Re: (seemingly) declinging bug report numbers

2012-10-14 Thread Tollef Fog Heen
]] Christoph Anton Mitterer [...] > In the case of *buntu... well to be honest I don't really see a reason > unless someone wanted to create a company behind his distro, which > wasn't possible with Debian. Do you remember the sorry state of, for instance hotplugging of devices and the utterly

Re: (seemingly) declinging bug report numbers

2012-10-14 Thread Russ Allbery
Christoph Anton Mitterer writes: > When Debian takes software from upstreams, it's majorly a case of making > a collection (of course with adaptions). > When a derivative take Debian, it's - compared to single software - more > like forking it. Except it's not, because that's not what Ubuntu do

Re: (seemingly) declinging bug report numbers

2012-10-14 Thread Christoph Anton Mitterer
On Sat, 2012-10-13 at 20:35 +0200, Wouter Verhelst wrote: > No. However, Debian is an upstream to many other distributions, just as > upstream developers are to us. Don't think that's true. When Debian takes software from upstreams, it's majorly a case of making a collection (of course with adapti

Re: Debian should move away from MD5 (and at best also from SHA1) (in secure APT and friends)

2012-10-14 Thread Christoph Anton Mitterer
On Fri, 2012-10-12 at 16:52 -0400, Michael Gilbert wrote: > On Fri, Oct 12, 2012 at 4:45 PM, Christoph Anton Mitterer wrote: > > I wasn't talking about such an impossible task,... but there speaks > > nothing against relatively easy things,... like securing all of our > > package repository infrast

Re: Debian should move away from MD5 (and at best also from SHA1) (in secure APT and friends)

2012-10-14 Thread Christoph Anton Mitterer
On Sun, 2012-10-14 at 17:25 +0600, Andrey Rahmatullin wrote: > """ > debsums is intended primarily as a way of determining what installed files > have been locally modified by the administrator or damaged by media errors > and is of limited use as a security tool. > > If you are looking for an int

Bug#690496: ITP: libjs-jstat -- A JavaScript statistical library

2012-10-14 Thread Jeffrin Jose Thalakkottoor
Package: wnpp Severity: wishlist Owner: Jeffrin Jose Thalakkottoor * Package name: libjs-jstat Version : 1.0.0 Upstream Author : John Resig * URL : http://www.jstat.org/ * License : MIT Programming Lang: JavaScript Description : A JavaScript statistica

Bug#690489: ITP: libjs-jstat -- A JavaScript statistical library

2012-10-14 Thread Jeffrin Jose Thalakkottoor
Package: wnpp Severity: wishlist Owner: Jeffrin Jose Thalakkottoor * Package name: libjs-jstat Version : x.y.z Upstream Author : Name * URL : http://www.example.org/ * License : (GPL, LGPL, BSD, MIT/X, etc.) Programming Lang: (C, C++, C#, Perl, Python, etc.)

Re: Salvaging packages for fun and profit: A proposal

2012-10-14 Thread Stefano Zacchiroli
[ dropping "hijacking" from the subject, as that's not what this thread is about :) ] On Sun, Oct 14, 2012 at 08:30:26AM +, Bart Martens wrote: > The good thing is that everyone in this thread so far seems to agree that some > packages in Debian need salvaging by a new maintainer, and that w

Bug#690451: ITP: libmongodbx-class-perl -- Flexible ORM for MongoDB databases

2012-10-14 Thread Dominique Dumont
Package: wnpp Owner: Dominique Dumont Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org,debian-p...@lists.debian.org * Package name: libmongodbx-class-perl Version : 1.0 Upstream Author : Ido Perlmuter * URL : http://search.cpan.org/dist/MongoDBx-Class/ *

Re: Debian should move away from MD5 (and at best also from SHA1) (in secure APT and friends)

2012-10-14 Thread Andrey Rahmatullin
On Sun, Oct 14, 2012 at 01:14:19PM +0200, Bernhard R. Link wrote: > > > part at all) will only weaken security. So I think what you say is an > > > argument for keeping md5sum, so that noone think they can use that > > > information for security. > > > > This argument is based on the incorrect assu

Re: Debian should move away from MD5 (and at best also from SHA1) (in secure APT and friends)

2012-10-14 Thread Bernhard R. Link
* Wouter Verhelst [121013 10:56]: > On Fri, Oct 12, 2012 at 09:17:32AM +0200, Bernhard R. Link wrote: > > part at all) will only weaken security. So I think what you say is an > > argument for keeping md5sum, so that noone think they can use that > > information for security. > > This argument is

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-14 Thread Bart Martens
On Thu, Oct 11, 2012 at 10:21:59AM +0200, Gergely Nagy wrote: > Lucas Nussbaum writes: > > I'm not sure about this delay. This procedure should be used for > > uncontroversial cases, where orphaning is obviously the right choice. > > I strongly agree here. A package that's a salvaging candidate h

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-14 Thread Bart Martens
On Thu, Oct 11, 2012 at 08:20:36AM +0200, Lucas Nussbaum wrote: > On 11/10/12 at 05:50 +, Bart Martens wrote: > > And the maintainer does not respond within one month after the the third > > second. > > I'm not sure about this delay. This procedure should be used for > uncontroversial cases,

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-14 Thread Bart Martens
On Thu, Oct 11, 2012 at 11:27:03AM +0200, Arno Töll wrote: > Hi, > > On 11.10.2012 07:50, Bart Martens wrote: > >> - the submitter of the "intent to orphan" bug must Cc > >> debian...@lists.debian.org, and file the bug with severity:serious (this > >> was part of the "criterias" proposal). >

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-14 Thread Bart Martens
On Thu, Oct 11, 2012 at 09:14:04AM -0400, Scott Kitterman wrote: > On Thursday, October 11, 2012 06:44:53 PM Charles Plessy wrote: > ... > > - I am not found of the voting procedure, and would rather propose to > > follow a similar process as for the modification of the Policy and the > > Develope

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-14 Thread Bart Martens
Hi Charles, On Thu, Oct 11, 2012 at 06:44:53PM +0900, Charles Plessy wrote: > here are some comments. > > - It would be more straight to the point to submit an "Intend To Salvage" > (ITS) and >focus on such takeovers, because merly orphaning the package does not > guarantee >that it wi