November 2021 - Pharo-dev - lists.pharo.org

Recommendation for password encryption?
by Mariano Martinez Peck Sept. 30, 2022

Sept. 30, 2022

Hi guys. Some time ago I asked about the best way to encrypt a password. Some of the recommendations I got was: 1) Generally for passwords you do not write a decrypt method for security purposes (eg you do not want people to be able to reverse engineer the encrypted password easily) 2) put a little salt 3) There is http://www.squeaksource.com/Cryptography/PasswordHashingFFI 4) I should not decrypt password but instead I should compare both encrypted versions to see if they are equal. My scenario is the following. I need to store database passwords in text files. So I don't want to let them as plain text. And while I understand 4), I think it's a different scenario than mine. I know that some database driver may allow you to directly send the encrypted password. But still...I have another similar scenario in which I have to store a password and then send it (unencrypted)...so I kind of really need a bi-directional encryption. Now..I would try to avoid having an external library + FFI. Any ideas what is the best thing I can do? And how could I solve 1) if I want bidirectional like in my case? Thanks in advance, -- Mariano http://marianopeck.wordpress.com

9 26

one year contract
by stephane ducasse Dec. 14, 2021

Dec. 14, 2021

Hello this is a one year contract with remote working possibility in Pharo of course. We will produce an english version. Please contact Nicolas Becu. Nicolas Becu <nicolas.becu(a)cnrs.fr> _____________ Nicolas Becu Chercheur CNRS Littoral Environnement et SociÃ©tÃ©s (UMR LIENSs) TÃ©l : 05 16 49 67 94 S

2 1

Hardening Zinc's Core HTTP Server
by Sven Van Caekenberghe Dec. 2, 2021

Dec. 2, 2021

Hi, Zinc HTTP Components [https://github.com/svenvc/zinc] has been a part of Pharo since version 1.3 (2011). It is an open-source framework to deal with the HTTP networking protocol, modelling all aspects involved. It also offers both client and server functionality. The reliability of the code base has improved steadily over the years, thanks to virtually all Pharo developers using it, directly or indirectly. Over the summer a number of issues that popped up after Pharo 9 was released were resolved. The robustness of the core HTTP server is one important aspect. To put this quality further to the test, I deployed two servers with the same demo Seaside application, Reddit.st, open to the internet, without any further protections. - On Amazon AWS: http://34.245.183.130:1701 - On Microsoft Azure: http://51.137.72.94:8080 The application's source code can be found at [https://github.com/svenvc/Reddit] For the technically curious there are also deploy instructions at [https://github.com/svenvc/Reddit/blob/main/DEPLOY.md] The demo app itself is described in an older article [https://medium.com/@svenvc/reddit-st-in-10-cool-pharo-classes-1b5327ca0740] Note that, by definition, there is no HTTPS/TLS variant. If you manage to break this server with (a) malicious request(s) in such a way that you can explain what you did for others to confirm your approach, you not only help me/us improve the code, but earn eternal fame as well ;-) Sven PS: I hope I won't regret this, I am looking for constructive criticism. -- Sven Van Caekenberghe Proudly supporting Pharo http://pharo.org http://association.pharo.org http://consortium.pharo.org

3 8

This week (47/2021) on the Pharo Issue Tracker
by Marcus Denker Nov. 26, 2021

Nov. 26, 2021

This week (47/2021) on the Pharo Issue Tracker We merged 40 PRs and closed 44 Issues. Speed ===== - 10384-Performance-Regression-in-SmallInteger-/ #10385 https://github.com/pharo-project/pharo/pull/10385 Fixes ===== - Added :ref to methodName for refactoring options #10389 https://github.com/pharo-project/pharo/pull/10389 - Fix completion of keyword selectors #10438 https://github.com/pharo-project/pharo/pull/10438 - Reflectivity-Fix-Reify-Node-DynamicArray #10435 https://github.com/pharo-project/pharo/pull/10435 Tests ===== - rescue testForTiltedStickyness #10351 https://github.com/pharo-project/pharo/pull/10351 - Fixes testTerminationShouldProceedAllEnsureBlocksIfSomeWasFailed withâ¦ #10464 https://github.com/pharo-project/pharo/pull/10464 - Adopt testNoUtilsMethods #10167 https://github.com/pharo-project/pharo/pull/10167 Cleanups ======== - Behavior>>#allCallsOnIn: sends unimplemented methods #10431 https://github.com/pharo-project/pharo/pull/10431 - Small cleanups CircleMorph and EllipseMorph #10393 https://github.com/pharo-project/pharo/pull/10393 - Cleanup UndefinedClassTest #10373 https://github.com/pharo-project/pharo/pull/10373 - 24 PRs: Cleanup newlines and blanks Pharo 9 ======= - [P9] 10208-Cannot-inline-method-if-the-code-to-inline-is-not-an-immediate-node #10379 https://github.com/pharo-project/pharo/pull/10379 - [P9] 10264-Text-Wrapping-is-not-working #10382 https://github.com/pharo-project/pharo/pull/10382 - P9-10384-Performance-Regression-in-SmallInteger-/ #10386 https://github.com/pharo-project/pharo/pull/10386

1 0

This week (46/2021) on the Pharo Issue Tracker
by Marcus Denker Nov. 22, 2021

Nov. 22, 2021

More infos at https://github.com/pharo-project/pharo/pulse Fixes ===== - 10334-Metaclass-should-be-able-to-answer-hasClassVarNamed #10335 https://github.com/pharo-project/pharo/pull/10335 - Completion index #10326 https://github.com/pharo-project/pharo/pull/10326 - 10319-OSSDL2BackendWindowfetchDPI-seems-broken #10325 https://github.com/pharo-project/pharo/pull/10325 - 10059-cannot-save-method-when-it-contains-a-breakpoint #10349 https://github.com/pharo-project/pharo/pull/10349 - 10196 class side fluid syntax does not return a builder #10321 https://github.com/pharo-project/pharo/pull/10321 - 9922-RenderBugsTesttestForward-checks-for-timing-leads-to-timeouts-on-slow-CI #10218 https://github.com/pharo-project/pharo/pull/10218 - 10375-Selecting-Packages-in-Calypso-produces-MNU #10376 https://github.com/pharo-project/pharo/pull/10376 - Fix STONZnUrl source code problem #10357 https://github.com/pharo-project/pharo/pull/10357 - 10208-Cannot-inline-method-if-the-code-to-inline-is-not-an-immediate-node-P10 #10380 https://github.com/pharo-project/pharo/pull/10380 - [P10] 10264-Text-Wrapping-is-not-working #10381 https://github.com/pharo-project/pharo/pull/10381 - Forward porting the removal for: OSSDL2BackendWindow>>#fetchDPI seems broken #10348 https://github.com/pharo-project/pharo/pull/10348 - Improving Code Completion #10346 https://github.com/pharo-project/pharo/pull/10346 - Remove class of the RBSelectorEnvirionment if there is no more selectors associated to the class #10209 https://github.com/pharo-project/pharo/pull/10209 Release Tests / Rules ===================== - Rule to check class side #reset methods are in 'class initialization' protocol https://github.com/pharo-project/pharo/pull/10182 - Release test for proper packages #10248 https://github.com/pharo-project/pharo/pull/10248 Cleanup ======= - Reduce usage of NativeBoost calls for UnifiedFFI-Legacy #10283 https://github.com/pharo-project/pharo/pull/10283 - 10343 cleanup opal compiler core extensions should use correct casing https://github.com/pharo-project/pharo/pull/10344 - Cleanup correct casing #10340 https://github.com/pharo-project/pharo/pull/10340 - 10337 cleanup metacello core extensions should use correct casing #10338 https://github.com/pharo-project/pharo/pull/10338 - Correct casing for STON-Core extensions #10342 https://github.com/pharo-project/pharo/pull/10342 - Cleanup rpackage core extensions should use correct casing #10359 https://github.com/pharo-project/pharo/pull/10359 - Fix Gofer-Core extensions should use correct casing / package name #10365 https://github.com/pharo-project/pharo/pull/10365 - Fix Metacello extensions should use correct casing / package name #10369 https://github.com/pharo-project/pharo/pull/10369 - Fix Manifest-Core extensions should use correct casing / package name https://github.com/pharo-project/pharo/pull/10367 - Fix Monticello extensions should use correct casing / package name #10363 https://github.com/pharo-project/pharo/pull/10363 Pharo9 ====== - 10350-Backport-Pharo9-10059-cannot-save-method-when-it-contains-a-breakpoint #10352 https://github.com/pharo-project/pharo/pull/10352 - 10353-Backport-Pharo9-CI-ZnHTTPSTesttestGmailEncrypted-started-failing-on-the-CI- #10355 https://github.com/pharo-project/pharo/pull/10355

1 0

[ANN] Fuel release 4.0.0
by Max Leske Nov. 21, 2021

Nov. 21, 2021

Hi everyone. It's been quite a while since we've done any major work on Fuel, so we are very excited to announce version 4.0.0 of Fuel today! Short-list of the most interesting things: - builder API - support for talents and anonymous classes - support for FullBlockClosure - full serialization support by default (no more need to load FuelMetalevel to serialize classes and methods) - full serialization support for Squeak The complete release notes are over on GitHub: https://theseion.github.io/Fuel/releases/4.0.0/. We hope that you'll like what we've done and we're excited to see, what kind of magic you will do with it. If you are using Fuel in a project, please let us know and we'll add it to the list of projects on GitHub (good for us and you ;)). As always, please report any issues to https://github.com/theseion/Fuel/issues and we'll try to help you out. Cheers, Max (on behalf of the Fuel team)

5 4

This week (45/2021) on the Pharo Issue Tracker
by Marcus Denker Nov. 12, 2021

Nov. 12, 2021

This week we merged 7 PRs and closed 3 issue tracker entries Refactoring Tools ================== - Added a MakeAbstract command to execute a transformation to make a class abstract â¦ #10327 https://github.com/pharo-project/pharo/pull/10327 - Migrate RBMoveMethodToClassSide to refactoring2 #10291 https://github.com/pharo-project/pharo/pull/10291 Cleanup ===== - Microoptimization-MethodDictionary-scanFor #10309 https://github.com/pharo-project/pharo/pull/10309 - Small cleanups SystemDictionary #10317 https://github.com/pharo-project/pharo/pull/10317 - Reduce usage of NativeBoost calls for UnifiedFFI-Legacy #10283 https://github.com/pharo-project/pharo/pull/10283 Speed ===== - Speedup-SendersOf #10311 https://github.com/pharo-project/pharo/pull/10311

1 0

One PhD and two internships offers on object-centric debugging at Inria Lille
by Steven Costiou Nov. 9, 2021

Nov. 9, 2021

Hello, Inria Lille is recruiting one phd student and two interns to work on object-centric debugging within the OCRE project (ANR). DESCRIPTION OF THE PROJECT Debugging is difficult and costly. Object-centric debugging is a young technique arguing that focusing the scope of debugging on specific objects considerably eases the tracking and the understanding of hard bugs in Object-Oriented Programs (OOP). But it lacks fundamental bricks to be applicable in practice. Therefore, it has never been empirically evaluated. The objectives of the OCRE project are to study the fundamental and practical limits that hinder the implementation, the evaluation, and the adoption of object-centric debugging. We propose to build the first generation of object-centric debuggers, in order to identify and evaluate its real benefits to OOP debugging. We argue that these debuggers have the potential to drastically lower the cost (time and effort) of tracking and understanding hard bugs in OOP. PHD TOPIC The goal of this PhD is to understand and to achieve the full potential of object-centric debugging by: - identifying the precise scenarios for object-centric debugging, - studying means to obtain objects to debug, - studying the implementation requirements for object-centric debuggers and to implement prototypes, - evaluate empirically object-centric debugging using these prototypes. The full detailed offer is available here: https://jobs.inria.fr/public/classic/fr/offres/2021-04101 INTERNSHIPS These two internships aim at helping the design and the implementation of an object-centric debugger, by unveiling knowledge without which object-centric debuggers cannot be built and evaluated, or cannot be used in practice. Internship 1 - Identifying and acquiring objects to debug The objective of this internship is to study the practical problems of acquiring objects to debug. The intern will characterize the scenarios in which developers need to identify objects to debug and explore these scenarios by implementing prototypes. Internship 2 - Evaluating object-centric debugging scenarios The objective of this internship is to identify and to evaluate the debugging scenarios that are the most likely to benefit from object-centric debugging. The intern will interrogate real developers about object-centric debugging scenarios, then implement prototypes and evaluate them empirically with developers to validate these scenarios. ADMINISTRATIVE DETAILS Location: Lille, France Phd: - starting date: preferably october 2022, but it can start before. - duration: 3 years (fully funded) - the candidate must hold a Master or an equivalent degree Internships: - starting date: anytime - duration: 4-6 months - the candidate must be studying for a Master degree or equivalent (1st or 2nd year, equivalent to M1 or M2 in France)

1 0

This week (44/2021) on the Pharo Issue Tracker
by Marcus Denker Nov. 8, 2021

Nov. 8, 2021

We merged 16 PRs and closed 11 Issue tracker entries Speed + Features =============== - Added IdentitySet>>identityIncludes: for improved performance #10293 https://github.com/pharo-project/pharo/pull/10293 - Added offset-based copy method to ExternalAddress to parallel *offsetâ¦ #10285 https://github.com/pharo-project/pharo/pull/10285 Bugs ==== - 10280-Unimplemented-method-in-MemoryLogger-classwriteLoop #10310 https://github.com/pharo-project/pharo/pull/10310 Refactoring Engine =========== - Migrating RBRenamePackage into Refactoring2 #10164 https://github.com/pharo-project/pharo/pull/10164 - Small changes to make flow clearer. #10287 https://github.com/pharo-project/pharo/pull/10287 Cleanups ======== - 10150-obsoleteClasses--obsoleteBehaviors #10217 https://github.com/pharo-project/pharo/pull/10217 - Fix typos initialise => initialize #10305 https://github.com/pharo-project/pharo/pull/10305 - Typo in DiskFileSystemTest>>#testEntriesHaveAttributes #10303 https://github.com/pharo-project/pharo/pull/10303 - Consistently categorize #startUp: and shutDown: methods #10301 https://github.com/pharo-project/pharo/pull/10301 - Categorize TViewModel #10296 https://github.com/pharo-project/pharo/pull/10296 - More Small cleanups - class side initialize #10299 https://github.com/pharo-project/pharo/pull/10299 - Cleanup EndianDetector #10315 https://github.com/pharo-project/pharo/pull/10315 Tests ===== - Breakpoint-timeSpamp-unchanged-test #10324 https://github.com/pharo-project/pharo/pull/10324 - 10290-CI-ZnHTTPSTesttestGmailEncrypted-started-failing-on-the-CI #10308 https://github.com/pharo-project/pharo/pull/10308 - 10312-CI-Failing-test-NoUnusedVariablesLeftTest-due-to-RBPackageTransformation #10313 https://github.com/pharo-project/pharo/pull/10313 Pharo 9 backports ================== - P9 - Added offset-based copy method to ExternalAddress #10320 https://github.com/pharo-project/pharo/pull/10320

1 0

[ANN] Pharo Consortium New Academic Member: Ivan Franko National University of Lviv
by Marcus Denker Nov. 4, 2021

Nov. 4, 2021

The Pharo Consortium is very happy to announce that Ivan Franko National University of Lviv has joined the Consortium as an Academic Member, the platform of cooperation will be the Faculty of Applied Mathematics and Informatics. About - Faculty of Applied Mathematics and Informatics: https://ami.lnu.edu.ua/en/ - Pharo Consortium: http://consortium.pharo.org The goal of the Pharo Consortium is to allow companies and institutions to support the ongoing development and future of Pharo. Individuals can support Pharo via the Pharo Association: http://association.pharo.org/

1 0