[ANN] Application Security for your domains
Hello guys, I'm doing a double announcement here. First, a new blog about development with Pharo, and Smalltalk: http://80738163270632.blogspot.com.ar/ Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release. Hope you like it and I'm looking forward to hearing from you. Cheers, Hernán
the linke o your blog leads to http://www.smalltalkhub.com/#%21/%7Ehernan/ApplicationSecurity On 28 Mar 2014, at 00:58, Hernán Morales Durand <hernan.morales@gmail.com> wrote:
Hello guys, I'm doing a double announcement here.
First, a new blog about development with Pharo, and Smalltalk:
http://80738163270632.blogspot.com.ar/
Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release.
Hope you like it and I'm looking forward to hearing from you. Cheers,
Hernán
Thank you for reporting. I have added links to Pharo and Fuel websites. Cheers, Hernán 2014-03-28 4:53 GMT-03:00 Pharo4Stef <pharo4Stef@free.fr>:
the linke o your blog leads to
http://www.smalltalkhub.com/#%21/%7Ehernan/ApplicationSecurity
On 28 Mar 2014, at 00:58, Hernán Morales Durand <hernan.morales@gmail.com> wrote:
Hello guys, I'm doing a double announcement here.
First, a new blog about development with Pharo, and Smalltalk:
http://80738163270632.blogspot.com.ar/
Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release.
Hope you like it and I'm looking forward to hearing from you. Cheers,
Hernán
2014-03-27 23:58 GMT+00:00 Hernán Morales Durand <hernan.morales@gmail.com>:
Hello guys, I'm doing a double announcement here.
First, a new blog about development with Pharo, and Smalltalk:
http://80738163270632.blogspot.com.ar/
Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release.
Hope you like it and I'm looking forward to hearing from you.
I was just about to roll my own to use in a CMS-y thingie I´m crafting. You just saved me days! \o/ Cheers, Sergi
On Thu, Mar 27, 2014 at 08:58:48PM -0300, Hern??n Morales Durand wrote:
Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release.
Hi, Good stuff! I've been doing some password-related work as well. http://samadhiweb.com/blog/2013.08.11.splitpasswordstore.html This allows writing the following: spec := DBConnectionSpec new key: 'mysql'; host: 'localhost'; port: 3306; user: 'myappuser'; ====> password: (SpsSplitPasswordStore readFrom: 'myappuser.dat'); yourself. Also, SHA256/512 password hashing: http://samadhiweb.com/blog/2013.11.17.shacrypt.html Code for both is published on SS3. -- Pierce Ng http://samadhiweb.com/blog/
do we have a Pharo PassPhrase 4 X 4 - specific project/variant/branch ? (i.e., four 4-char substring => 1 Passphrase ) I had done some work on mnemonics for such passphrases ... and I realize some like to salt-and-pepper with 3-char and 5-char Unicode chunks ... thnkx On 29 March 2014 10:05, Pierce Ng <pierce@samadhiweb.com> wrote:
On Thu, Mar 27, 2014 at 08:58:48PM -0300, Hern??n Morales Durand wrote:
Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release.
Hi,
Good stuff!
I've been doing some password-related work as well.
http://samadhiweb.com/blog/2013.08.11.splitpasswordstore.html
This allows writing the following:
spec := DBConnectionSpec new key: 'mysql'; host: 'localhost'; port: 3306; user: 'myappuser'; ====> password: (SpsSplitPasswordStore readFrom: 'myappuser.dat'); yourself.
Also, SHA256/512 password hashing:
http://samadhiweb.com/blog/2013.11.17.shacrypt.html
Code for both is published on SS3.
-- Pierce Ng http://samadhiweb.com/blog/
2014-03-29 10:58 GMT-03:00 Robert Shiplett <grshiplett@gmail.com>:
do we have a Pharo PassPhrase 4 X 4 - specific project/variant/branch ?
I don't know, but I would be happy to integrate it.
(i.e., four 4-char substring => 1 Passphrase )
I had done some work on mnemonics for such passphrases ... and I realize some like to salt-and-pepper with 3-char and 5-char Unicode chunks ...
Can you comment more about it? Do you have some code? I'm interested in image-based password mnemonics beacuse a well-known picture is easier to remember that text-based mnemonics, specially when passwords contain special characters. Cheers, Hernán
thnkx
On 29 March 2014 10:05, Pierce Ng <pierce@samadhiweb.com> wrote:
On Thu, Mar 27, 2014 at 08:58:48PM -0300, Hern??n Morales Durand wrote:
Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release.
Hi,
Good stuff!
I've been doing some password-related work as well.
http://samadhiweb.com/blog/2013.08.11.splitpasswordstore.html
This allows writing the following:
spec := DBConnectionSpec new key: 'mysql'; host: 'localhost'; port: 3306; user: 'myappuser'; ====> password: (SpsSplitPasswordStore readFrom: 'myappuser.dat'); yourself.
Also, SHA256/512 password hashing:
http://samadhiweb.com/blog/2013.11.17.shacrypt.html
Code for both is published on SS3.
-- Pierce Ng http://samadhiweb.com/blog/
2014-03-29 10:05 GMT-03:00 Pierce Ng <pierce@samadhiweb.com>:
On Thu, Mar 27, 2014 at 08:58:48PM -0300, Hern??n Morales Durand wrote:
Second, my first entry contains a post about Application Security, a new package to make Pharo applications more secure. You can start playing with the objects right now, while more documentation is being written for the next release.
Hi,
Good stuff!
I've been doing some password-related work as well.
http://samadhiweb.com/blog/2013.08.11.splitpasswordstore.html
This allows writing the following:
spec := DBConnectionSpec new key: 'mysql'; host: 'localhost'; port: 3306; user: 'myappuser'; ====> password: (SpsSplitPasswordStore readFrom: 'myappuser.dat'); yourself.
Also, SHA256/512 password hashing:
http://samadhiweb.com/blog/2013.11.17.shacrypt.html
Code for both is published on SS3.
Cool, thanks for sharing. BTW you can compile sha512crypt.c under Windows MinGW by conditionally adding: #define MAX(x,y) ((x) > (y) ? (x) : (y)) #define MIN(x,y) ((x) < (y) ? (x) : (y)) #ifndef alloca #define alloca(x) __builtin_alloca(x) #endif /* Taken from http://searchcode.com/codesearch/view/22364370 */ char * stpncpy (char *dst, const char *src, size_t len) { size_t n = strlen (src); if (n > len) n = len; return strncpy (dst, src, len) + n; } cc -m32 -shared -o libshacrypt.dll *.o Hernán
participants (5)
-
Hernán Morales Durand -
Pharo4Stef -
Pierce Ng -
Robert Shiplett -
Sergi Reyner