Re: Red team attacks vs. cracking

2006-05-30 Thread Adam Borowski
On Tue, May 30, 2006 at 01:57:18PM -0700, Paul Johnson wrote: > On Tuesday 30 May 2006 13:02, Adam Borowski wrote: > > On Tue, May 30, 2006 at 12:20:14PM -0700, Paul Johnson wrote: > > > Even the guy at 7-Eleven has the big book of north american ID cards with > > > pictures and descriptions of wha

Re: Real Life hits: need to give up packages for adoption

2006-05-30 Thread Tilman Koschnick
On Tue, 2006-05-30 at 20:48 +0200, Christoph Haas wrote: > * svn-upgrade > > Upgrading from a new upstream tarball has never worked here. Matthijs > Mohlmann and I are maintaining the "pdns" (PowerDNS) package in a > Subversion repository. That software isn't trivial but it's also no > rocket scie

Re: Red team attacks vs. cracking

2006-05-30 Thread Javier Fernández-Sanguino Peña
On Tue, May 30, 2006 at 01:40:39PM -0400, Joe Smith wrote: > Is this really a bad thing? He proved that KSP are bad for the web of trust. > A legitimate attacker could abuse the KSP just as easilly as Martin, but > would result in actual damage, and would most likely not have been caught. Ask your

adding ddccontrol to debian

2006-05-30 Thread Fabrice Lorrain
Hi, In the last 5 months, I encountered twice LCD flat screens without hardware control or with half functionnal hardware control. The proper way to configure those screens was with software through the ddc protocol. The only software I'm aware of working under linux is ddccontrol [1] which

Re: adding ddccontrol to debian

2006-05-30 Thread Roberto C. Sanchez
Fabrice Lorrain wrote: > Hi, > > In the last 5 months, I encountered twice LCD flat screens without > hardware control or with half functionnal hardware control. > > The proper way to configure those screens was with software through the > ddc protocol. The only software I'm aware of working unde

Re: Renaming a package

2006-05-30 Thread Steve Langasek
On Tue, May 30, 2006 at 11:22:51AM +0200, Simon Richter wrote: > Steve Langasek schrieb: > >>Package: oldpkg > >>Depends: newpkg > >>Description: transitional dummy package > >>Package: newpkg > >>Replaces: oldpkg > >>Conflicts: oldpkg > >>Description: ... > >*NO* *NO* *NO* *NO* *NO*. Look clo

Re: Red team attacks vs. cracking

2006-05-30 Thread Tyler MacDonald
Javier Fern?ndez-Sanguino Pe?a <[EMAIL PROTECTED]> wrote: > > Is this really a bad thing? He proved that KSP are bad for the web of trust. > > A legitimate attacker could abuse the KSP just as easilly as Martin, but > > would result in actual damage, and would most likely not have been caught. > >

Re: Red team attacks vs. cracking

2006-05-30 Thread Steve Langasek
On Tue, May 30, 2006 at 03:11:23PM -0700, Paul Johnson wrote: > On Tuesday 30 May 2006 14:26, Steve Langasek wrote: > > On Tue, May 30, 2006 at 01:57:18PM -0700, Paul Johnson wrote: > > > On Tuesday 30 May 2006 13:02, Adam Borowski wrote: > > > > See, if you visit a bazaar, I bet a helpful guy with

Re: Red team attacks vs. cracking

2006-05-30 Thread Paul Johnson
On Tuesday 30 May 2006 16:02, Javier Fernández-Sanguino Peña wrote: > We are not talking about national security or public safety here, if Martin > wanted to prove that attacks against KSPs can happen he could have managed > his attack in an open way (as Manoj said "contact management and get their

Re: bits from the release team: release goals, python, X.org, amd64, timeline

2006-05-30 Thread Fabrice Lorrain
Steve Langasek a écrit : On Tue, May 30, 2006 at 11:50:28PM +0200, Fabrice Lorrain wrote: What is the current status of nfsv4 in testing. What can we expect for etch ? - does people from debian kernel-team follow the current dev (CITI patch, krb5p support reintroduce in late 2.6.17 etc...) ? -

Re: Red team attacks vs. cracking

2006-05-30 Thread Jacob S
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 30 May 2006 15:09:25 -0700 Paul Johnson <[EMAIL PROTECTED]> wrote: > On Tuesday 30 May 2006 14:15, Linas Žvirblis wrote: > > Paul Johnson wrote: > > >> See, if you visit a bazaar, I bet a helpful guy with a Russian > > >> accent can sell you a

Re: [Debconf-discuss] list of valid documents for KSPs

2006-05-30 Thread Steve Langasek
On Tue, May 30, 2006 at 06:28:32AM -0500, Manoj Srivastava wrote: > Nothing that a general software developer can do to check an > ID is proof against a determined individual, we all assume that there > is a gentleman's agreement in place that such an attack is not > mounted. I assume n

Re: adding ddccontrol to debian

2006-05-30 Thread Fabrice Lorrain
Roberto C. Sanchez a écrit : Fabrice Lorrain wrote: Hi, In the last 5 months, I encountered twice LCD flat screens without hardware control or with half functionnal hardware control. The proper way to configure those screens was with software through the ddc protocol. The only software I'm aw

Bug#322762: marked as done (/usr/doc still exists (transition tracking bug))

2006-05-30 Thread Debian Bug Tracking System
Your message dated Tue, 30 May 2006 17:32:20 -0700 with message-id <[EMAIL PROTECTED]> and subject line Bug#322762: fixed in vgacardgames 1.3.1-14 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is

Re: adding ddccontrol to debian

2006-05-30 Thread Roberto C. Sanchez
Fabrice Lorrain wrote: > > Hi Roberto. > > Thanks a lot for the quick answer and your work on this package. > > @+, > Fab > No problem. -Roberto -- Roberto C. Sanchez http://familiasanchez.net/~roberto signature.asc Description: OpenPGP digital signature

Re: Red team attacks vs. cracking

2006-05-30 Thread Thomas Bushnell BSG
Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> writes: > On Tue, May 30, 2006 at 10:32:15AM -0700, Thomas Bushnell BSG wrote: >> I am actually quite ambivalent about whether I think what he did was >> wrong; I think to determine that I would need to read carefully what >> the KSP organizers sa

Re: Red team attacks vs. cracking

2006-05-30 Thread Henning Makholm
Scripsit Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> > I do agree with Manoj that this was *not* a legitimate experiment (i.e. > not a "red team" test) and that Martin *did* abuse our [0] trust [1] A KSP that depends on there being any pre-existing trust to abuse is *completely worthless*

Re: adding ddccontrol to debian

2006-05-30 Thread Luc Verhaegen
On Wed, May 31, 2006 at 12:46:08AM +0200, Fabrice Lorrain wrote: > Hi, > > In the last 5 months, I encountered twice LCD flat screens without > hardware control or with half functionnal hardware control. > > The proper way to configure those screens was with software through the > ddc protocol.

Re: [Debconf-discuss] list of valid documents for KSPs

2006-05-30 Thread Henning Makholm
Scripsit Manoj Srivastava <[EMAIL PROTECTED]> > Nothing that a general software developer can do to check an > ID is proof against a determined individual, we all assume that there > is a gentleman's agreement in place that such an attack is not > mounted. If you _really_ believed that

Re: Real Life hits: need to give up packages for adoption

2006-05-30 Thread Matthias Urlichs
Hi, thanks for the numerous offers and replies. I forgot to mention that most (if not all) of these are managed with git. I don't use dpatch or similar tools - managing patches is the SCM's job. The archives mostly are on netz.smurf.noris.de; if "your" package is not, and you're interested in wo

Re: Renaming a package

2006-05-30 Thread Mike Hommey
On Tue, May 30, 2006 at 04:12:31PM -0700, Steve Langasek <[EMAIL PROTECTED]> wrote: > > Hm, that used to be a "magic" combination that would let dpkg do the > > right thing. > > I've heard this stated before, but if it was ever true, it's definitely not > the case with apt (or with britney), and

Bug#369654: ITP: ttf-nafees -- nafees free OpenType Urdu fonts

2006-05-30 Thread Mohammed Adnène Trojette
Package: wnpp Severity: wishlist Owner: "Mohammed Adnène Trojette" <[EMAIL PROTECTED]> * Package name: ttf-nafees Version : 1.2 Upstream Author : Center for Research in Urdu Language Processing (CRULP, http://www.crulp.org/) * URL : http://www.crulp.org/nafeesWebNaskh.

Re: [Debconf-discuss] list of valid documents for KSPs

2006-05-30 Thread Theodore Tso
On Tue, May 30, 2006 at 07:49:34AM -0500, Manoj Srivastava wrote: > > What Martin Krafft showed you was, > > How do I know that person actually was Martin Krafft? So if you have no idea whether or not someone was Martin Krafft, how can you ask everyone to revoke all signatures for Martin

apt-update-stat.pl analyse changes in Debian software repository

2006-05-30 Thread Liu Yubao
The little Perl script can calculate how heavy a package depends on other packages and is depended by other packages, they are depicted by depends_score and rdepends_score. Another purpose (also my original purpose) is to analyse the changes in unstable version, so I can know whether it's safe to

Re: Package Selection for Debian Live

2006-05-30 Thread Pedro Macanas
- Original Message - From: "Daniel Baumann" <[EMAIL PROTECTED]> To: Cc: ; Sent: Tuesday, May 30, 2006 9:51 PM Subject: Package Selection for Debian Live [ crosspost to live, -devel and -edu; replies please to -devel ] Hi all, at the moment, we have two types of Live CD images:

<    1   2