Debian should move away from MD5 (and at best also from SHA1) (in secure APT and friends)

2012-10-10 Thread Christoph Anton Mitterer
Hi folks. AFAICS, secure APT and similar things (e.g. dpkg's file hash sums) still use even MD5. Wouldn't it make sense to start discussions about moving to the "strongest" possible? Or, like in the case of package files (dsc and friends) make a policy of verifying all hashes, and fail if any si

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-10 Thread Lucas Nussbaum
On 11/10/12 at 05:50 +, Bart Martens wrote: > | Anyone can mark a package as orphaned after the following steps have been > | completed : Someone submits an "intent to orphan" (ITO) in the bts with > an > | explanation of why he/she thinks that the package needs a new > maintainer.

Re: Bug#690183: ITP: apt-fast -- shellscript wrapper for apt-get or aptitude

2012-10-10 Thread Marco d'Itri
On Oct 11, Hideki Yamane wrote: > > apt-fast is a shellscript wrapper for apt-get that can drastically improve > > apt > > download times by downloading packages in parallel, with multiple > > connections > > per package. > well, isn't it huge load for repository servers? As a mirror operator

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-10 Thread Bart Martens
Hi Lucas, Thanks for coming back on this. On Thu, Oct 11, 2012 at 12:04:33AM +0200, Lucas Nussbaum wrote: > On 28/09/12 at 18:48 +0200, Arno Töll wrote: > > Hello, > > > > we may all agree that the maintenance of some (many?) packages in Debian > > is in a unclear situation. There is a transient

Re: Bug#690183: ITP: apt-fast -- shellscript wrapper for apt-get or aptitude

2012-10-10 Thread Hideki Yamane
On Wed, 10 Oct 2012 23:53:31 +0200 Dominique Lasserre wrote: > * Package name: apt-fast > apt-fast is a shellscript wrapper for apt-get that can drastically improve apt > download times by downloading packages in parallel, with multiple connections > per package. well, isn't it huge load fo

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-10 Thread Michael Gilbert
On Wed, Oct 10, 2012 at 6:04 PM, Lucas Nussbaum wrote: > So, reading this thread (which was surprisingly quiet, given the topic), > it seems that everybody agrees that such a procedure would be a good > thing (nobody had fundamental concerns). But now we have two proposed > procedures: > - one wh

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-10 Thread Lucas Nussbaum
On 28/09/12 at 18:48 +0200, Arno Töll wrote: > Hello, > > we may all agree that the maintenance of some (many?) packages in Debian > is in a unclear situation. There is a transient state, where people are > interested to bring a package in shape but the strong role of a package > maintainer in Deb

Bug#690183: ITP: apt-fast -- shellscript wrapper for apt-get or aptitude

2012-10-10 Thread Dominique Lasserre
Package: wnpp Severity: wishlist Owner: Dominique Lasserre * Package name: apt-fast Version : 0.7.6 Upstream Authors: Matt Parnell, Dominique Lasserre * URL : https://github.com/ilikenwf/apt-fast.git * License : GPL-3+ Programming Lang: Bash Description

Bug#690177: ITP: python-mzml -- mzML mass spectrometric data parsing

2012-10-10 Thread Filippo Rusconi
Package: wnpp Severity: wishlist Owner: Filippo Rusconi * Package name: python-mzml Version : 0.7.4 Upstream Author : Christian Fufezan * URL : http://pymzml.github.com/ * License : LGPL Programming Lang: Python Description : mzML mass spectrometric da

Question Regarding A Resource For Prospective Students - Follow-up

2012-10-10 Thread Lillian Clark
Hi there, I wanted to follow up with you and make sure you had received my email I sent a little bit ago regarding my educational resource. I was hoping to get in touch with someone who is responsible for the resources section as my project would be a beneficial addition for others to refer to

Bug#690159: ITP: nikola -- Static Site and Blog Generator

2012-10-10 Thread Agustin Henze
Package: wnpp Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org Package name: nikola Version: 4.0.3 Upstream Author: 2012, Roberto Alsina URL: http://nikola.ralsina.com.ar License: GPL-3 Description: Static Site and Blog

Bug#690117: ITP: tlsdate -- secure parasitic rdate replacement

2012-10-10 Thread Kartik Mistry
Package: wnpp Severity: wishlist Owner: Kartik Mistry * Package name: tlsdate Version : x.y.z Upstream Author : Jacob Appelbaum , Christian Grothoff * URL : 0.0.1 * License : BSD Programming Lang: C Description : secure parasitic rd