[Elementary-dev-community] UGENT: Change your Launchpad passwords!
Hey guys, Launchpad SSL keys have been changed just now, so the connections to it should be no longer vulnerable, provided you have an up-to-date system. Please clear all cookies, log in to Launchpad again and change your passwords - it's possible that they have been leaked because of this bug! -- Sergey Shnatsel Davidoff -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp
Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY
GitHub just tweeted: @github https://twitter.com/github 32 min https://twitter.com/github/status/453578068255588352Another note regarding the OpenSSL vulnerability: SSH is not affected. You don't need to do anything with your SSH keys. Source: https://twitter.com/github/status/453578068255588352 Cheers, 2014-04-07 23:16 GMT-03:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: Since Launchpad itself is probably vulnerable, I strongly suggest everyone with code commit and/or PPA upload permissions to CLEAR ALL COOKIES and refrain from using Launchpad until https://bugs.launchpad.net/launchpad/+bug/1304136 is fixed. 2014-04-08 5:14 GMT+04:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: Oh yeah, right, don't forget to change your important passwords too! 2014-04-08 4:56 GMT+04:00 desideran...@rocketmail.com desideran...@rocketmail.com: SSH does not use TLS per se, so revoking ssh keys is not that useful Enviado desde Mail con Replicant -- * From: * victor-eduardo victoredua...@gmail.com; * To: * Sergey Shnatsel Davidoff ser...@elementaryos.org; * Cc: * elementary-dev-community@lists.launchpad.net elementary-dev-community@lists.launchpad.net; * Subject: * Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY * Sent: * Tue, Apr 8, 2014 12:36:30 AM Thanks for the heads up! OpenSSL is flawed by design indeed :( On lun, abr 7, 2014 at 6:31 , Sergey Shnatsel Davidoff ser...@elementaryos.org wrote: Also do not forget to revoke the older keys wherever they are used - Launchpad, etc. 2014-04-08 3:45 GMT+04:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: There's a killer bug in OpenSSL that leaks private keys! Update your system and change your SSH private keys (and other private keys for good measure) IMMEDIATELY! More info at http://heartbleed.com/ *runs off to upgrade all machines and change keys everywhere* -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp -- Ramiro Algozino http://ramiroalgozino.com.ar/ -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp
Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY
I've been over-reacting then. Sorry. 2014-04-08 21:33 GMT+04:00 Ramiro Algozino algoz...@gmail.com: GitHub just tweeted: @github https://twitter.com/github 32 min https://twitter.com/github/status/453578068255588352Another note regarding the OpenSSL vulnerability: SSH is not affected. You don't need to do anything with your SSH keys. Source: https://twitter.com/github/status/453578068255588352 Cheers, 2014-04-07 23:16 GMT-03:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: Since Launchpad itself is probably vulnerable, I strongly suggest everyone with code commit and/or PPA upload permissions to CLEAR ALL COOKIES and refrain from using Launchpad until https://bugs.launchpad.net/launchpad/+bug/1304136 is fixed. 2014-04-08 5:14 GMT+04:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: Oh yeah, right, don't forget to change your important passwords too! 2014-04-08 4:56 GMT+04:00 desideran...@rocketmail.com desideran...@rocketmail.com: SSH does not use TLS per se, so revoking ssh keys is not that useful Enviado desde Mail con Replicant -- * From: * victor-eduardo victoredua...@gmail.com; * To: * Sergey Shnatsel Davidoff ser...@elementaryos.org; * Cc: * elementary-dev-community@lists.launchpad.net elementary-dev-community@lists.launchpad.net; * Subject: * Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY * Sent: * Tue, Apr 8, 2014 12:36:30 AM Thanks for the heads up! OpenSSL is flawed by design indeed :( On lun, abr 7, 2014 at 6:31 , Sergey Shnatsel Davidoff ser...@elementaryos.org wrote: Also do not forget to revoke the older keys wherever they are used - Launchpad, etc. 2014-04-08 3:45 GMT+04:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: There's a killer bug in OpenSSL that leaks private keys! Update your system and change your SSH private keys (and other private keys for good measure) IMMEDIATELY! More info at http://heartbleed.com/ *runs off to upgrade all machines and change keys everywhere* -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp -- Ramiro Algozino http://ramiroalgozino.com.ar/ -- Sergey Shnatsel Davidoff -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp
Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY
Better be covered! ;) Cheers! 2014-04-08 14:57 GMT-03:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: I've been over-reacting then. Sorry. 2014-04-08 21:33 GMT+04:00 Ramiro Algozino algoz...@gmail.com: GitHub just tweeted: @github https://twitter.com/github 32 min https://twitter.com/github/status/453578068255588352Another note regarding the OpenSSL vulnerability: SSH is not affected. You don't need to do anything with your SSH keys. Source: https://twitter.com/github/status/453578068255588352 Cheers, 2014-04-07 23:16 GMT-03:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: Since Launchpad itself is probably vulnerable, I strongly suggest everyone with code commit and/or PPA upload permissions to CLEAR ALL COOKIES and refrain from using Launchpad until https://bugs.launchpad.net/launchpad/+bug/1304136 is fixed. 2014-04-08 5:14 GMT+04:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: Oh yeah, right, don't forget to change your important passwords too! 2014-04-08 4:56 GMT+04:00 desideran...@rocketmail.com desideran...@rocketmail.com: SSH does not use TLS per se, so revoking ssh keys is not that useful Enviado desde Mail con Replicant -- * From: * victor-eduardo victoredua...@gmail.com; * To: * Sergey Shnatsel Davidoff ser...@elementaryos.org; * Cc: * elementary-dev-community@lists.launchpad.net elementary-dev-community@lists.launchpad.net; * Subject: * Re: [Elementary-dev-community] URGENT: Update and change your SSH keys IMMEDIATELY * Sent: * Tue, Apr 8, 2014 12:36:30 AM Thanks for the heads up! OpenSSL is flawed by design indeed :( On lun, abr 7, 2014 at 6:31 , Sergey Shnatsel Davidoff ser...@elementaryos.org wrote: Also do not forget to revoke the older keys wherever they are used - Launchpad, etc. 2014-04-08 3:45 GMT+04:00 Sergey Shnatsel Davidoff ser...@elementaryos.org: There's a killer bug in OpenSSL that leaks private keys! Update your system and change your SSH private keys (and other private keys for good measure) IMMEDIATELY! More info at http://heartbleed.com/ *runs off to upgrade all machines and change keys everywhere* -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Sergey Shnatsel Davidoff -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp -- Ramiro Algozino http://ramiroalgozino.com.ar/ -- Sergey Shnatsel Davidoff -- Ramiro Algozino http://ramiroalgozino.com.ar/ -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp
[Elementary-dev-community] Developing for Isis
I'm trying to work on a Switchboard plug, but after grabbing the branch for a sample plug from Launchpad, it seems that I require Switchboard 2.0. According to the blog post by the core developers, it only exists in Isis. So how am I supposed to develop anything for Isis with without being able to use it? Some people on the Google+ page recommend getting Ubuntu 14.04 and installing the elementary PPA's, but then a core developer will come along and shoot that person down, saying that that method isn't actually Isis (i.e It lacks some sort of packages or something), and therefore isn't valid (Or something along those lines). Maybe I'm just not searching hard enough. There seems to be this massive campaign from the core devs to Get Involved, though there's for me to test my involvement on. The whole point of releasing a beta is for developers to test their software. I also understand that if you released a beta for developers, people who are not developers would just jump all over it. Surely there's someway to bridge that gap. I hate to be that guy that just criticizes, so I'd love to help out in getting some sort of developer documentation going. I've the seen the Google Doc, and read the site, while they're helpful in some extents, they surely don't cover what I've explained above. Thanks, -- *Mark Raymond Jr.* -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp
Re: [Elementary-dev-community] Developing for Isis
You can develop for Isis in Ubuntu 14.04, it's not Isis, but you don't need Isis, you need to use some libraries. These libraries are a lot easier to install if you use Ubuntu 14.04, because I don't know if there are any usable Isis builds or if the scripts are working, the last time I tried, it didn't work. So, install Ubuntu 14.04 and the elementary daily ppa, then you will need a newer version of Gtk. I recomend you to download and manually install the packages from here (instead adding the ppa): https://launchpad.net/~ricotz/+archive/testing/+packages only install what you need, be careful because you can break your system. 2014-04-08 23:33 GMT-04:00 Mark Raymond Jr. markrt...@gmail.com: I'm trying to work on a Switchboard plug, but after grabbing the branch for a sample plug from Launchpad, it seems that I require Switchboard 2.0. According to the blog post by the core developers, it only exists in Isis. So how am I supposed to develop anything for Isis with without being able to use it? Some people on the Google+ page recommend getting Ubuntu 14.04 and installing the elementary PPA's, but then a core developer will come along and shoot that person down, saying that that method isn't actually Isis (i.e It lacks some sort of packages or something), and therefore isn't valid (Or something along those lines). Maybe I'm just not searching hard enough. There seems to be this massive campaign from the core devs to Get Involved, though there's for me to test my involvement on. The whole point of releasing a beta is for developers to test their software. I also understand that if you released a beta for developers, people who are not developers would just jump all over it. Surely there's someway to bridge that gap. I hate to be that guy that just criticizes, so I'd love to help out in getting some sort of developer documentation going. I've the seen the Google Doc, and read the site, while they're helpful in some extents, they surely don't cover what I've explained above. Thanks, -- Mark Raymond Jr. -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp
Re: [Elementary-dev-community] Developing for Isis
You've made several fair points. You should follow Erasmo's advise. Regarding GTK+, I'd recommend adding the elementary testing PPA instead: https://launchpad.net/~elementary-os/+archive/testing ... ... and then upgrade your system. Welcome aboard! :) On Tue, Apr 8, 2014 at 9:51 PM, Erasmo Marín erasmo.ma...@gmail.com wrote: You can develop for Isis in Ubuntu 14.04, it's not Isis, but you don't need Isis, you need to use some libraries. These libraries are a lot easier to install if you use Ubuntu 14.04, because I don't know if there are any usable Isis builds or if the scripts are working, the last time I tried, it didn't work. So, install Ubuntu 14.04 and the elementary daily ppa, then you will need a newer version of Gtk. I recomend you to download and manually install the packages from here (instead adding the ppa): https://launchpad.net/~ricotz/+archive/testing/+packages only install what you need, be careful because you can break your system. 2014-04-08 23:33 GMT-04:00 Mark Raymond Jr. markrt...@gmail.com: I'm trying to work on a Switchboard plug, but after grabbing the branch for a sample plug from Launchpad, it seems that I require Switchboard 2.0. According to the blog post by the core developers, it only exists in Isis. So how am I supposed to develop anything for Isis with without being able to use it? Some people on the Google+ page recommend getting Ubuntu 14.04 and installing the elementary PPA's, but then a core developer will come along and shoot that person down, saying that that method isn't actually Isis (i.e It lacks some sort of packages or something), and therefore isn't valid (Or something along those lines). Maybe I'm just not searching hard enough. There seems to be this massive campaign from the core devs to Get Involved, though there's for me to test my involvement on. The whole point of releasing a beta is for developers to test their software. I also understand that if you released a beta for developers, people who are not developers would just jump all over it. Surely there's someway to bridge that gap. I hate to be that guy that just criticizes, so I'd love to help out in getting some sort of developer documentation going. I've the seen the Google Doc, and read the site, while they're helpful in some extents, they surely don't cover what I've explained above. Thanks, -- Mark Raymond Jr. -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp -- Mailing list: https://launchpad.net/~elementary-dev-community Post to : elementary-dev-community@lists.launchpad.net Unsubscribe : https://launchpad.net/~elementary-dev-community More help : https://help.launchpad.net/ListHelp