Re: List of Maemo Repositories / Repository
 

Ok, yeah - that's been my understanding as well - thanks for confirming :). But isn't that the case with any and every piece of software out there? Windows, Linux, Mac or even Palm software shouldn't be downloaded unless you trust the source or at the very least have a good backup - because it could jack up you device.

Re: List of Maemo Repositories / Repository
 

When I say official, I mean repositories hosted on the maemo.org site nothing more.

In response to geneven, when I said no one recommend adding all the reps listed on gronmayer site, I was only refering to the first few posts of this thread. Also, I consider the info for maemo tablet newbies.. and I recommend folks first try and find out what stuff is in a repository not hosted on maemo.org before adding it.. but shouldnt really matter, as you can always reflash and start over... use to this thanks to windows :)

Re: List of Maemo Repositories / Repository
 

There is a difference here -- adding a repository to the list means trusting the source not only this one time, but trusting it all the time in the future too... Basically the repository model can be easier and safer than the Windows/Mac/Palm model, but only if users only accept repositories they trust (implicitly this means that repo upload access is strictly restricted to trusted developers only). I'm not saying the maemo repos are a model example of this, but this is what we should strive for: A small number of repositories with clear "security levels" so users can choose the level of risk they want -- with 101 repositories this is not really possible.

Here is an example of the threat I was talking about btw:
User has repositories Good and Evil enabled. He installs "AwesomeProgram 1.0.0" for repo Good. Later Application manager tells user there is an upgrade available (1.0.1) and he of course installs it -- not realising that the new version actually comes from Evil and contains a keylogger and send his home dir all over the internet.

If you are diligent you can notice that something is wrong before installing the upgrade, but it is difficult... It's a lot easier to mitigate the risk by only enabling the repositories you trust.

Re: List of Maemo Repositories / Repository
 

In real word, repositories are signed by their author.
Any packages that has been injected by somebody else will not have the correct authentication. Example, if I'm able to add a package to repository.maemo.org and maemo.org has a GPG problem, nobody will ever see it..

With this signature, you have then to trust the author. You know that packages you install from his repo are really from him, because he's the only one having the private key.

If the author is able to get his key signed by somebody you trust (maemo.org) , it goes a bit further in the chain of trust.

Simply adding the repo, without installating anything doesn't create ANY risk at all.
Also, one package can not overwrite files of another package. You then have to look at which packages get updated if you don't trust the repository author.

Re: List of Maemo Repositories / Repository
 

I agree with you 100%, except for this:
In theory you're correct, but in reality it just goes like this: "Hey, a new version of MaemoMapper, cool! [click-click]". This behaviour is not a problem at all if the repositories are trusted, but with a rogue repo in the list it becomes a disaster.

Re: List of Maemo Repositories / Repository
 

I'm with you on this.. it goes back to my original suggestion that its safest to check whats on a repository before adding it.

But if you like fooling around with stuff (probably the case with most tablet owners).. then be prepared to reflash (restore) a few times :)

I'm thankful for those making the effort to develop for the platform. As a begger (non programmer) .. I cant be too choosy.. at the moment nothing rivals this platform.. poo on palm for letting another market slip.. Palm could of owned the hand held media player, messenging.. and browsing markets.. but they simply have no vision.. and now they have no platform lol.. As a long time Palm owner (original Palm Pilot 5000 to Tungsten T3).. I was extremely dissappointed that Palm wouldnt even cough the resources to develop basics such as their own media player, web browser, a decent image viewer.

If they cant support their own OS development efforts with basic but popular apps.. they should just stick to hardware.. and make something open for other platforms..

Now I hope Nokia learns from Palm's missteps.. perhaps make another maemo line targetted to the media player market. likely would be hard for them as they're not really established in the media field like Apple.. What would rock as suggested by others is a Nokia Tablet / Google collaboration and cross marketing..

Re: List of Maemo Repositories / Repository
 

After searching, this thread looked about as good as any other to revive -
Could the extremely knowledgeable point to or add to the discusssion of a good thin list of needed repositories please?

I know of gronmayer's site and have seen a list from bun for his "7 special" (one for each day of the week?). And I thought I ran across where bun had a deb, but I couldn't find it again.

Anyways, any concise lists, for Diablo, and an easy way to add them?

bun's list
http://www.internettablettalk.com/fo...6&postcount=11

tia

Re: List of Maemo Repositories / Repository
 

Yeah, one, Extras.

Re: List of Maemo Repositories / Repository
 

That's pretty concise.
If it's all in the bun 7, why gronymayer's list of 63?

Re: List of Maemo Repositories / Repository
 

Because gronmayer doesn't let you delete repositories so it's filled with legacy and crap repositories that have a high probability of breaking your device.

More seriously, it was created at a time when Extras isn't what it is today. Back then, due to issues with the Extras process and generally poor behavior of maintainers, lots of developers went and created their own repositories to distribute their software straight away. Today, that's not the case. Most everything useful or interesting goes to Extras (if not sooner, then later). By and large, everything you really need is now in Extras. If it isn't, well, either it's not ready, the maintainer needs to be whipped, or you really don't want to install it. ;)

There are, obviously, some outliers (the Collabora repo might be a good example), but as a general recommendation, outliers don't factor in, so I'll leave it up to individual users whether they want to add specific 3rd party repositories to their application catalogs on a case-by-case basis.