September 2021 - Pharo-dev - lists.pharo.org

Recommendation for password encryption?
by Mariano Martinez Peck Sept. 30, 2022

Sept. 30, 2022

Hi guys. Some time ago I asked about the best way to encrypt a password. Some of the recommendations I got was: 1) Generally for passwords you do not write a decrypt method for security purposes (eg you do not want people to be able to reverse engineer the encrypted password easily) 2) put a little salt 3) There is http://www.squeaksource.com/Cryptography/PasswordHashingFFI 4) I should not decrypt password but instead I should compare both encrypted versions to see if they are equal. My scenario is the following. I need to store database passwords in text files. So I don't want to let them as plain text. And while I understand 4), I think it's a different scenario than mine. I know that some database driver may allow you to directly send the encrypted password. But still...I have another similar scenario in which I have to store a password and then send it (unencrypted)...so I kind of really need a bi-directional encryption. Now..I would try to avoid having an external library + FFI. Any ideas what is the best thing I can do? And how could I solve 1) if I want bidirectional like in my case? Thanks in advance, -- Mariano http://marianopeck.wordpress.com

9 26

one year contract
by stephane ducasse Dec. 14, 2021

Dec. 14, 2021

Hello this is a one year contract with remote working possibility in Pharo of course. We will produce an english version. Please contact Nicolas Becu. Nicolas Becu <nicolas.becu(a)cnrs.fr> _____________ Nicolas Becu Chercheur CNRS Littoral Environnement et SociÃ©tÃ©s (UMR LIENSs) TÃ©l : 05 16 49 67 94 S

2 1

Hardening Zinc's Core HTTP Server
by Sven Van Caekenberghe Dec. 2, 2021

Dec. 2, 2021

Hi, Zinc HTTP Components [https://github.com/svenvc/zinc] has been a part of Pharo since version 1.3 (2011). It is an open-source framework to deal with the HTTP networking protocol, modelling all aspects involved. It also offers both client and server functionality. The reliability of the code base has improved steadily over the years, thanks to virtually all Pharo developers using it, directly or indirectly. Over the summer a number of issues that popped up after Pharo 9 was released were resolved. The robustness of the core HTTP server is one important aspect. To put this quality further to the test, I deployed two servers with the same demo Seaside application, Reddit.st, open to the internet, without any further protections. - On Amazon AWS: http://34.245.183.130:1701 - On Microsoft Azure: http://51.137.72.94:8080 The application's source code can be found at [https://github.com/svenvc/Reddit] For the technically curious there are also deploy instructions at [https://github.com/svenvc/Reddit/blob/main/DEPLOY.md] The demo app itself is described in an older article [https://medium.com/@svenvc/reddit-st-in-10-cool-pharo-classes-1b5327ca0740] Note that, by definition, there is no HTTPS/TLS variant. If you manage to break this server with (a) malicious request(s) in such a way that you can explain what you did for others to confirm your approach, you not only help me/us improve the code, but earn eternal fame as well ;-) Sven PS: I hope I won't regret this, I am looking for constructive criticism. -- Sven Van Caekenberghe Proudly supporting Pharo http://pharo.org http://association.pharo.org http://consortium.pharo.org

3 8

Ephemeron Status?
by sean＠clipperadams.com Oct. 10, 2021

Oct. 10, 2021

What is the status of ephemerons/weakly held objects? Is this fully working or are there still limitations/gotchas? I have lost track

3 3

in the quest of cutOn:
by stephane ducasse Sept. 29, 2021

Sept. 29, 2021

'abcDef' splitOn: [ :c | c isUppercase ] >>> âabcâ âefâ but I need 'abcDef' splitOn: [ :c | c isUppercase ] >>> âabcâ âDefâ :(

2 2

Git Method Timestamps
by sean＠clipperadams.com Sept. 27, 2021

Sept. 27, 2021

What is the git equivalent to `CompiledCode>>#timeStamp`? (which returns an empty string)

2 2

This week (38/2021) on the Pharo Issue Tracker
by Marcus Denker Sept. 24, 2021

Sept. 24, 2021

We merged 38 pull requests and fixed 26 issues. Pharo9 ====== update Spec version to v1.0.3 and NewTools to v0.6.10 #9974 https://github.com/pharo-project/pharo/pull/9974 BACKPORT-6311-Enhance-Completion-to-be-more-fluid-in-large-images #10003 https://github.com/pharo-project/pharo/pull/10003 - Backport: Pharo 9 + Seaside - Process dying on cloud instance #9987 https://github.com/pharo-project/pharo/pull/9987 Remove Deprecated and Dead Code =============================== - Cleanup methods declared as deprecated #10013 https://github.com/pharo-project/pharo/pull/10013 - Redo #9845 -- Fix 9798: Deprecated class TextConverter is still used #10012 https://github.com/pharo-project/pharo/pull/10012 - cleanup-Display-and-Cursor #9889 https://github.com/pharo-project/pharo/pull/9889 - Cleanup-Duplicated-Methods-09-18 #9989 https://github.com/pharo-project/pharo/pull/9989 - Cleanup: remove unreferenced deprecated class in Spec-Deprecated #9997 https://github.com/pharo-project/pharo/pull/9997 - Cleanup-Deprecated-Spec-Examples-Tests #9975 https://github.com/pharo-project/pharo/pull/9975 - Cleanup-Duplicated-Methods-09-17 #9978 https://github.com/pharo-project/pharo/pull/9978 Speed ===== - 6311-Enhance-Completion-to-be-more-fluid-in-large-images #10002 https://github.com/pharo-project/pharo/pull/10002 - do not re-parse in ReShouldSendSuperSetUpAsFirstMessage and ReShouldSendSuperTearDownAsLastMessage #9988 https://github.com/pharo-project/pharo/pull/9988 Features ======== - String #beginsWith:caseSensitive and #endsWith:caseSensitive: #9960 https://github.com/pharo-project/pharo/pull/9960 Refactoring Tools ================== - Migrating RBMoveMethodToClassRefactoring to RBMoveMethodToClassTransformation #9945 https://github.com/pharo-project/pharo/pull/9945 - Migrated RBTemporaryToInstanceVariableRefactoring to RBTemporaryToInsâ¦ #9944 https://github.com/pharo-project/pharo/pull/9944 Fixes ====== - 9961-cleanup-and-support-CompiledMethodLayout-in-CDClassDefinitionParserhandleClassNamewithType #10022 https://github.com/pharo-project/pharo/pull/10022 - 9936-MCClassDefinitionkindOfSubclass-wrong-for-user-defined-layouts #9939 https://github.com/pharo-project/pharo/pull/9939 - Fix ZnBufferedReadStream>>#setToEnd for ZipArchive usage #8658 https://github.com/pharo-project/pharo/pull/8658 - Fix #8524: Fix Process>>#priority: incorrectly allowing lower priority process run while â¦ #10004 https://github.com/pharo-project/pharo/pull/10004 - Fix #7634: Use "Smalltalk vm wordSize" to determine the version of the VM: 32 or 64 #10008 https://github.com/pharo-project/pharo/pull/10008 - fix: #9992 add pharo10 for metacello #9994 https://github.com/pharo-project/pharo/pull/9994 - 9965-CI-ZipArchiveTesttestArchiveWithThousandFilesShouldWork-sometimes-times-out #9969 https://github.com/pharo-project/pharo/pull/9969 - 9933-isDeprecated-should-not-check-for-the-category #9981 https://github.com/pharo-project/pharo/pull/9981 - Pharo 9 + Seaside - Process dying on cloud instance #9986 https://github.com/pharo-project/pharo/pull/9986 - Improve UI manager to allow testing by reacting to notifications #9979 https://github.com/pharo-project/pharo/pull/9979 - 9925-Defining-variables-in-the-debugger-DNU-isForScripting #9926 https://github.com/pharo-project/pharo/pull/9926 - Improve the flaky test for the ProcessMonitorTestService #9976 https://github.com/pharo-project/pharo/pull/9976 Cleanup ======= - Fixes #9972: SycSourceCodeRefactoringCommand should be tagged abstract #9977 https://github.com/pharo-project/pharo/pull/9977 - cleaning-up-workaround in copyTo: #10006 https://github.com/pharo-project/pharo/pull/10006 - 9970-ReConsistencyCheckRule-is-a-very-bad-name #9998 https://github.com/pharo-project/pharo/pull/9998 - Fix: #7974 deprecate openAndTruncateForWriteFile: #10009 https://github.com/pharo-project/pharo/pull/10009 - Small cleanups - class side initialize and other #9883 https://github.com/pharo-project/pharo/pull/9883 - Release test for #basicNew categorization #9897 https://github.com/pharo-project/pharo/pull/9897 - Improve ProperClassCategorizationTest>>#testProperClassTagCasing #9858 https://github.com/pharo-project/pharo/pull/9858 - [Enable Flaky Tests] Enable continuation flaky test #6768 https://github.com/pharo-project/pharo/pull/6768 - 9955-add-comments-to-mcType-subclassDefiningSymbol-kindOfSubclass #9983 https://github.com/pharo-project/pharo/pull/9983

1 0

About punishment vs. help
by stephane ducasse Sept. 22, 2021

Sept. 22, 2021

Hi guys I would like to have mindset revolution. I would like that Pharo HELPS us to produce good code and not just PUNISH us when we do mistakes. Let me show you an example. I write a little method and as a good and nice programmer I place my little utility method in the utilities protocol. I commit and then I get a FAILED ERROR RED BAR telling that Iâm an asshole because I did not place that &*T^(^&(* method in utils. Something that Cop stuff is not even able to tell me precisely what is the problem There is a method in class X that use an undefined instance variables. I always thought that computers were about doing clever stuffâ¦ but the Cop inside Pharo proves me the inverse. I wonder why instead of investing in stupid rule we do not invest in building simple tool that do the job for us. Why the system cannot recategorise the method for me. Why the system does not remove the unused variable automatically prompting before I commit. Oh my dear StÃ©phane I saw that you left this horrible unused instance variable, do you want me to clean for you? Yes be my guest. This is why I invested by improving the automatic categorizer. This is why I did a tool to analyse the frequency of methods in terms of their protocol and you can ask the tool please fix all badly categorized methods. https://github.com/Ducasse/MethodCategorizer/blob/master/MethodCategorizer/… This is always why I HATE all these %^&*^&(&*^&*(%^(& warnings that get into my way when the system could fix them for me in no time. SO THIS IS A CALL FOR A CHANGE OF PARADIGM Can Pharo help me in my development instead of bitting me? Can we STOP adding more and more dull rules and produce something that HELP US? https://github.com/Ducasse/MethodCategorizer/blob/master/MethodCategorizer/… THIS IS NOT BECAUSE WE HAVE A HAMMER THAT WE SHOULD NAIL EVERYTHING. THIS IS OUR DUTY TO INVENT NEW TOOLS AND NEW WAYS TO HELP DEVELOPERS! S.

1 0

his week (37/2021) on the Pharo Issue Tracker
by Marcus Denker Sept. 17, 2021

Sept. 17, 2021

We merged 10 Pull Requests and closed 7 Issue tracker entries this week. Cleanup: Dead Code =================== Cleanup of Deprecated and useless code continues. - Cleanup-tests-fullblocks #9930 https://github.com/pharo-project/pharo/pull/9930 - Cleanup-Deprecated-09-15 #9967 https://github.com/pharo-project/pharo/pull/9967 - Cleanup-deprecated-09-14 #9957 https://github.com/pharo-project/pharo/pull/9957 - Cleanup-Duplicated-Methods-09-14 #9958 https://github.com/pharo-project/pharo/pull/9958 Fixes ===== Man focus of fixing has been the ClassParser and cleanups related to class layouts so the same mistakes will be harder to do in the future. - 9948-OCRequestorScope-does-not-like-empty-variable-names #9952 https://github.com/pharo-project/pharo/pull/9952 - 9924-CDBehaviorDefinitionNode-uses-subclassDefiningSymbol-not-unique #9959 https://github.com/pharo-project/pharo/pull/9959 - 9909-Deprecate-typeOfClass-and-kind-and-add-mcType-instead #9923 https://github.com/pharo-project/pharo/pull/9923 - CDSlotNode-NoIndex #9949 https://github.com/pharo-project/pharo/pull/9949 Speed ===== - NoSymbolCreation-hasPackageMatchingExtensionName #9941 https://github.com/pharo-project/pharo/pull/9941 Cleanups ======== - Fixes #9972: SycSourceCodeRefactoringCommand should be tagged abstract #9977 https://github.com/pharo-project/pharo/pull/9977

1 0

This week (36/2021) on the Pharo Issue Tracker
by Marcus Denker Sept. 14, 2021

Sept. 14, 2021

A bit lateâ¦ so this is for last week. Dead Code Cleanup: Deprecated Code ================= Ongoing: removing deprecated methods and unused code in general - 9888-FFI-remove-gcpointer #9903 https://github.com/pharo-project/pharo/pull/9903 - 9905-Cleanup-Remove-EyeInspector #9906 https://github.com/pharo-project/pharo/pull/9906 - 9879-AthensCairoSurface-deprecated-methods-still-have-senders #9902 https://github.com/pharo-project/pharo/pull/9902 - Remove-Deprecated-09-03 #9887 https://github.com/pharo-project/pharo/pull/9887 - Remove unnecessary #new methods #9893 https://github.com/pharo-project/pharo/pull/9893 Old Bytecode Set / non full block cleanup ========================================== The idea is that Pharo10 will not support the old Bytecode Set and will only support full blocks. This simplifies the compiler and makes testing simpler, too. - Cleanup-Compiler-remove-tests-optionFullBlockClosure #9910 https://github.com/pharo-project/pharo/pull/9910 - 9928-Do-not-use-optionFullBlockClosure-in-OCASTTranslatorvisitBlockNode #9942 https://github.com/pharo-project/pharo/pull/9942 Fixes ===== - 9901-Fluid-Class-Parser-gets-wrong-symbols-from-the-layout-kind #9908 https://github.com/pharo-project/pharo/pull/9908 - Pharo10 - 9038-windows edges grabbing for resizing not optimal #9920 https://github.com/pharo-project/pharo/pull/9920 - 9308 code critics improving critic description api change api hints architectural #9426 https://github.com/pharo-project/pharo/pull/9426 Improvements ============= - enhance code changes browser a little bit #9937 https://github.com/pharo-project/pharo/pull/9937 - another small improvement in the UI of code changes #9940 https://github.com/pharo-project/pharo/pull/9940 - 9877-SmalltalkImagepackages-should-not-sort #9904 https://github.com/pharo-project/pharo/pull/9904 - Rewrote and improved String >> skipAnySubstring:startingAt: #9277 https://github.com/pharo-project/pharo/pull/9277 Cleanup ======= - modify Spec2-Common-Widgets dependencies #9911 https://github.com/pharo-project/pharo/pull/9911 - Align and cleanup two #new methods (AthensCanvas, ClapDocument) with â¦ #9891 https://github.com/pharo-project/pharo/pull/9891 - Reenable FFICallbackTest on Windows #9529 https://github.com/pharo-project/pharo/pull/9529 Documentation ============== - Expand String class comment. #9900 https://github.com/pharo-project/pharo/pull/9900 Pharo 9 ======= - 9038-Windows-edges-grabbing-for-resizing-not-optimal #9917 https://github.com/pharo-project/pharo/pull/9917

1 0