Squeak-dev January 2005

squeak-dev@lists.squeakfoundation.org

134 participants
235 discussions

New BFAV Server is Live
by Ken Causey 27 Jan '05

27 Jan '05

This shouldn't really affect anyone since the fact that anything has changed should be completely invisible to everyone but I thought I would let everyone know that BFAV server has been moved and is now working from the new virtual Linux server that Cees has setup. Thank you Cees! Ken

3 2

RE: [Maybe Spam] Re: Swiki vandalized
by Frank Shearar 27 Jan '05

27 Jan '05

John Pfersich <jp1660(a)att.net> wrote: > But I think most of the really annoying damage is done by > juveniles. Is there a way to make only Apprentices and up able to > lock the pages? That's the biggest pain to me. Oh gosh, I forgot all about that one! Yes, I wholeheartedly agree - we cannot allow J Random to lock vandalised pages and prevent the WikiGnomes from repairing the damage. (You can add the people who deface pages with "The admin of this server knows nothing about security! I hacked their server! Look at this page for proof! Love me!") As a general principle, I think people with higher reputations should be able to (easily) undo changes made by people with lower reputations - if a Journeyer locks a page, Journeyers and Masters should be able to unlock the page, for instance. And then one's reputation becomes a permissions token, rendering largely passwords unnecessary. Of course, passwords do allow a nice way of distributing a right. Possibly some rights should use passwords to authenticate requests. I can't think of any off-hand, but there might actions that require passwords. Oh, that actually makes me wonder about something else. One might be only an Apprentice in the community (a new Squeaker, in other words) but a keen WikiGnome. We might want this new Gnome to have major rights as part of his (proven) wiki maintaining, while limiting his rights to, for instance, push changesets to the update stream (because he hasn't learned the Squeak idioms, for instance). frank ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent RNID policy. If you are not the intended recipient you are advised that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. If you have received this email in error please notify the RNID Helpdesk by telephone on: +44 (0) 207 296 8282. The Royal National Institute for Deaf People Registered Office 19*23 Featherstone Street London EC1Y 8SL No. 454169 (England) Registered Charity No. 207720 ********************************************************************

3 2

RE: [Maybe Spam] Re: Swiki vandalized
by Frank Shearar 27 Jan '05

27 Jan '05

Dave Hylands <dhylands(a)gmail.com> wrote: > > Oh, that actually makes me wonder about something else. One > might be only an Apprentice in the community (a new Squeaker, > in other words) but a keen WikiGnome. We might want this new > Gnome to have major rights as part of his (proven) wiki > maintaining, while limiting his rights to, for instance, push > changesets to the update stream (because he hasn't learned > the Squeak idioms, for instance). > > If somebody is a good WikiGnome and can't control themselves in regard > to pushing changesets, then they don't deserve to be a WikiGnome. That doesn't follow. Say you're very skilled with proofreading and editing, with only a cursory knowledge of Smalltalk. Thus, you're eminently qualified to WikiGnome, but don't have a grasp of the community coding standards, and thus shouldn't (yet) be allowed to push changesets to the update stream. _I_ sure as heck am not conversant enough with Squeak to try push changesets to the update stream (in general) even if I could. What I'm driving at (and several people have talked about this recently) is you can use reputation servers to automatically control access to certain privileges. These privileges might be editing the wiki, they might be changing the update stream server. > Just because you have a priviledge doesn't mean you'll abuse it. You > need to give people a bit more credit. The point of security mechanisms is not to prevent good people from damaging common property. It's to prevent BAD people from damaging common property. I just need to ride the Tube here in London, or witness a bot attack or vandalised pages on the swiki to know that there ARE people who abuse their privileges. Sure, not many, and none of them members of our wonderful community. Point is, given the chance, there are people who will abuse their privileges. It's almost human nature. _I_ believe wikis should be as open as possible, even to the extent of allowing abuse. Having said that, if the community at large feels that the Swiki needs protection, then I want to be a part of the process that decides who can do what. As I've said before, I'm more than happy to WikiGnome, fixing up bot attacks. My only beef with the Swiki's security or lack thereof is that vandals can lock pages and thus prevent WikiGnomes from repairing the damage. That really messes up a WikiGnome's day. > I also feel that there is a tendency to dream up scenarios that may > never happen and then design ways to deal with them. Deal with the > exceptions and odd cases when they occur. In general, I agree with you. I'm a very big fan of test-driven development and XP-like processes. Security does not work like that. I should really have changed my mail's subject, as I'm really talking about using reputation servers to control privileges, not just about bots vandalising the Swiki. > You could also have two levels of "Apprentice", one lowest level which > you acquire by just existing (i.e. automatic) and the next level > requires asking. Only people with Apprentice-II or higher would be > allowed to edit the wiki. SqueakPeople has Observer, Apprentice, Journeyer, Master. You automatically gain Observer status by virtue of registering your account (and we can consider people without accounts as being logged in as the Observer "anonymous". You gain Apprentice status when an Apprentice or higher thinks you're an Apprentice (via certifying you). Roughly, and probably inaccurately. http://people.squeakfoundation.org/trust-metric.html has the details for SqueakPeople, and the system looks quite neat. Which quite handily fulfils the scheme you proposed :) frank ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent RNID policy. If you are not the intended recipient you are advised that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. If you have received this email in error please notify the RNID Helpdesk by telephone on: +44 (0) 207 296 8282. The Royal National Institute for Deaf People Registered Office 19*23 Featherstone Street London EC1Y 8SL No. 454169 (England) Registered Charity No. 207720 ********************************************************************

4 3

RE: [Q] What does this mean? (When doing a 'code update')
by Stoffel, Andrew 27 Jan '05

27 Jan '05

From: SPINIELLI Enrico > The problem for me was that I was behind a firewall and I > have to access the Internet thru a proxy. Thanks for the suggestion... Although I AM behind a firewall (who isn't now-a-days?), as far as I know I am not going through a proxy server. If I am it's new. Thanks -Andy-

1 0

RE: [Q] What does this mean? (When doing a 'code update')
by SPINIELLI Enrico 27 Jan '05

27 Jan '05

The problem for me was that I was behind a firewall and I have to access the Internet thru a proxy. If that is the case, you have to evaluate the following (use your IP address, user/passwd :-) HTTPSocket stopUsingProxyServer. HTTPSocket useProxyServerNamed: '123.123.123.123' port: 1234. HTTPSocket proxyUser: 'user' password: 'passwd'. Hope it helps Bye Enrico -----Original Message----- From: Stoffel, Andrew [mailto:andrew.stoffel@jenzabar.net] Sent: Thursday, January 27, 2005 4:27 PM To: squeak-dev(a)lists.squeakfoundation.org Subject: [Q] What does this mean? (When doing a 'code update') Just curious. I'm seeing this with 3.9Alpha updated to 6550. If I attempt to do a code update I get the following message in a little dialogue box: 0 new update file(s) processed. Could not load 1 update file(s). Starting with " http://update.squeakfoundation.org/external/updates/ <http://update.squeakfoundation.org/external/updates/> ". Should I be concerned? Is something wrong with my image? Or is this a problem with the update server that I can't do anything about. Thanks -Andy- ____ This message and any files transmitted with it are legally privileged and intended for the sole use of the individual(s) or entity to whom they are addressed. If you are not the intended recipient, please notify the sender by reply and delete the message and any attachments from your system. Any unauthorised use or disclosure of the content of this message is strictly prohibited and may be unlawful. Nothing in this e-mail message amounts to a contractual or legal commitment on the part of EUROCONTROL unless it is confirmed by appropriately signed hard copy. Any views expressed in this message are those of the sender.

1 0

[Q] What does this mean? (When doing a 'code update')
by Stoffel, Andrew 27 Jan '05

27 Jan '05

Just curious. I'm seeing this with 3.9Alpha updated to 6550. If I attempt to do a code update I get the following message in a little dialogue box: 0 new update file(s) processed. Could not load 1 update file(s). Starting with "http://update.squeakfoundation.org/external/updates/ ". Should I be concerned? Is something wrong with my image? Or is this a problem with the update server that I can't do anything about. Thanks -Andy-

1 0

RE: [BUG][TEST] ChangeSet losing class category changes in Squeak 3.7+
by Nathanael Schärli 27 Jan '05

27 Jan '05

> > Nathanael is defending his PhD the 2nd of february so I guess he can > > have a look after. > > > > Stef > > Thanks Stef, and best wishes to Nathanael on his PhD work. Thanks, Dave. I will definitely have a look at this as soon as I have some time. Maybe even before the defense ;-) Nathanael > -----Original Message----- > From: David T. Lewis [mailto:lewis@mail.msen.com] > Sent: Donnerstag, 27. Januar 2005 11:56 > To: stéphane ducasse > Cc: Nathanael Schärli > Subject: Re: [BUG][TEST] ChangeSet losing class category > changes in Squeak 3.7+ > > > On Wed, Jan 26, 2005 at 05:13:49PM +0100, stéphane ducasse wrote: > > Nathanael is defending his PhD the 2nd of february so I guess he can > > have a look after. > > > > Stef > > Thanks Stef, and best wishes to Nathanael on his PhD work. > > Dave > >

1 0

[FIX] FileListRenameFix-nk ( [er][sm] Recommend inclusion )
by frank.shearar＠rnid.org.uk 27 Jan '05

27 Jan '05

Simple change, readily checked by reading http://www.ietf.org/rfc/rfc640.txt. We probably should have tests for this sort've stuff. That might mean a mock FTP server... frank

1 0

Re: [FIX] FileListRenameFix-nk
by stéphane ducasse 27 Jan '05

27 Jan '05

Hi ned may be you should push the changes directly in the stream since I'm not someone is taking care of changes....anymore. May be bert is taking care of something. Sad but true. We are all hyper clever but hyper busy => nothing happens. Stef On 27 janv. 05, at 2:48, ned(a)squeakland.org wrote: > from preamble: > > "Change Set: FileListRenameFix-nk > Date: 26 January 2005 > Author: Ned Konz > > the FTP rename:toBe: error codes were wrong per RFC 640. > This fixes them."! > <FileListRenameFix-nk.cs.gz>

1 0

REMINDER: Harvesting Party Friday January 28th 04:00 GMT
by Ken Causey 27 Jan '05

27 Jan '05

Just a reminder that the next Harvesting Party will take place between 04:00 (4 AM) and 08:00 (8 AM) GMT Friday January 28th, 2005. As usual we will meet in #squeak on irc.freenode.net. More information about the #squeak IRC channel can be found at http://people.squeakfoundation.org/article/7.html Information about the Harvesting Party idea can be found at http://people.squeakfoundation.org/article/29.html If you have the time please attend and work toward the future of Squeak. The next seven parties are scheduled for 08:00 (08:00 AM) GMT Tuesday February 01, 2005 12:00 (12:00 PM) GMT Saturday February 05, 2005 16:00 (04:00 PM) GMT Wednesday February 09, 2005 20:00 (08:00 PM) GMT Sunday February 13, 2005 00:00 (12:00 AM) GMT Friday February 18, 2005 04:00 (04:00 AM) GMT Tuesday February 22, 2005 08:00 (08:00 AM) GMT Saturday February 26, 2005

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
24
Older →

Jump to page: