- Pharo-users - lists.pharo.org

Re: [Pharo-users] [Vm-dev] ptsd rage

by Travis Ayres

Totally agreed. On Mon, Dec 19, 2016 at 4:17 PM, Brad <bsselfridge(a)gmail.com> wrote: > Don't know about anyone else, but I would appreciate it if this kind of > commentary never made it to this email list. This topic is so > inappropriate. Let's keep the discussion about Pharo. If you feel you must > go down the political route, then please be gracious enough to find another > venue. > > Brad Selfridge > 913-269-2385 <(913)%20269-2385> > > On Dec 19, 2016, at 6:48 PM, Charlie Robbats <charlie.robbats(a)gmail.com> > wrote: > > Alright, one more sad observation. Of all the Law Enforcement violence, > either perpetrated by LEOs against citizens or by citizens against LEOs, in > all cases I am aware or recall having heard, all of these involve police > officers. No violence, or very little, is perpetrated against or by Sheriff > Deputies. As counties are a good and proper and consistent scope of crime > administration, regardless of the density, police ought to report to the > Sheriffs and let's put and end to broken windows policy and discriminatory > enforcement. Police are always in our shit, and have their egos to boot. > Sheriff Deputies, by comparison, are laid back and easy to talk to. They > engage the public in respect, without attitude. > > Bob didn't shoot the deputy. > > On 12/17/2016 10:11 PM, Charlie Robbats wrote: > > Last bit, a mantra: Crime & Punishment creates massive mental illness in > our society. Ask the Russians. > > On 12/17/2016 10:05 PM, Charlie Robbats wrote: > > > > Well, my paranoia is kicking. I spoke too broadly of police, I have > interacted with many and they do a lot of good. A bad apple spoils the > whatever and their code of silence allows for that sort of rot. I tell it > straight, because they monitor the list. I pissed them off! Do you think it > passed the sanity test that cops run all street drugs with their felon > database in hand? Damn! All those Fellas are going to turn and bite their > masters' hand, you watch! Stacking these grown men like Twinkies in > overcrowded prisons. There is a debt that needs to be paid and the > righteous are those in prison on a bunch of bullshit paper. Vive la > revolucion! Ok, sorry I went political. I am done. > > On 12/17/2016 9:49 PM, Charlie Robbats wrote: > > I am sad with you in your diagnosis. I get that too, the blues. I get high > if I am holding and listen to "Kind of Blue" or deep house or reggae. Some > X would be good, but herbage is my mainstay to drop my constant threat mode > (hypervigilence). I do not want a repeat of what happened! Unfortunately I > drive people away to make sure of that. I appreciate your alls kindness. I > wanted to share a solid explanation of why I am such a dick at times. I > flip to active threat mode, I struggle to control this. It doesn't help > that the police have been stalking me for 2 years, I am all caught up in > their noise. Don't believe a word of their truthfulness. The blue wall of > silence breaks God's commandment thou shalt not bear false witness. Police > violate that daily, protecting their brothers who shoot unarmed black men > in the back and claim they are fearing for their lives. Really? No, really? > Well, that is a different story. That just freaking triggers me. And my > opinion makes me their target. At least in my C-PTSD befuddled mind. > > Be well all! > > >

Dec. 20, 2016

Re: [Pharo-users] [Vm-dev] ptsd rage

by Brad

Don't know about anyone else, but I would appreciate it if this kind of commentary never made it to this email list. This topic is so inappropriate. Let's keep the discussion about Pharo. If you feel you must go down the political route, then please be gracious enough to find another venue. Brad Selfridge 913-269-2385 > On Dec 19, 2016, at 6:48 PM, Charlie Robbats <charlie.robbats(a)gmail.com> wrote: > > Alright, one more sad observation. Of all the Law Enforcement violence, either perpetrated by LEOs against citizens or by citizens against LEOs, in all cases I am aware or recall having heard, all of these involve police officers. No violence, or very little, is perpetrated against or by Sheriff Deputies. As counties are a good and proper and consistent scope of crime administration, regardless of the density, police ought to report to the Sheriffs and let's put and end to broken windows policy and discriminatory enforcement. Police are always in our shit, and have their egos to boot. Sheriff Deputies, by comparison, are laid back and easy to talk to. They engage the public in respect, without attitude. > > Bob didn't shoot the deputy. > >> On 12/17/2016 10:11 PM, Charlie Robbats wrote: >> Last bit, a mantra: Crime & Punishment creates massive mental illness in our society. Ask the Russians. >> >>> On 12/17/2016 10:05 PM, Charlie Robbats wrote: >>> >>> >>> >>> Well, my paranoia is kicking. I spoke too broadly of police, I have interacted with many and they do a lot of good. A bad apple spoils the whatever and their code of silence allows for that sort of rot. I tell it straight, because they monitor the list. I pissed them off! Do you think it passed the sanity test that cops run all street drugs with their felon database in hand? Damn! All those Fellas are going to turn and bite their masters' hand, you watch! Stacking these grown men like Twinkies in overcrowded prisons. There is a debt that needs to be paid and the righteous are those in prison on a bunch of bullshit paper. Vive la revolucion! Ok, sorry I went political. I am done. >>> >>>> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>>> I am sad with you in your diagnosis. I get that too, the blues. I get high if I am holding and listen to "Kind of Blue" or deep house or reggae. Some X would be good, but herbage is my mainstay to drop my constant threat mode (hypervigilence). I do not want a repeat of what happened! Unfortunately I drive people away to make sure of that. I appreciate your alls kindness. I wanted to share a solid explanation of why I am such a dick at times. I flip to active threat mode, I struggle to control this. It doesn't help that the police have been stalking me for 2 years, I am all caught up in their noise. Don't believe a word of their truthfulness. The blue wall of silence breaks God's commandment thou shalt not bear false witness. Police violate that daily, protecting their brothers who shoot unarmed black men in the back and claim they are fearing for their lives. Really? No, really? Well, that is a different story. That just freaking triggers me. And my opinion makes me their target. At least in my C-PTSD befuddled mind. >>>> Be well all! >

Dec. 20, 2016

Re: [Pharo-users] Password storage options

by Jan BlizniÄenko

Thank you a lot! :) I tried it in Pharo 5 and everything seems to be working (I just had to apt-get install libxcrypt:i386, load packages Cryptography, Blowfish (not sure if really needed though) and PasswordHashingFFI and manually create link in directory where it expected libxcrypt.so.1). About the FFI for Pharo 5/6, maybe that's what Esteban did in commit "Cryptography-EstebanMaringolo.50" on 15 September 2016 "Version ready to be loaded in Pharo 5.0 without affecting Kernel or System packages.". Scrypt would be even better to have, but I'm grateful enough for now since it was all easier and faster than I expected. Jan Paul DeBruicker wrote > And to add scrypt to that FFI library would be trivial if you have a 32bit > version of scrypt but I don't think there is one. I'd be happy to learn > I'm wrong though. And thats assuming you're using 32 bit pharo, which is > whats stable/released right now. > > > > > Paul DeBruicker wrote >> I made a crypt/bcrypt ffi library for older versions of Pharo that sounds >> like it meets your needs and is in the cryptography project here: >> >> http://smalltalkhub.com/#!/~Cryptography/Cryptography >> >> But I have not updated it for the new FFI versions in Pharo 5/6. >> >> >> >> And Pierce Ng made a blog post and library about his own set up here: >> http://www.samadhiweb.com/blog/2013.11.17.shacrypt.html >> >> >> >> >> Jan BlizniÄenko wrote >>> Hello >>> >>> I'm working on Pharo-based webserver and right now I got to the topic of >>> storing user passwords. I found SHA256 integrated in Pharo, but hashing >>> with >>> SHA is far from enough. I also looked around the mailing list history to >>> find few posts from 2011 about bcrypt using Linux libraries. I'd like to >>> ask >>> what is current status - what are my options under following conditions: >>> >>> I prefer Pharo 5 compatibility. I could downgrade to Pharo 4 or use beta >>> Pharo 6, but latest stable relase is preferred. >>> >>> I require at least bcrypt or PDKBF2, but I much more prefer >>> GPU-attack-resistant solutions like scrypt or Argon2. >>> >>> I require Linux compatibility, but platform independent solution would >>> be >>> kinda nice (we could use the same algorithm on our local machines with >>> Mac >>> and Win for development). >>> >>> Thank you >>> Jan >>> >>> >>> >>> -- >>> View this message in context: >>> http://forum.world.st/Password-storage-options-tp4927471.html >>> Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com. -- View this message in context: http://forum.world.st/Password-storage-options-tp4927480p4927521.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

Dec. 20, 2016

Re: [Pharo-users] [Vm-dev] ptsd rage

by Charlie Robbats

Alright, one more sad observation. Of all the Law Enforcement violence, either perpetrated by LEOs against citizens or by citizens against LEOs, in all cases I am aware or recall having heard, all of these involve police officers. No violence, or very little, is perpetrated against or by Sheriff Deputies. As counties are a good and proper and consistent scope of crime administration, regardless of the density, police ought to report to the Sheriffs and let's put and end to broken windows policy and discriminatory enforcement. Police are always in our shit, and have their egos to boot. Sheriff Deputies, by comparison, are laid back and easy to talk to. They engage the public in respect, without attitude. Bob didn't shoot the deputy. On 12/17/2016 10:11 PM, Charlie Robbats wrote: > > Last bit, a mantra: Crime & Punishment creates massive mental illness > in our society. Ask the Russians. > > > On 12/17/2016 10:05 PM, Charlie Robbats wrote: >> >> >> >> Well, my paranoia is kicking. I spoke too broadly of police, I have >> interacted with many and they do a lot of good. A bad apple spoils >> the whatever and their code of silence allows for that sort of rot. I >> tell it straight, because they monitor the list. I pissed them off! >> Do you think it passed the sanity test that cops run all street drugs >> with their felon database in hand? Damn! All those Fellas are going >> to turn and bite their masters' hand, you watch! Stacking these grown >> men like Twinkies in overcrowded prisons. There is a debt that needs >> to be paid and the righteous are those in prison on a bunch of >> bullshit paper. Vive la revolucion! Ok, sorry I went political. I am >> done. >> >> >> On 12/17/2016 9:49 PM, Charlie Robbats wrote: >>> >>> I am sad with you in your diagnosis. I get that too, the blues. I >>> get high if I am holding and listen to "Kind of Blue" or deep house >>> or reggae. Some X would be good, but herbage is my mainstay to drop >>> my constant threat mode (hypervigilence). I do not want a repeat of >>> what happened! Unfortunately I drive people away to make sure of >>> that. I appreciate your alls kindness. I wanted to share a solid >>> explanation of why I am such a dick at times. I flip to active >>> threat mode, I struggle to control this. It doesn't help that the >>> police have been stalking me for 2 years, I am all caught up in >>> their noise. Don't believe a word of their truthfulness. The blue >>> wall of silence breaks God's commandment thou shalt not bear false >>> witness. Police violate that daily, protecting their brothers who >>> shoot unarmed black men in the back and claim they are fearing for >>> their lives. Really? No, really? Well, that is a different story. >>> That just freaking triggers me. And my opinion makes me their >>> target. At least in my C-PTSD befuddled mind. >>> >>> Be well all! >>>

Dec. 20, 2016

Re: [Pharo-users] Hash collision

by Martin McClure

On 12/19/2016 01:27 AM, Andres Valloud wrote: > At first glance, that the failure code only sees "two" things when it > should see "eight" seems to be problematic. > > Perhaps the primitive insists on hashing byte objects, and there is a > distinction between "byte" objects and "word" objects (whatever "word" > means, presumably a constant width integer across all platforms). I > haven't looked at the code. > > From my perspective... back in the day that primitive used to hash > bytes, and from what I saw here the failure code is hashing multi-byte > things. If all of these observations are correct, then I'd say the > failure code isn't doing what the primitive is doing, and in doing so > it's introducing a lot of collisions that I'd like to believe the > intended hash function wouldn't produce. Ah, I see your concern. As far as I can see, all classes that are using the StringHash primitive are actually byte objects, so things are, I believe, working as designed. The only problem is that Ben did an experiment to see whether Float's hashing would be improved by using the StringHash primitive. Which it failed to do, because Float is not a byte object. We could use an equivalent primitive to hash word objects, but I haven't found one. We could also use a primitive to retrieve the bytes of a word object, and I haven't found one of those either. There are places that are converting the words to large integers and then hashing those, which would work for Floats. -Martin

Dec. 19, 2016

Re: [Pharo-users] Password storage options

by Paul DeBruicker

And to add scrypt to that FFI library would be trivial if you have a 32bit version of scrypt but I don't think there is one. I'd be happy to learn I'm wrong though. And thats assuming you're using 32 bit pharo, which is whats stable/released right now. Paul DeBruicker wrote > I made a crypt/bcrypt ffi library for older versions of Pharo that sounds > like it meets your needs and is in the cryptography project here: > > http://smalltalkhub.com/#!/~Cryptography/Cryptography > > But I have not updated it for the new FFI versions in Pharo 5/6. > > > > And Pierce Ng made a blog post and library about his own set up here: > http://www.samadhiweb.com/blog/2013.11.17.shacrypt.html > > > > > Jan BlizniÄenko wrote >> Hello >> >> I'm working on Pharo-based webserver and right now I got to the topic of >> storing user passwords. I found SHA256 integrated in Pharo, but hashing >> with >> SHA is far from enough. I also looked around the mailing list history to >> find few posts from 2011 about bcrypt using Linux libraries. I'd like to >> ask >> what is current status - what are my options under following conditions: >> >> I prefer Pharo 5 compatibility. I could downgrade to Pharo 4 or use beta >> Pharo 6, but latest stable relase is preferred. >> >> I require at least bcrypt or PDKBF2, but I much more prefer >> GPU-attack-resistant solutions like scrypt or Argon2. >> >> I require Linux compatibility, but platform independent solution would be >> kinda nice (we could use the same algorithm on our local machines with >> Mac >> and Win for development). >> >> Thank you >> Jan >> >> >> >> -- >> View this message in context: >> http://forum.world.st/Password-storage-options-tp4927471.html >> Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com. -- View this message in context: http://forum.world.st/Password-storage-options-tp4927480p4927502.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

Dec. 19, 2016

Re: [Pharo-users] Password storage options

by Paul DeBruicker

I made a crypt/bcrypt ffi library for older versions of Pharo that sounds like it meets your needs and is in the cryptography project here: http://smalltalkhub.com/#!/~Cryptography/Cryptography But I have not updated it for the new FFI versions in Pharo 5/6. And Pierce Ng made a blog post and library about his own set up here: http://www.samadhiweb.com/blog/2013.11.17.shacrypt.html Jan BlizniÄenko wrote > Hello > > I'm working on Pharo-based webserver and right now I got to the topic of > storing user passwords. I found SHA256 integrated in Pharo, but hashing > with > SHA is far from enough. I also looked around the mailing list history to > find few posts from 2011 about bcrypt using Linux libraries. I'd like to > ask > what is current status - what are my options under following conditions: > > I prefer Pharo 5 compatibility. I could downgrade to Pharo 4 or use beta > Pharo 6, but latest stable relase is preferred. > > I require at least bcrypt or PDKBF2, but I much more prefer > GPU-attack-resistant solutions like scrypt or Argon2. > > I require Linux compatibility, but platform independent solution would be > kinda nice (we could use the same algorithm on our local machines with Mac > and Win for development). > > Thank you > Jan > > > > -- > View this message in context: > http://forum.world.st/Password-storage-options-tp4927471.html > Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com. -- View this message in context: http://forum.world.st/Password-storage-options-tp4927480p4927501.html Sent from the Pharo Smalltalk Users mailing list archive at Nabble.com.

Dec. 19, 2016

Password storage options

by Torsten Bergmann

>I require at least bcrypt or PDKBF2, but I much more prefer >GPU-attack-resistant solutions like scrypt or Argon2. If required you can use external libraries like scrypt (https://lolware.net/2014/04/29/libscrypt.html) and call it using UFFI from Pharo Thanks T.

Dec. 19, 2016

Re: [Pharo-users] DNU on materializing a fueled out exception

by Mariano Martinez Peck

I personally think Denis has raised an important remark. Fuel responsibility here should stop at supporting post materialization actions. So...I do agree that this code is ONE particular usage of Fuel and such code should likely be packaged with the tool and not with Fuel . On Mon, Dec 19, 2016 at 2:41 PM, Tudor Girba <tudor(a)tudorgirba.com> wrote: > Hi, > > > On Dec 19, 2016, at 6:34 PM, Denis Kudriashov <dionisiydk(a)gmail.com> > wrote: > > > > Hi. > > > > 2016-12-19 18:08 GMT+01:00 Max Leske <maxleske(a)gmail.com>: > > I suppose that functionality should be resolved via FuelPlatform. > Something like > > > > FLPlatform current > > openDebuggerOn: Processor activeProcess > > context: materialization root > > label: 'External stack' > > > > Is it really nice way to do it? I mean why we force system to open > debugger when serialised context is loaded? > > IMHO it is responsibility of tool to decide what to do with object. It > should be good extension for file browser or inspector. Tool will detect > that it work with context and will allow to debug it. > > > > Post materialisation action is nice feature but for me it is overused > here. > > Looking from far away (I did not check the code) I kind of agree with this > point of view. If we make it the responsibility of the tool, the design > becomes a bit more object-centric. To me it looks like the Platform tries > to know more things that are not about Fuel. > > Cheers, > Doru > > -- > www.tudorgirba.com > www.feenk.com > > "The coherence of a trip is given by the clearness of the goal." > > > > > > > -- Mariano http://marianopeck.wordpress.com

Dec. 19, 2016

Re: [Pharo-users] DNU on materializing a fueled out exception

by Tudor Girba

Hi, > On Dec 19, 2016, at 6:34 PM, Denis Kudriashov <dionisiydk(a)gmail.com> wrote: > > Hi. > > 2016-12-19 18:08 GMT+01:00 Max Leske <maxleske(a)gmail.com>: > I suppose that functionality should be resolved via FuelPlatform. Something like > > FLPlatform current > openDebuggerOn: Processor activeProcess > context: materialization root > label: 'External stack' > > Is it really nice way to do it? I mean why we force system to open debugger when serialised context is loaded? > IMHO it is responsibility of tool to decide what to do with object. It should be good extension for file browser or inspector. Tool will detect that it work with context and will allow to debug it. > > Post materialisation action is nice feature but for me it is overused here. Looking from far away (I did not check the code) I kind of agree with this point of view. If we make it the responsibility of the tool, the design becomes a bit more object-centric. To me it looks like the Platform tries to know more things that are not about Fuel. Cheers, Doru -- www.tudorgirba.com www.feenk.com "The coherence of a trip is given by the clearness of the goal."

Dec. 19, 2016