December 2016 - Pharo-users

Resetting Ring ?
by Sven Van Caekenberghe Dec. 21, 2016

Dec. 21, 2016

In a 4.0 image I got in a situation where it seems Ring is out of sync (I am getting errors of missing meta classes on each accept). I vaguely remember there being an expression to reset/reinitialise Ring ? Does anyone remember ? Thx, Sven

2 2

Password storage options
by Jan BlizniÄenko Dec. 20, 2016

Dec. 20, 2016

Hello I'm working on Pharo-based webserver and right now I got to the topic of storing user passwords. I found SHA256 integrated in Pharo, but hashing with SHA is far from enough. I also looked around the mailing list history to find few posts from 2011 about bcrypt using Linux libraries. I'd like to ask what is current status - what are my options under following conditions: I prefer Pharo 5 compatibility. I could downgrade to Pharo 4 or use beta Pharo 6, but latest stable relase is preferred. I require at least bcrypt or PDKBF2, but I much more prefer GPU-attack-resistant solutions like scrypt or Argon2. I require Linux compatibility, but platform independent solution would be kinda nice (we could use the same algorithm on our local machines with Mac and Win for development). Thank you Jan -- View this message in context: http://forum.world.st/Password-storage-options-tp4927471.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

4 8

Re: [Pharo-users] [Vm-dev] ptsd rage
by Charlie Robbats Dec. 20, 2016

Dec. 20, 2016

Alright, one more sad observation. Of all the Law Enforcement violence, either perpetrated by LEOs against citizens or by citizens against LEOs, in all cases I am aware or recall having heard, all of these involve police officers. No violence, or very little, is perpetrated against or by Sheriff Deputies. As counties are a good and proper and consistent scope of crime administration, regardless of the density, police ought to report to the Sheriffs and let's put and end to broken windows policy and discriminatory enforcement. Police are always in our shit, and have their egos to boot. Sheriff Deputies, by comparison, are laid back and easy to talk to. They engage the public in respect, without attitude. Bob didn't shoot the deputy. On 12/17/2016 10:11 PM, Charlie Robbats wrote: > > Last bit, a mantra: Crime & Punishment creates massive mental illness > in our society. Ask the Russians. > > > On 12/17/2016 10:05 PM, Charlie Robbats wrote: >> >> >> >> Well, my paranoia is kicking. I spoke too broadly of police, I have >> interacted with many and they do a lot of good. A bad apple spoils >> the whatever and their code of silence allows for that sort of rot. I >> tell it straight, because they monitor the list. I pissed them off! >> Do you think it passed the sanity test that cops run all street drugs >> with their felon database in hand? Damn! All those Fellas are going >> to turn and bite their masters' hand, you watch! Stacking these grown >> men like Twinkies in overcrowded prisons. There is a debt that needs >> to be paid and the righteous are those in prison on a bunch of >> bullshit paper. Vive la revolucion! Ok, sorry I went political. I am >> done. >> >> >> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>> >>> I am sad with you in your diagnosis. I get that too, the blues. I >>> get high if I am holding and listen to "Kind of Blue" or deep house >>> or reggae. Some X would be good, but herbage is my mainstay to drop >>> my constant threat mode (hypervigilence). I do not want a repeat of >>> what happened! Unfortunately I drive people away to make sure of >>> that. I appreciate your alls kindness. I wanted to share a solid >>> explanation of why I am such a dick at times. I flip to active >>> threat mode, I struggle to control this. It doesn't help that the >>> police have been stalking me for 2 years, I am all caught up in >>> their noise. Don't believe a word of their truthfulness. The blue >>> wall of silence breaks God's commandment thou shalt not bear false >>> witness. Police violate that daily, protecting their brothers who >>> shoot unarmed black men in the back and claim they are fearing for >>> their lives. Really? No, really? Well, that is a different story. >>> That just freaking triggers me. And my opinion makes me their >>> target. At least in my C-PTSD befuddled mind. >>> >>> Be well all! >>>

5 7

Protego - smart way to manage NIL's in business calculations
by Ð®ÑÐ¸Ð¹ ÐÐ¸ÑÐ¾Ð½ÐµÐ½ÐºÐ¾ Dec. 20, 2016

Dec. 20, 2016

Imagine, you have some object with amount and price variables. And you want to calculate total, put this totals to collection and calculate grand total. Naive implementation will be something like total := amount * price for the first task and something like grandTotal := totals sum for the latter one. But what if amount or price are nil's? You can add nil checks, of course: total := (amount ifNil:[0]) * (price ifNil: [0]). And then what if totals will be empty? *More checks*. Is it really wise to have total to be zero if amount is nil? *More ifTrue:ifFalse: code*. And then you want to add amount := total / price calculation, and you realize that both total and price may be nil, and price may be zero. *More and more and more checks.* *Protego* (http://www.smalltalkhub.com/#!/~assargadon/Protego) adds "protected" versions of common operators and methods. So, you just put total := amount *@ price and grandTotal := totals sum_protected into your code - and everything *just works*. total will be nil if any of the operands are nil. grandTotal will be calculated normally, even for empty totals collection (will return nil for empty collection). Collection can hold nil's and it will work anyway. If all elements of the collection is nil, result will be nil. Protected version of addition and subtraction will treat nil's as zeros until both operands are nil - then it will return nil. There are protected versions of comparisions, too. It's quite simple idea, which is still very useful, and it makes code much more readable, clean and self-commenting. That's why I have extracted this part of SmallPOS framework, and have published it as separate package to use it in other, non-SmallPOS applications.

6 9

Hash collision
by Hilaire Dec. 19, 2016

Dec. 19, 2016

Hi, In Dr. Geo I rely a lot on hash value for the geometric object. It largely improves speed up to compare geometric items (to avoid duplicated items). For example to detect when the user is building an already created object. Also when describing geometric sketch with Smalltalk code, hundred or thousand of geometric items are created. The hash value speeds up equality check (otherwise true comparing is iterative in the geometric sketch tree and it slow down) But sometime hash collisions occur. I guess in that case, DrGeo should do the real equality check, or may be I am overusing the hash? I am interested on advices. As for now I am doing nothing special. Here is an annoying hash collision with Pharo 3/ Pharo 5 I think should not occur: (0.5(a)0.25) hash 67006464 (-0.5(a)0.25) hash 67006464 Squeak5.0 does not have this collision. It looks related to the Float hash implementation a bit different. What do you think? Hilaire -- Dr. Geo http://drgeo.eu

6 12

Password storage options
by Torsten Bergmann Dec. 19, 2016

Dec. 19, 2016

>I require at least bcrypt or PDKBF2, but I much more prefer >GPU-attack-resistant solutions like scrypt or Argon2. If required you can use external libraries like scrypt (https://lolware.net/2014/04/29/libscrypt.html) and call it using UFFI from Pharo Thanks T.

1 0

[ANN] TechTalks Jan and Feb
by Marcus Denker Dec. 19, 2016

Dec. 19, 2016

Hi, We have fixed the next two tech talks: - 24 Jan 2017. Topic "Bloc/Brickâ https://association.pharo.org/event-2405619 - 28 Feb 2017. Topic: âRefelectivity" https://association.pharo.org/event-2407465 We added these as âEventsâ to the association website. People registered there will get the information how to participate via mail (and a mail pointing to the recording afterwards). This is therefor especially interesting for those not following the mailing lists. The idea is to have one each months, if you have ideas for topics (or want to do some yourself), send a mail. Blog post: http://pharo.org/news/techtalks17

1 0

iceberg and private github repos
by Tudor Girba Dec. 19, 2016

Dec. 19, 2016

Hi, I have to work with a private GitHub repo. Is there a way to tell Iceberg to load from such a private repo? Cheers, Doru -- www.tudorgirba.com www.feenk.com "We cannot reach the flow of things unless we let go."

3 3

whisper/porcini in Java
by Robert Withers Dec. 18, 2016

Dec. 18, 2016

Voix-basse-mourde is whisper and herkutatti is porcini. I have the Java PBE working bit identical to Squeak, but the DBL_AESede protocol is not yet installing. Then the encoders for asn1der and json need implementation and Squeak and Java will work together again. find the code here, after logging in: https://gitlab.com/des-lapins-internationale best, Rabbit

1 0

whisper code push
by Robert Withers Dec. 18, 2016

Dec. 18, 2016

I just pushed code and I think it is function complete. The encoders available are Bytes, Asn1Der and Json using http://www.squeaksource.com/JSON/ Cryptography-68 Whisper-122 performance numbers by encoder bytes: 123 Mbs json: 5 Mbs asn1der: 5 Mbs I'm off to Java land to integrate these changes.

1 0