|
Any | Privacy Issue | Very High | Critical | [openrc] Google in init.d and conf.d configuration (ne ... | Closed | |
Task Description
/etc/init.d/net-online
-----
Line #62
ping_test_host="${ping_test_host:-google.com}"
_____
/etc/conf.d/net-online
-----
# The default is google.com.
|
|
Any | Privacy Issue | Very Low | Medium | [avahi] avahi publishes the hostname by default | Closed | |
Task Description
By default, the ‘disable-publishing’ parameter in the [publish] section of avahi-daemon.conf is set to ‘no’, which can be seen in my opinion as a privacy issue as avahi broadcasts the hostname without the user’s consent even though this has been explicitly disabled in the settings of networkmanager.
|
|
Any | Privacy Issue | High | Critical | [deepin-desktop-base] Check for CNZZ Spyware | Closed | |
Task Description
As per a recent discovery, we should check if our deepin is affected by the CNZZ spyware in the AppStore. https://www.youtube.com/watch?v=v25Dy66AtNI
We also shouldn’t use the AppStore if it exists, due to non-free apps.
Known files: > usr/share/dbus-1/system-services/com.deepin.daemon.Apps.service > etc/appstore.json
|
|
Any | Privacy Issue | Medium | Medium | [meta] Investigate DuckDuckGo links for privacy | Closed | |
Task Description
As per a user report (https://forums.hyperbola.info/viewtopic.php?id=92), DDG is USA based search engine and is blocking Tor users (https://trac.torproject.org/projects/tor/ticket/23648). They are also using non-free JS on the default search.
It seems the best way to solve this is to use their “html” hidden service since it conceals the user IP, doesn’t block Tor users by default, and doesn’t need JS. https://3g2upl4pq6kufc4m.onion/html/
This will affect multiple applications that are currently using DuckDuckGo. The alternative is to remove it completely, but it still is a better option than Google et. all for privacy...
|
|
Any | Privacy Issue | Very High | Critical | [purple-facebook] only useful with Facebook service | Closed | |
Task Description
Description:
community/purple-facebook 0.9.3-1
Facebook protocol plugin for libpurple
It is up to maintainers to decide of course. IMHO I would remove this one as it uses proprietary network Facebook, exclusively, and even mentioning the word in the package.
See: https://www.gnu.org/distros/free-system-distribution-guidelines.html
A free system distribution must not steer users towards obtaining any nonfree information for practical use, or encourage them to do so.
|
|
Any | Privacy Issue | Very High | Critical | [cutegram] only useful with Telegram service | Closed | |
Task Description
Description: Cutegram is a Telegram client. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.
Additional info:
$ pacman -Si cutegram
Repository : community
Name : cutegram
Version : 2.7.1-3
Description : A different telegram client from Aseman team
Architecture : x86_64
URL : http://aseman.co/en/products/cutegram/
Licenses : GPL
Groups : None
Provides : cutegram
Depends On : qt5-imageformats qt5-webkit telegramqml>=0.9.1 libqtelegram-ae>=3:6.1
Optional Deps : gst-plugins-bad: audio support
gst-plugins-good: audio and notification sound
Conflicts With : cutegram-git sigram-git sigram cutegram
Replaces : cutegram-cn
Download Size : 12.03 MiB
Installed Size : 17.07 MiB
Packager : Jiachen Yang <farseerfc@gmail.com>
Build Date : Mon 25 Jan 2016 05:59:04 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature
|
|
Any | Privacy Issue | Very High | Critical | [libqtelegram-ae] only useful with Telegram service | Closed | |
Task Description
Description: libqtelegram-ae is Telegram library written in Qt based on telegram-cli code. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.
Additional info:
$ pacman -Si libqtelegram-ae
Repository : community
Name : libqtelegram-ae
Version : 3:6.1-4
Description : Telegram library written in Qt based on telegram-cli code
Architecture : x86_64
URL : https://launchpad.net/libqtelegram
Licenses : GPL3
Groups : None
Provides : None
Depends On : qt5-base qt5-multimedia
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 431.27 KiB
Installed Size : 1999.00 KiB
Packager : Antonio Rojas <arojas@archlinux.org>
Build Date : Wed 05 Apr 2017 07:16:39 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature
|
|
Any | Privacy Issue | Very High | Critical | [telegram-qt] only useful with Telegram service | Closed | |
Task Description
Description: TelegramQt is a Telegram binding for Qt. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.
Additional info:
$ pacman -Si telegram-qt
Repository : community
Name : telegram-qt
Version : 0.1.0-2
Description : Qt bindings for the Telegram protocol
Architecture : x86_64
URL : https://github.com/Kaffeine/telegram-qt
Licenses : GPL
Groups : None
Provides : None
Depends On : qt5-base
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 204.80 KiB
Installed Size : 747.00 KiB
Packager : Antonio Rojas <arojas@archlinux.org>
Build Date : Sat 18 Feb 2017 06:49:55 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature
|
|
Any | Privacy Issue | Very High | Critical | [telegramqml] only useful with Telegram service | Closed | |
Task Description
Description: TelegramQML are Telegram API tools for QtQml and Qml. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.
Additional info:
$ pacman -Si telegramqml
Repository : community
Name : telegramqml
Version : 0.9.2-2
Description : Telegram API tools for QtQml and Qml
Architecture : x86_64
URL : https://github.com/Aseman-Land/TelegramQML
Licenses : GPL
Groups : None
Provides : None
Depends On : qt5-webkit qt5-imageformats qt5-graphicaleffects qt5-quickcontrols libqtelegram-ae
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 401.03 KiB
Installed Size : 1905.00 KiB
Packager : Jiachen Yang <farseerfc@gmail.com>
Build Date : Mon 25 Jan 2016 05:46:59 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature
|
|
Any | Privacy Issue | Very High | Critical | [telepathy-morse] only useful with Telegram service | Closed | |
Task Description
Description: Telepathy-Morse is a Qt-based Telegram connection manager for the Telepathy framework. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.
Additional info:
$ pacman -Si telepathy-morse
Repository : community
Name : telepathy-morse
Version : 0.1.0-1
Description : Telepathy Connection Manager for the Telegram network
Architecture : x86_64
URL : https://github.com/TelepathyQt/telepathy-morse
Licenses : GPL
Groups : None
Provides : None
Depends On : telepathy-qt5 telegram-qt
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 90.80 KiB
Installed Size : 351.00 KiB
Packager : Antonio Rojas <arojas@archlinux.org>
Build Date : Fri 16 Sep 2016 11:49:33 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature
|
|
Any | Privacy Issue | Very High | Critical | [telepathy-kde-accounts-kcm] recommends Telepathy-Morse ... | Closed | |
Task Description
Description: telepathy-kde-accounts-kcm contains the telepathy-morse package in its optdepends array. It should be removed since Telepathy-Morse provides support for Telegram, a nonfree server-side service that requires accounts tied to telephone numbers.
Additional info:
$ pacman -Si telepathy-kde-accounts-kcm
Repository : extra
Name : telepathy-kde-accounts-kcm
Version : 17.04.0-1
Description : KCM Module for configuring Telepathy Instant Messaging Accounts
Architecture : x86_64
URL : https://community.kde.org/Real-Time_Communication_and_Collaboration
Licenses : GPL
Groups : kde-applications kdenetwork telepathy-kde
Provides : None
Depends On : telepathy-qt kaccounts-providers
Optional Deps : telepathy-gabble: XMPP/Jabber accounts support
telepathy-haze: account types supported by Pidgin/libpurple
telepathy-morse: Telegram accounts support
telepathy-salut: link-local XMPP account support
Conflicts With : None
Replaces : None
Download Size : 334.86 KiB
Installed Size : 2111.00 KiB
Packager : Antonio Rojas <arojas@archlinux.org>
Build Date : Sat 15 Apr 2017 06:47:59 PM -03
Validated By : MD5 Sum SHA-256 Sum Signature
|
|
Any | Privacy Issue | Very Low | Low | [purple-plugin-pack] Provides Napster support which is ... | Closed | |
Task Description
purple-plugin-pack provides access to Napster which is only useful with a single company and sever (as far as I could tell).
|
|
Any | Privacy Issue | Very Low | Medium | [certbot-dns-luadns] LuaDNS service depends in non-free ... | Closed | |
Task Description
According to their documentation:
In order to use LuaDNS service you’ll need a LuaDNS account and a Git repository.
Sign up for a free LuaDNS account here: https://api.luadns.com/signup
Currently we are supporting the following Git hosting services: > GitHub > Bitbucket
GitHub, as everybody knows, was acquired by Microsoft last year (2018) https://news.microsoft.com/2018/06/04/microsoft-to-acquire-github-for-7-5-billion/
And Bitbucket, like GitHub, is a centralized non-free git service.
There are other packages made for GitHub which haven’t been removed, but as you were deleting the certbot-dns-* packages that depended on a US-based DNS provider company, I thought you may wanted to know this.
|
|
Any | Privacy Issue | Very Low | Low | [github] check github-related packages | Closed | |
Task Description
We should check if the following packages run any non-free JS (like youtube-dl) or access a proprietary API:
- hub - python-pygithub - python2-pygithub
I haven’t check them, but they look fishy. Take it as a reminder, this is far from being urgent IMO.
|
|
Any | Privacy Issue | Very Low | Critical | [bleachbit] needs to be adapted to UXP applications | Closed | |
Task Description
The current version of BleachBit needs to be adapted so it can clean the new .cache/hyperbola/ directory.
|
|
Any | Privacy Issue | Medium | High | midori new Support for cross-browser web extensions | Closed | |
Task Description
Description: idk what to do with it i add the PKGBUILD but this new extension needs to be checked left or patched, https://git.hyperbola.info:50100/~team/packages/extra.git/plain/midori/PKGBUILD?h=rachad
Additional info: * package version(9.0)
important links to check: * https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions * https://github.com/midori-browser/core/issues/244
|
|
Any | Implementation Request | Very Low | Low | [3proxy] add package since it's useful for tor on ftp p ... | Closed | |
Task Description
Add “3proxy”[0] package
Useful for tor on ftp proxy[1]
[0]:https://github.com/z3APA3A/3proxy [1]:https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/FTP
|
|
Any | Implementation Request | Medium | Medium | [uzem][uzebox] add uzem emulator and uzebox firmware pa ... | Closed | |
Task Description
Add “uzem” emulator and “uzebox” firmware packages[0][1].
It’s a emulator and firmware for fully free 8bit game console.
[0]:http://belogic.com/uzebox/index.asp (no https found) [1]:https://github.com/Uzebox/uzebox
|
|
Any | Implementation Request | Medium | Medium | [octopi] [octopi-cachecleaner] [octopi-notifier] [octop ... | Closed | |
Task Description
Implement octopi, octopi-cachecleaner, octopi-notifier and octopi-repoeditor packages.
Octopi is a GUI for Pacman (Package Manager) tools, needed for desktop users[0][1].
Note: Those packages need patches to remove AUR support.
[0]:https://octopiproject.wordpress.com/ [1]:https://github.com/aarnt/octopi
|
|
Any | Implementation Request | Medium | Medium | [ncdu] add new package | Closed | |
Task Description
PKGBUILD
# $Id: PKGBUILD 187611 2016-08-26 15:44:01Z bisson $
# Contributor: lp76 <l.peduto@gmail.com>
# Contributor: Daenyth <Daenyth+Arch AT gmail DOT com>
# Maintainer: Gaetan Bisson <bisson@archlinux.org>
pkgname=ncdu
pkgver=1.12
pkgrel=1.hyperbola1
pkgdesc='Disk usage analyzer with an ncurses interface'
url='https://dev.yorhel.nl/ncdu'
license=('custom:MIT')
depends=('ncurses')
arch=('i686' 'x86_64')
validpgpkeys=('74460D32B80810EBA9AFA2E962394C698C2739FA')
source=("https://dev.yorhel.nl/download/${pkgname}-${pkgver}.tar.gz"{,.asc})
sha512sums=('20620dd79d2af878442769e097f13806f64f23875dcb85ebccd573a3de43aba5663d496049b64015d13f9a79d624298032c008ef61dfb6f61d8b12902b8dca12'
'SKIP')
build() {
cd "${srcdir}/${pkgname}-${pkgver}"
./configure --prefix=/usr
make
}
package() {
cd "${srcdir}/${pkgname}-${pkgver}"
make DESTDIR="${pkgdir}" install
install -Dm644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
|
|
Any | Implementation Request | Medium | Medium | [searx] add new package | Closed | |
Task Description
Hi André, you could make an init for the searx search engine, it happens that I want to launch it from local to avoid being in searx.me or searx.riseup.net.
I have seen that there is a PKGBUILD in AUR [0]. I think it is necessary to make one with the init Openrc
[0]: https://aur.archlinux.org/packages/searx-py3/
|
|
Any | Implementation Request | Very Low | Low | [plymouth] add package | Closed | |
Task Description
Plymouth is an application that runs very early in the boot process (even before the root filesystem is mounted!) that provides a graphical boot animation while the boot process happens in the background.
Please implement plymouth as an optional package.
|
|
Any | Implementation Request | Very Low | Low | [multipath-tools] add package | Closed | |
Task Description
Hello,
Could it be possible to add this package :
multipath-tools
“Multipath tools for Linux (including kpartx)”
License : GPL2
to the repo ?
Thank you
|
|
Any | Implementation Request | Very Low | Low | [thinkfan] add package | Closed | |
Task Description
Could it be possible to add this package :
thinkfan
“A minimalist fan control program. Supports the sysfs hwmon interface and thinkpad_acpi”
License : GPL
to the repo ?
Thanks
|
|
Any | Implementation Request | High | High | [onioncat]: add package | Closed | |
Task Description
Add “onioncat”[0][1] package
[0]:https://www.onioncat.org/ [1]:https://www.onioncat.org/download/ https://www.cypherpunk.at/ocat/download/Source/current/
|
|
Any | Implementation Request | High | High | [xen] add Xen 4.8.x split packages | Closed | |
|
|
Any | Implementation Request | Low | Low | [nut] add Network UPS Tools 2.7.x package | Closed | |
|
|
Any | Implementation Request | Low | Low | [codecrypt] add new package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [mat] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [mednaffe] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [fsearch] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [flowblade] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [whipper] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [sacd-extract] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [radiotray] add package | Closed | |
|
|
Any | Implementation Request | Medium | Medium | [wine-stable] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [ttf-font-awesome] add ttf-font-awesome font | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [awesome-terminal-fonts] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [w_scan] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [qpdfview] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [menulibre] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [crunch] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [dmg2img] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Medium | [sway] needs OpenRC init script | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [gcdemu] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [python-cheat] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [accuraterip-checksum] add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [pacpl] Add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [gmusicbrowser] Add package | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [octopi] add package | Closed | |
|