[Sugar-devel] [RELEASE] Jukebox v6 released

[Jonas Smedegaard]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, Dec 20, 2008 at 09:02:44AM +0530, Kushal Das wrote:
>On Fri, Dec 19, 2008 at 4:42 PM, Jonas Smedegaard <dr at jones.dk> wrote:
>>
>> Looking at the source, it seems to connect to a hardcoded Internet 
>> URL by default (nice music there, btw :-) ). This might be a problem 
>> for some deplyments with weak access to Internet, and is considered a 
>> security issue in Debian: Just opening the activity registers your IP 
>> at the web server running at that IP.
>>
>Ah. I will remove that URL, that I wrote long time for testing
>internet radios long time back, will remove that, sorry for the
>trouble.

Ok.

And don't be sorry - you do great work, I just stumbled across this one 
thing that I imagine could cause problems down the road :-)


>> Also, if it invokes the URL automatially at startup (I have not yet 
>> actually played with this activity) then please consider either not 
>> doing so or instead include and use a (small) tune for that purpose.
>If someone runs that python script as simple python script to test
>then only those lines are supposed to execute.

Ah, then it might even not be a problem at all :-)


Keep up the good work!

  - Jonas

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklM4jYACgkQn7DbMsAkQLhHsgCgnDz700bS41+CRgykx0rxHUxS
cH0AmwcjP6rNXHRhhV4KKz2EdGSRryTu
=ULqx
-----END PGP SIGNATURE-----