December 2016 - Pharo-users

FFI on MacOS 10.12 using Pharo 5

by jjjhhh

Hello, I need help rescuing code that has dependencies on FFI. I just downloaded the latest Pharo 5 vm in order to run Pharo under MacOS 10.12. Now the FFI-based code in my image no longer works (or is viewable). What worked before (for years, up through MacOS 10.11) is as follows: I have a 32-bit lib (i386) called ThePlugin.bundle (C code compiled w/ Xcode). I put it in Pharo.app/Contents/MacOS/Contents/Plugins/. The lib has a C function like: int someNumber() { return 123; } In Smalltalk I have a class ThePluginFFI with the class method: someNumber <cdecl: int 'someNumber' () module: 'ThePlugin'> ^self externalCallFailed And if I typed "ThePluginFFI someNumber" I got 123 Now I get "External module not found". If I try to view the method "someNumber" I get an MNU from RBFFLCallPragma>>selectorParts (receiver of "keywords" is nil), and the image hangs. I tried rewriting the method someNumber to look like this: someNumber ^self ffiCall: #( int someNumber() ) module: ThePlugin uniqueInstance where ThePlugin is a subclass of FFILibrary with an instance method: macModuleName ^'ThePlugin.bundle' but this still gets "External module not found" Is there some new way of doing all this? Or some new trick to loading libraries (I tried dylibs as well as bundles). I couldn't find a recent summary/update. Thanks for any help! Jay -- View this message in context: http://forum.world.st/FFI-on-MacOS-10-12-using-Pharo-5-tp4927537.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

Dec. 20, 2016

Re: [Pharo-users] [Vm-dev] Integrated decentralized localized social networks (was Re: ptsd rage)

by Charlie Robbats

Consider words from the street. All those potential Pharo users! https://www.youtube.com/watch?v=jMnLHmTXjgU&list=PLJiUTrmz_5UMkFsdjCRJD0bpR… On 12/19/2016 8:11 PM, Charlie Robbats wrote: > > This is how I deal with ptsd. Change the system. > > > On 12/19/2016 8:08 PM, Charlie Robbats wrote: >> >> >> >> Which I have done over the years, used other venues for peaceful >> warfare. Sorry to disturb you. The 20th century model of society is >> stale and dated. Look at all the damage done to people for no good >> reason. We can effect change through technology. What kind of change? >> Something that leverages modern computing, including the blockchain >> for trusted interactions, lots of hand-held IoT devices combined into >> a massive decentralized computational network, leaving REST services >> behind and presenting functional semantics with robust data >> marshaling. With these capabilities, transform the way physical >> interactions occur. I like to term what I am seeing as virtualizing >> physicality & physicalizing virtuality. >> >> Is Pharo just aiming to be a better WebApp? That market is totally >> saturated. Pharo's/Squeak's strengtsh are robust dynamic presentation >> of information in graphical form and interconnectivity. Let us >> leverage that. Smalltalk is perfectly positioned to define the next >> transformation, because it is the only language system designed to be >> online 24/7, exactly what is needed for a massive decentralized >> computer with dynamic un/loading. I merely made a few comments >> regarding some of the practical functional requirements around the >> security facet of the new system. >> >> My apologies if you felt it was inappropriate. I think you were >> concerned it may get further out of hand and I do not disagree with >> you. Let's collect functional requirements for how this new social >> network will interact with personalized locality. This is my >> proposition. Why, we could eliminate prisons, massively reducing >> mental illness and eliminate collective confrontation. I believe >> completely, with all my heart, that this is in the original spirit of >> Smalltalk, but I cannot speak for the founders, this is my belief. >> >> Thank you for your thoughts, I did not mean to offend or go so far >> astray. >> >> Charlie >> >> On 12/19/2016 7:17 PM, Brad wrote: >>> Don't know about anyone else, but I would appreciate it if this kind >>> of commentary never made it to this email list. This topic is so >>> inappropriate. Let's keep the discussion about Pharo. If you feel >>> you must go down the political route, then please be gracious enough >>> to find another venue. >>> >>> Brad Selfridge >>> 913-269-2385 >>> >>> On Dec 19, 2016, at 6:48 PM, Charlie Robbats >>> <charlie.robbats(a)gmail.com <mailto:charlie.robbats@gmail.com>> wrote: >>> >>>> Alright, one more sad observation. Of all the Law Enforcement >>>> violence, either perpetrated by LEOs against citizens or by >>>> citizens against LEOs, in all cases I am aware or recall having >>>> heard, all of these involve police officers. No violence, or very >>>> little, is perpetrated against or by Sheriff Deputies. As counties >>>> are a good and proper and consistent scope of crime administration, >>>> regardless of the density, police ought to report to the Sheriffs >>>> and let's put and end to broken windows policy and discriminatory >>>> enforcement. Police are always in our shit, and have their egos to >>>> boot. Sheriff Deputies, by comparison, are laid back and easy to >>>> talk to. They engage the public in respect, without attitude. >>>> >>>> Bob didn't shoot the deputy. >>>> >>>> On 12/17/2016 10:11 PM, Charlie Robbats wrote: >>>>> >>>>> Last bit, a mantra: Crime & Punishment creates massive mental >>>>> illness in our society. Ask the Russians. >>>>> >>>>> >>>>> On 12/17/2016 10:05 PM, Charlie Robbats wrote: >>>>>> >>>>>> >>>>>> >>>>>> Well, my paranoia is kicking. I spoke too broadly of police, I >>>>>> have interacted with many and they do a lot of good. A bad apple >>>>>> spoils the whatever and their code of silence allows for that >>>>>> sort of rot. I tell it straight, because they monitor the list. I >>>>>> pissed them off! Do you think it passed the sanity test that cops >>>>>> run all street drugs with their felon database in hand? Damn! All >>>>>> those Fellas are going to turn and bite their masters' hand, you >>>>>> watch! Stacking these grown men like Twinkies in overcrowded >>>>>> prisons. There is a debt that needs to be paid and the righteous >>>>>> are those in prison on a bunch of bullshit paper. Vive la >>>>>> revolucion! Ok, sorry I went political. I am done. >>>>>> >>>>>> >>>>>> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>>>>>> >>>>>>> I am sad with you in your diagnosis. I get that too, the blues. >>>>>>> I get high if I am holding and listen to "Kind of Blue" or deep >>>>>>> house or reggae. Some X would be good, but herbage is my >>>>>>> mainstay to drop my constant threat mode (hypervigilence). I do >>>>>>> not want a repeat of what happened! Unfortunately I drive people >>>>>>> away to make sure of that. I appreciate your alls kindness. I >>>>>>> wanted to share a solid explanation of why I am such a dick at >>>>>>> times. I flip to active threat mode, I struggle to control this. >>>>>>> It doesn't help that the police have been stalking me for 2 >>>>>>> years, I am all caught up in their noise. Don't believe a word >>>>>>> of their truthfulness. The blue wall of silence breaks God's >>>>>>> commandment thou shalt not bear false witness. Police violate >>>>>>> that daily, protecting their brothers who shoot unarmed black >>>>>>> men in the back and claim they are fearing for their lives. >>>>>>> Really? No, really? Well, that is a different story. That just >>>>>>> freaking triggers me. And my opinion makes me their target. At >>>>>>> least in my C-PTSD befuddled mind. >>>>>>> >>>>>>> Be well all! >>>>>>> >>>> >> >

Dec. 20, 2016

Re: [Pharo-users] [Vm-dev] Integrated decentralized localized social networks (was Re: ptsd rage)

by Charlie Robbats

This is how I deal with ptsd. Change the system. On 12/19/2016 8:08 PM, Charlie Robbats wrote: > > > > Which I have done over the years, used other venues for peaceful > warfare. Sorry to disturb you. The 20th century model of society is > stale and dated. Look at all the damage done to people for no good > reason. We can effect change through technology. What kind of change? > Something that leverages modern computing, including the blockchain > for trusted interactions, lots of hand-held IoT devices combined into > a massive decentralized computational network, leaving REST services > behind and presenting functional semantics with robust data > marshaling. With these capabilities, transform the way physical > interactions occur. I like to term what I am seeing as virtualizing > physicality & physicalizing virtuality. > > Is Pharo just aiming to be a better WebApp? That market is totally > saturated. Pharo's/Squeak's strengtsh are robust dynamic presentation > of information in graphical form and interconnectivity. Let us > leverage that. Smalltalk is perfectly positioned to define the next > transformation, because it is the only language system designed to be > online 24/7, exactly what is needed for a massive decentralized > computer with dynamic un/loading. I merely made a few comments > regarding some of the practical functional requirements around the > security facet of the new system. > > My apologies if you felt it was inappropriate. I think you were > concerned it may get further out of hand and I do not disagree with > you. Let's collect functional requirements for how this new social > network will interact with personalized locality. This is my > proposition. Why, we could eliminate prisons, massively reducing > mental illness and eliminate collective confrontation. I believe > completely, with all my heart, that this is in the original spirit of > Smalltalk, but I cannot speak for the founders, this is my belief. > > Thank you for your thoughts, I did not mean to offend or go so far astray. > > Charlie > > On 12/19/2016 7:17 PM, Brad wrote: >> Don't know about anyone else, but I would appreciate it if this kind >> of commentary never made it to this email list. This topic is so >> inappropriate. Let's keep the discussion about Pharo. If you feel you >> must go down the political route, then please be gracious enough to >> find another venue. >> >> Brad Selfridge >> 913-269-2385 >> >> On Dec 19, 2016, at 6:48 PM, Charlie Robbats >> <charlie.robbats(a)gmail.com <mailto:charlie.robbats@gmail.com>> wrote: >> >>> Alright, one more sad observation. Of all the Law Enforcement >>> violence, either perpetrated by LEOs against citizens or by citizens >>> against LEOs, in all cases I am aware or recall having heard, all of >>> these involve police officers. No violence, or very little, is >>> perpetrated against or by Sheriff Deputies. As counties are a good >>> and proper and consistent scope of crime administration, regardless >>> of the density, police ought to report to the Sheriffs and let's put >>> and end to broken windows policy and discriminatory enforcement. >>> Police are always in our shit, and have their egos to boot. Sheriff >>> Deputies, by comparison, are laid back and easy to talk to. They >>> engage the public in respect, without attitude. >>> >>> Bob didn't shoot the deputy. >>> >>> On 12/17/2016 10:11 PM, Charlie Robbats wrote: >>>> >>>> Last bit, a mantra: Crime & Punishment creates massive mental >>>> illness in our society. Ask the Russians. >>>> >>>> >>>> On 12/17/2016 10:05 PM, Charlie Robbats wrote: >>>>> >>>>> >>>>> >>>>> Well, my paranoia is kicking. I spoke too broadly of police, I >>>>> have interacted with many and they do a lot of good. A bad apple >>>>> spoils the whatever and their code of silence allows for that sort >>>>> of rot. I tell it straight, because they monitor the list. I >>>>> pissed them off! Do you think it passed the sanity test that cops >>>>> run all street drugs with their felon database in hand? Damn! All >>>>> those Fellas are going to turn and bite their masters' hand, you >>>>> watch! Stacking these grown men like Twinkies in overcrowded >>>>> prisons. There is a debt that needs to be paid and the righteous >>>>> are those in prison on a bunch of bullshit paper. Vive la >>>>> revolucion! Ok, sorry I went political. I am done. >>>>> >>>>> >>>>> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>>>>> >>>>>> I am sad with you in your diagnosis. I get that too, the blues. I >>>>>> get high if I am holding and listen to "Kind of Blue" or deep >>>>>> house or reggae. Some X would be good, but herbage is my mainstay >>>>>> to drop my constant threat mode (hypervigilence). I do not want a >>>>>> repeat of what happened! Unfortunately I drive people away to >>>>>> make sure of that. I appreciate your alls kindness. I wanted to >>>>>> share a solid explanation of why I am such a dick at times. I >>>>>> flip to active threat mode, I struggle to control this. It >>>>>> doesn't help that the police have been stalking me for 2 years, I >>>>>> am all caught up in their noise. Don't believe a word of their >>>>>> truthfulness. The blue wall of silence breaks God's commandment >>>>>> thou shalt not bear false witness. Police violate that daily, >>>>>> protecting their brothers who shoot unarmed black men in the back >>>>>> and claim they are fearing for their lives. Really? No, really? >>>>>> Well, that is a different story. That just freaking triggers me. >>>>>> And my opinion makes me their target. At least in my C-PTSD >>>>>> befuddled mind. >>>>>> >>>>>> Be well all! >>>>>> >>> >

Dec. 20, 2016

Integrated decentralized localized social networks (was Re: [Vm-dev] ptsd rage)

by Charlie Robbats

Which I have done over the years, used other venues for peaceful warfare. Sorry to disturb you. The 20th century model of society is stale and dated. Look at all the damage done to people for no good reason. We can effect change through technology. What kind of change? Something that leverages modern computing, including the blockchain for trusted interactions, lots of hand-held IoT devices combined into a massive decentralized computational network, leaving REST services behind and presenting functional semantics with robust data marshaling. With these capabilities, transform the way physical interactions occur. I like to term what I am seeing as virtualizing physicality & physicalizing virtuality. Is Pharo just aiming to be a better WebApp? That market is totally saturated. Pharo's/Squeak's strengtsh are robust dynamic presentation of information in graphical form and interconnectivity. Let us leverage that. Smalltalk is perfectly positioned to define the next transformation, because it is the only language system designed to be online 24/7, exactly what is needed for a massive decentralized computer with dynamic un/loading. I merely made a few comments regarding some of the practical functional requirements around the security facet of the new system. My apologies if you felt it was inappropriate. I think you were concerned it may get further out of hand and I do not disagree with you. Let's collect functional requirements for how this new social network will interact with personalized locality. This is my proposition. Why, we could eliminate prisons, massively reducing mental illness and eliminate collective confrontation. I believe completely, with all my heart, that this is in the original spirit of Smalltalk, but I cannot speak for the founders, this is my belief. Thank you for your thoughts, I did not mean to offend or go so far astray. Charlie On 12/19/2016 7:17 PM, Brad wrote: > Don't know about anyone else, but I would appreciate it if this kind > of commentary never made it to this email list. This topic is so > inappropriate. Let's keep the discussion about Pharo. If you feel you > must go down the political route, then please be gracious enough to > find another venue. > > Brad Selfridge > 913-269-2385 > > On Dec 19, 2016, at 6:48 PM, Charlie Robbats > <charlie.robbats(a)gmail.com <mailto:charlie.robbats@gmail.com>> wrote: > >> Alright, one more sad observation. Of all the Law Enforcement >> violence, either perpetrated by LEOs against citizens or by citizens >> against LEOs, in all cases I am aware or recall having heard, all of >> these involve police officers. No violence, or very little, is >> perpetrated against or by Sheriff Deputies. As counties are a good >> and proper and consistent scope of crime administration, regardless >> of the density, police ought to report to the Sheriffs and let's put >> and end to broken windows policy and discriminatory enforcement. >> Police are always in our shit, and have their egos to boot. Sheriff >> Deputies, by comparison, are laid back and easy to talk to. They >> engage the public in respect, without attitude. >> >> Bob didn't shoot the deputy. >> >> On 12/17/2016 10:11 PM, Charlie Robbats wrote: >>> >>> Last bit, a mantra: Crime & Punishment creates massive mental >>> illness in our society. Ask the Russians. >>> >>> >>> On 12/17/2016 10:05 PM, Charlie Robbats wrote: >>>> >>>> >>>> >>>> Well, my paranoia is kicking. I spoke too broadly of police, I have >>>> interacted with many and they do a lot of good. A bad apple spoils >>>> the whatever and their code of silence allows for that sort of rot. >>>> I tell it straight, because they monitor the list. I pissed them >>>> off! Do you think it passed the sanity test that cops run all >>>> street drugs with their felon database in hand? Damn! All those >>>> Fellas are going to turn and bite their masters' hand, you watch! >>>> Stacking these grown men like Twinkies in overcrowded prisons. >>>> There is a debt that needs to be paid and the righteous are those >>>> in prison on a bunch of bullshit paper. Vive la revolucion! Ok, >>>> sorry I went political. I am done. >>>> >>>> >>>> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>>>> >>>>> I am sad with you in your diagnosis. I get that too, the blues. I >>>>> get high if I am holding and listen to "Kind of Blue" or deep >>>>> house or reggae. Some X would be good, but herbage is my mainstay >>>>> to drop my constant threat mode (hypervigilence). I do not want a >>>>> repeat of what happened! Unfortunately I drive people away to make >>>>> sure of that. I appreciate your alls kindness. I wanted to share a >>>>> solid explanation of why I am such a dick at times. I flip to >>>>> active threat mode, I struggle to control this. It doesn't help >>>>> that the police have been stalking me for 2 years, I am all caught >>>>> up in their noise. Don't believe a word of their truthfulness. The >>>>> blue wall of silence breaks God's commandment thou shalt not bear >>>>> false witness. Police violate that daily, protecting their >>>>> brothers who shoot unarmed black men in the back and claim they >>>>> are fearing for their lives. Really? No, really? Well, that is a >>>>> different story. That just freaking triggers me. And my opinion >>>>> makes me their target. At least in my C-PTSD befuddled mind. >>>>> >>>>> Be well all! >>>>> >>

Dec. 20, 2016

Re: [Pharo-users] [Vm-dev] ptsd rage

by Travis Ayres

Totally agreed. On Mon, Dec 19, 2016 at 4:17 PM, Brad <bsselfridge(a)gmail.com> wrote: > Don't know about anyone else, but I would appreciate it if this kind of > commentary never made it to this email list. This topic is so > inappropriate. Let's keep the discussion about Pharo. If you feel you must > go down the political route, then please be gracious enough to find another > venue. > > Brad Selfridge > 913-269-2385 <(913)%20269-2385> > > On Dec 19, 2016, at 6:48 PM, Charlie Robbats <charlie.robbats(a)gmail.com> > wrote: > > Alright, one more sad observation. Of all the Law Enforcement violence, > either perpetrated by LEOs against citizens or by citizens against LEOs, in > all cases I am aware or recall having heard, all of these involve police > officers. No violence, or very little, is perpetrated against or by Sheriff > Deputies. As counties are a good and proper and consistent scope of crime > administration, regardless of the density, police ought to report to the > Sheriffs and let's put and end to broken windows policy and discriminatory > enforcement. Police are always in our shit, and have their egos to boot. > Sheriff Deputies, by comparison, are laid back and easy to talk to. They > engage the public in respect, without attitude. > > Bob didn't shoot the deputy. > > On 12/17/2016 10:11 PM, Charlie Robbats wrote: > > Last bit, a mantra: Crime & Punishment creates massive mental illness in > our society. Ask the Russians. > > On 12/17/2016 10:05 PM, Charlie Robbats wrote: > > > > Well, my paranoia is kicking. I spoke too broadly of police, I have > interacted with many and they do a lot of good. A bad apple spoils the > whatever and their code of silence allows for that sort of rot. I tell it > straight, because they monitor the list. I pissed them off! Do you think it > passed the sanity test that cops run all street drugs with their felon > database in hand? Damn! All those Fellas are going to turn and bite their > masters' hand, you watch! Stacking these grown men like Twinkies in > overcrowded prisons. There is a debt that needs to be paid and the > righteous are those in prison on a bunch of bullshit paper. Vive la > revolucion! Ok, sorry I went political. I am done. > > On 12/17/2016 9:49 PM, Charlie Robbats wrote: > > I am sad with you in your diagnosis. I get that too, the blues. I get high > if I am holding and listen to "Kind of Blue" or deep house or reggae. Some > X would be good, but herbage is my mainstay to drop my constant threat mode > (hypervigilence). I do not want a repeat of what happened! Unfortunately I > drive people away to make sure of that. I appreciate your alls kindness. I > wanted to share a solid explanation of why I am such a dick at times. I > flip to active threat mode, I struggle to control this. It doesn't help > that the police have been stalking me for 2 years, I am all caught up in > their noise. Don't believe a word of their truthfulness. The blue wall of > silence breaks God's commandment thou shalt not bear false witness. Police > violate that daily, protecting their brothers who shoot unarmed black men > in the back and claim they are fearing for their lives. Really? No, really? > Well, that is a different story. That just freaking triggers me. And my > opinion makes me their target. At least in my C-PTSD befuddled mind. > > Be well all! > > >

Dec. 20, 2016

Re: [Pharo-users] [Vm-dev] ptsd rage

by Brad

Don't know about anyone else, but I would appreciate it if this kind of commentary never made it to this email list. This topic is so inappropriate. Let's keep the discussion about Pharo. If you feel you must go down the political route, then please be gracious enough to find another venue. Brad Selfridge 913-269-2385 > On Dec 19, 2016, at 6:48 PM, Charlie Robbats <charlie.robbats(a)gmail.com> wrote: > > Alright, one more sad observation. Of all the Law Enforcement violence, either perpetrated by LEOs against citizens or by citizens against LEOs, in all cases I am aware or recall having heard, all of these involve police officers. No violence, or very little, is perpetrated against or by Sheriff Deputies. As counties are a good and proper and consistent scope of crime administration, regardless of the density, police ought to report to the Sheriffs and let's put and end to broken windows policy and discriminatory enforcement. Police are always in our shit, and have their egos to boot. Sheriff Deputies, by comparison, are laid back and easy to talk to. They engage the public in respect, without attitude. > > Bob didn't shoot the deputy. > >> On 12/17/2016 10:11 PM, Charlie Robbats wrote: >> Last bit, a mantra: Crime & Punishment creates massive mental illness in our society. Ask the Russians. >> >>> On 12/17/2016 10:05 PM, Charlie Robbats wrote: >>> >>> >>> >>> Well, my paranoia is kicking. I spoke too broadly of police, I have interacted with many and they do a lot of good. A bad apple spoils the whatever and their code of silence allows for that sort of rot. I tell it straight, because they monitor the list. I pissed them off! Do you think it passed the sanity test that cops run all street drugs with their felon database in hand? Damn! All those Fellas are going to turn and bite their masters' hand, you watch! Stacking these grown men like Twinkies in overcrowded prisons. There is a debt that needs to be paid and the righteous are those in prison on a bunch of bullshit paper. Vive la revolucion! Ok, sorry I went political. I am done. >>> >>>> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>>> I am sad with you in your diagnosis. I get that too, the blues. I get high if I am holding and listen to "Kind of Blue" or deep house or reggae. Some X would be good, but herbage is my mainstay to drop my constant threat mode (hypervigilence). I do not want a repeat of what happened! Unfortunately I drive people away to make sure of that. I appreciate your alls kindness. I wanted to share a solid explanation of why I am such a dick at times. I flip to active threat mode, I struggle to control this. It doesn't help that the police have been stalking me for 2 years, I am all caught up in their noise. Don't believe a word of their truthfulness. The blue wall of silence breaks God's commandment thou shalt not bear false witness. Police violate that daily, protecting their brothers who shoot unarmed black men in the back and claim they are fearing for their lives. Really? No, really? Well, that is a different story. That just freaking triggers me. And my opinion makes me their target. At least in my C-PTSD befuddled mind. >>>> Be well all! >

Dec. 20, 2016

Re: [Pharo-users] Password storage options

by Jan BlizniÄenko

Thank you a lot! :) I tried it in Pharo 5 and everything seems to be working (I just had to apt-get install libxcrypt:i386, load packages Cryptography, Blowfish (not sure if really needed though) and PasswordHashingFFI and manually create link in directory where it expected libxcrypt.so.1). About the FFI for Pharo 5/6, maybe that's what Esteban did in commit "Cryptography-EstebanMaringolo.50" on 15 September 2016 "Version ready to be loaded in Pharo 5.0 without affecting Kernel or System packages.". Scrypt would be even better to have, but I'm grateful enough for now since it was all easier and faster than I expected. Jan Paul DeBruicker wrote > And to add scrypt to that FFI library would be trivial if you have a 32bit > version of scrypt but I don't think there is one. I'd be happy to learn > I'm wrong though. And thats assuming you're using 32 bit pharo, which is > whats stable/released right now. > > > > > Paul DeBruicker wrote >> I made a crypt/bcrypt ffi library for older versions of Pharo that sounds >> like it meets your needs and is in the cryptography project here: >> >> http://smalltalkhub.com/#!/~Cryptography/Cryptography >> >> But I have not updated it for the new FFI versions in Pharo 5/6. >> >> >> >> And Pierce Ng made a blog post and library about his own set up here: >> http://www.samadhiweb.com/blog/2013.11.17.shacrypt.html >> >> >> >> >> Jan BlizniÄenko wrote >>> Hello >>> >>> I'm working on Pharo-based webserver and right now I got to the topic of >>> storing user passwords. I found SHA256 integrated in Pharo, but hashing >>> with >>> SHA is far from enough. I also looked around the mailing list history to >>> find few posts from 2011 about bcrypt using Linux libraries. I'd like to >>> ask >>> what is current status - what are my options under following conditions: >>> >>> I prefer Pharo 5 compatibility. I could downgrade to Pharo 4 or use beta >>> Pharo 6, but latest stable relase is preferred. >>> >>> I require at least bcrypt or PDKBF2, but I much more prefer >>> GPU-attack-resistant solutions like scrypt or Argon2. >>> >>> I require Linux compatibility, but platform independent solution would >>> be >>> kinda nice (we could use the same algorithm on our local machines with >>> Mac >>> and Win for development). >>> >>> Thank you >>> Jan >>> >>> >>> >>> -- >>> View this message in context: >>> http://forum.world.st/Password-storage-options-tp4927471.html >>> Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com. -- View this message in context: http://forum.world.st/Password-storage-options-tp4927480p4927521.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

Dec. 20, 2016

Re: [Pharo-users] [Vm-dev] ptsd rage

by Charlie Robbats

Alright, one more sad observation. Of all the Law Enforcement violence, either perpetrated by LEOs against citizens or by citizens against LEOs, in all cases I am aware or recall having heard, all of these involve police officers. No violence, or very little, is perpetrated against or by Sheriff Deputies. As counties are a good and proper and consistent scope of crime administration, regardless of the density, police ought to report to the Sheriffs and let's put and end to broken windows policy and discriminatory enforcement. Police are always in our shit, and have their egos to boot. Sheriff Deputies, by comparison, are laid back and easy to talk to. They engage the public in respect, without attitude. Bob didn't shoot the deputy. On 12/17/2016 10:11 PM, Charlie Robbats wrote: > > Last bit, a mantra: Crime & Punishment creates massive mental illness > in our society. Ask the Russians. > > > On 12/17/2016 10:05 PM, Charlie Robbats wrote: >> >> >> >> Well, my paranoia is kicking. I spoke too broadly of police, I have >> interacted with many and they do a lot of good. A bad apple spoils >> the whatever and their code of silence allows for that sort of rot. I >> tell it straight, because they monitor the list. I pissed them off! >> Do you think it passed the sanity test that cops run all street drugs >> with their felon database in hand? Damn! All those Fellas are going >> to turn and bite their masters' hand, you watch! Stacking these grown >> men like Twinkies in overcrowded prisons. There is a debt that needs >> to be paid and the righteous are those in prison on a bunch of >> bullshit paper. Vive la revolucion! Ok, sorry I went political. I am >> done. >> >> >> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>> >>> I am sad with you in your diagnosis. I get that too, the blues. I >>> get high if I am holding and listen to "Kind of Blue" or deep house >>> or reggae. Some X would be good, but herbage is my mainstay to drop >>> my constant threat mode (hypervigilence). I do not want a repeat of >>> what happened! Unfortunately I drive people away to make sure of >>> that. I appreciate your alls kindness. I wanted to share a solid >>> explanation of why I am such a dick at times. I flip to active >>> threat mode, I struggle to control this. It doesn't help that the >>> police have been stalking me for 2 years, I am all caught up in >>> their noise. Don't believe a word of their truthfulness. The blue >>> wall of silence breaks God's commandment thou shalt not bear false >>> witness. Police violate that daily, protecting their brothers who >>> shoot unarmed black men in the back and claim they are fearing for >>> their lives. Really? No, really? Well, that is a different story. >>> That just freaking triggers me. And my opinion makes me their >>> target. At least in my C-PTSD befuddled mind. >>> >>> Be well all! >>>

Dec. 19, 2016

Re: [Pharo-users] Hash collision

by Martin McClure

On 12/19/2016 01:27 AM, Andres Valloud wrote: > At first glance, that the failure code only sees "two" things when it > should see "eight" seems to be problematic. > > Perhaps the primitive insists on hashing byte objects, and there is a > distinction between "byte" objects and "word" objects (whatever "word" > means, presumably a constant width integer across all platforms). I > haven't looked at the code. > > From my perspective... back in the day that primitive used to hash > bytes, and from what I saw here the failure code is hashing multi-byte > things. If all of these observations are correct, then I'd say the > failure code isn't doing what the primitive is doing, and in doing so > it's introducing a lot of collisions that I'd like to believe the > intended hash function wouldn't produce. Ah, I see your concern. As far as I can see, all classes that are using the StringHash primitive are actually byte objects, so things are, I believe, working as designed. The only problem is that Ben did an experiment to see whether Float's hashing would be improved by using the StringHash primitive. Which it failed to do, because Float is not a byte object. We could use an equivalent primitive to hash word objects, but I haven't found one. We could also use a primitive to retrieve the bytes of a word object, and I haven't found one of those either. There are places that are converting the words to large integers and then hashing those, which would work for Floats. -Martin

Dec. 19, 2016

Re: [Pharo-users] Password storage options

by Paul DeBruicker

And to add scrypt to that FFI library would be trivial if you have a 32bit version of scrypt but I don't think there is one. I'd be happy to learn I'm wrong though. And thats assuming you're using 32 bit pharo, which is whats stable/released right now. Paul DeBruicker wrote > I made a crypt/bcrypt ffi library for older versions of Pharo that sounds > like it meets your needs and is in the cryptography project here: > > http://smalltalkhub.com/#!/~Cryptography/Cryptography > > But I have not updated it for the new FFI versions in Pharo 5/6. > > > > And Pierce Ng made a blog post and library about his own set up here: > http://www.samadhiweb.com/blog/2013.11.17.shacrypt.html > > > > > Jan BlizniÄenko wrote >> Hello >> >> I'm working on Pharo-based webserver and right now I got to the topic of >> storing user passwords. I found SHA256 integrated in Pharo, but hashing >> with >> SHA is far from enough. I also looked around the mailing list history to >> find few posts from 2011 about bcrypt using Linux libraries. I'd like to >> ask >> what is current status - what are my options under following conditions: >> >> I prefer Pharo 5 compatibility. I could downgrade to Pharo 4 or use beta >> Pharo 6, but latest stable relase is preferred. >> >> I require at least bcrypt or PDKBF2, but I much more prefer >> GPU-attack-resistant solutions like scrypt or Argon2. >> >> I require Linux compatibility, but platform independent solution would be >> kinda nice (we could use the same algorithm on our local machines with >> Mac >> and Win for development). >> >> Thank you >> Jan >> >> >> >> -- >> View this message in context: >> http://forum.world.st/Password-storage-options-tp4927471.html >> Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com. -- View this message in context: http://forum.world.st/Password-storage-options-tp4927480p4927502.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

Dec. 19, 2016