=== jamesh_ is now known as jamesh | ||
=== persia_ is now known as persia | ||
=== LocutusOfBorg is now known as LocutusOfBorg1 | ||
=== LocutusOfBorg1 is now known as LocutusOfBorg | ||
=== LocutusOfBorg is now known as LocutusOfBorg1 | ||
=== mattgrif_ is now known as mattgriffin | ||
thegrreat | Helo guys | 15:17 |
---|---|---|
thegrreat | Hello * | 15:17 |
thegrreat | test | 15:20 |
thegrreat | SO what's going on ? | 15:20 |
KaZeR | hi there | 16:35 |
KaZeR | can someone please help me with my translation-upload-from-script-returns-an-error-500 issue ? | 16:37 |
dobey | KaZeR: do you get the same result if you try to use the same page and form, directly within the browser? | 16:43 |
KaZeR | dobey: no from the browser it works | 16:43 |
dobey | that's firefox? | 16:45 |
KaZeR | or chrome | 16:45 |
dobey | KaZeR: tried pointing the script at the firefox cookies.sqlite? i'm betting the cookie inside the cookies.sqlite you're using is probably expired. it probably shouldn't give a 500 in that case, but that may be the problem | 16:46 |
KaZeR | interesting. let me double check | 16:46 |
dobey | KaZeR: was that the issue? | 16:55 |
KaZeR | dobey: unfortunately, no : 2015-04-07 10:08:20,379 ERROR Template upload failed (error 500, URL https://translations.launchpad.net/navit/trunk/+pots/navit/+upload) | 17:06 |
dobey | hmm | 17:06 |
dobey | well, worth a guess anyway :) | 17:07 |
KaZeR | yep definitely | 17:07 |
KaZeR | thanks | 17:07 |
olly | is there a reason why the links in emails for translation downloads use http://launchpadlibrarian.net/ ? https://launchpadlibrarian.net/ seems to work, and there's potential for an attacker to substitute translations with deliberate C format string vulnerabilities | 21:49 |
Logan | olly: what does that have to do with the secure connection? | 23:03 |
Logan | although I agree that the links should be HTTPS | 23:03 |
wgrant | Those links are actually unsecured because people complained in like 2007 that HTTPS was slow. | 23:04 |
olly | well, if it's http, it's not hard to intercept the connection in many situations | 23:04 |
wgrant | olly: Feel free to file a bug about that. | 23:04 |
wgrant | We're less likely to get backlash for security now. | 23:05 |
olly | i think the world has changed in those 8 years | 23:05 |
olly | wgrant: what against? "launchpad itself"? | 23:05 |
wgrant | olly: Yep, https://launchpad.net/launchpad/+filebug | 23:05 |
wgrant | It wasn't too many years ago that everyone was saying HTTPS for even the webapp was excessive :/ | 23:05 |
teward | wgrant: couldn't it be forced webserver side to push the HTTP to HTTPS automatically? | 23:06 |
wgrant | teward: There's no point doing that at all. | 23:06 |
olly | anyone intercepting the http connection could redirect it instead | 23:06 |
wgrant | The attacker can just MITM the HTTP connection and remove the redirect. | 23:06 |
teward | wgrant: true, but it's one option :P | 23:06 |
teward | (disabling HTTP also works, and requiring HTTPS but there'll be complainers there too) | 23:07 |
olly | or redirect it to https://1aunchpad1ibrarian.net/ | 23:07 |
teward | (this is one of the catch-22s in website operations) | 23:07 |
wgrant | We're unlikely to redirect the entire domain. | 23:07 |
wgrant | Bust most generated links to it are HTTPS nowadays. | 23:07 |
wgrant | Just a few stragglers. | 23:07 |
olly | wgrant: no, I mean an attacker could redirect it to a "lookalike" URL like that (ones instead of Ls there) | 23:08 |
wgrant | Oh, right, misinterpreted the context. | 23:09 |
olly | BTW, is there a reason why it emails a link rather than just allowing you to download from launchpad? | 23:10 |
wgrant | olly: It takes some time to export all of the files, so it needs to be asynchronous. So it needs to generate an email, so that email might as well contain the link. | 23:12 |
upsideout | is there a api or something that I caqn use to tie back to wannna build ? | 23:47 |
upsideout | thanks for your time | 23:47 |
upsideout | some way of filling my local wanna build server from launchpad | 23:48 |
upsideout | in the postgre data base ? | 23:48 |
upsideout | wgrant, ping | 23:49 |
wgrant | upsideout: Can you explain your situation more fully? | 23:49 |
upsideout | when you are free . I will lurk | 23:49 |
upsideout | wow | 23:50 |
upsideout | awesome | 23:50 |
upsideout | so I have a auto build network | 23:50 |
upsideout | debian style | 23:50 |
upsideout | I want to fill my wanna build data base some how from launcpad | 23:50 |
upsideout | from a ppa and what not so that I do not need to use docker or LXC to make ppa work on system (testing) | 23:51 |
upsideout | wgrant, you do hangouts ? | 23:51 |
upsideout | wgrant, give me ten minutes and I will make a google drive drawing and share | 23:52 |
wgrant | upsideout: Why do you need to do these builds outside Launchpad? | 23:52 |
wgrant | upsideout: But you could fill the wanna-build database from the PPA's Sources files, surely. | 23:52 |
exobuzz | I have a deb on launchpad that won't delete. I deleted it a few months ago, but it still is there. Nothing is referencing it as I can see, but it wont get remove (it doesn't show up in the launchpad gui) | 23:57 |
exobuzz | this is the archive http://ppa.launchpad.net/jools/emgd-xorg1.9/ubuntu/pool/main/libe/libegl1-mesa/libegl1-mesa_10.1.3-0ubuntu0.3_all.deb | 23:57 |
upsideout | wgrant, http://i.imgur.com/wjburrm.png | 23:58 |
upsideout | wgrant, like into the postgre of wanna build somehow from launch pad | 23:59 |
exobuzz | Is there anything I can do to remove this file, or is there anything anyone can do to help ? | 23:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!