May 2016 - Pharo-users - lists.pharo.org

[ANN] Pharo Consortium New Bronze Member: feenk

by Marcus Denker

The Pharo Consortium is very happy to announce that feenk has joined the Consortium as a Bronze Member. About - feenk: http://www.feenk.com - Pharo Consortium: http://consortium.pharo.org The goal of the Pharo Consortium is to allow companies and institutions to support the ongoing development and future of Pharo. Individuals can support Pharo via the Pharo Association: - http://association.pharo.org - https://salt.bountysource.com/teams/pharo

May 6, 2016

Re: [Pharo-users] Securely downloading Pharo

by Marcus Denker

Hi, Yes. we should have fixed all that loong time ago. The problem is of course that âwe should have fixedâ only gets true after âI fixed itââ¦ so will block some time next week after the release to work on that. - fix https version of pharo.org. - setup ssl for all sites - provide checksum for files. Marcus > On 04 May 2016, at 23:51, Wilfred Hughes <me(a)wilfred.me.uk> wrote: > > Yep, a SHA sum is less useful if it's on the same site. Still, it > would be really useful to check the file against accidental > corruption. It would also be useful for comparing with the checksums > used by packagers, > e.g. https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pharo#n27 > . Users could see if their Pharo package was the same as the package > on pharo.org. > > pharo.org very nearly works with HTTPS, it's just a few JS/CSS files > that need to stop using absolute URLs (so e.g. > "http://pharo.org/files/screenshots/pharo-is-yours.png" should be a > protocol-relative URL > "//pharo.org/files/screenshots/pharo-is-yours.png"). > > Is the site hosted somewhere that users can send patches to? > > On 3 May 2016 at 23:54, Peter UhnÃ¡k <i.uhnak(a)gmail.com> wrote: >> I guess you could download it from the Jenkins job >> https://ci.inria.fr/pharo/job/Pharo-5.0-Update-Step-5-Publish/lastSuccessfu… >> >> although the job itself downloads over http from files.pharo.orgâ¦ but >> Jenkins should be fine enough if you are worried about MitM between you and >> Pharo. >> >> For SHA you still need a secure connection assuming the website wouldn't get >> compromised, >> or digitally signed releases assuming the signing won't be misconfigured, or >> the keys won't get compromised. >> >> But I agree that this should be solved, or at least improved; but then again >> whole smalltalkhub doesn't use https and you are sending your credentials in >> plaintext over the network (have fun committing from a hotel room wifi)â¦ >> security through obscurity can be incredibly efficient. >> >> Of course that means that we need someone with the time and knowledge that >> can invest effort into this. >> >> Peter >> >> On Wed, May 4, 2016 at 12:33 AM, Wilfred Hughes <me(a)wilfred.me.uk> wrote: >>> >>> Is there any way of downloading Pharo securely? >>> >>> I'm trying to download Pharo itself over HTTPS, so I know I can trust the >>> data: >>> >>> $ wget https://files.pharo.org/platform/Pharo4.0-linux.zip >>> --2016-05-02 22:44:34-- >>> https://files.pharo.org/platform/Pharo4.0-linux.zip >>> Resolving files.pharo.org (files.pharo.org) 128.93.162.72 >>> Connecting to files.pharo.org (files.pharo.org)|128.93.162.72|:443... >>> connected. >>> OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown >>> protocol >>> Unable to establish SSL connection. >>> >>> The excellent pharo zeroconf script doesn't seem available over HTTPS >>> either: >>> >>> $ curl https://get.pharo.org/vm50 >>> curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown >>> protocol >>> >>> Looking at the script itself, it's downloading files over HTTP from >>> files.pharo.org and executing them without verifying. I've explored >>> files.pharo.org, but I can't see any signatures or hashes (e.g. >>> sha256sum) of any of the files. >>> >>> The pharo homepage is largely available at https://pharo.org/ >>> (although some of the styling is missing due to being served over >>> HTTP). >>> >>> Have I missed something? Would it be possible to provide HTTPS and/or >>> sha256sums for downloads? >>> >>> >>> Wilfred >>> >> >

May 6, 2016

Re: [Pharo-users] [ANN] Pharo Astares Distribution

by Julien Delplanque

Really cool, I like this idea of different distributions providing different flavor of a development environment! Julien On 03/05/16 22:01, Torsten Bergmann wrote: > Hi, > > I summarized some of the goodies that I wrote like > - DesktopManager > - QuickAccess > - HubCap > - WebBrowser > - MessageFlowBrowser > - ... > > into an own kind of Pharo distribution that I call AstaresDistribution. > So if you already use these goodies it is easier to load quickly into a fresh image. > > You can load directly from Catalog or by opening Spooter, enter "Astares" > and hit ENTER to load. > > Alternatively you can download a prebuilt image using PharoLauncher from > "Pharo Contributions Jenkins" -> "AstaresDistribution" or directly from [1]. > > Screenshot attached. > > Have fun > T. > > [1] https://ci.inria.fr/pharo-contribution/job/AstaresDistribution

May 5, 2016

Re: [Pharo-users] Web browsing automation

by Grigory Hatsevich

Thanks, "ZnZincServerAdaptor startOn: 8080" made it to work (after I added /Applications/Firefox.app/Contents/MacOS to PATH). CÃ©drick BÃ©ler <cdrick65(a)gmail.com> Ð¿Ð¸ÑÐ°Ð»(Ð°) Ð² ÑÐ²Ð¾ÑÐ¼ Ð¿Ð¸ÑÑÐ¼Ðµ Wed, 04 May 2016 19:29:17 +0300: > not sure, but WAKomAdaptor is I speak specific. > > You have to use Pharo variant, one subclass of WAAdaptor. > > Iâll try ZnZincServer adaptor. > > > Cheers, > CÃ©drik

May 5, 2016

Re: [Pharo-users] Web browsing automation

by Stephan Eggermont

On 04/05/16 17:44, Grigory Hatsevich wrote: > I have a problem installing Beach Parasol. I follow the guidelines from > http://ss3.gemstone.com/ss/Parasol.html/Wiki and Pharo says that > WAKomEncoded is unknown variable. Sorry about that, that's a text that is outdated. The ZnServerAdapter version should work fine Stephan

May 4, 2016

Re: [Pharo-users] Securely downloading Pharo

by Wilfred Hughes

Yep, a SHA sum is less useful if it's on the same site. Still, it would be really useful to check the file against accidental corruption. It would also be useful for comparing with the checksums used by packagers, e.g. https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pharo#n27 . Users could see if their Pharo package was the same as the package on pharo.org. pharo.org very nearly works with HTTPS, it's just a few JS/CSS files that need to stop using absolute URLs (so e.g. "http://pharo.org/files/screenshots/pharo-is-yours.png" should be a protocol-relative URL "//pharo.org/files/screenshots/pharo-is-yours.png"). Is the site hosted somewhere that users can send patches to? On 3 May 2016 at 23:54, Peter UhnÃ¡k <i.uhnak(a)gmail.com> wrote: > I guess you could download it from the Jenkins job > https://ci.inria.fr/pharo/job/Pharo-5.0-Update-Step-5-Publish/lastSuccessfu… > > although the job itself downloads over http from files.pharo.orgâ¦ but > Jenkins should be fine enough if you are worried about MitM between you and > Pharo. > > For SHA you still need a secure connection assuming the website wouldn't get > compromised, > or digitally signed releases assuming the signing won't be misconfigured, or > the keys won't get compromised. > > But I agree that this should be solved, or at least improved; but then again > whole smalltalkhub doesn't use https and you are sending your credentials in > plaintext over the network (have fun committing from a hotel room wifi)â¦ > security through obscurity can be incredibly efficient. > > Of course that means that we need someone with the time and knowledge that > can invest effort into this. > > Peter > > On Wed, May 4, 2016 at 12:33 AM, Wilfred Hughes <me(a)wilfred.me.uk> wrote: >> >> Is there any way of downloading Pharo securely? >> >> I'm trying to download Pharo itself over HTTPS, so I know I can trust the >> data: >> >> $ wget https://files.pharo.org/platform/Pharo4.0-linux.zip >> --2016-05-02 22:44:34-- >> https://files.pharo.org/platform/Pharo4.0-linux.zip >> Resolving files.pharo.org (files.pharo.org) 128.93.162.72 >> Connecting to files.pharo.org (files.pharo.org)|128.93.162.72|:443... >> connected. >> OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown >> protocol >> Unable to establish SSL connection. >> >> The excellent pharo zeroconf script doesn't seem available over HTTPS >> either: >> >> $ curl https://get.pharo.org/vm50 >> curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown >> protocol >> >> Looking at the script itself, it's downloading files over HTTP from >> files.pharo.org and executing them without verifying. I've explored >> files.pharo.org, but I can't see any signatures or hashes (e.g. >> sha256sum) of any of the files. >> >> The pharo homepage is largely available at https://pharo.org/ >> (although some of the styling is missing due to being served over >> HTTP). >> >> Have I missed something? Would it be possible to provide HTTPS and/or >> sha256sums for downloads? >> >> >> Wilfred >> >

May 4, 2016

Re: [Pharo-users] NoSWL Databases

by Hilaire

On a simpler front and not at as a real daba base, you may find Fuel to be incredibly efficient and reliable to persist a graph of object. Hilaire Le 04/05/2016 00:03, Stephan Eggermont a Ã©crit : > On 03/05/16 15:42, AWS wrote: >> The current course is all about Database management and analysis. We >> are currently looking at NoSQL databases and I would like to try out >> one of these against some ideas I have for the project. > > Did you consider using Gemstone for this? It solves a rather large > part of the common persistency problems, including a few difficult ones > > Stephan > > -- Dr. Geo http://drgeo.eu

May 4, 2016

Re: [Pharo-users] Web browsing automation

by CÃ©drick BÃ©ler

not sure, but WAKomAdaptor is I speak specific. You have to use Pharo variant, one subclass of WAAdaptor. Iâll try ZnZincServer adaptor. Cheers, CÃ©drik

May 4, 2016

Re: [Pharo-users] Web browsing automation

by Grigory Hatsevich

I have a problem installing Beach Parasol. I follow the guidelines from http://ss3.gemstone.com/ss/Parasol.html/Wiki and Pharo says that WAKomEncoded is unknown variable. Stephan Eggermont <stephan(a)stack.nl> Ð¿Ð¸ÑÐ°Ð»(Ð°) Ð² ÑÐ²Ð¾ÑÐ¼ Ð¿Ð¸ÑÑÐ¼Ðµ Wed, 04 May 2016 17:08:52 +0300: > On 04/05/16 13:04, Grigory Hatsevich wrote: >> Suppose I have a web page with 50 small photos; when I click on a photo, >> appears a window where I can further click on a link to open a full >> profile of the person on a photo. I need to open a full profile for >> every person in that page, each in a separate browser tab. How can I >> automate this clicking, so that I would not need to click at every link >> manually? Does Pharo have tools for such tasks? > > Beach Parasol, selenium integration for Seaside > > http://ss3.gemstone.com/ss/Parasol.html > > Stephan >

May 4, 2016

Re: [Pharo-users] Documentation about Pharo Launcher?

by Offray Vladimir Luna CÃ¡rdenas

Hi Damien, I will use a modified version of the Pharo 5 environment packaged for the current MOOC for a quick building and with more time I will create new ConfigurationOf for my projects and debug the current ones. Thanks, Offray On 04/05/16 04:50, Damien Cassou wrote: > Offray Vladimir Luna CÃ¡rdenas <offray.luna(a)mutabit.com> writes: > >> I would like to made one of my images available through Pharo >> Launcher. Anyone knows where I can find documentation about this? I >> can't find anything on the StHub page for the project. > I agree with both Serge and CÃ©drick. Their solution is easy and the best > practice for any Pharo development (regardless of the launcher): > > - write a ConfigurationOf using Versionner > > - add a job to https://ci.inria.fr/pharo-contribution/ (just create an > account at http://ci.inria.fr and request to join pharo-contribution). > > As soon as the job builds successfully, you will see it in the Launcher. >

May 4, 2016