December 2017 - Pharo-users

Re: [Pharo-users] HTTP request question for an arango driver

by Sven Van Caekenberghe

> On 9 Dec 2017, at 18:34, Yann Lesage <yannlesag(a)gmail.com> wrote: > > > > Le 09/12/2017 Ã 15:52, Sven Van Caekenberghe a Ã©crit : >> Hi Yann, >> >> Zinc HTTP Components can do 1000s of requests per second, to localhost (so excluding a real network) and using a single ZnClient instance with a reused connection (HTTP/1.1's default). Of course, data size is also a factor, I am talking about small requests/responses. >> >> I browsed your code a bit on GitHub. You do reuse an instance, so that is good. But I think you are using HTTPS (TLS), which is a real slowdown (encryption is native, but costs real resources). Also, your data payload is using JSON which also adds a cost (parsing, generating). > Thanks for this review. >> >> So what you measured sounds about right. You might be able to optimise a bit, but that won't give you a factor 10 improvement, IMHO. The trick is usually to make as few requests as possible. > A factor of 10 maximum ? Ok, this indication help me. If you cache and reuse a single ZnClient instance, that is already good. Maybe try once without SSL to see how much difference that makes. You could also try to disable logging. As in ZnClient new in: [ :client | [ client get: 'http://localhost:8080' ] benchFor: 5 seconds ]. vs. ZnClient new in: [ :client | client loggingOff. [ client get: 'http://localhost:8080' ] benchFor: 5 seconds ]. You can also try to run in a Time profiler, but the server time is hard to abstract away from. > For the trick, I know it. But it's must be performed by user no ? Yes, the more you do in a single netwerk round trip, the better. Aggregation is good. >> Sven >> >>> On 8 Dec 2017, at 16:32, Yann Lesage <yannlesag(a)gmail.com> wrote: >>> >>> Hello, >>> >>> >>> I write an driver for Arangodb . So like it's indicated in Arango documentation, I use the HTTP API. The repo is https://github.com/Valtena/Pharango >>> >>> >>> Now, the problem : Arango using Znclient make around 1 000 requests/second. >>> >>> >>> And the question : Are there any recommended pratice to have the better performance with ZNClient or a better way to perform lot of HTTP requests ? >>> >>> >>> Thanks for your attention, >>> >>> Yann Lesage >>> >>> >>> >> > >

Dec. 10, 2017

Re: [Pharo-users] HMAC-SHA512

by HernÃ¡n Morales Durand

Hi Ben, I would use NaCl: http://cr.yp.to/highspeed/coolnacl-20120725.pdf which you can install from the Pharo Project Catalog in Pharo 6.x Cheers, HernÃ¡n 2017-12-10 6:01 GMT-03:00 Ben Coman <btc(a)openinworld.com>: > Can anyone recommend libraries (native Smalltalk or via FFI) > to do generate a HMAC-SHA512 ? > > cheers -ben

Dec. 10, 2017

Re: [Pharo-users] OSEnvironment issue

by Hilaire

Work there on a P7 on Linux. Wrong VM of yours? Le 10/12/2017 Ã 17:25, Eno a Ã©critÂ : > Problem with opening pharo image on macOS 10.12.6. cann't find requested > origin: #home. > > i.e. the script "Smalltalk os current environment getEnv: 'HOME'" failed. > > (actually The ffiCall from LibC in the method UnixEnvironment>>getEnv: > failed ). > > Is it occurred recently? or issued or fixed in issue tracker already? > > Best regards. -- Dr. Geo http://drgeo.eu

Dec. 10, 2017

unsolicited package-cache use

by Hilaire

I am using tonel format to install from and save to a local repository. How to prevent Monticello/Configuration/Metacello to save packages to the image package-cache dir? Even when installing from a configuration with repo on tonel file format, packages get created in the image package-cache directory. I have read there and there, Pharo gets confused and uses wrongly the package-cache versions and not the local repo. -- Dr. Geo http://drgeo.eu

Dec. 10, 2017

Re: [Pharo-users] HMAC-SHA512

by Ben Coman

On 10 December 2017 at 18:23, Sven Van Caekenberghe <sven(a)stfx.eu> wrote: > > > > On 10 Dec 2017, at 10:01, Ben Coman <btc(a)openinworld.com> wrote: > > > > Can anyone recommend libraries (native Smalltalk or via FFI) > > to do generate a HMAC-SHA512 ? > > > > cheers -ben > > Well Pharo itself of course ! > (HMAC on: SHA256) > key: (ByteArray new: 32); > digestMessage: #[1 2 3]. > > SHA256 new hmac > key: (ByteArray new: 32); > digestMessage: #[1 2 3]. > > Thanks Sven. Its interesting to trace that through to put other stuff I've read about HMAC into perspective. However SHA256 != SHA512 which is a defined requirement of the site I'm accessing. What I understand from the trace is that the HMAC is generic regardless of size of SHA function and could remain in-Image while the SHA512 part could be supplied from outside the image. I could perhaps use the one from the OpenSSL library already included with Pharo. $ readelf -a ./pharo-vm/lib/pharo/5.0-201707201942/libssl.so.1.0.0 | grep 512 EVP_sha512 SHA512_Init SHA512_Update SHA512_Transform SHA512_Final where the "EVP function provide a high level interface to OpenSSL cryptographic functions." and I guess could be used similar to... ftp://188.44.46.157/Augustus/blatSrc/lib/hmac.c except I'm not sure how I'd use proceed without it taking any parameters... const EVP_MD *EVP_sha512(void); // include/openssl/evp.h The lower level functions could be used like... http://www.askyb.com/cpp/openssl-sha512-hashing-example-in-cpp/ https://github.com/openssl/openssl/blob/OpenSSL_1_1_0-stable/crypto/sha/sha… unsigned char *SHA512(const unsigned char *d, size_t n, unsigned char *md); int SHA512_Init(SHA512_CTX *c); // include/openssl/sha.h int SHA512_Update(SHA512_CTX *c, const void *data, size_t len); int SHA512_Final(unsigned char *md, SHA512_CTX *c); void SHA512_Transform(SHA512_CTX *c, const unsigned char *data); Actually the lower level functions look easier from an FFI perspective. Other options I found... * http://forum.world.st/How-to-encrypt-a-password-td3933585.html#a3933778 but it seems to be NativeBoost rather than UFFI, and also is Linux only (which might not be an issue) * https://github.com/mygityf/cipher/blob/master/cipher/sha512.h https://github.com/mygityf/cipher/blob/master/cipher/sha512.c to compile into a (hopefully) cross platform shared library cheers -ben P.S. I learnt today that "SHA-512 is faster than SHA-256 on 64 bit machines (as they use 64 bit arithmetic internally)" https://stackoverflow.com/a/18083633

Dec. 10, 2017

OSEnvironment issue

by Eno

Problem with opening pharo image on macOS 10.12.6. cann't find requested origin: #home. i.e. the script "Smalltalk os current environment getEnv: 'HOME'" failed. (actually The ffiCall from LibC in the method UnixEnvironment>>getEnv: failed ). Is it occurred recently? or issued or fixed in issue tracker already? Best regards. -- Sent from: http://forum.world.st/Pharo-Smalltalk-Users-f1310670.html

Dec. 10, 2017

Re: [Pharo-users] FYI about Pharo MOOC

by Stephane Ducasse

Tx for the report :) On Wed, Nov 1, 2017 at 5:35 PM, Sanjay Minni <sm(a)planage.com> wrote: > The voice in the background behaved differetly with different players on > windows 10 > - in "Films and TV" and "VLC player" it comes unltil you manually switch > the audio channel (it shows 2 audio channels) > - In Media player it works fine though i could not find 2 audio channels > > --- > Sanjay Minni > > On Fri, Oct 13, 2017 at 6:12 PM, Ben Coman <btc(a)openinworld.com> wrote: >> >> I played C019SD-W1-S1-EN-V1.mp4 >> and as well as the english voice, in the background I can still hear your >> original french voice. >> I'm curious the reasoning for this. >> >> cheers -ben >> >> >> On Fri, Oct 13, 2017 at 3:59 AM, Stephane Ducasse >> <stepharo.self(a)gmail.com> wrote: >>> >>> I'm about to release the en versions. >>> you can find them unofficially on http://www.stephaneducasse.eu/MOOC/ >>> >>> Stef >>> >>> On Tue, Oct 10, 2017 at 10:10 PM, Gour <gour(a)atmarama.com> wrote: >>> > On Tue, 10 Oct 2017 21:31:55 +0200 >>> > Stephane Ducasse >>> > <stepharo.self(a)gmail.com> wrote: >>> > >>> > Hello Stef, >>> > >>> >> I will ask one guy thursday and let you know. >>> > >>> > Thanks a lot! >>> > >>> >> We will release Mooc with english voices (not mine else english >>> >> natives would get an heart attack - I have what they call a sexy >>> >> french accents ;) >>> > >>> > I did watch few of your Pharo-related presentations and, although not >>> > native, >>> > happily survived. :-) >>> > >>> > Moreover, I'd say that your English is charming! At least, one is sure >>> > that the >>> > real human is speaking and not some "robot" put on auto-pilot, so if >>> > the new >>> > Mooc is going to be the same as the current/old one, I'd prefer to >>> > download >>> > the current files and watched them along with *.srt subtitles? >>> > >>> > Iow. my point is that the accent is just one part of the talk/teaching, >>> > but the >>> > energy behind it is much more imporant - this is, my conviction, based >>> > on my >>> > own teaching experiences. >>> > >>> > >>> > Sincerely, >>> > Gour >>> > >>> > -- >>> > From anger, complete delusion arises, and from delusion >>> > bewilderment of memory. When memory is bewildered, >>> > intelligence is lost, and when intelligence is lost >>> > one falls down again into the material pool. >>> > >>> > >>> > >>> >> >

Dec. 10, 2017

Re: [Pharo-users] HMAC-SHA512

by henry

Good to have extensions to Cryptography to include SHA-512, along with SHA-384. For that matter there seems to be other extensions could be made to Cryptography to support the proximate TLS 1.3, see references below for algorithms/groups specifiable. Cryptography would love to be extended for these, although OpenSSL should pick up TLS 1.3 for standardized wrapped implementation of TLS. https://tools.ietf.org/html/draft-ietf-tls-tls13-22#section-4.4.1 https://tools.ietf.org/html/draft-ietf-tls-tls13-22#section-4.2.3 https://tools.ietf.org/html/draft-ietf-tls-tls13-22#section-4.2.7 https://tools.ietf.org/html/rfc7919 - HH > -------- Original Message -------- > Subject: [Pharo-users] HMAC-SHA512 > Local Time: December 10, 2017 4:01 AM > UTC Time: December 10, 2017 9:01 AM > From: btc(a)openinworld.com > To: Any question about pharo is welcome <pharo-users(a)lists.pharo.org> > > Can anyone recommend libraries (native Smalltalk or via FFI) > to do generate a HMAC-SHA512 ? > > cheers -ben

Dec. 10, 2017

Re: [Pharo-users] FYI about Pharo MOOC

by Sanjay Minni

sorry mised your mail I got these files from the link in the message of your post on Oct 13 "I'm about to release the en versions. you can find them unofficially on http://www.stephaneducasse.eu/MOOC/ Stef" http://www.stephaneducasse.eu/MOOC/Videos-EN/MOOC%20WEEK%205/ and http://www.stephaneducasse.eu/MOOC/Videos-EN/MOOC%20WEEK%205/MP4/ --- Sanjay Minni +91-9900-902902 On Fri, Nov 3, 2017 at 1:44 PM, Stephane Ducasse <stepharo.self(a)gmail.com> wrote: > Sanjay > > where did you get this file? > > Stef > > On Wed, Nov 1, 2017 at 5:26 PM, Sanjay Minni <sm(a)planage.com> wrote: > > There seems to be an issue with the english dubbed version of Week 5 > lesson > > 4 - it has no content > > C019SD-W5-S4-EN-V1.mp4 > > > > --- > > Sanjay Minni > > > > On Fri, Oct 13, 2017 at 1:29 AM, Stephane Ducasse < > stepharo.self(a)gmail.com> > > wrote: > >> > >> I'm about to release the en versions. > >> you can find them unofficially on http://www.stephaneducasse.eu/MOOC/ > >> > >> Stef > >> > >> On Tue, Oct 10, 2017 at 10:10 PM, Gour <gour(a)atmarama.com> wrote: > >> > On Tue, 10 Oct 2017 21:31:55 +0200 > >> > Stephane Ducasse > >> > <stepharo.self(a)gmail.com> wrote: > >> > > >> > Hello Stef, > >> > > >> >> I will ask one guy thursday and let you know. > >> > > >> > Thanks a lot! > >> > > >> >> We will release Mooc with english voices (not mine else english > >> >> natives would get an heart attack - I have what they call a sexy > >> >> french accents ;) > >> > > >> > I did watch few of your Pharo-related presentations and, although not > >> > native, > >> > happily survived. :-) > >> > > >> > Moreover, I'd say that your English is charming! At least, one is sure > >> > that the > >> > real human is speaking and not some "robot" put on auto-pilot, so if > the > >> > new > >> > Mooc is going to be the same as the current/old one, I'd prefer to > >> > download > >> > the current files and watched them along with *.srt subtitles? > >> > > >> > Iow. my point is that the accent is just one part of the > talk/teaching, > >> > but the > >> > energy behind it is much more imporant - this is, my conviction, based > >> > on my > >> > own teaching experiences. > >> > > >> > > >> > Sincerely, > >> > Gour > >> > > >> > -- > >> > From anger, complete delusion arises, and from delusion > >> > bewilderment of memory. When memory is bewildered, > >> > intelligence is lost, and when intelligence is lost > >> > one falls down again into the material pool. > >> > > >> > > >> > > >> > > > >

Dec. 10, 2017

Re: [Pharo-users] HMAC-SHA512

by Sven Van Caekenberghe

> On 10 Dec 2017, at 10:01, Ben Coman <btc(a)openinworld.com> wrote: > > Can anyone recommend libraries (native Smalltalk or via FFI) > to do generate a HMAC-SHA512 ? > > cheers -ben Well Pharo itself of course ! (HMAC on: SHA256) key: (ByteArray new: 32); digestMessage: #[1 2 3]. SHA256 new hmac key: (ByteArray new: 32); digestMessage: #[1 2 3]. Sven PS: You might like this one too https://medium.com/concerning-pharo/the-code-behind-google-authenticator-9c…

Dec. 10, 2017