Re: Default App: GNOME Weather

[Jeremy Bicha]

On Tue, Aug 22, 2017 at 10:28 AM, Sebastien Bacher  wrote:
> There is currently no MIR filed, it could be a nice addition but looks
> less important than other ones proposed and we need to look at the
> gelocation service used so I would vote -1 for this cycle and revist
> next cycle

There was a MIR filed a few weeks ago, but maybe it will need to wait
until next cycle:
https://launchpad.net/bugs/1707717

Thanks,
Jeremy Bicha

-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop

Re: Default App: GNOME Weather

[Sebastien Bacher]

Hey there,

Le 09/06/2017 à 12:09, Jeremy Bicha a écrit :
> GNOME Weather is a simple app to show you the weather. It is written
> in gjs. It has been part of GNOME core since GNOME 3.20. It has no
> universe runtime dependencies and is well-maintained in Debian and
> Ubuntu. I don't believe there has been any security issue with this
> app.

There is currently no MIR filed, it could be a nice addition but looks
less important than other ones proposed and we need to look at the
gelocation service used so I would vote -1 for this cycle and revist
next cycle

Cheers,

Sebastien Bacher


-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop

Re: Default App: GNOME Weather

[Jeremy Bicha]

As requested, I have (finally) opened the MIR for this as
https://launchpad.net/bugs/1707717

On Fri, Jun 9, 2017 at 6:24 AM, Sebastien Bacher  wrote:
> That could be a nice small one to add indeed, few comments/questions
>
> - is having more things using gjs going to make it more difficult to
> update mozjs/gjs for security reasons?

My opinion is no. We should not break core GNOME apps with mozjs
security updates regardless of whether they are in main or not.

I believe the actual parsing of web data for the forecasts is done by
libgweather (in main since before we had MIR bugs) which is written in
C and uses libsoup.

> - is gnome-weather detecting your current location or just using the
> configured timezone?

It has optional Automatic Location which uses the same Location
Services provided elsewhere in GNOME using geoclue. Location Services
can be turned on or off from GNOME Settings>Privacy>Location Services.
A prominent use of Location Services is the GNOME 3.24 Night Light
feature which can optionally use the detected location to enable Night
Light from around Sunset to Sunrise. geoclue does not use the timezone
at least if it's working right. My timezone is New York City but GNOME
detects my location currently for my general city in Florida.

One issue with GNOME Location is that there is currently no way to set
a different location system-wide. This is a problem for people who use
VPNs.

You can look at the weather for any (sort of) location in the world;
you don't have to use Automatic Location.

> - if it's guessing your location what service is it using and how
> accurate is it?

I don't think libgweather is very precise (although it works fine for
me). I believe I've heard of people getting the location for a city in
a neighboring country if the other city is fairly close, but that can
be fixed if people report it. libgweather is a bit undermaintained but
it did get a release in June.

Thanks,
Jeremy

-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop

Re: Default App: GNOME Weather

[Sebastien Bacher]

Le 09/06/2017 à 11:38, Jeremy Bicha a écrit :
> I think it uses geoclue along with a database maintained in
> libgweather. libgweather is minimally maintained so it may not be
> precise enough for some people, but libgweather has been in Debian
> since 2008 so it should work in most cases.

We should probably do a testing day on that or ask for some feedback.
I'm in London at the moment and tried gnome-weather and it's giving me
the weather for Northolt which is not far but not a town name I'm
familiar with and a bit confusing, that's one user experience though and
might not be representative...

Cheers,

Sebastien Bacher



-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop

Re: Default App: GNOME Weather

[Marc Deslauriers]

On 2017-06-09 06:24 AM, Sebastien Bacher wrote:
> Hey,
> 
> Le 09/06/2017 à 11:09, Jeremy Bicha a écrit :
>> GNOME Weather is a simple app to show you the weather. It is written
>> in gjs. It has been part of GNOME core since GNOME 3.20. It has no
>> universe runtime dependencies and is well-maintained in Debian and
>> Ubuntu. I don't believe there has been any security issue with this
>> app.
>>
>> If GNOME Weather is installed in GNOME 3.24+ (Ubuntu 17.04+), GNOME
>> Shell's clock menu will also show you the current weather.
> 
> That could be a nice small one to add indeed, few comments/questions
> 
> - is having more things using gjs going to make it more difficult to
> update mozjs/gjs for security reasons?

We still have no strategy on how to update mozjs for security vulnerabilities.
Having it parse code that came out of a repository is one thing, but having it
parse untrusted content downloaded from the internet, or render multimedia
content is problematic.

Does the desktop team have a strategy for supporting mozjs for the 5 year
duration of an LTS release?


> 
> - is gnome-weather detecting your current location or just using the
> configured timezone?
> 
> - if it's guessing your location what service is it using and how
> accurate is it?

And can that service be used in a commercial product?

Marc.

-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop

Re: Default App: GNOME Weather

[Jeremy Bicha]

On Fri, Jun 9, 2017 at 6:24 AM, Sebastien Bacher  wrote:
> - is having more things using gjs going to make it more difficult to
> update mozjs/gjs for security reasons?

I believe we wouldn't want an SRU to break universe apps either,
especially apps in GNOME "core" regardless of whether they are
included by default in Ubuntu.

> - if it's guessing your location what service is it using and how
> accurate is it?

I think it uses geoclue along with a database maintained in
libgweather. libgweather is minimally maintained so it may not be
precise enough for some people, but libgweather has been in Debian
since 2008 so it should work in most cases.

Thanks,
Jeremy

-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop

Re: Default App: GNOME Weather

[Sebastien Bacher]

Hey,

Le 09/06/2017 à 11:09, Jeremy Bicha a écrit :
> GNOME Weather is a simple app to show you the weather. It is written
> in gjs. It has been part of GNOME core since GNOME 3.20. It has no
> universe runtime dependencies and is well-maintained in Debian and
> Ubuntu. I don't believe there has been any security issue with this
> app.
>
> If GNOME Weather is installed in GNOME 3.24+ (Ubuntu 17.04+), GNOME
> Shell's clock menu will also show you the current weather.

That could be a nice small one to add indeed, few comments/questions

- is having more things using gjs going to make it more difficult to
update mozjs/gjs for security reasons?

- is gnome-weather detecting your current location or just using the
configured timezone?

- if it's guessing your location what service is it using and how
accurate is it?


Cheers,

Sebastien Bacher


-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop

Default App: GNOME Weather

[Jeremy Bicha]

GNOME Weather is a simple app to show you the weather. It is written
in gjs. It has been part of GNOME core since GNOME 3.20. It has no
universe runtime dependencies and is well-maintained in Debian and
Ubuntu. I don't believe there has been any security issue with this
app.

If GNOME Weather is installed in GNOME 3.24+ (Ubuntu 17.04+), GNOME
Shell's clock menu will also show you the current weather. Clicking
the weather will open the full Weather app. By the way, some of the
more popular GNOME Shell extensions add weather info to GNOME Shell's
top bar so maybe this new feature will make those less necessary.

There is a really bad gnome-shell crash related to the new Weather
feature, but that should be fixed in libgweather 3.24.1 (waiting in
the unapproved queue for 17.04). https://launchpad.net/bugs/1688208

Thanks,
Jeremy Bicha

-- 
ubuntu-desktop mailing list
ubuntu-desktop@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-desktop