From dam at opencsw.org  Sat Oct  8 22:26:19 2016
From: dam at opencsw.org (Dagobert Michelsen)
Date: Sat, 8 Oct 2016 22:26:19 +0200
Subject: Packages for zstd
Message-ID: <EC6A2E40-0908-436D-BE02-EC38A3BFE7B6@opencsw.org>

Hi folks,

for the brave I have packages up the most efficient compression available: ?zstd?
  http://buildfarm.opencsw.org/experimental.html#zstd

If you haven?t heard from it you may want to read
  https://code.facebook.com/posts/1658392934479273/smaller-and-faster-data-compression-with-zstandard/


Best regards

  ? Dago

--
"You don't become great by trying to be great, you become great by wanting to do something,
and then doing it so hard that you become great in the process." - xkcd #896

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161008/68863f9c/attachment.asc>

From opk at opencsw.org  Sun Oct  9 08:59:54 2016
From: opk at opencsw.org (Oliver Kiddle)
Date: Sun, 09 Oct 2016 08:59:54 +0200
Subject: replacement getline function
Message-ID: <60873.1475996394@hydra.kiddle.eu>

A new nmh release is approaching and I'm getting fixes for a Solaris
build into the upstream release. One of the issues is with the lack
of a system getline function. I've got the autoconf/automake issues
worked out for a replacement function but the only issue is to choose a
replacement. There are two candidates to copy in the mgar repository:

syslog_ng/trunk/files/0001-Add-substitute-for-getline-on-Solaris.patch
reprepro/trunk/files/0004-implement-missing-getline-function.patch

I included the first in a mail to the nmh list and there were comments
made that it "whiffs a bit" and that we should have an attribution.
nmh itself uses 3-clause BSD so the gnulib implementation wouldn't be a
good choice.

Any idea what the original source of those two replacements was? First
was committed by Dagobert, second by Peter Felecan. Or any
recommendations for a good implementation where origin is clear for the
purposes of an attribution?

Thanks

Oliver

From pfelecan at opencsw.org  Sun Oct  9 14:43:52 2016
From: pfelecan at opencsw.org (Peter FELECAN)
Date: Sun, 09 Oct 2016 14:43:52 +0200
Subject: replacement getline function
In-Reply-To: <60873.1475996394@hydra.kiddle.eu> (Oliver Kiddle's message of
	"Sun, 09 Oct 2016 08:59:54 +0200")
References: <60873.1475996394@hydra.kiddle.eu>
Message-ID: <x6fuo5ae0n.fsf@opencsw.org>

Oliver Kiddle <opk at opencsw.org> writes:

> reprepro/trunk/files/0004-implement-missing-getline-function.patch
>
> I included the first in a mail to the nmh list and there were comments
> made that it "whiffs a bit" and that we should have an attribution.

The second one whiffs also ? If so, suggest amelioration path.

> Any idea what the original source of those two replacements was? First
> was committed by Dagobert, second by Peter Felecan.

My implementation is based on the manual page on systems where it exist,
such as GNU/Linux. Consequently, if you need an attribution I can give
it to you.

-- 
Peter

From opk at opencsw.org  Mon Oct 10 11:03:35 2016
From: opk at opencsw.org (Oliver Kiddle)
Date: Mon, 10 Oct 2016 11:03:35 +0200
Subject: replacement getline function
In-Reply-To: <x6fuo5ae0n.fsf@opencsw.org>
References: <60873.1475996394@hydra.kiddle.eu> <x6fuo5ae0n.fsf@opencsw.org>
Message-ID: <71435.1476090215@hydra.kiddle.eu>

Peter FELECAN wrote:
> > reprepro/trunk/files/0004-implement-missing-getline-function.patch
> >
> > I included the first in a mail to the nmh list and there were comments
> > made that it "whiffs a bit" and that we should have an attribution.
>
> The second one whiffs also ? If so, suggest amelioration path.

No comments were made on the second. It looks perfectly fine to me.
And as the person who made those comments[1] hasn't been forthcoming
with their own implementation, I'm inclined to commit the second
(i.e. yours) and he's welcome to change it later.

> My implementation is based on the manual page on systems where it exist,
> such as GNU/Linux. Consequently, if you need an attribution I can give
> it to you.

I had assumed that you had probably cribbed it from elsewhere but if it
is your work, that's easier. I do need an attribution in some form.
Either a suitable comment that can be placed before it in the code or if
you want, I could commit getline with git commit --author= naming you,
treating it as just a regular code contribution to nmh.

Thanks

Oliver

[1] http://lists.nongnu.org/archive/html/nmh-workers/2016-09/msg00177.html

From cgrzemba at opencsw.org  Mon Oct 10 11:05:28 2016
From: cgrzemba at opencsw.org (cgrzemba at opencsw.org)
Date: Mon, 10 Oct 2016 11:05:28 +0200
Subject: PYPI_MIRROR
Message-ID: <bf2d9b1351f0.57fb75f8@contac-dt.de>

Hi,

related to https://bitbucket.org/pypa/pypi/issues/438/backwards-compatible-un-hashed-package
I guess we should use for PYPI_MIRROR pypi.io:

--- gar.conf.mk (revision 25941)
+++ gar.conf.mk (working copy)
@@ -935,7 +935,7 @@
?# Python Package Index
?PYPI_PROJECT ?= $(NAME)
?PYPI_SUBDIR = $(shell echo $(PYPI_PROJECT) | cut -c 1)
-PYPI_MIRROR = http://pypi.python.org/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/
+PYPI_MIRROR = http://pypi.io/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/
?
?# Package dir
?GARPACKAGE = $(shell basename $(CURDIR))
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161010/443f976c/attachment.html>

From dam at opencsw.org  Mon Oct 10 11:31:38 2016
From: dam at opencsw.org (Dagobert Michelsen)
Date: Mon, 10 Oct 2016 11:31:38 +0200
Subject: PYPI_MIRROR
In-Reply-To: <bf2d9b1351f0.57fb75f8@contac-dt.de>
References: <bf2d9b1351f0.57fb75f8@contac-dt.de>
Message-ID: <2B115930-3C3D-40D5-A38A-B83B057C5AEF@opencsw.org>

Hi Carsten,

> Am 10.10.2016 um 11:05 schrieb cgrzemba at opencsw.org:
> 
> Hi,
> 
> related to https://bitbucket.org/pypa/pypi/issues/438/backwards-compatible-un-hashed-package

Hahaha, what a thread! :-) Sure, please go ahead.


Best regards

  ? Dago

> I guess we should use for PYPI_MIRROR pypi.io:
> 
> --- gar.conf.mk (revision 25941)
> +++ gar.conf.mk (working copy)
> @@ -935,7 +935,7 @@
>  # Python Package Index
>  PYPI_PROJECT ?= $(NAME)
>  PYPI_SUBDIR = $(shell echo $(PYPI_PROJECT) | cut -c 1)
> -PYPI_MIRROR = http://pypi.python.org/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/
> +PYPI_MIRROR = http://pypi.io/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/
> 
>  # Package dir
>  GARPACKAGE = $(shell basename $(CURDIR))
> 
> 

--
"You don't become great by trying to be great, you become great by wanting to do something,
and then doing it so hard that you become great in the process." - xkcd #896

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161010/5c3fac50/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161010/5c3fac50/attachment.asc>

From pfelecan at opencsw.org  Mon Oct 10 12:01:09 2016
From: pfelecan at opencsw.org (Peter FELECAN)
Date: Mon, 10 Oct 2016 12:01:09 +0200
Subject: replacement getline function
In-Reply-To: <71435.1476090215@hydra.kiddle.eu> (Oliver Kiddle's message of
	"Mon, 10 Oct 2016 11:03:35 +0200")
References: <60873.1475996394@hydra.kiddle.eu> <x6fuo5ae0n.fsf@opencsw.org>
	<71435.1476090215@hydra.kiddle.eu>
Message-ID: <x6zimc4j6i.fsf@opencsw.org>

Oliver Kiddle <opk at opencsw.org> writes:

> Peter FELECAN wrote:
>> > reprepro/trunk/files/0004-implement-missing-getline-function.patch
>> >
>> > I included the first in a mail to the nmh list and there were comments
>> > made that it "whiffs a bit" and that we should have an attribution.
>>
>> The second one whiffs also ? If so, suggest amelioration path.
>
> No comments were made on the second. It looks perfectly fine to me.
> And as the person who made those comments[1] hasn't been forthcoming
> with their own implementation, I'm inclined to commit the second
> (i.e. yours) and he's welcome to change it later.

Note that my implementation is quite simple minded. If you look to some
other implementations, e.g. Illumos/OpenSolaris, they take cara of a lot
more corner case but are writtent under licenses which are possibly
incomfortable for your project.

>> My implementation is based on the manual page on systems where it exist,
>> such as GNU/Linux. Consequently, if you need an attribution I can give
>> it to you.
>
> I had assumed that you had probably cribbed it from elsewhere but if it
> is your work, that's easier. I do need an attribution in some form.
> Either a suitable comment that can be placed before it in the code or if
> you want, I could commit getline with git commit --author= naming you,
> treating it as just a regular code contribution to nmh.

It is my lazy, i.e. necessary and sufficient for reprepro,
work. Probably the git commit is the simplest path. However, if it's
cleaner from your standpoint, I can provide you the files, header and
compilation unit, with a comment and a public domain mention.
-- 
Peter

From cgrzemba at opencsw.org  Mon Oct 10 15:22:07 2016
From: cgrzemba at opencsw.org (cgrzemba at opencsw.org)
Date: Mon, 10 Oct 2016 15:22:07 +0200
Subject: wiki is gone?
Message-ID: <be1d9f6d3c5f.57fbb21f@contac-dt.de>

something brocken?

503 Service Unavailable

Failed to resolve the name of server wiki.opencsw.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161010/0db4126e/attachment.html>

From bonivart at opencsw.org  Mon Oct 10 15:55:40 2016
From: bonivart at opencsw.org (Peter Bonivart)
Date: Mon, 10 Oct 2016 15:55:40 +0200
Subject: wiki is gone?
In-Reply-To: <be1d9f6d3c5f.57fbb21f@contac-dt.de>
References: <be1d9f6d3c5f.57fbb21f@contac-dt.de>
Message-ID: <CABY0g1WkKR9NzgxidA0oOidJTMhQV9u0GH2294yCcoyB-Zgvmg@mail.gmail.com>

On Mon, Oct 10, 2016 at 3:22 PM, cgrzemba at opencsw.org
<cgrzemba at opencsw.org> wrote:
> something brocken?
>
> 503 Service Unavailable
>
> Failed to resolve the name of server wiki.opencsw.org

There seems to be no A record for that, however this works:
http://opencsw.wikidot.com/

From ihsan at opencsw.org  Mon Oct 10 19:15:12 2016
From: ihsan at opencsw.org (=?UTF-8?B?xLBoc2FuwqBEb8SfYW4=?=)
Date: Mon, 10 Oct 2016 19:15:12 +0200
Subject: wiki is gone?
In-Reply-To: <CABY0g1WkKR9NzgxidA0oOidJTMhQV9u0GH2294yCcoyB-Zgvmg@mail.gmail.com>
References: <be1d9f6d3c5f.57fbb21f@contac-dt.de>
	<CABY0g1WkKR9NzgxidA0oOidJTMhQV9u0GH2294yCcoyB-Zgvmg@mail.gmail.com>
Message-ID: <bec861f4-0213-f62d-eac1-4bc0c1b72dd8@opencsw.org>

Am 10.10.2016 um 15:55 schrieb Peter Bonivart:

>> 503 Service Unavailable
>>
>> Failed to resolve the name of server wiki.opencsw.org
> 
> There seems to be no A record for that, however this works:
> http://opencsw.wikidot.com/

wiki.opencsw.org is a CNAME to www.wikidot.org. The problem is, that
www.wikidot.org doesn't resolv any more.

I've changed the the CNAME now opencsw.wikidot.org. Hope that helps.



Ihsan

-- 
ihsan at dogan.ch        http://blog.dogan.ch/

From ihsan at opencsw.org  Mon Oct 10 20:56:35 2016
From: ihsan at opencsw.org (=?UTF-8?B?xLBoc2FuwqBEb8SfYW4=?=)
Date: Mon, 10 Oct 2016 20:56:35 +0200
Subject: wiki is gone?
In-Reply-To: <bec861f4-0213-f62d-eac1-4bc0c1b72dd8@opencsw.org>
References: <be1d9f6d3c5f.57fbb21f@contac-dt.de>
	<CABY0g1WkKR9NzgxidA0oOidJTMhQV9u0GH2294yCcoyB-Zgvmg@mail.gmail.com>
	<bec861f4-0213-f62d-eac1-4bc0c1b72dd8@opencsw.org>
Message-ID: <5dc6d5e9-4419-0041-c34b-2e7090909e99@opencsw.org>

Am 10.10.2016 um 19:15 schrieb ?hsan Do?an:

>>> 503 Service Unavailable
>>>
>>> Failed to resolve the name of server wiki.opencsw.org
>>
>> There seems to be no A record for that, however this works:
>> http://opencsw.wikidot.com/
> 
> wiki.opencsw.org is a CNAME to www.wikidot.org. The problem is, that
> www.wikidot.org doesn't resolv any more.
> 
> I've changed the the CNAME now opencsw.wikidot.org. Hope that helps.

Looks like, changing the DNS entry fixed it.




-Ihsan

-- 
ihsan at dogan.ch        http://blog.dogan.ch/

From bonivart at opencsw.org  Mon Oct 10 21:02:28 2016
From: bonivart at opencsw.org (Peter Bonivart)
Date: Mon, 10 Oct 2016 21:02:28 +0200
Subject: wiki is gone?
In-Reply-To: <5dc6d5e9-4419-0041-c34b-2e7090909e99@opencsw.org>
References: <be1d9f6d3c5f.57fbb21f@contac-dt.de>
	<CABY0g1WkKR9NzgxidA0oOidJTMhQV9u0GH2294yCcoyB-Zgvmg@mail.gmail.com>
	<bec861f4-0213-f62d-eac1-4bc0c1b72dd8@opencsw.org>
	<5dc6d5e9-4419-0041-c34b-2e7090909e99@opencsw.org>
Message-ID: <CABY0g1U=JcbMueSibcuj6wh0YUD3Bd8unLovtTHRaVU_4mvEHQ@mail.gmail.com>

On Mon, Oct 10, 2016 at 8:56 PM, ?hsan Do?an <ihsan at opencsw.org> wrote:
> Am 10.10.2016 um 19:15 schrieb ?hsan Do?an:
>
>>>> 503 Service Unavailable
>>>>
>>>> Failed to resolve the name of server wiki.opencsw.org
>>>
>>> There seems to be no A record for that, however this works:
>>> http://opencsw.wikidot.com/
>>
>> wiki.opencsw.org is a CNAME to www.wikidot.org. The problem is, that
>> www.wikidot.org doesn't resolv any more.
>>
>> I've changed the the CNAME now opencsw.wikidot.org. Hope that helps.
>
> Looks like, changing the DNS entry fixed it.

Looks like the main web site is now a .com so opencsw.wikidot.com also works.

From cgrzemba at opencsw.org  Tue Oct 11 16:26:59 2016
From: cgrzemba at opencsw.org (cgrzemba at opencsw.org)
Date: Tue, 11 Oct 2016 16:26:59 +0200
Subject: PYPI_MIRROR
In-Reply-To: <2B115930-3C3D-40D5-A38A-B83B057C5AEF@opencsw.org>
References: <bf2d9b1351f0.57fb75f8@contac-dt.de>
	<2B115930-3C3D-40D5-A38A-B83B057C5AEF@opencsw.org>
Message-ID: <bf2d9464674d.57fd12d3@contac-dt.de>

I would commit my mercurial repo stuff too (HG_REPO).?

On 11.10.16 09:03, Dagobert Michelsen  <dam at opencsw.org> wrote: 
> 
> 
> 
> 
> 
> 
> Hi Carsten,
> 
> 
> 
> 
> > 
> > Am 10.10.2016 um 11:05 schrieb cgrzemba at opencsw.org:
> > 
> > 
> > Hi,
> > 
> > related to https://bitbucket.org/pypa/pypi/issues/438/backwards-compatible-un-hashed-package
> > 
> > 
> 
> 
> Hahaha, what a thread! :-) Sure, please go ahead.
> 
> 
> 
> Best regards
> 
>  ? Dago
> 
> 
> > 
> > I guess we should use for PYPI_MIRROR pypi.io(http://pypi.io):
> > 
> > --- gar.conf.mk (revision 25941)
> > +++ gar.conf.mk (working copy)
> > @@ -935,7 +935,7 @@
> > ?# Python Package Index
> > ?PYPI_PROJECT ?= $(NAME)
> > ?PYPI_SUBDIR = $(shell echo $(PYPI_PROJECT) | cut -c 1)
> > -PYPI_MIRROR = http://pypi.python.org/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/
> > +PYPI_MIRROR = http://pypi.io/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/
> > ?
> > ?# Package dir
> > ?GARPACKAGE = $(shell basename $(CURDIR))
> > 
> > 
> > 
> > 
> 
> 
> 
> 
> 
> --  
> "You don't become great by trying to be great, you become great by wanting to do something, 
> and then doing it so hard that you become great in the process." - xkcd #896 
> 
> 
> 
> 
>  
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161011/be59f533/attachment-0001.html>

From dam at opencsw.org  Wed Oct 12 02:07:21 2016
From: dam at opencsw.org (Dagobert Michelsen)
Date: Wed, 12 Oct 2016 02:07:21 +0200
Subject: PYPI_MIRROR
In-Reply-To: <bf2d9464674d.57fd12d3@contac-dt.de>
References: <bf2d9b1351f0.57fb75f8@contac-dt.de>
	<2B115930-3C3D-40D5-A38A-B83B057C5AEF@opencsw.org>
	<bf2d9464674d.57fd12d3@contac-dt.de>
Message-ID: <4C991F95-EFC9-418E-823D-199EA90388ED@opencsw.org>

Hi Carsten,

> Am 11.10.2016 um 16:26 schrieb cgrzemba at opencsw.org:
> 
> I would commit my mercurial repo stuff too (HG_REPO).?

Definitely!


Best regards

  ? Dago

> 
> On 11.10.16 09:03, Dagobert Michelsen <dam at opencsw.org> wrote:
>> 
>> Hi Carsten,
>> 
>> 
>>> Am 10.10.2016 um 11:05 schrieb cgrzemba at opencsw.org <mailto:cgrzemba at opencsw.org>:
>>> 
>>> Hi,
>>> 
>>> related to https://bitbucket.org/pypa/pypi/issues/438/backwards-compatible-un-hashed-package <https://bitbucket.org/pypa/pypi/issues/438/backwards-compatible-un-hashed-package>
>> 
>> Hahaha, what a thread! :-) Sure, please go ahead.
>> 
>> 
>> Best regards
>> 
>>   ? Dago
>> 
>>> I guess we should use for PYPI_MIRROR pypi.io <http://pypi.io/>:
>>> 
>>> --- gar.conf.mk (revision 25941)
>>> +++ gar.conf.mk (working copy)
>>> @@ -935,7 +935,7 @@
>>>  # Python Package Index
>>>  PYPI_PROJECT ?= $(NAME)
>>>  PYPI_SUBDIR = $(shell echo $(PYPI_PROJECT) | cut -c 1)
>>> -PYPI_MIRROR = http://pypi.python.org/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/ <http://pypi.python.org/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/>
>>> +PYPI_MIRROR = http://pypi.io/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/ <http://pypi.io/packages/source/$(PYPI_SUBDIR)/$(PYPI_PROJECT)/>
>>> 
>>>  # Package dir
>>>  GARPACKAGE = $(shell basename $(CURDIR))
>>> 
>>> 
>> 
>> --
>> "You don't become great by trying to be great, you become great by wanting to do something,
>> and then doing it so hard that you become great in the process." - xkcd #896
>> 

--
"You don't become great by trying to be great, you become great by wanting to do something,
and then doing it so hard that you become great in the process." - xkcd #896

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161012/ffd0df2f/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161012/ffd0df2f/attachment.asc>

From wilbury at opencsw.org  Sun Oct 16 11:31:48 2016
From: wilbury at opencsw.org (wilbury at opencsw.org)
Date: Sun, 16 Oct 2016 11:31:48 +0200
Subject: Infected security page?
Message-ID: <F3E5DE76-AB30-4AB8-B92F-BF5FFC685D9A@opencsw.org>

Folks,

one user on IRC reported that there is some javascript being injected from our security page (https://www.opencsw.org/security/ <https://www.opencsw.org/security/>)

The javascript reads:

<a href="http://www.jolietta.com/ <http://www.jolietta.com/>">jolietta online casino</a></div><script type="text/javascript">document.getElementById("8e4b83".split("").reverse().join("")).style.display = "none"</script>

It?s visible in source code, but not displayed with javascript enabled.

Can someone please take a look? I don?t seem to have access to www (if I should have, just drop me a note.)

thanks

?
Juraj Lutter
wilbury at opencsw.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161016/0aeb0b95/attachment.html>

From dam at opencsw.org  Sun Oct 16 13:34:03 2016
From: dam at opencsw.org (Dagobert Michelsen)
Date: Sun, 16 Oct 2016 13:34:03 +0200
Subject: Infected security page?
In-Reply-To: <F138E332-490E-404C-B140-A7DA87EC0290@opencsw.org>
References: <F3E5DE76-AB30-4AB8-B92F-BF5FFC685D9A@opencsw.org>
	<F138E332-490E-404C-B140-A7DA87EC0290@opencsw.org>
Message-ID: <5A75D079-228F-4C00-ABBA-67ED0504A9F0@opencsw.org>

Hi Juraj,

Am 16.10.2016 um 11:31 schrieb wilbury at opencsw.org:
> one user on IRC reported that there is some javascript being injected from our security page (https://www.opencsw.org/security/)
> 
> The javascript reads:
> 
> <a href="http://www.jolietta.com/">jolietta online casino</a></div><script type="text/javascript">document.getElementById("8e4b83".split("").reverse().join("")).style.display = "none"</script>
> 
> It?s visible in source code, but not displayed with javascript enabled.
> 
> Can someone please take a look? I don?t seem to have access to www (if I should have, just drop me a note.)

I removed the snippet, it looks like it was done by incection of Trygve account:

For now I also demoted all ?old? maintainer accounts in Mantis.


Best regards

  ? Dago

--
"You don't become great by trying to be great, you become great by wanting to do something,
and then doing it so hard that you become great in the process." - xkcd #896

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161016/62028952/attachment.asc>

From dam at opencsw.org  Sun Oct 16 12:33:58 2016
From: dam at opencsw.org (Dagobert Michelsen)
Date: Sun, 16 Oct 2016 12:33:58 +0200
Subject: Infected security page?
In-Reply-To: <F3E5DE76-AB30-4AB8-B92F-BF5FFC685D9A@opencsw.org>
References: <F3E5DE76-AB30-4AB8-B92F-BF5FFC685D9A@opencsw.org>
Message-ID: <F138E332-490E-404C-B140-A7DA87EC0290@opencsw.org>

Hi Juraj,

Am 16.10.2016 um 11:31 schrieb wilbury at opencsw.org:
> one user on IRC reported that there is some javascript being injected from our security page (https://www.opencsw.org/security/)
> 
> The javascript reads:
> 
> <a href="http://www.jolietta.com/">jolietta online casino</a></div><script type="text/javascript">document.getElementById("8e4b83".split("").reverse().join("")).style.display = "none"</script>
> 
> It?s visible in source code, but not displayed with javascript enabled.
> 
> Can someone please take a look? I don?t seem to have access to www (if I should have, just drop me a note.)

I removed the snippet, it looks like it was done by incection of Trygve account:



For now I also demoted all ?old? maintainer accounts in Mantis.


Best regards

  ? Dago

--
"You don't become great by trying to be great, you become great by wanting to do something,
and then doing it so hard that you become great in the process." - xkcd #896

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161016/ef80ae6e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedGraphic-1.tiff
Type: image/tiff
Size: 600734 bytes
Desc: not available
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161016/ef80ae6e/attachment-0001.tiff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161016/ef80ae6e/attachment-0001.asc>

From ihsan at opencsw.org  Sun Oct 16 19:41:17 2016
From: ihsan at opencsw.org (=?UTF-8?B?xLBoc2FuwqBEb8SfYW4=?=)
Date: Sun, 16 Oct 2016 19:41:17 +0200
Subject: Infected security page?
In-Reply-To: <5A75D079-228F-4C00-ABBA-67ED0504A9F0@opencsw.org>
References: <F3E5DE76-AB30-4AB8-B92F-BF5FFC685D9A@opencsw.org>
	<F138E332-490E-404C-B140-A7DA87EC0290@opencsw.org>
	<5A75D079-228F-4C00-ABBA-67ED0504A9F0@opencsw.org>
Message-ID: <57f26ba7-46d5-cd7e-4efb-86674f9770ad@opencsw.org>

Am 16.10.2016 um 13:34 schrieb Dagobert Michelsen:

>> one user on IRC reported that there is some javascript being injected from our security page (https://www.opencsw.org/security/)
>>
>> The javascript reads:
>>
>> <a href="http://www.jolietta.com/">jolietta online casino</a></div><script type="text/javascript">document.getElementById("8e4b83".split("").reverse().join("")).style.display = "none"</script>
>>
>> It?s visible in source code, but not displayed with javascript enabled.
>>
>> Can someone please take a look? I don?t seem to have access to www (if I should have, just drop me a note.)
> 
> I removed the snippet, it looks like it was done by incection of Trygve account:
> 
> For now I also demoted all ?old? maintainer accounts in Mantis.

Dago & Juraj: Thanks for spotting and fixing the issue.

Probably we should update once our Wordpress installation. It's already
running for years without maintenance.



Ihsan


-- 
ihsan at dogan.ch        http://blog.dogan.ch/

From dam at opencsw.org  Mon Oct 17 09:26:37 2016
From: dam at opencsw.org (Dagobert Michelsen)
Date: Mon, 17 Oct 2016 09:26:37 +0200
Subject: Rebooting the farm
Message-ID: <DF7168D5-C45D-4971-B7FE-61FAC0F09371@opencsw.org>

Hi folks,

I need to reboot the farm, it will be available again later today.


Sorry for the inconvenience

  ? Dago

--
"You don't become great by trying to be great, you become great by wanting to do something,
and then doing it so hard that you become great in the process." - xkcd #896

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161017/ad47b28a/attachment.asc>

From maciej at opencsw.org  Mon Oct 31 11:02:45 2016
From: maciej at opencsw.org (=?UTF-8?Q?Maciej_=28Matchek=29_Blizi=C5=84ski?=)
Date: Mon, 31 Oct 2016 10:02:45 +0000
Subject: Conduct unbecoming of a hacker
In-Reply-To: <CALtRa-7GMSFHbxXFSCMyL0mfnSgs24T=hHogWiC4r0RzE7fm1w@mail.gmail.com>
References: <CALtRa-6TQFZK_m1DMXeJME1bzdV70b0XoL-+KS7tT84xqjftsg@mail.gmail.com>
	<CALtRa-73OQeBqq+W54C23JuNvKHCzVkV1xmGDvsuU6eFvb+8ZA@mail.gmail.com>
	<CALtRa-7TP88mt3SMfwMybTPrJ1rxk_EWmw6WvML=K2+TkX2npA@mail.gmail.com>
	<CALtRa-7_a1usGqbEjz59SzAEXu_NAq2dTr37TOZPgbasFjy4+g@mail.gmail.com>
	<CALtRa-6HTC=tUQyLseFpJxUzY2Ft+xOcScSEZZueLxNwiKj1GA@mail.gmail.com>
	<CALtRa-6FW+-frwDO4-HFcjgUvjyG66PugECKgUYQOjAtdzw6rg@mail.gmail.com>
	<CALtRa-7zCJ1ceRrn6GGGBmVR7XdTxejSO+GMXG=7intn503TQw@mail.gmail.com>
	<CALtRa-5JyAfSKVVyGb-uDrDDTJZbuz6eCkTkE7D-nj4ui2PUYA@mail.gmail.com>
	<CALtRa-6S8TkS0af8w2FOr8mgTseCUAR12+NaDEh459Td9L1zpg@mail.gmail.com>
	<CALtRa-5K+mkkAPQ=6GK_sQEiBhADWN5WKKuhReuCQEOx_e-s=w@mail.gmail.com>
	<CALtRa-6hg+LKru0R225bZ+E90Ko2LJDyGLripq0APHyq=Bdq7g@mail.gmail.com>
	<CALtRa-6ogqOA1K9LVCbKBUa4Q6-z4ApmcxHy34r6gArBx7UsKg@mail.gmail.com>
	<CALtRa-73DNem4aknySmJcBiK=0-AO7vE_1kEP8iOSraUpN3JFg@mail.gmail.com>
	<CALtRa-7BSP_rZ8QPfnY5xXAuH0vjXNmpNbwanz1JdCZkAfFRvg@mail.gmail.com>
	<CALtRa-7GMSFHbxXFSCMyL0mfnSgs24T=hHogWiC4r0RzE7fm1w@mail.gmail.com>
Message-ID: <CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>

Hello maintainers!

Long time no see... Here's an article I've just read. I think that we're
doing pretty well in this regard! Still, it's good to be actively conscious
of the issue.

http://sealedabstract.com/rants/conduct-unbecoming-of-a-hacker/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161031/573522c0/attachment.html>

From dam at opencsw.org  Mon Oct 31 13:17:32 2016
From: dam at opencsw.org (Dagobert Michelsen)
Date: Mon, 31 Oct 2016 13:17:32 +0100
Subject: Conduct unbecoming of a hacker
In-Reply-To: <CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>
References: <CALtRa-6TQFZK_m1DMXeJME1bzdV70b0XoL-+KS7tT84xqjftsg@mail.gmail.com>
	<CALtRa-73OQeBqq+W54C23JuNvKHCzVkV1xmGDvsuU6eFvb+8ZA@mail.gmail.com>
	<CALtRa-7TP88mt3SMfwMybTPrJ1rxk_EWmw6WvML=K2+TkX2npA@mail.gmail.com>
	<CALtRa-7_a1usGqbEjz59SzAEXu_NAq2dTr37TOZPgbasFjy4+g@mail.gmail.com>
	<CALtRa-6HTC=tUQyLseFpJxUzY2Ft+xOcScSEZZueLxNwiKj1GA@mail.gmail.com>
	<CALtRa-6FW+-frwDO4-HFcjgUvjyG66PugECKgUYQOjAtdzw6rg@mail.gmail.com>
	<CALtRa-7zCJ1ceRrn6GGGBmVR7XdTxejSO+GMXG=7intn503TQw@mail.gmail.com>
	<CALtRa-5JyAfSKVVyGb-uDrDDTJZbuz6eCkTkE7D-nj4ui2PUYA@mail.gmail.com>
	<CALtRa-6S8TkS0af8w2FOr8mgTseCUAR12+NaDEh459Td9L1zpg@mail.gmail.com>
	<CALtRa-5K+mkkAPQ=6GK_sQEiBhADWN5WKKuhReuCQEOx_e-s=w@mail.gmail.com>
	<CALtRa-6hg+LKru0R225bZ+E90Ko2LJDyGLripq0APHyq=Bdq7g@mail.gmail.com>
	<CALtRa-6ogqOA1K9LVCbKBUa4Q6-z4ApmcxHy34r6gArBx7UsKg@mail.gmail.com>
	<CALtRa-73DNem4aknySmJcBiK=0-AO7vE_1kEP8iOSraUpN3JFg@mail.gmail.com>
	<CALtRa-7BSP_rZ8QPfnY5xXAuH0vjXNmpNbwanz1JdCZkAfFRvg@mail.gmail.com>
	<CALtRa-7GMSFHbxXFSC
	MyL0mfnSgs24T=hHogWiC4r0RzE7fm1w@mail.gmail.com>
	<CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>
Message-ID: <4CC10913-3198-4274-B76D-2C927DF420FC@opencsw.org>

Hi Maciej,

Am 31.10.2016 um 11:02 schrieb Maciej (Matchek) Blizi?ski <maciej at opencsw.org>:
> Long time no see... Here's an article I've just read. I think that we're doing pretty well in this regard! Still, it's good to be actively conscious of the issue.
> 
> http://sealedabstract.com/rants/conduct-unbecoming-of-a-hacker/

Indeed, boy, did I remember these a lot:
  "And if nobody was willing to write the patch, then that was the end of
  the discussion. A problem is not a real problem if nobody is willing to solve it.?


Best regards

  ? Dago



--
"You don't become great by trying to be great, you become great by wanting to do something,
and then doing it so hard that you become great in the process." - xkcd #896

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161031/6fa2c7d5/attachment.asc>

From pfelecan at opencsw.org  Mon Oct 31 15:11:27 2016
From: pfelecan at opencsw.org (Peter FELECAN)
Date: Mon, 31 Oct 2016 15:11:27 +0100
Subject: Conduct unbecoming of a hacker
In-Reply-To: <CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>
	("Maciej (Matchek) =?utf-8?Q?Blizi=C5=84ski=22's?= message of "Mon,
	31 Oct 2016 10:02:45 +0000")
References: <CALtRa-6TQFZK_m1DMXeJME1bzdV70b0XoL-+KS7tT84xqjftsg@mail.gmail.com>
	<CALtRa-73OQeBqq+W54C23JuNvKHCzVkV1xmGDvsuU6eFvb+8ZA@mail.gmail.com>
	<CALtRa-7TP88mt3SMfwMybTPrJ1rxk_EWmw6WvML=K2+TkX2npA@mail.gmail.com>
	<CALtRa-7_a1usGqbEjz59SzAEXu_NAq2dTr37TOZPgbasFjy4+g@mail.gmail.com>
	<CALtRa-6HTC=tUQyLseFpJxUzY2Ft+xOcScSEZZueLxNwiKj1GA@mail.gmail.com>
	<CALtRa-6FW+-frwDO4-HFcjgUvjyG66PugECKgUYQOjAtdzw6rg@mail.gmail.com>
	<CALtRa-7zCJ1ceRrn6GGGBmVR7XdTxejSO+GMXG=7intn503TQw@mail.gmail.com>
	<CALtRa-5JyAfSKVVyGb-uDrDDTJZbuz6eCkTkE7D-nj4ui2PUYA@mail.gmail.com>
	<CALtRa-6S8TkS0af8w2FOr8mgTseCUAR12+NaDEh459Td9L1zpg@mail.gmail.com>
	<CALtRa-5K+mkkAPQ=6GK_sQEiBhADWN5WKKuhReuCQEOx_e-s=w@mail.gmail.com>
	<CALtRa-6hg+LKru0R225bZ+E90Ko2LJDyGLripq0APHyq=Bdq7g@mail.gmail.com>
	<CALtRa-6ogqOA1K9LVCbKBUa4Q6-z4ApmcxHy34r6gArBx7UsKg@mail.gmail.com>
	<CALtRa-73DNem4aknySmJcBiK=0-AO7vE_1kEP8iOSraUpN3JFg@mail.gmail.com>
	<CALtRa-7BSP_rZ8QPfnY5xXAuH0vjXNmpNbwanz1JdCZkAfFRvg@mail.gmail.com>
	<CALtRa-7GMSFHbxXFSCMyL0mfnSgs24T=hHogWiC4r0RzE7fm1w@mail.gmail.com>
	<CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>
Message-ID: <x6oa20k3qo.fsf@opencsw.org>

"Maciej (Matchek) Blizi?ski" <maciej at opencsw.org> writes:

> http://sealedabstract.com/rants/conduct-unbecoming-of-a-hacker/

Reality is where when you stumble on a rock you get hurt... Welcome!

My experience is that *after* succesfully lobbying to get a patch merged I
get criticized by armchair developers.
-- 
Peter

From laurent at opencsw.org  Mon Oct 31 16:54:22 2016
From: laurent at opencsw.org (Laurent Blume)
Date: Mon, 31 Oct 2016 16:54:22 +0100
Subject: Conduct unbecoming of a hacker
In-Reply-To: <CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>
References: <CALtRa-6TQFZK_m1DMXeJME1bzdV70b0XoL-+KS7tT84xqjftsg@mail.gmail.com>
	<CALtRa-7_a1usGqbEjz59SzAEXu_NAq2dTr37TOZPgbasFjy4+g@mail.gmail.com>
	<CALtRa-6HTC=tUQyLseFpJxUzY2Ft+xOcScSEZZueLxNwiKj1GA@mail.gmail.com>
	<CALtRa-6FW+-frwDO4-HFcjgUvjyG66PugECKgUYQOjAtdzw6rg@mail.gmail.com>
	<CALtRa-7zCJ1ceRrn6GGGBmVR7XdTxejSO+GMXG=7intn503TQw@mail.gmail.com>
	<CALtRa-5JyAfSKVVyGb-uDrDDTJZbuz6eCkTkE7D-nj4ui2PUYA@mail.gmail.com>
	<CALtRa-6S8TkS0af8w2FOr8mgTseCUAR12+NaDEh459Td9L1zpg@mail.gmail.com>
	<CALtRa-5K+mkkAPQ=6GK_sQEiBhADWN5WKKuhReuCQEOx_e-s=w@mail.gmail.com>
	<CALtRa-6hg+LKru0R225bZ+E90Ko2LJDyGLripq0APHyq=Bdq7g@mail.gmail.com>
	<CALtRa-6ogqOA1K9LVCbKBUa4Q6-z4ApmcxHy34r6gArBx7UsKg@mail.gmail.com>
	<CALtRa-73DNem4aknySmJcBiK=0-AO7vE_1kEP8iOSraUpN3JFg@mail.gmail.com>
	<CALtRa-7BSP_rZ8QPfnY5xXAuH0vjXNmpNbwanz1JdCZkAfFRvg@mail.gmail.com>
	<CALtRa-7GMSFHbxXFSCMyL0mfnSgs24T=hHogWiC4r0RzE7fm1w@mail.gmail.com>
	<CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>
Message-ID: <57f04c02-0412-b3e4-2392-427067b654b8@opencsw.org>

Le 2016/10/31 11:02 +0100, Maciej (Matchek) Blizi?ski a ?crit:
> Hello maintainers!
> 
> Long time no see... Here's an article I've just read. I think that we're
> doing pretty well in this regard! Still, it's good to be actively
> conscious of the issue.
> 
> http://sealedabstract.com/rants/conduct-unbecoming-of-a-hacker/


Looks like somebody hasn't quite grasped yet that the Internet of today
is used mostly by non-IT consumers, unlike their beloved Internet of the
90's, which was mostly reserved to tech people (the rest was parked in a
special area called AOL).
Is he going to whine about it until he runs out of breath? Is he also
going to whine that those tech types of the 90's built an easy-to-use
Internet that eventually allowed any non-IT consumer to connect to it
like it were an AOL browser?

Free email addresses for everybody doesn't seem like such a smart move
now, hmmm? :)

Laurent

 


From ihsan at opencsw.org  Mon Oct 31 20:37:00 2016
From: ihsan at opencsw.org (=?UTF-8?B?xLBoc2FuwqBEb8SfYW4=?=)
Date: Mon, 31 Oct 2016 20:37:00 +0100
Subject: Conduct unbecoming of a hacker
In-Reply-To: <57f04c02-0412-b3e4-2392-427067b654b8@opencsw.org>
References: <CALtRa-6TQFZK_m1DMXeJME1bzdV70b0XoL-+KS7tT84xqjftsg@mail.gmail.com>
	<CALtRa-6HTC=tUQyLseFpJxUzY2Ft+xOcScSEZZueLxNwiKj1GA@mail.gmail.com>
	<CALtRa-6FW+-frwDO4-HFcjgUvjyG66PugECKgUYQOjAtdzw6rg@mail.gmail.com>
	<CALtRa-7zCJ1ceRrn6GGGBmVR7XdTxejSO+GMXG=7intn503TQw@mail.gmail.com>
	<CALtRa-5JyAfSKVVyGb-uDrDDTJZbuz6eCkTkE7D-nj4ui2PUYA@mail.gmail.com>
	<CALtRa-6S8TkS0af8w2FOr8mgTseCUAR12+NaDEh459Td9L1zpg@mail.gmail.com>
	<CALtRa-5K+mkkAPQ=6GK_sQEiBhADWN5WKKuhReuCQEOx_e-s=w@mail.gmail.com>
	<CALtRa-6hg+LKru0R225bZ+E90Ko2LJDyGLripq0APHyq=Bdq7g@mail.gmail.com>
	<CALtRa-6ogqOA1K9LVCbKBUa4Q6-z4ApmcxHy34r6gArBx7UsKg@mail.gmail.com>
	<CALtRa-73DNem4aknySmJcBiK=0-AO7vE_1kEP8iOSraUpN3JFg@mail.gmail.com>
	<CALtRa-7BSP_rZ8QPfnY5xXAuH0vjXNmpNbwanz1JdCZkAfFRvg@mail.gmail.com>
	<CALtRa-7GMSFHbxXFSCMyL0mfnSgs24T=hHogWiC4r0RzE7fm1w@mail.gmail.com>
	<CALtRa-4DwCGmeEFhfiswmW7TX9C2Wqs706d4m6+EaXunfKW3kA@mail.gmail.com>
	<57f04c02-0412-b3e4-2392-427067b654b8@opencsw.org>
Message-ID: <ee9669eb-795c-0883-b136-3a11ee21b3ad@opencsw.org>

Good evening,

Am 31.10.2016 um 16:54 schrieb Laurent Blume:

>> Long time no see... Here's an article I've just read. I think that we're
>> doing pretty well in this regard! Still, it's good to be actively
>> conscious of the issue.
>>
>> http://sealedabstract.com/rants/conduct-unbecoming-of-a-hacker/
> 
> 
> Looks like somebody hasn't quite grasped yet that the Internet of today
> is used mostly by non-IT consumers, unlike their beloved Internet of the
> 90's, which was mostly reserved to tech people (the rest was parked in a
> special area called AOL).
> Is he going to whine about it until he runs out of breath? Is he also
> going to whine that those tech types of the 90's built an easy-to-use
> Internet that eventually allowed any non-IT consumer to connect to it
> like it were an AOL browser?
> 
> Free email addresses for everybody doesn't seem like such a smart move
> now, hmmm? :)

Laurent, I can't agree more. :-)




-Ihsan

-- 
ihsan at dogan.ch        http://blog.dogan.ch/