From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([209.51.188.92]:48074) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gzCwY-0001ye-6b for guix-patches@gnu.org; Wed, 27 Feb 2019 23:05:12 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gzCwV-0007iN-Rc for guix-patches@gnu.org; Wed, 27 Feb 2019 23:05:10 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:41149) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gzCwQ-0007au-QY for guix-patches@gnu.org; Wed, 27 Feb 2019 23:05:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gzCwQ-00072L-HM for guix-patches@gnu.org; Wed, 27 Feb 2019 23:05:02 -0500 Subject: [bug#34523] Add tetrinet Resent-Message-ID: Date: Thu, 28 Feb 2019 05:03:50 +0100 In-Reply-To: References: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----WGLD5Z5BDJOQTOGHENZKSNA8BEOP4U" Content-Transfer-Encoding: 7bit From: swedebugia Message-ID: <8C712D22-F104-4594-9404-8C2C4DD8B485@riseup.net> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: pkill9@runbox.compkill9 Cc: 34523 <34523@debbugs.gnu.org> ------WGLD5Z5BDJOQTOGHENZKSNA8BEOP4U Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable pkill9@runbox=2Ecom skrev: (27 februari 2019 15:11:20 CET) >The Tetrinet maintainer added an SHA1 file: >http://tetrinet=2Eor=2Ecz/download/tetrinet-0=2E11=2Etar=2Ebz2=2Esha1 > >On Wed, 27 Feb 2019 07:10:46 +0000 (GMT), wrote: > >> > Given that there is no pgp signed tarball or even a checksum on >that page, have you asked the maintainer about this and verified that >you got the code unaltered?=20 >>=20 >> Ok I emailed the current maintainer according to that page asking to >verify that I got the source code unaltered, and to maybe update the >page with that info=2E >>=20 >> On Tue, 26 Feb 2019 21:45:23 +0100, swedebugia > wrote: >>=20 >> > pkill9@runbox=2Ecom skrev: (26 februari 2019 16:20:28 CET) >> > >Hi Swedebugia, >> > > >> > >> having looked it up online I prefer the WP synopsis: >> > >> "TetriNET is a console multiplayer online Tetris game for up to >six >> > >people=2E" >> > >>=20 >> > >> There is a gnome version also=2E We should state clearly that this >is a >> > >> console/text-mode client=2E >> > > >> > >What does 'WP' mean? >> > > >> > >> As an aside I did not find a working server anywhere and the >homepage >> > >of >> > >> the project is dead=2E There is a possibility to host your own >server >> > >with >> > >> jetrix though=2E >> > > >> > >I played Tetrinet with someone over a server, but I can't remember >what >> > >the address was=2E >> > > >> > >You can't access the homepage of the project? I can access >> > >http://tetrinet=2Eor=2Ecz fine=2E Or do you mean it hasn't been upda= ted >in >> > >ages? >> > > >> > >> There could be trademark issues with the name/game also see >> > >> https://en=2Ewikipedia=2Eorg/wiki/The_Tetris_Company >> > > >> > >Regarding the potential trademark issues, both FSF-approved >distros >> > >Parabola and PureOS have Tetrinet in their repositories[1][2], so >I >> > >think it would be acceptable to add it to Guix=2E And if a copyright >> > >claim is made in the future it can always be removed=2E >> > > >> > >[1] Tetrinet in Parabola - >https://www=2Eparabola=2Enu/packages/?q=3Dtetrinet >> > >[2] Tetrinet in PureOS - >> > >https://software=2Epureos=2Enet/search_pkg?term=3Dtetrinet >> > > >> > >Thanks >> > > >> > >On Sat, 23 Feb 2019 07:23:43 +0100, swedebugia > >> > >wrote: >> > > >> > >> On 2019-02-23 10:26, swedebugia wrote: >> > >> > For the sake of making it easy to find when searching >synopsies I >> > >> > suggest you add "game" to the end of yours=2E >> > >> > --=20 >> > >> > Sent from my k-9 mail for Android=2E >> > >>=20 >> > >> having looked it up online I prefer the WP synopsis: >> > >> "TetriNET is a console multiplayer online Tetris game for up to >six >> > >people=2E" >> > >>=20 >> > >> There is a gnome version also=2E We should state clearly that this >is a >> > >> console/text-mode client=2E >> > >>=20 >> > >> As an aside I did not find a working server anywhere and the >homepage >> > >of >> > >> the project is dead=2E There is a possibility to host your own >server >> > >with >> > >> jetrix though=2E >> > >>=20 >> > >> There could be trademark issues with the name/game also see >> > >> https://en=2Ewikipedia=2Eorg/wiki/The_Tetris_Company >> > >>=20 >> > >> --=20 >> > >> Cheers Swedebugia >> >=20 >> > Hi=20 >> > I agree with your remarks >> > WP =3D wikipedia=20 >> >=20 >> > Given that there is no pgp signed tarball or even a checksum on >that page, have you asked the maintainer about this and verified that >you got the code unaltered?=20 >> > --=20 >> > Sent from my k-9 mail for Android=2E Good, did you point out that http is easy to spoof? If they are serious about application and distribution security they reall= y should enable https=2E I had the same issue with another maintainer serving a hash over http=2E I= asked him over email if my hash was correct=2E This is not perfect out of = band but given most email providers post snowden now use starttls and enfor= ce https it is better than nothing=2E Assuming it is tainted is my default stance with http=2E I would rather no= t use it at all and would like a browser that drops it or issue a dire warn= ing when encountered=2E=20 --=20 Sent from my k-9 mail for Android=2E ------WGLD5Z5BDJOQTOGHENZKSNA8BEOP4U Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
pkill9@runbox=2Ecom skr= ev: (27 februari 2019 15:11:20 CET)
The Tetrinet maintainer added an SHA1 file: =
http://tetrinet=2Eor=2Ecz/download/tetrinet-0=2E11=2Etar=2Ebz2=2Esha1
On Wed, 27 Feb 2019 07:10:46 +0000 (GMT), <pkill9@runbox=2Ecom>=
 wrote:

Given that there is no pgp signed tar=
ball or even a checksum on that page,  have you asked the maintainer about =
this and verified that you got the code unaltered? 

Ok =
I emailed the current maintainer according to that page asking to verify th=
at I got the source code unaltered, and to maybe update the page with that =
info=2E

On Tue, 26 Feb 2019 21:45:23 +0100, swedebugia <swedebugi=
a@riseup=2Enet> wrote:

pkill9@runbox=2Ecom skrev: (26 februari 2019 16:20:28 CET)
Hi Swedebugia,

having looked it up online I prefer =
the WP synopsis:
"TetriNET is a console multiplayer online Tetris game f=
or up to six
people=2E"

There is a gnome version also=2E We should state clear=
ly that this is a
console/text-mode client=2E

What d=
oes 'WP' mean?

As a=
n aside I did not find a working server anywhere and the homepage
of
the project i=
s dead=2E There is a possibility to host your own server
wi=
th
jetrix though=2E
=


I played Tetrinet with someone over a server, but I can't =
remember what
the address was=2E

You can't access the homepage of=
 the project? I can access
http://=
tetrinet=2Eor=2Ecz fine=2E Or do you mean it hasn't been updated in
=
ages?

There could b=
e trademark issues with the name/game also see
https://en=2Ewikipedia=2Eorg/wiki/T=
he_Tetris_Company

Regarding the potential trademark=
 issues, both FSF-approved distros
Parabola and PureOS have Tetrinet in =
their repositories[1][2], so I
think it would be acceptable to add it to=
 Guix=2E And if a copyright
claim is made in the future it can always be=
 removed=2E

[1] Tetrinet in Parabola - https://www=2Eparabola=2Enu/packages/?q=
=3Dtetrinet
[2] Tetrinet in PureOS -
https://software=2Epureos=2Enet=
/search_pkg?term=3Dtetrinet

Thanks

On Sat, 23 Feb 2019 07=
:23:43 +0100, swedebugia <swedebugia@riseup=2Enet>
wrote:

<=
blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 1ex 0=2E8ex; bord=
er-left: 1px solid #fcaf3e; padding-left: 1ex;">On 2019-02-23 10:26, swedeb=
ugia wrote:
For the sak=
e of making it easy to find when searching synopsies I
suggest you add "=
game" to the end of yours=2E
-- 
Sent from my k-9 mail for Android=2E=


having looked it up online I prefer the WP synopsis:"TetriNET is a console multiplayer online Tetris game for up to six
people=2E"
<=
br>There is a gnome version also=2E We should state clearly that this is a<=
br>console/text-mode client=2E

As an aside I did not find a working =
server anywhere and the homepage
of
the project is dead=2E There is a possibility =
to host your own server
with
jetrix though=2E

There could be trademark issu=
es with the name/game also see
https://en=2Ewikipedia=2Eorg/wiki/The_Tetris_Compan=
y

-- 
Cheers Swedebugia

Hi <=
br>I agree with your remarks
WP =3D wikipedia 

Given that there i=
s no pgp signed tarball or even a checksum on that page,  have you asked th=
e maintainer about this and verified that you got the code unaltered? 
-=
- 
Sent from my k-9 mail for Android=2E


Good, did you point out tha= t http is easy to spoof?

If they are serious about application and d= istribution security they really should enable https=2E

I had the sa= me issue with another maintainer serving a hash over http=2E I asked him ov= er email if my hash was correct=2E This is not perfect out of band but give= n most email providers post snowden now use starttls and enforce https it i= s better than nothing=2E

Assuming it is tainted is my default stance= with http=2E I would rather not use it at all and would like a browser tha= t drops it or issue a dire warning when encountered=2E
--
Sent from= my k-9 mail for Android=2E
------WGLD5Z5BDJOQTOGHENZKSNA8BEOP4U--