[maemo-developers] Re: Unresolved issues (Week 42)

2006-10-25 Thread Sebastian Spaeth
Koen Kooi wrote: Tommi Komulainen schreef: Here is a list of issues raised on this list I think have not been concluded so far, in no particular order. The easiest way to get off the list is to provide answers, but you can also try convincing me other ways. I've said it on IRC before, but

Re: [maemo-developers] use DT_GNU_HASH

2006-10-25 Thread Rafael EspĂ­ndola
yes, PyGTK slowness came mostly from resolving about 3k symbols. :-) PyGTK also uses a lot of time creating python objects during startup. But this will surely help, and GTK itself also exports many symbols. Rafael, does your 50% is related to _gtk.so import? It is a test that just dlopens

Re: [maemo-developers] Flash player 9

2006-10-25 Thread Ian
Ola, . Maybe Flash has a use in interactive product demos before we have more capable W3C SVG Maybe this is a bit of a specialist field but there is also a need in GIS for some interactive 3D web applications (Katrina and the Asian Tsunami brought this home pretty hard). This is however a bit of

[maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Marius Vollmer
Hi, this is embarrassing: there is a buffer overflow in the Application Manager that is triggered when dealing with package icons that are larger than 2048 bytes after base64 decoding. The overflow happens when there is a repository in /etc/apt/sources.list that contains such a icon in one of

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Andrew Flegg
On 10/25/06, Marius Vollmer [EMAIL PROTECTED] wrote: this is embarrassing: there is a buffer overflow in the Application Manager that is triggered when dealing with package icons that are larger than 2048 bytes after base64 decoding. Oops. Thanks for the disclosure. The bug is present in

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Ian
Ola, This now brings the question of an end-user roadmap back to the fore with a vengenance. To put it bluntly, how long is Nokia going to leave end users vulnerable to possible attacks? When *is* the next maintenance release of IT 2006? maybe its more helpful to ask if there is anything we

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Andrew Flegg
On 10/25/06, David Weinehall [EMAIL PROTECTED] wrote: [snip] You know, IMO (not official Nokia policy) this isn't exactly a high risk security issue. To exploit, you need to install a package from an external, non-trusted source. Once you start installing non-trusted 3rd party

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread David Weinehall
On ons, 2006-10-25 at 16:30 +0100, ext Andrew Flegg wrote: On 10/25/06, David Weinehall [EMAIL PROTECTED] wrote: [snip] You know, IMO (not official Nokia policy) this isn't exactly a high risk security issue. To exploit, you need to install a package from an external, non-trusted

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Koen Kooi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Weinehall schreef: On ons, 2006-10-25 at 16:24 +0100, ext Andrew Flegg wrote: On 10/25/06, Ian [EMAIL PROTECTED] wrote: maybe its more helpful to ask if there is anything we (the community) can do to help get it out of the door?? ... That

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Andrew Flegg
On 10/25/06, David Weinehall [EMAIL PROTECTED] wrote: On ons, 2006-10-25 at 16:24 +0100, ext Andrew Flegg wrote: On 10/25/06, Ian [EMAIL PROTECTED] wrote: maybe its more helpful to ask if there is anything we (the community) can do to help get it out of the door?? ... That presupposes

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Marius Vollmer
ext David Weinehall [EMAIL PROTECTED] writes: On ons, 2006-10-25 at 16:24 +0100, ext Andrew Flegg wrote: On 10/25/06, Ian [EMAIL PROTECTED] wrote: maybe its more helpful to ask if there is anything we (the community) can do to help get it out of the door?? ... That presupposes there

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread David Weinehall
On ons, 2006-10-25 at 17:44 +0200, ext Koen Kooi wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Weinehall schreef: On ons, 2006-10-25 at 16:24 +0100, ext Andrew Flegg wrote: On 10/25/06, Ian [EMAIL PROTECTED] wrote: maybe its more helpful to ask if there is anything we (the

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread George Farris
On Wed, 2006-25-10 at 18:57 +0300, David Weinehall wrote: Most of the quirks have been twisted out now; it's almost functional, and our legal department is checking it at the moment. This has got to be the saddest statement of our society, the fact that the legal department has to check on it.

[maemo-developers] Re: maemo-developers Digest, Vol 18, Issue 34

2006-10-25 Thread paolo delbene
i have to buy a hub of kraun 4 ports usb, now i would to connect a keyboard and a mouse to use better the nokia 770 as keyboard i founded a comat (small keyboard) as mouse i think to use a logitech, but this is not the real problem, after to have connect the usb cable to the nokia and then to the

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread George Farris
On Wed, 2006-25-10 at 19:54 +0300, David Weinehall wrote: On ons, 2006-10-25 at 09:39 -0700, ext George Farris wrote: On Wed, 2006-25-10 at 18:57 +0300, David Weinehall wrote: Most of the quirks have been twisted out now; it's almost functional, and our legal department is checking it at

Re: [maemo-developers] Re: maemo-developers Digest, Vol 18, Issue 34

2006-10-25 Thread Bob Herrmann
I followed these directions, more or less, and built a working cable.. I used a self powered usb hub, so I didn't do anything with the powersupply stuff. http://thoughtfix.blogspot.com/2006/01/usb-power-injector-2.html Any usb keyboard should work, but mouse support seems to be another

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Mikhail Sobolev
On Wed, Oct 25, 2006 at 04:49:09PM +0100, Andrew Flegg wrote: If Nokia's plans now solely consist of yearly releases (with no word as to whether or not they cost money), the community'll probably want to start thinking about forking whatever's present so that we're not dependent on occasional,

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Ian
Ola, Either way, some professionalism would be nice. It's certainly a matter of definition :) Please do define it and we'll see if it's possible to follow your definition... From http://en.wikipedia.org/wiki/Professional A professional provides a service in exchange for payment in accordance

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Mikhail Sobolev
On Wed, Oct 25, 2006 at 03:43:34PM -0500, Ian wrote: Either way, some professionalism would be nice. It's certainly a matter of definition :) Please do define it and we'll see if it's possible to follow your definition... From http://en.wikipedia.org/wiki/Professional A professional

Re: [maemo-developers] IMPORTANT: vulnerability in Application Manager, please check your repositories

2006-10-25 Thread Andrew Flegg
On 10/25/06, Mikhail Sobolev [EMAIL PROTECTED] wrote: On Wed, Oct 25, 2006 at 04:49:09PM +0100, Andrew Flegg wrote: If Nokia's plans now solely consist of yearly releases (with no word as to whether or not they cost money), the community'll probably want to start thinking about forking