Re: [arch-general] Stronger Hashes for PKGBUILDs

On Wed, May 09, 2018 at 12:31:39AM -0400, Eli Schwartz via arch-general wrote: > PGP keys are also far more likely to appear in multiple independently > verifiable locations, you can embed them in your DNS records, post them > on your blog, github profile, keybase.io proofs utilizing DNS as well

Re: [arch-general] Stronger Hashes for PKGBUILDs

On 05/08/2018 11:53 PM, Leonid Isaev via arch-general wrote: >> - not any sort of security check at all, they're there for CRC purposes, >> and using strong CRC is security theater because the maintainer >> probably just blindly ran updpkgsums without checking anything at all >> so they

Re: [arch-general] Stronger Hashes for PKGBUILDs

On Tue, May 08, 2018 at 11:38:01PM -0400, Eli Schwartz via arch-general wrote: > When you say "still", that implies that there was any sort of effort to > change that in the first place... Fair enough :) I thought it's a slow natural process... > - not any sort of security check at all, they're

Re: [arch-general] Stronger Hashes for PKGBUILDs

On 05/08/2018 10:08 PM, Leonid Isaev via arch-general wrote: > Hi, > > I'm intentionally using the title from Nov/Dec 2016 [0] to ease > googling. I decided to check the status of this, and there is still 325 > packages with only md5sums in [core] and [extra] (I didn't check [community]). >

Re: [arch-general] Stronger Hashes for PKGBUILDs

On Tue, May 08, 2018 at 08:08:31PM -0600, Leonid Isaev wrote: > [extra] > ... This list should also include "python-retrying". I should have grepped more carefully, sigh... -- Leonid Isaev

Re: [arch-general] Stronger Hashes for PKGBUILDs

On Tue, May 08, 2018 at 08:08:31PM -0600, Leonid Isaev wrote: > [0] https://lists.archlinux.org/pipermail/arch-general/2016-December/042 Oops, this link should have been https://lists.archlinux.org/pipermail/arch-general/2016-December/042700.html -- Leonid Isaev

Re: [arch-general] Stronger Hashes for PKGBUILDs

Hi, I'm intentionally using the title from Nov/Dec 2016 [0] to ease googling. I decided to check the status of this, and there is still 325 packages with only md5sums in [core] and [extra] (I didn't check [community]). Below results are generated by the attached script... Is there

[arch-general] Missing rc-local.service

Hello, I'd like to use /etc/rc.local and noticed, that there's something called systemd-rc-local-generator which should somehow pull in rc-local.service on boot, according to its man page. But on my ArchLinux, the service file isn't there, and neither does /etc/rc.local run on boot. Is the

Re: [arch-general] KDE plasma, baloo and UI/video playback freezes

On 5/8/18, Francesco Porro wrote: > In data martedì 8 maggio 2018 21:08:35 CEST, Carsten Mattner ha scritto: >> Linux block layer's writeback system was supposed to fix this, >> but I've also noticed that the mechanism isn't perfect and >> you can still have a "hanging"

Re: [arch-general] KDE plasma, baloo and UI/video playback freezes

In data martedì 8 maggio 2018 21:08:35 CEST, Carsten Mattner ha scritto: > Linux block layer's writeback system was supposed to fix this, > but I've also noticed that the mechanism isn't perfect and > you can still have a "hanging" application when doing the > infamous USB-to-USB transfer that

Re: [arch-general] KDE plasma, baloo and UI/video playback freezes

On 5/8/18, Francesco Porro via arch-general wrote: > Hi, > > My problem is: when I'm watching a video, running Konversation in the > background with logging on disk enabled, the playback of video slows > down, freezes for a while. > > Running iotop and ksysguard I

[arch-general] KDE plasma, baloo and UI/video playback freezes

Hi, My problem is: when I'm watching a video, running Konversation in the background with logging on disk enabled, the playback of video slows down, freezes for a while. Running iotop and ksysguard I found that baloo_file_extractor is writing on disk a big amount of data, filling the write