- Aur-general - lists.archlinux.org

[aur-general] Registering, misspelling email, losing account
by Igor Morozov 25 Aug '15

25 Aug '15

Hello, everyone! So today I decided to contribute to AUR and register an account. I was pretty surprised by the fact that registration form asked me about SSH and PGP key information, but never asked me about password. At the moment, I was impressed. Not for long, though. I was pretty confused by the fact that I will receive a "reset password" email. Soon after that, I realized that it might be some kind of "account confirmation". The common way of confirming emails is using some "confirmation link". Keeping it simple, AUR got rid of such an ugly feature and basically confirms that email is correct by letting the email owner set the password. Great idea, right? Wrong. I would love to call it a great idea. It really follows "keep it simple" principle. Instead of implementing email confirmation, AUR seems to use the simple principle: "If you can set the password, you're definitely the legitimate owner". I would have supported this concept if it wasn't for one thing: I can't access my own account. That's right, I messed up. Instead of typing fastmail.com, I typed fastmai.com. And now there is no way I can access my account. The only option is to send an email to this mailing list describing my problem and hope that somebody will help me out. Basically, that's what I'm doing right now. People tend to make mistakes. I'm not the only one who messed up during registration. And there is no easy way to get our account back. Mailing list is not the best option for account recovery. What if the misspelled email exists and the owner decides to proceed and register? What if the owner decides to do nasty things using my username, full name and email that looks alike? That would affect my reputation in the community since it's difficult to prove that I was not the bad guy. The usual "account activation" prevents this stuff. A lot of web sites do not automatically log user in after account confirmation, so it kind of prevents malicious activity (the bad guy doesn't know the password, you see). I would love to see the community grow as much as I would love to get my account back, so I wrote this message in a way that might start a discussion. I might be wrong about "bad design", though. So I welcome replies that explain why this design is better than others. And by the way, the fact that you can use an unused (not registered) email in account recovery and not get any errors is frustrating. Took me 8 hours to realize that it says "okay", even though the email is not in use. Please, do something about it! -- Best regards, Igor Morozov moroz(a)fastmail.com

7 7

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 24 Aug '15

24 Aug '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 0 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 6 packages missing signoffs * 0 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == Incomplete signoffs for [community] (6 total) == * salt-2015.5.4-1 (any) 0/2 signoffs * spyder-2.3.5.2-2 (any) 0/2 signoffs * virtualbox-modules-5.0.2-2 (i686) 0/1 signoffs * virtualbox-modules-lts-5.0.2-2 (i686) 0/1 signoffs * virtualbox-modules-5.0.2-2 (x86_64) 0/2 signoffs * virtualbox-modules-lts-5.0.2-2 (x86_64) 0/2 signoffs == Top five in signoffs in last 24 hours ==

1 0

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 23 Aug '15

23 Aug '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 1 new package in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 8 packages missing signoffs * 0 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (1 total) == * spyder-2.3.5.2-2 (any) == Incomplete signoffs for [community] (8 total) == * salt-2015.5.4-1 (any) 0/2 signoffs * spyder-2.3.5.2-2 (any) 0/2 signoffs * python-pygit2-0.22.0-10 (i686) 0/1 signoffs * virtualbox-modules-5.0.2-2 (i686) 0/1 signoffs * virtualbox-modules-lts-5.0.2-2 (i686) 0/1 signoffs * python-pygit2-0.22.0-10 (x86_64) 0/2 signoffs * virtualbox-modules-5.0.2-2 (x86_64) 0/2 signoffs * virtualbox-modules-lts-5.0.2-2 (x86_64) 0/2 signoffs == Top five in signoffs in last 24 hours == 1. eworm - 1 signoffs

1 0

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 22 Aug '15

22 Aug '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 2 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 7 packages missing signoffs * 0 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (2 total) == * python-pygit2-0.22.0-10 (i686) * python-pygit2-0.22.0-10 (x86_64) == Incomplete signoffs for [community] (7 total) == * salt-2015.5.4-1 (any) 0/2 signoffs * python-pygit2-0.22.0-10 (i686) 0/1 signoffs * virtualbox-modules-5.0.2-2 (i686) 0/1 signoffs * virtualbox-modules-lts-5.0.2-2 (i686) 0/1 signoffs * python-pygit2-0.22.0-10 (x86_64) 0/2 signoffs * virtualbox-modules-5.0.2-2 (x86_64) 0/2 signoffs * virtualbox-modules-lts-5.0.2-2 (x86_64) 0/2 signoffs == Top five in signoffs in last 24 hours == 1. anatolik - 2 signoffs 2. heftig - 1 signoffs

1 0

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 21 Aug '15

21 Aug '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 4 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 13 packages missing signoffs * 0 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (4 total) == * python-pygit2-0.22.0-9 (i686) * rethinkdb-2.1.1-1 (i686) * python-pygit2-0.22.0-9 (x86_64) * rethinkdb-2.1.1-1 (x86_64) == Incomplete signoffs for [community] (12 total) == * ipython-4.0.0-1 (any) 0/2 signoffs * salt-2015.5.4-1 (any) 0/2 signoffs * python-pygit2-0.22.0-9 (i686) 0/1 signoffs * rethinkdb-2.1.1-1 (i686) 0/1 signoffs * sagemath-6.8-3 (i686) 0/1 signoffs * virtualbox-modules-5.0.2-2 (i686) 0/1 signoffs * virtualbox-modules-lts-5.0.2-2 (i686) 0/1 signoffs * python-pygit2-0.22.0-9 (x86_64) 0/2 signoffs * rethinkdb-2.1.1-1 (x86_64) 0/2 signoffs * sagemath-6.8-3 (x86_64) 0/2 signoffs * virtualbox-modules-5.0.2-2 (x86_64) 0/2 signoffs * virtualbox-modules-lts-5.0.2-2 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (1 total) == * jupyter-4.0.2-4 (any) 0/2 signoffs == Top five in signoffs in last 24 hours == 1. bisson - 2 signoffs

1 0

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 20 Aug '15

20 Aug '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 4 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 9 packages missing signoffs * 0 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (4 total) == * virtualbox-modules-5.0.2-2 (i686) * virtualbox-modules-lts-5.0.2-2 (i686) * virtualbox-modules-5.0.2-2 (x86_64) * virtualbox-modules-lts-5.0.2-2 (x86_64) == Incomplete signoffs for [community] (8 total) == * ipython-4.0.0-1 (any) 0/2 signoffs * salt-2015.5.4-1 (any) 0/2 signoffs * sagemath-6.8-3 (i686) 0/1 signoffs * virtualbox-modules-5.0.2-2 (i686) 0/1 signoffs * virtualbox-modules-lts-5.0.2-2 (i686) 0/1 signoffs * sagemath-6.8-3 (x86_64) 0/2 signoffs * virtualbox-modules-5.0.2-2 (x86_64) 0/2 signoffs * virtualbox-modules-lts-5.0.2-2 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (1 total) == * jupyter-4.0.2-4 (any) 0/2 signoffs == Top five in signoffs in last 24 hours == 1. bisson - 10 signoffs 2. bpiotrowski - 1 signoffs

1 0

[aur-general] About my package snakecode
by francisco dominguez 19 Aug '15

19 Aug '15

Hi to all, i had a package in aur, the pakcage name is snakecode, snakecode is a crypt engine in python very basic, but snakecode was deleted in aur, why? Francisco.

3 2

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 19 Aug '15

19 Aug '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 0 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 11 packages missing signoffs * 0 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == Incomplete signoffs for [community] (10 total) == * ipython-4.0.0-1 (any) 0/2 signoffs * ruby-mustache-1.0.2-1 (any) 0/2 signoffs * ruby-rack-1.6.4-1 (any) 0/2 signoffs * salt-2015.5.4-1 (any) 0/2 signoffs * apitrace-7.0-2 (i686) 0/1 signoffs * open-vm-tools-6:9.10.2-2 (i686) 0/1 signoffs * sagemath-6.8-3 (i686) 0/1 signoffs * apitrace-7.0-2 (x86_64) 0/2 signoffs * open-vm-tools-6:9.10.2-2 (x86_64) 0/2 signoffs * sagemath-6.8-3 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (1 total) == * jupyter-4.0.2-4 (any) 0/2 signoffs == Top five in signoffs in last 24 hours == 1. allan - 7 signoffs 2. foutrelis - 2 signoffs 3. eworm - 1 signoffs

1 0

Re: [aur-general] Archive of AUR3 packages
by Autumn-wind＠web.de 18 Aug '15

18 Aug '15

Someone went along and uploaded every package from the aur-mirror as a separate Repo on Github. https://github.com/aur-archive Not sure if this is helping, or working as a Archive. As there are also repos of packages that got migrated to AUR4 and could, in my opionen, be left aside. With regards Lex

2 1

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 18 Aug '15

18 Aug '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 1 new package in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 11 packages missing signoffs * 0 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (1 total) == * salt-2015.5.4-1 (any) == Incomplete signoffs for [community] (10 total) == * ipython-4.0.0-1 (any) 0/2 signoffs * ruby-mustache-1.0.2-1 (any) 0/2 signoffs * ruby-rack-1.6.4-1 (any) 0/2 signoffs * salt-2015.5.4-1 (any) 0/2 signoffs * apitrace-7.0-2 (i686) 0/1 signoffs * open-vm-tools-6:9.10.2-2 (i686) 0/1 signoffs * sagemath-6.8-3 (i686) 0/1 signoffs * apitrace-7.0-2 (x86_64) 0/2 signoffs * open-vm-tools-6:9.10.2-2 (x86_64) 0/2 signoffs * sagemath-6.8-3 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (1 total) == * jupyter-4.0.2-4 (any) 0/2 signoffs == Top five in signoffs in last 24 hours ==

1 0