- Pharo-dev - lists.pharo.org

confused about hanging pointer

by Ben Coman

Background: I'm looking into https://pharo.fogbugz.com/f/cases/19973/DarkTheme-tool-bar-icons Take for example UITheme>> windowMaximizeForm "Answer the form to use for the maximize button of a window." "self haltOnce." ^self forms at: #windowMaximize ifAbsent: [ "self haltOnce" Form extent: 10@10 depth: Display depth] If I uncomment the top haltOnce, and then right-click on an item in the bottom toolbar, a debug window shows up as expected. After changing the theme, I would expect "forms" to be nil. But uncommenting only the second haltOnce inside the block, then changing "System > Settings > Appearance > User interface theme" to white then back to dark, and then right-click on an item in the bottom toolbar, does *not* produce a debug window. Now upon booting a freshly downloaded 60469 image... Pharo3DarkTheme allInstances size "==> 1" then after changing System > Settings > Appearance > User interface theme to white then back to dark... Pharo3DarkTheme allInstances size "==> 2" Its almost like changing themes creating a new instance of Pharo3DarkTheme, but it doesn't get installed in the right places. Preliminary check... "Booted fresh 60469 image. Opened a playground." Pharo3DarkTheme allInstances collect: [:i | i identityHash -> i pointersTo size]. "{748241152->8}" "Opened System > Settings" Pharo3DarkTheme allInstances collect: [:i | i identityHash -> i pointersTo size]. "{748241152->14}" "1. Changed Appearance > User interface theme to white then back to dark" Pharo3DarkTheme allInstances collect: [:i | i identityHash -> i pointersTo size]. "{748241152->6. 954809088->12}" "2. Changed Appearance > User interface theme to white then back to dark" Pharo3DarkTheme allInstances collect: [:i | i identityHash -> i pointersTo size]. "{748241152->6. 954809088->1. 721110784->12}" "3. Changed Appearance > User interface theme to white then back to dark" Pharo3DarkTheme allInstances collect: [:i | i identityHash -> i pointersTo size]. "{748241152->6. 954809088->1. 721110784->1. 127158784->12}" "Closed settings window." Smalltalk garbageCollect. Pharo3DarkTheme allInstances collect: [:i | i identityHash -> i pointersTo size]. "{748241152->6. 127158784->12}" Pharo3DarkTheme allInstances first pointersTo inspect. Pharo3DarkTheme(UITheme)>>createCloseBoxFor: Pharo3DarkTheme(UIThemeWatery)>>createCollapseBoxFor: Pharo3DarkTheme(UIThemeWatery)>>createExpandBoxFor: Pharo3DarkTheme(UITheme)>>createCloseBoxFor: Pharo3DarkTheme>>createMenuBoxFor: For a moment I was confused, by seeing only five items, but of course the sixth was from the block variable "i". Question: What I really am confused about is, for example in... UITheme>>createCloseBoxFor: aSystemWindow "Answer a button for closing the window." ^(self newCloseControlIn: aSystemWindow for: aSystemWindow action: [aSystemWindow closeBoxHit] help: 'Close this window' translated) extent: aSystemWindow boxExtent I can't understand where in that method a pointer/reference could remain held. ??? cheers -ben

April 24, 2017

CfP: DLS 2017 - 13th Dynamic Languages Symposium, co-located with SPLASH 2017, October 24, Vancouver, British Columbia, Canada

by Nick Papoylias

************************************************************************************ CALL FOR PAPERS DLS 2017 - 13th Dynamic Languages Symposium Co-located with SPLASH 2017, October 24, Vancouver, British Columbia, Canada http://www.dynamic-languages-symposium.org/dls-17/index.html ************************************************************************************ >From Lisp, Snobol, and Smalltalk to Python, Racket, and Javascript, Dynamic Languages have been playing a fundamental role both in programming research and practice. The 13th Dynamic Languages Symposium (DLS) at SPLASH 2017 is the premier forum for researchers and practitioners to share research and experience on all aspects on Dynamic Languages. DLS 2017 invites high quality papers reporting original research and experience related to the design, implementation, and applications of dynamic languages. Areas of interest include but are not limited to: * Innovative language features * Innovative implementation techniques * Innovative applications * Development environments and tools * Experience reports and case studies * Domain-oriented programming * Very late binding, dynamic composition, and run-time adaptation * Reflection and meta-programming * Software evolution * Language symbiosis and multi-paradigm languages * Dynamic optimization * JIT compilation * Soft/optional/gradual typing * Hardware support * Educational approaches and perspectives * Semantics of dynamic languages * Frameworks and languages for the Cloud and the IoT Submissions must not have been published previously nor being under review at other events. Research papers should describe work that advances the current state of the art. Experience papers should be of broad interest and should describe insights gained from substantive practical applications. The program committee will evaluate each contributed paper based on its relevance, significance, clarity, and originality. Papers are to be submitted electronically at https://dls17.hotcrp.com/ in PDF format. Submissions must be in the ACM SIGPLAN Conference acmart Format, 10 point font, and should not exceed 12 pages. Please see full details in the instructions for authors available at: http://conf.researchr.org/track/dls-2017/dls-2017#Instructions-for-Authors DLS 2017 will run a two-phase reviewing process to help authors make their final papers the best that they can be. Accepted papers will be published in the ACM Digital Library and will be freely available for one month, starting two weeks before the event. Important dates --------------- * Friday May 26, 2017: abstract submission (strict, 23:59 AoE or UTC-12h) * Friday June 2, 2017: paper submission (strict, 23:59 AoE or UTC-12h) * Friday July 14, 2017: first phase notification * Friday August 11, 2017: final notification * Monday August 28, 2017: camera ready * Tuesday October 24, 2017: DLS AUTHORS TAKE NOTE: The official publication date is the date the proceedings are made available in the ACM Digital Library. This date may be up to two weeks prior to the first day of your conference. The official publication date affects the deadline for any patent filings related to published work. Program chair ------------- Davide Ancona, DIBRIS, University of Genova, Italy davide.ancona(a)unige.it Program committee ----------------- * Guillaume Baudart, Ãcole normale supÃ©rieure, France * Alexandre Bergel, University of Chile, Chile * Lorenzo Bettini, Dipartimento di Statistica, Informatica, Applicazioni âGiuseppe Parentiâ (DISIA), Italy * Carl Friedrich Bolz, Germany * Erik Ernst, Google Inc., Denmark * Marc Feeley, UniversitÃ© de MontrÃ©al, Canada * Matthew Flatt, University of Utah, United States * Paola Giannini, UniversitÃ del Piemonte Orientale, Italy * Robert Hirschfeld, HPI, Germany * Roberto Ierusalimschy, PUC-Rio, Brazil * Crista Lopes, University of California, USA * Scott Moore, Harvard University, USA * Nick Papoulias, IRD, UPMC, France * Sukyoung Ryu, KAIST, Korea, South * Chris Seaton, Oracle Labs, United Kingdom * Manuel Serrano, Inria, France * Zehra Sura, IBM Research, United States * Jan Vitek, Northeastern University, Switzerland

April 23, 2017

Re: [Pharo-dev] Security in the image

by phil＠highoctane.be

I was thinking of using Denis remote thing with an XMPP XEP so that we could IM our way into an image. That would be message passing. Coupled with a file transfer feature, well, could become interesting (and wild). That's On Sun, Apr 23, 2017 at 7:36 PM, Ben Coman <btc(a)openinworld.com> wrote: > On Sun, Apr 23, 2017 at 8:33 PM, phil(a)highoctane.be <phil(a)highoctane.be> > wrote: > > But what makes Pharo nice is also that there are no such limitations. > > > > There are security things in Pharo, like disabling socket acces etc. > > Maybe putting the VM in a true sandbox would be more adequate. > > That can be done in a lot of ways at the OS level. Think containers. > > > > Phil > > But that doesn't help us take over the world with *everyone* working > within the Giant-Single-Galactic-Image. mhahHaHaHAhaaaaa.... > cheers -ben > > > > > On Sun, Apr 23, 2017 at 1:33 PM, Guillermo Polito > > <guillermopolito(a)gmail.com> wrote: > >> > >> Generally speaking, and from my understanding, you will not be able to > do: > >> > >> SomeClass compile: 'initialize > >> MyEvilHack dostuff. > >> ^ super initialize ' > >> > >> In newspeak. > >> > >> And that's because you are not able to do: > >> > >> SomeClass compile: '...' > >> > >> Newspeak uses object capabilities, and following those principles, you > >> will only be able to compile and install code in a class, if somebody > gives > >> you a capability to do so. > >> > >> Then, the problem is that right now Pharo's reflective API is convoluted > >> with the base API, and thus from any piece of code you can do e.g.,: > >> > >> anyObject superclass superclass allSubclasses... > >> > >> A possible solution to this is to separate the reflective API from the > >> base API. > >> > >> On Sun, Apr 23, 2017 at 9:16 AM, Ben Coman <btc(a)openinworld.com> wrote: > >>> > >>> On Thu, Apr 13, 2017 at 3:54 PM, Denis Kudriashov < > dionisiydk(a)gmail.com> > >>> wrote: > >>> > > >>> > 2017-04-12 18:32 GMT+02:00 Ben Coman <btc(a)openinworld.com>: > >>> >> > >>> >> If you want hostile actors working directly within the Image with a > >>> >> full > >>> >> environment, then Pharo is probably not suitable. Its easy to get > >>> >> hold of > >>> >> global class from the Playground references and overwrite/compile > any > >>> >> method > >>> >> in the system like this... > >>> >> > >>> >> SomeClass compile: 'initialize > >>> >> MyEvilHack dostuff. > >>> >> ^ super initialize ' > >>> >> > >>> >> You might want to consider Newspeak, which runs on the same VM as > >>> >> Pharo > >>> >> and has a focus on security. > >>> > > >>> > > >>> > Interesting how they address your example? > >>> > >>> Not a direct response, but in Newspeak forum I see Gliad [1] respond > >>> to LaeMing... "Newspeak (note the capitalization) fits with your > >>> concerns around security and asynchrony, though the reality needs > >>> work. The main implementation runs on Smalltalk and as such is > >>> insecurable. There are less complete implementations based on > >>> compiling to Javascript and to the Truffle VM, and Ryan's Psoup VM, > >>> which is probably the most compliant version." > >>> > >>> [1] > >>> https://groups.google.com/forum/#!searchin/newspeaklanguage/laeming% > 7Csort:relevance/newspeaklanguage/0-20dj5m6wo/f5xpYnBFBgAJ > >>> > >>> cheers -ben > >>> > >> > > > >

April 23, 2017

Re: [Pharo-dev] Security in the image

by Ben Coman

On Sun, Apr 23, 2017 at 8:33 PM, phil(a)highoctane.be <phil(a)highoctane.be> wrote: > But what makes Pharo nice is also that there are no such limitations. > > There are security things in Pharo, like disabling socket acces etc. > Maybe putting the VM in a true sandbox would be more adequate. > That can be done in a lot of ways at the OS level. Think containers. > > Phil But that doesn't help us take over the world with *everyone* working within the Giant-Single-Galactic-Image. mhahHaHaHAhaaaaa.... cheers -ben > > On Sun, Apr 23, 2017 at 1:33 PM, Guillermo Polito > <guillermopolito(a)gmail.com> wrote: >> >> Generally speaking, and from my understanding, you will not be able to do: >> >> SomeClass compile: 'initialize >> MyEvilHack dostuff. >> ^ super initialize ' >> >> In newspeak. >> >> And that's because you are not able to do: >> >> SomeClass compile: '...' >> >> Newspeak uses object capabilities, and following those principles, you >> will only be able to compile and install code in a class, if somebody gives >> you a capability to do so. >> >> Then, the problem is that right now Pharo's reflective API is convoluted >> with the base API, and thus from any piece of code you can do e.g.,: >> >> anyObject superclass superclass allSubclasses... >> >> A possible solution to this is to separate the reflective API from the >> base API. >> >> On Sun, Apr 23, 2017 at 9:16 AM, Ben Coman <btc(a)openinworld.com> wrote: >>> >>> On Thu, Apr 13, 2017 at 3:54 PM, Denis Kudriashov <dionisiydk(a)gmail.com> >>> wrote: >>> > >>> > 2017-04-12 18:32 GMT+02:00 Ben Coman <btc(a)openinworld.com>: >>> >> >>> >> If you want hostile actors working directly within the Image with a >>> >> full >>> >> environment, then Pharo is probably not suitable. Its easy to get >>> >> hold of >>> >> global class from the Playground references and overwrite/compile any >>> >> method >>> >> in the system like this... >>> >> >>> >> SomeClass compile: 'initialize >>> >> MyEvilHack dostuff. >>> >> ^ super initialize ' >>> >> >>> >> You might want to consider Newspeak, which runs on the same VM as >>> >> Pharo >>> >> and has a focus on security. >>> > >>> > >>> > Interesting how they address your example? >>> >>> Not a direct response, but in Newspeak forum I see Gliad [1] respond >>> to LaeMing... "Newspeak (note the capitalization) fits with your >>> concerns around security and asynchrony, though the reality needs >>> work. The main implementation runs on Smalltalk and as such is >>> insecurable. There are less complete implementations based on >>> compiling to Javascript and to the Truffle VM, and Ryan's Psoup VM, >>> which is probably the most compliant version." >>> >>> [1] >>> https://groups.google.com/forum/#!searchin/newspeaklanguage/laeming%7Csort:… >>> >>> cheers -ben >>> >> >

April 23, 2017

Re: [Pharo-dev] Security in the image

by phil＠highoctane.be

But what makes Pharo nice is also that there are no such limitations. There are security things in Pharo, like disabling socket acces etc. Maybe putting the VM in a true sandbox would be more adequate. That can be done in a lot of ways at the OS level. Think containers. Phil On Sun, Apr 23, 2017 at 1:33 PM, Guillermo Polito <guillermopolito(a)gmail.com > wrote: > Generally speaking, and from my understanding, you will not be able to do: > > SomeClass compile: 'initialize > MyEvilHack dostuff. > ^ super initialize ' > > In newspeak. > > And that's because you are not able to do: > > SomeClass compile: '...' > > Newspeak uses object capabilities, and following those principles, you > will only be able to compile and install code in a class, if somebody gives > you a capability to do so. > > Then, the problem is that right now Pharo's reflective API is convoluted > with the base API, and thus from any piece of code you can do e.g.,: > > anyObject superclass superclass allSubclasses... > > A possible solution to this is to separate the reflective API from the > base API. > > On Sun, Apr 23, 2017 at 9:16 AM, Ben Coman <btc(a)openinworld.com> wrote: > >> On Thu, Apr 13, 2017 at 3:54 PM, Denis Kudriashov <dionisiydk(a)gmail.com> >> wrote: >> > >> > 2017-04-12 18:32 GMT+02:00 Ben Coman <btc(a)openinworld.com>: >> >> >> >> If you want hostile actors working directly within the Image with a >> full >> >> environment, then Pharo is probably not suitable. Its easy to get >> hold of >> >> global class from the Playground references and overwrite/compile any >> method >> >> in the system like this... >> >> >> >> SomeClass compile: 'initialize >> >> MyEvilHack dostuff. >> >> ^ super initialize ' >> >> >> >> You might want to consider Newspeak, which runs on the same VM as Pharo >> >> and has a focus on security. >> > >> > >> > Interesting how they address your example? >> >> Not a direct response, but in Newspeak forum I see Gliad [1] respond >> to LaeMing... "Newspeak (note the capitalization) fits with your >> concerns around security and asynchrony, though the reality needs >> work. The main implementation runs on Smalltalk and as such is >> insecurable. There are less complete implementations based on >> compiling to Javascript and to the Truffle VM, and Ryan's Psoup VM, >> which is probably the most compliant version." >> >> [1] https://groups.google.com/forum/#!searchin/newspeaklanguage/ >> laeming%7Csort:relevance/newspeaklanguage/0-20dj5m6wo/f5xpYnBFBgAJ >> >> cheers -ben >> >> >

April 23, 2017

Re: [Pharo-dev] Security in the image

by Guillermo Polito

Generally speaking, and from my understanding, you will not be able to do: SomeClass compile: 'initialize MyEvilHack dostuff. ^ super initialize ' In newspeak. And that's because you are not able to do: SomeClass compile: '...' Newspeak uses object capabilities, and following those principles, you will only be able to compile and install code in a class, if somebody gives you a capability to do so. Then, the problem is that right now Pharo's reflective API is convoluted with the base API, and thus from any piece of code you can do e.g.,: anyObject superclass superclass allSubclasses... A possible solution to this is to separate the reflective API from the base API. On Sun, Apr 23, 2017 at 9:16 AM, Ben Coman <btc(a)openinworld.com> wrote: > On Thu, Apr 13, 2017 at 3:54 PM, Denis Kudriashov <dionisiydk(a)gmail.com> > wrote: > > > > 2017-04-12 18:32 GMT+02:00 Ben Coman <btc(a)openinworld.com>: > >> > >> If you want hostile actors working directly within the Image with a full > >> environment, then Pharo is probably not suitable. Its easy to get hold > of > >> global class from the Playground references and overwrite/compile any > method > >> in the system like this... > >> > >> SomeClass compile: 'initialize > >> MyEvilHack dostuff. > >> ^ super initialize ' > >> > >> You might want to consider Newspeak, which runs on the same VM as Pharo > >> and has a focus on security. > > > > > > Interesting how they address your example? > > Not a direct response, but in Newspeak forum I see Gliad [1] respond > to LaeMing... "Newspeak (note the capitalization) fits with your > concerns around security and asynchrony, though the reality needs > work. The main implementation runs on Smalltalk and as such is > insecurable. There are less complete implementations based on > compiling to Javascript and to the Truffle VM, and Ryan's Psoup VM, > which is probably the most compliant version." > > [1] https://groups.google.com/forum/#!searchin/newspeaklanguage/laeming% > 7Csort:relevance/newspeaklanguage/0-20dj5m6wo/f5xpYnBFBgAJ > > cheers -ben > >

April 23, 2017

Re: [Pharo-dev] #renameTo: and #moveTo:

by Stephane Ducasse

Yes we should improve the primitive information return back to the image. On Fri, Apr 21, 2017 at 10:08 AM, Alistair Grant <akgrant0710(a)gmail.com> wrote: > On Thu, Apr 20, 2017 at 09:21:01PM +0200, Nicolas Cellier wrote: > > 2017-04-20 9:53 GMT+02:00 Alistair Grant <akgrant0710(a)gmail.com>: > > > > > What? Google this: man stat The first field of stat structure is > > > a device ID, so deciding if two files are on same file system or > > > not is doable by checking this field for the source file and > > > destination file (if it exists) or directory - modulo the fact > > > that you'd have to care of symbolic links with lstat. > > > > I meant from within the image. Also, while this is fine for > > Linux, and probably for MacOS, what about Windows? > > > > Ah, so it's more a Squeak/Pharo VM problem than a unix problem ;) You > > are right, there is a call to stat() in unix file plugin > > > > https://github.com/OpenSmalltalk/opensmalltalk- > vm/blob/Cog/platforms/unix/plugins/FilePlugin/sqUnixFile.c > > > > but the device info is not passed back to the image... Too bad! > > But it should be a straightforward extension. I think I'll ask on > vm-dev if anyone objects to me adding this extension. > > Thanks for pointing this out! > > Cheers, > Alistair > > > > As for windows, it's not a problem, there is a rename function that > > would move files across devices (but not directories!) See rename() on > > msdn https://msdn.microsoft.com/en-us/library/zw5t957f.aspx > >

April 23, 2017

Re: [Pharo-dev] Security in the image

by Ben Coman

On Thu, Apr 13, 2017 at 3:54 PM, Denis Kudriashov <dionisiydk(a)gmail.com> wrote: > > 2017-04-12 18:32 GMT+02:00 Ben Coman <btc(a)openinworld.com>: >> >> If you want hostile actors working directly within the Image with a full >> environment, then Pharo is probably not suitable. Its easy to get hold of >> global class from the Playground references and overwrite/compile any method >> in the system like this... >> >> SomeClass compile: 'initialize >> MyEvilHack dostuff. >> ^ super initialize ' >> >> You might want to consider Newspeak, which runs on the same VM as Pharo >> and has a focus on security. > > > Interesting how they address your example? Not a direct response, but in Newspeak forum I see Gliad [1] respond to LaeMing... "Newspeak (note the capitalization) fits with your concerns around security and asynchrony, though the reality needs work. The main implementation runs on Smalltalk and as such is insecurable. There are less complete implementations based on compiling to Javascript and to the Truffle VM, and Ryan's Psoup VM, which is probably the most compliant version." [1] https://groups.google.com/forum/#!searchin/newspeaklanguage/laeming%7Csort:… cheers -ben

April 23, 2017

GSOC Mentors - We need you.

by Serge Stinckwich

Dear mentors, we are currently reviewing all the students proposals. Please join the #gsoc-planning on Discord for giving your insights about the students. The deadline for the final selection will be Monday 24th 6pm CEST. As a reminder, we have 5 slots given by Google this year. Regards, -- Serge Stinckwich UCN & UMI UMMISCO 209 (IRD/UPMC) Every DSL ends up being Smalltalk http://www.doesnotunderstand.org/

April 22, 2017

Re: [Pharo-dev] Help browser topic ordering

by Juraj Kubelka

> El 22-04-2017, a las 01:04, Ben Coman <btc(a)openinworld.com> escribiÃ³: > > What is it that defines the ordering of topics in the help browser? > > I see slice 19963 added a "Travis Integration" topic into build 60468 > http://forum.world.st/pharo-project-pharo-core-7bde98-60468-td4942945.html > This is an error that Alexandre likely forgot to submit, because I was with him, when we noticed it and fixed it. > and its ended up at the top of the list above "Welcome", > but I determine from the slice or other existing help topics > where the order is defined? It is ordered by topic name, but you can notice that Welcome Help has String withValue: 0 at the beginning in order to be the first. Juraj > > cheers -ben >

April 22, 2017