[Sugar-devel] [RELEASE] Jukebox v6 released
dr at jones.dk
Fri Dec 19 06:12:05 EST 2008
-----BEGIN PGP SIGNED MESSAGE-----
On Fri, Dec 19, 2008 at 09:45:25AM +0530, Kushal Das wrote:
>I just moved the repo. Now someone needs to point the sugar-jhbuild to
>the new repo.
Looking at the source, it seems to connect to a hardcoded Internet URL
by default (nice music there, btw :-) ). This might be a problem for
some deplyments with weak access to Internet, and is considered a
security issue in Debian: Just opening the activity registers your IP at
the web server running at that IP.
I suggest setting that URL in some config file (to be easier and more
obvious for various deplyments to override (for the Debian packaging we
might add a so-called "debconf question" allowing "Debian Pure Blends"
and other derivatives to override/suppress it without even repackaging).
Also, if it invokes the URL automatially at startup (I have not yet
actually played with this activity) then please consider either not
doing so or instead include and use a (small) tune for that purpose.
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
[x] quote me freely [ ] ask before reusing [ ] keep private
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the Sugar-devel