[Tails-dev] [review'n'merge:1.4] bugfix/8891-iso-image-padding

2015-05-07 Thread intrigeri
Hi, please merge this branch into testing and devel, so that our ISO boots on VirtualBox even in the cases when isohybrid makes it so its size is not a multiple of 2048 bytes. anonym: please note that I've added a few commits on top of your original implementation, so that we get more info to

Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted email to the IMAP server

2015-05-07 Thread intrigeri
intrigeri wrote (07 May 2015 13:44:31 GMT) : Before publishing, you'll want to check that the attached images don't show up in the Atom/RSS feeds. The attached images did show up on top of the feeds, and the notification end-users were seeing since the publication of the advisory was: * local

Re: [Tails-dev] review and merge bugfix/9327-disable-starttls-warnings

2015-05-07 Thread intrigeri
Hi, sajolida wrote (05 May 2015 16:54:28 GMT) : Ticket: #9327 - Claws and Tor shouldn't warn on StartTLS connections to port 110 (POP3) and 143 (IMAP) Branch: bugfix/9327-disable-starttls-warnings into testing I'm all for it. Code review passes, not tested. IMO this requires a design

Re: [Tails-dev] overlay support in bilibop

2015-05-07 Thread intrigeri
Hi, quidame wrote (19 Mar 2015 04:11:01 GMT) : That said, if you want to try the attached file... May you please also provide a patch that applies on top of bilibop 0.4.23? I need to build a Tails/Jessie ISO with a newer kernel (that only supports overlayfs). Unfortunately, bilibop-lockfs

Re: [Tails-dev] virt-manager documentation

2015-05-07 Thread sajolida
BitingBird: intrigeri: Marcelo Garrido wrote (06 May 2015 22:34:03 GMT) : However, there is no libvirt-daemon-system package in Ubuntu (at least not in 14.04). [...] then you should: sudo apt-get install virt-manager libvirt-bin qemu-kvm I think that's better. = I'll let our doc

Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted email to the IMAP server

2015-05-07 Thread intrigeri
Hi, sajolida wrote (05 May 2015 11:31:24 GMT) : So here is a draft of the security advisory, please review and comment: https://tails.boum.org/blueprint/claws_mail_leaks_plaintext_to_imap/ Thanks! stores plaintext copies of all emails that are meant to be encrypted on the remote IMAP server

Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted email to the IMAP server

2015-05-07 Thread sajolida
intrigeri: sajolida wrote (05 May 2015 11:31:24 GMT) : So here is a draft of the security advisory, please review and comment: https://tails.boum.org/blueprint/claws_mail_leaks_plaintext_to_imap/ Thanks! stores plaintext copies of all emails that are meant to be encrypted on the remote

Re: [Tails-dev] extension specification

2015-05-07 Thread intrigeri
Hi, sajolida wrote (07 May 2015 16:12:52 GMT) : We also updated the blueprint with some more implementation information. https://tails.boum.org/blueprint/bootstrapping/extension/ Impressive. I took a look and pushed a few nitpicking changes. A few comments and suggestions follow: The v1

Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted email to the IMAP server

2015-05-07 Thread Adam Burns
On 05/07/2015 03:44 PM, intrigeri wrote: sajolida wrote (07 May 2015 13:03:23 GMT) : intrigeri: I would move the Technical details section to the end, or at least to after the Workarounds one. Most users won't care, and it's largely duplicating information that's in the introduction

[Tails-dev] extension specification

2015-05-07 Thread sajolida
Hi Giorgio, A few days ago we finished a wireframe of the extension that we believe is a good start for you to work on. It might still change slightly as we continue discussing small details of it. See https://labs.riseup.net/code/attachments/download/759/extension-20150430.fodg. We also

[Tails-dev] [review'n'merge: 1.4] bugfix/9309-default-disconnect-search

2015-05-07 Thread anonym
Hi, I won't say much here; read the ticket, especially for the convenient testing instructions. The important thing is that this is a bit more of a feature than a bugfix, that we normally do not allow post-freeze. It does improve the browser localization situation a lot, however, beyond solving

Re: [Tails-dev] review release notes for 1.4

2015-05-07 Thread intrigeri
Hi, sajolida wrote (07 May 2015 14:15:30 GMT) : intrigeri: Also, I've no idea what floodfill performance is in this context. The context being I2P, it seems to be a core concept of the way I2P maintains the database describing its network: https://geti2p.net/en/docs/how/network-database

Re: [Tails-dev] [review'n'merge:1.4] feature/9340-Linux-from-Stretch

2015-05-07 Thread anonym
On 05/05/2015 09:52 AM, intrigeri wrote: Hi, as explained on #9340, without this change, our build system will very soon start producing unbootable ISO images. Please merge into stable, testing, devel and feature/jessie. Filed #9341 for the next steps (once Linux 4.0 migrates to Debian

Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted email to the IMAP server

2015-05-07 Thread sajolida
intrigeri: sajolida wrote (07 May 2015 13:03:23 GMT) : intrigeri: or, better, through the web interface of your email provider. I don't know why it would be better. I think I'd simply remove this 2nd option. I remove the better. I'll keep this as an option because it's what I would do

Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted email to the IMAP server

2015-05-07 Thread intrigeri
Adam Burns wrote (07 May 2015 16:00:18 GMT) : Will it be posted prominently (front page or?). It's now on the front page. Until we add a specific tag to that security advisory, Tails users will be notified about it on every boot. Of course that's painful for the vast majority of users, who

Re: [Tails-dev] review and merge bugfix/9327-disable-starttls-warnings

2015-05-07 Thread sajolida
intrigeri: Hi, sajolida wrote (05 May 2015 16:54:28 GMT) : Ticket: #9327 - Claws and Tor shouldn't warn on StartTLS connections to port 110 (POP3) and 143 (IMAP) Branch: bugfix/9327-disable-starttls-warnings into testing I'm all for it. Code review passes, not tested. IMO this

Re: [Tails-dev] A suggestion regarding the kernel that Tails uses

2015-05-07 Thread intrigeri
BitingBird wrote (07 May 2015 02:49:33 GMT) : I think I'll add it to https://tails.boum.org/doc/about/license Sounds good, given that's the page we're linking to from the homepage, where we state that Tails is Free Software. ___ Tails-dev mailing list