March 2013 - Pharo-users - lists.pharo.org

RFBServer>>#encryptPassword: wipes the password thats passed in and I'm confused why that's ok.
by Paul DeBruicker March 13, 2013

March 13, 2013

IF I load the RFB package from lukas's site[1] (Pharo 1.4, recent enough VM, linux) and set the RFB server's fullPassword like this: MyObject>>startRFB RFBServer current setFullPassword: self rfbPassword MyObject>>rfbPassword ^'1234' After that send the source of rfbPassword shows '1234' but the bytecodes show that it is '' and the apparently empty string is 8 bytes long with each character being (Character value:0) #setFullPassword: uses #atAllPut: to set the value of #rfbPassword to 'Character value: 0'. My concerns are these: 1. Using the current implementation its impossible to stop and restart the RFB server with a default password programmatically. 2. The implementation is not idempotent when starting/stopping. 3. I don't understand the security consequences of removing the part where the password sent to #encryptPassword: is set to NULL characters. Is wiping the values of the #rfbPassword method necessary for security reasons? I assume that setting the RFB server to only accept connections from localhost and using X forwarding would take care of most of the risk of having a string literal in the image. Or- should I be accessing a default RFB password from another source than a class side method in the image? Is there a standard practice for starting and stopping the RFB server in Pharo 1.4 where the RFB server is up and down during the time the image is up? Thanks for any advice Paul 1 - The change was from this package: RFB-MiguelCoba.26.mcz from this repo: http://source.lukas-renggli.ch/unsorted

1 1

about communication and collaboration
by StÃ©phane Ducasse March 12, 2013

March 12, 2013

Dear Pharoers last january I visited another lab and I realised that the Pharo Team was not good at systematically telling what we were doing. I got quite frustrated by that situation, especially because we are working hard to build a better system. So we brainstormed when I came back and we want to apply the same ideas that what we do for our research team. For our research team every monday we get a simple mail that tell us to say to the others what we did and what we plan to do. Simple, easy. Then after people of the rmod team can discuss if they want more. We want to do the same with pharo. Often this is not that we are not doing things. Often we are doing boring, tedious stupid but $^%&&*^ important tasks and we want that you know it. In addition we want to share on what we are weekly working. So that you can be more engaged to join and collaborate with us. So we will launch an experience and see. For now we will send a notification every two weeks. the Pharo Team

2 1

NeoCSV/NeoJSON and encodings
by Esteban A. Maringolo March 12, 2013

March 12, 2013

Hi all, Sven, I would like to know what is the proper way (steps) to parse a UTF-8 encoded CSV file, which will store most of the strings into domain objects instVars which will get mapped back to JSON and send trough the wire by means of a Seaside RESTful Filter. I haven't specified any encoding information during the input or the output, and then I'm not seeing the right characters in the inspectors (I expected that), nor in the JSON output or the Seaside HTML output. The Zinc server adaptor has its default codec, it is, utf-8. -- View this message in context: http://forum.world.st/NeoCSV-NeoJSON-and-encodings-tp4676067.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

2 3

Re: [Pharo-users] [Pharo-project] about communication and collaboration
by stephane ducasse March 12, 2013

March 12, 2013

On Mar 12, 2013, at 4:48 PM, Serge Stinckwich <serge.stinckwich(a)gmail.com> wrote: > On Tue, Mar 12, 2013 at 4:02 PM, StÃ©phane Ducasse > <stephane.ducasse(a)inria.fr> wrote: >> Dear Pharoers >> >> last january I visited another lab and I realised that the Pharo Team was not good at systematically telling what we were doing. >> I got quite frustrated by that situation, especially because we are working hard to build a better system. >> So we brainstormed when I came back and we want to apply the same ideas that what we do for our research team. >> >> For our research team every monday we get a simple mail that tell us to say to the others what we did and what we >> plan to do. Simple, easy. >> Then after people of the rmod team can discuss if they want more. > > It looks like quite an interesting idea in a research team. Do you a > have a description somewhere how it works ? > This is similar to a standup meeting ? we tried but a stand up meeting failed with us. So we just have a mail what you have done what you will do Stfe > > Regards, > -- > Serge Stinckwich > UCBN & UMI UMMISCO 209 (IRD/UPMC) > Every DSL ends up being Smalltalk > http://doesnotunderstand.org/ >

1 0

Pharo 1.4 Unable to download from HTTPS Monticello repository
by Federico.Balaguer March 12, 2013

March 12, 2013

Hello I am having problems downloading packages from a HTTPS Monticello repository. The image has Zodiac installed. I am able to upload versions but I cannot download them. I am able to download the packages from a web-browser, Using the Monticello Browser I can browse the content of the given repository. When I select any package on the repository a debugger pops up: "MNU: Character>>bitOr:" I do not see how to fix the problem, at some point, MCMczReader>>zip calls Zip>>readFrom: calls Zip>>readEndOfCentralDirectoryFrom: calls ReadStream>>nextLittleEndianNumber: calls SmallInteger>>bitOr: with a Character as parameter which makes the <primitive 15> to fail. I can try to fix the problem but I would need a little help to understand the root of the problem. Federico -- View this message in context: http://forum.world.st/Pharo-1-4-Unable-to-download-from-HTTPS-Monticello-re… Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

2 3

does MongoTalk implement modifier operators? e.g. $set
by Sabine KnÃ¶fel March 12, 2013

March 12, 2013

Hi, I managed reading and writing my model (e.g. Person objects) into MongoDB with MongoTalk. But I did use replace:with: e.g. "get person from db with OID - this is a dictionary with ALL OLD fields of the person as stored in the database" thePersonFromDatabaseDict := (self personsCollection queryOne: [ :query | query where: {('_id' -> aPerson mongoObjectId )} asDictionary ]) theNewDict := aPerson mongoDataDict "dictionary with the NEW fields for this person" self personsCollection replace: thePersonFromDatabaseDict with: theNewDict Which means I replace the whole person object in the database with my current instance data in the image. Also it is much overhead creating the dictionary with all fields from the person in the image. This is not ok, when I want to set e.g. one field in the person object. For this reason I want to use the "Modifier operators", e.g. $set http://docs.mongodb.org/manual/applications/update/ >From there: "Update a Field in a Document. Use $set to update a value of a field. The following operation queries the bios collection for the first document that has an _id field equal to 1 and sets the value of the field middle, in the subdocument name, to Warner: db.bios.update( { _id: 1 }, { $set: { 'name.middle': 'Warner' }, } ) *I did not find how to use this in MongoTalk. I can not imagine that this functionality is missing but I don't know how to create this from Mongotalk. Unfortunately there is no documentation and as far as I understand there are no test cases for update modifiers.* So, can anyone give me a code snippet how to use update modifiers in Mongotalk? Sabine -- View this message in context: http://forum.world.st/does-MongoTalk-implement-modifier-operators-e-g-set-t… Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

4 10

GSoC13 projects
by Paul Davidowitz March 11, 2013

March 11, 2013

Are the GSoC13 projects open to the general Smalltalking public, or are they only for students? Some of the projects sound quite interesting!

2 1

HTML5 Parser
by Mohammad Al Houssami (Alumni) March 11, 2013

March 11, 2013

Hello again, Im building an HTML5 Parser in smalltalk. Im building it according to the pseudo code provided by WHATWG mainly these: Tokenization: http://www.whatwg.org/specs/web-apps/current-work/multipage/tokenization.ht… Tree Construction: http://www.whatwg.org/specs/web-apps/current-work/multipage/tree-constructi… Im still in the Tokenization phase. The spec defines a state machine. It describes what has to be done when we reach a certain state. My approach to building the tokenizer is by representing each state as a method. Each method does some operations ( calling other methods to represent changing state or returning tokens etc..) I will be translating the pseudo code provided as is to Smalltalk. I am not sure if this is the best approach to do things especially that I am still new to Smalltalk. I was told by Stephane Ducasse to use PetitParser. Doing a quick reading I noticed that it is used when grammars are available. In my case I don't have a grammar but pseudo-code of a parser. Can I know if anyone has any suggestions for such a project or any comments on the approach I am aiming to follow ? Thanks in advance, Mohammad

2 1

Pharo .image loading issues.
by Mohammad Al Houssami (Alumni) March 11, 2013

March 11, 2013

Hello All Im working on an HTML5 parser in smalltalk as part of my postgraduate project. Im completely new to pharo and smalltalk and I've been working with it for around a week now. It was the first time I close pharo. I was trying to load the image file but I couldn't and pahro was complaining with errors. This is what I get: [cid:image002.jpg@01CE1DC1.989EA330] If I keep on clicking proceed I get to this: [cid:image003.jpg@01CE1DC8.19CEEFE0] I have no idea at all why this is happening. This is the first time I load the image to pharo. What I did was I opened the image file with pharo. Im not sure if this might be causing the problem. Any help would really be appreciated. Thank You

6 16

VeriMeta&PharoLauncher: semi-auto metacello verification
by HwaJong Oh March 10, 2013

March 10, 2013

It is important to see the overall quality of your metacello configuration. Metacello is there to for programmer to guarantee to the user about the success of installation. Your metacello configuration loses trust everytime it fails to install or not all unittest passes. With VeriMeta & PharoLauncher, you can check for each spec(or package) if it succeeds to install and all the unittest in it passes or not, or if there is no unittest. Watch the video below in fullscreen mode and 1080p. http://www.youtube.com/watch?v=kYYgDVY8Dqc Best Regards HwaJong Oh -- View this message in context: http://forum.world.st/VeriMeta-PharoLauncher-semi-auto-metacello-verificati… Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

2 1