Discussion about SPM / Repo (Split from other topic)

[Pickle]

Openness and sharing is essential for Open Source projects. Everyone has the freedom to stay closed, but we are talking about GPLed software here, don't we? Why couldn't we use the freedom of the GPL? Request the source of the released pnds, repnd them and upp them into the repo?


This way the freedom of choice would be available for all.

Some things are not open i.e GPL like the EX frontend, so you couldnt reproduce the same pnd one for one.

 

[mcobit]

[...]

 

[moxie]

This reminds me: Is PNDstore open source? This thread has reminded me that one of the reasons I no longer use Microsoft stuff is that I can't look into their installers and see what gets installed where. I'd motion that anything that will be used as a official package manager needs to be open, or at least that there needs to exist an open alternative.

 

[mcobit]

Isn't it python?


You should just be able to see the source, as it is an interpreted language

 

[Caine]

Yes it is. I've reused some of its code in an XBMC plugin I was writing some time ago.

 

[moxie]

I haven't looked at it, since I don't use it due to lack of wifi. However, I will get it fixed in due time, and so thought I'd ask when I remembered it

 

[clop]

Happiness of opensource world:


https://github.com/Tempel/PNDstore


License: GPLv3


I already look into it few monts ago, nicely written (at my taste ))

 

[milkshake]

ok I have disabled the app for now as it doesnt work, but if and when Streak fixes it he can enable it from his control panal in the repo.

 

[quartercast]

I haven't tried SPM myself (no time right now ), but the screenshots look promising.


Also, I think it's perfectly fine if you want to handle your own repo and files, that's part of an open community: Everybody can do what he wants, no one is forced to use an official or standard based repo.


Though I'd also be very happy if SPM or your repo or both would support the JSON standard - as in that case you could use SPM with EVERY external repo (right now, only yours and the normal repo) and you could use your repo with every JSON-compatible package manager (like Panorama or PNDStore), which would be awesome.


I could very well see SPM replace PNDStore in future OS Releases as well, if it would support JSON


It's up to you, but I think it would rock

I agree with ED. Most of the other posters here are overreacting, in some cases using abusive language. "Go to hell" and "control freak?" Geez, how old are you guys?

 

[Caine]

Yeah well, if you pull those words out of context they sound quite a bit worse than the way foxblock and pickle actually used them.

 

[Pickle]

I agree with ED. Most of the other posters here are overreacting, in some cases using abusive language. "Go to hell" and "control freak?" Geez, how old are you guys?

Knew someone would that as offensive since i used a blunt way of saying it (and you really just picked on name and not how i used it). The point (or disappointment) is that Streak has decided to control how his software is delivered to the user is very awkward. Also the method used makes it possible that any of the software can just disappear. (proven through the facebook takedown).


Its disappointing that myself and probably many others wont bother with anything Streak provides because of the hassle of going through a different system just for his software alone.


Its frustrating cause we have a software distribution system that was created so that its users could control it and add the features they wanted. I think we need one really good app management tool, not multiple solutions that dont do everything right. If the software management tool can not and will not be changed to what you need then by all means create something that will, but I dont see that the effort was made to ask those working on the repo.

 

[EvilDragon]

Well, why I can understand why some want to control where their apps are downloadable (even though you CAN'T do this with GPL apps), there's one thing I just got warned about a thing that I really dislike:

curl -s --data "addition=[$(date +%Y/%m/%d_-_%H:%M)];[$(whoami)];[Starting SPM];[b2.0.0];&press = OK" http://66.7.217.167/~openpand/stats/spmstats.php > /dev/null

That's part of the Synthetic Package Manager. Basically, when a user downloads an app, it sends the time and username (!!!) to the server...


It also sends a message to the server when SPM is being started and when something is being searched, again, including the username.


So StreaK gets a nice statistic about WHO starts SPM WHEN, WHO searches something WHEN and WHO downloads something WHEN.


That would all be fine with me (though it needs to show a warning!), however, the username should REALLY be anonymized!


I hope it's only used for statistical issues - but I really really dislike sending out true usernames for statistical purposes to a server...


Aditionally,


I haven't used SPM, but I hoped it displayed a warning that your username will be transferred to the server!


StreaK: I can understand if you want to create some statistics. But there are better ways to do that.


Create a random number when the program is first started and send this number each time instead of the username.


This way you can see what the same user downloads on your server without knowing the actual username of the Pandora.


And TELL THE USER ABOUT THAT on first start.


The way you did it it classifies as spyware!

[/CODE]

 

[ZXDunny]

curl -s --data "addition=[$(date +%Y/%m/%d_-_%H:%M)];[$(whoami)];[Starting SPM];[b2.0.0];&press = OK" http://66.7.217.167/~openpand/stats/spmstats.php > /dev/null

That's part of the Synthetic Package Manager. Basically, when a user downloads an app, it sends the time and username (!!!) to the server...


I hope it's only used for statistical issues - but I really really dislike sending out true usernames for statistical purposes to a server...

Christ. That just says it all, it really does. I really don't think there's any way at all that I'll ever download Streak's apps again - it's just too risky: Previous unneeded writes to NAND, pointless (and not strictly legal) restriction on download locations and methods, and now spying.


D.

 

[peelie]

hmm this is a bit serious, hope streak responds asap

 

[WizardStan]

Give him a day or so, some people have sleep and stuff. Privacy probably never even occurred to him when he was writing it.

 

[EvilDragon]

Give him a day or so, some people have sleep and stuff. Privacy probably never even occurred to him when he was writing it.

Hopefully, as this could really be misused.


His server saves the IP, so he got username and IP address of units. He could potentially try to attack them over SSH, when they're connected to the Internet.

 

[Caine]

Dammit StreaK, explain yourself please.

 

[Stephane Hockenhull]

Give him a day or so, some people have sleep and stuff. Privacy probably never even occurred to him when he was writing it.

Hopefully, as this could really be misused.


His server saves the IP, so he got username and IP address of units. He could potentially try to attack them over SSH, when they're connected to the Internet.

... really ? :blink:


you use his app to download another one of his apps, why would he need to attack over SSH when he can attack locally right on the machine and run whatever he'd want from within the application.


get the giant wooden horse into the city and then worry about someone seeing thru the gates when they got opened ?

 

[skeezix]

At least StreaK is consistent; it doesn't make sense, no one gets him, but at least he's consistent, and I think he's just having fun. Doesn't worry about the details sometimes, but doesnt' mean any harm. (Note that developers do look at details, so he'll come around


He likes to do things 'difficult', and then he expects to get flamed I think.. he knows its coming. You go stepping on toes, youre going to get people mad. But he goes and steps on toes, goes out of his way to do so.. it seems anyway. But okay, its his choice, he can do that; it just seems odd to go into drama after drama somehow..


It seems like he's trolling... He's sort of awesome actually, since .. its so mindbogglingly weird Nothign wrong with going your own road, just seems an odd route sometimes


Go StreaK.. you're crazy awesome


We're all glad he's doing his thing; at least he's having fun, and presumably some people are enjoying his work too.


jeff

 

[Pickle]

well i guess we know what feature the repo didnt have that he had to have