Hi, Praveen and Shirish (and Indian Debian Users),
> > The event is being organized in an engineering college with a good track
> > record of free software contributions [3]. I proposed a mini debconf in
> > the hope of getting more contributions to debian. Since we did not get
> > many debian con
Pirate Praveen dijo [Mon, Sep 08, 2014 at 05:13:49PM +0530]:
> > Hi, Praveen and Shirish (and Indian Debian Users),
> > Well, a DebConf is about Debian, and I mostly agree with Steve's
> > answer: Not just any Linux conference should be called a DebConf or
> > MiniDebConf. There has to be a Debian
Sam Hartman dijo [Thu, Nov 06, 2014 at 09:58:29AM +]:
>
> Early morning, Wednesday, November 19, the results of the GR on init
> system coupling will be announced.
> No result will make everyone happy. In fact, that morning, some of our
> developers, users and contributors will be really unha
Henrique de Moraes Holschuh dijo [Sat, Nov 08, 2014 at 07:11:14PM -0200]:
> On Sat, 08 Nov 2014, Richard Hartmann wrote:
> > Interpretation is in the eye of the bee holder, but I am considering
> > to attach this list to my weekly bug report; mainly because I can.
>
> Wouldn't it make more sense t
Brian Nelson dijo [Wed, Nov 12, 2014 at 05:09:02PM -0500]:
> >> Wouldn't it make more sense to ask these people privately what is getting
> >> in
> >> the way of a switch to a stronger key?
> >
> > They have been asked. Repeatedly.
>
> I haven't been asked. I've received a few reminders that I n
Brian Nelson dijo [Thu, Nov 13, 2014 at 02:27:59PM -0500]:
> Well I have a new key but it doesn't have any signatures on it other
> than my own, and I haven't encountered another developer in years to
> have it signed. I've been listed on
> https://wiki.debian.org/Keysigning/Offers for years (two
Ian Jackson dijo [Thu, Nov 13, 2014 at 04:53:30PM +]:
> The correct reaction to people not adopting your software is to make
> your software better, not to conduct an aggressive marketing campaign
> aimed at persuading upstreams to built it in as a dependency, nor to
> overrun distro mailing li
Hello world,
There is a thread that started today in debian-private. Don't worry,
it's not an earth-shattering thread, nor is it complaining about huge
masses of retiring DDs. However... Yes, in the last few months we have
got used to seeing many more retirement messages than what we used to
in th
Anthony Towns dijo [Fri, Jan 23, 2015 at 10:57:55AM +]:
> On Thu, Jan 22, 2015 at 07:02:51PM +0800, Paul Wise wrote:
> > On Thu, Jan 22, 2015 at 6:28 PM, Anthony Towns wrote:
> > > - there are "archive networks" for most programming languages these days:
> > >CPAN, CRAN, Hackage, PyPI, Rub
Christian Kastner dijo [Thu, Feb 12, 2015 at 10:30:16PM +0100]:
> > In my opinion, exactly the same applies for someone you've met. I think
> > it's a lot easier to get a forged id than to establish a history of
> > valuable contributions.
>
> Well, it depends. A forged passport[1], if one even kn
Kurt Roeckx dijo [Fri, Apr 17, 2015 at 12:45:37AM +0200]:
> On Thu, Apr 16, 2015 at 10:41:52PM +0100, Jonathan McDowell wrote:
> >
> > Sadly this list is trivially proved inaccurate
>
> So I have no source at all that is can tell me the number of DDs?
You can fetch the number of active DD keys [
Stephan Foley dijo [Thu, Feb 04, 2016 at 08:37:52PM -0500]:
> Very true, I agree with all of your points. Going back to my original
> purpose of posting this question, I wanted to do a sort of "sales
> pitch" to encourage Debian to offer Fluxbox as a task in the
> installer. I actually wrote up a s
Daniel Pocock dijo [Thu, Feb 25, 2016 at 11:10:15AM +0100]:
> Maybe it is worthwhile for the DPL to simply assign a sum of money for
> travel grants every 3 - 6 months and then people could shortlist all the
> opportunities like this, identify if there are volunteers who want to go
> and find some
Daniel Pocock dijo [Mon, Jul 18, 2016 at 09:36:52PM +0200]:
> > On 2016-07-18 18:21, Daniel Pocock wrote:
> >> There are some things on -private that could be summarized with
> >> statistics publicly, e.g. the reasons people give when they retire from
> >> the project (X% cited reason A, Y% cited r
Clarke, Daniel (US - Arlington) dijo [Wed, Jul 27, 2016 at 07:23:23PM +]:
> Good Afternoon,
>
> My name is Dan and I have been given the following task by my
> client: What is the history of Debian, and, specifically, whether
> there is a central authority that publishes patches and what is
>
Ian Jackson dijo [Mon, Oct 17, 2016 at 02:16:15PM +0100]:
> Charles Plessy writes ("Re: GR: Declassifying debian-private: second call for
> votes"):
> > out of context, it is hard to chose between the options that each of you are
> > presenting in this GR.
> >
> > Could you briefly rebut each oth
Thanks, Ian and Sean, first for publishing this Gobby notes, and then
for the interesting idea exchange that resulted. I wanted to answer to
Ian's mail on this same topic, but then Sean started writing things
that I resonate with... So, the original text posted by Ian (to which
Ian claims no author
Andreas Tille dijo [Wed, Feb 08, 2017 at 10:03:30AM +0100]:
> Hi,
>
> this is my yearly hint to the teammetrics graphs you can find for your
> team at
>
> http://blends.debian.net/liststats/
Very interesting! I will share this link with a student who is working
with me and doing time-relate
alberto fuentes dijo [Thu, Apr 06, 2017 at 01:30:19PM +0200]:
> (...)
> It comes down to know if planet is about debian or about debian developers
>
> My personal opinion is that it should be about debian, not about debian
> developers. Random rants, specially cathartic ones slightly related to th
Daniel Pocock dijo [Sun, Apr 30, 2017 at 01:53:49PM +0200]:
>
> Hi all,
>
> On several occasions people have asked me about Debian t-shirts and the
> polo shirts when I'm going to an event or after seeing a video where I
> am wearing the polo shirt.
>
> At some events there are opportunities to
Daniel Pocock dijo [Mon, May 01, 2017 at 09:00:34AM +0200]:
> Can you give an example of shipping costs from Mexico to the US and
> Mexico to Brussels (for FOSDEM)?
Bufff... It's a matter of checking the weight and asking DHL, Fedex,
and all of their kin :-|
> I assume that if they were sent to
Martin Steigerwald dijo [Mon, May 01, 2017 at 10:13:58PM +0200]:
> > Make it fair-trade and printed by people with disabilities, like
> > we did for DC15, and it was somewhere around $8. I'd still buy
> > a shirt for $15 or so every now and then if it was a witty new
> > design and a cut of the pro
Hi all,
For a couple of weeks already, we have been having a steady trickle in
debian-private of notices of retiring DDs (around 25, IIRC). After a
bit of this, an interesting thread broke out there. Holger said today:
Holger Levsen dijo [Tue, Oct 03, 2017 at 08:53:41PM +]:
> hi,
>
> it occu
Sam Hartman dijo [Fri, Oct 27, 2017 at 08:18:48PM -0400]:
>
> As a member of the technical committee, I've grown increasingly alarmed
> as I think about the impact of the issues that come to us.
> Yes, we're giving answers. However, I think we are doing a lot of harm
> to the members of our commu
Enrico Zini dijo [Wed, Nov 15, 2017 at 05:46:52PM +0100]:
> I would be ok with saying that emeritus people who have a valid gpg key
> can still have email forwarding, exporting the emeritus keyring
> alongside the other keyrings, and handling email forwarding
> configuration changes via chan...@db.
Ian Jackson dijo [Tue, Apr 17, 2018 at 01:39:07PM +0100]:
> We desperately need:
FSVO desperate. I agree we need it, but based on the project's current
level of discussions, I don't think it's a "desperate" situation.
> * Somewhere people can escalate a dispute involving ill-feeling,
>that i
Chris Lamb dijo [Tue, Apr 17, 2018 at 07:12:26PM +0100]:
> > FSVO desperate. I agree we need it, but based on the project's current
> > level of discussions, I don't think it's a "desperate" situation.
> (...)
> This is made even more tragic in that I do not believe this is
> representative of wha
Lars Wirzenius dijo [Wed, Apr 18, 2018 at 04:08:24PM +0300]:
> On Wed, 2018-04-18 at 13:41 +0100, Martín Ferrari wrote:
> > I believe that a-h is the natural starting point for dealing with these
> > issues.
>
> Most of the problems being discussed right now, and in general, seem
> to be of the so
Daniel Pocock dijo [Thu, Dec 20, 2018 at 09:31:46PM +]:
> Hi all,
Hello Daniel,
I have to chime in here fully in support of what Russ, Steve and Paul
have said. Your message starts as inflammatory and as far as possible
from any attempt to cool down issues. It starts by accusing, by
likening
Paul R. Tagliamonte dijo [Wed, Dec 26, 2018 at 10:36:08AM -0500]:
> > So where is the difference to a closed military court or gulag general?
>
> I strongly encourage you to read about Gulags and understand for both
> mlitary tribunal and prison camp, the result is often death. Debian can not
> ki
Joerg Jaspert dijo [Mon, Jan 07, 2019 at 11:27:35PM +0100]:
> Hello everyone,
>
> One of the things that emerged from the recent discussions around DAM
> actions is that we are missing a way to review or appeal DAM's decision.
> Currently the only way to do this is running a full-featured GR, with
[ Mexican student asking for how to do professional practices for his
university studies in some way related to Debian. Debian cannot
offer much, but I can possibly coach him, as I work in a different
university...? ]
Azaid dijo [Fri, Jan 18, 2019 at 08:22:43PM +]:
> Buen día. Soy Albert
Paul Wise dijo [Sat, Jan 19, 2019 at 07:43:08AM +0800]:
> > [ Mexican student asking for how to do professional practices for his
> > university studies in some way related to Debian. Debian cannot
> > offer much, but I can possibly coach him, as I work in a different
> > university...? ]
>
Sam Hartman dijo [Sat, Jun 01, 2019 at 09:02:54AM -0400]:
> (...)
>
> With regard to Russ's concerns,
> I think that making short-term grants to work on specific projects might
> be much more achievable for us than salaries. It reduces the factors
> he's worried about.
> I think there would still
Philip Hands dijo [Tue, Jun 04, 2019 at 10:51:10AM +0200]:
> It occurs to me that we could establish some sort of hardship fund to
> make sure that someone who's current situation falls below some minimum
> that we could define, they would be able to apply for funding.
>
> For example, I recently
[ Explaining to the requester this is not a support list; redirecting
him to debian-user-spanish ]
Hola,
Usted envió el correo que cito a una lista de correo en idioma inglés,
para discutir respecto al desarrollo no-técnico del proyecto. Le
invito a que envíe esta pregunta a la lista de ayuda a
Martina Ferrari dijo [Fri, Dec 20, 2019 at 07:40:41PM -0300]:
> (...)
I am always sad and disheartened when this kind of threads erupt. And
I can only imagine how this hurts people that cannot just sympathize
with you, but suffer instead in their own bodies and lifes the
discrimination. I am a bel
gregor herrmann dijo [Tue, Feb 18, 2020 at 09:00:33PM +0100]:
> > That's good, the desire to have it public does not equate to a desire or
> > need for me to be there. IMO it's just important that this doesn't
> > happen behind closed doors again like last time.
>
> AFAICS the process for DC20 and
ut I think we will decide by consensus, not by
voting. And that we can share the reasoning we are following.
> See the threads in
> https://lists.debian.org/debconf-team/2019/03/threads.html
> (...)
I acknowledge the decision and communication of it was quite harder
last year than what we
Holger Levsen dijo [Wed, Feb 19, 2020 at 11:02:06PM +]:
> (...)
> > Agreed to those (as I also said at the time). I think it was obvious to
> > us early on in the DC20 decision process that we'd want to do this
> > privately. We should have announced that.
>
> absolutly. I still dont think it
Ian Jackson dijo [Thu, Feb 20, 2020 at 11:50:26AM +]:
> Ansgar writes ("Re: Request to Mini DebConf Montreal Organizers: Fight Israel
> not the DC20 Team"):
> > I think the announcement by the organizers framed the conference as
> > being organized specifically to support the BDS movement, a m
er mail - Each of the three keyring-maint
members have different policies.
The word "trust" also has many different meanings and values, but we
treat it as a binary thing here - Do two people trust the person
controlling 0xDEADBEEF to be Gunnar Wolf or not? If so, we
accept. If not,
Hello Enrico, and thanks for bringing the discussion over here.
Enrico Zini dijo [Thu, Aug 06, 2020 at 05:54:21PM +0200]:
> Hello,
>
> we have people approaching Debian with a lack of GPG signatures, and we
> generally cannot ask them to travel and meet other developers in person
> to get their k
Hello Zayd,
> I hope that you are doing well. My name is Zayd. I am currently in
> the midst of a career change. A couple of years ago, I discovered
> Linux and realize that I have a passion for it. I have already
> completed my Bachelors degree. I recently also completed an
> Introduction to Linu
Hi,
We have carried a major.minor scheme as a release numbering scheme
since the Early Days, but it has lost relevance basically since Sarge
(3.1 - But by the time it was finally released, some discussion was
made whether Sarge should be 4.0 as the difference from Woody was
already too large, to w
Ben Finney dijo [Fri, Nov 05, 2010 at 11:06:26AM +1100]:
> (...)
> Hopefully the suggestion to split non-Debian topics out to a separate
> feed (or, equivalently, to provide a Debian-topics-only feed which is
> the only one provided on Planet Debian) will be followed more often.
Many of us don't b
Russ Allbery dijo [Tue, Jan 18, 2011 at 05:03:22PM -0800]:
> I'm happy to see public domain added as a license keyword. (I'd rather
> the keyword be something like public-domain, not PD, but that's somewhat
> bikeshed painting.) I think the subsequent lines of the License field in
> that case sho
Alexander Reichle-Schmehl dijo [Tue, Feb 01, 2011 at 01:09:06PM +0100]:
> (...)
> However, "facts" are more than pure numbers, and what the miss en large
> are non numerical facts, more like anecdotes.
>
> One Example for such things would be, why there has never been an
> official "Debian GNU/Lin
Alek Mosingiewicz dijo [Tue, Feb 15, 2011 at 09:00:54PM +0100]:
> Hello,
>
> I just want to say "thanks" for Debian. I've decided to switch systems
> after my Windows 7 distribution, shipped with the Lenovo laptop,
> suddenly stopped responding to my input (and persisted in this behavior
> e
Hi,
I have been packaging the Cherokee webserver¹ since around 2005, and
it has shipped with Debian since Sarge, IIRC. Even though its
popularity does not (yet?) come close to Apache (or even to several of
the minimalist webservers), it is a high-performance, very reliable
contender. Starting with
dos4ever dijo [Fri, Mar 04, 2011 at 08:46:11AM -0800]:
> Hello I checked the FAQ and did not find the answer to this
> question: Why 7 install iso files at 4.4G & 1 at 842M =31Gb.
> I would hope that disk 1 is all that is needed to install the OS and
> the rest are programs?
> If they are all need
Hi Jeremiah,
Jeremiah Foster dijo [Tue, Mar 22, 2011 at 10:59:36AM +0100]:
> > As an additional point, the recently delegated DebConf chairs are
> > looking for one or two people from outside those currently most
> > involved in DebConf organisation to help out if we can't get a
> > DebConf12 venu
Debian Project Secretary - Kurt Roeckx dijo [Sat, Apr 16, 2011 at 05:31:39PM
+0200]:
> Hi,
>
> The winner of the election is Stefano Zacchiroli.
>
> (...)
>
> Stats for the DPL votes:
> |--+--++---++-++---|
> | | Num || Valid | U
Marcelo Gutierrez dijo [Tue, Jun 28, 2011 at 07:25:00PM -0600]:
> > I've been in both categories depending on the occasion. But when I've
> > been in the latter category (i.e. able to afford anticipating ticket
> > costs); it didn't matter much to me whether the delay was 1, 2, or 3
> > months. Thi
Paul Wise dijo [Thu, Jul 14, 2011 at 04:47:52PM +0200]:
> > What about collecting the actual document and attaching them to this
> > page (license permitting), or a DOI link? What about merging the
> > separate publication list into this page (actually there was a
> > discussion on a canonical refe
Stefano Zacchiroli dijo [Tue, Dec 13, 2011 at 12:26:09AM +0100]:
> > I hope Debian folks (especially ftpmasters) will be willing to
> > subscribe to the cc-licenses list and help ensure that the CC 4.0
> > licenses will be suitable for Debian.
> (...)
> So, to turn this into something even more use
Stefano Zacchiroli dijo [Mon, Feb 13, 2012 at 06:40:08PM +0100]:
> Dear project members,
> as you might have heard post-FOSDEM, the Open Source Initiative (OSI)
> is opening up to an affiliate membership structure [1,2]. As I've
> already mentioned in [3], representatives of OSI have approached
Arno Töll dijo [Mon, Mar 12, 2012 at 09:55:25PM +0100]:
> as somebody who pushed $work to donate money to Debian (i.e. via
> FFIS), I always wondered about the financial merits of these
> donations. As much as I am involved to work within Debian, I have no
> clue what you used "our" money for. I am
I'm redirecting this thread to d-project... You and I tend to think
about money very much DebConf-wise (specially in the March-July period
;-) ), but I think this is going away from the current d-vote
topic. Please reply to this message to d-project only.
Holger Levsen dijo [Tue, Mar 13, 2012 at 1
[ Alexis asks whether Debian is really virus-free. I'm putting him in
touch with the Costa Rica LUG and mentioning him we will have
DebConf in the neighbouring country. I'm quoting a paragraph of his,
which _is_ meant for all of the project:
"I have a one-employee microenterprise in Costa
Hi Francesca,
I have not done any analysis in the (deep, interesting) way all of the
people you have quoted has. I do feel it's positive to have this kind
of statement, and I thank you for bringing it forward.
I'll just talk on a formal level here:
> * isn't better a GR to give this statement mo
Russ Allbery dijo [Mon, Mar 26, 2012 at 10:03:20AM -0700]:
> MJ Ray writes:
>
> > 2. the continuing existance of the Debian Women mailing list illustrates
> > one way the whole-project level still does not honour diversity and
> > creates special spaces for some groups but not others.
>
> I just
Ansgar Burchardt dijo [Sun, Jun 10, 2012 at 01:57:49PM +0200]:
> Hi,
>
> (Please send followup messages to -project.)
>
> The ftp team wants to change how allowing Debian Maintainers to upload
> packages works. The current approach with the DM-Upload-Allowed field
> has a few issues we would lik
[ Armando wants to start creating his own OS from scratch, and has
quite a bit of questions regarding Debian. I'm suggesting him to try
via local groups, and... well, the mail grew large on me ;-) ]
Hola Armando,
La lista a la cual escribiste es una lista en inglés, aquí es poco
probable que
Stefano Zacchiroli dijo [Sat, Oct 13, 2012 at 04:21:07PM +0200]:
> But let's assume for the sake of the argument we want to keep both
> logos. (Maybe nowadays we're not yet convinced it's pointless to keep
> the restricted one, but maybe we'll be in a few years from now if our
> pattern of usage fo
Russ Allbery dijo [Tue, Dec 04, 2012 at 10:42:47AM -0800]:
> (... big snip ...)
> What remedy or action are you looking for here? I don't think breaking
> the anonymity of a donation that never happened really makes sense. Are
> you looking for site selection to be re-opened? Further reassurance
TL;DR ⇒ I'm sick of this discussion. I'm calling the DebConf chairs to
vote _NOW_ to sign or repeal the contract. I'm voting to
sign. (Do we need consensus between the three? Can we vote?)
I will probably do some netiquette breaches in this post... So,
apologies to all, but I think
Moray Allan dijo [Sat, Jan 26, 2013 at 02:40:36PM +]:
> There's been some discussion elsewhere about how young people's
> experience of computers has changed over the years, and how this
> might interact with our success in recruiting young people into
> Debian. I would estimate that the conve
MJ Ray dijo [Wed, Jun 12, 2013 at 11:49:09AM +0100]:
> > I finally had a chance to discuss with our legal counsel, and have
> > some answers to the questions raised in the discussion.
>
> Thanks for this. It covers all I remember. One small question:
>
> > 3) Should we register in the US only o
Paul Wise dijo [Fri, Jun 14, 2013 at 10:33:58AM +0800]:
> (...)
> Tying donations to one payment processor doesn't sound like a good idea to me.
>
> I am very concerned about motivations of Debian project volunteers
> being distorted by money so I would suggest only allowing donations to
> Debian
Philip Hands dijo [Sun, Jun 16, 2013 at 09:47:18AM +0100]:
> Manu Sporny writes:
> ...
> That is an assumption that I happen to think is completely unfounded.
>
> IBM tested various ways of incentivising coders decades ago -- almost
> (...)
> We tried DuncTank -- I'd contend that the net amount o
Manu Sporny dijo [Sun, Jun 16, 2013 at 08:53:35PM -0400]:
> >> Thanks to everyone that has participated in the discussion thus
> >> far. :) I think there have been a number of solid concerns and
> >> issues raised, which I'm going to try and wrap into a proposal
> >> below.
> >
> > and then you
Mohammed Adnène Trojette dijo [Wed, Jun 19, 2013 at 12:02:39AM +0200]:
> [I don't read d-projet]
>
> On Tue, Jun 18, 2013, Raphael Geissert wrote:
> > Comments?
>
> The spirit of the GR was to open more (even before OpenData became
> trendy, cf. today's G8's declaration). I fear that your proposa
Scott Howard dijo [Wed, Jun 19, 2013 at 11:01:27AM -0400]:
> The donate mechanism probably could be extended to increase donation
> awareness of important libraries/tools since apt knows what is really
> needed for each package even if end users may not.
>
> Maybe something can be done like:
> $ d
Danielle Rubio dijo [Wed, Jul 31, 2013 at 11:56:39AM -0700]:
> Hello,
>
> I'm with the USA Science and Engineering Festival in Washington DC. We are
> reaching out to Debian Women to see if your organization would like to be
> involved in our upcoming festival in April. Could you please send me a
Russ Allbery dijo [Fri, Oct 04, 2013 at 08:57:26PM -0700]:
> I suspect that some of the problem is people feeling like they need to go
> through an in-person key signing to get their new key certified, which can
> be quite awkward depending on where one lives and how much day-to-day
> contact one h
llowing for historical information on a
given mail address).
Of course, this would omit the fact we are dealing with people and not
with mail addresses. Am I "gw...@gwolf.org" or "gw...@debian.org"?
(But OTOH, am I "Gunnar Wolf", "Gunnar Eyal Wolf Iszaevich" or "Big
Bearded Troll"?)
signature.asc
Description: Digital signature
Thanks, Steve (and Wouter, of course). A very minor observation
regarding ordering.
>
> # Debian Code of Conduct
>
> ## Be respectful
>
> In a project the size of Debian, inevitably there will be people with
> whom you may disagree, or find it difficult to cooperate. Accept that,
> but eve
Tollef Fog Heen dijo [Fri, Nov 29, 2013 at 11:12:25AM +0100]:
> > > You mean you were using Debian resources to spread malware, and it seems
> >
> > You’re ridiculous. That’s not malware and cannot spread either
>
> «Malware, short for malicious software, is software used to disrupt
> computer op
Kelvin Rivera dijo [Fri, Dec 06, 2013 at 12:32:55AM -0500]:
> Hello,
>
> I am creating a website like distrowatch except that it will be a forum. I
> want to feature Debian
> on the website, but would like your permission to do so first. Debian's
> feature on the site will
> consist of links to yo
Enrico Zini dijo [Tue, Dec 10, 2013 at 06:02:27PM +0100]:
> Hello,
>
> it looks like as soon as one becomes DD, an email arrives from Google
> recruiters.
>
> I understand that some people may find it interesting, and some people
> find it annoying. My experience with just ignoring their email wa
Gunnar Wolf dijo [Tue, Dec 10, 2013 at 11:24:07AM -0600]:
> That's my experience as well. But once I told them I'm not interested
> in changing my current laboral situation, it stopped. I get recruiters
> mailing me every now and then, but a fairly tolerable rate (say, one
Tiago Bortoletto Vaz dijo [Thu, Dec 12, 2013 at 12:19:32AM -0500]:
> Actually they have tried many times even before I became DD. I know
> other non-DD maintainers who have been bothered by them too. I don't see
> a general solution for this, since some may like it. In my case I've
> told all recru
Jakub Wilk dijo [Wed, Feb 05, 2014 at 10:52:35PM +0100]:
> * Holger Levsen , 2014-02-05, 22:31:
> >I believe every new DD or DM should be auto subscribed to -devel,
> >-project and -devel-announce (and -private for DDs),
>
> Eww, no, thanks.
>
> >Those 3-4 lists should be read by anyone (as in DD
Kurt Roeckx dijo [Sun, Feb 23, 2014 at 12:46:41AM +0100]:
> For those people who are not aware of this yet, this is really a
> problem. This provides less security than an 80 bit symmetric
> cipher. A brute force for this is possible. It's considered to
> have "very short time" protection agains
Kurt Roeckx dijo [Sun, Feb 23, 2014 at 01:51:32AM +0100]:
> > I'd like to ask the project as a whole for input on how we should push
> > towards this migration. I guess that most of the socially-connected
> > Debian Developers already have 4096R keys. How can we reach those who
> > don't? How can w
Jakub Wilk dijo [Sun, Feb 23, 2014 at 02:29:22AM +0100]:
> >It would clearly be unacceptable for us to decide to lock out
> >61.5% of Debian because of their old key. Also, removing those
> >keys would most probably make our WoT much more fragile.
> >
> >I'd like to ask the project as a whole for i
Marco d'Itri dijo [Sun, Feb 23, 2014 at 07:57:43AM +]:
> gw...@gwolf.org wrote:
>
> >So, what do you suggest?
> Persuade developers that they should sign the new key of people whose
> old key they have already signed, with no need to meet them in person.
I'm open to that if and only if the ne
Matthias Urlichs dijo [Sun, Feb 23, 2014 at 10:23:47AM +0100]:
> That's somewhat true for now given a sufficiently-motivated attacker, but
> if *afterwards* some nefarious $CENSORED gets the idea that $DD would be a
> nice target for hacking their key, they'd be out of luck. They'd also be
> out of
Kurt Roeckx dijo [Sun, Feb 23, 2014 at 12:28:58PM +0100]:
> (...)
> I would also find it acceptable that the keyring maintainers
> accept a signature from a single DD to replace the key, with that
> single DD being the DD's old key. If they old key doesn't get
> revoked there is still a (weak) web
Ian Jackson dijo [Mon, Feb 24, 2014 at 05:53:58PM +]:
> Are we now at the stage where it is more important to retire these
> shortish keys, than to insist on this cross-signatures ?
>
> I.e., perhaps it would be better to invite key rollover from a short
> key to a long one despite the lack of
Ian Jackson dijo [Mon, Feb 24, 2014 at 05:57:57PM +]:
> I think this is a bug.
>
> It can increase security because it can make operations more
> convenient at the same level of security, and because people trade off
> convenience for security.
>
> For example, it would be possible to have on
Jonathan Dowland dijo [Sat, Mar 01, 2014 at 11:40:11AM +]:
> > Which, I think, is the status quo (except in cases where meetbot is used,
> > but then logs *are* available and good use of meetbot makes them
> > readable)
>
> I believe there are Debian sub-communities (and communities of other
Luca Filipozzi dijo [Fri, Apr 04, 2014 at 02:02:09PM +]:
> FWIU, the client-side encryption is javascript provided by the service so
> modifiable by the service at will and able to capture/transmit passphrase.
>
> DDs interested in this experimenting with this service are encouraged to NOT
> u
Jonathan Dowland dijo [Fri, Apr 04, 2014 at 02:50:01PM +0100]:
> keybase.io is a thing. This thing lets you, amongst other things, upload a
> copy
> of your PGP private key to their servers. This is client-side encrypted.
>
> Discuss.
As this thread was started at debian-private, I sent some of
Jonathan McDowell dijo [Fri, Apr 04, 2014 at 10:35:41PM +0100]:
> > > To be clear, if I spot any key
> > > that's both in any of the Debian keyrings and in keybase.io, I will
> > > proceed as if the key had been lost or compromised and immediately
> > > remove it from our keyring.
> >
> > No, sorr
Russ Allbery dijo [Fri, Apr 04, 2014 at 04:23:03PM -0700]:
> > Well, please enlighten me here: Without fully auditing the Javascript
> > code you are using to do the crypto client-side, can you *really* be
> > certain your private half has not travelled to Keybase?
>
> If Javascript running in a b
Kurt Roeckx dijo [Sun, Apr 20, 2014 at 12:51:45AM +0200]:
> On Sat, Apr 19, 2014 at 09:41:40PM +, Clint Adams wrote:
> > Upon request. Made with an unpackaged set of keyrings[0].
>
> Thanks for the update.
> (...)
> So we seem to making some progress, and I hope the rest will
> follow soon.
Steve Langasek dijo [Tue, May 06, 2014 at 01:36:00PM -0700]:
> What would really be nice would be if someone would make another run of the
> shaped swirl vinyl stickers. I think I last saw these for sale back in
> ~2006, and I've gone through enough hardware since then that my current
> laptop is
I cannot make a full, fair comparison between desktop environments, as
I use none. I saw several people bark at GNOME 3, but most of them are
happy adopters nowadays, so, I don't believe that factor should carry
much weigh nowadays. Besides, as Jordi says, making end users re-learn
everything *agai
1 - 100 of 212 matches
Mail list logo
