[Sugar-devel] Current status of collaboration work

Jonas Smedegaard dr at jones.dk
Sat Dec 26 02:33:27 EST 2015


Quoting James Cameron (2015-12-26 10:07:11)
> On Sat, Dec 26, 2015 at 09:52:56AM +0530, Jonas Smedegaard wrote:
>> telepathy-gabble is where Tubes interface was dropped.
>
> Thanks!
>
> I wasn't sure it was, because Gabble is only used when operating with 
> Jabber/XMPP servers, and we also use Salut for link-local.
>
> So in the scenario where activities are collaborating over Salut, I 
> wonder how their use of Tubes is implemented, if at all.

Right - this issue is tied to Jabber transport!

I occasionally tested collaboration (when demo'ing to friends), but 
typically did so using Salut :-(


>> Who _maintains_ that telepathy-gabble-legacy package [which you use 
>> in Ubuntu-based Sugar]?
>
> Nobody at the moment.
> 
>> I created such package and put it online at http://debian.jones.dk/ 
>> but was strongly adviced against releasing it officially to Debian 
>> (read: step up as maintainer for it) and decided to follow that 
>> advice mainly due to the security implications (the code is big and 
>> contains e.g. TLS code likely to be vulnerable to BEAST and other 
>> recent attacks which I am not skilled to fix).
>
> I'm not aware of any reported vulnerabilities specific to the package.

Uhm, perhaps lack of reports is related to lack of maintainer to report 
it to :-P


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.sugarlabs.org/archive/sugar-devel/attachments/20151226/2f145556/attachment.pgp>


More information about the Sugar-devel mailing list