[Sugar-devel] [RELEASE] Jukebox v6 released

[Jonas Smedegaard]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, Dec 19, 2008 at 09:45:25AM +0530, Kushal Das wrote:
>I just moved the repo. Now someone needs to point the sugar-jhbuild to 
>the new repo.
>
>git://git.sugarlabs.org/jukebox/mainline.git

Great!

Looking at the source, it seems to connect to a hardcoded Internet URL 
by default (nice music there, btw :-) ). This might be a problem for 
some deplyments with weak access to Internet, and is considered a 
security issue in Debian: Just opening the activity registers your IP at 
the web server running at that IP.

I suggest setting that URL in some config file (to be easier and more 
obvious for various deplyments to override (for the Debian packaging we 
might add a so-called "debconf question" allowing "Debian Pure Blends" 
and other derivatives to override/suppress it without even repackaging).

Also, if it invokes the URL automatially at startup (I have not yet 
actually played with this activity) then please consider either not 
doing so or instead include and use a (small) tune for that purpose.


  - Jonas

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklLgYUACgkQn7DbMsAkQLjnKgCdGheHckIOTXuQMjGGtkr47sED
h94Ani/sKQ1jHpMiZ+Mbilb2hVIuQyyr
=YAGQ
-----END PGP SIGNATURE-----