June 2017 - Pharo-users - lists.pharo.org

FUEL documentation
by Juraj Kubelka June 30, 2017

June 30, 2017

Hi, Is there any documentation about FUEL? I would like to understand in more detail what data -- Juraj Kubelka

1 0

[ANN] An evening with Pharo and the ESP32 microcontroller
by Ben Coman June 30, 2017

June 30, 2017

Nothing too dramatic, but for a hardware hackathon I'm attending I wanted some online material I could expose to people to who hadn't heard of Pharo before. Maybe some Pharo regulars might also find it of interest. All comments welcome. http://blog.openinworld.com/2017/06/evening-with-pharo-esp32/ cheers -ben

2 2

Re: [Pharo-users] Validate password with PBKDF2
by Erik Stel June 30, 2017

June 30, 2017

Francis, The hashpw function returns a hash with the salt prepended. So it contains both elements. (See for example explanation at: https://stackoverflow.com/questions/27413248/why-can-bcrypt-hashpw-be-used-…) You can do the same thing here. Assuming you have a fixed size salt, just prepend it before the hash value. Since the salt is (should be) random, returning it's value does not weaken the security. Using a salt prevents against rainbow table attacks: pre-generated hash values for many possible passwords. (See https://en.wikipedia.org/wiki/Rainbow_table) Cheers, Erik -- View this message in context: http://forum.world.st/Validate-password-with-PBKDF2-tp4952973p4953067.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

2 1

Re: [Pharo-users] Validate password with PBKDF2
by HernÃ¡n Morales Durand June 30, 2017

June 30, 2017

I guess I could integrate Udo's PBKDF2 into ApplicationSecurity. See under "Using the CheckPoint" if matches your API you're looking for: http://80738163270632.blogspot.com.ar/2014/10/application-security-2-checkp… Cheers, HernÃ¡n 2017-06-30 4:43 GMT-03:00 Francis via Pharo-users < pharo-users(a)lists.pharo.org>: > > > ---------- Mensaje reenviado ---------- > From: Francis <falzonidavide(a)libero.it> > To: pharo-users(a)lists.pharo.org > Cc: > Bcc: > Date: Fri, 30 Jun 2017 00:43:23 -0700 (PDT) > Subject: Re: Validate password with PBKDF2 > Thank you Paul, > Saving the salt is not a big issue but I'd like something more simple. > In python I can store the salt with the password > see:https://pypi.python.org/pypi/bcrypt/3.1.0 > > # Hash a password for the first time, with a randomly-generated salt > hashed = bcrypt.hashpw(password, bcrypt.gensalt()) > > and retrieve it subsequently > if bcrypt.checkpw(password, hashed): > ... print("It Matches!") > > Are you (smalltalkers) aware of something similar? > > Thanks again > Francis > > > > Paul DeBruicker wrote > > Looks like you'll have to store the salt when making the original hash of > > the password. > > > > With that you can do > > > > > > | salt originalPassword userInputPassword originalHash newHash secretKey > > | > > salt:='salt'. > > originalPassword:='password'. > > userInputPassword:='12345678'. > > originalHash:=PBKDF2 derivedKeySHA1Password: originalPassword salt: salt. > > newHash:=PBKDF2 derivedKeySHA1Password: userInputPassword salt: salt. > > > > secretKey:= SecureRandom new nextBytes: 16. > > > > ((SHA256 new hmac key: secretKey) digestMessage: originalHash) = ((SHA256 > > new hmac key: secretKey) digestMessage: newHash). > > > > > > > > We do the double SHA256 HMAC signing of the hashes because of > > https://www.nccgroup.trust/us/about-us/newsroom-and-events/ > blog/2011/february/double-hmac-verification/ > > > > You can store the #secretKey and each user should get a new #salt every > > time they change their password and you shouldn't reuse the salts for > > other users or password. > > > > For PBKDF2 there is probably a max (or recommended) salt length but I > > don't know it. > > > > I also don't know anything about the SecureRandom class but it says it on > > the tin, so maybe it is. Maybe not though. I don't know how to find > out. > > But I don't know that it matters in this instance as its only used for > the > > SHA256 HMAC internally in the comparison function. > > > > > > Hope this helps. > > > > > > Francis wrote > >> Hi folks > >> > >> I'm playing with the PBKDF2 package of Udo: > >> http://www.smalltalkhub.com/#!/~UdoSchneider/PBKDF2 > >> (thanks Udo), but I can't find how to validate a stored hash. > >> Can you point me in the right direction? > >> > >> Thanks > >> Francis > > > > > > -- > View this message in context: http://forum.world.st/ > Validate-password-with-PBKDF2-tp4952973p4953004.html > Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com. > > >

1 0

Logging in with VNC
by sergio ruiz June 30, 2017

June 30, 2017

Hey, all.. I need to be able to log in to my production image with VNC until i am comfortable with the command line interface. I know that every time i have had to do it, it seems like i used a different package. Which package is everyone using these days for remote GUI access? Thanks! ---- peace, sergio photographer, journalist, visionary Public Key:Â http://bit.ly/29z9fG0 #BitMessageÂ BM-NBaswViL21xqgg9STRJjaJaUoyiNe2dV http://www.Village-Buzz.com http://www.ThoseOptimizeGuys.com http://www.coffee-black.com http://www.painlessfrugality.com http://www.twitter.com/sergio_101 http://www.facebook.com/sergio101

2 1

Re: [Pharo-users] Validate password with PBKDF2
by Pierce Ng June 30, 2017

June 30, 2017

On Fri, Jun 30, 2017 at 12:43:23AM -0700, Francis via Pharo-users wrote: > Saving the salt is not a big issue but I'd like something more simple. > In python I can store the salt with the password > see:https://pypi.python.org/pypi/bcrypt/3.1.0 Hi, you could try PasswordCrypt: https://github.com/PierceNg/PasswordCrypt Pierce

1 0

Validate password with PBKDF2
by Francis June 30, 2017

June 30, 2017

Hi folks I'm playing with the PBKDF2 package of Udo: http://www.smalltalkhub.com/#!/~UdoSchneider/PBKDF2 (thanks Udo), but I can't find how to validate a stored hash. Can you point me in the right direction? Thanks Francis -- View this message in context: http://forum.world.st/Validate-password-with-PBKDF2-tp4952973.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

2 2

Pharo6 playground saving semantics and .changes?
by Tim Mackinnon June 30, 2017

June 30, 2017

Hi - I really like the playground metaphor, it really is such a nice way to experiment. However I've noticed that unlike older versions of Smalltalk, it seems that DoIt operations in playground don't end up in the .changes file anymore (which I guess is a mixed blessing when you want to recover). It seems that the new metaphor is that work you do is saved as a page and you can see versions of your page in the upper right menu? Well sort of - as I haven't quite understood when it saves or doesn't? Often I get duplicate looking pages in that menu and often I make a change and want to keep it but find it doesn't save and if I accidentally close my playground my changes in a page are lost? What are the semantics of page saving? An example - if you do a few gofer loads of utilities and the put a comment on the first line of the page (which gives it a nice title in the page dropdown), sometimes that comment will be saved other times not? I also think it might be nice to remove page versions to help tidy things up. I'm thinking of rolling my sleeves up on this idea - but wanted to understand the vision firsts Tim Sent from my iPhone Sent from my iPhone

4 5

Solved: ZdcPluginMissing: SSL/TLS plugin initailization failed (VM plugin missing ? OS libraries missing ?)
by Offray Vladimir Luna CÃ¡rdenas June 29, 2017

June 29, 2017

Hi, Thanks Sven. This solves the problem. The issue was the 32 bit library. I don't know if this should be added as some kind of annotation or footnode to [1], because the chapter suposse a 32-bit Ubuntu Gnu/Linux deployment, but some of us are going to try similar stuff in similar environment, forgetting to install the 32 bits libraries. Anyway, if there is any room for this, I would be happy to make the edition with the respective pull request. [1] https://github.com/SquareBracketAssociates/EnterprisePharo/blob/master/WebA… Cheers, Offray Ps: Sorry to open a new thread. My mail was having some issues and didn't get updated threads.

1 0

Question about writeStream
by JÃ©rÃ©mie Regnault June 29, 2017

June 29, 2017

Hi, I am writing tests with streams, and I noticed that a stream opened on a string doesn't close, but FileStreams do close. Is it normal ? -- JÃ©rÃ©mie Regnault

3 2

Anyone in Oslo ?
by Alexandre Bergel June 29, 2017

June 29, 2017

Hi! I am in Oslo for a couple of days. Anyone up for a beer ? Cheers, Alexandre -- _,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;: Alexandre Bergel http://www.bergel.eu ^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;.

1 0

ZdcPluginMissing: SSL/TLS plugin initailization failed (VM plugin missing ? OS libraries missing ?)
by Offray Vladimir Luna CÃ¡rdenas June 29, 2017

June 29, 2017

Hi, I'm trying to deploy a small web app in Teapot, following the Enterprise Pharo documentation and so, using Pharo 4 in the server. Installation went fine, but when I try to actually use the app and I get this error: ZdcPluginMissing: SSL/TLS plugin initailization failed (VM plugin missing ? OS libraries missing ?) Looking at [1] I see that this is because Pharo VM is expecting to found libssl at some place. My server is a virtual Debian 6 64 bits, as provided by Digital Ocean. When I locate the missing library and make a symbolic link using: ln -s /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 /usr/lib/libssl.so.1.0.0 I still get this behavior: ldd libSqueakSSL.so linux-gate.so.1 (0xf7747000) libssl.so.1.0.0 => not found libc.so.6 => /lib32/libc.so.6 (0xf758b000) /lib/ld-linux.so.2 (0xf774a000) So, still is not finding the libssl.so. [1] https://stackoverflow.com/questions/12293670/zodiac-mail-sending-in-pharo-s… I don't know if this is related with running a 32 VM inside a Debian 64 bits distro, but running the chapter 2 example of the Enterprise Pharo, I have not any problem like this one, on the same virtual server while deploying the web app. How can I solve this? Thanks, Offray

2 1

Re: [Pharo-users] Planet squeak and friends
by Bruce O'Neel June 28, 2017

June 28, 2017

Hi, Thanks, I'll move it to longer than 6 months.ÃÂ I was trying to follow Stephane's idea of nothing out of date :-) I'd love to add ÃÂ [http://pharo.org/web/news](http://pharo.org/web/news) but the RSS feed does not work.ÃÂ Could someone go kick it so that it works please? Thanks. bruce

2 1

Re: [Pharo-users] Planet squeak and friends
by Bruce O'Neel June 28, 2017

June 28, 2017

Hi, Thanks for all of the help to find more blogs.ÃÂ I've added all of the ones below that have been updated in the last year.ÃÂ Keep in mind though that the most recent run cut off at the end of May because we had enough posts by then. We'll have an updated planet.squeak.org tonight once I get home. cheers bruce

1 0

ZnConstants missing 511 in default Pharo 6.0 32 image?
by Tim Mackinnon June 27, 2017

June 27, 2017

Hi - I have been slowly working my way through some of the pharo components and tutorials and when trying out ZnEasy with a password protected api, I got a talkback when I mistyped a password. It looks like ZnConstants in a fresh Pharo 6.0 32 image excludes 511 from its constants. The code looks correct (and its defined in the initialize method - ) but when I tried a ZnEasy call which returned 511 I got a walkback showing it as an unrecognized code? (The walkback is looking for 511 in ZnConstants httpStatusCodes). Is there some problem in the build process, or is this some type of user error? Tim

3 6

PharoCloud drops VM hosting and focuses on Ephemeric Cloud
by mikefilonov June 27, 2017

June 27, 2017

Hello, I just wanted to make some clarifications on what is going on with PharoCloud and how I see the future of the project. PharoCloud is not closing, but just dropping VM hosting support. We will continue to develop and maintain Ephemeric Cloud which allows you to publish Pharo web applications online much easier than any other VM hosting can offer. In some way PharoCloud just becomes more "cloudy" by dropping outdated technologies off :) Our plan is to make the project more community oriented. We integrated PharoCloud with Pharo.org SSO and provide *FREE* access to all *Pharo Association* members. You are welcome to log in to the cloud with your Pharo Association account at: https://www.pharocloud.com/manager/connect We are encouraging you to migrate your applications hosted as Pharocloud VMs to the Ephemeric Cloud. It is much more simple! We have some positive experience already. There are some examples I moved from VM hosting to Ephemeric Cloud: http://pharo.pharocloud.com http://seaside31.swarm.pharocloud.com/ http://eph-b147b6e2.swarm.pharocloud.com/ http://smalltalk.mikefilonov.ru/ Here you can find a quick start guide to Ephemeric cloud and some tips on how to publish your app: http://docs.swarm.pharocloud.com/article/getting_started Also there is a REST API you can use to manage the cloud. And there is also a Pharo wrapper around the REST-API: http://docs.swarm.pharocloud.com/article/pharo_library_reference We also have video guides: quickstart (sorry for old UI of the manager) https://www.youtube.com/watch?v=a1GfuT9M4qo curl example: https://www.youtube.com/watch?v=9dKBCpj96cU In case of any questions or issues with images, please feel free to contact me. -- View this message in context: http://forum.world.st/PharoCloud-drops-VM-hosting-and-focuses-on-Ephemeric-… Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

4 5

Using Iceberg to edit regular text files ?
by Sven Van Caekenberghe June 27, 2017

June 27, 2017

Is it possible to use Iceberg to edit regular text files directly in Pharo ? Specifically I would like to be able to edit README.md and similar files. Especially when using a all-in-one, the repo on file becomes quite hidden, and the whole idea is to hide the command line anyway, so it feels as if that should have to be possible. Maybe just open a File Browser on the right directory ? Sven PS: I also had the impression that class comment changes did not show up in the diff browser.

2 3

Some XMLParser DOM tests are red in Pharo 60
by Stephane Ducasse June 26, 2017

June 26, 2017

Hi all I'm taking Soup as an experiment to migrate to github.com Now I saw that some of the XMLParser DOM are red. Is it something known? Stef

1 0

Problems downloading windows version
by Vitor Medina Cruz June 26, 2017

June 26, 2017

Hello, I am trying to download the windows version of Pharo 6 but the download fails. The other distros work fine. cheers, Vitor

1 0

[ANN] Dates Pharo Sprints
by Marcus Denker June 26, 2017

June 26, 2017

Hi, I have added Events for all the next Pharo Sprint Dates in the Events page: https://association.pharo.org/events There is one for each month with the exception of August (holidays, ESUG the week after). Marcus

1 0

Planet squeak and friends
by Bruce O'Neel June 26, 2017

June 26, 2017

Hi, This now seems to work though there are a few points: * [http://pharo.org/news/atom.xml](http://pharo.org/news/atom.xml) gives me a 502, but, [http://pharo.org/news/](http://pharo.org/news/atom.xml)ÃÂ works fine.ÃÂ Could someone look into this please? * I have renamed any site that still responds but has not been updated in 2017 to Historical - site name.ÃÂ There are sadly only 6 sites NOT marked historical and 16 marked historical.ÃÂ Surely there are some other squeak/pharo/?? blogs, right?ÃÂ If so, please send them to me! * In a few weeks most of the historical sites will disapear.ÃÂ * I've not looked hard at any other than planet.squeak.org.ÃÂ * Planetfr.squeak.org had no sites.ÃÂ Should we keep it? * As sad as I might be about it, croquet seems to have passed on.ÃÂ Should I just get rid of planetcroquet? Thanks.ÃÂ And thanks for the responses before.ÃÂ I'll implement them, don't worry. cheers bruce

4 3

Re: [Pharo-users] [squeak-dev] Planet squeak and friends
by Tobias Pape June 25, 2017

June 25, 2017

> On 25.06.2017, at 20:33, Simon Michael <simon(a)joyful.com> wrote: > > Hi Bruce, thanks for working on it. > > I see you've moved planet*.squeak.org to another server and are making updates. Great! > > > On 6/25/17 7:54 AM, Bruce O'Neel wrote: >> This now seems to work though there are a few points: >> * [http://pharo.org/news/atom.xml](http://pharo.org/news/atom.xml) gives me a 502, but, [http://pharo.org/news/](http://pharo.org/news/atom.xml)Ã works fine.Ã Could someone look into this please? > > That's a little confusing. Are you moving/mirroring planet squeak to the pharo.org namespace ? > >> * I have renamed any site that still responds but has not been updated in 2017 to Historical - site name.Ã There are sadly only 6 sites NOT marked historical and 16 marked historical.Ã Surely there are some other squeak/pharo/?? blogs, right?Ã If so, please send them to me! >> * In a few weeks most of the historical sites will disapear.Ã > > Sounds good, I guess. > >> * I've not looked hard at any other than planet.squeak.org.Ã >> * Planetfr.squeak.org had no sites.Ã Should we keep it? > Nope, >> * As sad as I might be about it, croquet seems to have passed on.Ã Should I just get rid of planetcroquet? > > Yep. > > How about putting planetes on leave as well. It doesn't make sense to have an aggregator for one active feed. > > Any of these could be revived later if necessary. Or the active feeds could be merged into the main planet, unless the mixed languages make that too noisy. > > planetmisc.squeak.org - I've never heard of anyone using this, your call.. > > planet.smalltalk.org - hmm, still going strong. Do you think it still makes sense to have squeak-ish planet(s) separate from planet smalltalk ? Would it be better to focus everything there instead ? Note that this particular planet is not currently on the new squeak infrastructure. best regards -tobias > > Best > -Simon > > >

1 0

Teapot and POST:
by horrido June 25, 2017

June 25, 2017

I'm trying to learn how to use Teapot. The documentation is pretty clear about how to do GET: but it's thoroughly useless about how to do POST:. Is there any example for how to do POST:? -- View this message in context: http://forum.world.st/Teapot-and-POST-tp4951616.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

3 6

Re: [Pharo-users] Working with a compressed Fuel file?
by stephan June 25, 2017

June 25, 2017

A long time ago, Mariano wrote: > And what happened with the vm gzip crash? Still around? Yep, still crashing the vm. I revisited my MonticelloProjects experiment yesterday, and am still crashing the vm when serializing to a compressed fuel file. I wrote about it at the time, and then gave up as the vm was less stable during that period. To reproduce the crash in a pharo6 image: |project| Gofer it smalltalkhubUser: 'StephanEggermont' project: 'MonticelloProjects'; package: 'MonticelloProjects'; load. project := (Smalltalk at: #MCProject) new location: 'http://smalltalkhub.com/mc/StephanEggermont/Documentation/main'. project read. project saveToFile. That reliably crashes in saveToFile. It seems to be independent of 32/64 bit and mac/linux, as I tried some variations. Crash dumps in a mail to the vm list Stephan

1 0

[ANN] success story: surgery appointments digitalised
by Norbert Hartl June 24, 2017

June 24, 2017

I'm sorry I forgot to post this much earlier. Anywayâ¦. We are proud to add another success story to the pharo portfolio http://zweidenker.de/en/project/operationstermine-digitalisiert <http://zweidenker.de/en/project/operationstermine-digitalisiert> It is an operation planning tool for an eye surgery clinic. The core system is pharo4 and voyage (using mongo). The user interface is done with seaside. It interfaces with a legacy patient information system, microsoft exchange and other stuff in order to orchestrate the arrangement of surgery dates. The tool automates planning (which doctor works on which day and has still time to do the operation,â¦.). Finalized plans are produced in PDF an printed by the staff. This as a short info. If you have question don't hesitate to ask. Implanting more pharo everywhere :) Norbert

8 11