Andreas Krennmair * URL : http://www.ngolde.de/w3bfukk0r.html * License : MIT Programming Lang: C Description : scan webse

Re: Refactoring the Debtags web interface

2009-02-22 Thread Raphael Geissert
Enrico Zini wrote: [...] > > - I do not want to maintain another user/password database: this should >be done with Openid and a whitelist of identity providers that every >DD can easily use (like alioth or debian) > Why not use the DDs and DMs keyrings? just make them sign a given rando

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Manoj Srivastava
On Sun, Feb 22 2009, Jörg Sommer wrote: > Manoj Srivastava wrote: >> On Sat, Feb 21 2009, Jörg Sommer wrote: >>> >>> Right, but when I hook into apt-get, I can get the configuration file >>> shipped with the packages. But that has nothing to do with ucf. >> >> What does "hook into apt-get

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Manoj Srivastava
On Sun, Feb 22 2009, Jörg Sommer wrote: > Hi Frank, > > Frank Küster wrote: >> Jörg Sommer wrote: >> >>> Right, but when I hook into apt-get, I can get the configuration file >>> shipped with the packages. >> >> You cannot, since the very purpose of ucf is to give dpkg-conffile-like >> behavior

Bug#516629: ITP: pgocaml -- OCaml type-safe bindings for PostgreSQL

2009-02-22 Thread Guillaume Yziquel
Package: wnpp Severity: wishlist Owner: Guillaume Yziquel * Package name: pgocaml Version : 1.1 Upstream Author : Richard W.M. Jones * URL : http://developer.berlios.de/projects/pgocaml/ * License : LGPL Programming Lang: OCaml Description : OCaml typ

Bug#516627: ITP: fudgit -- A double-precision multi-purpose fitting program

2009-02-22 Thread Jan Hendrik den Besten
Package: wnpp Severity: wishlist Owner: Jan Hendrik den Besten * Package name: fudgit Version : 2.43-gudjon Upstream Author : Jan Hendrik den Besten * URL : http://www.bbphotonics.eu/fudgit * License : GPL Programming Lang: C Description : A double-pr

Bug#516585: RFH: alsa-lib

2009-02-22 Thread Andreas Metzler
On 2009-02-22 Elimar Riesebieter wrote: > * Andreas Metzler [090222 17:42 +0100] >> On 2009-02-22 Elimar Riesebieter wrote: [...] >>> I want to prepare alsa-lib 1.0.19 for upload. Building alsa-lib on i386 and >>> amd64 gives: >>> ... >>> checking for strip... strip >>> checking for cross-compile

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Jörg Sommer
Hi Frank, Frank Küster wrote: > Jörg Sommer wrote: > >> Right, but when I hook into apt-get, I can get the configuration file >> shipped with the packages. > > You cannot, since the very purpose of ucf is to give dpkg-conffile-like > behavior for configuration files *not* shipped in the package

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Jörg Sommer
Manoj Srivastava wrote: > On Sat, Feb 21 2009, Jörg Sommer wrote: >> >> Right, but when I hook into apt-get, I can get the configuration file >> shipped with the packages. But that has nothing to do with ucf. > > What does "hook into apt-get" mean? I use the hooks Pre-Install-Pkgs and Pos

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Jörg Sommer
Hi Steve, Steve Langasek wrote: > On Sat, Feb 21, 2009 at 11:09:52PM +, Jörg Sommer wrote: >> save_original >> merge_with_current >> export UCF_FORCE_CONFFOLD=1 >> ucf.etcgit "$@" > > So this will leave the ucf db with a horribly incorrect view Which bit in ucf's database would become invali

Re: Refactoring the Debtags web interface

2009-02-22 Thread Andreas Tille
On Sun, 22 Feb 2009, Enrico Zini wrote: - workflow changes: - form subcommittees by broad topics: "The Gnome Guys", "The KDE Guys", "The Web Developers", "The Photographers" and so on, and give them the ultimate say on a set of tags, including being able to say "these packages

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Manoj Srivastava
On Sun, Feb 22 2009, Vincent Danjean wrote: > Manoj Srivastava wrote: >> I think the correct thing for the wrapper to do is >> a) change branch to the upstram_version_branch, and commit the new >> upstream. >> b) Change back to the local branch >> c) run ucf and let the user do the

Bug#516585: RFH: alsa-lib

2009-02-22 Thread Andreas Metzler
On 2009-02-22 Elimar Riesebieter wrote: > Package: wnpp > Severity: normal > Hi Debian ALSA developers, > I want to prepare alsa-lib 1.0.19 for upload. Building alsa-lib on i386 and > amd64 gives: > ... > checking for strip... strip > checking for cross-compiler... i486-i486-pc-linux-gnu-gcc > c

Refactoring the Debtags web interface

2009-02-22 Thread Enrico Zini
Hello, I've started to ponder a decent redesign of the Debtags web interface, that will be hosted at debtags.debian.net. I'd like to post here my intentions, as a sort of RFC. Comments are welcome. New features that I think are needed: - workflow changes: - form subcommittees by broad top

Re: Post-Lenny discussion on packages with external (potentially non-free) dependencies

2009-02-22 Thread Luk Claes
Josselin Mouette wrote: > Le mardi 17 février 2009 à 00:31 -0500, Michael S. Gilbert a écrit : >> 2. Components of the package may stop working in the midst of a >> stable release's lifetime > > This is a problem that affects much more than this kind of packages. All > packages relying on an exte

Re: Bug#516545: ITP: eprover -- The Equational Theorem Prover E

2009-02-22 Thread Guus Sliepen
On Sun, Feb 22, 2009 at 09:57:04AM +0100, Petr Pudlak wrote: > * Package name: eprover > Description : The Equational Theorem Prover E That is not a description, that is just the name spelled out. A better description would be "equational theorem prover". > E is an automated equational

Bug#516585: RFH: alsa-lib

2009-02-22 Thread Elimar Riesebieter
Package: wnpp Severity: normal Hi Debian ALSA developers, I want to prepare alsa-lib 1.0.19 for upload. Building alsa-lib on i386 and amd64 gives: ... checking for strip... strip checking for cross-compiler... i486-i486-pc-linux-gnu-gcc checking for i486-linux-gnu-gcc... i486-i486-pc-linux-gnu-gc

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Frank Küster
Jörg Sommer wrote: > Right, but when I hook into apt-get, I can get the configuration file > shipped with the packages. You cannot, since the very purpose of ucf is to give dpkg-conffile-like behavior for configuration files *not* shipped in the package. Regards, Frank -- Frank Küster Debian

Re: ucf: Diversion of /u/b/ucf by etcgit

2009-02-22 Thread Vincent Danjean
Manoj Srivastava wrote: > I think the correct thing for the wrapper to do is > a) change branch to the upstram_version_branch, and commit the new > upstream. > b) Change back to the local branch > c) run ucf and let the user do their thing (replace, not replace, edit, > whatever

Re: squeeze and the future of the alpha port, redux

2009-02-22 Thread Michael Cree
Steve Langasek wrote: Also unsurprisingly (to me, given my observations that had led to the post in the first place), no one else has yet stepped up to be an alpha porter for squeeze. What is involved in this job? What is the time commitment? What is the needed experience? Up to now I

Bug#516545: ITP: eprover -- The Equational Theorem Prover E

2009-02-22 Thread Petr Pudlak
Package: wnpp Severity: wishlist Owner: Petr Pudlak * Package name: eprover Version : 1.0.004 Upstream Author : Stephan Schulz * URL : http://www.eprover.org/ * License : GPL-2 Programming Lang: C Description : The Equational Theorem Prover E E is an