Amazed and appalled

2009-06-26 Thread Mike Hearn
As I was one of the original authors of the notifications spec, somebody pointed me to the recent discussions on xdg-list about it. When Christian and myself wrote this spec, it was to solve a problem the Linux desktop had: the only poptart implementation was KDE specific and so most of the apps

Re: [Portland] Re: [Fwd: Re: Mime-typ Scribus?]

2006-06-17 Thread Mike Hearn
The recent concensus is to use major-minor.png as icon for mimeypes. See the bottom of http://www.freedesktop.org/wiki/Standards_2fshared_2dmime_2dinfo_2dspec Awesome, I stand corrected. Thanks Waldo. ___ xdg mailing list xdg@lists.freedesktop.org

Re: Autostart on logout

2006-04-25 Thread Mike Hearn
On Sat, 22 Apr 2006 10:15:40 +0200, Vincent Untz wrote: Some people are asking for ways to start some commands on logout (like, eg, removing all files in a directory). Hm, what happens if such a program tries to interact with the user? Microsoft has a way that apps can watch for and cancel log

Re: (no subject)

2006-04-13 Thread Mike Hearn
On Thu, 13 Apr 2006 16:14:19 +0530, nupul kukreja wrote: Well Luca thanks a millionyup it did help me solve my doubt... I'm afraid that won't work. Multiple applications can handle the same file types, and then the user can choose between them in their file manager or select a default.

Re: all in desktop et al.

2006-04-13 Thread Mike Hearn
On Thu, 13 Apr 2006 15:38:50 +1000, Benjamin Rich wrote: www.linux-platform.org It details the Common Linux Desktop Platform, which is a set of cross-distro tools I'm going to write to allow a set of 'foundations' for anyone wanting to write a desktop/GUI application for 'Linux',

Re: .desktop files, serious security hole, virus-friendliness

2006-04-03 Thread Mike Hearn
On Sun, 02 Apr 2006 22:29:04 -0700, Sam Watkins wrote: I feel this x-bit is the single best protection available to the non-expert desktop user under Linux/UNIX, which prevents malware becoming common in *nix This is not a universally accepted opinion. The discussion also was started NOT

Re: Security issue with .desktop files revisited

2006-04-02 Thread Mike Hearn
But this is only true if the .desktop file is a valid .desktop file, no? I guess so. I don't know what KDE/GNOME do when given an invalid desktop file. And if the icon is actually in the theme on the user's system? Yes - things like JPEG file, word processor document etc are pretty much

Re: Security issue with .desktop files revisited

2006-04-01 Thread Mike Hearn
On Tue, 28 Mar 2006 23:59:11 -0500, Rodney Dawes wrote: The current solution in nautilus really sucks, and won't let me even open valid files, where the extension disagrees with the data mime type discovery. That's a different (but related) issue, where a file extension does not match what the

Re: Security issue with .desktop files revisited

2006-03-28 Thread Mike Hearn
Francois Gouget wrote: So in the above scenario, when the user downloads the rogue '.desktop' file to his desktop, that file will be tagged as 'untrusted'. Then, clicking on it would warn the user before running it. .desktop files shipped with the distribution would not have the 'untrusted'

Re: Security issue with .desktop files revisited

2006-03-28 Thread Mike Hearn
Francois Gouget wrote: Well, in my proposal, only untrusted files need the untrusted EA bit set. So backward compatibility is not broken. Right, I'm just exploring ways to achieve that without requiring EAs. Surely, requiring that web browsers and email tools make all the files they save

Re: Security issue with .desktop files revisited

2006-03-28 Thread Mike Hearn
Francois Gouget wrote: At least Windows does not require Firefox to know about .lnk, .cmd and .pif files. No, and a marking scheme doesn't _require_ anything to be updated. It's a nice-to-have-but-not-essential feature. First, who said that worm writers are not allowed to call their ELF

Re: Security issue with .desktop files revisited

2006-03-25 Thread Mike Hearn
On Sat, 25 Mar 2006 10:56:00 +, Thomas Leonard wrote: ROX-Filer shows .desktop files (and anything else it will execute if clicked) with a different text colour, but leaves the icon alone. That's the sort of thing we want, I think, but does it really work? Have you tested it on people to

Re: Security issue with .desktop files revisited

2006-03-24 Thread Mike Hearn
On Sat, 25 Mar 2006 09:13:44 +1100, Lennon Cook wrote: If a potentially dangerous .desktop file gets through the QA process, and is installed on an end-user system, it isn't a leap of faith to think that it could have +x by default. What QA process? This is supposed to stop viruses that work

Re: Menu spec update (summary; closure?)

2006-03-23 Thread Mike Hearn
On Thu, 23 Mar 2006 08:33:47 -0600, Jeremy White wrote: I think idea #3 is a neat idea (I'm a big fan of having all files isolated into their own /opt/blech directory), but I just don't see a practical road from here to there. And even if #3 is championed, a short term resolution is needed

Re: shared-mime-info 0.17

2006-03-14 Thread Mike Hearn
Current issues keeping this as 'draft' are: * The Desktop Base Directory Specification, which this relies on, is still a draft. Can we add: * Integration with icon themes has not been finalised (and is not currently part of the specification). to that list? :) It's

Re: Allowing apps to install packages

2006-03-01 Thread Mike Hearn
On Tue, 28 Feb 2006 22:36:38 +, John Tapsell wrote: For example, in a KDE app we may want to install a certain set of files. What would be useful would be in a distro-independent way to say install japanese_language_pack for example. Then it would be up to the distro's to provide

Re: Autostart and MAC security

2006-02-28 Thread Mike Hearn
On Tue, 21 Feb 2006 23:35:26 +, Mike Hearn wrote: Obviously if an app is installed as root via RPM or whatever then it's game over. Oh, I should note that there's no fundamental reason RPMs must have root privs anyway: autopackages can already install without root access and it's easy

Re: update-desktop-database location

2006-02-09 Thread Mike Hearn
On Thu, 09 Feb 2006 12:03:09 +0100, Christian Westgaard wrote: So I'm back to scripting individual tests per distro and gnome/kde version. Note that autopackage already does this, so before duplicating our work you may wish to investigate if using it would make sense for you. thanks -mike

Re: Request for clarification on menu/file spec

2006-02-08 Thread Mike Hearn
On Tue, 07 Feb 2006 15:56:54 -0800, Waldo Bastian wrote: If there is concensus that that is the right long term direction and that the benefits outweigh the disadvantages then I guess we should go that way. I would like to hear some more cheers of support for that direction first though.

Re: ogg [was Re: [EMAIL PROTECTED]: docbook mime type detection]]

2005-08-16 Thread Mike Hearn
That is *spectacularly* broken. I assume the ogg people have been larted for this? It's also very common: QuickTime MOV and Windows AVI files work exactly the same way. Neither has to contain video although they usually do. Even if the Ogg guys were publically larted and vowed to reform we'd

Re: Qt/GTK Skinning

2005-07-26 Thread Mike Hearn
The differing looks is a feature, not a bug, IMO. Perhaps so, but surely the user should be the one to decide on the aesthetics of their desktop and not us? Firefox and OpenOffice follow the GTK+ theme too and it never causes me problems. thanks -mike

Verifying Categories lines

2005-06-13 Thread Mike Hearn
Hi, One common class of bugs I've seen lately while trying out various autopackages people have built is that despite shipping a .desktop file, nothing appears in the menus. Often the problem is that the Categories line is wrong. There are a few different mistakes people make consistently: *