Cryptography repository issue
Locked
 
|
Hi All,
Most versions of the Cryptography package are missing from its repository[1]. Does anyone know what happened to them? Is there a way to restore them? Levente [1]http://squeaksource.com/Cryptography.html |
Re: Cryptography repository issue
|
|
On Thu, Jan 25, 2018 at 07:23:23PM +0100, Levente Uzonyi wrote:
> Hi All, > > Most versions of the Cryptography package are missing from its > repository[1]. > Does anyone know what happened to them? Is there a way to restore them? > > Levente > > [1]http://squeaksource.com/Cryptography.html > Hi, I think that we did have an issue a while back with files being removed from this repository. This is a serious concern, because the the repository contains VM plugins in addition to the cryptography algorithms. We have no real protection against any of these packages (including the plugins) being modified or deleted. If it was anything other that cryptography, I would not worry, but this seems like a particularly bad place for untraceable changes to be happening. We also have updates appearing in this repository under various alias user IDs, which normally would not be a big concern. But it does not seem like a good idea in the area of security and crypto algorithms, so I would ask that anyone contributing to this repository please make your identity clear and traceable. I did a check today to compare the current repository to a backup that I made last December 10. I see nothing modified or removed since that time. I cannot find an earlier backup, so I am not sure what may have gone missing prior to December 10. Can anyone clarify what versions are missing, or (better yet) provide backups copies of the missing versions? Thanks, Dave |
Re: Cryptography repository issue
|
|
I haven't deleted anything from the squeaksource repo but I did make a copy
of it on smalltalkhub here: http://smalltalkhub.com/#!/~Cryptography/Cryptography Back when there was a threat that squeaksource was going away. Maybe it has the missing packages? MCHttpRepository location: 'http://smalltalkhub.com/mc/Cryptography/Cryptography/main' user: '' password: '' Hope this helps Paul David T. Lewis wrote > On Thu, Jan 25, 2018 at 07:23:23PM +0100, Levente Uzonyi wrote: >> Hi All, >> >> Most versions of the Cryptography package are missing from its >> repository[1]. >> Does anyone know what happened to them? Is there a way to restore them? >> >> Levente >> >> [1]http://squeaksource.com/Cryptography.html >> > > Hi, > > I think that we did have an issue a while back with files being removed > from this repository. > > This is a serious concern, because the the repository contains VM plugins > in addition to the cryptography algorithms. We have no real protection > against any of these packages (including the plugins) being modified or > deleted. If it was anything other that cryptography, I would not worry, > but this seems like a particularly bad place for untraceable changes to > be happening. > > We also have updates appearing in this repository under various alias > user IDs, which normally would not be a big concern. But it does not > seem like a good idea in the area of security and crypto algorithms, > so I would ask that anyone contributing to this repository please make > your identity clear and traceable. > > I did a check today to compare the current repository to a backup that > I made last December 10. I see nothing modified or removed since that > time. I cannot find an earlier backup, so I am not sure what may have > gone missing prior to December 10. > > Can anyone clarify what versions are missing, or (better yet) provide > backups copies of the missing versions? > > Thanks, > Dave -- Sent from: http://forum.world.st/Squeak-Dev-f45488.html |
Re: Cryptography repository issue
|
|
Thank you Paul, this is very helpful.
Yes it does look like the missing Cryptography versions are safe and sound in the smalltalkhub repository. The only things that appear to be missing are the versions of Crytography prior to Cryptography-mtf.36. Everything else seems to be in good order. I can also see that the missing versions are actually all still present on the filesystem on squeaksource.com. They do not appear in the live repository, but it turns out that the data files are still safely on disk, and could be reloaded from there if needed. Dave On Sat, Jan 27, 2018 at 12:43:29PM -0700, Paul DeBruicker wrote: > I haven't deleted anything from the squeaksource repo but I did make a copy > of it on smalltalkhub here: > > > > http://smalltalkhub.com/#!/~Cryptography/Cryptography > > > > Back when there was a threat that squeaksource was going away. Maybe it has > the missing packages? > > > MCHttpRepository > location: 'http://smalltalkhub.com/mc/Cryptography/Cryptography/main' > user: '' > password: '' > > > > Hope this helps > > > Paul > > > > > > > David T. Lewis wrote > > On Thu, Jan 25, 2018 at 07:23:23PM +0100, Levente Uzonyi wrote: > >> Hi All, > >> > >> Most versions of the Cryptography package are missing from its > >> repository[1]. > >> Does anyone know what happened to them? Is there a way to restore them? > >> > >> Levente > >> > >> [1]http://squeaksource.com/Cryptography.html > >> > > > > Hi, > > > > I think that we did have an issue a while back with files being removed > > from this repository. > > > > This is a serious concern, because the the repository contains VM plugins > > in addition to the cryptography algorithms. We have no real protection > > against any of these packages (including the plugins) being modified or > > deleted. If it was anything other that cryptography, I would not worry, > > but this seems like a particularly bad place for untraceable changes to > > be happening. > > > > We also have updates appearing in this repository under various alias > > user IDs, which normally would not be a big concern. But it does not > > seem like a good idea in the area of security and crypto algorithms, > > so I would ask that anyone contributing to this repository please make > > your identity clear and traceable. > > > > I did a check today to compare the current repository to a backup that > > I made last December 10. I see nothing modified or removed since that > > time. I cannot find an earlier backup, so I am not sure what may have > > gone missing prior to December 10. > > > > Can anyone clarify what versions are missing, or (better yet) provide > > backups copies of the missing versions? > > > > Thanks, > > Dave > > > > > > -- > Sent from: http://forum.world.st/Squeak-Dev-f45488.html > |
Re: Cryptography repository issue
|
|
Actually, I can see by looking at a copy of the in-image repository that
the missing versions are still in the squeaksource.com image. It appears that they are just marked as deleted, but they do not really go away. I have administrative access to the image, so I think I can do the undelete if that is the best approach. I'll wait for guidance from a Cryptography admin or developer before doing anything. Dave On Sat, Jan 27, 2018 at 05:46:46PM -0500, David T. Lewis wrote: > Thank you Paul, this is very helpful. > > Yes it does look like the missing Cryptography versions are safe and sound > in the smalltalkhub repository. The only things that appear to be missing > are the versions of Crytography prior to Cryptography-mtf.36. Everything else > seems to be in good order. > > I can also see that the missing versions are actually all still present on > the filesystem on squeaksource.com. They do not appear in the live repository, > but it turns out that the data files are still safely on disk, and could be > reloaded from there if needed. > > Dave > > > On Sat, Jan 27, 2018 at 12:43:29PM -0700, Paul DeBruicker wrote: > > I haven't deleted anything from the squeaksource repo but I did make a copy > > of it on smalltalkhub here: > > > > > > > > http://smalltalkhub.com/#!/~Cryptography/Cryptography > > > > > > > > Back when there was a threat that squeaksource was going away. Maybe it has > > the missing packages? > > > > > > MCHttpRepository > > location: 'http://smalltalkhub.com/mc/Cryptography/Cryptography/main' > > user: '' > > password: '' > > > > > > > > Hope this helps > > > > > > Paul > > > > > > > > > > > > > > David T. Lewis wrote > > > On Thu, Jan 25, 2018 at 07:23:23PM +0100, Levente Uzonyi wrote: > > >> Hi All, > > >> > > >> Most versions of the Cryptography package are missing from its > > >> repository[1]. > > >> Does anyone know what happened to them? Is there a way to restore them? > > >> > > >> Levente > > >> > > >> [1]http://squeaksource.com/Cryptography.html > > >> > > > > > > Hi, > > > > > > I think that we did have an issue a while back with files being removed > > > from this repository. > > > > > > This is a serious concern, because the the repository contains VM plugins > > > in addition to the cryptography algorithms. We have no real protection > > > against any of these packages (including the plugins) being modified or > > > deleted. If it was anything other that cryptography, I would not worry, > > > but this seems like a particularly bad place for untraceable changes to > > > be happening. > > > > > > We also have updates appearing in this repository under various alias > > > user IDs, which normally would not be a big concern. But it does not > > > seem like a good idea in the area of security and crypto algorithms, > > > so I would ask that anyone contributing to this repository please make > > > your identity clear and traceable. > > > > > > I did a check today to compare the current repository to a backup that > > > I made last December 10. I see nothing modified or removed since that > > > time. I cannot find an earlier backup, so I am not sure what may have > > > gone missing prior to December 10. > > > > > > Can anyone clarify what versions are missing, or (better yet) provide > > > backups copies of the missing versions? > > > > > > Thanks, > > > Dave > > > > > > > > > > > > -- > > Sent from: http://forum.world.st/Squeak-Dev-f45488.html > > > |
Re: Cryptography repository issue
|
|
> On 28.01.2018, at 00:04, David T. Lewis <[hidden email]> wrote: > > Actually, I can see by looking at a copy of the in-image repository that > the missing versions are still in the squeaksource.com image. It appears > that they are just marked as deleted, but they do not really go away. > > I have administrative access to the image, so I think I can do the undelete > if that is the best approach. It is :) (That's what I meant recently when the issue from henry came up) BTW: who deleted those versions? > I'll wait for guidance from a Cryptography > admin or developer before doing anything. > > Dave > > On Sat, Jan 27, 2018 at 05:46:46PM -0500, David T. Lewis wrote: >> Thank you Paul, this is very helpful. >> >> Yes it does look like the missing Cryptography versions are safe and sound >> in the smalltalkhub repository. The only things that appear to be missing >> are the versions of Crytography prior to Cryptography-mtf.36. Everything else >> seems to be in good order. >> >> I can also see that the missing versions are actually all still present on >> the filesystem on squeaksource.com. They do not appear in the live repository, >> but it turns out that the data files are still safely on disk, and could be >> reloaded from there if needed. >> >> Dave >> >> >> On Sat, Jan 27, 2018 at 12:43:29PM -0700, Paul DeBruicker wrote: >>> I haven't deleted anything from the squeaksource repo but I did make a copy >>> of it on smalltalkhub here: >>> >>> >>> >>> http://smalltalkhub.com/#!/~Cryptography/Cryptography >>> >>> >>> >>> Back when there was a threat that squeaksource was going away. Maybe it has >>> the missing packages? >>> >>> >>> MCHttpRepository >>> location: 'http://smalltalkhub.com/mc/Cryptography/Cryptography/main' >>> user: '' >>> password: '' >>> >>> >>> >>> Hope this helps >>> >>> >>> Paul >>> >>> >>> >>> >>> >>> >>> David T. Lewis wrote >>>> On Thu, Jan 25, 2018 at 07:23:23PM +0100, Levente Uzonyi wrote: >>>>> Hi All, >>>>> >>>>> Most versions of the Cryptography package are missing from its >>>>> repository[1]. >>>>> Does anyone know what happened to them? Is there a way to restore them? >>>>> >>>>> Levente >>>>> >>>>> [1]http://squeaksource.com/Cryptography.html >>>>> >>>> >>>> Hi, >>>> >>>> I think that we did have an issue a while back with files being removed >>>> from this repository. >>>> >>>> This is a serious concern, because the the repository contains VM plugins >>>> in addition to the cryptography algorithms. We have no real protection >>>> against any of these packages (including the plugins) being modified or >>>> deleted. If it was anything other that cryptography, I would not worry, >>>> but this seems like a particularly bad place for untraceable changes to >>>> be happening. >>>> >>>> We also have updates appearing in this repository under various alias >>>> user IDs, which normally would not be a big concern. But it does not >>>> seem like a good idea in the area of security and crypto algorithms, >>>> so I would ask that anyone contributing to this repository please make >>>> your identity clear and traceable. >>>> >>>> I did a check today to compare the current repository to a backup that >>>> I made last December 10. I see nothing modified or removed since that >>>> time. I cannot find an earlier backup, so I am not sure what may have >>>> gone missing prior to December 10. >>>> >>>> Can anyone clarify what versions are missing, or (better yet) provide >>>> backups copies of the missing versions? >>>> >>>> Thanks, >>>> Dave >>> >>> >>> >>> >>> >>> -- >>> Sent from: http://forum.world.st/Squeak-Dev-f45488.html >>> >> > |
Re: Cryptography repository issue
|
|
On Sun, Jan 28, 2018 at 07:30:47PM +0100, Tobias Pape wrote:
> > > On 28.01.2018, at 00:04, David T. Lewis <[hidden email]> wrote: > > > > Actually, I can see by looking at a copy of the in-image repository that > > the missing versions are still in the squeaksource.com image. It appears > > that they are just marked as deleted, but they do not really go away. > > > > I have administrative access to the image, so I think I can do the undelete > > if that is the best approach. > > It is :) > (That's what I meant recently when the issue from henry came up) OK done. The deleted versions are back now. > BTW: who deleted those versions? > Based on some earlier emails, I believe they were accidentally deleted by Rob Withers when he was cleaning things up in the repository. There are three people with admin on that project, so it might be a good idea to have just one (presumably Ron, who created the repository) and let everyone else on the project have developer level access. That would help prevent accidents or confusion in the future. Dave |
|
|
Hi yo everyone, I am Rob Withers posting as Henry House. I have also used the alias Alan Pinch and Ziro Zimbarra. I guess I had reasons to go into obfuscation.
I’ve resubmitted most of the code I’m working on under my name and I’ve deleted Henry House from the crypto library. The updated packages are Cryptography, ParrotTalk, eLindaContinued and FEC.
I think having a multiplicity of Administration is helpful but if the correct path is just being a developer, that’s fine too. I deleted back versions of some packages (Cryptography) and entire packages when they were my temporary reshuffling of what
is now Raven, which I did not yet re-author.
I tried to subscribe a new rwithers address but I did not receive an email to finalize.
I have a three pronged effort, atm, perhaps you could help me decide what to work on and where collegiate efforts could gain a couple of projects. Like the Green Manalishi and the Three-Pronged Crown, by Judas Priest, do you feel me?
First is resurrected FEC, mostly got ReedSolomon working with a GaloisField polynomial. One decoding failure in batch. Next up is coding/porting QRCode from ZXing source.
Second is in eLinda, using a Continuation or something to implement event-loop liveness, when a "VatSemaphore" is weighted when waited. Put the EventContinuation in a pool until semaphore is signaled, for rescheduling in the vat
queue.
Third is implementing STON decoding in Java, so Squeak/Pharo and Java can interoperate at later 6: Raven, for distributed objects cross-Language. I have STON encoding mostly finished structurally, though it needs tests ported.
I wish folks would be inspired by one of the first two, I think I must needs choose #3, STON in Java for layer 6 interoperability. As well add two Messages to ParrotTalk to enable a naming service: TryReceivers and YouChoose.
I use Oceanside, as Alan Pinch, as my main repo, but I also publish to Cryptography.
Thank you,
Rob
Sent from ProtonMail Mobile
On Sun, Jan 28, 2018 at 07:30:47PM +0100, Tobias Pape wrote: > > > On 28.01.2018, at 00:04, David T. Lewis wrote: > > > > Actually, I can see by looking at a copy of the in-image repository that > > the missing versions are still in the squeaksource.com image. It appears > > that they are just marked as deleted, but they do not really go away. > > > > I have administrative access to the image, so I think I can do the undelete > > if that is the best approach. > > It is :) > (That's what I meant recently when the issue from henry came up) OK done. The deleted versions are back now. > BTW: who deleted those versions? > Based on some earlier emails, I believe they were accidentally deleted by Rob Withers when he was cleaning things up in the repository. There are three people with admin on that project, so it might be a good idea to have just one (presumably Ron, who created the repository) and let everyone else on the project have developer level access. That would help prevent accidents or confusion in the future. Dave |
Re: Cryptography repository issue
|
|
Rob,
Thanks for the update. I am not part of the Cryptography project but it is good to know what is going on. Regarding the musical reference, The green manalishi had a two prong crown, not three, but I get your point ;-) I do still like the original Peter Green version. Dave On Tue, Jan 30, 2018 at 10:33:11AM -0500, henry wrote: > Hi yo everyone, I am Rob Withers posting as Henry House. I have also used the alias Alan Pinch and Ziro Zimbarra. I guess I had reasons to go into obfuscation. > > I???ve resubmitted most of the code I???m working on under my name and I???ve deleted Henry House from the crypto library. The updated packages are Cryptography, ParrotTalk, eLindaContinued and FEC. > > I think having a multiplicity of Administration is helpful but if the correct path is just being a developer, that???s fine too. I deleted back versions of some packages (Cryptography) and entire packages when they were my temporary reshuffling of what is now Raven, which I did not yet re-author. > > I tried to subscribe a new rwithers address but I did not receive an email to finalize. > > I have a three pronged effort, atm, perhaps you could help me decide what to work on and where collegiate efforts could gain a couple of projects. Like the Green Manalishi and the Three-Pronged Crown, by Judas Priest, do you feel me? > > First is resurrected FEC, mostly got ReedSolomon working with a GaloisField polynomial. One decoding failure in batch. Next up is coding/porting QRCode from ZXing source. > > Second is in eLinda, using a Continuation or something to implement event-loop liveness, when a "VatSemaphore" is weighted when waited. Put the EventContinuation in a pool until semaphore is signaled, for rescheduling in the vat queue. > > Third is implementing STON decoding in Java, so Squeak/Pharo and Java can interoperate at later 6: Raven, for distributed objects cross-Language. I have STON encoding mostly finished structurally, though it needs tests ported. > > I wish folks would be inspired by one of the first two, I think I must needs choose #3, STON in Java for layer 6 interoperability. As well add two Messages to ParrotTalk to enable a naming service: TryReceivers and YouChoose. > > I use Oceanside, as Alan Pinch, as my main repo, but I also publish to Cryptography. > > Thank you, > Rob > > Sent from ProtonMail Mobile > > On Sun, Jan 28, 2018 at 13:52, David T. Lewis <[hidden email]> wrote: > > > On Sun, Jan 28, 2018 at 07:30:47PM +0100, Tobias Pape wrote: > > > On 28.01.2018, at 00:04, David T. Lewis wrote: > > > > Actually, I can see by looking at a copy of the in-image repository that > > the missing versions are still in the squeaksource.com image. It appears > > that they are just marked as deleted, but they do not really go away. > > > > I have administrative access to the image, so I think I can do the undelete > > if that is the best approach. > > It is :) > (That's what I meant recently when the issue from henry came up) OK done. The deleted versions are back now. > BTW: who deleted those versions? > Based on some earlier emails, I believe they were accidentally deleted by Rob Withers when he was cleaning things up in the repository. There are three people with admin on that project, so it might be a good idea to have just one (presumably Ron, who created the repository) and let everyone else on the project have developer level access. That would help prevent accidents or confusion in the future. Dave @mail.msen.com> > |
|
|
QRCode is some work.
Regarding my musical reference, I knew something was off. I didn’t know Fleetwood Mac took that song, too. I’ll listen for Peter Green.
Sent from ProtonMail Mobile
Rob, Thanks for the update. I am not part of the Cryptography project but it is good to know what is going on. Regarding the musical reference, The green manalishi had a two prong crown, not three, but I get your point ;-) I do still like the original Peter Green version. Dave On Tue, Jan 30, 2018 at 10:33:11AM -0500, henry wrote: > Hi yo everyone, I am Rob Withers posting as Henry House. I have also used the alias Alan Pinch and Ziro Zimbarra. I guess I had reasons to go into obfuscation. > > I???ve resubmitted most of the code I???m working on under my name and I???ve deleted Henry House from the crypto library. The updated packages are Cryptography, ParrotTalk, eLindaContinued and FEC. > > I think having a multiplicity of Administration is helpful but if the correct path is just being a developer, that???s fine too. I deleted back versions of some packages (Cryptography) and entire packages when they were my temporary reshuffling of what is now Raven, which I did not yet re-author. > > I tried to subscribe a new rwithers address but I did not receive an email to finalize. > > I have a three pronged effort, atm, perhaps you could help me decide what to work on and where collegiate efforts could gain a couple of projects. Like the Green Manalishi and the Three-Pronged Crown, by Judas Priest, do you feel me? > > First is resurrected FEC, mostly got ReedSolomon working with a GaloisField polynomial. One decoding failure in batch. Next up is coding/porting QRCode from ZXing source. > > Second is in eLinda, using a Continuation or something to implement event-loop liveness, when a "VatSemaphore" is weighted when waited. Put the EventContinuation in a pool until semaphore is signaled, for rescheduling in the vat queue. > > Third is implementing STON decoding in Java, so Squeak/Pharo and Java can interoperate at later 6: Raven, for distributed objects cross-Language. I have STON encoding mostly finished structurally, though it needs tests ported. > > I wish folks would be inspired by one of the first two, I think I must needs choose #3, STON in Java for layer 6 interoperability. As well add two Messages to ParrotTalk to enable a naming service: TryReceivers and YouChoose. > > I use Oceanside, as Alan Pinch, as my main repo, but I also publish to Cryptography. > > Thank you, > Rob > > Sent from ProtonMail Mobile > > On Sun, Jan 28, 2018 at 13:52, David T. Lewis wrote: > > > On Sun, Jan 28, 2018 at 07:30:47PM +0100, Tobias Pape wrote: > > > On 28.01.2018, at 00:04, David T. Lewis wrote: > > > > Actually, I can see by looking at a copy of the in-image repository that > > the missing versions are still in the squeaksource.com image. It appears > > that they are just marked as deleted, but they do not really go away. > > > > I have administrative access to the image, so I think I can do the undelete > > if that is the best approach. > > It is :) > (That's what I meant recently when the issue from henry came up) OK done. The deleted versions are back now. > BTW: who deleted those versions? > Based on some earlier emails, I believe they were accidentally deleted by Rob Withers when he was cleaning things up in the repository. There are three people with admin on that project, so it might be a good idea to have just one (presumably Ron, who created the repository) and let everyone else on the project have developer level access. That would help prevent accidents or confusion in the future. Dave @mail.msen.com> > |
|
|
I feel stupid, Peter Green is with Fleetwood Mac. Hey man it was a different decade that I lived. :)
Sent from ProtonMail Mobile
|
«
Return to Squeak - Dev
|
1 view|%1 views
| Free forum by Nabble | Edit this page |