[Test-Announce] 2013-05-06 @ 16:00 UTC - F19 Beta Blocker Bug Review #3

2013-05-05 Thread Adam Williamson
# F19 Beta Blocker Review meeting #3 # Date: 2013-05-06 # Time: 16:00 UTC (12:00 EDT, 09:00 PDT) (after QA meeting) # Location: #fedora-blocker-review on irc.freenode.net The third blocker review meeting for F19 Beta will follow right after the QA meeting. We have quite a few proposed blockers to

[Test-Announce] 2013-05-06 @ 15:00 UTC - Fedora QA Meeting

2013-05-05 Thread Adam Williamson
# Fedora Quality Assurance Meeting # Date: 2013-05-06 # Time: 15:00 UTC (https://fedoraproject.org/wiki/Infrastructure/UTCHowto) # Location: #fedora-meeting on irc.freenode.net Greetings testers! It's meeting time again today/tomorrow! We'll check in on the status of Beta, and jreznik also wanted

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Adam Williamson
On Mon, 2013-05-06 at 00:02 -0400, Orcan Ogetbil wrote: > > Look, please, by all means, calmly discuss the merits of the decision. > > Just don't bring into question the motivations of its introduction > > unless you have a damn strong factual basis for doing so. > I believe I do have a damn stro

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Orcan Ogetbil
On Sun, May 5, 2013 at 2:35 PM, Adam Williamson wrote: > > On Sun, 2013-05-05 at 14:07 -0400, Orcan Ogetbil wrote: > > On Fri, May 3, 2013 at 4:04 PM, Dan Mashal wrote: > > Hi, > > > > In the latest Fedora 19 Beta TC2 install after I got through > > the > > initial s

Re: F19 DVD over size - what to drop?

2013-05-05 Thread Chris Adams
Once upon a time, Lars Seipel said: > - the checksums for netinstall images are signed with a Fedora key > - the corresponding public key is made available through https > - therefore the integrity of installer images can be verified That's only verifiable after the fact (when you want to use the

Re: F19 DVD over size - what to drop?

2013-05-05 Thread Lars Seipel
On Sat, May 04, 2013 at 01:03:11AM -0500, Chris Adams wrote: > However, unless your installer image is signed, checking RPM signatures > in anaconda is pointless (which is why the feature you mentioned is > based on Secure Boot). If someone was going to the trouble of changing > the RPM signatures

Re: Review swap (4 slots available)

2013-05-05 Thread Alex G.
On 05/05/2013 12:49 PM, Adam Williamson wrote: > On Sun, 2013-05-05 at 02:45 -0500, Alex G. wrote: >> Hi, >> >> I have 4 packages I'd like to get in before the Release of F19. For each of >> these >> slots, I'm offering to review a package of your choosing. >> >> But wait, there's more! Choose you

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread T.C. Hollingsworth
On Sat, May 4, 2013 at 10:27 PM, Gregory Maxwell wrote: > On Sat, May 4, 2013 at 11:06 AM, T.C. Hollingsworth > wrote: >> More to the point, the vast majority of the other software *in Fedora* >> that accepts passwords for any reason hides the passwords as they are >> typed. If this is really br

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Michael Scherer
Le dimanche 05 mai 2013 à 11:18 -0600, Chris Murphy a écrit : > > On May 5, 2013, at 1:40 AM, Pierre-Yves Chibon wrote: > > So if you disagree please provide *reasonable* > > arguments. > > Those who disagree have already done this ad nauseum. > > The summary: > > The Neilsen-Norman article ci

Re: rawhide report: 20130505 changes

2013-05-05 Thread Richard W.M. Jones
On Sun, May 05, 2013 at 11:26:17AM +, Fedora Rawhide Report wrote: > [libguestfs] > 1:libguestfs-1.21.36-1.fc20.i686 requires libbtrfs.so.0 > 1:libguestfs-1.21.36-1.fc20.x86_64 requires libbtrfs.so.0()(64bit) I've started a rebuild of libguestfs which should fix this. Is there any

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread M. Edward (Ed) Borasky
On Sun, May 5, 2013 at 11:35 AM, Adam Williamson wrote: [snip] > Look, please, by all means, calmly discuss the merits of the decision. > Just don't bring into question the motivations of its introduction > unless you have a damn strong factual basis for doing so. I maintain an open source proj

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Adam Williamson
On Sun, 2013-05-05 at 14:07 -0400, Orcan Ogetbil wrote: > On Fri, May 3, 2013 at 4:04 PM, Dan Mashal wrote: > Hi, > > In the latest Fedora 19 Beta TC2 install after I got through > the > initial steps of the install I started to setup my root > passw

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Orcan Ogetbil
On Fri, May 3, 2013 at 4:04 PM, Dan Mashal wrote: > Hi, > > In the latest Fedora 19 Beta TC2 install after I got through the > initial steps of the install I started to setup my root password. > > To my surprise my password was shown in plain text instead of bullets. > The obvious workaround is t

Re: Review swap (4 slots available)

2013-05-05 Thread Adam Williamson
On Sun, 2013-05-05 at 02:45 -0500, Alex G. wrote: > Hi, > > I have 4 packages I'd like to get in before the Release of F19. For each of > these > slots, I'm offering to review a package of your choosing. > > But wait, there's more! Choose your slot within 72 hours, and I will add, > free of > c

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Chris Murphy
On May 5, 2013, at 1:40 AM, Pierre-Yves Chibon wrote: > So if you disagree please provide *reasonable* > arguments. Those who disagree have already done this ad nauseum. The summary: The Neilsen-Norman article cited is an editorial piece. It is out of scope, out of context, not a study, and no

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Adam Williamson
On Sun, 2013-05-05 at 15:50 +0200, Roberto Ragusa wrote: > On 05/04/2013 06:35 PM, Adam Williamson wrote: > > http://it.slashdot.org/story/13/05/04/1248242/fedora-19-to-stop-masking-passwords > > > > Well, that escalated quickly. > > And in one of the replies: > > http://it.slashdot.org/comments

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Adam Williamson
On Sun, 2013-05-05 at 14:43 +0200, drago01 wrote: > >> Excuse my cynicism here but this would also require some change to the > >> QA process itself and what are blockers and what are not and the "nice > >> to have" process which should be renamed "we won't hold our breath". > > > > I don't really

Re: F19 DVD over size - what to drop?

2013-05-05 Thread Nico Kadel-Garcia
On Fri, May 3, 2013 at 9:59 AM, "Jóhann B. Guðmundsson" wrote: > On 05/03/2013 01:54 PM, Daniel P. Berrange wrote: >> >> While you can do all this with the netinstall ISO + a hosted >> install tree, this is not as convenient, because hosting or >> mirroring a single DVD image is much easier than m

Re: Q: webfonts:

2013-05-05 Thread Reindl Harald
Am 05.05.2013 11:44, schrieb Nicolas Mailhot: > And XP is out-of-support Microsoft-side. So any company use (that is what > is being talked about here) is likely to stop soonish fix your calendar there where i live we have 2013 and not 2014 signature.asc Description: OpenPGP digital signature

Re: yum tidy-cache

2013-05-05 Thread Frank Murphy
On Sun, 5 May 2013 14:45:17 +0100 Frank Murphy wrote: Apology for self reply > but repomanage seems to act on a named dir, > as distinct from working on yum cachedir. > > Am uncertain as to use in culling all repos within keepcache=1 > It may work as "repomanage -n /var/cache/yum I had been t

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Roberto Ragusa
On 05/04/2013 06:35 PM, Adam Williamson wrote: > http://it.slashdot.org/story/13/05/04/1248242/fedora-19-to-stop-masking-passwords > > Well, that escalated quickly. And in one of the replies: http://it.slashdot.org/comments.pl?sid=3716785&cid=43628711 "I like the way Windows 8 addressed this

Re: yum tidy-cache

2013-05-05 Thread Frank Murphy
On Sun, 05 May 2013 06:35:37 -0700 John Reiser wrote: > > Asking was yum tidy-cache ever in Fedora? > > http://freecode.com/projects/tidy-yum-cache-plugin > > How does that compare to "repomanage -o" from the yum-utils package? > That's not a plugin, but it does say which are the obsoleted > pac

Re: yum tidy-cache

2013-05-05 Thread John Reiser
> Asking was yum tidy-cache ever in Fedora? > http://freecode.com/projects/tidy-yum-cache-plugin How does that compare to "repomanage -o" from the yum-utils package? That's not a plugin, but it does say which are the obsoleted package versions. -- -- devel mailing list devel@lists.fedoraprojec

F-19 Branched report: 20130505 changes

2013-05-05 Thread Fedora Branched Report
Compose started at Sun May 5 09:15:02 UTC 2013 Broken deps for x86_64 -- [byzanz] byzanz-0.3-0.5.fc17.x86_64 requires libpanel-applet-4.so.0()(64bit) [deltacloud-core] deltacloud-core-1.0.5-2.fc19.noarch requires ruby(abi) =

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread drago01
On Sun, May 5, 2013 at 1:28 AM, Adam Williamson wrote: > On Sat, 2013-05-04 at 15:58 -0700, Dan Mashal wrote: > >> > If they do decide to keep the change, you could escalate it to FESCo. >> > However, (speaking only for myself here) I would be VERY reluctant to >> > override maintainers on their p

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Dariusz J. Garbowski
On 05/05/13 08:40 AM, Pierre-Yves Chibon wrote: On Sat, 2013-05-04 at 15:22 -0700, Dan Mashal wrote: Hidden by default and showing it on demand is likely to still be a hindrance to people who may not know they type their password wrong ( because I think most assume that it will work fine, we a

yum tidy-cache

2013-05-05 Thread Frank Murphy
Asking was yum tidy-cache ever in Fedora? http://freecode.com/projects/tidy-yum-cache-plugin No upstream activity since 2009: Couldn't find any mention of it being so using term "yum-tidy-cache" -- Regards, Frank - I check for new mail every 20min www.frankly3d.com -- devel mailing list devel@l

Re: Maybe OT: "sharecache"

2013-05-05 Thread Frank Murphy
On Sun, 5 May 2013 09:38:10 +0100 Frank Murphy wrote: Never mind man nfs: sharecache / nosharecache -- Regards, Frank - I check for new mail every 20min www.frankly3d.com -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

rawhide report: 20130505 changes

2013-05-05 Thread Fedora Rawhide Report
Compose started at Sun May 5 08:15:03 UTC 2013 Broken deps for x86_64 -- [byzanz] byzanz-0.3-0.5.fc17.x86_64 requires libpanel-applet-4.so.0()(64bit) [cinnamon] cinnamon-menu-editor-1.6.7-7.fc19.noarch requires gnome-panel [d

Re: Review swap

2013-05-05 Thread Markus Mayer
On 05/05/2013 01:19 PM, Eugene Pivnev wrote: 05.05.2013 13:25, Markus Mayer: Hi, I am seeking for a reviewer for jimtcl - A small embeddable Tcl interpreter: https://bugzilla.redhat.com/show_bug.cgi?id=959747 If anyone is willing to review this, I am happy to review a package of him/her instea

Re: Review swap

2013-05-05 Thread Eugene Pivnev
05.05.2013 13:25, Markus Mayer: Hi, I am seeking for a reviewer for jimtcl - A small embeddable Tcl interpreter: https://bugzilla.redhat.com/show_bug.cgi?id=959747 If anyone is willing to review this, I am happy to review a package of him/her instead. Let's swap with https://bugzilla.redhat

Re: Q: webfonts:

2013-05-05 Thread Alec Leamas
On 05/05/2013 11:40 AM, Nicolas Mailhot wrote: Le Dim 5 mai 2013 10:19, Alec Leamas a écrit : This seems to mean that we force web applications to exclude IE version 8 (and older) clients. As this seems to be a widely used IE version today, is this really the way to go? It seems to be a case

Re: Q: webfonts:

2013-05-05 Thread Nicolas Mailhot
Le Dim 5 mai 2013 12:01, Felix Miata a écrit : > On 2013-05-05 11:44 (GMT+0200) Nicolas Mailhot composed: > >> XP is out-of-support Microsoft-side. > > For what definition of "out-of-support"? > > http://www.microsoft.com/en-us/windows/endofsupport.aspx > > Considering Fedora release lifetimes, Wi

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Nicolas Mailhot
Le Dim 5 mai 2013 00:22, Dan Mashal a écrit : > I think people that have Macs have learned how to use their slightly > different keybaords by now. OTOH there are slight variations between the windows, mac and linux layouts for the same locale (due to the fact that getting fixes in xkb is way eas

Re: Q: webfonts:

2013-05-05 Thread Felix Miata
On 2013-05-05 11:44 (GMT+0200) Nicolas Mailhot composed: XP is out-of-support Microsoft-side. For what definition of "out-of-support"? http://www.microsoft.com/en-us/windows/endofsupport.aspx Considering Fedora release lifetimes, WinXP seems to have abundant life left. -- "The wise are known

Re: Do you think this is a security risk and if not is it a bad UI?decision?

2013-05-05 Thread Nicolas Mailhot
Le Sam 4 mai 2013 21:52, Adam Williamson a écrit : > I think it's generally > accepted that this is a case of a usability versus security trade-off, > and the questions are a) exactly how much security does masking provide > and b) once we have agreed on the terms (exactly how much more usable >

Re: Q: webfonts:

2013-05-05 Thread Nicolas Mailhot
Le Dim 5 mai 2013 11:27, Felix Miata a écrit : > On 2013-05-05 10:19 (GMT+0200) Alec Leamas composed: > >> Nicolas Mailhot wrote: > >>> Here is the current status of @font-face ttf/otf support in browsers: >>> http://caniuse.com/ttf ... > >> This seems to mean that we force web applications to exc

Re: Q: webfonts:

2013-05-05 Thread Nicolas Mailhot
Le Dim 5 mai 2013 06:40, T.C. Hollingsworth a écrit : > On Fri, May 3, 2013 at 12:50 PM, Nicolas Mailhot > wrote: >> I think spot will agree there is no way we'll ever ship a font >> consisting >> of company logos, it's trademark hell > > We ship *lots* of trademarked logos. In Firefox alone the

Re: Q: webfonts:

2013-05-05 Thread Nicolas Mailhot
Le Dim 5 mai 2013 10:19, Alec Leamas a écrit : > This seems to mean that we force web applications to exclude IE version > 8 (and older) clients. As this seems to be a widely used IE version > today, is this really the way to go? It seems to be a case of Fedora being first and Microsoft being l

Re: Q: webfonts:

2013-05-05 Thread Felix Miata
On 2013-05-05 10:19 (GMT+0200) Alec Leamas composed: Nicolas Mailhot wrote: Here is the current status of @font-face ttf/otf support in browsers: http://caniuse.com/ttf ... This seems to mean that we force web applications to exclude IE version 8 (and older) clients. As this seems to be a

Review swap

2013-05-05 Thread Markus Mayer
Hi, I am seeking for a reviewer for jimtcl - A small embeddable Tcl interpreter: https://bugzilla.redhat.com/show_bug.cgi?id=959747 If anyone is willing to review this, I am happy to review a package of him/her instead. Regards Markus -- devel mailing list devel@lists.fedoraproject.org ht

Re: Do you think this is a security risk and if not is it a bad UI?decision?

2013-05-05 Thread drago01
On Sat, May 4, 2013 at 10:27 PM, Adam Williamson wrote: > On Sat, 2013-05-04 at 13:20 -0700, Adam Williamson wrote: > >> That's it. So far as I can see, that's the sole reference to any actual >> identifiable study. And again, so far as I can see, the entire 2009 >> debate spiraled out from that s

Maybe OT: "sharecache"

2013-05-05 Thread Frank Murphy
Got an idea am working on. Need to know if anything Fedora*ish is using the word "sharecache" in any form. I just don't know how to check everything. Except ask here.. -- Regards, Frank www.frankly3d.com -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/

Re: Q: webfonts:

2013-05-05 Thread Alec Leamas
On 05/03/2013 09:50 PM, Nicolas Mailhot wrote: Le Ven 3 mai 2013 21:06, Alec Leamas a écrit : Still hesitating a here: if upstream has decided to support the widest possible set of browsers (including IE): should we really just drop the formats required by IE? From a user perspective, I don't

Review swap (4 slots available)

2013-05-05 Thread Alex G.
Hi, I have 4 packages I'd like to get in before the Release of F19. For each of these slots, I'm offering to review a package of your choosing. But wait, there's more! Choose your slot within 72 hours, and I will add, free of charge, a smiley face to the review of your package. Supplies are li

Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-05 Thread Pierre-Yves Chibon
On Sat, 2013-05-04 at 15:22 -0700, Dan Mashal wrote: > > > Hidden by default and showing it on demand is likely to still be a > > hindrance to people who may not know they type their password wrong > > ( because I think most assume that it will work fine, we are not to > a > > point where people a