Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Ihor Antonov
On Monday, 27 April 2020 17:11:21 PDT Jeremy Stanley wrote: > On 2020-04-27 16:28:39 -0700 (-0700), Ihor Antonov wrote: > > On Friday, 24 April 2020 14:13:52 PDT Bernd Zeimetz wrote: > > > > The subject of this thread was click-baity enough but this thread appears > > to be a wonderful bike-sheddi

Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Wookey
On 2020-04-26 14:07 +0200, Bernd Zeimetz wrote: > Hi, > > Google Authenticator is a software-based authenticator by Google that > implements two-step verification services using the Time-based One-time > Password Algorithm (TOTP; specified in RFC 6238) and HMAC-based One-time > Password algorithm

Bug#959012: ITP: golang-github-moby-sys -- Library to parse mount info and mount filesystems

2020-04-27 Thread Shengjing Zhu
Package: wnpp Severity: wishlist Owner: Shengjing Zhu * Package name: golang-github-moby-sys Version : 0.0~git20200320.6154f11-1 Upstream Author : Kir Kolyshkin * URL : https://github.com/moby/sys * License : Apache-2.0 Programming Lang: Go Description

Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Jeremy Stanley
On 2020-04-27 16:28:39 -0700 (-0700), Ihor Antonov wrote: > On Friday, 24 April 2020 14:13:52 PDT Bernd Zeimetz wrote: > > The subject of this thread was click-baity enough but this thread appears to > be a wonderful bike-shedding with MFA flavor. > > Please help me find the original thread, as

Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Ihor Antonov
On Friday, 24 April 2020 14:13:52 PDT Bernd Zeimetz wrote: The subject of this thread was click-baity enough but this thread appears to be a wonderful bike-shedding with MFA flavor. Please help me find the original thread, as my Salsa account is still "-guest" and I want no more of it. Thanks

Re: Third-party forks of packaged projects

2020-04-27 Thread Thomas Goirand
On 4/27/20 10:34 PM, Kyle Edwards wrote: > On Sat, 2020-04-25 at 20:31 +0200, Thomas Goirand wrote: >> If the library you need to package isn't needed by any other package, >> simply apply the needed patch and upload. Even better if it's only a >> build-dependency, in which case it wont ever be a p

Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Moritz Mühlenhoff
Russ Allbery schrieb: > Vincent Bernat writes: > >> This is not how this is implemented. I am using GitHub and GitLab with >> 2FA enabled and I am rarely asked to enter any token. Once you get >> authenticated on a device, it remains for a long time. > > Pretty much every time I go to salsa.debia

Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Thomas Goirand
On 4/27/20 7:34 PM, Russ Allbery wrote: > Thomas Goirand writes: > >> Except that SQRL has no password involved, just crypto. > >> Since you are too lazy to read on, let me do a tl;dr. Simply put, the >> client holds a private key. From that private key, a new one is derived >> doing a HMAC of t

Re: Third-party forks of packaged projects

2020-04-27 Thread Kyle Edwards
On Sat, 2020-04-25 at 20:31 +0200, Thomas Goirand wrote: > If the library you need to package isn't needed by any other package, > simply apply the needed patch and upload. Even better if it's only a > build-dependency, in which case it wont ever be a problem. This brings up an interesting questio

Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Russ Allbery
Thomas Goirand writes: > Except that SQRL has no password involved, just crypto. > Since you are too lazy to read on, let me do a tl;dr. Simply put, the > client holds a private key. From that private key, a new one is derived > doing a HMAC of that key with the domain, meaning a client has a un

Bug#958984: ITP: python-drf-spectacular -- OpenAPI 3 schema generation for Django REST framework

2020-04-27 Thread Michael Fladischer
Package: wnpp Severity: wishlist Owner: Michael Fladischer -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * Package name: python-drf-spectacular Version : 0.9.1 Upstream Author : T. Franzel * URL : https://github.com/tfranzel/drf-spectacular/ * License : BSD

Quick Bits: ML-Policy Updates; Recent Progress of Deep Learning Packaging

2020-04-27 Thread Mo Zhou
Hi fellow devs, Recently an increasing about of preprint papers studying COVID-19 with machine leanring techniques have been published, which reminded me of the importance of machine learning techniques. (1) Updates to ML-Policy [1] Sidenote: Projects such as https://github.com/IliasPa

Re: Salsa update: no more "-guest" and more

2020-04-27 Thread Thomas Goirand
On 4/27/20 2:19 AM, Russ Allbery wrote: > Thomas Goirand writes: > >> Now, if you want something safer, maybe we could implement something >> that involves crypto a smarter way, like SQRL, so we avoid storing any >> password in Salsa, even hashed: >> https://www.grc.com/sqrl/sqrl.htm > > I don't