[Popcon-developers] Bug#704419: Bug#704419: popularity-contest: Should vote for packages from Debian archive only

[Bill Allombert]

On Mon, Apr 01, 2013 at 12:05:23AM +0400, Askar Safin wrote:
> Package: popularity-contest
> Version: 1.49
> Severity: normal
> 
> I created and installed dummy package "safinaskar-test-of-popcon" to test
> popcon. And this package was ocassionally leaked to popcon!

Yes but it is not quite popular:

129960 safinaskar-test-of-popcon          1     0     0     0     1 (Not in sid)

> You can see it on http://popcon.debian.org/by_inst (as on 2013-03-31). Of
> course, this is a bug! This means any guy can create a lot of packages,
> install them, and they will appear in popcon statistics. This is bad. So, I
> can add to your statistics some 1000000 random packages.

This is already the case, with dynamically generated package names.

> So, please deny votes for packages not from Debian archive.

I think you are making this issue a much larger problem that in actually is.

Thanks for your interest in popularity-contest!

Cheers,
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here.