Re: [Dev] Kodi

2016-02-14 Thread Josh Branning
It might actually be this bug that's causing the problem: trac.kodi.tv/ticket/15816 Though I can't seem to access the kodi site. Here's an archived copy, but it's out of date: https://web.archive.org/web/20150225044323/http://trac.kodi.tv/ticket/15816 On 14/02/16 21:43, Isaac David wrote: It

Re: [Dev] Kodi

2016-02-14 Thread Isaac David
It depends on libpulse, full pulseaudio is optional. I can't try to reproduce the error ATM but I will take a look at those patches. Le dim. 14 févr. 2016 à 14:45, Josh Branning a écrit : Hi, I'm getting crashes when running kodi on ARM. It's pretty much the same error in the log as this:

[Dev] Kodi

2016-02-14 Thread Josh Branning
Hi, I'm getting crashes when running kodi on ARM. It's pretty much the same error in the log as this: http://forum.odroid.com/viewtopic.php?f=95&t=16356 Also I think the pulseaudio package was needed to get thus far, and it doesn't seem listed as a dependency. Josh

Re: [Dev] Mirrors vulnerability issue, Many outdated installs in the wild

2016-02-14 Thread Josh Branning
On 13/02/16 22:06, Denis 'GNUtoo' Carikli wrote: Hi, Summary: If you used the default pacman mirrorlists, your system is not up to date. http://parabolagnulinux.mirrors.linux.ro/$repo/os/$arch was the default mirror in /etc/pacman.d/mirrorlist Thanks for telling about this. I comment

Re: [Dev] Mirrors vulnerability issue, Many outdated installs in the wild

2016-02-14 Thread Denis 'GNUtoo' Carikli
On Sat, 13 Feb 2016 23:06:38 +0100 Denis 'GNUtoo' Carikli wrote: > I should also do a proper bugreport. Now that parabola infrastructure is back up, I can now bugreport. Here it is: https://labs.parabola.nu/issues/933 Denis. pgpGDu4srS5Ap.pgp Description: OpenPGP digital signature _

Re: [Dev] Mirrors vulnerability issue, Many outdated installs in the wild

2016-02-14 Thread Denis 'GNUtoo' Carikli
On Sat, 13 Feb 2016 23:06:38 +0100 Denis 'GNUtoo' Carikli wrote: Someone mentioned reflector to me on IRC: > usage: Reflector.py [-h] [--connection-timeout n] [--list-countries] > [--cache-timeout n] [--save ] > [--sort {score,delay,rate,age,country}] > [--

Re: [Dev] Mirrors vulnerability issue, Many outdated installs in the wild

2016-02-14 Thread Denis 'GNUtoo' Carikli
On Sun, 14 Feb 2016 11:59:39 -0300 fauno wrote: > Denis 'GNUtoo' Carikli writes: > > As for shorter term, we probably need to make sure the mirrorlist is > > coming from a trusted mirror that can be updated. > > > > We should of course use transports that can't be tempered with, such > > as http

Re: [Dev] Mirrors vulnerability issue, Many outdated installs in the wild

2016-02-14 Thread Denis 'GNUtoo' Carikli
In order for upgrades to be safe, signatures are not enough. This is because most old packages are signed with a key that is trusted by the system being updated. Even if db are signed, that stills applies. The main idea is to: -> Prevent MITM attacks. This should be done soon

[Dev] [announcement] mirror redirector available for testing

2016-02-14 Thread fauno
hi! as we talked previously[^1], i was working on an nginx config for creating a mirror redirector. tl;dr was: * serve repo databases locally * serve [libre] and [pcr] packages locally * redirect anything else to archlinux mirrors at random to spread the load * save and recycle resources! s

Re: [Dev] Mirrors vulnerability issue, Many outdated installs in the wild

2016-02-14 Thread fauno
Denis 'GNUtoo' Carikli writes: > As for shorter term, we probably need to make sure the mirrorlist is > coming from a trusted mirror that can be updated. > > We should of course use transports that can't be tempered with, such > as https or onion services it. Else a man in the middle can just > re

[Dev] cant connet to www.parabola.nu

2016-02-14 Thread Dika Setya Prayogi
www.parabola.nu cant be accesed recently. what happened ? ___ Dev mailing list Dev@lists.parabola.nu https://lists.parabola.nu/mailman/listinfo/dev

[Dev] Mirror Updates

2016-02-14 Thread Luke
Hello, Just a notification that both of my mirror servers are now running LetsEncrypt with auto-renew and achieve A+ on SSL Labs. https://www.ssllabs.com/ssltest/analyze.html?d=parabola.goodgnus.com.ar https://www.ssllabs.com/ssltest/analyze.html?d=server2.goodgnus.com.ar Hence, the SHA1 identif

[Dev] Mirrors vulnerability issue, Many outdated installs in the wild

2016-02-14 Thread Denis 'GNUtoo' Carikli
Hi, Summary: If you used the default pacman mirrorlists, your system is not up to date. http://parabolagnulinux.mirrors.linux.ro/$repo/os/$arch was the default mirror in /etc/pacman.d/mirrorlist That mirror was not updated for a while, so people using the default configuration are still