Foxboron

41 ms·

1. 451.▲
   by Foxboron 8y ago

   A signing certificate has been acquired now :) https://twitter.com/EdgeSecurity/status/1073599888158535680
2. 452.▲
   Reproducible Builds Joins the Software Freedom Concervancy(reproducible-builds.org)

   2 points by Foxboron 8y ago|0 comments
3. 453.▲
   by Foxboron 8y ago

   Been using qutebrowser as my daily browser quite happily since summer 2017. I still have chromium as a backup browser in case of wierd webpage/embedded banking apps decides to dislike qutebrowser. Quite happy honestly, and the progress
4. 454.▲
   Why No IPv6?(whynoipv6.com)

   3 points by Foxboron 8y ago|1 comments
5. 455.▲
   by Foxboron 8y ago

   Huh. Think I'll package udptunnel for Arch and fix up the ArchWiki entry with this. Super neat.
6. 456.▲
   by Foxboron 8y ago

   I think the wg0 references should be swapped with `%i` as the config is dependent on the filename with that setup. Neat write up however.
7. 457.▲
   by Foxboron 8y ago

   Added the line to the Arch Wiki entry. Thanks :)
8. 458.▲
   by Foxboron 8y ago

   I assume this is what you want? https://wiki.archlinux.org/index.php/WireGuard#Setup_a_VPN_s...
9. 459.▲
   by Foxboron 8y ago

   I package for Arch so the question is what the author wants in our repositories. Not in AUR.
10. 460.▲
    by Foxboron 8y ago

    Falconindy is not the developer of pacaur.
11. 461.▲
    by Foxboron 8y ago

    There was some more questions about the affected packages on IRC. I posted a mail to the thread with the packages and versions. https://lists.archlinux.org/pipermail/aur-general/2018-July/...
12. 462.▲
    by Foxboron 8y ago

    Depends on what you deem "vetted". Builds from source from a trusted source. Try ask if they can PGP sign their sources. Builds fine. Pushed to the repos. If its an package from core or extra it goes through testing for a few days
13. 463.▲
    by Foxboron 8y ago

    >simple-mtpfs Not maintained (last commit in 2016). So that will be something low on the priority list. >btrfs The dedupe tool looks interesting. Noted on my todo. >closure-compiler Was dropped from the repository. Probably because
14. 464.▲
    by Foxboron 8y ago

    Nothing that I know off. Are you thinking specific to Arch Linux or in general?
15. 465.▲
    by Foxboron 8y ago

    Distributing them as repackaged binaries would be against the terms. I'm unsure what distros ignores the terms and packages them anyway. It is a clear liability for any larger distributions at least.
16. 466.▲
    by Foxboron 8y ago

    What packages would you like to se inn our repositories?
17. 467.▲
    by Foxboron 8y ago

    > The other point to this is how is this sort of compromise best communicated? It's important enough to hit [0] and obviously this news site, the mailinglist[1], but not the frontpage of arch itself. I brought it up partially, and t
18. 468.▲
    by Foxboron 8y ago

    You wouldn't. The only reason why we run it is because we know it. I wouldn't have used Arch on any production things personally.
19. 469.▲
    by Foxboron 8y ago

    Someone was questioning if `libvlc` could be considered dangerous. However the package download our packaged `vlc` packages and just repackages the `/usr/lib/libvlc*` files into a new package.
20. 470.▲
    by Foxboron 8y ago

    All of the Arch Linux infrastructure is run on Arch. Works pretty well.
21. 471.▲
    by Foxboron 8y ago

    I'll assure you Rick has a blue-grayish color while the Arch logo is Navy Blue.
22. 472.▲
    by Foxboron 8y ago

    There was no intentions to claim you where not working towards reproducible builds. I have come across several people that conflate what NixOS offers, and what reproducible builds are. However, great that you have been working towards this!
23. 473.▲
    by Foxboron 8y ago

    Arch Linux is also working on providing tools so our users can download a package, point a script at it and have the package recreated with all the info provided in .BUILDINFO. This includes the source location and a list of packages presen
24. 474.▲
    by Foxboron 8y ago

    It doesn't. NixOS doesn't do reproducible builds, it does reproducible systems. Reproducible builds is essentially about compiling source code to a binary and always get the same checksum Reproducible systems is about always getti
25. 475.▲
    by Foxboron 8y ago

    Mastodon uses ActivityPub. https://en.wikipedia.org/wiki/Mastodon_(software)
26. 476.▲
    by Foxboron 8y ago

    git-daemon i assume. https://git-scm.com/docs/git-daemon
27. 477.▲
    by Foxboron 8y ago

    The correct CVE numbers are CVE 2018-11233 and CVE 2018-11235. The microsoft blog mentions 11234, but thats not the git vulnerability.
28. 478.▲
    by Foxboron 8y ago

    It however confirms that the OpenPGP devs had no knowledge of an embargo, and thus didn't break any embargo. Sebastian Schinzel claimed they had to publish early because the embargo broke.
29. 479.▲
    EFail – Vulnerabilities in end-to-end encryption technologies OpenPGP and S/MIME(efail.de)

    718 points by Foxboron 8y ago|288 comments
30. 480.▲
    by Foxboron 8y ago

    A few things. Open-source projects like Hylang and Arch Linux that super satisfying when you contribute parts like code, packages or projects that supplements the ecosystem. Working as a volunteer on one of the largest dataparties called Th