/srv/irclogs.ubuntu.com/2007/11/22/#ubuntu-meeting.txt

=== LongPointyStick is now known as LongPointyPony
MacSlowGreetings everybody!08:23
juliuxhi MacSlow08:24
MacSlowhi juliux08:31
=== doko_ is now known as doko
=== dholbach_ is now known as dholbach
zul@schedule montreal13:11
ubotuSchedule for America/Montreal: 22 Nov 09:00: Desktop Team Development | 23 Nov 07:00: MOTU meeting | 29 Nov 09:00: Desktop Team Development13:11
Hobbsee@now13:20
ubotuCurrent time in Etc/UTC: November 22 2007, 13:20:57 - Next meeting: Desktop Team Development in 39 minutes13:20
=== ubotu changed the topic of #ubuntu-meeting to: Current meeting: Desktop Team Development Calendar: http://fridge.ubuntu.com/event | Logs: https://wiki.ubuntu.com/MeetingLogs/ | 23 Nov 12:00 UTC: MOTU meeting | 29 Nov 14:00 UTC: Desktop Team Development
KeybukGOOD AFTERNOON!13:58
seb128hey hey hey13:59
kwwiihowdy13:59
* Hobbsee waves13:59
Keybuk(we've lost a pitti)14:00
Hobbseeuh oh14:00
* Hobbsee sends out a search party14:00
KeybukApologies from Ted today14:01
kwwiithat is such a pitti :-)14:01
seb128yeah for fixed merges.ubuntu.com index ;-)14:01
Keybuksomething to do with turkey apparently14:01
Riddellhi14:01
kwwiihooray for turkey day14:01
Keybukfirst thing on the agenda14:02
Keybuktoday is spec approval day14:02
KeybukI realise that quite a few of these are blocked on me reviewing them (hi, mvo! :p)14:02
Keybukbut we'll run down the list anyway14:02
KeybukRiddell:14:02
Keybuk  kubuntu-hardy-kde4 ... still drafting14:03
* mvo waves14:03
KeybukI assume that this is pending our current discussion in <-- that window14:03
Keybuk?14:03
RiddellKeybuk: mm, yes, I'll got onto it after the meeting14:03
Keybukand kubuntu-hardy-catchup is approved14:04
Keybukare there any other kubuntu specs that should be goals for hardy?14:04
Riddellonly KDE parts of other specs14:05
Keybukcould you mail me a list of those parts, and who is going to do them14:05
Keybukjust one liners for each is fine14:05
Riddellok14:05
Keybuk  "some-random-spec: boyrabbit has to implement a Qt frontend"14:05
Keybukor something14:05
Keybukok, Ken14:06
Keybukart-team we discussed -- you're going to work on getting that to review today?14:06
kwwiiKeybuk: yes, I've already started...should be done in a bit14:06
HobbseeKeybuk: the one about world domination, of course.14:06
Keybukand hardy-theme and hardy-icon-theme are awaiting the outcome of decision by Mark etc.14:07
kwwiiKeybuk: right, I guess that for now they are as final as we can get without a definite decision14:07
Keybukstill no pitti14:07
kwwiibut they are structured such that we could probalby go ahead with them14:07
Keybukand mvo and I have yet to bash out his spec list14:08
mvoKeybuk: I can try to call him14:08
mvoyeah, my spec list got a bit out of hand14:08
Keybukmvo: please do14:08
KeybukMacSlow: you have gdm-face-browser at review14:09
Keybuk(waiting on me, but I can give you immediate feedback -- still needs the > 100 mockup :p)14:09
seb128new gdm doesn't look good for information14:10
Keybukseb128: how do you mean?14:10
StevenKTBH, I'd prefer to sleep, but I'm here. :-)14:10
seb128Keybuk: no way to select the language or session, no gdmflexiserver, no gdmsetup and SVN moves moderately quickly14:10
mvopitti will be here soon14:10
MacSlowKeybuk, hm14:11
pittihi! I'm terribly sorry14:11
KeybukMacSlow: also you have hardy-desktop-effects to complete drafting of14:11
Keybukand one I snuck in to your list today, so I won't nag about that14:11
seb128hey pitti14:11
Keybukpitti: hey14:11
* pitti mixed it up with 1600, sorry14:12
KeybukStevenK: you've been drafting about-this-computer, and it's now ready for review again?14:12
StevenKKeybuk: Yes.14:12
MacSlowKeybuk, 100 is the threshold were I want to disable the face-browser... for numerous reasons... one is performance on low-end hardware with very little ram... the other is images become too small to be cleanly recognizable... especially on low resolution screens14:12
* mvo hugs pitti14:12
KeybukMacSlow: right, so that's the missing mock-up -- a username box and example flow for it14:12
StevenKKeybuk: Well, I think I've addressed all of your concerns14:13
MacSlowKeybuk, ok14:13
KeybukStevenK: ok, cool; Ted will own that spec, though I appreciate you'll want to help out as your -mobile time permits14:13
Keybuk(but I'm not going to ask for any time, since I've only just had a rant at david for stealing people on my team :p)14:14
StevenKHaha14:14
Keybukmpt: you're the drafter for exit-strategy -- that spec needs a little more tidying up before review, how's that going?14:14
StevenKKeybuk: TBH, I'm perferctly happy owning it, I was planning on doing it outside core hours14:14
MacSlowseb128, I don't really like to have these gdm-setup things exposed directly in the greeter itself14:15
mptKeybuk, I'm finishing off the design right now (it'll be another hour or three), but I don't know who can write the Implementation section14:15
KeybukStevenK: but if it's on my roadmap (which it is), then I can't rely on you being able to have enough free time :-/14:15
Keybukmpt: Ted should be able to help with that14:15
mptok14:16
MacSlowseb128, after all that admin work... and a admin can log in and use the tool from the system menu14:16
StevenKKeybuk: Sure.14:16
Keybukpitti: we discussed yours earlier14:16
pittiyep; any questions from other folks?14:16
Keybukrestricted-manager-rewrite and partition-management are approved14:16
Keybukhardy-reducing-duplication is awaiting cjwatson approval?14:17
pittiright, doko gave his thumbs-up14:17
Keybukpolicykit-integration awaiting comments from kees and cjwatson?14:17
pitticorrect14:17
Keybukok14:17
pittiI was planning on working on this, so I hope I won't get it implemented before approval :-P14:17
Keybuk:-)14:18
Keybukbut it's so much fun when that happens14:18
StevenKHah. A few mobile specs are in danger of that14:18
KeybukI enjoy it when the specification process is subverted14:18
StevenKIn that case, I've just uploaded about-window, enjoy.14:18
* StevenK ducks14:18
Keybukand for the record, on my plate are hardy-hardware-detection which is a spec that involves several pieces from several people across several teams14:18
Keybukso I'll be chasing it14:18
Keybukand I'll also be keeping an eye on prefetch, which is hopefully just a matter of nudging upstream for it and nudging the kernel team14:19
Keybuk(and running lots of tests in vmware to compare with readahead)14:19
Keybukare there any other desktopish specs we should go over?14:19
mptpackaging-tools-usability14:19
mptI completed that in a hurry and perhaps mvo would like to give it a sanity check?14:20
mvothanks for drafting that mpt14:20
mvompt: I looked over it a couple of minutes ago and it looked good, I need to compare it to my notes but IIRC it covers the session pretty well14:20
Keybukmvo: ok, update the status whiteboard once you're happy14:20
KeybukI think that's in my approval queue14:21
mvook14:21
mptI made some arbitrary guesses about stuff that's too big for Hardy14:21
MacSlowWhen can I throw in the "display names with user-photos in the face-browser"-question?14:21
KeybukMacSlow: presently; we'll clear off the spec list, that's a topic on the agenda :)14:22
Keybukok, no other specs ;)14:23
KeybukMacSlow: right, your topic :-)  explain and we'll debate14:23
MacSlowwill I look stupid when I ask for the place to read up on the agenda?14:23
MacSlowah... ok14:23
MacSlowso Kees had the objection that displaying user-names with the users photo in the face-browser is a security-hole14:24
MacSlowhttp://people.ubuntu.com/~mmueller/face-browser-3.png14:24
MacSlowsee that mockup to get an idae14:24
Keybukyou're not actually showing usernames there though?14:24
Keybukyou're showing users names14:24
MacSlowcorrect14:24
MacSlowit's showing the real names...14:24
MacSlowfor two reasons...14:24
MacSlowone is to not expose the actualy login-id of a user14:25
MacSlowthe second is to be more real world like14:25
* pitti likes that better, too14:25
Keybukto me, this seems to alleviate kees' concerns14:25
MacSlowthird is to help with the possibility of two or more people having chosen the same image from the stock image set provided14:26
pittinot hard to guess the usernames then, of course14:26
pitti(OTOH kdm has done this for ages)14:26
Keybukhttp://www.guidebookgallery.org/pics/gui/startupshutdown/login/macosx103-1-1.png14:26
StevenKpitti: Maybe. "Martin Pitt" -> "pitti" isn't an obvious mapping, for example14:26
pittiStevenK: installer defaults to a lower-case variant of the name14:26
StevenKkdm shows both the real name and username14:26
MacSlowwell I think it not necessary easy to guess login-id from a real name... very often login-ids are totally abstract jibberish14:26
MacSlowespecially on larger installations14:27
pittiright (where it matters more, too)14:27
mvoand it does not help with the password (as long its not a joe password)14:27
KeybukI think that not displaying some form of name is a usability problem14:27
pittiabstract jibberish like "MacSlow" for example :-P14:27
Keybukespecially for abstract pictures14:27
MacSlowpitti, but you're right... sometimes it can be easy to map back14:27
kwwiiwe had a long discussion about this same issues years ago at suse when we switched to a face browser, in the end those who it worries can turn it off14:27
pittiMacSlow: I'm not overly concerned about this TBH14:27
MacSlowpitti, right again... I think It's hard to map MacSlow to "Mirco Müller"14:28
Keybukhttp://www.winsupersite.com/images/showcase/winxp_login.jpg14:28
pittimeh, WinXP doesn't even assign passwords by default :)14:28
MacSlowyeah... and MacOS does show real names too14:28
* pitti was shocked when he installed his very fist XP a few days ago (my last install was 3.11, duh)14:28
Keybukpitti: what is the concern with revealing the username?14:28
MacSlowpitti, what... you're kidding?14:28
Keybukwhat extra thing does it actually give the attacker?14:29
pittiKeybuk: one half (the easy one, admittedly) of getting an account14:29
Keybukpitti: but what does that allow them to do?14:29
MacSlowKeybuk, I have no idea... I'm not a network/security person14:29
* mpt is reminded of the idea for a login system that doesn't use login names at all, just two-word passwords14:29
Keybukthey can get that by *clicking on the picture* :)14:29
pittiKeybuk: right, but they can't do that right now in gdm14:29
Keybuksure, so the problem isn't "names visible on the face browser"14:30
Keybukit's actually "face browser"14:30
pittibut as I said, it's only a minor point, and I'm not overly concerned about it14:30
Keybuksince the face browser inherently reduces the security to just a password because you can click on the picture to get the username half entered for you14:30
mptOS X makes it a preference, probably for that reason14:30
Keybukand security-concious can always turn off the face browser14:30
pittiI just remember people squeaking when ssh allowed you to detect the validity of an username14:30
pitti(timing attack)14:30
pittibut that's a different use case class14:31
pittiwith local access like gdm I don't think it's an important problem14:31
Keybukok14:31
Keybukanyone else have any thoughts?14:31
MacSlowSo I take from that that "real names" are fine as a default, with the option available via gdm-setup to disable them14:32
pittiare there some defaults for the faces? like picking the next free picture that's shipped by default?14:32
* ogra has lots of thoughts ... but wont tell Keybuk :P14:32
pittiMacSlow: that will look very friendly14:32
pitti(to avoid all users having the same default pic, which would be confusing)14:32
MacSlowpitti, I'm getting my head together with kwwii and andrean to provide a set of 100 256x256 stock-images for this case14:33
pitti100! wow14:33
StevenKKeybuk: So, can I get paroled? It's 1:30am here... :-)14:33
MacSlowkwwii, said email went out about 30 min. ago in case you're wondering14:33
KeybukStevenK: go to bed :)14:33
pittiMacSlow: I expected something like 5 :)14:33
StevenKKeybuk: Thanks :-)14:33
kwwiinot sure if we can find/make 100 different pics but we need a certain amount to make it look nice14:33
kwwiiwe definitely need to make the process of adding your own pic as easy as possible14:34
mptUsers & Groups should have a "Take My Photo" button14:34
mptif a camera is detected :-)14:34
MacSlowpitti, yes... 100 is currently the threshold value for the face-browser... but I picked that a bit randomly I admit since I've not tested performance of this case on a low-spec GPU (lowest thing I have available is a I915)14:34
kwwiimpt: good idea14:34
ogrampt, shouldnt that be rather "about me" ?14:35
mptogra, I'm looking forward to the day when they're one and the same14:35
ograyeah14:35
Keybukok, we're drifting off the original topic here14:35
MacSlowkwwii, I've added MeMaker and cheese as potential "means" for image-aquisation in addition to the stock image-set14:35
Keybukso appears we have a consensus that displaying the names is fine as long as the security concious can turn it off (even if that means losing the face browser altogether)14:35
ogrampt, that will be after the day where screenlocking, fusa and gdm are one app :)14:35
kwwiiMacSlow: cool14:35
MacSlowkwwii, MeMaker creates abstract (south-park-ish) iamges from SVG graphics... cheese is a webcam-app like PhotoBooth14:36
pittiwill gdm, fusa, and gnome-screensaver be merged to something that provides all three use cases eventually?14:36
* ogra was planning to pull MeMaker into main as game for edubuntu anyway14:36
Keybukmvo: you have the next item - syncs and moms14:36
kwwiiMacSlow: yeah, I've heard of cheese before, never MeMaker though14:36
ograpitti, wouldnt that be cool ?14:36
MacSlowogra, cool be my guest :)14:36
pittiabsolutely14:36
mvoKeybuk: yeah, it got discussed on the mailinglist already a bit14:36
mvoSometimes it take some time for a sync-from-debian request to get14:37
mvo   processed. The relevant package still appears in MoM even when the14:37
mvo   bug is filed and its possible that some work gets duplicated14:37
mvo   when people do not check the bugpage first and look at the open14:37
mvo   merge. Maybe we could teach MoM about requested syncs? Or get14:37
mvo   some limited archive-admin power to do syncs? The more patches we14:37
mvo   forward the more often we will want syncs instead of merges.14:37
* pitti points out that he has a script to sync packages yourself14:37
MacSlowkwwii, ttps://edge.launchpad.net/memaker14:37
pittiwhen handled with care, it should be absolutely ok14:37
mvoit seems like a good option is to teach MoM about pending sync requests14:37
pittihttp://people.ubuntu.com/~pitti/scripts/syncpackage14:37
mvopitti: oh? isn't that something that requires archive-admin power?14:38
pittimy main concerns are:14:38
pitti- we lose the papertrail for bugs14:38
Keybukmvo: is there any easy way to tell?14:38
pitti- we lose peer review14:38
pittimvo: no, it's just a normal upload14:38
Keybukmvo: do you have a url listing sync requests?14:38
Hobbseemvo: only that it signs with your key, rather than the installer key14:38
pittihttps://edge.launchpad.net/~ubuntu-archive/+subscribedbugs?field.searchtext=sync14:38
mvoKeybuk: just the heuristics, open bug with sync and debian + archive-admin is subscribed14:38
pitti^ list14:38
pittimvo: that's in fact how a sync bug needs to look like14:39
pittimvo: you just need archive admin power to use sync-source.py on drescher14:39
pittibut in the end this does nothing else than my script, with just some additional sanity checks14:39
mvoaha, I see.14:39
Keybukhmm14:40
Keybukhow do I turn that into a feeds URL?14:40
pittiso it's not so much a technical issue, more a question of which kind of documentation we want for syncs we did in the past14:40
pittiKeybuk: isn't that a LP feature they are already working on?14:40
mptKeybuk, the answer is "not yet"14:40
Keybukoh14:40
mvomy only concern is duplication of work when people look at MoM output and think that this is a open merge when in facts its already dealt with14:41
Keybukcan probably beautiful soup that table14:41
mptThe eventual answer will be "click the orange button in the URL bar"14:41
seb128mvo: merges have a name next to them14:41
KeybukI'll add it to MoM about the time I fix the most recent fuckage :p14:41
pittimvo: I dont' think that's a big problem, though; if you grab someone else's merge, you should contact him first anyway14:41
mvoseb128: and that name is often e.g. Ian Jackson (so unclaimed by default)14:41
Hobbseempt: \o/14:42
seb128mvo: usually it's good practice to tell to whoever is assigned that you will do it ;-)14:42
pittimvo: good point about that14:42
seb128right14:42
mvoseb128: see above, there are some people where it does matter14:42
pittimvo: so you're going to merge dpkg? *hug*14:42
seb128I've no conflicted yet with anybody14:42
seb128I don't think it happens that often14:42
mvopitti: I did everything else from ian list ...14:42
Keybukok14:42
Keybukdid I miss any other agenda items?14:42
pittimvo: *more hugs*14:43
mvoif everybody thinks its not a issue, I will shut up :)14:43
seb128mvo: well, I don't say it never happens but I don't think we got many conflicts14:43
seb128who here duplicated work on merges this cycle?14:43
Keybukmvo: even if not, it's not that difficult to add14:43
seb128(just curious)14:43
MacSlownot me14:43
Hobbseeseb128: it's more common in universe.14:43
MacSlow:)14:43
KeybukI can make it hide table rows, or have a different table14:43
Hobbseeso universe would appreciate it, at least.14:43
seb128Hobbsee: for universe you reinvented the wheel anyway and have a comment thingy ;-)14:43
mvoKeybuk: maybe just a small comment (just like currently the uploaders) and a differnt color?14:44
seb128but right14:44
mvopossible with link?14:44
seb128having a such feature would be nice14:44
Hobbseeseb128: some of them did, but i tend to prefer mom :P14:44
Keybukmvo: I have mad ajax idea for submitting comments <g>14:44
mvoheh :)14:44
mvoweb 2.0!14:44
seb128web 3!14:44
Hobbseeweb 42!14:45
* MacSlow eyes bleed14:45
pittimine too, I just looked at our dpkg delta14:46
Keybukok14:46
Keybukany other agenda items?14:46
seb128pitti: dpkg is clearly a task for Keybuk ;-)14:46
seb128not an item14:46
pittiI'm sure he'll jump for joy14:46
Keybukhmm? :)14:47
seb128bug I want to point https://wiki.ubuntu.com/UbuntuDevelopment/PatchTaggingGuidelines14:47
seb128from now desktop packages expect proper tagging14:47
seb128and patches must be sent upstream14:47
seb128s/bug/but14:48
Keybukseb128: could you add an example of a patch-with-a-comment to that?14:49
Keybukdo you mean just placing the text above the patch?14:49
Keybuke.g.14:49
KeybukUbuntu: ...14:49
Keybukdiff -r ...14:49
MacSlowseb128, does that include also the work from last cycle?14:49
seb128Keybuk: could you make merges.ubuntu.com/extracted list the debian/ubuntu-applied-patches directory also if there is one?14:49
seb128Keybuk: ok, will do14:49
MacSlowseb128, I know vuntz waits for my cleaned up patches anyway14:50
pittiseb128: maybe we should generally use # Tag:14:50
pittito use the exact same syntax for dpatches14:50
seb128MacSlow: no need to modify everything right now, but tagging patches on the way when you do a merge or an update would be nice14:50
seb128and new patches should be tagged14:50
Keybukseb128: what's in that directory?14:50
pittiKeybuk: it's only used for packages without a patch system; the broken-out patches14:50
seb128Keybuk: a copy of the diff we apply when the package use no patch system14:50
Keybukah, cool14:50
Keybukyes, added to todo14:51
seb128thanks14:51
Keybukso people should14:51
Keybuk * add tags for all new patches14:51
Keybuk * add tags when merging or updating a source package for any existing patches14:51
pitti * submit them upstream along the way14:51
seb128right14:51
Keybukoh, and yes, submit them upstream14:51
Keybukforgot the most important bit :-)14:51
Keybukand to debian, if relevant14:51
* pitti is happy that all our remaining sudo patches except the ~/.sudo-successful tag one were accepted upstream14:52
Keybukwhen is sudo going to use policykit? :p14:52
seb128Keybuk: if we want to make list of patches to forward, etc, would it make sense to do that in patches.ubuntu.com? It's already dealing with the datas14:52
pittijust at the moment when we switch everything to PK :)14:52
pittiKeybuk: pk_0wn_me_priv to allow everything :)14:53
pitti"get me a root shell over dbus", yay14:53
Keybukorg.2600.h4x0r.RootShell ()14:53
Keybukseb128: yeah, if tags are added consistently in patches, then I can extract that information and generate html from it14:54
Keybukwhich is why I asked for an example on the wiki page, so I can make regexp :p14:54
seb128Keybuk: excellent ;-)14:54
Keybukok14:54
Keybukany other business?14:54
MacSlownot from my side14:55
Keybukok, then; end of meeting (with 3 min to go)14:55
* mvo waves14:56
seb128Keybuk: thanks14:56
kwwiithanks everyone14:56
pittithanks everyone14:56
* MacSlow goes back to mockup-drawing14:58
* kwwii goes back to spec'ing14:59
=== ubotu changed the topic of #ubuntu-meeting to: Calendar: http://fridge.ubuntu.com/event | Logs: https://wiki.ubuntu.com/MeetingLogs/ | 23 Nov 12:00 UTC: MOTU meeting | 29 Nov 14:00 UTC: Desktop Team Development
=== asac_ is now known as asac
=== czessi_ is now known as Czessi
=== johnc4511 is now known as johnc4510
=== _czessi is now known as Czessi

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!