Re: popularity-contest and gpg

On Fri, Mar 28, 2025 at 12:44:47AM +0200, Peter Pentchev wrote: > On Thu, Mar 27, 2025 at 10:46:23PM +0100, Bill Allombert wrote: > > On Thu, Mar 27, 2025 at 11:22:50PM +0200, Peter Pentchev wrote: > > > > I am among the people who have moved towards the Sequoia family of > > > > cryptographic tool

Re: popularity-contest and gpg

On Thu, Mar 27, 2025 at 10:46:23PM +0100, Bill Allombert wrote: > On Thu, Mar 27, 2025 at 11:22:50PM +0200, Peter Pentchev wrote: > > > I am among the people who have moved towards the Sequoia family of > > > cryptographic tools; in particular, sqop (a Sequoia implementation of > > > the SOP comman

Re: popularity-contest and gpg

On Thu, Mar 27, 2025 at 11:22:50PM +0200, Peter Pentchev wrote: > > I am among the people who have moved towards the Sequoia family of > > cryptographic tools; in particular, sqop (a Sequoia implementation of > > the SOP command-line interface) seems to work: > > > > [roam@straylight ~]$ echo

Re: popularity-contest and gpg

On Thu, Mar 27, 2025 at 08:46:53PM +0100, Simon Josefsson wrote: > Bill Allombert writes: > > > Dear Debian developpers, > > > > popularity-contest relies on /usr/bin/gpg for encrypting files. > > (it cannot use gpgv which does not provide encryption). > > Why does it need to encrypt data? > >

Re: popularity-contest and gpg

On Thu, Mar 27, 2025 at 11:05:11PM +0200, Peter Pentchev wrote: > On Thu, Mar 27, 2025 at 07:45:12PM +0100, Bill Allombert wrote: > > Dear Debian developpers, > > > > popularity-contest relies on /usr/bin/gpg for encrypting files. > > (it cannot use gpgv which does not provide encryption). > > >

Re: popularity-contest and gpg

On Thu, Mar 27, 2025 at 07:45:12PM +0100, Bill Allombert wrote: > Dear Debian developpers, > > popularity-contest relies on /usr/bin/gpg for encrypting files. > (it cannot use gpgv which does not provide encryption). > > By design popularity-contest needs to have as few non-essential > dependenci

Re: popularity-contest and gpg

On Thu, Mar 27, 2025 at 07:45:12PM +0100, Bill Allombert wrote: > Dear Debian developpers, > > popularity-contest relies on /usr/bin/gpg for encrypting files. > (it cannot use gpgv which does not provide encryption). > > By design popularity-contest needs to have as few non-essential > dependenci

Re: popularity-contest and gpg

Jeremy Stanley writes: > On 2025-03-27 20:57:52 +0100 (+0100), Petter Reinholdtsen wrote: >> [Simon Josefsson] >> > Why does it need to encrypt data? >> >> To protect the users privacy. >> >> > Can't we just send telemetry over https like everyone else? >> >> Not all popcon submissions go over ht

Re: popularity-contest and gpg

On 2025-03-27 20:57:52 +0100 (+0100), Petter Reinholdtsen wrote: [Simon Josefsson] > Why does it need to encrypt data? To protect the users privacy. > Can't we just send telemetry over https like everyone else? Not all popcon submissions go over https, the fallback mechanism is SMTP. Also,

Re: popularity-contest and gpg

Bill Allombert writes: > Dear Debian developpers, > > popularity-contest relies on /usr/bin/gpg for encrypting files. > (it cannot use gpgv which does not provide encryption). Why does it need to encrypt data? Can't we just send telemetry over https like everyone else? For people who are uncom

Re: popularity-contest and gpg

[Simon Josefsson] > Why does it need to encrypt data? To protect the users privacy. > Can't we just send telemetry over https like everyone else? Not all popcon submissions go over https, the fallback mechanism is SMTP. -- Happy hacking Petter Reinholdtsen

Re: popularity-contest: support for XB-Popcon-Reports: no

On Thu, May 05, 2022 at 07:15:06AM +0200, Tollef Fog Heen wrote: > ]] Bill Allombert > > > The rationale is that the only info really leaked is the package name, > > so it only make sense to hide a package if every system that have it > > installed are also hiding it, so it is better to make it a

Re: popularity-contest: support for XB-Popcon-Reports: no

]] Bill Allombert > The rationale is that the only info really leaked is the package name, > so it only make sense to hide a package if every system that have it > installed are also hiding it, so it is better to make it a property > of the package than of the system. I think it'd make more sens

Re: popularity-contest: support for XB-Popcon-Reports: no

On 04/05/2022 19:43, Russ Allbery wrote: I don't know if it currently does this, but it would be useful for popcon to show counts for public third-party packages that aren't in the archive. See https://popcon.debian.org/unknown/by_recent Cheers, Peter

Re: popularity-contest: support for XB-Popcon-Reports: no

Philipp Kern writes: > I like the idea, especially for organizations who know what they are > doing[1]. I just fear that it won't actually solve your denylisting > problem at hand. People will keep not specifying it. Can't popcon go and > just accept reports for packages in the archive somehow?

Re: popularity-contest: support for XB-Popcon-Reports: no

Hi, On 2022-05-04 18:21, Bill Allombert wrote: I plan to add support for 'XB-Popcon-Reports: no' to popularity-contest. This allows to build packages with private names that will not be reported to popcon, by adding 'XB-Popcon-Reports: no' to debian/control. This must not used by packages in

Re: popularity-contest: support for XB-Popcon-Reports: no

Le mercredi 04 mai 2022 à 10:12 -0700, Russ Allbery a écrit : > Bill Allombert writes: > > > I plan to add support for 'XB-Popcon-Reports: no' to popularity- > > contest. > > This allows to build packages with private names that will not be > > reported to popcon, by adding 'XB-Popcon-Reports: no

Re: popularity-contest: support for XB-Popcon-Reports: no

Bill Allombert writes: > I plan to add support for 'XB-Popcon-Reports: no' to popularity-contest. > This allows to build packages with private names that will not be > reported to popcon, by adding 'XB-Popcon-Reports: no' to debian/control. > This must not used by packages in the debian archive,

Re: popularity-contest reachs 200000 submitters!

Zlatan Todoric dijo [Sat, Jun 24, 2017 at 01:05:10AM +0200]: > > Reports by versions of popcon: > > > > 1.46 (lenny) : 2925 > > 1.49 (squeeze) : 9600 > > 1.56 (wheezy) : 33450 > > 1.61 (jessie) : 1

Re: popularity-contest reachs 200000 submitters!

On 06/24/2017 12:11 AM, Bill Allombert wrote: > Dear developpers, > > With the release of stretch, popularity-contest has reached 20 > submitters, see . > > Some stats: > > Reports by architectures: > > amd64 submissions: 160428 > i386 submissions: 37979

Re: Popularity-contest http POST: call for testers

On Sun, 6 Mar 2005 04:19:53 -0600 Bill Allombert <[EMAIL PROTECTED]> wrote: > On Sat, Mar 05, 2005 at 09:17:22PM -0600, Jacob S wrote: > > On Sun, 6 Mar 2005 00:48:21 +0100 > > Bill Allombert <[EMAIL PROTECTED]> wrote: > > > > > Hello developers, > > > > > > We have plans to add support in popul

Re: Popularity-contest http POST: call for testers

On Sunday 06 March 2005 05:55 am, Bill Allombert wrote: > Not yet, because it does not report to the normal popcon account so I am > afraid that look a bit sneaky to just drop it in experimental without > warning users. Well, the idea would be to post here AND upload it to experimental, so peop

Re: Popularity-contest http POST: call for testers

On Sat, Mar 05, 2005 at 09:05:49PM -0500, Daniel Burrows wrote: > On Saturday 05 March 2005 06:48 pm, Bill Allombert wrote: > > For that purpose, I have made an experimental popularity-contest package > > that use both smtp and http. Please find it here: > > Have you considered uploading it to e

Re: Popularity-contest http POST: call for testers

On Sat, Mar 05, 2005 at 09:17:22PM -0600, Jacob S wrote: > On Sun, 6 Mar 2005 00:48:21 +0100 > Bill Allombert <[EMAIL PROTECTED]> wrote: > > > Hello developers, > > > > We have plans to add support in popularity-contest to send the > > report through http POST. Both the server part an the client

Re: Popularity-contest http POST: call for testers

On Sun, 6 Mar 2005 00:48:21 +0100 Bill Allombert <[EMAIL PROTECTED]> wrote: > Hello developers, > > We have plans to add support in popularity-contest to send the > report through http POST. Both the server part an the client part have > been developed. The last issue is to actually use it in th

Re: Popularity-contest http POST: call for testers

On Saturday 05 March 2005 06:48 pm, Bill Allombert wrote: > For that purpose, I have made an experimental popularity-contest package > that use both smtp and http. Please find it here: Have you considered uploading it to experimental? Daniel -- /--- Daniel Burrows <[EMAIL PR

Re: Popularity-contest http POST: call for testers

On Sun, 2005-03-06 at 00:48 +0100, Bill Allombert wrote: > Hello developers, > > We have plans to add support in popularity-contest to send the > report through http POST. Both the server part an the client part have > been developed. The last issue is to actually use it in the cron job > and see

Re: popularity-contest

[Gürkan Sengün] > I could not reach [EMAIL PROTECTED] which is mentioned > on the following page: > http://people.debian.org/~apenwarr/popcon/ Are you aware that the popcon project are now on alioth? https://alioth.debian.org/projects/popcon/> The work stopped up a bit because of the break-in, b

Re: popularity-contest

On Tue, Dec 02, 2003 at 11:21:10PM +0100, Gürkan Sengün wrote: > I could not reach [EMAIL PROTECTED] which is mentioned > on the following page: > http://people.debian.org/~apenwarr/popcon/ Avery is a little busy right now. But he can probably be reached at [EMAIL PROTECTED] Simon