Re: Security concerns with minified javascript code

2015-08-26 Thread Vincent Cheng
On Wed, Aug 26, 2015 at 12:04 AM, Simon Josefsson  wrote:
> Vincent Bernat  writes:
>
>>  ❦ 25 août 2015 22:46 +0100, Steve McIntyre  :
>>
Notably, one of the tool is Grunt and its myriad of plugins. Even if
Grunt was in Debian, we would also need Gulp, then Broccoli, because in
Javascript, there is always someone thinking that it should be possible
to do better. We need to leave the Javascript ecosystem mature a bit
more but in the meantime, a bit of tolerance would be appreciated for
the some of us needing to package some javascript bits.
>>>
>>> Why should we be tolerating setups where it's not clear that we can
>>> reproduce what's being shipped?
>>
>> We have done that for years for autoconf stuff.
>
> I believe that has proven many times to be a terrible idea, and it still
> causes frustration and may cause security problems when the generated
> code contains a bug (recall the automake chmod bug?).  Many packages now
> use dh --with autoreconf as a result.
>
> I don't think using the autoconf mess in Debian is a good excuse to make
> the same mistake with JavaScript.

In that case, perhaps those who are most vocally in favour of
enforcing build-time javascript minification would care to work on a
debhelper addon to do so (similar to how dh-autoreconf makes dealing
with autoconf messiness easier as well)? After all, the people
spearheading build reproducibility in Debian got where they are today
by actively fixing toolchain issues and providing patches to make
packages build reproducibly, not by engaging in repetitive discussions
on debian-devel or forcing maintainers to deal with build
reproducibility by themselves. Choosing to whack people on the head
with Policy (or equivalent) instead is likely to be more
counterproductive than anything else.

Regards,
Vincent



Re: RFC: DEP-14: Recommended layout for Git packaging repositories

2014-11-11 Thread Vincent Cheng
On Tue, Nov 11, 2014 at 11:38 PM, Paul Wise  wrote:
> On Wed, Nov 12, 2014 at 3:34 PM, Gergely Nagy wrote:
>
>> I'd like to note that there are very good reasons for a debian-only,
>> overlay-style packaging repository too. This section should, in my
>> opinion, at least acknowledge that, and briefly mention it as an option.
>> I find it a bit sad that it was outright discouraged.
>
> Personally I wouldn't use anything other than debian-only repos, at
> least for those where I have a choice. I also actively avoid
> contributing to packages that don't use such repos.

+1

Most of my collab-maint repos still use svn largely because svn
encourages debian-only repos (and also because of inertia, I guess),
not because I don't want to use git.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CACZd_tDnwCHxScaqGqKarT=pd5qaxkyodtcto3uklec9rhv...@mail.gmail.com



Re: First steps towards source-only uploads

2014-08-03 Thread Vincent Cheng
On Sun, Aug 3, 2014 at 8:13 PM, Joey Hess  wrote:
> Ansgar Burchardt wrote:
>>  * Architecture-independent (arch:all) packages must be included in
>>uploads.
>
> That can be read 2 different ways.. I hope it means:
> If you have an arch:all, you have to upload it, but if there is none,
> you can upload with no .debs. Is that correct?

Yes, that's correct. You can upload just the source package itself if
it doesn't build any arch-indep packages.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caczd_tcxlluqd2p7dgamboh38wqsl4okmpt9f15j7rxgveh...@mail.gmail.com



Re: Bug#753704: Aw: Re: Bug#753704: ITP: amap -- Next-generation scanning tool for pentesters

2014-07-07 Thread Vincent Cheng
On Mon, Jul 7, 2014 at 9:48 AM, costamagnagianfra...@yahoo.it
 wrote:
>
> Hi Steffen and all,
>
> today while talking with a backbox project administrator I discovered that 
> popular tools such as openvas directly calls the amap binary.
>
> I never talked with them, but I don't think it is feasible to ask to every 
> security tool provider to patch their code for the only debian benefit.
>
> I think I'm then changing again my opinion: the conflict field might be the 
> only proper way to be sure such popular tools (not packaged in debian and 
> some of them not even free) continue to work.
>
> Is this one a good reason for a conflict?

Again, according to Policy 10.1, as well as precedent that was
established by the CTTE decision regarding the namespace collision
between ax25-node vs. nodejs, no, it isn't; your argument is no
different from that of the nodejs maintainers, arguing that
/usr/bin/node should be taken over by nodejs simply because it's
already widely used by the nodejs community.

If you feel strongly enough about this issue, I'd suggest filing a bug
against debian-policy, going through the process and gathering
consensus to change 10.1 (e.g. perhaps by weakening it to a "should"
instead of a "must", or by proposing a carefully-worded exception to
existing policy).

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caczd_tax8kynh4emcynsrvdweakohy9vgzbtrvkvqud8pra...@mail.gmail.com



Re: MATE 1.8 has now fully arrived in Debian

2014-07-01 Thread Vincent Cheng
On Tue, Jul 1, 2014 at 5:53 PM, Wookey  wrote:
> +++ Stefano Zacchiroli [2014-06-30 11:43 +0200]:
>> On Mon, Jun 30, 2014 at 10:27:49AM +0100, Lars Wirzenius wrote:
>> > On Mon, Jun 30, 2014 at 10:42:09AM +0200, Tollef Fog Heen wrote:
>> > > ]] Thomas Goirand
>> > > > +1 for keeping the name which is funny
>>
>> What's funny about an OS stating publicly that a specific piece of Free
>> software---shipped and installed by default by that very same OS---"must
>> die"?
>
> Every package name in debian is not a 'statement of the OS' as a
> whole. Each one is just a package name, most of which are vaguely
> descriptive, some are punny, many rather cryptic. None that I can
> think of are a 'statement'.
>
> The systemd people won the argument. Giving those who prefer not to
> use it (yet) a slightly childish package to install is a small
> consolation for them and really shouldn't be taken very seriously. I'm
> afraid the name amused me - and I assume I'm not the only one.
>
> But OK. I get it - this is still too contentious to have any room for
> this sort of foolishness and if it's to exist at all it'll have to be
> called something boring. That's a little sad, but we'll all
> survive. This isn't supposed to be a big deal, just a small
> convenience.

For the sake of "fun", let's go ahead and upload packages with
provocative names. That's sure to foster goodwill between the pro- and
anti-systemd camps within Debian, right?

Sorry to be a spoilsport here, but I'll take "boring" any day of the
week if the potential alternative is another heated discussion that'll
eventually devolve into mudslinging or general unpleasantness.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CACZd_tA1sECx=KXp7jcJu1ySBag9j2mkDHydx7DnkY4L=gd...@mail.gmail.com



Re: cppcheck, does nobody really care about it?

2014-05-12 Thread Vincent Cheng
Hi Gianfranco,

On Mon, May 12, 2014 at 11:47 AM, Gianfranco Costamagna
 wrote:
> Hi debian developers,
>
> cppcheck [1] has been removed from testing [2] because of a sourceless 
> javascript file [3].
[...]
> So, please, can anybody sponsor this package and upload or just reject it 
> from mentors?

I don't see a bug filed against the sponsorship-requests
pseudo-package, nor do I see any recent cppcheck RFS requests on
debian-mentors@l.d.o (where this mail should've been sent to in the
first place, not debian-devel). Please follow the correct sponsorship
procedure as outlined on mentors.debian.net [1]; I can assure you that
there actually are DDs who track debian-mentors and RFS requests (e.g.
yours truly), and you'll get a fairly quick response from me if it
deals with a RC bug.

The diff looks fine for a NMU, so I'll go ahead and upload this. Thanks!

> I really would like to comaintain this package, but this is out of the scope 
> of this mail.

Again, debian-devel is not the right place for this. You'll want to
contact the current maintainer, or if he/she's unresponsive, then
contact the MIA team [2] instead.

Regards,
Vincent

[1] http://mentors.debian.net/intro-maintainers
[2] https://wiki.debian.org/Teams/MIA


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CACZd_tA1qrcqm=30JGDaDJ_jsDdcpwyCD9UKng6Lj=vzxz7...@mail.gmail.com



Re: automatically maintaining/tracking repackaged upstream tarballs

2014-04-22 Thread Vincent Cheng
On Tue, Apr 22, 2014 at 1:40 PM, Daniel Pocock  wrote:
>
>
>
> I've just added some comments on my blog about tracking upstream
> tarballs that need to be repackaged and automating whatever we can:
>
> http://danielpocock.com/automatically-creating-repackaged-upstream-tarballs-for-debian
>
> Given all the recent issues with popular packages containing minified
> JavaScript and other sourceless files, I'm hoping to get feedback from
> people about how the solution can be generalized to help as many
> developers as possible.
>
> In the Java world, some of these things stick out like a sore thumb
> (e.g. copies of junit or other *.jar files in upstream tarball) - it is
> not hard to extrapolate this to match other patterns though.

I think the latest initiative is to get Files-Excluded [1] (in
debian/copyright) formalized in Policy (#685506) and to encourage
people to use it.

Regards,
Vincent

[1] https://wiki.debian.org/UscanEnhancements


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CACZd_tAeRE6Y69a6x-47szMnjUuMSxCGf=gT7B-t=gb_gch...@mail.gmail.com



Re: jquery debate with upstream

2014-03-12 Thread Vincent Cheng
On Wed, Mar 12, 2014 at 1:11 PM, Philipp Kern  wrote:
> Hi,
>
>
> On 2014-03-11 00:09, Joachim Breitner wrote:
>>
>> Am Montag, den 10.03.2014, 20:29 +0100 schrieb Philipp Kern:
>>>
>>> as long as the code in question is not under a license that requires the
>>> full, non-minified source to be reproduced and if the copyright notices
>>> and license terms as potentially required by the license are present, I
>>> don't see why not. But I guess the latter is not commonly happening?
>>
>>
>> The most common case is that the file
>> http://code.jquery.com/jquery-1.11.0.min.js
>> is included without
>> http://code.jquery.com/jquery-1.11.0.js
>>
>> The minified file contains a copyright header, and the license is MIT,
>> so I believe shipping jquery-1.11.0.min.js without query-1.11.0.js is
>> allowed.
>>
>> So you'd say it is acceptable to leave jquery-1.11.0.min.js in a tarball
>> if it is unused (e.g. if it is removed in the clean target, and possibly
>> documented in README.Source)? Can maybe someone from the ftp-team
>> confirm this?
>
>
> how bad would it be for those upstreams to just include an unused copy of
> the non-minified version? Clearly it'd never be used by anything in the
> upstream packaging because you almost always want to ship minified JS to
> browsers in production. But if they already fetch the min and you have a
> working relationship with upstream... maybe they're sympathetic.

>From upstream's point of view, it often comes down to "extra work and
no gain". Avoiding busywork is a fairly compelling reason to not do
something.

> I still think it should be acceptable given that it's an open source
> project, it's clearly versioned from which source it comes and we check by
> not using the file that no changes have been done to the minification. I
> guess we could even go one step further and argue that the source for this
> is in fact in Debian. If we could generate the same minification result as
> jquery upstream in Debian, all we'd "need" would be the equivalent of a
> source-depends or a pointer in debian/copyright. It's not that we don't ship
> its source, after all.

My understanding is this is what the "Built-Using" field in
debian/control is supposed to help with, although I don't think it's
in widespread usage yet.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caczd_tcpycsdqziub0pzrrzaqexgyd21k+v11ezkv6_9o16...@mail.gmail.com



Re: Backports, Stable releases, Testing, Oh my!

2014-02-26 Thread Vincent Cheng
On Tue, Feb 25, 2014 at 3:33 PM, Paul Wise  wrote:

>> What shall we do? Remove from stable-bpo? Hope an update comes around?
>> Does it make sense to revisit the rules? Does a wait until testing still
>> make sense (ok, waiting always makes sense, but beyond the 'let it
>> settle' thing)
>
> Autoremoval from backports possibly makes sense?

My concern with autoremoving packages from backports is that it would
take an extended amount of time to get the package back into backports
after the RC bug is fixed; it'd have to go through the backports NEW
queue again, whereas packages in unstable don't need to take a detour
through the NEW queue in order to re-migrate to testing. It'd be even
more annoying for folks who contribute backported packages but aren't
actually the maintainers of the package; they may well be caught by
surprise when a RC bug that they didn't know about causes their
backports to be autoremoved, especially if it was a RC bug that only
had an impact in testing/unstable, and not in a stable+backports
environment.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CACZd_tBJSqg=etqhok_2qehmm-cyexjwxj-ydq5ovu9pmjg...@mail.gmail.com



Bug#736217: ITP: gstreamer-vaapi -- VA-API plugins for GStreamer

2014-01-20 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 

* Package name: gstreamer-vaapi
  Version : 0.5.7
  Upstream Author : Gwenole Beauchesne 
* URL : http://gitorious.org/vaapi/gstreamer-vaapi
* License : LGPL-2.1+
  Programming Lang: C
  Description : VA-API plugins for GStreamer

gstreamer-vaapi is a collection of GStreamer plugins and helper libraries that
allow hardware accelerated video decoding, encoding and processing through
VA-API.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20140121062505.14217.9655.reportbug@vincent-tlaptop



Bug#720138: general: weekly cron crashed

2013-08-19 Thread Vincent Cheng
reassign 720138 app-install-data
forcemerge 716779 720138
thanks

On Sun, Aug 18, 2013 at 11:51 PM, Antoon Pardon  wrote:

> xdg.Exceptions.ParsingError: ParsingError in file '/usr/share/app-
> install/desktop/spout.desktop', Invalid line:
> Categories:Application:Game:ArcadeGame
> run-parts: /etc/cron.weekly/apt-xapian-index exited with return code 1

That looks exactly like bug #716779 [1]. Workaround is to change that
invalid line to something that is valid, i.e.:

Categories=Application;Game;ArcadeGame;

Regards,
Vincent

[1] http://bugs.debian.org/716779


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CACZd_tDTw=XYpOY=zgmka_bfjuoo4d2zzdpfufrrwfyak8g...@mail.gmail.com



Re: Non-identical files with identical md5sums on Debian systems?

2013-08-04 Thread Vincent Cheng
On Sun, Aug 4, 2013 at 9:44 PM, Fabian Greffrath  wrote:
> Hi all,
>
> I do occasionally check for identical files on different systems by
> comparing their md5sums. So, just out of interest, could someone tell me
> (how to find out) how many non-identical files with identical md5sums
> there are there on a typical (say, amd64) Debian system?

The closest thing to what you want may be dedup.debian.net, but I
don't think it lets you filter out non-identical files.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/caczd_tcqeftp3si47fzhgtfejf0zwz-ys6_kaaee2jvwnse...@mail.gmail.com



Re: Survey answers part 3: systemd is not portable and what this means for our ports

2013-07-19 Thread Vincent Cheng
On Fri, Jul 19, 2013 at 9:35 AM, John Paul Adrian Glaubitz
 wrote:
> On 07/19/2013 06:12 PM, Mathieu Parent wrote:
>>
>> As the recommended way to install systemd is using init= and not
>> installing systemd-sysv, maybe the popcon "vote" count is the correct
>> metric?
>
>
> Plus, systemd isn't pulled in by anything else which means when it's
> there it's there because it was actively installed. I don't think it
> magically lands onto a user's hard disk or someone installs it just
> in order to not use it actually.

On the contrary, in experimental, gnome-shell depends on
gnome-settings-daemon, which in turn depends on systemd. I wouldn't be
surprised if this is one of the reasons sid still has version 3.4 of
the shell, rather than the latest upstream version (3.8).

If/when gnome-shell 3.8 hits unstable and systemd gets forced on end
users as well...I dare say that the general outcry here on
debian-devel would make the past network-manager related threads look
tame in comparison. I offer my deepest condolences to the gnome
maintainers in advance (I doubt that they're looking forward to
dealing with all this).

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CACZd_tC4acLy=Ant-0KsHCz-g0UsW5vO8Qx2O6=tpmj6nfk...@mail.gmail.com



Re: Is there an active Debian mactel team?

2013-05-24 Thread Vincent Cheng
On Thu, May 23, 2013 at 12:42 AM, Thibaut Paumard  wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Dear all,
>
> Despite all the efforts from many people, it's still quite difficult to
> get a fully functional Debian system on certain Apple hardware.
>
> I have been looking for a team I could join to discuss and improve the
> situation, but I could not find one. There are pages on the wiki, there
> is a debian-mactel channel on OFTC, but no alioth project and no mailing
> list. Is there something I missed?
>
> Things that could be coordinated:
>  * maintaining packages:
> [1] pommed
> [2] macfanctld
> [3] mouseemu
>
>  * integrating the functionality of those packages in general purpose
> alternatives (e.g. fancontrol)
>
>  * integration with other Debian systems and tasks:
>[4] kernel
>[5] bumblebee


Bumblebee (and related packages, i.e. bbswitch and primus) are
currently maintained under the umbrella of the Debian NVIDIA
Maintainers team, and I'd personally prefer to keep maintaining
bumblebee there rather than moving it over to team maintenance within
a mactel-specific team. That being said, if there's anything I can do
(as one of bumblebee's maintainers) to help Debian users with Apple
hardware, please do let me know. I myself don't have any Apple
hardware, so I'll be relying instead of bug reports and/or patches
from those who do if there are any incompatibilities with the current
bumblebee packages in Debian (but off the top of my head, I can't
think of any).

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CACZd_tD+m2sZB-GK1ZyCzVO=W7QOAX=tvjth3qtr4+p+3b6...@mail.gmail.com



Re: NDEBUG when building packages?

2013-02-23 Thread Vincent Cheng
On Sat, Feb 23, 2013 at 1:39 AM, Mathieu Malaterre  wrote:
> On Fri, Feb 22, 2013 at 9:52 PM, Russ Allbery  wrote:
>> Ian Jackson  writes:
>>> Mathieu Malaterre writes ("Re: NDEBUG when building packages?"):
>>
 In that case, this should really be clarified. A lot of debian/cmake
 packages are actually doing:
>>
 -DCMAKE_BUILD_TYPE:STRING=Release
>>
 within there debian/rules files. This settings by default compiles
 with: `-O3 -DNDEBUG`
>>
>>> OMG WTF BBQ
>>
>>> Certainly -DNDEBUG should never be used unless upstream explicitly say
>>> that it's intended to be supported, and usually not even then.
>>
>> Also, -O3 is generally considered rather iffy.  It's not very well-tested
>> and in various versions of GCC it tended to make the code slower, not
>> faster (usually because it unrolled loops too far and blew the CPU cache).
>> It's also had various code generation bugs from time to time.
>>
>> I wouldn't use -O3 without benchmarking of that specific code to confirm
>> that it really improves matters.
>
> Seems like everyone agreed. I'll report a bug to lintian package to
> have it check for this string in d/rules:
>
> http://codesearch.debian.net/search?q=DCMAKE_BUILD_TYPE:STRING%3DRelease

We should also suggest that packages use
-DCMAKE_BUILD_TYPE=RelWithDebInfo instead (-g -O2). In fact, I think
that this would be a sensible default for packages using debhelper's
cmake integration. Sounds like another wishlist bug for debhelper...

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CACZd_tBqy0VUA+ZRWEJZxMucpdTQcN0=co+ayuznaecz_jm...@mail.gmail.com



Bug#699726: ITP: bijiben -- intuitive note editor integrated with GNOME 3

2013-02-03 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 

* Package name: bijiben
  Version : 3.7.5
  Upstream Author : Pierre-Yves Luyten 
* URL : https://live.gnome.org/Bijiben
* License : GPL-3+
  Programming Lang: C
  Description : intuitive note editor integrated with GNOME 3

Bijiben is a note editor that is designed to be intuitive and easy to use,
and well integrated with GNOME 3.


(Yes, I know we already have Tomboy and Gnote, but Bijiben comes closest to
implementing GNOME's "Notes" design [1].)

[1] https://live.gnome.org/Design/Apps/Notes


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20130204054730.16023.3801.reportbug@vincent-tlaptop



Bug#693868: ITP: mailnag -- mail notification daemon for GNOME 3

2012-11-21 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 

* Package name: mailnag
  Version : 0.4.4
  Upstream Author : Patrick Ulbrich 
* URL : https://github.com/pulb/mailnag
* License : GPL-2+
  Programming Lang: Python
  Description : mail notification daemon for GNOME 3

Mailnag checks POP3 and IMAP servers for new mail. When it finds new messsages,
it creates a GNOME 3 notification that mentions sender and subject.

(Not part of extended description: This is similar to mail-notification,
except that it's not dead upstream and it's integrated nicely with GNOME shell)


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20121121090945.14168.82421.reportbug@vincent-tlaptop



Re: greater popularity of Debian on AMD64?

2012-09-05 Thread Vincent Cheng
On Wed, Sep 5, 2012 at 9:36 AM, W. Anderson  wrote:
> It is somewhat surprising and a little disappointing that Debian, or any
> other GNU/Linux distribution would be making statements that, in effect,
> give great public support to AMD in regard Linux, when the company has for
> many years been decidedly ambivalent and generally uncooperative towards the
> Linux community, particularly in cooperation with Microsoft in their
> negative attitudes and actions toward Free/Open Source Software communities.

I fail to see how the DPN is making a statement that gives "great
public support to AMD"; it is merely a statement of fact. A high
popcon rating for an architecture or a set of packages does not mean
that Debian endorses the use of said architecture/packages.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/caczd_tc66vbhoqcsota1st643eik1gy0aovkylt-x758rio...@mail.gmail.com



Bug#652954: ITP: logisim -- graphical tool for designing and simulating logic circuits

2011-12-21 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 

* Package name: logisim
  Version : 2.7.1
  Upstream Author : Carl Burch 
* URL : http://ozark.hendrix.edu/~burch/logisim/
* License : GPL-2+
  Programming Lang: Java
  Description : graphical tool for designing and simulating logic circuits

Logisim is an educational tool for designing and simulating digital logic
circuits. With its simple toolbar interface and simulation of circuits as
you build them, it is simple enough to facilitate learning the most basic
concepts related to logic circuits. With the capacity to build larger circuits
from smaller subcircuits, and to draw bundles of wires with a single mouse
drag, Logisim can be used (and is used) to design and simulate entire CPUs
for educational purposes.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20111222075149.25954.82280.reportbug@vincent-laptop



Bug#634241: ITP: disper -- display switcher for attaching/detaching displays easily

2011-07-17 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: disper
  Version : 0.3.0
  Upstream Author : Willem van Engen 
* URL : http://willem.engen.nl/projects/disper/
* License : GPL3
  Programming Lang: Python
  Description : display switcher for attaching/detaching displays easily

 No more headaches just before your presentation. Disper lets you add and
 remove display devices at the press of a button.  It detects what display
 devices are attached at the moment, and configures the display output
 automatically. You can specify whether to clone the output on all displays,
 or to extend the desktop.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110718052158.22069.91522.reportbug@vincent-laptop



Bug#634003: ITP: conky-all -- highly configurable system monitor (all features enabled)

2011-07-15 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: conky-all
  Version : 1.8.1
  Upstream Author : Brenden Matthews, Philip Kovacs, et. al.
* URL : http://conky.sf.net/
* License : GPL3, BSD
  Programming Lang: C, Lua
  Description : highly configurable system monitor (all features enabled)

As part of my plans to adopt Conky, I've decided to split it into 2 source 
packages, conky and conky-all. Refer to #579102 for more info.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110715203532.13968.35216.reportbug@vincent-laptop



Bug#633420: ITP: gecrit -- simple, easy-to-use Python IDE

2011-07-10 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: gecrit
  Version : 2.7
  Upstream Author : Groza Cristian 
* URL : http://sourceforge.net/projects/gecrit/
* License : GPL
  Programming Lang: Python
  Description : simple, easy-to-use Python IDE

gEcrit is a Python IDE, with a focus on simplicity and ease of use. Some of its 
features include:
 * Editor geared towards Python, supporting indentation, code folding,
   syntax highlighting/checking, auto-completion, and bad brace checking
 * Integrated Python shell
 * Source tree browser
 * Autosaving
 * Multiple tabs
 * Printing
 * Spell-checking
 * Word searching/replacement
 * Pastebin.com integration



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110710071739.8830.55072.reportbug@vincent-laptop



Re: Orphaning some packages...

2011-07-09 Thread Vincent Cheng
>> These packages are free for adoption:
>> - magicor
> ...
>> - monster-masher
> ...
>> - slashem
> ...
>
> Perhaps the Debian games team can take these, is anyone from the team
> particularly interested?

I'll adopt these packages on behalf of the Games team, assuming nobody
else is interested.

Regards,
- Vincent Cheng


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CACZd_tDVdFW0XJ49F_EdSfZpK_RDME1RnJL=dxo9zd0uy_6...@mail.gmail.com



Re: packaging-dev 0.1 in unstable

2011-06-17 Thread Vincent Cheng
On Fri, Jun 17, 2011 at 6:42 PM, Yaroslav Halchenko
 wrote:
> imho it should depend on Lucas's packaging-tutorial and then
>
> apt-get install packaging-dev
> okular /usr/share/doc/packaging-tutorial/packaging-tutorial.pdf
>
> NB could anyone remind me what is that generic dispatcher to display
>   various files?  I remember there is something but shame on me, can't
>   recall

xdg-open?

If you're going to include Lucas' tutorial, I suggest recommending it
instead of depending on it (developers-reference and debian-policy are
both recommended by packaging-dev, not depends).

Kind regards,
- Vincent Cheng


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/banlktikcwbv2rzr1m9bzbswt64gua1v...@mail.gmail.com



Bug#622982: ITP: naev-data -- 2D space trading combat game

2011-04-16 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: naev-data
  Version : 0.4.2
  Upstream Author : Edgar Simo "bobbens" 
 Nikola Whallon <6.satur...@gmail.com>
 Josiah Schwartfeger
Deiz
Bas Fournier "BTAxis" 
* URL : http://code.google.com/p/naev/
* License : code - GPL-3 ; data - public domain,
  GPLv2, GPLv3, CC-By (and -SA) 3.0
  Programming Lang: C, Lua
  Description : 2D space trading combat game

 NAEV is a 2D space trading and combat game, in a similar
 vein to Escape Velocity.

 NAEV is played from a top-down perspective, featuring fast-paced combat,
 many ships and outfits, and a large galaxy to explore. The game is highly
 open-ended, letting players proceed at their own paces.

 This package contains the data files for Naev.

(For reference, #609295 is my ITP for Naev itself.)



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110416111615.724.34673.reportbug@vincent-laptop



Bug#614051: ITP: python-ncrypt -- python wrapper for OpenSSL

2011-02-19 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: python-ncrypt
  Version : 0.6.4
  Upstream Author : Tachyon Technologies Pvt. Ltd.
* URL : http://tachyon.in/ncrypt/
* License : MIT
  Programming Lang: Python
  Description : python wrapper for OpenSSL

 NCrypt is a python wrapper for OpenSSL built using Pyrex. It supports:
  * hash algorithms (md5, sha1, sha256, sha512 etc.)
  * symmetric encryption algorithms (aes256, aes128, 3des, blowfish etc.)
  * public key crypto with RSA
  * diffie-hellman key exchange
  * create/manipulate X.509 certificates
  * SSL/TLS network protocol



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110219105926.9356.70884.reportbug@vincent-laptop



Bug#613788: ITP: dropbox -- secure backup, sync and sharing util

2011-02-17 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: dropbox
  Version : 1.0.20-1
  Upstream Author : Dropbox, Inc.
* URL : http://www.dropbox.com
* License : Proprietary
  Section : non-free/net
  Description : secure backup, sync and sharing util

 Dropbox is a Web-based file hosting service operated by Dropbox, Inc.
 which uses cloud computing to enable users to store and share files and
 folders with others across the Internet using file synchronization.

 This package only contains the Dropbox daemon; it does not contain the
 Nautilus plugin for Dropbox.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110217083526.29472.58814.reportbug@vincent-laptop



Bug#610506: ITP: ardentryst -- Action/RPG sidescoller, focused on story and character development

2011-01-19 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: ardentryst
  Version : 1.7.1
  Upstream Author : Jordan Trudgett 
* URL : http://jordan.trudgett.com/
* License : game itself: GPL-3 ; game data/music: CC 3.0
  Programming Lang: Python
  Description : Action/RPG sidescoller, focused on story and character
development

Ardentryst is an action/RPG sidescoller, focused not just on fighting, but on
story, and character development. It features two playable characters and a
variety of weapons, items, armour, monsters, and beautiful level scenery and
graphics.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110119090820.2188.25780.report...@vincent-laptop.vc.shawcable.net



Bug#609849: ITP: nevernote -- An open source clone designed to interact with Evernote.

2011-01-12 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: nevernote
  Version : 0.9.6
  Upstream Author : Randy Baumgarte 
* URL : http://nevernote.sourceforge.net/
* License : GPL-2
  Programming Lang: Java
  Description : An open source clone designed to interact with Evernote.
Nevernote is an open source clone of Evernote,
written in Java  and designed to run on Linux.
Evernote is a collection of   software and
services that allows users to collect, sort, tag and
annotate notes and other miscellaneous information.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110113021157.20316.62790.report...@vincent-laptop.vc.shawcable.net



Bug#609295: ITP: naev -- 2D space trading combat game

2011-01-08 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: naev
  Version : 0.4.2
  Upstream Author : Edgar Simo "bobbens" 
 Nikola Whallon <6.satur...@gmail.com>
 Josiah Schwartfeger
Deiz
Bas Fournier "BTAxis" 
* URL : http://code.google.com/p/naev/
* License : code - GPL-3 ; data - public domain,
  GPLv2, GPLv3, CC-By (and -SA) 3.0
  Programming Lang: C, Lua
  Description : 2D space trading combat game



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110108093413.25671.41534.report...@vincent-laptop.vc.shawcable.net



Bug#609291: ITP: mangler -- A Ventrilo compatible client for Linux

2011-01-07 Thread Vincent Cheng
Package: wnpp
Severity: wishlist
Owner: Vincent Cheng 


* Package name: mangler
  Version : 1.2.1
  Upstream Author : Eric Connell, Daniel Sloof
* URL : http://www.mangler.org/
* License : GPL-2, GPL-3, LGPL-2.1
  Programming Lang: C, C++
  Description : A Ventrilo compatible client for Linux



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20110108074536.32082.37288.report...@vincent-laptop.vc.shawcable.net