Re: Alpha 4 freeze ahead

2008-01-28 Thread Patrice Vetsel
Le Sun, 27 Jan 2008 15:21:25 -0500, "Bryan Quigley" <[EMAIL PROTECTED]> a écrit : > why not include it by default early > on to get more testing? Indeed +1 -- Patrice Vetsel <[EMAIL PROTECTED]> Aka/Alias Kagou https://launchpad.net/people/vetsel-patrice gpg key: 0x15c094db signature.asc Des

Re: metashell - User Friendly Shell

2008-01-28 Thread Murat Gunes
On Mon, 2008-01-28 at 00:33 +, Fergal Daly wrote: > So let me rephrase my points > > 1 there are multiple tools which do roughly the same thing - see, > gnome-open and probably k-something-or-other and no unified location > for preferences for these tools We have xdg-open, part of xdg-utils,

Re: metashell - User Friendly Shell

2008-01-28 Thread Matthew Paul Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fergal Daly wrote: >... On Sun, Jan 27, 2008 at 02:01:56AM +, Fergal Daly wrote: > > Seems like you could achieve much the same thing by having command > (let's call it "o" for open so it's nice and short) that checks the > mi

Re: metashell - User Friendly Shell

2008-01-28 Thread Dries Desmet
Fergal Daly wrote: > [...] > > So let me rephrase my points > > 1 there are multiple tools which do roughly the same thing - see, > gnome-open and probably k-something-or-other and no unified location > for preferences for these tools > > 2 multiple tools which do roughly the same thing is no probl

Re: Securely downloading Ubuntu

2008-01-28 Thread Neal McBurnett
On Mon, Jan 28, 2008 at 04:58:00PM +, John Carr wrote: > > > If the MD5SUMS files are purely for validating downloads[3], could the > > > completely useless/misleading GPG files be dropped? > > > > They are far from useless - they are the only way to validate the hash > > information based on t

libapache-asp-perl (LP #145741)

2008-01-28 Thread Dan Sheridan
Dear all, Apache::ASP is a perl implementation of Active Server Pages. The package libapache-asp-perl was removed from Gutsy with the comment "Package is Apache 1.x specific which no longer resides in the archive". However, it is installable and works correctly on Gutsy with Apache 2.2, and we are

Re: libapache-asp-perl (LP #145741)

2008-01-28 Thread Mathias Gug
Hi Dan, On Mon, Jan 28, 2008 at 03:02:25PM +, Dan Sheridan wrote: > I'd like to see this package re-added to Hardy. What is the best > approach? Should I prepare an updated package with trimmed dependencies > and upload to REVU? Should it be renamed libapache2-asp-perl? > The process to get

Re: Securely downloading Ubuntu

2008-01-28 Thread Neal McBurnett
On Mon, Jan 28, 2008 at 04:44:05PM +0200, Lars Wirzenius wrote: > On ti, 2008-01-22 at 19:32 +, Chris Lamb wrote: > > However, the MD5 digest algorithm is utterly broken > > How broken is it? Can one reasonably expect that a well-provisioned > attacker can create an MD5SUMS file that has the

Re: Securely downloading Ubuntu

2008-01-28 Thread Neal McBurnett
On Mon, Jan 28, 2008 at 05:20:52PM +, Matt Zimmerman wrote: > On Mon, Jan 28, 2008 at 09:28:48AM -0700, Neal McBurnett wrote: > > > (I'm all in favor of moving to SHA256 or whatever is considered best > > > practice these days. I've just not heard that MD5 is really as broken as > > > I think C

Re: libapache-asp-perl (LP #145741)

2008-01-28 Thread Scott Kitterman
On Monday 28 January 2008 10:02, Dan Sheridan wrote: > Dear all, > > Apache::ASP is a perl implementation of Active Server Pages. The package > libapache-asp-perl was removed from Gutsy with the comment "Package is > Apache 1.x specific which no longer resides in the archive". However, it > is inst

Re: Securely downloading Ubuntu

2008-01-28 Thread Matt Zimmerman
On Mon, Jan 28, 2008 at 09:28:48AM -0700, Neal McBurnett wrote: > > (I'm all in favor of moving to SHA256 or whatever is considered best > > practice these days. I've just not heard that MD5 is really as broken as > > I think Chris suggests here.) > > One easy thing to do is to also publish sha256

Re: Securely downloading Ubuntu

2008-01-28 Thread John Carr
> > If the MD5SUMS files are purely for validating downloads[3], could the > > completely useless/misleading GPG files be dropped? > > They are far from useless - they are the only way to validate the hash > information based on trust roots that are (or should be) on your > system already. > > Neal

Re: Securely downloading Ubuntu

2008-01-28 Thread Fabian Rodriguez
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Neal McBurnett wrote: | | That ftpmaster key is already on installed systems, right? I would | think we could preinstall system keyrings and give instructions that | would be based on that. Do we not ship the <[EMAIL PROTECTED]> key? GnuPG's loc

grub-pc (grub 1.95) shows as Automatically installed but in aptitude shows as not automatically installed

2008-01-28 Thread shirish
Hi all, I did a listing of grub. I have installed grub 1.95 aptitude search grub p ggz-grubby - GGZ Gaming Zone: chat bot with the ability to play games p ggz-grubby-dbgsym - debug symbols for package ggz-

Re: Securely downloading Ubuntu

2008-01-28 Thread Neal McBurnett
[I've been sending, like the original poster, to both lists, and different responses from different people have gone to each list. But we should probably choose just one of these lists to use for this conversation I'd choose the -devel-discuss list since my postings to the -devel list have to