/srv/irclogs.ubuntu.com/2015/04/07/#launchpad.txt

=== jamesh_ is now known as jamesh
=== persia_ is now known as persia
=== LocutusOfBorg is now known as LocutusOfBorg1
=== LocutusOfBorg1 is now known as LocutusOfBorg
=== LocutusOfBorg is now known as LocutusOfBorg1
=== mattgrif_ is now known as mattgriffin
thegrreatHelo guys15:17
thegrreatHello *15:17
thegrreattest15:20
thegrreatSO what's going on ?15:20
KaZeRhi there16:35
KaZeRcan someone please help me with my translation-upload-from-script-returns-an-error-500 issue ?16:37
dobeyKaZeR: do you get the same result if you try to use the same page and form, directly within the browser?16:43
KaZeRdobey: no from the browser it works16:43
dobeythat's firefox?16:45
KaZeRor chrome16:45
dobeyKaZeR: tried pointing the script at the firefox cookies.sqlite? i'm betting the cookie inside the cookies.sqlite you're using is probably expired. it probably shouldn't give a 500 in that case, but that may be the problem16:46
KaZeRinteresting. let me double check16:46
dobeyKaZeR: was that the issue?16:55
KaZeRdobey: unfortunately, no : 2015-04-07 10:08:20,379 ERROR Template upload failed (error 500, URL https://translations.launchpad.net/navit/trunk/+pots/navit/+upload)17:06
dobeyhmm17:06
dobeywell, worth a guess anyway :)17:07
KaZeRyep definitely17:07
KaZeRthanks17:07
ollyis there a reason why the links in emails for translation downloads use http://launchpadlibrarian.net/ ?  https://launchpadlibrarian.net/ seems to work, and there's potential for an attacker to substitute translations with deliberate C format string vulnerabilities21:49
Loganolly: what does that have to do with the secure connection?23:03
Loganalthough I agree that the links should be HTTPS23:03
wgrantThose links are actually unsecured because people complained in like 2007 that HTTPS was slow.23:04
ollywell, if it's http, it's not hard to intercept the connection in many situations23:04
wgrantolly: Feel free to file a bug about that.23:04
wgrantWe're less likely to get backlash for security now.23:05
ollyi think the world has changed in those 8 years23:05
ollywgrant: what against?  "launchpad itself"?23:05
wgrantolly: Yep, https://launchpad.net/launchpad/+filebug23:05
wgrantIt wasn't too many years ago that everyone was saying HTTPS for even the webapp was excessive :/23:05
tewardwgrant: couldn't it be forced webserver side to push the HTTP to HTTPS automatically?23:06
wgrantteward: There's no point doing that at all.23:06
ollyanyone intercepting the http connection could redirect it instead23:06
wgrantThe attacker can just MITM the HTTP connection and remove the redirect.23:06
tewardwgrant: true, but it's one option :P23:06
teward(disabling HTTP also works, and requiring HTTPS but there'll be complainers there too)23:07
ollyor redirect it to https://1aunchpad1ibrarian.net/23:07
teward(this is one of the catch-22s in website operations)23:07
wgrantWe're unlikely to redirect the entire domain.23:07
wgrantBust most generated links to it are HTTPS nowadays.23:07
wgrantJust a few stragglers.23:07
ollywgrant: no, I mean an attacker could redirect it to a "lookalike" URL like that (ones instead of Ls there)23:08
wgrantOh, right, misinterpreted the context.23:09
ollyBTW, is there a reason why it emails a link rather than just allowing you to download from launchpad?23:10
wgrantolly: It takes some time to export all of the files, so it needs to be asynchronous. So it needs to generate an email, so that email might as well contain the link.23:12
upsideoutis there a api or something that I caqn use to tie back to wannna build ?23:47
upsideoutthanks for your time23:47
upsideoutsome way of filling my local wanna build server from launchpad23:48
upsideoutin the postgre data base ?23:48
upsideoutwgrant, ping23:49
wgrantupsideout: Can you explain your situation more fully?23:49
upsideoutwhen you are free .  I will lurk23:49
upsideoutwow23:50
upsideoutawesome23:50
upsideoutso I have a auto build network23:50
upsideoutdebian style23:50
upsideoutI want to fill my wanna build data base some how from launcpad23:50
upsideoutfrom a ppa and what not so that I do not need to use docker or LXC to make ppa work on system (testing)23:51
upsideoutwgrant, you do hangouts ?23:51
upsideoutwgrant, give me ten minutes and I will make a google drive drawing and share23:52
wgrantupsideout: Why do you need to do these builds outside Launchpad?23:52
wgrantupsideout: But you could fill the wanna-build database from the PPA's Sources files, surely.23:52
exobuzzI have a deb on launchpad that won't delete. I deleted it a few months ago, but it still is there. Nothing is referencing it as I can see, but it wont get remove (it doesn't show up in the launchpad gui)23:57
exobuzzthis is the archive http://ppa.launchpad.net/jools/emgd-xorg1.9/ubuntu/pool/main/libe/libegl1-mesa/libegl1-mesa_10.1.3-0ubuntu0.3_all.deb23:57
upsideoutwgrant,  http://i.imgur.com/wjburrm.png23:58
upsideoutwgrant,  like into the postgre of wanna build somehow from launch pad23:59
exobuzzIs there anything I can do to remove this file, or is there anything anyone can do to help ?23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!