[gentoo-dev] Status of openhbci in Gentoo

2006-01-29 Thread Hanno Böck
to continue doing so, please cry very loud NOW, else it will be removed. cu, -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] Was berechtigt eigentlich jeden Computerbesitzer, ungefragt seine Meinung abzusondern? Jean-Remy von Matt

[gentoo-dev] Last rites for net-libs/openhbci, net-libs/openhbci-plugin-ddvcard, app-office/lxbank, app-misc/aqmoney

2006-02-06 Thread Hanno Böck
As I told a while back, I'd like to get rid of openhbci and stuff depending on it. I've now put them in package.mask and hope that if people still need them, they'll cry loud now. Else they'll be removed in a week. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20

Re: [gentoo-dev] net-mail/mailman needs a new maintainer

2006-04-13 Thread Hanno Böck
). For the long term, I plan to include at least optionally the patches for searchable archives, vhosts and gpg-lists. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] pgp0wHYf1w7ac.pgp Description: PGP signature

Re: [gentoo-dev] making the firefox USE flag a global one

2006-07-18 Thread Hanno Böck
sense. At least for galeon I can say that I'll remove it as soon as x86 has marked 2.0.1-r1 stable. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] pgpnilqawytIQ.pgp Description: PGP signature

Re: [gentoo-dev] making the firefox USE flag a global one

2006-07-19 Thread Hanno Böck
default if that flag is not set. This could be discussed, but imho we definitely need a standard for that, that means one of them, firefor or seamonkey, has to die. I don't really care which one, but it should be the same for the whole tree. -- Hanno Böck Blog: http

Re: [gentoo-dev] Make FEATURES=test the default

2006-08-18 Thread Hanno Böck
think we have a long way to go till we can even think of enabling it by default. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] pgpw5kYBpCege.pgp Description: PGP signature

[gentoo-dev] GIMP 1.2 has gotta die

2006-09-11 Thread Hanno Böck
Hi, Just had an irc-talk with allanonjl and I'm now co-maintaining gimp. I want to remove old gimp 1.2 soon (a bunch of bugs could be closed and we could get rid of that symlink-hack for the bins). If you have any objections, cry now (but expect that I want you to maintain that stuff if you

Re: [gentoo-dev] GIMP 1.2 has gotta die

2006-09-11 Thread Hanno Böck
Am Dienstag, 12. September 2006 02:46 schrieb Michael Cummings: Looks like that will break media-gfx/frontline (=media-gfx/gimp-1.2*) and gimp-freetype-0.2-r3 (also =media-gfx/gimp-1.2*). frontline is dead upstream, has no metadata and last changelog-entry is about a year old, so I suspect

[gentoo-dev] compiz

2006-09-16 Thread Hanno Böck
of creating a new herd for compiz and stuff. People interested in helping out with compiz-packages can reply to me. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] pgpq5WcFoQeLN.pgp Description: PGP signature

Re: [gentoo-dev] Notification about MD5 support

2006-09-22 Thread Hanno Böck
Am Donnerstag, 21. September 2006 16:49 schrieb Vlastimil Babka: Although the more secure than MD5 part is now questionable, I suppose the directly available in python part still holds? From What's new in python 2.5 13.3 The hashlib package A new hashlib module, written by Gregory P. Smith,

[gentoo-dev] Last rites: sci-geosciences/osm2mp

2009-05-26 Thread Hanno Böck
it soon. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de http://ausdenaugenausdemsinn.de - Kein Sicherheitsrabatt für CO2-Speicher http://tinyurl.com/dceu73 - Internetzensur stoppen! http://schokokeks.org - professional

Re: [gentoo-dev] Qt3 deprecation

2009-07-28 Thread Hanno Böck
. It has tons of regressions. The amount of qt3 apps not having a sane or just no qt4 port yet is probably enormous. I also maintain such packages. Though we don't know what the situation is in 6 months, I'd assume that there's no chance we can consider qt3 fully deprecated then. -- Hanno

[gentoo-dev] Lastrite: app-misc/sdricoh_cs

2009-08-12 Thread Hanno Böck
. app-misc/sdricoh_cs -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally signed message part.

[gentoo-dev] python-wrapper breaks init scripts

2009-10-04 Thread Hanno Böck
stay the way it is, we need a fix for those issues. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Lastrite: KDE3 applications with bugs and KDE4 replacements.

2009-10-26 Thread Hanno Böck
in common beside that both are for image viewing. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de http://schokokeks.org - professional webhosting signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in profiles: use.local.desc

2009-12-11 Thread Hanno Böck
use.local.desc that is autogenerated? -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Documentation licenses and license_groups

2010-01-07 Thread Hanno Böck
there - no matter what the fsf thinks (I think their views about different freedoms on software and on documents are a bit weird), I think we should have a free license set which guarantees the four freedoms, no matter if it's software or documentation. -- Hanno Böck Blog

Re: [gentoo-dev] QA last rites for app-emulation/uae

2010-01-07 Thread Hanno Böck
app-emulation/uae I'll try to rescue that one. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally signed message part.

[gentoo-dev] Some ideas on the licensing issue

2010-01-07 Thread Hanno Böck
the base system without man-pages? -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de http://schokokeks.org - professional webhosting signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Documentation licenses and license_groups

2010-01-07 Thread Hanno Böck
FreeArt GPL-1 GPL-2 GPL-3 OFL-1.1 OPL If there are no objections, I'll commit this in the next days. I already went ahead and committed two new sets - FREE-DOCUMENTS and MISC- FREE. The above ones could probably be all added to FREE-DOCUMENTS. -- Hanno Böck Blog

Re: [gentoo-dev] Some ideas on the licensing issue

2010-01-07 Thread Hanno Böck
Am Donnerstag 07 Januar 2010 schrieb Ulrich Mueller: On Thu, 7 Jan 2010, Hanno Böck wrote: I think the GPL-compatible set makes barely sense. The problem with it is, as stated by various people, that we have different GPLs. GPL2 and 3 are incompatible, so it doesn't mean GPL-compatible

Re: [gentoo-dev] last rites: games-util/dzip

2010-01-20 Thread Hanno Böck
issues and assign them to me? -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de http://schokokeks.org - professional webhosting signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] last rites: games-util/dzip

2010-01-22 Thread Hanno Böck
think we should keep it. I committed 2.9-r3 which fixes the zlib issue, I also added a patch for 64 bit support and an ~amd64 keyword. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de http://schokokeks.org - professional

[gentoo-dev] openssl 1.0.0 quick test

2010-01-30 Thread Hanno Böck
to be non-trivial. There is some upstream work on it I haven't tested: http://redmine.ruby-lang.org/issues/show/2022 So all in all it's not that much. I'll leave it up to the maintainers of php and wvstreams if they want to patch their packages or wait till upstream fixes arrive. cu, -- Hanno

Re: [gentoo-dev] Recent lists mail loss

2010-02-03 Thread Hanno Böck
the mentioned RBL on my servers and I read some articles and heared some talks from their operators and generally think they are doing good work, so I wanted to share that. cu, -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de

[gentoo-dev] news regarding mysql 5.1 incomplete

2010-02-24 Thread Hanno Böck
. On a server system (which uses as-needed), I encountered two packages (apr- util and mysql-python) only linking against libmysqlclient_r.so. So at least when mysql 5.1 gets stable, we should correct this. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20

Re: [gentoo-dev] Looking for courier maintainers...

2010-03-06 Thread Hanno Böck
with upstream. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in net-mail/mailman: ChangeLog mailman-2.1.9-r2.ebuild

2007-09-27 Thread Hanno Böck
in src_install, but none in pkg_* -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in app-doc/gimp-help: ChangeLog gimp-help-0.13.ebuild

2007-09-27 Thread Hanno Böck
Guys, it's nice that you have so interesting discussions, but let me just state that I haven't written this code. I just did a trivial copy-over-bump. If anyone wants to improve the ebuild, feel free do go ahead and commit your changes. -- Hanno Böck Blog: http://www.hboeck.de

[gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Hanno Böck
other free software projects (and more and more other pages) use cacert, so it becomes more and more likely that people will already have the cacert-root-cert installed. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Hanno Böck
self-signed I think. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Last rites: www-client/planet

2007-10-13 Thread Hanno Böck
Am Mittwoch 10 Oktober 2007 schrieb Dawid Węgliński: www-client/planet [...] Anything to use instead? No ebuild for it, but blog harvester is an alternative: http://astroblog.spaceboyz.net/harvester/ it's suggested to use svn version. -- Hanno Böck Blog: http://www.hboeck.de

Re: [gentoo-dev] QA question, undefined reference to _getshort

2007-10-18 Thread Hanno Böck
Any volunteers for writing a patch? :-) Upstream is very cooperative, if you want to work together with them. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in x11-plugins/compiz-fusion-plugins-main: compiz-fusion-plugins-main-0.6.0.ebuild metadata.xml ChangeLog Manifest

2007-10-23 Thread Hanno Böck
the $() syntax for use_enable. I'll do it later today. They seem to be good candidates for new repoman checks, as we probably have tons of them in the tree. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description

[gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in x11-libs/compiz-bcop: metadata.xml Manifest compiz-bcop-0.6.0.ebuild ChangeLog

2007-10-24 Thread Hanno Böck
Am Mittwoch 24 Oktober 2007 schrieb Donnie Berkholz: Both S and src_compile() are the defaults, and this is not the only compiz ebuild committed today where that is the case. All done now I think. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL

[gentoo-dev] net-mail/mailman-2.1.9-r2: Request for testing

2007-11-26 Thread Hanno Böck
I committed a bunch of changes and now I'm pretty satisfied with it. So I'd like to unmask it soon. Please, if you're using mailman test it, tell me if it suits your needs or just give me feedback like worksforme, I actually don't have a clue how many people really use this ebuild. -- Hanno

[gentoo-dev] How to force homedir on enewuser

2008-01-17 Thread Hanno Böck
, I'll open a bug with a feature request within a few days) -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

[gentoo-dev] courier ebuilds for testing

2008-04-09 Thread Hanno Böck
(cc to [EMAIL PROTECTED] ). -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

[gentoo-dev] Automagic dependencies in gegl

2008-05-01 Thread Hanno Böck
welcome. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

[gentoo-dev] unrecognized option warning

2008-06-21 Thread Hanno Böck
an automagic dep. - The option was there in previous versions, but got removed (i.e. is now default / can't be built without foo any more). Both cases should be fixed and may hide other bugs, though a QA warning would be good. Thoughts? -- Hanno Böck Blog: http

[gentoo-dev] Unmasking of qt 4.4?

2008-08-11 Thread Hanno Böck
the metapackage and everything is like before. So question, what are the showstoppers for qt 4.4? And more general comment, especially on important packages that many people rely on, please provide more informative comments in package mask, e.g. bug numbers. -- Hanno Böck Blog

[gentoo-dev] Package for grab: libzzub and aldrin

2008-11-18 Thread Hanno Böck
bump is pending. Though my interest in the package is low, so is there anyone willing to grab it? -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:[EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

[gentoo-dev] status of ruby 1.8.7?

2008-12-17 Thread Hanno Böck
think it's a very bad idea to add new packages to package.mask for testing without any further information. Usually a tracker bug is a good idea, but any other note where to find information what needs to be done to get things ready is fine. -- Hanno Böck Blog: http

[gentoo-dev] Last rites: app-misc/sdricoh_cs

2009-01-22 Thread Hanno Böck
) # This has been included in kernel 2.6.27 and shouldn't be used # any more. Will remove within a month, please contact me if you # think it should stay. app-misc/sdricoh_cs -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de

Re: [gentoo-dev] Notice: Changing mozilla useflag to browserplugin for all Java runtimes

2005-07-12 Thread Hanno Böck
Am Dienstag, 12. Juli 2005 19:10 schrieb Diego 'Flameeyes' Pettenò: I've done the change to nsplugin for media-video apps (gxine, vlc, helixplayer and realplayer). With that it makes more sense to have it global (5 nsplugin local flags just now). I'll soon update freewrl, which has the same

[gentoo-dev] Beryl maintainer needed

2006-10-16 Thread Hanno Böck
. If any Gentoo dev wants to take care of beryl, please take bug 150033. You should review those ebuilds in the coffee-overlay together with nesl and then add them to portage. cu, Hanno ([EMAIL PROTECTED]) -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber

[gentoo-dev] Getting rid of live-gimp-ebuild?

2007-01-08 Thread Hanno Böck
not that important, because the gimp-devs do releases quite regularly if they add major features. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] pgpLU8JcFfxsE.pgp Description: PGP signature

[gentoo-dev] removal of winex/winex-cvs ?

2007-02-20 Thread Hanno Böck
Hi, Today I saw that we still have the fake-ebuilds of winex/winex-cvs (just basically telling the user they've been removed). I think they can die? Treecleaers? -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] pgpxaLxHSoUrv.pgp

[gentoo-dev] Switch to libchipcard3

2007-04-05 Thread Hanno Böck
-users, please test and report bugs, I don't use gnucash), I'd request stable-marking of libchipcard 3.0.2 soon and remove all 1+2-stuff. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] pgpdBpOHyiMSC.pgp Description: PGP signature

[gentoo-dev] PHP security status

2007-07-15 Thread Hanno Böck
or if we could merge stuff without you in the meantime. Christian is doing a quite well job in the overlay. I'd prefer if we could merge his work into the main tree. I could do that, although I'd prefer to get some review from other devs. php is a hell to maintain I think. -- Hanno Böck

[gentoo-dev] Status of xcb

2007-08-21 Thread Hanno Böck
don't have a feature like mask if use xcb isn't set, so it most probably means all compiz-versions from now on will be masked till we have xcb. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description

[gentoo-dev] meaning of sqlite/sqlite3 use flag

2007-09-14 Thread Hanno Böck
be made clear. At least I think the current behaviour in the tree doesn't really make sense. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber: [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part.

[gentoo-dev] New global use flag: vpx or vp8

2010-07-31 Thread Hanno Böck
or it shouldn't be vp8. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] nsbrowser plugins

2010-08-11 Thread Hanno Böck
or something alike, it'd probably be easier to convince all browser vendors and distributions to stick to one general directory. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally

Re: [gentoo-dev] New license: nauty

2010-10-21 Thread Hanno Böck
that's indirectly in the @FREE-set to be just that. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description: This is a digitally signed message part.

Re: [gentoo-dev] New license: nauty

2010-10-24 Thread Hanno Böck
we need explicit agreement from the user. Nothing in the naugty-license indicates that, so it doesn't fit in any of our license groups. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description

[gentoo-dev] la-file removal and || die

2010-11-01 Thread Hanno Böck
-removal- command. Anyway, the already proposed eutils-function for lafile-removal would probably be the best way to avoid such problems for good. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:ha...@hboeck.de signature.asc Description

Re: [gentoo-dev] unbreaking net-print/foo2zjs

2011-03-07 Thread Hanno Böck
. -- Hanno Böck mail/jabber: ha...@hboeck.de GPG: BBB51E42 http://www.hboeck.de/

Re: [gentoo-dev] rfc: New global USE flag called ios, not same as ipod ?

2011-03-29 Thread Hanno Böck
Am Tue, 29 Mar 2011 06:23:04 +0300 schrieb Samuli Suominen ssuomi...@gentoo.org: The magic number is often 5, this is 4 but it's only magic! When I hear ios I first think of Cisco's IOS rather than Apple's. Is this an issue? -- Hanno Böck mail/jabber: ha...@hboeck.de GPG

[gentoo-dev] last rites: dev-libs/libgeier

2015-01-03 Thread Hanno Böck
# Hanno Boeck ha...@gentoo.org (03 Jan 2015) # Was a dependency of taxbird which has been replaced by # geierlein. As this requires yearly changes it's unlikely # it has any use for anyone. Masked for removal. dev-libs/libgeier -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG

[gentoo-dev] last rites: dev-libs/libgeier

2015-01-03 Thread Hanno Böck
# Hanno Boeck ha...@gentoo.org (03 Jan 2015) # Was a dependency of taxbird which has been replaced by # geierlein. As this requires yearly changes it's unlikely # it has any use for anyone. Masked for removal. dev-libs/libgeier -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG

[gentoo-dev] Last rites: app-emulation/wine-doors

2015-01-03 Thread Hanno Böck
/show_bug.cgi?id=519270 https://bugs.gentoo.org/show_bug.cgi?id=277491 -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

[gentoo-dev] Last rites: app-portage/portage-mod_jabber, media-sound/moodbar

2015-02-08 Thread Hanno Böck
# Hanno Boeck ha...@gentoo.org (08 Feb 2150) # Dead upstream, will be removed in 30 days if nobody # complains. app-portage/portage-mod_jabber # Hanno Boeck ha...@gentoo.org (08 Feb 2150) # Dead upstream, will be removed in 30 days if nobody # complains. media-sound/moodbar -- Hanno Böck http

Re: [gentoo-dev] Re: Last rites: app-portage/portage-mod_jabber, media-sound/moodbar

2015-02-08 Thread Hanno Böck
, I hadn't expected that this even works, because its last release was ages ago. Michael: Do you want to add yourself as maintainer and unmask it? -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

[gentoo-dev] Packages up for grabs

2015-01-20 Thread Hanno Böck
giving it away, other than that will re-assign to maintainer-wanted if nobody takes it. media-sound/moodbar This was used by amarok to display a colorful moodbar for audio files. It depends on gstreamer 0.10, don't know if this will go away anyway at some point. cu, -- Hanno Böck http

Re: [gentoo-dev] Re: Current Gentoo Git setup / man-in-the-middle attacks

2015-04-01 Thread Hanno Böck
benchmarks. -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

[gentoo-dev] Should Gentoo do https by default?

2015-03-27 Thread Hanno Böck
, but it doesn't get any better if people stick to HTTP. Many problems of the CA system can be mitigated by modern technologies like Key Pinning and Certificate Transparency. I think defaulting the net to HTTPS is a big step for more security and I think Gentoo should join the trend here. cu, -- Hanno

Re: [gentoo-dev] Should Gentoo do https by default?

2015-03-29 Thread Hanno Böck
to bugzilla? (cc me if you open a bug) -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42 pgpyyxhG77Xma.pgp Description: OpenPGP digital signature

Re: [gentoo-dev] Current Gentoo Git setup / man-in-the-middle attacks

2015-03-29 Thread Hanno Böck
not possible to use the mainstream internet without https (you can't search google or log into facebook without https). I'd really like to hear of any real world situation where this is an issue. -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42 pgpQ0bCBb3afe.pgp Description

Re: [gentoo-dev] Should Gentoo do https by default?

2015-03-27 Thread Hanno Böck
does. Haven't tested, but discussion on hacker news indicates revocation is free [1]. And yes, the startssl behaviour regarding revocation is not good... [1] https://news.ycombinator.com/item?id=8982013 -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

Re: [gentoo-dev] Should Gentoo do https by default?

2015-03-27 Thread Hanno Böck
remember the exact price but it was in the 100-200$ range. cu, -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

Re: [gentoo-dev] libressl status

2015-04-02 Thread Hanno Böck
: Continue to use openssl, but have libtls laying around. Not sure if it is possible to have libtls using libcrypt/libssl functions from openssl. -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

[gentoo-dev] Creating a Gentoo built with Address Sanitizer

2015-07-02 Thread Hanno Böck
as an official project and publish official stage tarballs. cu, Hanno -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

Re: [gentoo-dev] broken link in gentoo-portage-rsync-mirror readme, changing repo URI

2015-08-16 Thread Hanno Böck
Also saw the wrong URL and sent a pull request to fix that earlier today: https://github.com/gentoo/gentoo-portage-rsync-mirror/pull/195 -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

Re: [gentoo-dev] RFI: A better workflow for github pull requests

2015-09-12 Thread Hanno Böck
but may I jump in here: Wouldn't it be in general valuable to track the connection gentoo dev handle <-> github handle in a machine readable and generic way? Should / could we add that as an ldap attribute or something? -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hb

Re: [gentoo-dev] News item: Apache "-D PHP5" needs update to "-D PHP"

2016-01-04 Thread Hanno Böck
fpm solution. I think this should be mentioned. -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

Re: [gentoo-dev] Gentoo Dinner@FOSDEM 2016

2016-01-13 Thread Hanno Böck
've added a note to the wiki, hope that's okay. -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

Re: [gentoo-dev] Herd likely up for grabs: net-im

2016-01-19 Thread Hanno Böck
ous things (and adapt that based on config flags) and don't provide a tarball including everything that's needed. The last person working on that was radhermit. Maybe we can try to fix that together and get a new version into the tree. -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: B

Re: [gentoo-dev] Empty project: LXDE

2016-08-10 Thread Hanno Böck
ain some of the stuff, yet I'd prefer if I'd be not the only one. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42

[gentoo-dev] Package up for grabs: skencil

2016-09-16 Thread Hanno Böck
. Anyone interested in taking it? (else the usual: will be reassigned to maintainer-needed) -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42

[gentoo-dev] Packages up for grabs from sci-geosciences category

2016-09-28 Thread Hanno Böck
-riting this if no maintainer steps in to tackle this. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42

Re: [gentoo-dev] [RFC] New Manifest hashes and how to enable them

2017-04-03 Thread Hanno Böck
soon.) There's no point in deprecating anything. I find it unnecessary to introduce additional complexity here and adding obscurity algorithms like gost sounds really bizarre and unnecessary. I'd recommend against introducing anything that requires unusual dependencies. If anything I'd propose to

Re: [gentoo-dev] gcc-6.x status inquiry

2017-05-03 Thread Hanno Böck
and gcc 6 isn't even keyworded yet I'm wondering if it'd be an idea to right away strive for gcc 7 and skip keywording+stabilizing gcc 6.x in gentoo. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgptZTut91Vj6.pgp Description:

Re: [gentoo-dev] Re: [RFC] News item: GCC 6 defaults to USE="pie ssp"

2017-05-10 Thread Hanno Böck
https://bugs.gentoo.org/show_bug.cgi?id=582688 *All* bugs that block this bug are currently marked as resolved. So if you are aware of any open issues that need to be taken care of please file a bug and make sure they block the tracker bug. -- Hanno Böck https://hboeck.de/ mail/jab

Re: New profiles for default-pie transition (was: Re: [gentoo-dev] [RFC] News item: GCC 6 defaults to USE="pie ssp", v2)

2017-05-10 Thread Hanno Böck
s? (other than that I think the profile plan sounds reasonable) -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42

Re: [gentoo-dev] [RFC] News item: GCC 6 defaults to USE="pie ssp"

2017-05-09 Thread Hanno Böck
ost every other OS out there has these days. In recent years also Fedora, Ubuntu and lately Debian switched it on by default. I really think this should be a default security setting, not something that only lives in hardened. -- Hanno Böck https://hboeck.de/ mail/jabber: h

Re: [gentoo-dev] Packages up for grabs net-im/pyaim-t

2017-10-10 Thread Hanno Böck
date (Dec 15) in case anyone still wants to use it to say their aim friends goodbye, then lastrite it. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgpehf5s181s7.pgp Description: OpenPGP digital signature

[gentoo-dev] Last-rites: app-arch/unrar-gpl

2017-08-21 Thread Hanno Böck
# Hanno Boeck (21 Aug 2017) # Open security bugs, no upstream, bug 628432 # Alternatives: app-arch/libarchive, app-arch/unar app-arch/unrar-gpl

Re: [gentoo-dev] [PATCH 2/2] git-r3.eclass: Explicitly warn about unsecure protocols

2017-08-25 Thread Hanno Böck
probably referring to attacks that were specific to certain browser weaknesses, but they're irrelevant for this use case. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgpw64X7an5Wn.pgp Description: OpenPGP digital signature

Re: [gentoo-dev] [RFC] sys-boot/grub:0 (GRUB legacy) sunset planning

2017-09-03 Thread Hanno Böck
the asantoo overlay. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgpYskrxPOZvj.pgp Description: OpenPGP digital signature

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-20 Thread Hanno Böck
ey aren't transmitted over a secure channel and not signed... -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgpR5FdZLlUJa.pgp Description: OpenPGP digital signature

Re: [gentoo-dev] Manifest2 hashes, take n+1-th: one hash to decide them all

2017-10-25 Thread Hanno Böck
with a large batch of test vectors that you can easily run. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgpNTzKQZ2nN3.pgp Description: OpenPGP digital signature

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread Hanno Böck
t; need to be used. One usually can't have both security and speed. You can have that. Blake2 is faster than any broken legacy hash. And ripemd isn't particularly fast > People are discussing collision resistance, but no one here appears to > be trained in cryptography. For the record, I'd cla

Re: [gentoo-dev] Idea for a new project: gentoo-libs

2018-06-25 Thread Hanno Böck
r of mcrypt was PHP, and PHP is abandoning it with 7.2. (There are 2 other users in the gentoo tree of libmcrypt, which are both rather obscure packages - nsca and elettra.) -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42

Re: [gentoo-dev] Trustless Infrastructure

2018-07-02 Thread Hanno Böck
the scope of accepted signatures very excessively. And I believe these challenges are one of the reasons the old attempts to have a signed Gentoo never went anywhere. I'm glad we have some form of signed Gentoo now, even if it relies on some centralized infrastructure. -- Hanno Böck https://hboeck.de

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-19 Thread Hanno Böck
e decades of warning before a break becomes practical. Having just one hash is simpler and using a well supported one like SHA512 may make things easier than using something that's still not very widely supported. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboe

Re: [gentoo-dev] [RFC] GLEP 74: Full-tree verification using Manifest files

2017-10-27 Thread Hanno Böck
? I think that should be clarified how exactly it's supposed to work. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42

Re: mcrypt status (Re: [gentoo-dev] Idea for a new project: gentoo-libs)

2018-08-04 Thread Hanno Böck
on modes, which in most situations is what you want to use. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgpVU0M0tWo7W.pgp Description: OpenPGP digital signature

Re: [gentoo-dev] Regarding the State of PaX in the tree

2018-04-16 Thread Hanno Böck
be a candidate for main profiles. Maybe we should strive for "hardened-by-default". -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42

Re: [gentoo-dev] [RFC] Removing barely used global flags

2018-10-23 Thread Hanno Böck
ut for things that got deprecated / out of fashion / are practically no longer used. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42 pgpD2YYux9maw.pgp Description: OpenPGP digital signature

  1   2   >