[Pkg-lxde-maintainers] Bug#918467: lxpanel: Weather plugin uses obsolete APIs, does not work.

Andriy Grytsenko andrej at rep.kiev.ua
Tue Jan 8 22:13:22 GMT 2019


Yes, Yahoo unfortunately ended free service at January 3.

New API requires registering the application and has unknown restrictions
which probably will lead the weather plugin to DoS situation, because if
developer registers API to get a key then that limitation will be applied
to each user of that API so may be soon exceeded.

Abother issue that new Yahoo API requires digital signature for each
request which in turn will involve libssl with all their restrictions.

Unfortunately all weather providers now made their API available via some
kind of registration. We can force each user to register but that will be
pretty inconvenient for users. Another approach is to register some token
for LXDE developers public e-mail but if (for example) 500000 users will
use the plugin and we set update time once in two hours, that will make
500000/120=4000 requests per minute, which exceeds number for any free
subscription which definitely makes the plugin unusable at all, so this
approach is not a way to go. Thus I have no idea what else to do except
to remove the plugin from distribution.



More information about the Pkg-lxde-maintainers mailing list