[Elementary-dev-community] UGENT: Change your Launchpad passwords!

2014-04-08 Thread Sergey Shnatsel Davidoff
Hey guys,

Launchpad SSL keys have been changed just now, so the connections to it
should be no longer vulnerable, provided you have an up-to-date system.

Please clear all cookies, log in to Launchpad again and change your
passwords - it's possible that they have been leaked because of this bug!

-- 
Sergey Shnatsel Davidoff
-- 
Mailing list: https://launchpad.net/~elementary-dev-community
Post to : elementary-dev-community@lists.launchpad.net
Unsubscribe : https://launchpad.net/~elementary-dev-community
More help   : https://help.launchpad.net/ListHelp


Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY

2014-04-08 Thread Ramiro Algozino
GitHub just tweeted:

@github  https://twitter.com/github 32 min
 https://twitter.com/github/status/453578068255588352Another note
regarding the OpenSSL vulnerability: SSH is not affected. You don't need to
do anything with your SSH keys.

Source: https://twitter.com/github/status/453578068255588352

Cheers,


2014-04-07 23:16 GMT-03:00 Sergey Shnatsel Davidoff 
ser...@elementaryos.org:

 Since Launchpad itself is probably vulnerable, I strongly suggest everyone
 with code commit and/or PPA upload permissions to CLEAR ALL COOKIES and
 refrain from using Launchpad until
 https://bugs.launchpad.net/launchpad/+bug/1304136 is fixed.


 2014-04-08 5:14 GMT+04:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

 Oh yeah, right, don't forget to change your important passwords too!


 2014-04-08 4:56 GMT+04:00 desideran...@rocketmail.com 
 desideran...@rocketmail.com:

 SSH does not use TLS per se, so revoking ssh keys is not that useful

 Enviado desde Mail con Replicant

  --
 * From: * victor-eduardo victoredua...@gmail.com;
 * To: * Sergey Shnatsel Davidoff ser...@elementaryos.org;
 * Cc: * elementary-dev-community@lists.launchpad.net 
 elementary-dev-community@lists.launchpad.net;
 * Subject: * Re: [Elementary-dev-community] URGENT: Update and change
 your SSH keys IMMEDIATELY
 * Sent: * Tue, Apr 8, 2014 12:36:30 AM

   Thanks for the heads up!

 OpenSSL is flawed by design indeed :(

 On lun, abr 7, 2014 at 6:31 , Sergey Shnatsel Davidoff 
 ser...@elementaryos.org wrote:

 Also do not forget to revoke the older keys wherever they are used -
 Launchpad, etc.


 2014-04-08 3:45 GMT+04:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

 There's a killer bug in OpenSSL that leaks private keys! Update your
 system and change your SSH private keys (and other private keys for good
 measure) IMMEDIATELY!

 More info at http://heartbleed.com/
 *runs off to upgrade all machines and change keys everywhere*
 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff

 --
 Mailing list: https://launchpad.net/~elementary-dev-community
 Post to : elementary-dev-community@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~elementary-dev-community
 More help   : https://help.launchpad.net/ListHelp




-- 
Ramiro Algozino
http://ramiroalgozino.com.ar/
-- 
Mailing list: https://launchpad.net/~elementary-dev-community
Post to : elementary-dev-community@lists.launchpad.net
Unsubscribe : https://launchpad.net/~elementary-dev-community
More help   : https://help.launchpad.net/ListHelp


Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY

2014-04-08 Thread Sergey Shnatsel Davidoff
I've been over-reacting then. Sorry.


2014-04-08 21:33 GMT+04:00 Ramiro Algozino algoz...@gmail.com:

 GitHub just tweeted:

 @github  https://twitter.com/github 32 min
  https://twitter.com/github/status/453578068255588352Another note
 regarding the OpenSSL vulnerability: SSH is not affected. You don't need to
 do anything with your SSH keys.

 Source: https://twitter.com/github/status/453578068255588352

 Cheers,


 2014-04-07 23:16 GMT-03:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

 Since Launchpad itself is probably vulnerable, I strongly suggest
 everyone with code commit and/or PPA upload permissions to CLEAR ALL
 COOKIES and refrain from using Launchpad until
 https://bugs.launchpad.net/launchpad/+bug/1304136 is fixed.


 2014-04-08 5:14 GMT+04:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

 Oh yeah, right, don't forget to change your important passwords too!


 2014-04-08 4:56 GMT+04:00 desideran...@rocketmail.com 
 desideran...@rocketmail.com:

 SSH does not use TLS per se, so revoking ssh keys is not that useful

 Enviado desde Mail con Replicant

  --
 * From: * victor-eduardo victoredua...@gmail.com;
 * To: * Sergey Shnatsel Davidoff ser...@elementaryos.org;
 * Cc: * elementary-dev-community@lists.launchpad.net 
 elementary-dev-community@lists.launchpad.net;
 * Subject: * Re: [Elementary-dev-community] URGENT: Update and change
 your SSH keys IMMEDIATELY
 * Sent: * Tue, Apr 8, 2014 12:36:30 AM

   Thanks for the heads up!

 OpenSSL is flawed by design indeed :(

 On lun, abr 7, 2014 at 6:31 , Sergey Shnatsel Davidoff 
 ser...@elementaryos.org wrote:

 Also do not forget to revoke the older keys wherever they are used -
 Launchpad, etc.


 2014-04-08 3:45 GMT+04:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

 There's a killer bug in OpenSSL that leaks private keys! Update your
 system and change your SSH private keys (and other private keys for good
 measure) IMMEDIATELY!

 More info at http://heartbleed.com/
 *runs off to upgrade all machines and change keys everywhere*
 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff

 --
 Mailing list: https://launchpad.net/~elementary-dev-community
 Post to : elementary-dev-community@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~elementary-dev-community
 More help   : https://help.launchpad.net/ListHelp




 --
 Ramiro Algozino
 http://ramiroalgozino.com.ar/




-- 
Sergey Shnatsel Davidoff
-- 
Mailing list: https://launchpad.net/~elementary-dev-community
Post to : elementary-dev-community@lists.launchpad.net
Unsubscribe : https://launchpad.net/~elementary-dev-community
More help   : https://help.launchpad.net/ListHelp


Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY

2014-04-08 Thread Ramiro Algozino
Better be covered! ;)

Cheers!


2014-04-08 14:57 GMT-03:00 Sergey Shnatsel Davidoff 
ser...@elementaryos.org:

 I've been over-reacting then. Sorry.


 2014-04-08 21:33 GMT+04:00 Ramiro Algozino algoz...@gmail.com:

 GitHub just tweeted:

 @github  https://twitter.com/github 32 min
  https://twitter.com/github/status/453578068255588352Another note
 regarding the OpenSSL vulnerability: SSH is not affected. You don't need to
 do anything with your SSH keys.

 Source: https://twitter.com/github/status/453578068255588352

 Cheers,


 2014-04-07 23:16 GMT-03:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

  Since Launchpad itself is probably vulnerable, I strongly suggest
 everyone with code commit and/or PPA upload permissions to CLEAR ALL
 COOKIES and refrain from using Launchpad until
 https://bugs.launchpad.net/launchpad/+bug/1304136 is fixed.


 2014-04-08 5:14 GMT+04:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

 Oh yeah, right, don't forget to change your important passwords too!


 2014-04-08 4:56 GMT+04:00 desideran...@rocketmail.com 
 desideran...@rocketmail.com:

 SSH does not use TLS per se, so revoking ssh keys is not that useful

 Enviado desde Mail con Replicant

  --
 * From: * victor-eduardo victoredua...@gmail.com;
 * To: * Sergey Shnatsel Davidoff ser...@elementaryos.org;
 * Cc: * elementary-dev-community@lists.launchpad.net 
 elementary-dev-community@lists.launchpad.net;
 * Subject: * Re: [Elementary-dev-community] URGENT: Update and change
 your SSH keys IMMEDIATELY
 * Sent: * Tue, Apr 8, 2014 12:36:30 AM

   Thanks for the heads up!

 OpenSSL is flawed by design indeed :(

 On lun, abr 7, 2014 at 6:31 , Sergey Shnatsel Davidoff 
 ser...@elementaryos.org wrote:

 Also do not forget to revoke the older keys wherever they are used -
 Launchpad, etc.


 2014-04-08 3:45 GMT+04:00 Sergey Shnatsel Davidoff 
 ser...@elementaryos.org:

 There's a killer bug in OpenSSL that leaks private keys! Update your
 system and change your SSH private keys (and other private keys for good
 measure) IMMEDIATELY!

 More info at http://heartbleed.com/
 *runs off to upgrade all machines and change keys everywhere*
 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff




 --
 Sergey Shnatsel Davidoff

 --
 Mailing list: https://launchpad.net/~elementary-dev-community
 Post to : elementary-dev-community@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~elementary-dev-community
 More help   : https://help.launchpad.net/ListHelp




 --
 Ramiro Algozino
 http://ramiroalgozino.com.ar/




 --
 Sergey Shnatsel Davidoff




-- 
Ramiro Algozino
http://ramiroalgozino.com.ar/
-- 
Mailing list: https://launchpad.net/~elementary-dev-community
Post to : elementary-dev-community@lists.launchpad.net
Unsubscribe : https://launchpad.net/~elementary-dev-community
More help   : https://help.launchpad.net/ListHelp


[Elementary-dev-community] Developing for Isis

2014-04-08 Thread Mark Raymond Jr.
I'm trying to work on a Switchboard plug, but after grabbing the branch for
a sample plug from Launchpad, it seems that I require Switchboard 2.0.
According to the blog post by the core developers, it only exists in Isis.
So how am I supposed to develop anything for Isis with without being able
to use it? Some people on the Google+ page recommend getting Ubuntu 14.04
and installing the elementary PPA's, but then a core developer will come
along and shoot that person down, saying that that method isn't actually
Isis (i.e It lacks some sort of packages or something), and therefore isn't
valid (Or something along those lines). Maybe I'm just not searching hard
enough. There seems to be this massive campaign from the core devs to Get
Involved, though there's for me to test my involvement on. The whole
point of releasing a beta is for developers to test their software. I also
understand that if you released a beta for developers, people who are not
developers would just jump all over it. Surely there's someway to bridge
that gap. I hate to be that guy that just criticizes, so I'd love to help
out in getting some sort of developer documentation going. I've the seen
the Google Doc, and read the site, while they're helpful in some extents,
they surely don't cover what I've explained above.

Thanks,

-- 
*Mark Raymond Jr.*
-- 
Mailing list: https://launchpad.net/~elementary-dev-community
Post to : elementary-dev-community@lists.launchpad.net
Unsubscribe : https://launchpad.net/~elementary-dev-community
More help   : https://help.launchpad.net/ListHelp


Re: [Elementary-dev-community] Developing for Isis

2014-04-08 Thread Erasmo Marín
You can develop for Isis in Ubuntu 14.04, it's not Isis, but you don't
need Isis, you need to use some libraries. These libraries are a lot
easier to install if you use Ubuntu 14.04, because I don't know if
there are any usable Isis builds or if the scripts are working, the
last time I tried, it didn't work.

So, install Ubuntu 14.04 and the elementary daily ppa, then you will
need a newer version of Gtk. I recomend you to download and manually
install the packages from here (instead adding the ppa):

https://launchpad.net/~ricotz/+archive/testing/+packages

only install what you need, be careful because you can break your system.

2014-04-08 23:33 GMT-04:00 Mark Raymond Jr. markrt...@gmail.com:
 I'm trying to work on a Switchboard plug, but after grabbing the branch for
 a sample plug from Launchpad, it seems that I require Switchboard 2.0.
 According to the blog post by the core developers, it only exists in Isis.
 So how am I supposed to develop anything for Isis with without being able to
 use it? Some people on the Google+ page recommend getting Ubuntu 14.04 and
 installing the elementary PPA's, but then a core developer will come along
 and shoot that person down, saying that that method isn't actually Isis (i.e
 It lacks some sort of packages or something), and therefore isn't valid (Or
 something along those lines). Maybe I'm just not searching hard enough.
 There seems to be this massive campaign from the core devs to Get
 Involved, though there's for me to test my involvement on. The whole
 point of releasing a beta is for developers to test their software. I also
 understand that if you released a beta for developers, people who are not
 developers would just jump all over it. Surely there's someway to bridge
 that gap. I hate to be that guy that just criticizes, so I'd love to help
 out in getting some sort of developer documentation going. I've the seen the
 Google Doc, and read the site, while they're helpful in some extents, they
 surely don't cover what I've explained above.

 Thanks,

 --
 Mark Raymond Jr.

 --
 Mailing list: https://launchpad.net/~elementary-dev-community
 Post to : elementary-dev-community@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~elementary-dev-community
 More help   : https://help.launchpad.net/ListHelp


-- 
Mailing list: https://launchpad.net/~elementary-dev-community
Post to : elementary-dev-community@lists.launchpad.net
Unsubscribe : https://launchpad.net/~elementary-dev-community
More help   : https://help.launchpad.net/ListHelp


Re: [Elementary-dev-community] Developing for Isis

2014-04-08 Thread Victor Eduardo
You've made several fair points. You should follow Erasmo's advise.

Regarding GTK+, I'd recommend adding the elementary testing PPA instead:
https://launchpad.net/~elementary-os/+archive/testing ...

... and then upgrade your system.

Welcome aboard! :)


On Tue, Apr 8, 2014 at 9:51 PM, Erasmo Marín erasmo.ma...@gmail.com wrote:

 You can develop for Isis in Ubuntu 14.04, it's not Isis, but you don't
 need Isis, you need to use some libraries. These libraries are a lot
 easier to install if you use Ubuntu 14.04, because I don't know if
 there are any usable Isis builds or if the scripts are working, the
 last time I tried, it didn't work.

 So, install Ubuntu 14.04 and the elementary daily ppa, then you will
 need a newer version of Gtk. I recomend you to download and manually
 install the packages from here (instead adding the ppa):

 https://launchpad.net/~ricotz/+archive/testing/+packages

 only install what you need, be careful because you can break your system.

 2014-04-08 23:33 GMT-04:00 Mark Raymond Jr. markrt...@gmail.com:
  I'm trying to work on a Switchboard plug, but after grabbing the branch
 for
  a sample plug from Launchpad, it seems that I require Switchboard 2.0.
  According to the blog post by the core developers, it only exists in
 Isis.
  So how am I supposed to develop anything for Isis with without being
 able to
  use it? Some people on the Google+ page recommend getting Ubuntu 14.04
 and
  installing the elementary PPA's, but then a core developer will come
 along
  and shoot that person down, saying that that method isn't actually Isis
 (i.e
  It lacks some sort of packages or something), and therefore isn't valid
 (Or
  something along those lines). Maybe I'm just not searching hard enough.
  There seems to be this massive campaign from the core devs to Get
  Involved, though there's for me to test my involvement on. The whole
  point of releasing a beta is for developers to test their software. I
 also
  understand that if you released a beta for developers, people who are not
  developers would just jump all over it. Surely there's someway to bridge
  that gap. I hate to be that guy that just criticizes, so I'd love to
 help
  out in getting some sort of developer documentation going. I've the seen
 the
  Google Doc, and read the site, while they're helpful in some extents,
 they
  surely don't cover what I've explained above.
 
  Thanks,
 
  --
  Mark Raymond Jr.
 
  --
  Mailing list: https://launchpad.net/~elementary-dev-community
  Post to : elementary-dev-community@lists.launchpad.net
  Unsubscribe : https://launchpad.net/~elementary-dev-community
  More help   : https://help.launchpad.net/ListHelp
 

 --
 Mailing list: https://launchpad.net/~elementary-dev-community
 Post to : elementary-dev-community@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~elementary-dev-community
 More help   : https://help.launchpad.net/ListHelp

-- 
Mailing list: https://launchpad.net/~elementary-dev-community
Post to : elementary-dev-community@lists.launchpad.net
Unsubscribe : https://launchpad.net/~elementary-dev-community
More help   : https://help.launchpad.net/ListHelp