Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Andreas Tille
On Tue, 26 Aug 2003, Joey Hess wrote: > Mark Howard wrote: > > galeon - GNOME web browser for advanced users > > Changes: > > galeon (1.3.7.20030825-1) experimental; urgency=low > > . > >* New CVS Checkout > >* Moved to experimental - galeon is not yet stable enough for a Debian > >

Re: A possible GFDL compromise

2003-08-27 Thread Fedor Zuev
On Tue, 26 Aug 2003, John Galt wrote: >On Mon, 25 Aug 2003, Fedor Zuev wrote: >>On Sun, 24 Aug 2003, Nathanael Nerode wrote: >>>Lack of forced distribution is not "censorship". Get a clue, or a >>>dictionary. >> >> Heh. >> >> "Why that ugly, non-free GPL license demand from me to >>di

Re: cpu usage, consideration of others, apt-listbugs

2003-08-27 Thread Branden Robinson
On Wed, Aug 27, 2003 at 05:58:24AM +0200, Josip Rodin wrote: > Well, correction, cgi.d.o does almost nothing these days. But lists.d.o > requires resources pretty much continuously, what with all the mhonarc, > glimpse, stats updates and users accessing web pages and its CGI scripts. > > And again

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Christian Marillat
Joey Hess <[EMAIL PROTECTED]> writes: > Mark Howard wrote: >> galeon - GNOME web browser for advanced users >> Changes: >> galeon (1.3.7.20030825-1) experimental; urgency=low >> . >>* New CVS Checkout >>* Moved to experimental - galeon is not yet stable enough for a Debian >>

[no subject]

2003-08-27 Thread dawood azimi
hi   you want to get it on   ,,, i got a good attitute and a fat cock,,, tell me what you want to do

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Andreas Tille
On Wed, 27 Aug 2003, Christian Marillat wrote: > See the discussion on -gnome-gtk. Not shipping galeon in sarge is a big > mistake. Users will be very happys. s/happys/unhappy/ I do not have to read any list to know very sure that any GNU/Linux distribution which lacks Galeon sucks. Kind regards

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Michael Meskes
On Wed, Aug 27, 2003 at 07:31:10AM +0200, Andreas Tille wrote: > It is not only not stable enough it is lacking some key features which forced > me to try to port the latest stable Galeon to Sarge. Unfortunately I failed What does it miss? I'm running 1.3.5 and did not notice that. :-) Okay, prob

Re: non-DD contributors and the debian keyringS

2003-08-27 Thread Martin Quinson
On Wed, Aug 27, 2003 at 12:35:36AM +1000, Hamish Moffatt wrote: > On Mon, Aug 25, 2003 at 05:18:45PM +0200, Sven Luther wrote: > > On Wed, Aug 20, 2003 at 05:03:17PM -0400, Stephen Frost wrote: > > > * Martin Quinson ([EMAIL PROTECTED]) wrote: > > > > On Wed, Aug 20, 2003 at 09:40:02AM -0400, Steph

Re: NMUs applying sleeping wishlist bugs about translation (was something else)

2003-08-27 Thread Sven Luther
On Wed, Aug 27, 2003 at 02:31:51PM +1000, Anthony Towns wrote: > On Tue, Aug 26, 2003 at 09:28:02PM +0200, Sven Luther wrote: > > I agree if the FTBFS comes from something the NMUer did, then yes, it is > > broken, but if it comes from general bad shape of the packages, then the > > responsability

Re: binaries provided by multiple source packages

2003-08-27 Thread Fabio Massimo Di Nitto
Ok i see that you got apache in the middle of a transition, that is why your check still see apache-perl as a source. a few months ago there were 3 apache flavours built from 3 different sources. apache, apache-ssl and apache-perl. Since the apache source code was present in all of them and they

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Sven Luther
On Wed, Aug 27, 2003 at 07:31:10AM +0200, Andreas Tille wrote: > On Tue, 26 Aug 2003, Joey Hess wrote: > > > Mark Howard wrote: > > > galeon - GNOME web browser for advanced users > > > Changes: > > > galeon (1.3.7.20030825-1) experimental; urgency=low > > > . > > >* New CVS Checkout >

Re: A possible GFDL compromise

2003-08-27 Thread Wouter Verhelst
Op wo 27-08-2003, om 07:02 schreef Fedor Zuev: > c) Accompany it with the information you received as to the offer > to distribute corresponding source code. (This alternative is > allowed only for noncommercial distribution and only if you > -

galeon in Debian stable

2003-08-27 Thread Mark Howard
Sorry for cross-posting. There are many interested people who only read one of the lists I'm posting to. Hello again, It's great to see so many positive comments about galeon. Hopefully 1.3.8 will go into stable. [galeon developers - is this likely to be released in the next 3 weeks, or should w

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Andreas Tille
On Wed, 27 Aug 2003, Michael Meskes wrote: > What does it miss? I'm running 1.3.5 and did not notice that. :-) Okay, > probably because I don't use these features... In no special order I'm missing: - the brush clearing the URL field - the "add bookmark to" menu entry to put a certain bookm

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Andreas Tille
On Wed, 27 Aug 2003, Sven Luther wrote: > On Wed, Aug 27, 2003 at 07:31:10AM +0200, Andreas Tille wrote: > > On Tue, 26 Aug 2003, Joey Hess wrote: > > > > > Mark Howard wrote: > > > > galeon - GNOME web browser for advanced users > > > > Changes: > > > > galeon (1.3.7.20030825-1) experimenta

Re: Updating packages' l10n without risk (~unrelated to previous)

2003-08-27 Thread Martin Quinson
On Tue, Aug 26, 2003 at 12:12:07AM +0100, Andrew Suffield wrote: > On Mon, Aug 25, 2003 at 10:27:44PM +0200, Martin Quinson wrote: > > On Mon, Aug 25, 2003 at 11:10:06AM -0500, Adam Heath wrote: > > > On Fri, 22 Aug 2003, Christian Perrier wrote: > > > > > > > And, as Steve pointed out, translatio

Re: galeon in Debian stable

2003-08-27 Thread Andreas Tille
On Wed, 27 Aug 2003, Mark Howard wrote: > It's great to see so many positive comments about galeon. Hopefully > 1.3.8 will go into stable. [galeon developers - is this likely to be Would be great. Just ignore my vote for Galeon 1.2.x in the other thread in debian-devel. It was only thought as

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Michael Piefel
Am 27.08.03 um 09:38:47 schrieb Andreas Tille: >- the brush clearing the URL field ^L not working for you? >- the "add bookmark to" menu entry to put a certain bookmark directly into > the right place My menu has that entry, what's wrong with yours? >- the quick access to proxy s

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Tore Anderson
severity 207300 grave quit * Karsten M. Self > Briefly: challenge-response (C-R) spam fighting systems are > fundamentally broken by design. > I am recommending that TMDA be dropped from Debian. * Adam McKenna > I will not respond to this bug other than to state that I don't believe it >

osirusoft down

2003-08-27 Thread martin f krafft
In case you run a mailserver with RBL and you don't know about this yet. (mh, are you going to get this mail then?) http://www.merit.edu/mail.archives/nanog/msg12818.html -- Please do not CC me when replying to lists; I read them! .''`. martin f. krafft <[EMAIL PROTECTED]> : :' :pr

Patch needs Sponsor - 20 bugs left - sorted by mtime

2003-08-27 Thread Goswin von Brederlow
Goswin von Brederlow <[EMAIL PROTECTED]> writes: > Hi, > > I went through the RC bug list and collected Bugs with trivial patches > and sorted them a bit. They realy don't need much work so if you have > a minute pick one. If you want to NMU any of them check the > then currently claimed bugs (ur

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Andreas Tille
On Wed, 27 Aug 2003, Michael Piefel wrote: > > Moreover I do not like the new hot keys because I was comfortable with > > {,} to go {back,foreward} > Revert to galeon 1.2 because you have to press Alt instead of Ctrl? > Come on! This was intentionally not mentioned as missing features comp

Bug#206187: apt-get update fails to get index package list and therefore does nothing

2003-08-27 Thread Josip Rodin
On Wed, Aug 27, 2003 at 11:07:22AM +0200, Sasha Volkoff wrote: > The only way I could eliminate this warning was putting LC_ALL=C, but this > is how it is already working now. > > I tried what you suggested me, and this is what I got: > "/usr/sbin/dpkg-reconfigure: locales is not fully installed"

Re: galeon in Debian stable

2003-08-27 Thread Jordi Mallach
On Wed, Aug 27, 2003 at 08:40:39AM +0100, Mark Howard wrote: > It's great to see so many positive comments about galeon. Hopefully > 1.3.8 will go into stable. [galeon developers - is this likely to be > released in the next 3 weeks, or should we really be looking at 1.3.7?]. > If that's not rele

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Peter Makholm
Tore Anderson <[EMAIL PROTECTED]> writes: > How many other innocent third parties have you spammed through the use > of this broken program? How many of these are Debian users, do you > think? I think we could just as well remove postfix[0] on this account. I have received a lot of so called

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Stephen Stafford
[enormous snippage] Sorry, but I do NOT see how this is a grave bug. It's wishlist (at best). YOU might not agree that C-R systems are good (personally I detest them), but that does NOT mean that we shouldn't release one. If the package is in good shape and functions as advertised, then it IS f

Re: DebToo: Debian, Gentoo-style

2003-08-27 Thread Martin Schulze
Chris de Vidal wrote: > Volunteers needed! > http://debtoo.org I guess you haven't read Benchmarking Debian's Performance. Indranath Neogy tried to [35]discover what kind of gains the source based nature of Gentoo might give it over Debian and Mandrake. The tests included timing how long it took

Re: cpu usage, consideration of others, apt-listbugs

2003-08-27 Thread Josip Rodin
On Wed, Aug 27, 2003 at 01:07:04AM -0500, Branden Robinson wrote: > > Well, correction, cgi.d.o does almost nothing these days. But lists.d.o > > requires resources pretty much continuously, what with all the mhonarc, > > glimpse, stats updates and users accessing web pages and its CGI scripts. > >

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Nikolaus Rath
Michael Piefel <[EMAIL PROTECTED]> wrote: >>- the "add bookmark to" menu entry to put a certain bookmark directly into >> the right place > My menu has that entry, what's wrong with yours? I just updatet to the latest version from experimental and I still don't have this menu. Did you cha

Re: cpu usage, consideration of others, apt-listbugs

2003-08-27 Thread Masato Taruishi
> I was looking at the various stats programs(http://master/mrtg/), and noticed > that for the last week, master's incoming bw, outgoing bw, and load, have been > unusually high. > > After some digging, I found 2 main causes. > > 1: The apt-listbugs author has seemed it nescessary to export all d

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Lars Wirzenius
On ke, 2003-08-27 at 13:44, Stephen Stafford wrote: > YOU might not agree that C-R systems are good (personally I detest them), > but that does NOT mean that we shouldn't release one. If the package is in > good shape and functions as advertised, then it IS fit for release. TDMA seems to hurt i

Re: Sarge+1: ideas for Experimental V1.2 (or is that 0.2?)

2003-08-27 Thread Andreas Barth
* Mark Howard ([EMAIL PROTECTED]) [030826 21:35]: > On Tue, Aug 26, 2003 at 03:46:33PM +0200, Andreas Barth wrote: > > the system. (And, I don't believe that a proposal with so many changes > > to the pool and mirror system has a real chance to be implemented.) > Why do you need many changes? Bec

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Tore Anderson
[ Please do not send me CC's, as I have not explicitly asked for them. ] * Stephen Stafford > Sorry, but I do NOT see how this is a grave bug. It's wishlist (at best). > > YOU might not agree that C-R systems are good (personally I detest them), > but that does NOT mean that we shouldn't rel

Re: Sarge+1: ideas for Experimental V1.2 (or is that 0.2?)

2003-08-27 Thread Andreas Barth
* Goswin von Brederlow ([EMAIL PROTECTED]) [030826 21:50]: > Mark Howard <[EMAIL PROTECTED]> writes: > > > On Tue, Aug 26, 2003 at 10:25:24AM +0200, Goswin von Brederlow wrote: > > > So speak up Mark, what do you mean with changed? > > > > I meant identifying that bug X was fixed in version Y; pa

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Colin Watson
severity 207300 wishlist thanks On Wed, Aug 27, 2003 at 11:08:23AM +0200, Tore Anderson wrote: > severity 207300 grave > quit Sorry, Tore, but this is not a grave bug. The package does what it says on the tin, even if you think that its goals are broken in the wider picture (and I'd happen to agr

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Mark Brown
On Wed, Aug 27, 2003 at 01:35:12PM +0200, Tore Anderson wrote: > with is that the C-R system in question ignores the fact that SMTP > headers are trivially (and regulary) forged. I believe this is deliberate, > and that TMDA does not attempt to verify that the recipient of the > challenge tru

Re: cpu usage, consideration of others, apt-listbugs

2003-08-27 Thread Colin Watson
On Wed, Aug 27, 2003 at 07:54:07PM +0900, Masato Taruishi wrote: > On IRC, I was suggested that apt-listbugs should use index.db. I had to > use debbugs .status file too because index.db doesn't have subject. I suggest that you generate your own index.db file containing the subjects you need. Thi

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Tore Anderson
[ Please do not send me CC's, as I have not explicitly asked for them. ] * Tore Anderson >> How many other innocent third parties have you spammed through the use >> of this broken program? How many of these are Debian users, do you >> think? * Peter Makholm > I think we could just as

Re: Removal of automake1.5, Phase 2: The Mass Bug filing

2003-08-27 Thread Artur R. Czechowski
On Sat, Aug 16, 2003 at 08:28:40PM -0400, Eric Dorland wrote: > Luckily, my previous message seemed to have spurred many into action, > as only 21 source packages have automake1.5 in their Build-Depends > line, and of those only: Some packages has been fixed (bugs closed or NMUed). I've checked all

MEI Whitelist Autoresponse

2003-08-27 Thread paul
Your message to [EMAIL PROTECTED] has been quarantined! You only need to do this once, but this time, you must verify that you are a human. This is an automated response send by the MEI Whitelist system. At paul's request, this system blocks and quarantines email from senders that are not on a

Re: Sarge+1: ideas for Experimental V1.2 (or is that 0.2?)

2003-08-27 Thread Andreas Barth
* Goswin von Brederlow ([EMAIL PROTECTED]) [030826 21:50]: > Andreas Barth <[EMAIL PROTECTED]> writes: > > > * Goswin von Brederlow ([EMAIL PROTECTED]) [030826 15:20]: > > > Only those contained in the sections enabled on the users system. If > > > you have experimental-core and experimental-gnome

Re: DebToo: Debian, Gentoo-style

2003-08-27 Thread Glenn McGrath
Some comments Source code is more important than binaries, that we should all agree on. Fixing bugs that such a project uncovers makes Free software more robusts and is good for the community. Source based distro's are more bandwidth friendly as the source can be reused to produce new revisi

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Brian May
On Wed, Aug 27, 2003 at 12:58:19PM +0200, Peter Makholm wrote: > Tore Anderson <[EMAIL PROTECTED]> writes: > > > How many other innocent third parties have you spammed through the use > > of this broken program? How many of these are Debian users, do you > > think? > > I think we could just

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Bernd Eckenfels
On Wed, Aug 27, 2003 at 02:54:43PM +0300, Lars Wirzenius wrote: > TDMA seems to hurt innocent outsiders by sending them mail (e.g., in > response to garbage sent by viruses or spammers). The other examples you > gave (Emacs, Gnome, CUPS) don't do that, as far as I know. The > difference is importan

Re: DebToo: Debian, Gentoo-style

2003-08-27 Thread Halil Demirezen
Debian is caching debs rather than targzs. What i got from here, if the argument is on deciding on whether project shold cache-old the source code tarballs rather then binaries - i got debs from here as binary , because i did not come accross other binaries cached in the system - , I cannot see any

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Ulrich Eckhardt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 27 August 2003 11:08, Tore Anderson wrote: > > I do not intend to play BTS games here; if you change the severity back > > to grave, or to any other RC state, I will consider it to be abuse of > > the BTS and report your actions to the

Re: NMUs applying sleeping wishlist bugs about translation (was something else)

2003-08-27 Thread Martin Quinson
On Tue, Aug 26, 2003 at 07:28:03PM +1000, Anthony Towns wrote: > On Tue, Aug 26, 2003 at 10:26:32AM +0200, Sven Luther wrote: > > Let's say i do translataion work, for that i have to build the package, > > and notice that it FTBFS (at least on some obscure arch or something). I > > then fill a FTBF

Re: DebToo: Debian, Gentoo-style

2003-08-27 Thread Peter Makholm
Glenn McGrath <[EMAIL PROTECTED]> writes: > Optimised binaries wont run slower than non-optimised binaries. It actually does happen. One reason can be loop-unrolling and cache-sizes. -- Peter Makholm |'Cause suicide is painless [EMAIL PROTECTED] |

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Richard Atterer
On Wed, Aug 27, 2003 at 11:08:23AM +0200, Tore Anderson wrote: [snip... oh my!] How amusing to see Sobig.F cited as the reason for reassigning grave severity to a bug! Looks to me as if you just didn't find a sobig-f package to file the bug against, so something else had to be the culprit. In t

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Andreas Tille
On Wed, 27 Aug 2003, Michael Piefel wrote: To answer you other questions after checking on a machine with Galeon 1.3 installed: > Am 27.08.03 um 09:38:47 schrieb Andreas Tille: > >- the brush clearing the URL field > ^L not working for you? ^L just marks the URL and thus removes the mouse bu

Re: NMUs applying sleeping wishlist bugs about translation (was something else)

2003-08-27 Thread Christian Perrier
Quoting Martin Quinson ([EMAIL PROTECTED]): > with not only translating abilities (in fact I'm even rather bad at > translating). That's fine, I'm rather bad at programming... :-)

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Stephen Stafford
On Wed, Aug 27, 2003 at 01:35:12PM +0200, Tore Anderson wrote: > [ Please do not send me CC's, as I have not explicitly asked for them. ] Apologies. > > * Stephen Stafford > > > Sorry, but I do NOT see how this is a grave bug. It's wishlist (at best). > > > > YOU might not agree that C-R sy

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Kalle Kivimaa
Mark Brown <[EMAIL PROTECTED]> writes: > You do realise that all parts of SMTP are generally completely > unauthenticated and can be trivially forged? A system like this has no > option but to work with unauthenticated data. Why cannot the C-R system issue the challenge during the SMTP session (r

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread John Goerzen
On Wed, Aug 27, 2003 at 01:43:29PM +0200, Tore Anderson wrote: > However, a quick test shows that this is not the case (as Postfix > appears to reject the SMTP RCPT command for non-existent accounts), > so I fail to see how it is relevant. Sometimes, there is no choice. That could be the case

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Omen Wild
Quoting Andreas Tille <[EMAIL PROTECTED]> on Wed, Aug 27 09:38: > >- the "add bookmark to" menu entry to put a certain bookmark directly into > the right place Turns out this feature is actually there. Go into your bookmarks like you are going to open one, right click on the folder, and

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Anthony Towns
On Wed, Aug 27, 2003 at 01:43:29PM +0200, Tore Anderson wrote: > I fully agree, and I would not hesitate to submit a RC bug on the > Postfix That's a completely inappropriate use of the RC severity, and possibly the BTS entirely. The discussion is a good and useful one, trying to inflate your

Re: NMUs applying sleeping wishlist bugs about translation (was something else)

2003-08-27 Thread Anthony Towns
On Wed, Aug 27, 2003 at 09:35:08AM +0200, Sven Luther wrote: > It only means that someone > wanting to do an NMU for some probably minor, not really touching the > package, will not do it because he don't want that responsaibility or > more probably cannot assume it. That's the correct response.

Re: Removal of automake1.5, Phase 2: The Mass Bug filing

2003-08-27 Thread Mikael Andersson
ons 2003-08-27 klockan 14.37 skrev Artur R. Czechowski: > On Sat, Aug 16, 2003 at 08:28:40PM -0400, Eric Dorland wrote: > > Luckily, my previous message seemed to have spurred many into action, > > as only 21 source packages have automake1.5 in their Build-Depends > > line, and of those only: > Som

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Dagfinn Ilmari MannsÃker
Andreas Tille <[EMAIL PROTECTED]> writes: > On Wed, 27 Aug 2003, Michael Piefel wrote: > > To answer you other questions after checking on a machine with Galeon > 1.3 installed: > >> Am 27.08.03 um 09:38:47 schrieb Andreas Tille: >> >>>- the "add bookmark to" menu entry to put a certain bookma

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Mark Brown
On Wed, Aug 27, 2003 at 04:07:58PM +0300, Kalle Kivimaa wrote: > Mark Brown <[EMAIL PROTECTED]> writes: > > You do realise that all parts of SMTP are generally completely > > unauthenticated and can be trivially forged? A system like this has no > > option but to work with unauthenticated data.

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Andreas Metzler
On Wed, Aug 27, 2003 at 10:00:13PM +1000, Brian May wrote: > On Wed, Aug 27, 2003 at 12:58:19PM +0200, Peter Makholm wrote: > > Tore Anderson <[EMAIL PROTECTED]> writes: > > > How many other innocent third parties have you spammed through the use > > > of this broken program? How many of these

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Florian Weimer
Bernd Eckenfels <[EMAIL PROTECTED]> writes: > Every MTA is sending bounces to mails with forged headers. The MXes I'm responsible for don't do this (even the secondary MXes handle such cases gracefully). They just refuse messages with unknown destinations at the SMTP level. AFAIK, all MTAs whic

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Florian Weimer
Peter Makholm <[EMAIL PROTECTED]> writes: > I think we could just as well remove postfix[0] on this account. I have > received a lot of so called bounces because some silly postfix > installation believes that I have send mail to some non-existant > account. Most MTAs support rejecting unknown de

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Andreas Tille
On Wed, 27 Aug 2003, Mark Howard wrote: > right click->open with ... which is not as fast as , isn't it? > I don't think anyone is actually, there are other things which they're > more interested in at the moment. Patches would really help speed things > up - even if the code you submit isn't tha

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Wouter Verhelst
On Wed, Aug 27, 2003 at 04:07:58PM +0300, Kalle Kivimaa wrote: > Mark Brown <[EMAIL PROTECTED]> writes: > > You do realise that all parts of SMTP are generally completely > > unauthenticated and can be trivially forged? A system like this has no > > option but to work with unauthenticated data. >

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Florian Weimer
John Goerzen <[EMAIL PROTECTED]> writes: > Sometimes, there is no choice. That could be the case if, for instance, you > are backup MX for a server that is down. You have accepted the message from > the original sender already -- possibly hours ago. The primary server comes > back up and reject

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Joey Hess
Christian Marillat wrote: > See the discussion on -gnome-gtk. Not shipping galeon in sarge is a big > mistake. Users will be very happys. I think I agree with you. I'm also glad I've switched to firebird.. Sorry about starting a duplicate thread. -- see shy jo pgpKM4OihI3LN.pgp Description: P

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Mark Howard
On Wed, Aug 27, 2003 at 03:53:42PM +0200, Andreas Tille wrote: > I forgot a further very helpful feature: External viewer / editor for viewing > page source is missing. right click->open with > And last but not least I'm missing the "Page information" feature. No doubt > that > the brilliant Ga

Re: galeon in Debian stable

2003-08-27 Thread Sebastian Kapfer
On Wed, 27 Aug 2003 10:10:11 +0200, Mark Howard wrote: > Sorry for cross-posting. There are many interested people who only read > one of the lists I'm posting to. > > Hello again, > It's great to see so many positive comments about galeon. Hopefully > 1.3.8 will go into stable. It would be re

Re: DebToo: Debian, Gentoo-style

2003-08-27 Thread Steve Langasek
On Wed, Aug 27, 2003 at 10:22:28PM +1000, Glenn McGrath wrote: > Source based distro's are more bandwidth friendly as the source can be > reused to produce new revisions of existing packages. This is only true in cases where you get more than one Debian revision out of a given upstream release of

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Brian T. Sniffen
Tore Anderson <[EMAIL PROTECTED]> writes: > severity 207300 grave > quit > > * Karsten M. Self > > > Briefly: challenge-response (C-R) spam fighting systems are > > fundamentally broken by design. > > > I am recommending that TMDA be dropped from Debian. I use tmda, but not in challenge-respo

Re: DebToo: Debian, Gentoo-style

2003-08-27 Thread Andrew Pimlott
On Tue, Aug 26, 2003 at 01:14:41PM -0700, Chris de Vidal wrote: > Volunteers needed! > http://debtoo.org You get Debian's benefits, like their stellar package management, with *completely* optional optimization. I would be interested in a source-based system that is focused on convenience

Re: Patch needs Sponsor - 20 bugs left - sorted by mtime

2003-08-27 Thread Joel Baker
On Wed, Aug 27, 2003 at 12:32:59PM +0200, Goswin von Brederlow wrote: > > TITLE #195527:mysql++: FTBFS with g++-3.3: Missing include > Severity: serious > Package: mysql++ > Age: 87 days > Last changed: 15 days Please be more careful about these reports; this bug has be

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Joey Hess
Stephen Stafford wrote: > As long as SOME users like it, and find it useful and it fits THEIR needs, > then we should not be removing it from Debian (as long as it meets DFSG). Great! Then someone needs to revive that ITP filed April 1st 2002. This new policy will certianly make a lot of script ki

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Adam McKenna
On Wed, Aug 27, 2003 at 12:37:36PM +0100, Colin Watson wrote: > Perhaps some compromise could be found here to improve the package's > description. Adam, I also think it would be helpful if you could respond > to at least some points from the original bug report. I do believe that > Karsten has tho

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Florian Weimer
Mark Brown <[EMAIL PROTECTED]> writes: >> Why cannot the C-R system issue the challenge during the SMTP session >> (respond with a reject containing the challenge)? With the latest >> Sobig flood I've begun to consider all list software sending back > > The part where SMTP is completely unauthenti

unsubscribe

2003-08-27 Thread David Riebenbauer
unsubscribe

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Joey Hess
Adam McKenna wrote: > The arguments are facile and specious, I do not intend to waste my precious > time responding to them. Speaking of precious time, let me bore you with another facile and specious argument.. Like many of us here, I occasionally receive bug reports from our users, and reply fo

Re: NMUs applying sleeping wishlist bugs about translation (was something else)

2003-08-27 Thread Steve Langasek
On Thu, Aug 28, 2003 at 12:31:30AM +1000, Anthony Towns wrote: > On Wed, Aug 27, 2003 at 09:35:08AM +0200, Sven Luther wrote: > > It only means that someone > > wanting to do an NMU for some probably minor, not really touching the > > package, will not do it because he don't want that responsaibili

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Tore Anderson
* Mark Brown > You do realise that all parts of SMTP are generally completely > unauthenticated and can be trivially forged? Yes. It's indeed very sad that it is so. However, my main issue still remains -- the difference (for the user) between «I'm installing this package and accep

Re: cpu usage, consideration of others, apt-listbugs

2003-08-27 Thread Adam Heath
On 27 Aug 2003, Masato Taruishi wrote: > On IRC, I was suggested that apt-listbugs should use index.db. I had to > use debbugs .status file too because index.db doesn't have subject. > > apt-listbugs fetches just few static files from web server, two index > files and .status files of actual criti

Re: Urgent coreutils/libc6? problem

2003-08-27 Thread Jørgen Hermanrud Fjeld
On Tue, Aug 26, 2003 at 10:21:27PM -0400, Jaldhar H. Vyas wrote: > Could it be something in your nsswitch or PAM configuration? Are you > using NIS? (I heard it was broken in the latest libc6) I don't think so, since # egrep "(^passwd)|(^group)" /etc/nsswitch.conf passwd: files group:

thanking u

2003-08-27 Thread hishashi11
Thanks for mailing. I'll reply u as soon as possible. Have a nice day. ...Shashi...

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Kalle Kivimaa
Mark Brown <[EMAIL PROTECTED]> writes: > The part where SMTP is completely unauthenticated means that this > doesn't help - the SMTP envelope sender can be forged just as easily as > the From: inside the message. You're right, I forgot to say that the idea only applies to non-relayed mail where th

Re: osirusoft down

2003-08-27 Thread Martin List-Petersen
On Wed, 2003-08-27 at 11:43, martin f krafft wrote: > In case you run a mailserver with RBL and you don't know about this > yet. (mh, are you going to get this mail then?) > > http://www.merit.edu/mail.archives/nanog/msg12818.html Actually there is a chance of your/my mail getting through and i

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Tim Dijkstra
On Wed, 27 Aug 2003 16:50:28 +0200 [EMAIL PROTECTED] (Dagfinn Ilmari Mannsåker) wrote: > That's over two months (and two releases) old. The current galeon in > unstable is 1.3.7.20030813-1, which has the "Add bookmark to" submenu > at the top of the bookmark menu. Huh?!? well I must be blind then

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Matijs van Zuijlen
On Wed, Aug 27, 2003 at 04:50:28PM +0200, Dagfinn Ilmari Manns??ker wrote: > Andreas Tille <[EMAIL PROTECTED]> writes: > > > On Wed, 27 Aug 2003, Michael Piefel wrote: > > > > To answer you other questions after checking on a machine with Galeon > > 1.3 installed: > > > >> Am 27.08.03 um 09:38:47

Re: cpu usage, consideration of others, apt-listbugs

2003-08-27 Thread Masato Taruishi
2003$BG/(B08$B7n(B28$BF|(B(?)$B$N(B01$B;~(B58$BJ,$K(B Adam Heath (Bwrote: (B (B> > On IRC, I was suggested that apt-listbugs should use index.db. I had to (B> > use debbugs .status file too because index.db doesn't have subject. (B> > (B> > apt-listbugs fetches just few static fi

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Mark Brown
On Wed, Aug 27, 2003 at 05:16:40PM +0200, Florian Weimer wrote: > Most MTAs support rejecting unknown destinations at the SMTP level. > They don't generate bounce messages in such cases. > It's a pity if Postfix can't do this. So far, I assumed only qmail > had this weird property. Postfix supp

Re: osirusoft down

2003-08-27 Thread martin f krafft
also sprach Martin List-Petersen <[EMAIL PROTECTED]> [2003.08.27.1832 +0200]: > > http://www.merit.edu/mail.archives/nanog/msg12818.html > > Actually there is a chance of your/my mail getting through how? > and if people at least have configured their mailer to monitor > abandoned mail, then t

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Bernhard R. Link
* Florian Weimer <[EMAIL PROTECTED]> [030827 19:08]: > That's why it's better to get rid of generic MX secondaries (IOW > secondaries which are not under you administrative control). The > effect you describe hampers effective anti-spam measures, too. It can also help anti-spam measures. They a

Re: osirusoft down

2003-08-27 Thread Martin List-Petersen
On Wed, 2003-08-27 at 20:12, martin f krafft wrote: > also sprach Martin List-Petersen <[EMAIL PROTECTED]> [2003.08.27.1832 +0200]: > > > http://www.merit.edu/mail.archives/nanog/msg12818.html > > > > Actually there is a chance of your/my mail getting through > > how? The line at osirusoft was

Re: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Steve Lamb
On Wed, 27 Aug 2003 11:44:34 +0100 Stephen Stafford <[EMAIL PROTECTED]> wrote: > Sorry, but I do NOT see how this is a grave bug. It's wishlist (at best). I tend to agree with the grave aspect. > YOU might not agree that C-R systems are good (personally I detest them), > but that does NOT me

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Stephen Gran
This one time, at band camp, Joey Hess said: > > I don't think that TMDA is yet enough of a problem for this to be a big > deal, but I think it has the potential to become one. Debian as a whole > is empowered to override the wishes of one maintainer, if it turns out > that the software he is pack

Re: Bug#207300: tmda: Challenge-response is fundamentally broken

2003-08-27 Thread Colin Watson
On Wed, Aug 27, 2003 at 12:30:07PM -0400, Joey Hess wrote: > Adam McKenna wrote: > > The arguments are facile and specious, I do not intend to waste my > > precious time responding to them. That's a shame. I don't believe Karsten to be in the habit of putting forward specious arguments. > Speakin

Re: NMUs applying sleeping wishlist bugs about translation (was something else)

2003-08-27 Thread Stephen Frost
* Steve Langasek ([EMAIL PROTECTED]) wrote: > Holding NMUers accountable for the quality of their uploads: yes. > Holding NMUers accountable for the quality of the maintainer's package: no. I'm happy to clarify my position if you aren't clear on it and would rather you do that then make misleading

Re: Accepted galeon 1.3.7.20030825-1 (i386 source)

2003-08-27 Thread Allan Wind
On 2003-08-27T09:38:47+0200, Andreas Tille wrote: > Moreover I do not like the new hot keys because I was comfortable with > {,} to go {back,foreward} > which was replaced by some other keys which are used in my special environment > for a different purpose. Sounds like gnome vs emacs text

Re: NMUs applying sleeping wishlist bugs about translation

2003-08-27 Thread Manoj Srivastava
On Wed, 27 Aug 2003 11:46:41 -0500, Steve Langasek <[EMAIL PROTECTED]> said: > This is the sticking point, I think. Are we talking about resolving > the possible problems *from* NMUing, or are we talking about > resolving any problems that happen to show up after the NMU? I How can one

Ye olde " and is not working in X" bug

2003-08-27 Thread Adrian 'Dagurashibanipal' von Bidder
Yo! This was discussed at length (iirc soon after woody release, in one of the 'what should be better in sarge' threads). but without any real solution being presented. I don't know, has there been any progress? Somebody (a DD) failed to reproduce it. I did set up a few Debian machines recentl

Re: NMUs applying sleeping wishlist bugs about translation (was something else)

2003-08-27 Thread Sven Luther
On Wed, Aug 27, 2003 at 11:46:41AM -0500, Steve Langasek wrote: > On Thu, Aug 28, 2003 at 12:31:30AM +1000, Anthony Towns wrote: > > On Wed, Aug 27, 2003 at 09:35:08AM +0200, Sven Luther wrote: > > > It only means that someone > > > wanting to do an NMU for some probably minor, not really touching

  1   2   >