- Aur-general - lists.archlinux.org

[aur-general] Spam accounts
by Alfredo Ramos 15 Jul '19

15 Jul '19

Hello, I just saw some spam comments in the android-studio package. https://aur.archlinux.org/account/JozephChristophe/comments https://aur.archlinux.org/account/oliversmith1407/comments

1 0

Re: [aur-general] Question about creating AUR package
by Tomasz Gąsior 13 Jul '19

13 Jul '19

I think this links are relevant: - <https://wiki.archlinux.org/index.php/Creating_packages> - <https://wiki.archlinux.org/index.php/AUR_submission_guidelines> --- Tomasz Gąsior https://tomaszgasior.pl W dniu sob, 13 lip 2019 o 17∶56 użytkownik joão marcos pereira bezerra via aur-general <aur-general(a)archlinux.org> napisał: > Hello, i'm new to this mailing list, here because i want to submit a > AUR Package > > It's called "corrupter-bin", an alternative to "corrupter-git" that > avoids installing Go-Lang package (400MB) > > What are the steps? after creating the PKGBUILD what do i do? >

1 0

[aur-general] Question about creating AUR package
by joão marcos pereira bezerra 13 Jul '19

13 Jul '19

Hello, i'm new to this mailing list, here because i want to submit a AUR Package It's called "corrupter-bin", an alternative to "corrupter-git" that avoids installing Go-Lang package (400MB) What are the steps? after creating the PKGBUILD what do i do?

2 1

[aur-general] Spam Account
by Georg Pfahler 12 Jul '19

12 Jul '19

Hi, another Spam Account: https://aur.archlinux.org/account/karishma366/comments -- Georg Pfahler <georgpfahler(a)wachenzell.org>

1 0

[aur-general] Spam report
by Justin Wong 06 Jul '19

06 Jul '19

user: helensten link: https://aur.archlinux.org/packages/aseprite-git#comment-699395 For mod action please. Thanks! - Justin

2 1

[aur-general] Spam account/comments
by Henry-Joseph Audéoud 03 Jul '19

03 Jul '19

Hello, I have some comments in one of my packages (20kly). The three emitter accounts seems clearly spammers: https://aur.archlinux.org/account/gerrykirsten/comments https://aur.archlinux.org/account/robert1833/comments https://aur.archlinux.org/account/sweetzzz/comments -- Henry-Joseph Audéoud ryolait(a)archlinux.org

1 0

[aur-general] Spam account/comments
by Joan Figueras 02 Jul '19

02 Jul '19

Hi, just saw a comment in one of my packages (icecat). The account seems clearly a spammer: https://aur.archlinux.org/account/jennifer247/comments Thanks to take care of. Cheers -- Joan Figueras

2 1

[aur-general] Fwd: [AUR] esp-idf
by Gonçalo Pereira 30 Jun '19

30 Jun '19

Hello, This package is outdated for a month and the maintainer grabbed the package in the beggining of this year and never touched it. I tried contacting him and nothing. Maybe I can maintain this package? (I was the last packager). Let me know what you think. Best Regards, Gonçalo Pereira (G-Pereira) ---------- Forwarded Message ---------- Subject: [AUR] esp-idf Date: Friday, June 14, 2019, 5:59:41 PM WEST From: Gonçalo Pereira <goncalo_pereira(a)outlook.pt> To: a(a)arti-nt.ru Hi, I see your package is outdated for a while. Since I use this package for my day-time job maybe I can help you keep it up-to-date. What I suggest is if you want I could be a co-mantainer. What do you think? Best Regards, Gonçalo Pereira (G-Pereira) -----------------------------------------

2 2

[aur-general] The AUR package "svp" is suspicious
by Hirela 30 Jun '19

30 Jun '19

TL;DR: The AUR package "svp" (https://aur.archlinux.org/packages/svp/) might be injecting suspicious binary patches. Here are the relevant lines from the PKGBUILD version 4.3.0.165: pkgver=4.3.0.165 source=("https://gist.githubusercontent.com/phiresky/1e2cbd30bed4e5978771af232d11afd…") # I am rehosting the binaries # taken from # http://www.svp-team.com/files/svp4-linux-64.tbz2 # at https://gist.github.com/phiresky/1e2cbd30bed4e5978771af232d11afd1 # so they are correctly versioned and old versions still exist sha256sums=('00a025ce7c06660bafbad8cf5d889e9a6f09a9c9c9585dbee2415a8bf0256f53') First of all, I do not agree with him rehosting binary software and would much prefer this PKGBUILD to just download the latest version of svp4-linux-64.tbz2 straight from the official source. Since this is proprietary freeware, the maintainer might not have a license to redistribute binaries, and even if he did, the advantage of "correctly versioned" does not match up to the disadvantage of having to trust the maintainer to not tamper with his rehosted versions. Loose versions are acceptable for all the *-git packages, so it should be acceptable for SVP. I decided to get the binaries from the official source to verify whether his rehosted packages weren't tampered with. The package version of the PKGBUILD (4.3.0.165) matches up with the latest version of SVP according to the official website (https://www.svp-team.com/wiki/Main_Page) I tried downloading the SVP binary from the official source and compare the hashes: $ curl https://www.svp-team.com/files/svp4-linux-64.tbz2 > svp4-linux-64.tbz2 $ sha256sum svp4-linux-64.tbz2 070411ab60d429e03632fa80bb3ded7d5b2c60c2f5b85dff136f65eb83da3bdb svp4-linux-64.tbz2 This hash does not match up with the hash claimed by the PKGBUILD for his rehosted version, which suggests that the rehosted package is not identical to the official one. I don't know whether this is due to incompetence or malice, but it is worrisome, as it may be possible that the maintainer has injected his own patches into the rehosted versions.

3 3

[aur-general] SPAM report, AUR comment
by Rylie James Thomas 29 Jun '19

29 Jun '19

Hi! Just noticed a SPAM comment on the debtap package, it's the user's only comment: - https://aur.archlinux.org/packages/debtap/#comment-693148 - https://aur.archlinux.org/account/jeniferlewis77/comments

3 2

[aur-general] Copyrighted source on https://aur.archlinux.org/
by Jones, Philip 25 Jun '19

25 Jun '19

Hi There is a package hosted on https://aur.archlinux.org/ that is copyrighted and not open source. How do I get it removed? Thanks Philip ----------------- Siemens Industry Software Limited is a limited company registered in England and Wales. Registered number: 3476850. Registered office: Faraday House, Sir William Siemens Square, Frimley, Surrey, GU16 8QD.

10 16

[aur-general] Postman
by Gonçalo Pereira 25 Jun '19

25 Jun '19

Hi all, The package "postman" has been broken for months now although a maintainer has put some effort to fix it. However, postman-bin works perfectly fine. Does it make sense to have this two packages? Let me know what you think. Best Regards, Gonçalo Pereira

2 1

[aur-general] Spammer Accounts
by ali.mousavi＠gmail.com 24 Jun '19

24 Jun '19

Hi, The following users are spamming the AUR comments: - https://aur.archlinux.org/account/dhavalpatel/comments - https://aur.archlinux.org/account/badmanlive/comments - https://aur.archlinux.org/account/badmanlive/comments Regards, Ali Mousavi

5 6

[aur-general] Two spammer accounts/comments
by Ronny Lorenz 21 Jun '19

21 Jun '19

Hi, one of my AUR packages (https://aur.archlinux.org/packages/mlapack/) has two obvious spammer comments, one from https://aur.archlinux.org/account/loritalear and the other from https://aur.archlinux.org/account/Melvinchunter Would the admins please be so kind to manually remove those two comments, possibly together with removing the spammer accounts at the same time ;) Cheers, Ronny -- Dipl.-Inform. Dr. rer. nat. Ronny Lorenz Institute for Theoretical Chemistry University of Vienna Waehringerstrasse 17 1090 - Vienna AUSTRIA web: http://www.tbi.univie.ac.at/ phone: +43-1-4277-52734 fax: +43-1-4277-52793 mail: ronny(a)tbi.univie.ac.at

1 0

[aur-general] Yet another spammer
by Edvinas Valatka 19 Jun '19

19 Jun '19

https://aur.archlinux.org/account/jocker12/comments

1 0

[aur-general] ttf-google-webfonts{,-distilled,-git,-hg} mess
by Jason St. John 19 Jun '19

19 Jun '19

I am the current maintainer of the AUR package ttf-google-webfonts-hg[4], and I'm bothered by the mess of various packages there are for Google's Web Fonts project. It's not at all KISS in its current state. There are currently four different AUR packages[1][2][3][4] that essentially supply the same files, and all four packages conflict with each other. Around August of 2012, the package named ttf-google-webfonts[1] was orphaned, and user w0ng created a GitHub repository[5] that mirrors the Mercurial repository[6] on Google Code (why?). Then, the new maintainer changed the original ttf-google-webfonts package from a VCS-type package that simply lacked "-hg" in the name to a package that pulls tarballs from w0ng's GitHub repo[5]. As you can see in the comments for ttf-google-webfonts[1], this has caused all sorts of confusion and messages about the package being out-of-date or having invalid checksums. To get around these issues, user epinephrine created the package ttf-google-webfonts-git[3] that clones w0ng's GitHub repo[5] instead of pulling tarballs from it, which significantly reduces the maintenance required on the package. Then, user Gently created a package named ttf-google-webfonts-distilled[2] that pulls a tarball from w0ng's GitHub repo[5] and only installs a small subset of the fonts therein. Shortly after ttf-google-webfonts[1] was changed from being a Mercurial-based package and not liking the direction that the package was taking, I reuploaded the original ttf-google-webfonts package as ttf-google-webfonts-hg[4] for people that simply wanted the old package back that uses the actual Google Web Fonts repository to download the files. To clean up this mess, I propose that ttf-google-webfonts-distilled[2] and ttf-google-webfonts-git[3] be deleted outright, for what should be obvious reasons. I also propose that ttf-google-webfonts[1] be deleted because of how frequently the Web Fonts project is updated and because the project lacks version numbers. If people really feel strongly about keeping that maintenance nightmare, then let them have it, but I really don't see what advantage it provides over the original ttf-google-webfonts-hg[4] other than one less makedepends. I apologize for the huge email, but this situation really is a mess. [1] https://aur.archlinux.org/packages/ttf-google-webfonts/ [2] https://aur.archlinux.org/packages/ttf-google-webfonts-distilled/ [3] https://aur.archlinux.org/packages/ttf-google-webfonts-git/ [4] https://aur.archlinux.org/packages/ttf-google-webfonts-hg/ [5] https://github.com/w0ng/googlefontdirectory [6] https://code.google.com/p/googlefontdirectory/ Jason

14 23

[aur-general] Another spammer
by Edvinas Valatka 18 Jun '19

18 Jun '19

https://aur.archlinux.org/account/rosaleefay

2 1

[aur-general] Another spam account in AUR
by stefan-husmann＠t-online.de 17 Jun '19

17 Jun '19

Hello, are UN ambassadors and hollywood actresses using Arch and comment on AUR? Maybe they do, but this one only spams: https://aur.archlinux.org/account/angelina Please delete and ban. Best Regards Stefan

2 1

[aur-general] Spam account
by stefan-husmann＠t-online.de 16 Jun '19

16 Jun '19

Hello, this account is spamming the AUR with stupid unrelated online game invotations. https://aur.archlinux.org/account/sunny007 ssvv17997(a)gmail.com Please consider deletion and ban Best Regards Stefan

2 1

[aur-general] Account
by Gonçalo Pereira 13 Jun '19

13 Jun '19

Hi, I was wondering if I could get my account unsuspended :) Best Regards, Gonçalo Pereira (G-Pereira)

5 7

[aur-general] Spam user: david34
by Joseph Fox-Rabinovitz 13 Jun '19

13 Jun '19

User david34 posted spam on easyloggingpp package and others. Pretty sure it's a spam account. - Joe

2 1

[aur-general] Spam accounts/comments
by Kr1ss 03 Jun '19

03 Jun '19

Hello, I just noticed some spam comments on the `ariang-allinone` AUR web page, both of which are from quite recent accounts w/o any submitted packages or reasonable comments. Could one of the TU's please have a look at : - https://aur.archlinux.org/packages/ariang-allinone/#comment-693956 - https://aur.archlinux.org/packages/ariang-allinone/#comment-688757 Thank you ! Cheers, Kr1ss -- PGP: 7A19 4E3F 7A8F 867B EA8A 5339 023F 0788 62AC FE50 http://sks-keyservers.net/pks/lookup?op=vindex&search=0x62ACFE50 http://sks-keyservers.net/pks/lookup?op=get&search=0x023F078862ACFE50

2 1

[aur-general] Spam account: pinalshah
by Rafael Fontenelle 27 May '19

27 May '19

Hello, pinalshah [1] sent spam to skypeforlinux-stable-bin [2] comments. Can someone please nuke this account? Thanks in advance. Rafael [1] https://aur.archlinux.org/account/pinalshah/ [2] https://aur.archlinux.org/pkgbase/skypeforlinux-stable-bin/

1 0

[aur-general] SPAM in AUR comment
by rho eat 27 May '19

27 May '19

Hello, I have been receiving spam comment in my aur package <https://aur.archlinux.org/packages/2048-puzzle-bash-git> few month now, which is increasing, and now "Submiting Request" for Deletion, I came here reading post <https://bbs.archlinux.org/viewtopic.php?id=240487> in arch wiki. Regards rhoit

3 4

Re: [aur-general] aur-general Digest, Vol 175, Issue 21
by Aniket Pradhan 24 May '19

24 May '19

Hello Jagan > I would drop the qt4 package or at least make a separate package. Qt4 > packages have currently been switched to Qt5 snapshots or being dropped > in the official repositories so Qt4 is not even installable without > compiling it from the AUR. I agree that the Qt4 packages are shifting to Qt5 packages, but dropping the Qt4 package directly would be an overkill (I guess there would be someone out there, who prefers Qt4, and would like to have an adwaita-qt4 package), in my opinion. I will definitely separate out both the packages and would drop the Qt4 version when the Qt4 is removed from the AUR. Hello LoneWolf > Anikhet, It's Aniket. :P > > it looks like you should have searched for pkgbase in arch wiki. > Check https://wiki.archlinux.org/index.php/PKGBUILD#pkgbase and follow > the links to understand what kind of package adwaita-qt is. Thanks for the info. > I suggest you split into two separate packages, adwaita-qt5 and > adwaita-qt4 or just adwaita-qt5. > Post a fixed comment on the adwaita-qt aur page that you're separating them. > Wait a few weeks to give people the chance to switch, then submit? a > deletion request for adwaita-qt . I would post a comment for the changes, and submit a deletion request in a couple of weeks. Thanks for the help. :D -- Thanks Regards Aniket Pradhan Byld Member ECE Undergrad | IIIT Delhi http://home.iiitd.edu.in/~aniket17133/

2 2