[Monotone-devel] Git's usage of SHA1

A long thread on the below list with the above subject (that SHA1 is more or less broken and should be proactively replaced along the lines of other general global movements off of SHA1) mentioned the snippet below. The same subject should be given consideration in monotone as well.

Re: [Monotone-devel] Git's usage of SHA1

> https://lists.sonic.net/mailman/private/crypto-practicum/2016q1/thread.html > Can't read that without being subscribed :-( > No access. Subscription to the archives is required as said, and is also documented on the list page. It's free, no human is involved. Bug them on policy, not me. The

Re: [Monotone-devel] Mtn-Browse Version 1.20 And AutomateStdio 1.10

On 5/8/16, Anthony Edward Cooper wrote: > Just a quick announcement to say that new versions of mtn-browse and > AutomateStdio have been released. The latter now provides support for > Monotone version 1.10 and the former, in addition, has fixes in it for > running on

Re: [Monotone-devel] SHA- collision found

On 2/24/17, Lapo Luchini wrote: > What's nice is that the attack vectors can be detected and a "hardened" > version of SHA-1 that returns the same value in "normal" cases and > different-but-secure values on attack vectors can be substituted. Repos should address keeping / 'fixing'

Re: [Monotone-devel] SHA- collision found

To be in some relative perspective, there are probably lot more fixes, updates, and developments to do for monotone more important than immediate practicality of sha1 attack this very moment. So all those can come as can be made :) ___ Monotone-devel

Re: [Monotone-devel] Patch to compile against Botan 2.x

Here is what FreeBSD packages ship... "origin":"devel/monotone","version":"1.1_8" has maintainer listed "origin":"devel/monotone-viz","version":"1.0.2_7" needs maintainer "security/botan110","version":"1.10.13_6" same maintainer as monotone used by: monone, monotone-viz, bundy, softhsm,

Re: [Monotone-devel] Monotone on Github?

Not really thinking of non self hosting. Just a simple commit mirror with project page pointing to wherever is authoritative, github ticketing need not be enabled. Mostly to satisfy searches made on github, let people play readonly with it via local git clones till they get serious and go mtn,

[Monotone-devel] Monotone on Github?

Is monotone mirrored onto github? It is the exposure that can be of benefit. ___ Monotone-devel mailing list Monotone-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Reviving nmonotone-viz

Here are FreeBSD and Debian... https://svnweb.freebsd.org/ports/head/devel/monotone-viz/ https://packages.debian.org/sid/monotone-viz ___ Monotone-devel mailing list Monotone-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/monotone-devel

[Monotone-devel] Patches From Downstream

Here are the current FreeBSD and Debian patches for mutual feedback and integration... https://svnweb.freebsd.org/ports/head/devel/monotone/ https://packages.debian.org/sid/monotone ___ Monotone-devel mailing list Monotone-devel@nongnu.org

Re: [Monotone-devel] Monotone on Github?

Maybe that calls for iterative local checkout, generating diffs, checking those into github. Haven't looked into it, just didn't see much that looked officialish / current on github for whoever / whatever might come along. ___ Monotone-devel mailing

Re: [Monotone-devel] Botan2 support?

On 8/10/19, Thomas Moschny wrote: > as Botan 1.10 has gone EOL 2018-12-31 [1], has anybody already looked > into porting Monotone to Botan 2.x? > > Starting with Fedora 31, there will be no compat-openssl10-devel package > anymore, and thus no Botan 1.X (unless we disable the OpenSSL module >

Re: no monotone in Debian testing?

On 2/9/20, Stephen Leake wrote: > I've just installed a new Debian 10 VM, and upgraded to testing. > 'aptitude search monotone' returns nothing! https://packages.debian.org/search?keywords=monotone https://www.freebsd.org/cgi/ports.cgi?query=monotone > Is it finally time to stop using monotone?

Re: Is monotone dead, or is there a path forward?

There are probably some patches to apply from all these repos... https://repology.org/project/monotone/related

Re: Is monotone dead, or is there a path forward?

As people noted in last months / years... the worlds OS, apps, developers, and tech oriented operating system / repo / code / porters eyeballs users and interactors have more or less moved en masse to git, primarily on github, often augmented by running their own git copies in house if they are a

Mtn project...

> I know the project is being still for a long time, but I think an 1.2 > release that officially supports Botan2 would be in order Put the monotone project up on github, all of the... code clone / export, website, wiki, ticket dump, releases, etc. This will attract more eyes, interest, builders,

Re: Mtn project...

> Graydon did upload an old version, but it's very old Maybe someone would like to try replaying the mtn repo into a fresh git init repo. Even just the file tree and log msg, per each revision along the main branch to head. A signed tarball of the mtn.db repo could be pushed to another sub repo

Re: keeping monotone dvcs aline

On 2/2/24, Michael Raskin <7c6f4...@mail.ru> wrote: > [an unformatted blob] Reposting it below because your mailer appears to be broken and turning what you write into one single newline-stripped line-wrapped difficult to read blob. You might want to look into fixing that. This is another

Re: keeping monotone dvcs aline

> Grarpamp, I just discovered monotone last year while searching for a > minimalist no-bullshit dvcs, and promptly became quite fond of it. Sadly > it seems like it's on the verge of death. Would you or anyone else you > know be interested in collaborating to get Lapo Luchini's 1