Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Do you just like seeing your name on public lists? No Just let the thread die already. If you want the thread to die, not repeating what others have already written would be a good start. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL P

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread James Shupe
Do you just like seeing your name on public lists? Just let the thread die already. Filipus Klutiero wrote: I'm going to say that, at the very least, this is on the wrong list and is a waste of time for everybody who subscribes. David Ehle already expressed the opinion that this topic was broug

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
I'm going to say that, at the very least, this is on the wrong list and is a waste of time for everybody who subscribes. David Ehle already expressed the opinion that this topic was brought up on the wrong list in http://lists.debian.org/debian-security/2008/03/msg00051.html The comment on the s

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread James Shupe
I'm going to say that, at the very least, this is on the wrong list and is a waste of time for everybody who subscribes. The comment on the site was well justified, and yes, opinionated. If you don't agree with it, disregard it and go on with your life. You've apparently disregarded the topic o

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 11:03:29 pm David Ehle, vous avez écrit : > Please take this discussion off list. It has nothing to do with security. The statement discussed is about security and was written by a security team member so it probably has something to do with security. Steve Kemp suggested to di

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread s. keeling
Sorry to continue this. :-P Filipus Klutiero <[EMAIL PROTECTED]>: > > No. My point is not that users shouldn't upgrade or that Debian > releases should be supported for longer. I'm just pointing that > it's useless/misleading to state the project is proud of the > security support duration.

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
On Monday 10 March 2008 06:02:05 pm Filipus Klutiero wrote: > Uh? What do you disagree with, and which of my statements do you > think is inaccurate? The statement I quoted. That would be Because if somebody disagrees, the statement is inaccurate which is a good enough reason to remove or chang

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
On 2008-03-10, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > I already compared the duration of oldstable support in the bug report, but > let's look at the total security support duration of each release of other > free distros if you want. Let's take these 3 which are not too far from > Debi

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Lee Glidewell
On Monday 10 March 2008 06:02:05 pm Filipus Klutiero wrote: > Uh? What do you disagree with, and which of my statements do you > think is inaccurate? The statement I quoted. > I have difficulty finding something to reply which is as useful as > this name-calling. Ding ding ding! Now: go away or

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread David Ehle
Please take this discussion off list. It has nothing to do with security. Take it to some list that has has to do with debian policy, announcements, the web-page or anyplace else where it might be relevent. Great job Security team. Thanks for all your work. -- David Ehle Computing Systems M

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
On Mon 10 Mar 2008 19:05:44 Filipus Klutiero wrote: > Le March 10, 2008 04:44:35 pm Noah Meyerhans, vous avez écrit : [...] > > I don't care if you think we > > shouldn't be proud. We are and we will continue to be. > My point is not to tell you to stop being proud, it's to avoid bragging in

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Felipe Figueiredo
On Mon 10 Mar 2008 19:05:44 Filipus Klutiero wrote: > Le March 10, 2008 04:44:35 pm Noah Meyerhans, vous avez écrit : > > Why should you care if anybody disagrees? > Because if somebody disagrees, the statement is inaccurate which is a good > enough reason to remove or change it. Last time I che

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Russ Allbery
Joerg Jaspert <[EMAIL PROTECTED]> writes: > Yes, it is, and people visiting the Debian booth at Cebit confirmed that > multiple times. (Not with such direct words, but they did talk about the > long support for a stable release with security and stuff together with > the mostly easy upgrades we ha

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
This one time, at band camp, Filipus Klutiero said: > Hi, I reported #468765 about a questionable statement on > www.debian.org. Frank Lichtenheld wants this to be discussed. > > This statement is in a security announcement. Martin Schulze confirmed > that he wrote the statement. Does the secur

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 07:49:22 pm Joerg Jaspert, vous avez écrit : [...] > > If it really annoys you so much that its no longer supported after March > 31st - noone stops you from doing the work and providing security > support for sarge in an archive you set up for it. If there's anything I wrote that

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Lee Glidewell
On Monday 10 March 2008 07:54:32 pm Rich Healey wrote: > For what it's worth, I'm proud of you guys. > > I do volunteer work for a much smaller project, and it's hard but > satisfying. +1. Given that Debian is maintained by volunteers, and that it has one of the largest repositories among the G

Re: Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
This one time, at band camp, Filipus Klutiero said: > > > >This one time, at band camp, Filipus Klutiero said: > >> RHEL and derivatives: 7 years > > > >This is longer than Debian. > > > >> openSUSE: 2 years > >> Ubuntu: a bit more complex. > >> 1.5 in general > >> LTS releases: 3 on desktop,

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Filipus Klutiero wrote: Hi, I reported #468765 about a questionable statement on www.debian.org. Frank Lichtenheld wants this to be discussed. This statement is in a security announcement. Martin Schulze confirmed that he wrote the statement. Does the security

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Rich Healey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steve Kemp wrote: > On Mon Mar 10, 2008 at 17:57:04 -0400, Filipus Klutiero wrote: > >> It should be supported as long as RHEL. > > Give me piles of cash and I'll support it for as long as you want. > > But this discussion is pointless. The sta

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 07:21:28 pm Steve Kemp, vous avez écrit : > On Mon Mar 10, 2008 at 17:57:04 -0400, Filipus Klutiero wrote: > > It should be supported as long as RHEL. > > Give me piles of cash and I'll support it for as long as you want. Ur, here is the context which you are replying to: > >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Steve Kemp
On Mon Mar 10, 2008 at 17:57:04 -0400, Filipus Klutiero wrote: > It should be supported as long as RHEL. Give me piles of cash and I'll support it for as long as you want. But this discussion is pointless. The statement is true *we* are proud; regardless of whether you or anybody else agre

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Joerg Jaspert
On 11320 March 1977, Filipus Klutiero wrote: > This statement is in a security announcement. Martin Schulze confirmed that > he > wrote the statement. Does the security team think that oldstable security > support duration is something to be proud of? Yes, it is, and people visiting the Debian

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Stephen Gran
This one time, at band camp, Filipus Klutiero said: > > > >This one time, at band camp, Filipus Klutiero said: > >> RHEL and derivatives: 7 years > > > >This is longer than Debian. > > > >> openSUSE: 2 years > >> Ubuntu: a bit more complex. > >>1.5 in general > >>LTS releases: 3 on desktop,

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
This one time, at band camp, Filipus Klutiero said: > RHEL and derivatives: 7 years This is longer than Debian. > openSUSE: 2 years > Ubuntu: a bit more complex. >1.5 in general >LTS releases: 3 on desktop, 5 on server These are all shorter, except for Ubuntu server LTS. No, support

Re: Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
On Monday 10 March 2008 05:05:44 pm Filipus Klutiero wrote: > Because if somebody disagrees, the statement is inaccurate which is > a good enough reason to remove or change it. > I disagree. Your statement is therefore inaccurate. Uh? What do you disagree with, and which of my statements do yo

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 04:58:28 pm Török Edwin, vous avez écrit : > Filipus Klutiero wrote: > > free distros if you want. Let's take these 3 which are not too far from > > Debian's quality: > > RHEL and derivatives: 7 years > > Rather than using a 7 year old product with security updates, you can > use

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Sune Vuorela
On 2008-03-10, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > I already compared the duration of oldstable support in the bug report, but > let's look at the total security support duration of each release of other > free distros if you want. Let's take these 3 which are not too far from > Debian

# of supported packages (was Re: Is oldstable security support duration something to be proud of?)

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 04:43:30 pm, vous avez écrit : > On Mon, Mar 10, 2008 at 04:13:43PM -0400, Filipus Klutiero wrote: > > Le March 10, 2008 02:56:15 pm Luk Claes, vous avez ?crit?: > > > Filipus Klutiero wrote: > > > > Hi, > > > > I reported #468765 about a questionable statement on www.debian.org.

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Lee Glidewell
On Monday 10 March 2008 05:05:44 pm Filipus Klutiero wrote: > Because if somebody disagrees, the statement is inaccurate which is > a good enough reason to remove or change it. > I disagree. Your statement is therefore inaccurate. Filipus: please stop trolling this list and get on with your life.

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 04:44:35 pm Noah Meyerhans, vous avez écrit : > On Mon, Mar 10, 2008 at 04:33:53PM -0400, Filipus Klutiero wrote: > > > Their public one, the one you referenced. > > > > Argh. If I'm asking about a statement, that's because I read it. > > Obviously, the author didn't bother checki

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 05:45:45 pm Michael Loftis, vous avez écrit : > --On March 10, 2008 4:33:53 PM -0400 Filipus Klutiero <[EMAIL PROTECTED]> > > wrote: > > Argh. If I'm asking about a statement, that's because I read it. > > Obviously, the author didn't bother checking whether he was right, which >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Kotikov Aleksey
Filipus Klutiero wrote: Hi, I reported #468765 about a questionable statement on www.debian.org. Frank Lichtenheld wants this to be discussed. This statement is in a security announcement. Martin Schulze confirmed that he wrote the statement. Does the security team think that oldstable securi

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Michael Loftis
--On March 10, 2008 4:33:53 PM -0400 Filipus Klutiero <[EMAIL PROTECTED]> wrote: Argh. If I'm asking about a statement, that's because I read it. Obviously, the author didn't bother checking whether he was right, which is why I'm asking whether there are some people that disagree. Actua

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread dann frazier
On Mon, Mar 10, 2008 at 04:13:43PM -0400, Filipus Klutiero wrote: > Le March 10, 2008 02:56:15 pm Luk Claes, vous avez ?crit?: > > Filipus Klutiero wrote: > > > Hi, > > > I reported #468765 about a questionable statement on www.debian.org. > > > Frank Lichtenheld wants this to be discussed. > > > >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Török Edwin
Filipus Klutiero wrote: > free distros if you want. Let's take these 3 which are not too far from > Debian's quality: > RHEL and derivatives: 7 years Rather than using a 7 year old product with security updates, you can use a newer stable release [*]. For Debian when security support ends, there

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Stephen Gran
This one time, at band camp, Filipus Klutiero said: > RHEL and derivatives: 7 years This is longer than Debian. > openSUSE: 2 years > Ubuntu: a bit more complex. > 1.5 in general > LTS releases: 3 on desktop, 5 on server These are all shorter, except for Ubuntu server LTS. So your c

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 04:24:22 pm Jim Popovitch, vous avez écrit : > On Mon, Mar 10, 2008 at 4:13 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > Debian is somewhat better than openSUSE, equal or slightly worst than > > Ubuntu and definitely worst than RHEL and derivatives. So on average, > > Debi

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Noah Meyerhans
On Mon, Mar 10, 2008 at 04:33:53PM -0400, Filipus Klutiero wrote: > > Their public one, the one you referenced. > Argh. If I'm asking about a statement, that's because I read it. Obviously, > the author didn't bother checking whether he was right, which is why I'm > asking whether there are some

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 04:23:07 pm Jim Popovitch, vous avez écrit : > On Mon, Mar 10, 2008 at 4:14 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > Le March 10, 2008 03:15:04 pm Jim Popovitch, vous avez écrit : > > > On Mon, Mar 10, 2008 at 3:01 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Nico Golde
Hi Filipus, * Filipus Klutiero <[EMAIL PROTECTED]> [2008-03-10 21:19]: > Le March 10, 2008 03:15:04 pm Jim Popovitch, vous avez écrit : > > On Mon, Mar 10, 2008 at 3:01 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > > Le March 10, 2008 02:57:56 pm Jim Popovitch, vous avez écrit : > > > > On >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Jim Popovitch
On Mon, Mar 10, 2008 at 4:13 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > Debian is somewhat better than openSUSE, equal or slightly worst than Ubuntu > and definitely worst than RHEL and derivatives. So on average, Debian is > somewhat worst than its main alternatives in this aspect. On w

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Jim Popovitch
On Mon, Mar 10, 2008 at 4:14 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > Le March 10, 2008 03:15:04 pm Jim Popovitch, vous avez écrit : > > > On Mon, Mar 10, 2008 at 3:01 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > > Le March 10, 2008 02:57:56 pm Jim Popovitch, vous avez écrit : > >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 03:01:28 pm Noah Meyerhans, vous avez écrit : > On Mon, Mar 10, 2008 at 01:36:46PM -0500, Filipus Klutiero wrote: > > I reported #468765 about a questionable statement on www.debian.org. > > Frank Lichtenheld wants this to be discussed. > > > > This statement is in a security anno

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 02:56:15 pm Luk Claes, vous avez écrit : > Filipus Klutiero wrote: > > Hi, > > I reported #468765 about a questionable statement on www.debian.org. > > Frank Lichtenheld wants this to be discussed. > > > > This statement is in a security announcement. Martin Schulze confirmed > >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 03:15:04 pm Jim Popovitch, vous avez écrit : > On Mon, Mar 10, 2008 at 3:01 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > Le March 10, 2008 02:57:56 pm Jim Popovitch, vous avez écrit : > > > On Mon, Mar 10, 2008 at 2:36 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Stephen Gran
This one time, at band camp, Filipus Klutiero said: > Hi, I reported #468765 about a questionable statement on > www.debian.org. Frank Lichtenheld wants this to be discussed. > > This statement is in a security announcement. Martin Schulze confirmed > that he wrote the statement. Does the security

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Noah Meyerhans
On Mon, Mar 10, 2008 at 01:36:46PM -0500, Filipus Klutiero wrote: > I reported #468765 about a questionable statement on www.debian.org. Frank > Lichtenheld wants this to be discussed. > > This statement is in a security announcement. Martin Schulze confirmed that > he > wrote the statement. Do

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Jim Popovitch
On Mon, Mar 10, 2008 at 3:01 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > Le March 10, 2008 02:57:56 pm Jim Popovitch, vous avez écrit : > > > On Mon, Mar 10, 2008 at 2:36 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > > This statement is in a security announcement. Martin Schulze confi

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Le March 10, 2008 02:57:56 pm Jim Popovitch, vous avez écrit : > On Mon, Mar 10, 2008 at 2:36 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > > This statement is in a security announcement. Martin Schulze confirmed > > that he wrote the statement. Does the security team think that oldstable > >

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Jim Popovitch
On Mon, Mar 10, 2008 at 2:36 PM, Filipus Klutiero <[EMAIL PROTECTED]> wrote: > This statement is in a security announcement. Martin Schulze confirmed that > he > wrote the statement. Does the security team think that oldstable security > support duration is something to be proud of? Yes. This

Re: Is oldstable security support duration something to be proud of?

2008-03-10 Thread Luk Claes
Filipus Klutiero wrote: > Hi, > I reported #468765 about a questionable statement on www.debian.org. Frank > Lichtenheld wants this to be discussed. > > This statement is in a security announcement. Martin Schulze confirmed that > he > wrote the statement. Does the security team think that olds

Is oldstable security support duration something to be proud of?

2008-03-10 Thread Filipus Klutiero
Hi, I reported #468765 about a questionable statement on www.debian.org. Frank Lichtenheld wants this to be discussed. This statement is in a security announcement. Martin Schulze confirmed that he wrote the statement. Does the security team think that oldstable security support duration is som