From owner-freebsd-ports@FreeBSD.ORG Thu Dec 13 10:30:35 2007 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E42AC16A417 for ; Thu, 13 Dec 2007 10:30:34 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from marvin.harmless.hu (marvin.harmless.hu [195.56.55.204]) by mx1.freebsd.org (Postfix) with ESMTP id 894C813C4F3 for ; Thu, 13 Dec 2007 10:30:34 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from localhost (marvin-mail [192.168.0.2]) by marvin.harmless.hu (Postfix) with ESMTP id 8A9777BFF6A; Thu, 13 Dec 2007 11:30:32 +0100 (CET) X-Virus-Scanned: by amavisd-new-2.4.2 (20060627) (Debian) at harmless.hu Received: from marvin.harmless.hu ([192.168.0.2]) by localhost (marvin.harmless.hu [192.168.0.2]) (amavisd-new, port 10024) with ESMTP id h+cRCCfB5W3D; Thu, 13 Dec 2007 11:30:32 +0100 (CET) Received: from marvin.harmless.hu (localhost [127.0.0.1]) by marvin.harmless.hu (Postfix) with ESMTP id 844BD7BFF1F; Thu, 13 Dec 2007 11:30:30 +0100 (CET) Date: Thu, 13 Dec 2007 11:30:30 +0100 From: Gergely CZUCZY To: Tuomo Valkonen Message-ID: <20071213103030.GA54733@harmless.hu> References: <20071212080932.GA30438@soaustin.net> <20071212083658.GA31114@soaustin.net> <47602AC8.7060609@csub.edu> <476030F0.50501@csub.edu> <20071212142045.de0dcc7e.wmoran@potentialtech.com> <20071213095657.GT11310@server.vk2pj.dyndns.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=x-unknown; protocol="application/pgp-signature"; boundary="UugvWAfsgieZRqgk" Content-Disposition: inline In-Reply-To: User-Agent: mutt-ng/devel-r804 (FreeBSD) Cc: freebsd-ports@freebsd.org Subject: Re: Ion3 license violation X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2007 10:30:35 -0000 --UugvWAfsgieZRqgk Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Dec 13, 2007 at 10:27:47AM +0000, Tuomo Valkonen wrote: > On 2007-12-13, Peter Jeremy wrote: > > I'm not sure how me as an end user not bothering to update my > > installed package for several months differs from me as a package > > distributor failing to update a binary distribution to your latest > > release within 28 days, >=20 > As someone who's been using a particular version for some time, you are= =20 > more likely to check for a new version before complaining. New consider > a new _l_user that has just heard of Ion, installing it from a distro that > doesn't keep up-to-date, and running into problems. Aside from lusers=20 > having no idea that the distro doesn't keep up-to-date, and distributes > old broken development snapshots, running into problems is more likely > after a new install than later on. That's what this is about.=20 >=20 > > In general, FreeBSD only distributes third-party packages in binary for= mat. >=20 > Umm.. the ports system is primarily source-based, and you distribute the > sources. False. We distribute the URLs to the sources. Usually the sources are retrieved from the author and its mirrors. Only a few versions are mirrored by the FreeBSD project. > > How will this work if the end user does not have web access or doesn't > > have the resources or desire to compile it? >=20 > I did mention that this does not work for binary packages. >=20 > > This signature was created using a self-signed key and is therefore > > useless as a mechanism to verify the associated package. =20 >=20 > IRL-based PGP signing customs suck [1]. I don't even know anyone IRL > that would have the slightest interest in using encryption. >=20 > [1]: http://www.iki.fi/tuomov/b/archives/2006/06/25/T00_20_11/ >=20 > > way to verify that the person who created that signature is the same > > person who wrote the e-mail I am responding to or that either are > > actually the author of the "official" version of Ion-3. >=20 > That doesn't matter. What matters is that the _same_ key is used, > after you've initially verified the package. >=20 > --=20 > Tuomo >=20 > _______________________________________________ > freebsd-ports@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ports > To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org" Sincerely, Gergely Czuczy mailto: gergely.czuczy@harmless.hu --=20 Weenies test. Geniuses solve problems that arise. --UugvWAfsgieZRqgk Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) owGVVj2PHEUQPdsQMBJCjpCISifBBd6Z3b1Pa+HONjY+Dgw+7DMOLOvUO1Oz096Z 7qG755axHBEROLDILCREQGqJgB8ACQFCSPAHLPlfQERVz87sHkJIrDbYma56Xf3q 1et98uq5lbPnf/v+h3sXHn/19ZlnwSfjC0XlnJqEhTAnUoXDwWAYbm3ubGyEm+HO 9k6yQ9+ti1ubA9ze3hev/HxVK4fKhUd1iSNw+Lnrl7mQ6m2IM2Esut3KpeHFoI27 Jm2prXRSqxFIlUuF3dqREcqmaML3VKwTqSYj+KzSDpOwNFI5Mc4xCG4qOMqqHlzD GIYbPVgfDHZAOBgORus7o82dKx/BhQF9enBU6ULDpyKfaoUKZoagRsEeEAInhcP1 kAEO0aGBD9BgUcM7JT898A+Xdekqm+kCo1gXkaj2Fhh7cLBWgNIObGUQMj2DAkFY EApQJVBZwuTlsXYZUvUTcBqqMhEOoag9glTWiTzHBEoRT8UEIdUGLJ6gETkUREpm IZEpMWIhNbpot2jjPUoirTNyXDnKTYXMT28lYCyVMPUijIjn9VpXBnIKsc7DGMxR WISZdJkkgi5CImrbC/Z21wcUcMWCJSKISJhles3CGInSyvJuXI9xMq5yYYCKt7yF PwplgJMF9ng7EAZ3gwau0ERaLqeY11xMnGE89SkCFM46kDGmHEjse03RZhF8TOux VlYmaAipSTjOjz3jLiMlZMTRg8rSDxQmAZ3CgVa9lm6uWLqGT9HQon0egSUarVpz MEUsicHQ6ZBZ7FFXEzCVUj5ZUcWl0aTGwkbEDFXSwOVcg21OmIkTDlYaaFk0hZES 2g3/c6euV2gJSecJjI2eEt8JaSPXZUHDAlaJksTpbO/fKwNpl2lmqlIWekPYnAyu S3kZGNAqoskSjpo7a6qVHkSMdeUif6rmaKR9BRNULNMeXDeI796+Rul5vVw55xua XJJG3QqW8FQrSOrsblAIF7Wwd4oiijxHpTaO9FZbhwVXQNNPdiQJ35JqYwzHpNSk 4YqFtdiV0wmqCbNRcF3kFiO4i/+IgTu3blhWHv9uo+GOrYiTevklizYwSKlEfdK0 mZdF5TKWK1UgqdZCGqMNbXiTWRCQLkTsIeYBhDBu4FvWqFsPMCYSPK/vk43MpG8L HXumzRRk6uM7T2HheGMhgdEs4hhETHVa0KYVlYfyy5xpsD0KR6CVVA2PHM2UzJGq v9Q24IBISoDF5T2i00C3pS+Ip3Tewrar0UIZR5xg5UQJx744o1GMDZK+ks4sLOZp yCH0bop1wyHLhUyXx93j0FlzPpW3uwLpLlHSFlw40SrThkRhrY6lB5+XEsGSTg9u 3WiUAof7h74oLiAmZ9A0HrYiy7k3vB/xuTXPInVYwVRRD4Sq2ekIgGA8ETNd0Rh2 pNpcTjL2Tp45qtv/mJ8QVWzqkjnseAHeaASZc+Wo35/NZpGcyiiVfcdX1El/3Bcm zuQJ2j7dTNt9+q5v9Y8Gg+P1wfFw2F/wOxP1KRLmrlKS1qhnZM0d3X5t0YmGYbCi aAheyvCXWqMyuvZlToSIgnVTapXMrxM991aU3Cc/FYwiYrcYmflM6EaxqzpNJXUn X+3svHHicKPjhe2ms0LyAqKShpVfNg+2KXt+yGMu/thrhl5XbAGdq5ENrFFv6I5w 0hfkGZKeB+zU0e4bhvP9mf725fH/+1BGSkM8tuRx7FeX50+RNhMo5hdxLv31Om88 P9loKa7PcYVQfkWqVPdPQXKFdJMrW41tTOZF14NlIyB5+h24MaunMsKl4OWCVoPg tlQxKTWve0Gwj2bCV+/Vh1X8sA4Yy+kRebp/HcX+9WX6/1bwEEZZFQQNZXfp1pfs 7aT4CPbpgdrAfw1yIr+7eXzHyLDJeoMvL517eYX/KLb/Ms+f/fPFyrdP/vju93vn fnl8+6Uvnr1+68ajN54Wz1e+eXPlrzP3R09nH77140/PX3tx89Gvh+5v =THOv -----END PGP SIGNATURE----- --UugvWAfsgieZRqgk--