Reply
Thread Tools
Posts: 69 | Thanked: 41 times | Joined on Feb 2010 @ Sweden
#1801
Originally Posted by zimon View Post
So you claim having transaction support in a package manager is no improvement ? And also you claim it is no practically any safer having GPG signatures in packages embedded than detached somewhere in the repository and lost by many in transfer? If so, then either you are not honest or you do not really seem to know much anything about C.S.

LSB wouldn't had made a standard about package manager, if it wouldn't be important. And Nokia's case is a very good example how expensive it can become when Linux fragmentation hits like it has in this case.
I give up, you've barely read anything that I've said. A few pages back I explained thoroughly why transactions are a stupid idea, and that deb files also have embedded gpg signatures, the only difference is that it's optional even posted a link on how to do it. And either way, it's not like any of these features would be deal-breaker.

And you keep going on about the LSB which nobody cares about except apparently you.
The LSB was a bunch of suits who all used redhat, how are they relevant to anything?
 
Joseph.skb's Avatar
Posts: 752 | Thanked: 284 times | Joined on Sep 2010 @ Malaysia
#1802
Just adding to the news here...

Nokia gives its CEO RM20mil to offset lost Microsoft pay
WASHINGTON: The executive hired to turn around mobile phone maker Nokia is getting US$6.2mil (RM19.8mil) to make up for the paycheques he lost when he left Microsoft last fall.

Nokia CEO Stephen Elop received a payment of about US$3.2mil (RM10.2mil) last October, according to a filing on Friday with US regulators. He is due to receive another US$3mil (RM9.6mil) this October.

Elop also received about US$710,000 (RM2.27mil) to cover money he had to repay Microsoft and another US$435,000 (RM1.4mil) to reimburse him for legal fees related to his move from Microsoft.

Nokia, based in Finland, set Elop's first-year salary at US$1.46mil (RM4.7mil) and gave him other long-term incentives that included 500,000 stock options.

Elop joined Nokia Corp in September, ending a two-year stint at Microsoft Corp. He announced last month that Nokia's phones will switch to an operating system made by Microsoft in an attempt to revive the phone maker's fortunes.

Although it remains the world's leading mobile phone maker, Nokia has been losing market share to Apple Inc's iPhone and handsets relying on Google Inc's Android operating system. - AP
 

The Following User Says Thank You to Joseph.skb For This Useful Post:
Texrat's Avatar
Posts: 11,700 | Thanked: 10,045 times | Joined on Jun 2006 @ North Texas, USA
#1803
Originally Posted by danramos View Post
Don't worry about it, if it criticizes Nokia, it has a better chance of getting merged or deleted anyway.
I live for the day that this sort of silliness fades.

By that I mean the post, not the allegation.

Oh, and same applies to packaging religion wars.
__________________
Nokia Developer Champion
Different <> Wrong | Listen - Judgment = Progress | People + Trust = Success
My personal site: http://texrat.net
 
Posts: 6 | Thanked: 1 time | Joined on Feb 2011
#1804
Look What Windows Phone Engineering offer ideas on building the next great mobile software developer opportunity: http://www.forum.nokia.com/nokia-microsoft.xhtml
 
Posts: 1,341 | Thanked: 708 times | Joined on Feb 2010
#1805
Originally Posted by Funklord View Post
A few pages back I explained thoroughly why transactions are a stupid idea, and that deb files also have embedded gpg signatures, the only difference is that it's optional even posted a link on how to do it. And either way, it's not like any of these features would be deal-breaker.

And you keep going on about the LSB which nobody cares about except apparently you.
The LSB was a bunch of suits who all used redhat, how are they relevant to anything?
You are in denial-state obviously.

You say that transactions may not be good in mobile device because they take lots of resources? Really? What resources they take so much they cannot be used? You can google around studies done about transactions in databases, how important they are and why they are implemented.

I asked you to show where debsigs is actively routinely used. You didn't find anything because you didn't reply? Google finds lots of examples where deb-security policy clearly fails and where is wide open security hole.

Do you also think LinuxFoundation is not relevant to anything and noone cares about it? Don't you see, the thoughts and attitude like you have are exactly the reason why Linux is so fragmented?
 
Posts: 1,680 | Thanked: 3,685 times | Joined on Jan 2011
#1806
Originally Posted by zimon View Post
You are in denial-state obviously.

You say that transactions may not be good in mobile device because they take lots of resources? Really? What resources they take so much they cannot be used? You can google around studies done about transactions in databases, how important they are and why they are implemented.

I asked you to show where debsigs is actively routinely used. You didn't find anything because you didn't reply? Google finds lots of examples where deb-security policy clearly fails and where is wide open security hole.

Do you also think LinuxFoundation is not relevant to anything and noone cares about it? Don't you see, the thoughts and attitude like you have are exactly the reason why Linux is so fragmented?
wut? Linux is'nt framented, are you on drugs? Linux is right here in one place.
__________________
N900: One of God's own prototypes. A high-powered mutant of some kind never even considered for mass production. Too weird to live, and too rare to die.
 

The Following 3 Users Say Thank You to vi_ For This Useful Post:
Posts: 1,341 | Thanked: 708 times | Joined on Feb 2010
#1807
Originally Posted by vi_ View Post
wut? Linux is'nt framented, are you on drugs? Linux is right here in one place.
Yes "it" is. See Nokia's troubles and delays with Meego. And Android.
 
pelago's Avatar
Posts: 2,121 | Thanked: 1,540 times | Joined on Mar 2008 @ Oxford, UK
#1808
Originally Posted by wmarone View Post
And on mine, Extras was present in the list but disabled.
The maemo.org extras repository was enabled by default in PR 1.1.
 
Posts: 35 | Thanked: 19 times | Joined on Sep 2010 @ France
#1809
Under our new strategy, MeeGo becomes an opensource,
mobile platform project. Our
investment in MeeGo will emphasize longerterm
market exploration of nextgeneration
devices, platforms and user experiences. We plan to ship a MeeGobased
mobile product later
this year. If the market segment that we target with that mobile product does not materialize
as expected, or if we fail to develop nextgeneration
platforms, user experiences and mobile
products, we may incur operating losses and accordingly not realize a return on our
investment in this area.
Their intentions are clear.
We must support MeeGo (with or without nokia)

More, here : http://www.nokia.com/NOKIA_COM_1/Abo...orm20-f_10.pdf
 

The Following 2 Users Say Thank You to slider5 For This Useful Post:
Posts: 69 | Thanked: 41 times | Joined on Feb 2010 @ Sweden
#1810
Originally Posted by zimon View Post
Roll back is not the only property which comes with transactions. Transactions makes package updates error tolerate. For example if battery goes dead middle of updating, or you drop your phone and battery flies off. When the system reboots, it can auto-correct the problem either finish the transaction or cancel it and tell the user that last action was not successful but it didn't broke anything at least. Or if some developer (maemo test and devel repos) forgets something and there is a dependency problem, after installation some other things are not working, user can rollback to the previous state and report the problem to the developer.
If the battery suddenly flies off (with no cap + interrupt-sync) you've got bigger problems with the filesystem to worry about than an update gone bad. You can always re-install the package(s) over the broken files, this process can also be automated.

Originally Posted by zimon View Post
Transactions is good to have in the package management, some people might think it is essential as the system state is pretty much like a critical database. Of course transactions feature can be disabled if there is good reasons, but I doubt in high end mobile phones there would be any. Anyway, rpm is in this way much better than deb, although in other technical ways they are pretty much identical.
You are wrong, file systems are a specific type of database that has worked very well for billions of people over decades. Dragging in concepts from the group-think of what sql is, isn't going to improve anything. The filesystem state is what it is, and the package manager doesn't see the whole picture, therefore "transactions" are a dangerous feature to have with little or no use.
Brain damage like this is what put people off from using RPM in the first place. The amount of times my systems used to get irrepairably damaged when I was using RPM-based systems in the past is horrifying.

Originally Posted by zimon View Post
I mean that in rpm-based systems nowadays it is a common practice to have all rpm-packages GPG-signed. GPG-signatures are embedded in the packages and do not get lost even if you transfer and install packages through ftp-program, wget, usb-stick, bluetooth OBEX transfer and so on and then install the package without alive connection to the original repository.

You can google lots of bad examples where people install un-authenticated deb-packages with dpkg -i. MITM attack on non-authenticated data (stream) is trivial if you have the skills.
That's why you check MD5/SHA1 on packages before installing, if you download them over an untrusted link.

Originally Posted by zimon View Post
The kludged way to embed GPG signatures in the deb-packages is not really used by anyone or anywhere. Show me where debsigs would be actively and routinely used, like embedded GPG signatures are used almost without exceptions for example in Fedora? Also it is important that developers have a standardized way to embed the GPG signature to the package release automatically.
Kludged or not, if we needed it in Maemo, we could simply use it.
Actively used is irrelevant.

Originally Posted by zimon View Post
There are many good things in LSB. Without them Linux would be even more fragmented it already is. And as said, if Debian+Ubuntu would had changed to use rpm-system long ago, Nokia now wouldn't have the problem with its developers implementing rpm support to Ovi and Meego. A good case of fragmentation in Linux which clearly causes troubles.
You talk as if there'd be something wrong with fragmentation, or as someone else would put it, having more than one choice.

Originally Posted by zimon View Post
Debian and Ubuntu (and some other smaller players) haven't just taken the fragmentation problem in Linux seriously enough, and now see, it costs Nokia lots of money and eventually may mean that Meego won't succeed because it was too late compared to Android.
No, more probably a major cause for the disruption in the schedule is the sudden decision to change to Meego, and preparations to change a package manager.
There's a reason distros don't do it, because almost all work needs to be redone.
Maemo was working fine, but needed some more dev-time which it never got, since everybody started to work on Meego.

No more strawmen please.
 
Reply

Tags
bye-nokia, i don't even, just shoot him, just shoot me, let's elope, lockdown, meego?fail, negatron dan, nokia defiled, nokia suicide, sell tulips, step 8 out of 5, the-end?, www.elop.org


 
Forum Jump


All times are GMT. The time now is 17:51.