[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#782074: RFS: ublock/1.1.1+dfsg-1 [ITP] -- general-purpose lightweight ads, malware, trackers blocker



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

ping, if you are still interested, please answer and fix the above :)
(or ask about how to fix it)

cheers,

G.

On Fri, 25 Sep 2015 08:41:58 +0000 (UTC) Gianfranco Costamagna
<costamagnagianfranco@yahoo.it> wrote:
> Hi Matthew,
> 
> it is fine to track the origin, but I would add a -origin suffix, 
> to keep it in sync with upstream name, and to avoid collisions in 
> case somebody else wants to package the fork too.
> 
> Moreover lintian is showing a lot of warnings, can you please fix 
> them?
> 
> sorry, but I lack of time to properly review it right now.
> 
> 
> BTW similar packages (e.g. https-everywhere) didn't create a
> chrome package, for the below reason as you linked in the bug), so
> I might suggest to comment that part, and create a mozilla only
> version.
> 
> 
> It seems to me a security issue to deal with private keys 
> publicly.
> 
> cheers,
> 
> G.
> 
> 
> 
> 
> Il Venerdì 25 Settembre 2015 6:03, Matthew Bekkema 
> <mbekkema97@gmail.com> ha scritto: I packaged uBlock Origin as 
> suggested by Marius.
> 
> Source package: 
> http://mentors.debian.net/debian/pool/main/u/ublock/ublock_1.1.1+dfsg-
1.dsc
>
>
> 
Mentors page: http://mentors.debian.net/package/ublock
> 
> I also enabled the chromium build for this one. debian/uBlock0.pem 
> is a private key which the .crx file is signed with and is
> required in order to keep the same extension ID across rebuilds
> and upgrades. More info about this here: http://crbug.com/420373
> 
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=OhHQ
-----END PGP SIGNATURE-----


Reply to: