[arch-general] Java 8

2014-03-28 Thread Caleb Cushing
I'm just wondering what the plan is, if any,  for getting java 8
packages into arch?

-- 
Caleb Cushing

http://xenoterracide.com

Calendar:
https://www.google.com/calendar/embed?src=xenoterracide%40gmail.comctz=America/Chicago


[arch-general] apache 2.4

2013-11-19 Thread Caleb Cushing
I'm just curious as to why we're still on apache-2.2, at one point I think
I assumed it was a php thing, but php-5.5 got lauched a bit ago and I can
think of at least one php application I tried to run which wouldn't work on
it, so that's probably not it.

-- 
Caleb Cushing

http://xenoterracide.com

Calendar:
https://www.google.com/calendar/embed?src=xenoterracide%40gmail.comctz=America/Chicago


Re: [arch-general] [arch-dev-public] Vi package

2011-02-11 Thread Caleb Cushing
I'd like to say that one of the problems before was not simply the
stripped down vi, but the fact that arch was setting up the example
vimrc as default, which is not the actual vim default, and was never
intended to be used as a distro default. so the settings people got
confused long term knowledgeable vim users too. what the default is I
don't care, I've long aliased vi  to vim now.

-- 
Caleb Cushing

http://xenoterracide.com


[arch-general] perl 5.12.2 anytime soon? or just going to wait for 5.12.3 or 5.14.1

2010-12-11 Thread Caleb Cushing
perl 5.12.2 came out at the end of august... I'm just wondering if
we'll be getting it... 5.12.3 should come out... I'd rather never see
a stable 5.14.0 because 5.14.1 should follow a month later...  and
given the current speed of updated perls in arch...

-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] perl 5.12.2 anytime soon? or just going to wait for 5.12.3 or 5.14.1

2010-12-11 Thread Caleb Cushing
nvm... I just noticed the thread on -dev-public

-- 
Caleb Cushing

http://xenoterracide.com


[arch-general] perl 5.12.1-3? not 5.12.2-1?

2010-11-02 Thread Caleb Cushing
I'm just a bit curious on this, why release a -3 when upstream
released a new ABI compatible (as far as I know) release over a month
ago, that isn't yet in repo.

-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] perl 5.12.1-3? not 5.12.2-1?

2010-11-02 Thread Caleb Cushing
On Tue, Nov 2, 2010 at 8:14 AM, Ionuț Bîru ib...@archlinux.org wrote:
 lets see. http://repos.archlinux.org/wsvn/packages/perl/trunk/


that explains a version bump, not why perl wasn't upgraded at the same
time, if you've gotta rebuild perl might as well make it current. it's
not like this is 5.14 and it'll break everything again.

-- 
Caleb Cushing

http://xenoterracide.com


[arch-general] man page conflict

2010-10-23 Thread Caleb Cushing
(6/6) checking for file conflicts
[] 100%
error: failed to commit transaction (conflicting files)
man-pages: /usr/share/man/man3/aio_init.3.gz exists in filesystem

pacman -Qo /usr/share/man/man3/aio_init.3.gz
  slave-iv
/usr/share/man/man3/aio_init.3.gz is owned by libaio 0.3.109-1


so what's the fix here?
-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] Adobe Releases New 64-bit Flash Plugin For Linux

2010-09-18 Thread Caleb Cushing
On Fri, Sep 17, 2010 at 8:04 AM, Heiko Baums li...@baums-on-web.de wrote:
 Like I've written on the arch-multilib mailing list I'd prefer to
 having flashplugin in [multilib] renamed to lib32-flashplugin or
 bin32-flashplugin and the new 64 bit version added to [extra] as
 flashplugin at least if the new 64 bit version is stable and secure
 enough.

++ the general consensus was to leave 64-bit flash in... when adobe
cancelled it for a bit... I don't know why it ever got removed. I've
had problems recently with flash and I suspect it's due to running a
32-bit version.

-- 
Caleb Cushing

http://xenoterracide.com


[arch-general] kde 4.5.1 ati/intel workarounds

2010-08-31 Thread Caleb Cushing
Does anyone know if the workarounds are still needed or if that was a
fixed bug? I read the changelog but was unable to discern whether or
not these were on the list of fixed kwin bugs.

-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] mirror.cs.vt.edu outdated

2010-08-12 Thread Caleb Cushing
On Thu, Aug 12, 2010 at 3:35 AM, Harry Strongburg harry.a...@harry.lu wrote:
 Lastly, what mirror is the most trusted?

I use kernel.org I don't know that it's most trusted but...

-- 
Caleb Cushing

http://xenoterracide.com


[arch-general] upgreade 4.4.5 - 4.5.0 problems

2010-08-10 Thread Caleb Cushing
hmmm not sure what do here (previously owned by kdebase-runtime)
should I just force this?

error: failed to commit transaction (conflicting files)
kdebase-workspace: /usr/lib/kde4/kstyle_oxygen_config.so exists in filesystem
kdebase-workspace: /usr/lib/kde4/plugins/styles/oxygen.so exists in filesystem
kdebase-workspace: /usr/share/apps/kstyle/themes/oxygen.themerc exists
in filesystem
kdebase-workspace: /usr/share/apps/kstyle/themes/qtcde.themerc exists
in filesystem
kdebase-workspace: /usr/share/apps/kstyle/themes/qtcleanlooks.themerc
exists in filesystem
kdebase-workspace: /usr/share/apps/kstyle/themes/qtgtk.themerc exists
in filesystem
kdebase-workspace: /usr/share/apps/kstyle/themes/qtmotif.themerc
exists in filesystem
kdebase-workspace: /usr/share/apps/kstyle/themes/qtplastique.themerc
exists in filesystem
kdebase-workspace: /usr/share/apps/kstyle/themes/qtwindows.themerc
exists in filesystem
kdebase-workspace: /usr/share/doc/kde/html/en/kcontrol/paths/common
exists in filesystem
kdebase-workspace:
/usr/share/doc/kde/html/en/kcontrol/paths/index.cache.bz2 exists in
filesystem
kdebase-workspace:
/usr/share/doc/kde/html/en/kcontrol/paths/index.docbook exists in
filesystem
kdebase-workspace: /usr/share/doc/kde/html/en/kcontrol/paths/paths.png
exists in filesystem

seems these were previously owned by  kdegames-kpat should there be a
replaces somewhere?

kdegames-kpatience: /usr/bin/kpat exists in filesystem
kdegames-kpatience: /usr/share/applications/kde4/kpat.desktop exists
in filesystem
kdegames-kpatience:
/usr/share/apps/kconf_update/kpat_update_cardwidth.upd exists in
filesystem
kdegames-kpatience: /usr/share/apps/kpat/kpatui.rc exists in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/clubs.png exists
in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/common exists in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/diamonds.png
exists in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/hearts.png exists
in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/index.cache.bz2
exists in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/index.docbook
exists in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/man-kpat.6.docbook
exists in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/playfield.png
exists in filesystem
kdegames-kpatience: /usr/share/doc/kde/html/en/kpat/spades.png exists
in filesystem
kdegames-kpatience: /usr/share/icons/hicolor/128x128/apps/kpat.png
exists in filesystem
kdegames-kpatience: /usr/share/icons/hicolor/16x16/apps/kpat.png
exists in filesystem
kdegames-kpatience: /usr/share/icons/hicolor/22x22/apps/kpat.png
exists in filesystem
kdegames-kpatience: /usr/share/icons/hicolor/32x32/apps/kpat.png
exists in filesystem
kdegames-kpatience: /usr/share/icons/hicolor/48x48/apps/kpat.png
exists in filesystem
kdegames-kpatience: /usr/share/icons/hicolor/64x64/apps/kpat.png
exists in filesystem


-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] kernel26 2.6.34.2-1 ALSO hardlocks my box on boot??

2010-08-03 Thread Caleb Cushing
On Tue, Aug 3, 2010 at 6:09 PM, David C. Rankin
drankina...@suddenlinkmail.com wrote:
 what else do I need to do?

out of curiousity have you tried building your own kernel and
bisecting it? or mailing the lkml?

-- 
Caleb Cushing

http://xenoterracide.com


[arch-general] mandriva beat us to a new version

2010-07-29 Thread Caleb Cushing
of perl http://jquelin.blogspot.com/2010/07/perls-state-in-mandriva-cooker.html
how embarrassing.

-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] mandriva beat us to a new version

2010-07-29 Thread Caleb Cushing
On Thu, Jul 29, 2010 at 10:05 AM, Caleb Cushing xenoterrac...@gmail.com wrote:
 how embarrassing.

I guess cooker is like their testing version... but according to this
it's in opensuse 11.3... we're definitely starting to fall behind
release distro's here.

-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] mandriva beat us to a new version

2010-07-29 Thread Caleb Cushing
2010/7/29 Angel Velásquez an...@archlinux.com.ve:
 Do you know that there is some human intervention in the process to
 make these packages? those humans who are in the process called devs,
 trusted users, etc .. If you want the last version of _perl_ (or any
 other package) and it's not on the repos yet, you can compile
 yourself, share it with the pkgbuilds (if you want), or just wait
 until this or those human(s) have a free time to make the package(s)
 and do the tests, or you want a broken package but _updated_ ?.

Just so you know I volunteered to be a junior dev and was
rejected. I have ~400
http://aur.archlinux.org/packages.php?SeB=mL=2K=xenoterracide
packages on the AUR. I file out of date packages on on Arch every day.
I think I filed ALL the rebuild bugs (for perl- packages ) for 5.12.
I've been running it for 3 months. I think I've done everything I
/can/ to get this rolled out. The fact is the small, very small amount
of work that has yet to be done... I can't do.

-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] mandriva beat us to a new version

2010-07-29 Thread Caleb Cushing
On Thu, Jul 29, 2010 at 10:47 AM, Smith Dhumbumroong zodma...@gmail.com wrote:
 I'd rather wait and let the devs sort out any/all problems with the new
 version of perl, or any software for that matter, before releasing it,
 rather than rushing to releasing it in order to win a nonexistent race.


On Thu, Jul 29, 2010 at 8:06 PM, Allan McRae al...@archlinux.org wrote:
 The goal of Arch Linux is not to package things faster than everybody else.
  The goal of Arch is to make the distribution that the developers want to
 use.  It just happens that Arch developers like having most things packaged
 quickly so that is what we do.


you know Allan... every time I hear what arch /is/ I hear something
different. Arch /is/ a rolling distribution, it is not meant to be as
stable as other distributions. This does not mean we release
everything carelessly, and we generally have a good balance between
'stable' and 'current'. I'm generally not dissatisfied.

My point by the way is that this could have been released to stable ~3
months ago. I really would like to not see Mandriva, Ubuntu, OpenSuse,
and Fedora all have it in their stable distro's when we don't. As I've
pointed out OpenSuse already has it in there stable 11.3.

You can call me a wanker, and talk about your life all you want... but
I volunteered to help, I know another that did too. We were turned
down. I can't do what I don't have the 'privileges' to do, and neither
can anyone else. There aren't any patches needed (so far as I can
tell). The only thing left to do is rebuild community -dbd's and move
everything to stable (so far as I can tell), if there's more no one
has mentioned it.
-- 
Caleb Cushing

http://xenoterracide.com


Re: [arch-general] perl-authen-sasl: local (2.1401-1) is newer than community (2.15-1)

2010-07-20 Thread Caleb Cushing
On Wed, Jul 21, 2010 at 12:35 AM, Dave Reisner d...@falconindy.com wrote:
 , but of course upstream should have, imo, versioned it
 as 2.14.01 to avoid this kind of nonsense.

to upstream that translates to

2.014001

which is less than

2.15

honestly what upstream should have done is made 2.1401 2.15 and now
2.15 would be 2.16


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [PATCH 01/48] Bashification of initscripts

2010-07-11 Thread Caleb Cushing
On Sun, Jul 11, 2010 at 2:11 PM, Thomas Bächler tho...@archlinux.org wrote:
 No no, that wouldn't make sense. It should be this way: First all
 patches that actually change logic, then one big commit that just
 converts the _remaining_ [ to [[ with no additional logic changes involved.

wouldn't it be better to do the other way around... first the mass
conversions with no logic changes (more likely to be accepted?) then
the ones with logic changes in case some get rejected. that way the
mass conversion doesn't depend on logic changes by accident.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] mercurial in Extra out of date

2010-07-06 Thread Caleb Cushing
On Tue, Jul 6, 2010 at 11:43 PM, PT M. pen...@gmail.com wrote:
 if I sent this to the wrong place, sorry, i just wanted the maintainer got
 noticed, maybe i shoud sent to him directly?


http://www.archlinux.org/packages/extra/i686/mercurial/

there'd be a flag out of date link where the flagged out of date is...
http://www.archlinux.org/  you can use the package search to find the
package you're looking for and make sure it's been flagged out of
date.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] mercurial in Extra out of date

2010-07-06 Thread Caleb Cushing
On Tue, Jul 6, 2010 at 11:53 PM, Thomas Dziedzic gos...@gmail.com wrote:
 You could also send a working pkgbuild to hopefully speed this up :P

speculatively (unless you know something I don't) the pkgbuild only
needs changes in pkgver and the md5sums. sending a patch for that is,
IMO a  waste of everyone's time.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [PATCH 01/48] Bashification of initscripts

2010-07-01 Thread Caleb Cushing
On Wed, Jun 30, 2010 at 6:07 PM, Victor Lowther
victor.lowt...@gmail.com wrote:
 I don't see the need for this patch. functions is not supposed to be
 executed standalone, it is only source'd from bash scripts.

 It is a habit I have -- including the shebang line at the top makes sure
 my text editors automatically detect the right shell syntax for syntax
 highlighting.

It has the added benefit of making it quite clear that the script will
not work on another POSIX shell.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [PATCH 14/48] Fix whitespace errors I introduced.

2010-07-01 Thread Caleb Cushing
On Wed, Jun 30, 2010 at 6:06 PM, Thomas Bächler tho...@archlinux.org wrote:
 If you introduced whitespace errors (or any errors), fix them in the
 commits that introduced them, don't do a separate commit fixing them.
++

rebase -i  on the remote and flatten squash this patch into the patch
the problem was introduced in.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Bashification of initscripts for moderate speedup

2010-06-30 Thread Caleb Cushing
On Tue, Jun 29, 2010 at 1:57 PM, Aaron Griffin aaronmgrif...@gmail.com wrote:
 I have no idea where the number came from, but both 80 and 132 are
 standard column widths used for normal and wide terminals.

should be 78 columns I do believe that's the standard for kernel/git
it allows for email comments more easily apparently.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Why no phonon in Qt

2010-06-28 Thread Caleb Cushing
On Sun, Jun 27, 2010 at 10:53 PM, Shridhar Daithankar
ghodech...@ghodechhap.net wrote:
 So why is phonon support disabled in Qt?

if memory serves correct from gentoo days it has to do with qt phonon
an kde phonon stepping on each others toes... however it might be for
different reasons in arch.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Bashification of initscripts for moderate speedup

2010-06-28 Thread Caleb Cushing
On Sun, Jun 27, 2010 at 11:10 PM, Victor Lowther
victor.lowt...@gmail.com wrote:
 Questions, comments, flames, etc. welcome.

why go this way instead of the other? (clarification why go deeper
into bash instead of trying to posix-ify the scripts)

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Bashification of initscripts for moderate speedup

2010-06-28 Thread Caleb Cushing
On Mon, Jun 28, 2010 at 11:03 AM, Victor Lowther
victor.lowt...@gmail.com wrote:
 For me, part of it is that bash is used pretty ubiquitously as the
 configuration and scripting language of choice. Changing that to posix sh in
 one of the main config files would be a big shift.

there seems to be a shift to dash as the main system shell in some
distro's these days... and as openrc show's it's possible to do things
similar to how arch does it (and gentoo used to) without bash.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Bashification of initscripts for moderate speedup

2010-06-28 Thread Caleb Cushing
On Mon, Jun 28, 2010 at 12:36 PM, Isaac Dupree
m...@isaac.cedarswampstudios.org wrote:
 IIRC, Busybox shell can get notable speed boost by incorporating versions of
 tools like sed into the same busybox executable, such that it often doesn't
 have to fork and load other short-lived programs.

I don't think it loads them into it... it provides them... for example
running busybox vi  will load busybox's version of vi. Doesn't mean
this isn't a good thing... symlinking vi  to busybox and then running
that vi is the same as typing busybox vi.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] perl help missing DateTime::Format::ISO8601

2010-06-28 Thread Caleb Cushing
On Mon, Jun 28, 2010 at 12:27 PM, Ionuț Bîru biru.io...@gmail.com wrote:
 perl-date-iso8601

firstly this package seems to be in need of an update... at worst the
uri for the 'home page' is wrong secondly given your error you need (
cut see Lukas Fleischer's comment)

generally speaking (though not absolute) you can tell the package
you're looking for by converting it all to lowercase and replacing the
/'s or ::'s with -'s and putting perl- on the front.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Why no phonon in Qt

2010-06-28 Thread Caleb Cushing
On Sun, Jun 27, 2010 at 10:53 PM, Shridhar Daithankar
ghodech...@ghodechhap.net wrote:
 I have removed flash after the latest problem with x86_64 release and I want
 to get youtube working ASAP.

chromium 5 suppport h264 and 6 (if you want to go there) supports
webm... I've read KDE 4.5 is supposed to have webkit support in
konqueror so maybe that will work too.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Open Letter (Plea for Medical/Help Assistance) to World Leaders

2010-06-25 Thread Caleb Cushing
On Fri, Jun 25, 2010 at 7:21 AM, Aaron Griffin aaronmgrif...@gmail.com wrote:
 I know world domination has been discussed on this list before, but I did
 not realize we were far enough along to be considered world leaders.

 And the email comes not from a person, but from the space.time.universe!

They said world leaders... but not what world.

( going back to quashing the rebellion on the world in my head )

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Important notice on the Arch Security Team to the whole Arch Linux community.

2010-06-22 Thread Caleb Cushing
2010/6/21 Ng Oon-Ee ngoo...@gmail.com:
 I'd still like to know how this replaces/conflicts with Arch policy for
 'as upstream as possible'. I'm aware that just starting out the answer
 may just be we don't know yet, but for me one of the benefits of Arch
 is that all packages are close to upstream (and thus its easy to discuss
 bugs with upstream, which may not be the case with 5-10 security-patches
 from git/svn).


how 'bout things upstream doesn't take care of like pam.d policies...
I seem to recall there being a request for a pam policy for login
managers... as a result of my pointing out that even if your shell is
false you can login graphically.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] perl-5.12

2010-06-18 Thread Caleb Cushing
So is there anything I can do to help to get this in stable? I haven't
had any problems personally in over a month. I think the only bug
still open for rebuilds is the dbd* one.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 3:53 AM, Patrick Burroughs
celticmad...@gmail.com wrote:
 Maybe there's a bit of a slowdown versus Flash
 if you have a cutting-edge system, but not everyone is in that
 situation.

yeah having a quad core with 6G of ram takes care of just about any
system performance issues (except nepomuk and related tools which I've
had to disable due to a massive memory leak that can eat all ram in a
day). I suspect it's that the caching and downloading works better. I
only get 180k down so it's easy for my entire network to flood. It
doesn't help that I can't see the cache for a html5 video on youtube
so it could all be perception... or just the fact that I tend to watch
1-2 hour video's on youtube and not the average 1-10 minutes.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 5:15 AM, Caleb Cushing xenoterrac...@gmail.com wrote:
 yeah having a quad core with 6G of ram takes care of just about any
 system performance issues

however I was using flash 10 on a much less beefy system not so long
ago... and didn't notice issues... so I'd be curious to know how low
of a system spec do you have to go to have an issue. (it was a 1.8ghz
athlon-xp that was my previous system)

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 3:59 AM, Philipp Überbacher
hollun...@lavabit.com wrote:
 Flash or some players seem to still be buggy. I recently booted a live
 CD to watch a long video, and at some point, out of the blue, it was
 simply impossible to seek forward or backward. The Volume controls did
 nothing at all. Hurray for flash video?

that's you're example? I've had livecd's become useless run
environments due to IO problems... tell me your test was at least a
livecd environment loaded completely into ram.

 Have you tried that asteroids game linked in an earlier post in this
 thread? IMHO it works surprisingly well.

no. don't do games much anymore. I personally don't care about them. I
have seen several decent js examples of games and canvas and whatever.
But I do believe in this stuff needing to be supported across all
major vendors before it's ready. It's not supported yet. I hate IE,
and I might leave 'features out' of my IE support but I think that
even IE users should be able to access my content. The reason I
believe this is I know how many site's screwed us for years (and still
are). I don't want to be screwed and I'm not screwing anyone else.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 5:41 AM, Patrick Burroughs
celticmad...@gmail.com wrote:
 I will admit, it's pretty low. My previous system was a 2GHz Athlon
 XP, and while Flash wasn't instant on there, and occasionally lagged,
 it worked. That died, and I haven't the means to replace it, so I've
 been using an old Dell Latitude C610 (1.2GHz P3, 256MB RAM); Flash
 just utterly fails on here.

right... so that's ~10 years old... I'm guessing given a P3 which were
ending there cycle about 2000 with 1.2 GHz being the the upper
performance range... for comparison I'm using 1.2G of ram right now
without flash running... all of that between chromium and ktorrent. I
couldn't run most of what I do now on linux with that system... so yes
there are apps (like fluxbox) that would let me run that light. But
for the most part it's just not true anymore.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 5:57 AM, Philipp Überbacher
hollun...@lavabit.com wrote:
 I have no idea, it was simply the latest ubuntu live CD, i386 I believe.
 I never claimed that it was scientific, just recent experience. I used a
 live CD for this because I didn't want to install flash, but now I
 couldn't install it if I wanted to (practically I could, but it would be
 insane).

so... you're blaming flash for something that /could/ be a problem
with your environment... and certainly something flash was not
designed to run on... I've had livecd's with graphical environments
cease to respond after leaving them unattended. I blame the
environment... livecd's are great for recovery... but mediocre, at
best, for an actual environment.

 The whole thing is a great example why we should avoid proprietary
 technologies. First we're used as a testbed, then dropped. It shows how
 much you're at the companies mercy. That alone is reason enough for me
 to not use stuff like flash or skype.

right... as if open source never stops getting supported for long
periods of time... synergy anyone? or that we're never used as a
testbed *cough*kde 4.0*cough*.

 It wasn't about the game, but more about how well it runs. I was
 surprised to say the least. It kind of defeats the 'flash is much more
 than video' argument. Same is probably true for that wikipedia video
 page I linked somewhere, it has well working controls, very similar to
 those of flash players.

I'm sure it does...

 I've no idea about how well it is supported across browsers, only tried
 FF. I agree that it should work across all browsers and also all
 platforms (not sure flash does ppc and stuff). It might or might not
 work in some alternative browsers, but they sadly still have plenty of
 issues anyway. IE however will have to catch up in reasonable time if
 it lags behind other major browsers. From what I remember, they said
 they'll support webm, if only as codec you need to install separately.
 Proper html5 and js support will have to happen too.

it depends... I doubt many/any companies will do a full switch without
at least 50% market share. Which IE still holds, (flash has something
like 99% market share). Certainly it's not going away on youtube.

 So maybe it's not all there yet, and flash isn't dead yet, but I think
 (and hope) it won't take very long.

I suspect unless IE adopts webm it'll be around for a very long time.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
also has everyone forgotten this
http://techcrunch.com/2010/03/30/flash-player-to-come-bundled-with-google-chrome-new-browser-plugin-api-coming/
? if google wants flash dead so bad why bundle it? I suspect that's
why adobe has cancelled support for now. I bet they have to rewrite
parts of 64-bit flash anyways in order to do this. Once it's done
they'll re-release.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 12:29 PM, Jeroen Op 't Eynde
jer...@xprsyrslf.be wrote:
 Chrome 5
I thought WebM wasn't queued up until Chrome 6? pretty sure it's only
H264 in 5... but I could be wrong... I think even youtube says
something like that.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 2:35 PM, Heiko Baums li...@baums-on-web.de wrote:
 And why are there free Linux versions of every anti-virus software, if
 Windows is their only serious market?

because they're primarily used for scanning email for virii in web
gateways. you'll probably find more 64-bit av's in enterprise
editions.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 2:38 PM, Heiko Baums li...@baums-on-web.de wrote:
 WebM is already implemented in Chromium 5.

not in our stable build.
http://www.permadi.com/blog/2010/05/sample-webm-video-2/  that's
supposed to be webm and the video that's on youtube should have an
webm and html5 badge... I just get the html5 one. I hear it's been
backported in unstable and in chrome.

so firefox 4 isn't out, opera is in beta. I'm not actually 100% that
webm is in chrome stable. and this is ready? call me when stable
browsers have been released with it.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-17 Thread Caleb Cushing
On Thu, Jun 17, 2010 at 5:40 PM, Heiko Baums li...@baums-on-web.de wrote:
 You probably misunderstand something. HTML5 is the new HTML version,
 the language in which websites (Youtube e.g.) are written, the language
 which provides the video tag. WebM is the codec of the videos like
 MPEG, Ogg/Theora, etc.


no I understand it perfectly and have been playing with the youtube
beta. and that link I got was from #chromium-support maybe you don't
understand? that link has a webm video. I enabled js and plugins on
that page to be sure... and the video doesn't play. It's greyed out.
so unless you tell me that one works we don't.

from http://www.youtube.com/html5

* The HTML5 player has a badge in the control bar. If you don't see
the HTML5 icon in the control bar, you've been directed to the Flash
player (due to restrictions listed below)
*The HTML5 player also has a badge to indicate the video is using the
WebM format. If you don't see the WebM icon, the video is encoded
using h.264

so according to that you should see HTML5 WebM. Do you? I see HTML5
but no WebM which means it's using h.264. even if you append the
webm=1 which I suspect means youtube is smart  and knows to fall
back.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-16 Thread Caleb Cushing
On Wed, Jun 16, 2010 at 7:18 PM, Ray Rashif schivmeis...@gmail.com wrote:
 I simply couldn't get the same elements with the same ease in time,
 and thus failed to offer a presentation. They decided to stick with
 Flash, but I kept the multimedia tools within the open-source domain
 for post-production (simply because they couldn't care less and just
 needed the end-result). Well, the project is on hold for now so I'll
 see what kind of progress WebM/HTML5 has made up to this point.

yeah that sounds about right.

as of right now I don't think video is ready. however I'm all for
many of the other improvements coming in html5 and I wish people would
focus on rolling those out.

Again, I don't care if something is open source if it doesn't work at
the same level. You can claim security all you want... but plenty of
bugs security and not to be had in all software.

I tried html5 again on youtube, my video took several minutes to load
compared to flash which works nearly instantly.Given since I'm on
chromium 5 I don't think it was a webm video... so that may matter...
but if this is what html5 is going to be like... not sure I want it.

as far as mplayer-plugin settings... if I have to spend time
configuring it to make it work decently then it's too much work, I
don't have to do that with flash.

In any sense I think flash works well when you use it in the right
scenario's, html5 etc work well when used in their right scenarios.
Don't use flash for a slideshow. Don't try to use js/canvas for a game
it's just not their yet. WebM isn't ready to replace flash for video
though it may be some day.

If you want to blame the problems of the internet somewhere blame them
on IE... and maybe soon firefox, who's standards adoption is slowing
down to where IE is catching up. What we need is standards support,
and maybe some additions to the standards. I'd love to use all the
http methods when sending forms, I'd love to be able to use ESI's in
browsers too (Imagine if you could cache more of a page). I'd love for
js not to be obnoxiously abused like flash is (if your site doesn't
work without js it better have a good reason, I hate enabling js to
read a blog or coment on it).

flash will die when it's no longer needed or no longer provides
advantages. That time hasn't come yet.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-15 Thread Caleb Cushing
On Tue, Jun 15, 2010 at 12:23 PM, Thomas Bächler tho...@archlinux.org wrote:
 I'll keep this installed despite the security problem. Combined with
 flashblock, I can at least watch youtube this way. Force-removing it by
 a dummy update is something I don't want.

Same here. I block all plugins and js by default anyways... it's not
like anyone should actually be trusting flash to be secure... removing
it will just harm user functionality.

Linus is right http://article.gmane.org/gmane.linux.kernel/706950

of course no matter what... adobe is wrong... they shouldn't have
released without 64-bit... but their wrongs shouldn't make us choose
to harm our users functionality.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-15 Thread Caleb Cushing
On Tue, Jun 15, 2010 at 7:40 PM, C Anthony Risinger anth...@extof.me wrote:
 let's just all chant together in hopes that flash video will endure a
 quick, fiery demise, and webm/VP8 will rise from the ashes to claim
 it's place.

meh! flash works... I don't think I've tried the webm stuff... but I
did try the youtube html5 beta and it just didn't work well. flash
does more than just video anyways. I'll be ok with html5 video if it
works as good as flash for the purpose... but flash does so much more,
and it will certainly is better than going back to the days of
'proprietary plugins, and codecs'.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64

2010-06-15 Thread Caleb Cushing
On Tue, Jun 15, 2010 at 9:18 PM, Heiko Baums li...@baums-on-web.de wrote:
 I completely disagree. Flash can, of course, do much more than just
 video. But video currently is the most important feature. And I never
 understood why all those video portals thought they had to implement
 those videos in this proprietary Flash than just using the already
 existing and well and better working video plugins like mplayer-plugin
 resp. gecko-mediaplayer.

I've used that too... it didn't work well for me either...

 I also hate these websites which are completely and only implemented in
 Flash. They are usually loaded and rendered much slower than simple
 HTML websites, look at least not better, sometimes even worse and can
 only be seen with such a proprietary plugin.

with the exception of a few movie websites which were kinda
entertaining I agree.

 There are very few exceptions. For building small games like
 Samorost 1 and 2 e.g. Flash is quite nice, because such games can easily
 be written and played in a webbrowser. Disadvantage again: If the
 proprietary plugin doesn't work or doesn't exist these games can't be
 played anymore. So better such games should better be written in C.

yes... and then how're you going to serve them up in a cross compat way?

 And last but not least there are those annoying flickering Flash ads.

before flash it was gifs...

don't get me wrong... I don't love flash but it's been much better to
me than everything else. Honestly I wish people would just stfu about
the death of flash. I'm not about to be adobe or apple's puppet. As
long as I can use the web the way I want I'm happy. Flash has been
about 95% good on that since 10. A few bumps here and there, but some
weren't the fault of 'flash' like any program they were the fault of
the programmer. I'm pretty sure the problems with the daily show were
how they've built their stack, because youtube and abc.go.com both
work flawlessly.

seriously it's easier to block flash than gifs and the caching on
mplayer-plugin never worked that well... javascript has been just as
obnoxious as flash if not more so, popups anyone? how 'bout 'alert'
messages.

guns don't kill people, people kill people
programming languages don't create bad programs... bad programmers do.

don't blame the tool. (and no I don't like proprietary software, I
wish flash were open source. but I'll wait for webm to be a proven
technology before I jump on that bandwagon)
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] perl-json-xs tries to downgrade to -3 if -4 installed

2010-06-10 Thread Caleb Cushing
perl-json-xs tries to downgrade to -3 if -4 installed and I don't have
community-testing above community. I can't quite figure out why it
would try to do that. usually pacman just complaints that package-x is
newer than in extra.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] perl-json-xs tries to downgrade to -3 if -4 installed

2010-06-10 Thread Caleb Cushing
On Fri, Jun 11, 2010 at 1:27 AM, Allan McRae al...@archlinux.org wrote:
 It probably has options=('force') flag in the PKGBUILD.

should that still be there? it seems like a bit of misbehavior.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] perl-5.12

2010-06-02 Thread Caleb Cushing
so what's holding back the rebuilds? outside of rebuilds I have no problems.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] change user and group in env in PKGBUILD

2010-06-02 Thread Caleb Cushing
so i'm trying to update the oracle pkgbuild on AUR. oracle's installer
won't run as root, but it thinks that it's running as root. how can I
change this? I believe it is supposed to be run as the user and group
that it gets installed as what's the best way to add those in the
pkgbuild?

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] synergy-plus

2010-06-01 Thread Caleb Cushing
I suppose this could be filed as a bug... but since extra/synergy has
long been unmaintained upstream. I recently found a fork
http://code.google.com/p/synergy-plus/ for which there is already a
pkgbuild on AUR. perhaps we should consider relegating the original
synergy to AUR and moving synergy-plus into extra (or community)

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] how to test kde

2010-05-28 Thread Caleb Cushing
On Fri, May 28, 2010 at 4:13 AM, Madhurya Kakati mkakati2...@gmail.com wrote:
 as we have core extra and community stable repos are there any
 unstable repos like core-unstable etc.

testing and community-testing

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] perl-list-moreutils 0.22-2

2010-05-27 Thread Caleb Cushing
saw this updated this morning and got curious as to why. I looked at
it and it seems little more than a PKGBUILD improvement... nothing
that would affect current users. why bump the pkgrel? also this
version isn't on abs I don't know what affects that though.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] new pc; keep arch installation?

2010-05-26 Thread Caleb Cushing
On Tue, May 25, 2010 at 9:46 AM, Vincent Schut sc...@sarvision.nl wrote:
 Could anyone give me an idea about the chance of luck for such an operation?
 Tips, hints? Or would you just advise a clean install and install and
 reconfigure all software again?

I would advise disabling anything that starts X automatically (such as
gdm and kdm) until you've tested. If the video is in any way shape or
form buggy you don't want to be booting to a locked up system.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] can you only test certain packages?

2010-05-21 Thread Caleb Cushing
On Thu, May 20, 2010 at 6:31 PM, Thomas Bächler tho...@archlinux.org wrote:
 As far as I know, perl is alone in testing, so you should be in the clear.


well it doesn't depend on anything but there are new perl-* packages
that need to depend on it. I just don't feel like updating my kernel
or xorg to test perl. but from what people are saying the automation
of grabbing any updates to a subset of the packages in those repos is
not possible.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] can you only test certain packages?

2010-05-20 Thread Caleb Cushing
I'm trying to help with the testing of perl 5.12 but I'd rather not
test every package out there. Is it possible to block certain packages
from being updated from testing? or only allow certain ones? maybe
with a regex? obviously I don't wish to ban them globally. if they
make it into a non testing repo I'm fine with it.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] BASH no longer does 'for i in $(ls); do ls $i; done'??

2010-05-19 Thread Caleb Cushing
you can also use env ls which I believe gets ls from the PATH

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] testing xorg packages may not be nvidia friendly

2010-05-13 Thread Caleb Cushing
I tried installing testing on a box running nvidia drivers that I have
at school. X didn't come up. I don't know why and didn't really
investigate (as I was really testing to see if my box at home had an
env issue seems it does). using nvidia-173xx-utils

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Checkgmail doesn't work with perl 5.12 from testing

2010-05-11 Thread Caleb Cushing
On Tue, May 11, 2010 at 6:12 PM, Firmicus firmi...@gmx.net wrote:
 Certainly this is because glib-perl needs to be recompiled with perl 5.12.
 Other perl packages that include binary libraries may need to be recompiled
 too. We need a TODO list for such perl packages...


any package that's not arch any needs to be rebuilt. also watch for
actual compiling... I suspect that some not arch any packages should
be arch any. I found 1 the other day.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] perl 5.12

2010-05-05 Thread Caleb Cushing
On Tue, May 4, 2010 at 5:09 AM, Firmicus firmi...@gmx.net wrote:
 I'd also add that core packages need to be packaged with utmost care, and
 there are several issues with perl 5.12.0 that have yet to be solved. There
 are also some pending issues on FlySpray that need careful thinking, such as
 the issue of FHS non-compliance under /usr/bin. Besides that, even though my
 latest PKGBUILD compiles fine, make test throws out a substantial number
 of errors (Failed 138 tests out of 1722, 91.99% okay). It's fine to have
 the latest and greatest whenever possible, but packaging is also not a speed
 competition :)


I've read the bug in question. I don't think it should be a barrier to
5.12 adoption. Unfortunately I haven't seen a suggestion on a 'better
way'.

I agree on the test suite failing. I'll be looking into that once I
have a fresh install... right now I suspect some install snafus
because someone built on a new vm and reported no issues with what I
have issues with. I just got new drives... once I've tested those then
I'll reinstall and test more.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] perl 5.12

2010-05-05 Thread Caleb Cushing
I don't think any bug that's not specific to 5.12 should hold it back.
I know one of the bugs I filed doesn't appear to be present in the
5.12 build.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] iso's

2010-05-02 Thread Caleb Cushing
why is it the new iso's never made the download page?

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] perl prereleases request to make official decision to deviate from general guidleines

2010-04-30 Thread Caleb Cushing
I'm working on a PKGBUILD for perl 5.12 and I notice that it's
providing 20 some odd prerelease modules. I'm annoyed but I can't do
anything about it.

The general PKGBUILD guidelines say use the same as upstream unless
there is a hyphen. so for a perl prerelease of 0.90_1 that guideline
follows to release it as exactly the same. However 0.90_1 is == 0.90.1
and greater than 0.90 which it is a prerelease for on cpan.

I'd like to suggest that for perl the official guideline be to make
the version 0.90_pre1

Dist::Zilla a release automation tool also allows for using a format
_TRIAL which is not yet popular on cpan but does happen should pacman
add a _trial ? to the list of options? I think we could just use _pre
here too.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] perl prereleases request to make official decision to deviate from general guidleines

2010-04-30 Thread Caleb Cushing
On Fri, Apr 30, 2010 at 9:07 AM, Allan McRae al...@archlinux.org wrote:
 Why?  0.90_pre1 is also greater than 0.90.1...  do you want to try that
 again?

sorry should that be 0.90pre1 ? or does one just have to leave the 1
off? in previous different thread you said rc1 would work I'm
assuming that pre works the same way as rc guess I've inadvertantly
added an _ though.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] perl prereleases request to make official decision to deviate from general guidleines

2010-04-30 Thread Caleb Cushing
for right now I'm on drugs... or cpan is... probably both. either way
I should be ignored on this topic.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] perl 5.12

2010-04-28 Thread Caleb Cushing
Is there a timeline for perl 5.12 entering testing? I realize it's an
important not to be jumped into thing... but I don't see any bugs that
are obviously holding it up... so I'm just curious why it hasn't
entered testing yet.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] 4k sector drives

2010-04-24 Thread Caleb Cushing
On Thu, Apr 22, 2010 at 7:12 PM, Thomas Bächler tho...@archlinux.org wrote:
 You should google more to see if 4k sectors are really well-supported now.

I've actually done quite a bit of research. But most if it came back
upstream. So I thought I'd better ask in an arch specific context.
According to one of the latest upcoming kernel developments there will
be more 4k improvements in 2.6.34 what I was unable to determine is if
that was something that would require me to do something after the
kernel is released. In fact some of this stuff I was confused as to
whether... do I have to run fdisk in a certain way? is cfdisk
supported? how can I check to make sure it is working? and the obvious
even if the kernel and tools are now ready will an arch disk be ready
(obviously I already asked and has been answered)...


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] 4k sector drives

2010-04-22 Thread Caleb Cushing
On Wed, Apr 21, 2010 at 3:40 AM, Thomas Bächler tho...@archlinux.org wrote:
 I think the very very latest util-linux-ng will have fdisk/cfdisk


is that shipping on any of the install disks?

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] pam settings INSECURE

2009-11-18 Thread Caleb Cushing

 Minimal modification of packages. Allow users to choose for themselves
 instead of doing work for them. I fail to see the security implications
 here for the common user, why would someone want to lock out a user
 without deleting the account except a system admin, who presumably would
 know what to do and would not need a 'simple one-step process'.

maybe, but it all depends should the admin have to do a full system
security audit? after making these changes I shouldn't have any
problems with kdm, the system is more secure and there are no
disadvantages that I can see. I just can't understand why I had to go
through all of this to start, sure I could make my system even MORE
secure but it's just unnecessary. also one implication in the modified
file I sent is currently failed logins (w/ kdm) don't get logged...
but I don't suppose that the average user reads their failed user
authentication logs, or cares that say a roommate has been trying to
crack there account by hand (because they aren't smart enough to know
how to mount a system drive with a livecd (yes I've had this happen
this is why we hash passwords and make them in the first place not all
users are as smart as us)).

 I'd
 wager most Arch users simply have 1 account they use all the time, and
 perhaps a guest account for others to use.

perhaps so... but as I've said this doesn't negatively impact them.
the size is negligible and the benefits are helping people who are
ignorant of weak pam settings and may not have checked that an account
they thought was disabled actually was. I'm just happy I checked.

 This isn't a security hole, and it isn't the responsibility of Arch devs
 to make decisions for the users except in extreme cases.

how is this making decisions for users? arch makes decisions for users
all the time. I'd guess that arch has done SOME setup of pam. It's a
distributions job to make relatively sane and secure defaults. a
distibution shouldn't do insane security, like require usb key auth
(unless that kind of security is distro focus). but if there's no
serious performance impact, and no visible user impact, then why
should a distro implement a secure as possible by default setup?
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] pam settings INSECURE

2009-11-18 Thread Caleb Cushing
 As far as the people I know, passwd -d and passwd -l are the most
 common ways to do this. They do NOT change the shell. Changing the
 shell to lock out an account is laughable

expiredate would be more appropriate but again it didn't seem to be
instant. locking the password is good but it 'reportedly' won't stop
key/token authentication nor should it.


Who said that setting the user's shell to /bin/false means disabling a user?

googling disabling a unix account often lists this and I know I've
read a few books listing this. I'm not saying it's the most correct
answer, but given that this shell only refers to a login shell if this
isn't valid why should they be able to login? we set system accounts
like postgresql to this for this reason, they aren't supposed to be
logging in. again even though this is likely largely misinformation,
it's far to common to ignore. also if you look at an account and there
shell is /(s)bin/nologin wouldn't you assume that they aren't supposed
to be able to login?


So basically you just need to add  authrequired
pam_shells.so to all pam files related to login, correct ?

mostly yes.

Or what were the other problematic settings of pam.d/kde ?

 but I believe all of the login files should be mostly similar. the
suggestion of using common files is actually good and tweaking for the
last few modules. for example anything that provides login should also
be logging to faillog. basically unless it's medium specific they
should basically be doing the same things.

I also noticed arch hasn't changed to used pam_tally2 which I believe
is a replacement for pam_tally. I don't have much details on this
though.

I should also say that the practices of kde-np concern me and I'm
going to review them. I assume that's the file for 'no password'? it
seems to be too permissive. it should check other stuff and just not
password. but I haven't had time to check it over yet.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] pam settings INSECURE

2009-11-17 Thread Caleb Cushing
so here's the problem I've discovered
http://xenoterracide.blogspot.com/2009/11/bypassing-disabled-accounts-with-kdm.html
 links to arch bug included posting here because I believe both kde's
and arch's developers responses are less than satisfactory. This is a
security bug an easy to fix without making users lives more difficult.

so I'm starting with /etc/pam.d/login

authrequiredpam_shells.so #add this: why let someone login
who has an invalid shells.


/etc/pam.d/kdm # I'm pretty sure it should be 99% the same as login
since it allows logins.

#%PAM-1.0
authrequisite   pam_nologin.so
authrequiredpam_unix.so nullok
authrequiredpam_shells.so # as my blog says setting an
invalid shell is a common way of disabling accounts.
authrequiredpam_tally.so onerr=succeed file=/var/log/faillog
# use this to lockout accounts for 10 minutes after 3 failed attempts
#auth   requiredpam_tally.so deny=2 unlock_time=600 onerr=succeed file=/
account requiredpam_access.so
account requiredpam_time.so
account requiredpam_unix.so
passwordrequiredpam_unix.so
#password   requiredpam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 ret
#password   requiredpam_unix.so md5 shadow use_authtok
session requiredpam_unix.so
session requiredpam_env.so
session requiredpam_limits.so

also I believe pam_tally2 replaces pam_tally may wish to consider
migrating (non urgent next release?)

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] pam settings INSECURE

2009-11-17 Thread Caleb Cushing
On Wed, Nov 18, 2009 at 12:56 AM, Allan McRae al...@archlinux.org wrote:
 Caleb Cushing wrote:

 so here's the problem I've discovered

 http://xenoterracide.blogspot.com/2009/11/bypassing-disabled-accounts-with-kdm.html
  links to arch bug included posting here because I believe both kde's
 and arch's developers responses are less than satisfactory. This is a
 security bug an easy to fix without making users lives more difficult.

 Oh no.  It has been 1 day and my bug is not fixed! I must blog about it so
 the world listens to me...

because kde marked it invalid and the reply I received from arch
suggests it's 'not a bug'. regardless I blogged about it not just
because of Arch, but in case users of other distro's have a similar
'vulnerability'. I was not happy that it took me several tries and
much research to disable an account effectively from gui and cli.


 I shouldn't have to disable an account in more than 1 way to disable it
 across the board.

 Let see... one step procedures for disabling the user account

 1) change password for that user

I don't want to change there password that's not at all what I'm
trying to accomplish sure it would lock them out. but it's not the
same as disabling the account.

 2) put an asterisk * at the beginning of the second field (before the
 encrypted password) in the file /etc/shadow.

is this actually all that much different from doing a passwd -l ?
which  puts a '!' in front of the encrypted  password, effectively
disabling the password.

 3) set an account expiry date using chage

same as what I did with usermod for some reason it didn't take effect
immediately (not sure why haven't retested since discovering later)
this is ok but if you google disabling unix accounts you'll find quite
a few references to changing the shell to /bin/false. I also swear
(having trouble finding it) that I read somewhere that setting the
shell to /sbin/nologin should stop users from using X or kdm.

 3) userdel is permanent one step procedure that works very well...

I only wanted to lock them out, not delete them. in case I decided to
re-enable later. this is also the reason the password option wasn't
acceptable.

 #2 is my preferred.

 Allan

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] pam settings INSECURE

2009-11-17 Thread Caleb Cushing
 Oh no.  It has been 1 day and my bug is not fixed! I must blog about it so
 the world listens to me...

also no one has presented a /good/ reason for not fixing it, only
reasons they don't think it should be fixed. you could do abc or d
things that I can think of... but no one has said why security
shouldn't be tighter for kde. what's the negative impact? why aren't
failed logins being logged right now? why can users login if they have
an account but no valid shell? seriously? what's the reason that this
should not be fixed? that there MAY be acceptable alternatives? I
dont' find the GUI option acceptable, because it's too kde specific,
and (probably) doesn't affect a thing if I change login managers. only
one of the options you suggest actually do what I need to do... but
for some reason it didn't take immediate effect when I tried it.

 1) change password for that user
 2) put an asterisk * at the beginning of the second field (before the
 encrypted password) in the file /etc/shadow.
 3) set an account expiry date using chage
 3) userdel is permanent one step procedure that works very well...

also 1 and 2 probably don't affect alternative forms of
authentication... such as key auth, and thus do not effectively
disable the account.


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] mplayer needs a rebuild

2009-10-21 Thread Caleb Cushing
On Wed, Oct 21, 2009 at 12:51 AM, member zhurai zhu...@archlinux.us wrote:
 I tried rebuilding mplayer, but I'm getting errors O_o

 and when I looked in #mplayer ... it said in the topic:
 * Topic for #mplayer is: Do NOT paste inside the channel, use
 www.pastebin.com | *gcc 4.4.0 and 4.4.1 cause problems, use newer/older gcc*|
 http://wiki.multimedia.cx/index.php?title=MPlayer_FAQ | svn co svn://
 svn.mplayerhq.hu/mplayer/trunk | 64bit real codecs available, win32 dlls
 still need 32bit mplayer, in /usr/local/lib/codecs | 1080 h264 requires
 2.4ghz c2d / amd x2 2.8ghz+ | no plugin help | windows builds:
 http://oss.netfarm.it/mplayer-win32.php |

 how DID you compile it right abs, when I tried in all that I can and it
 still fails =_= (yes I tried in abs, svn, -mt-git, -mt-oss-git)

 fails on:
 libx264.c: In function 'encode_nals':
 libx264.c:75: warning: implicit declaration of function 'x264_nal_encode'
 libx264.c: In function 'X264_init':
 libx264.c:190: error: 'x264_param_t' has no member named 'b_bframe_pyramid'
 make[1]: *** [libx264.o] Error 1
 make[1]: *** Waiting for unfinished jobs
 make[1]: Leaving directory `/root/mplayer/src/mplayer/libavcodec'
 make: *** [libavcodec/libavcodec.a] Error 2

should probably mention I'm on x86_64 and not doing a new build heck I
didn't even bump the release version. using gcc 4.4.1  possibly
noteable in makepkg.conf but I doubt it.
CFLAGS=-march=core2 -O2 -pipe
CXXFLAGS=-march=core2 -O2 -pipe

other than that I just ran makepkg from the abs/extra/mplayer/PKGBUILD

Finished making: mplayer 29776-1 x86_64 (Tue Oct 20 23:25:34 EDT 2009)


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] crypto++ broken on arch? (unable to link)

2009-09-18 Thread Caleb Cushing
http://groups.google.com/group/cryptopp-users/browse_thread/thread/dfe40b4eed04f03d

discussion can be followed there. still trying to work out what's
going code does work against 5.6.0 just not on arch...

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] crypto++ broken on arch? (unable to link)

2009-09-17 Thread Caleb Cushing
#include cryptopp/sha.h
#include cryptopp/hex.h
#include cryptopp/files.h
#include boost/filesystem.hpp
#include string
#include iostream

using namespace std;
using namespace boost::filesystem;

string getSha1Hash(const path file, bool uppercase)
{
string result;
CryptoPP::SHA1 hash;
CryptoPP::FileSource(file.file_string().c_str(),true,
new CryptoPP::HashFilter(hash, new CryptoPP::HexEncoder(
new CryptoPP::StringSink(result),uppercase)));
return result;
}

int main()
{
string sha1;
path file(test.txt);
sha1 = getSha1Hash(file, true);
cout  sha1  endl;
}

g++ -lboost_filesystem-mt -lcryptopp sha1.cpp


/tmp/cc5IJR4i.o: In function
`getSha1Hash(boost::filesystem::basic_pathstd::basic_stringchar,
std::char_traitschar, std::allocatorchar ,
boost::filesystem::path_traits const, bool)':
sha1.cpp:(.text+0x5a): undefined reference to
`CryptoPP::StringSinkTemplatestd::basic_stringchar,
std::char_traitschar, std::allocatorchar 
::StringSinkTemplate(std::basic_stringchar, std::char_traitschar,
std::allocatorchar )'
sha1.cpp:(.text+0x117): undefined reference to `CryptoPP::DEFAULT_CHANNEL'
sha1.cpp:(.text+0x11d): undefined reference to `CryptoPP::DEFAULT_CHANNEL'
sha1.cpp:(.text+0x133): undefined reference to `CryptoPP::HashFilter::HashFilter
...
collect2: ld returned 1 exit status



according to the crypto++ mailing list my code does compile with that
command on ubuntu. if I'm doing something wrong for arch I'd like to
know. But I'm concerned that something is not being compiled right for
crypto++ on arch.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] crypto++ broken on arch? (unable to link)

2009-09-17 Thread Caleb Cushing
 My guess is either outdated library in ubuntu, which your codes works
 with, but doesn't work with a newer version, or that gcc/glibc being
 newer is making it break. It's likely one of those.


even if it is a bug on there end or with my code. it would be good to
figure out exactly what the issue is.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] postgresql 8.4

2009-09-09 Thread Caleb Cushing
I notice 8.4 still hasn't made it in to extra's I also notice that
libpqxx appears to be 2 minor releases behind (or is it that its
version numbering is weird? saying 3.0 when it's actually 3.0.1?). I'd
like to help get these up to date in any way I can. I can maintain
postgres and related packages if necessary.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] An evil idea --- use Git to manage the repositories

2009-09-09 Thread Caleb Cushing
you are forgetting how quickly and ginormassly huge the git repo's would get.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] Relating to missing lzma manuals.

2009-08-06 Thread Caleb Cushing
On Thu, Aug 6, 2009 at 5:53 AM, Frederic Beziesfredbez...@gmail.com wrote:
 lzma is now replaced by xz-utils.

what does this have to do with the command not having it's manual
page? where other lzma commands do? I suppose it could be missing from
upstream, is that what the problem is? this is an upstream bug?
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] no lzma man

2009-08-05 Thread Caleb Cushing
man lzma doesn't come up with anything although other lz* tools refer
to an lzma man page

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] postgresql 8.4

2009-08-01 Thread Caleb Cushing
what's the status of getting this into extra's? all it seems to
require is a typical version bump (outside of the xml bug). It appears
to work ok on x86_64 on my system. although I haven't done super
thorough testing.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] firefox 3.5 en-us 3.03 dictionary

2009-07-19 Thread Caleb Cushing
anyone get this installed? it's supposedly compatible with 3.5 and yet
I can't install it.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] reconfiguring vi to work like it did before the last update?

2009-07-13 Thread Caleb Cushing
On Mon, Jul 13, 2009 at 9:32 AM, Zé Ninguémmeugni...@gmail.com wrote:
 Neither was the previous vi, and the package was named vi.
 I think there needs to exist a binary named vi in the system, for
 POSIX compliance, but I am not shure.
 So if there needs to be a package that provides it, there can't be several
 packages providing it, or there will be conflicts, and one text editor
 should not conflict with another. IMHO, naming that package vi only seems
 natural.
 AFAIK, there is no such thing as vi nowadays, or is there?

there needs to be a 'vi' the package does not have to be named vi. as
far as package manager conflicts... I'd say just have vi symlink to
nvi by default and if people want they can symlink vi to vim or put an
alias in there shell config.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] /etc/resolv.conf continuously wiped since yesterday

2009-07-10 Thread Caleb Cushing
since a reboot/updates yesterday my /etc/resolv.conf has been getting
wiped (when it happens I lose all dns). I don't know why. does anyone
have any ideas what might be going on?

# A sample configuration for dhcpcd.
# See dhcpcd.conf(5) for details.

# Inform the DHCP server of our hostname for DDNS.
hostname

# A list of options to request from the DHCP server.
# Most distributions have NTP support.
option ntp_servers

# Behave nicely on networks and respect their MTU.
# However, a lot of buggy DHCP servers set invalid MTUs so this is not
# enabled by default.
#option interface_mtu

# A ServerID is required by RFC2131.
# Some broken DHCP servers do not send one and dhcpcd can work without it.
# Some broken DHCP servers NAK incorrectly and do not include a
ServerID either so
# the default is to require a ServerID.
require dhcp_server_identifier

# A hook script is provided to lookup the hostname if not set by the DHCP
# server, but it should not be run by default.
nohook lookup-hostname
noipv4ll

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] /etc/resolv.conf continuously wiped since yesterday

2009-07-10 Thread Caleb Cushing
On Fri, Jul 10, 2009 at 12:08 PM, Aaron Griffinaaronmgrif...@gmail.com wrote:
 This is correct. There should be .head and .tail files you can add
 which are automatically merged (check the docs). But more to the point
 - why are you putting values from dhcpcd.conf into resolv.conf?


I was showing you how dhcpcd.conf is configured. that's not
resolv.conf. resolv.conf just ends up with this.

# Generated by dhcpcd
# /etc/resolv.conf.head can replace this line
# /etc/resolv.conf.tail can replace this line

again I didn't have this problem until today after I rebooted my
system. and I haven't changed my configuration at all.
--

Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] /etc/resolv.conf continuously wiped since yesterday

2009-07-10 Thread Caleb Cushing
 So the question isn't why is it getting overwritten, but rather why is it
 getting overwritten with incorrect values that are making my DNS lookups
 fail.

 Try performing an nslookup on some site and see which DNS servers your
 system is getting configured to use.  Once you know which servers your
 system is using, you can then try to figure out why the DNS lookups are
 failing.

the problem is it's ending up with no values.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] e1000e 2.6.30.1 kernel massive packet loss

2009-07-10 Thread Caleb Cushing
in addition to my resolv.conf issues. I notice a severe packet loss
20-30% between me an my local router. downgrading to the 2.6.30.0-5
kernel seems to fix it. anyone aware of driver problems with the
e1000e driver in that kernel?

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] e1000e 2.6.30.1 kernel massive packet loss

2009-07-10 Thread Caleb Cushing
On Fri, Jul 10, 2009 at 6:15 PM, Aaron Griffinaaronmgrif...@gmail.com wrote:
 Are you sure this is related to this machine? With this issue and the
 resolv.conf issue (it being empty) you reported, my gut says something
 is whacked with your router.

my router doesn't provide my dns I have a dns server running locally
(which is why dhcpcd isn't supposed to overwrite resolv.conf). the
fact that the packet loss immediately went away when I downgraded and
I didn't have a problem until I actually loaded the new kernel. (my
router is an linksys wrt54gl running openwrt 8.09.1)

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] e1000e 2.6.30.1 kernel massive packet loss

2009-07-10 Thread Caleb Cushing
On Fri, Jul 10, 2009 at 6:53 PM, Thomas Bächlertho...@archlinux.org wrote:
 You have to break that thing pretty hard to not provide DNS. Actually, I
 couldn't get dnsmasq to not transmit DNS via DHCP even when I wanted to.

well... 8.09.1 has an option to disable. but my as I've said in the
other thread I've configured dhcpcd.conf not to get dns. sot it's
behaving appropriately that way. but inappropriately by still
overwriting resolv.conf.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] e1000e 2.6.30.1 kernel massive packet loss

2009-07-10 Thread Caleb Cushing
On Fri, Jul 10, 2009 at 6:09 PM, Thomas Bächlertho...@archlinux.org wrote:
 You can try booting with the nomsi kernel option. If that helps (and if it
 doesn't), can you please open an upstream bug report?

out of curiousity since I downgraded using pacman -U ... would my
fallback kernel be 2.6.30.1 or? I'm not sure how fallback creation
works. also since MSI is normally enabled, isn't disabling it kind of
off for telling if those changes are the cause of the problem?

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] firefox 3.5 no preferences

2009-07-02 Thread Caleb Cushing
On Wed, Jul 1, 2009 at 9:53 PM, Mike Shademsh...@mshade.org wrote:
 Caleb - I had this issue when I upgraded and the old binary was still
 running in the background.  Close all instances, check ps output, and fire
 it back up again.  Otherwise, try moving .mozilla to .mozilla-bak to
 troubleshoot.

yeah wasn't running in the background after all the major updates the
other day I rebooted. I basically had to remove the .mozilla waste of
time trying to troubleshoot it.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] gnupg: requires readline=6.0.00

2009-07-01 Thread Caleb Cushing
readline 6 is still in testing but gnupg is in extra's maybe I just
need to wait? is readline 6 about to move to extra's?

extra/gnupg 1.4.9-4
GNU Privacy Guard - a PGP replacement tool


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] gnupg: requires readline=6.0.00

2009-07-01 Thread Caleb Cushing
On Wed, Jul 1, 2009 at 9:41 AM, Stefan
Husmannstefan-husm...@t-online.de wrote:
 readline 6.0.00 is in [core] now, not in [extra]. Maybe your mirror has not
 synced yet.


ok. core is still showing as 'up to date' for me so I'll just have to
wait for that to resolve itself.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] gnupg: requires readline=6.0.00

2009-07-01 Thread Caleb Cushing
On Wed, Jul 1, 2009 at 9:47 AM, Caleb Cushingxenoterrac...@gmail.com wrote:
 ok. core is still showing as 'up to date' for me so I'll just have to
 wait for that to resolve itself.

this is annoying... core still isn't showing as not being up to
date do the 'repo' updates come from the mirror I use to get
packages from or elsewhere?


-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] gnupg: requires readline=6.0.00

2009-07-01 Thread Caleb Cushing
On Wed, Jul 1, 2009 at 5:42 PM, Aaron Griffinaaronmgrif...@gmail.com wrote:
 Which mirror are you using?
primarily

Server = ftp://mirror.cs.vt.edu/pub/ArchLinux/$repo/os/x86_64

although I've got a lot of failovers.
-- 
Caleb Cushing

http://xenoterracide.blogspot.com


[arch-general] firefox 3.5 no preferences

2009-07-01 Thread Caleb Cushing
when I goto edit - preferences the preferences are blank. anyone else
have this problem?

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] gnupg: requires readline=6.0.00

2009-07-01 Thread Caleb Cushing
On Wed, Jul 1, 2009 at 8:53 PM, Ray Kohleratara...@cmu.edu wrote:
 This mirror does, in fact, seem to update different repos on different
 schedules.

highly annoying... I made unixheads my primary mirror for now... seems
to have resolved it.

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


Re: [arch-general] deps not being properly recognized?

2009-06-24 Thread Caleb Cushing
On Mon, Jun 22, 2009 at 12:30 PM, Aaron Griffinaaronmgrif...@gmail.com wrote:
 You can do pacman -Ud to skip dep checks if you're sure the deps are good.

right this is ultimately what I ended up doing...

-- 
Caleb Cushing

http://xenoterracide.blogspot.com


  1   2   >