13:05:29 #startmeeting 13:05:29 Meeting started Wed Dec 23 13:05:29 2015 UTC. The chair is colonelqubit. Plugin info at http://wiki.debian.org/MeetBot. 13:05:29 Useful Commands: #action #agreed #help #info #idea #link #topic. 13:05:34 Sounds good to me 13:06:00 So, rather relaxed meeting here at the end of the annum 13:06:22 UNCONFIRMED bug count is at 606 13:07:06 Nothing huge on the agenda 13:07:27 I've completed the first round of transitioning Whiteboard tags -> Keywords in Bugzilla 13:08:05 Both Open and Closed bugs have been updated, so queries, stats, etc.. should all look correct now 13:08:33 Suggestions or tips on what has been missed are, of course, always appreciated 13:09:07 I've been updating/improving my "NinjaEdit" patches that allow us to make changes to bugs without spamming people via email 13:09:27 Those will be pushed to the main repo soon 13:10:23 The tl;dr is that if you're in the 'ninja_editors' group, your edits will be shunted to a file instead of going out 13:10:54 So any admins can put users (including themselves) into that group (temporarily) 13:11:45 #topic Completed Items 13:12:12 Soo.. anything else completed we should note? 13:12:50 #topic Pending Items 13:13:04 DennisRoczek: poke-ity 13:13:10 püong 13:13:15 still busy 13:13:16 he's here! 13:13:17 pyong yang 13:13:23 no resolved ai 13:13:31 * colonelqubit sighs 13:13:44 DennisRoczek: I *told* you that you had to make us an AI before the end of the year 13:13:53 https://redmine.documentfoundation.org/issues/1656#change-7940 13:13:54 redmine: »Recplace Link Shorteners links in IRC topics« in Infrastructure (Task for Florian Effenberger) [New] 13:13:55 well, maybe aritificial intelligence can wait until 2016 13:14:12 colonelqubit: that's no problem. after tomorrow i should have enough time to resolve them :-D 13:14:14 DennisRoczek: ah, good. I'll takke a peek 13:14:25 DennisRoczek: trying to put humans out of a job? 13:14:42 * colonelqubit . o O (...on the plus side, I bet we could get rid of that UNCONFIRMED pile in a hurry...) 13:14:53 and i told you to clear the unconfirmed count :-D 13:15:27 colonelqubit: what about a bug hunting session during the hackfest @FOSDEM? :) 13:15:42 export $BUGZILLA_UNCONFIRMED=0 13:16:11 deneb_alpha: there is one short before https://wiki.documentfoundation.org/BugHunting_Session_5.1.0_RC2 13:16:13 DennisRoczek: are you happy now? :P 13:16:18 bug hunting or triaging? :) 13:16:28 moreover i will / want to finish my patch for the bugzilla integration. btw: did you see the comment by the mozilla employee on your patchset (to use the limit stuff before sending the request) 13:16:31 unconfirmeds to dev/null 13:16:36 lol 13:16:44 beluga_ triaging 13:16:48 beluga_: yes, I would be more on triaging session 13:17:00 and who is paying me so that i can go to fosdem? :-X 13:17:11 DennisRoczek: email board-discuss 13:17:19 * colonelqubit hands DennisRoczek some monopoly money 13:18:30 Okay, sounds like no more Pending Items on the list 13:18:34 #topic New Items 13:18:45 woooho monopoly money :-) 13:19:24 DennisRoczek: it even has a picture of a walrus on it, so you know it's legit 13:21:23 beluga_: board-discuss is not an option. i only get my money back i spent 13:21:57 * mmeeks struggles to file a bug - I can query them from BZ, just not file them. 13:21:59 is that expected ? =) 13:22:19 * colonelqubit hmms 13:22:40 mmeeks: we do want to slow down the unconfirmed bug increase :-D 13:22:49 mmeeks: is it timing out? 13:22:58 hah =) 13:22:59 beluga_: yes. 13:23:12 Secure Connection Failed 13:23:12 The connection to the server was reset while the page was loading. 13:23:12 The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. 13:23:12 Please contact the website owners to inform them of this problem. 13:23:14 * colonelqubit laughs 13:23:28 (at DennisRoczek's jk) 13:23:37 of course, it could easily be my web connection; /me has plenty of problems but ... 13:23:46 mmeeks: I can file on the test VM. Let me try the Real Thing(tm)) 13:24:08 colonelqubit: and now it filed ... 13:24:18 mmeeks: don't use the intel laptop ;-) 13:24:30 DennisRoczek: no idea what's up there ;-> 13:24:38 mmeeks: maybe it sensed me coming for it... 13:24:47 DennisRoczek: the good news is I can reproduce OpenGL horrors on Intel, 13:25:05 the bad news is - finding out why the exact same trace works fine on AMD, but not Intel is not entirely 'obvious' lets say ;-) 13:25:24 that sounds excitingly complex 13:28:15 off-topic question about unconfirmed reports. I think #tdf96672 (mail merge password) is a security problem. please, could an expert have a look? 13:29:45 tdf#96672 13:29:47 LibreOffice-LibreOffice normal/medium UNCONFIRMED Outgoing mail server password in clear text inside the registrymodifications.xcu file https://bugs.documentfoundation.org/show_bug.cgi?id=96672 13:30:05 ouch (simply because of the ticket name) 13:30:15 * colonelqubit chuckles 13:31:05 * colonelqubit isn't sure that's a security issue, but we can discuss... 13:31:17 (there's no master password for LibreOffice, so...) 13:31:46 Maybe clearer docs that we're going to store the credentials in cleartext 13:32:56 Anything else for New Items? 13:35:15 #topic The End 13:35:26 Okay, thanks all for showing up! 13:36:01 colonelqubit, I'm aware that there isn't a master password but we can handle protected documents. the credentials in the registrymodifications.xcu file are stored in cleartext. 13:36:51 deneb_alpha: Protected documents require a secret (your password) 13:37:09 if we want to store one secret, we need another secret (something you know or something you have, etc..) 13:37:25 colonelquibit, it's clear. :) 13:38:08 an option could be to inform the user that the mail merge password is stored as cleartext 13:38:42 * colonelqubit nods 13:39:03 yeah, that was my suggestion re: docs above 13:39:12 a second one is to disallow the saving 13:39:30 deneb_alpha: could you add those suggestions to the bug report? 13:39:41 the third is to implement the master password :) 13:39:48 * colonelqubit nods 13:39:57 colonelqubit, sure. 13:40:14 I wonder if we could hook in to existing auth in the OS, such as the Keychain on OSX? 13:40:39 * colonelqubit presumes that it shouldn't be painful to do that, but... 13:40:46 KDE wallet 13:41:03 kwalletmanager 13:41:20 similar for GNOME 13:41:42 I don't know if there's something similar for windows 13:41:44 deneb_alpha: the question becomes: How much info do we share across different installed copies of LibreOffice, etc. 13:42:06 right now each installdir is pretty self-contained 13:42:13 thinking about password I remember only 2 areas 13:42:23 mediawiki manager and mail merge 13:43:34 one sec 13:44:17 ALL: I'm going to hang out in the channel for a while today and attack the UNCONFIRMED list. Please join in! :-) 13:44:22 #endmeeting