February 2014 - Pharo-dev - lists.pharo.org

Re: [Pharo-dev] [squeak-dev] Re: FFI blowfish for encrypting / decrypting [WAS] Re: How to encrypt a password?
by mkobetic＠gmail.com Feb. 18, 2014

Feb. 18, 2014

"Mariano Martinez Peck"<marianopeck(a)gmail.com> wrote: > > Anyway.... I do need encrypt/decrypt and it should be fast. I have just > > tried ARC4 and seems to be fast. I have a few questions: > > > > - If I make the ARC4 key larger is it likely to be safer? > > - How does ARC4 compare to blowfish from security point of view? Is > > blowfish much more secure or not that much? > > > > > > mmm reading a bit more I would say ARC4 may not be the most accurate for my > case. Why? Because I may have many fields from many objects all being > protected with the same password (hence, same key for the ARC4). This may > affect ARC4 security, right? And even more that key is not a random stream > but a fixed one (the " SecureHashAlgorithm new hashMessage: aString" of > the password they are protected with).... With stream ciphers (or block cipher in modes that emulate a stream cipher, e.g. OFB, CTR) you absolutely must not reuse the same key to encrypt different data (http://en.wikipedia.org/wiki/Stream_cipher_attack) You could try to devise a way to avoid re-using the exact same key, e.g. generate the encryption key by mixing in a unique id of the field that you're encrypting along with the password, but unless you really know what you're doing, it's quite easy to make a fatal mistake in your design. Best way to do this is to stick with standard solutions. You're trying to use passwords for encryption, so your standard options would be PKCS#5, bcrypt or scrypt. HTH, Martin

1 0

unloading a module used by NativeBoost
by paolo.bernardi.67＠gmail.com Feb. 18, 2014

Feb. 18, 2014

hi all, I need to find out a way for unloading a module previously loaded by NativeBoost. Smalltalk vm unload:'mylib.dll' works perfectly, but NB does not like it, How to ask NB to unload a module, or: how to tell NB that one module has been unloaded? thanks

1 0

XMLParser does not close input stream
by paolo.bernardi.67＠gmail.com Feb. 18, 2014

Feb. 18, 2014

hi, after parsing the input stream is left open, so Dia can't save the next version of my toy-designs. added streamReader stream close. at the end of XMLParserTokenizer>>nextEndDocument this made Dia (and me) happy. cheers

1 0

fuel on pharo 3
by Sebastian Sastre Feb. 17, 2014

Feb. 17, 2014

How you guys are loading fuel on Pharo 3? This isn't getting that done: Gofer new url: 'http://smalltalkhub.com/mc/Pharo/Fuel/main'; package: 'ConfigurationOfFuel'; load. ((Smalltalk at: #ConfigurationOfFuel) project version: #stable) load.

4 6

Update Fuel documentation
by Nicolas Cellier Feb. 17, 2014

Feb. 17, 2014

This page http://rmod.lille.inria.fr/web/pier/software/Fuel/Version1.9/Documentation/… obsolete information, at least for Squeak installation. This is because ConfigurationOfFuel-MaxLeske.178 still points to old repository http://ss3.gemstone.com/ss/Fuel.html which has been drained... ConfigurationOfFuel-MartinDias.209 should be a better starting point. In latest Squeak trunk there is another problem: lack of squeak4.5.x support both in ConfigurationOfFuel and MetacelloSqueakPlatform>>defaultPlatformAttributes. But it's another problem, not related to documentation

2 4

Fuel: fix for Squeak trunk
by Nicolas Cellier Feb. 17, 2014

Feb. 17, 2014

I have an easy fix for Fuel on Squeak trunk. It concerns the FuelCompatibility layer, so I hesitate to publish on Pharo fogbugz... Is there a dedicated bug tracker? What is the preferred procedure? Nicolas

4 9

Package for manage USB - RS232
by Dario Trussardi Feb. 17, 2014

Feb. 17, 2014

Hi, i work with: Pharo1.Latest update: #14445 ( or with: Pharo2.0 Latest update: #20628 ). I'm interested to manage communications with USB or RS232 device. I can find package which support this protocol? Thank for any considerations ? Dario

4 8

Problems using old style keys in 3.0
by Norbert Hartl Feb. 17, 2014

Feb. 17, 2014

I just enabled old style keys in the settings browser. After that I opened a new system browser. I could not open a class search via cmd-f but with cmd-f + cmd-c. The menu displays only âf' as hotkey. Can anyone confirm this? Norbert

1 0

[pharo-project/pharo-core] da9e07: 30766
by GitHub Feb. 17, 2014

Feb. 17, 2014

Branch: refs/heads/3.0 Home: https://github.com/pharo-project/pharo-core Commit: da9e07d261c6f929e2d445d002c373e8aeead839 https://github.com/pharo-project/pharo-core/commit/da9e07d261c6f929e2d445d0… Author: Jenkins Build Server <board(a)pharo-project.org> Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M FileSystem-Tests-Core.package/FileSystemTest.class/instance/tests/testEntryAt.st A ScriptLoader30.package/ScriptLoader.class/instance/pharo - scripts/script419.st A ScriptLoader30.package/ScriptLoader.class/instance/pharo - updates/update30766.st M ScriptLoader30.package/ScriptLoader.class/instance/public/commentForCurrentUpdate.st M System-Settings.package/SettingBrowser.class/instance/user interface/setViewedPackageNames_.st R System-Settings.package/SettingNode.class/instance/accessing/package.st M System-Settings.package/SettingNode.class/instance/accessing/receiverPackage.st Log Message: ----------- 30766 12892 DiskFileSystemTest>>#testEntryAt https://pharo.fogbugz.com/f/cases/12892 12897 Settings Browser is slow when opened on a package https://pharo.fogbugz.com/f/cases/12897 http://files.pharo.org/image/30/30766.zip

1 0

[pharo-project/pharo-core]
by GitHub Feb. 17, 2014

Feb. 17, 2014

Branch: refs/tags/30766 Home: https://github.com/pharo-project/pharo-core

1 0