Box-Admins January 2006

box-admins@lists.squeakfoundation.org

7 participants
11 discussions

Re: Swik -> box2?
by Cees De Groot 22 Dec '06

22 Dec '06

Hi Jochen, You should be able to login now as 'wiki' on 'box2.squeakfoundation.org' Regards, Cees On 1/19/06, Jochen F. Rick <nadja(a)cc.gatech.edu> wrote: > OK. I'm attaching my SSH key. > > Peace and Luck! > > Jeff > > -- > Jochen "Jeff" Rick, PhD Candidate, Georgia Tech College of Computing > jochen.rick(a)cc.gatech.edu, http://www.je77.com/, work: 404-385-1105 > > >

3 2

Re: Swik -> box2?
by Cees De Groot 04 Oct '06

04 Oct '06

Good. I'm also cc'ing the box admins - anyone of us can help in the transfer. Shall we first announce it on squeak-dev? It probably means that we want to lock the swiki for a couple of hours while we are transferring it, might be polite to tell the community that beforehand. [box-admins: this is about moving the Squeak Swiki at Gatech over to box2]. Regards, Cees On 11/5/05, Mark Guzdial <guzdial(a)cc.gatech.edu> wrote: > I think that makes a lot of sense, Cees. I hope that we will continue > to do more Swiki development, but with Je77 graduating and no funding > for that effort, it makes sense to pass it on to people with funding in > their pockets.. > > Je77, can you work with Cees to move the Squeak Swiki to box2? > > Thanks! > Mark > > > Cees De Groot wrote: > > >Hi Mark, > > > >I'm not sure what the focus is for your group at the moment and > >whether running the Swiki poses any administrative loads. As you may > >know, box2 has been setup for the Squeak community in the broadest > >sense, and we currently have a nice team of volunteers managing > >everything. Money seems to be available as well, so it looks like this > >is a long-term thing :) > > > >Anyway, in case you're wondering whether it's a good idea to keep this > >Swiki up-and-running on minnow - we'd be more than happy to take over > >from you. > > > >Regards, > > > >Cees > > > > > > >

4 15

Re: planet.squeak.org ALIAS for Planet Squeak?
by Ken Causey 30 Jan '06

30 Jan '06

Hmm. Maybe you should ask each of the communities that are represented on these sites their opinion as to the most appropriate *.squeak.org URL? Post a blurb at the top of each of these sites asking opinions and providing an email address or comment forum for replies. Ken On Fri, 2006-01-27 at 17:05 -0800, Simon Michael wrote: > It seems to be working for folks on #squeak too. > > What do you think about the other three planets ? > {planetsqueakes, planetsqueakarchive, planetsqueak2}.joyful.com. I > wonder what s.o urls might make sense. planetes.squeak.org ?

1 0

Re: planet.squeak.org ALIAS for Planet Squeak?
by Ken Causey 30 Jan '06

30 Jan '06

Yes, it's working for me. Ken On Fri, 2006-01-27 at 16:32 -0800, Simon Michael wrote: > Hi Ken.. I was just busy, sorry to drop the ball on this. > > http://planet.squeak.org seems to be working fine here in firefox > today - is it all resolved do you think ? > > -Simon > > > On 12/7/05, Ken Causey <ken(a)kencausey.com> wrote: > Did you get this email? The below URL still gives a Zope > error. > > Ken > > P.S. If you are just busy, I understand. > > > I've added the DNS entry, the secondary should update > shortly. > > > > Hmm, you are using Zope? If so you need to also configure > your virtual > > host thingy in zope, hostmonster, whatever. Right now it > doesn't like > > > > http://planet.squeak.org/ >

1 0

Backup of www.squeak.org image??!!!
by karl 30 Jan '06

30 Jan '06

I messed up the www.squeak.org image badly! Is there a backup of it somewhere so we can do some magic to fix this or is all lost :-( Karl

2 2

Re: About hosting the Foundation site at Squeak.org
by Ken Causey 17 Jan '06

17 Jan '06

If the Website Team is going to manage the SqF site as they have been the Squeak.org site then it might as well run under the same account on box2 and you can just set it up as a seperate subdirectory of the website user account. If management is changed to some other team in the future it's just a stop, move, change ownership, start process (taking a minute or two) to get it transferred. Ken On Sat, 2006-01-14 at 22:51 +0100, karl wrote: > It is not overkill to run the squeakfoundation site in a seperate image. > Maybe it should have it's own directory as well, some thing like > home/squeakfoundationwebsite so we don't mix up images, pictures style > scripts etc. so easyli :-)

2 2

source.squeak.org for SqueakSource...
by Marcus Denker 13 Jan '06

13 Jan '06

Hi, We (Adrian, Phillip and myself) are working on moving the SqueakSource server to a new (faster) machine. For that, we would like to have source.squeak.org to point to the new server. ( 130.92.65.106 ) One, it's nice for testing the virtual host setup, and then I think it would be good to have squeaksource like squeakmap under a *.squeak.org name. We will keep both the kilana.unibe and the squeaksource.com adresses active, too. Is it possible to set this domain up? Marcus

3 11

Re: Completing squeak mailing-list gmane archive
by Ken Causey 12 Jan '06

12 Jan '06

I'll look into this as soon as possible. Right now I can't get to the gmane website, but as soon as I can get more information about this process I'll move it along as well as I can and let you know about the progress. Ken On Sat, 2006-01-07 at 20:00 +0100, Samir Saidani wrote: > stéphane ducasse <ducasse(a)iam.unibe.ch> writes: > > please do. > > This is nice to have the complete mailing-list archived in one single > > place. > > Unfortunately, I can't because I'm not list admin... From > http://gmane.org/import.php : "The list admin/owner should OK this > before the archive is imported. If you're the list admin, please say > so in the email where you request the import. If not, please get in > touch with the list admin first and get an approval before you request > the import. The list admin often has access to an mbox format mail > archive for the list, so get the URL for the archive at the same > time." > > If admins are busy, I can proceed alone but need temporary right on > the mailing-list to do this. Thus the mailing-list will be archived in > several places, which is good in case of failure. > > Samir > > >

2 3

Squeak List Archive at http://www.create.ucsb.edu/squeak/
by Ken Causey 12 Jan '06

12 Jan '06

Hi, I was wondering if I could get something like an mbox format file of the old Squeak mailing list posts you have archived at http://www.create.ucsb.edu/squeak/ so I could import them into the current list archives and also into the gmane archives. Thanks! Ken Causey

1 0

RE: Any chance you could fix this bounce?
by Ken Causey 11 Jan '06

11 Jan '06

They don't provide enough information for me to be able to fix anything. I checked my usual place http://www.dnsstuff.com/tools/ip4r.ch?ip=85.10.195.197 and we aren't listed in any of the databases listed there. I looked at the URL included in the bounce reply http://help.yahoo.com/help/us/mail/defer/defer-02.html This page talks about open proxies and relays which this server has never been and I even check using a service they suggest on that page http://rbls.org/?q=85.10.195.197 and it lists no problems either. So I'm at a loss to say why yahoo is blocking it. Also, to test it I just sent an email to someone with a yahoo account from an account on lists.squeakfoundation.org and it went through without any problem. So if yahoo is blocking something it is apparently not the server as a whole. I'm not sure where to go next. Ken On Wed, 2006-01-11 at 16:33 -0500, Ron Teitelbaum wrote: > Here are the contents: > > Sorry, we were unable to deliver your message to the following address. > > <afunkyobject(a)yahoo.com>: > Remote host said: 553 Mail to/from > "cryptography-bounces(a)lists.squeakfoundation.org" not allowed - VS99-IP1 > deferred - see help.yahoo.com/help/us/mail/defer/defer-02.html (#5.7.1) [10] > [MAIL_FROM] > > --- Below this line is a copy of the message. > > Received: from [66.218.69.6] by n26.bullet.scd.yahoo.com with NNFMP; 11 Jan > 2006 18:59:08 -0000 > Date: 11 Jan 2006 10:59:08 -0800 > X-yahoo-newman-property: wss > X-yahoo-newman-id: null > Received: from [66.218.85.37] by t6.bullet.scd.yahoo.com with SMTP; 11 Jan > 2006 18:59:08 -0000 > Received: from milter9.wss.scd.yahoo.com (66.218.85.31) by > mta6.wss.scd.yahoo.com (7.0.042) > id 42FD96680449FF16 for chris(a)funkyobjects.org; Wed, 11 Jan 2006 > 10:59:08 -0800 > Received: from box2.squeakfoundation.org (box2.squeakfoundation.org > [85.10.195.197]) > by milter9.wss.scd.yahoo.com (8.13.1/8.13.1) with SMTP id > k0BIvK7h057518 > for <chris(a)funkyobjects.org>; Wed, 11 Jan 2006 10:58:21 -0800 (PST) > Date: Wed, 11 Jan 2006 10:57:20 -0800 (PST) > Message-Id: <200601111858.k0BIvK7h057518(a)milter9.wss.scd.yahoo.com> > Received: (qmail 31486 invoked from network); 11 Jan 2006 18:57:20 +0000 > Received: from unknown (HELO box2.squeakfoundation.org) (127.0.0.1) > by localhost with SMTP; 11 Jan 2006 18:57:20 +0000 > From: cryptography-request(a)lists.squeakfoundation.org > Subject: Cryptography Digest, Vol 4, Issue 8 > To: cryptography(a)lists.squeakfoundation.org > Reply-To: cryptography(a)lists.squeakfoundation.org > MIME-Version: 1.0 > Content-Type: text/plain; charset="us-ascii" > Content-Transfer-Encoding: 7bit > X-BeenThere: cryptography(a)lists.squeakfoundation.org > X-Mailman-Version: 2.1.5 > Precedence: list > List-Id: Cryptography Team Development List > <cryptography.lists.squeakfoundation.org> > List-Unsubscribe: > <http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography>, > > <mailto:cryptography-request@lists.squeakfoundation.org?subject=unsubscribe> > List-Archive: <http://liststest.squeakfoundation.org/pipermail/cryptography> > List-Post: <mailto:cryptography@lists.squeakfoundation.org> > List-Help: > <mailto:cryptography-request@lists.squeakfoundation.org?subject=help> > List-Subscribe: > <http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography>, > > <mailto:cryptography-request@lists.squeakfoundation.org?subject=subscribe> > Sender: cryptography-bounces(a)lists.squeakfoundation.org > Errors-To: cryptography-bounces(a)lists.squeakfoundation.org > X-Originating-IP: [85.10.195.197] > > Send Cryptography mailing list submissions to > cryptography(a)lists.squeakfoundation.org > > To subscribe or unsubscribe via the World Wide Web, visit > > http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography > > or, via email, send a message with subject or body 'help' to > cryptography-request(a)lists.squeakfoundation.org > > You can reach the person managing the list at > cryptography-owner(a)lists.squeakfoundation.org > > When replying, please edit your Subject line so it is more specific than > "Re: Contents of Cryptography digest..." > > > Today's Topics: > > 1. Re: Protecting Image (Cees De Groot) > 2. Re: Re: KryptOn MakoEnvelope signedAndSealedFrom:to:object: > (Tony Garnock-Jones) > 3. Re: Re: KryptOn MakoEnvelope signedAndSealedFrom:to:object: > (Cees De Groot) > 4. RE: Squeak Cryptography Team Code CommercialAcceptance > (Ron Teitelbaum) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 11 Jan 2006 19:31:20 +0100 > From: Cees De Groot <cdegroot(a)gmail.com> > Subject: Re: [Cryptography Team] Protecting Image > To: Ron(a)usmedrec.com, Cryptography Team Development List > <cryptography(a)lists.squeakfoundation.org> > Message-ID: > <330b6fd60601111031i303da2d1g53450ee2f537badc(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > On 1/11/06, Ron Teitelbaum <Ron(a)usmedrec.com> wrote: > > I've been thinking though some of the problems with cryptography. I > > have a question. How do we protect the image? > > Usually, the local machine is to be assumed secure (Trusted Computing Base). > If someone subverts my machine, anything can happen from capturing > keystrokes to advanced subliminal channel analysis. > > Which doesn't mean that you should do your best to minimize these effects - > for example, I've been thinking of using methodwrappers or Aspect/S or > similar to tag methods as "crypto methods", meaning which would trigger > behaviour like on exit, all temps are erased > (recursively?) before they are gc'd. > > > ------------------------------ > > Message: 2 > Date: Wed, 11 Jan 2006 18:35:23 +0000 > From: Tony Garnock-Jones <tonyg(a)lshift.net> > Subject: Re: [Cryptography Team] Re: KryptOn MakoEnvelope > signedAndSealedFrom:to:object: > To: Cryptography Team Development List > <cryptography(a)lists.squeakfoundation.org> > Message-ID: <43C54FEB.9010304(a)lshift.net> > Content-Type: text/plain; charset=ISO-8859-1 > > Cees De Groot wrote: > > Err... recalling vaguely from memory - wasn't signing plaintext a big > > no-no? There were some attacks on RSA that based on feeding a signer > > plaintexts (or is my memory leaving me here?)... > > Are you perhaps thinking of the need for something like RSA-PSS? > > > ------------------------------ > > Message: 3 > Date: Wed, 11 Jan 2006 19:38:33 +0100 > From: Cees De Groot <cdegroot(a)gmail.com> > Subject: Re: [Cryptography Team] Re: KryptOn MakoEnvelope > signedAndSealedFrom:to:object: > To: Cryptography Team Development List > <cryptography(a)lists.squeakfoundation.org> > Message-ID: > <330b6fd60601111038k7c68c846qf7689e15fbddff1c(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > At the very least hash-then-sign, but RSA-PSS looks like the > latest-and-greatest insight from the crypto community, so I wouldn't ignore > it :) > > On 1/11/06, Tony Garnock-Jones <tonyg(a)lshift.net> wrote: > > Cees De Groot wrote: > > > Err... recalling vaguely from memory - wasn't signing plaintext a > > > big no-no? There were some attacks on RSA that based on feeding a > > > signer plaintexts (or is my memory leaving me here?)... > > > > Are you perhaps thinking of the need for something like RSA-PSS? > > _______________________________________________ > > Cryptography mailing list > > Cryptography(a)lists.squeakfoundation.org > > http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptograph > > y > > > > > ------------------------------ > > Message: 4 > Date: Wed, 11 Jan 2006 13:57:14 -0500 > From: "Ron Teitelbaum" <Ron(a)USMedRec.com> > Subject: RE: [Cryptography Team] Squeak Cryptography Team Code > CommercialAcceptance > To: "'Cryptography Team Development List'" > <cryptography(a)lists.squeakfoundation.org> > Message-ID: > > <!&!AAAAAAAAAAAYAAAAAAAAALn4DBa9j89Bkul53Jf1ky/CgAAAEAAAANG2X4+g4JNCs/qwFDyH > YJEBAAAAAA==(a)USMedRec.com> > > Content-Type: text/plain; charset="us-ascii" > > I see that FIPS140-2 states that the certification is intended for > sensitive, not classified information. Is it possible for us to be > certified for classified information, or is that certification out of reach? > > > > Ron > > _____ > > From: cryptography-bounces(a)lists.squeakfoundation.org > [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Ron > Teitelbaum > Sent: Tuesday, January 10, 2006 6:35 PM > To: 'Cryptography Team Development List' > Subject: RE: [Cryptography Team] Squeak Cryptography Team Code > CommercialAcceptance > > > > Matt, > > > > Thanks for the information, I will review the process. I would think we > could come up with the money you suggested to get certified. > > > > So to update our goals: > > > > 5) Get external US Government certification of Security for external package > and image components. > > > > Should be changed to: > > > > 5) Complete Cryptographic Module Validation Program (CMVP) through the > OpenSSL Federal Information Processing Standard (FIPS) Certification > Process. > > 5.1) Identify Experts in Group (recruit new members?) > > 5.2) Find repository and define structure for documentation. > > 5.3) Document current frameworks > > 5.4) Develop new designs, following design goals (tbd through > open discussions) and document new framework. > > 5.5) Expert Design Review and Implementation recursively until > code complete > > 5.6) Identify Team Leaders to walk our project through OpenSSL > FIPS Cert Process > > 5.7) Raise Money for Cert Process > > 5.8) Complete Certification, Publicize results > > 5.9) Offer Reward for anyone that breaks code > > 5.10) Set up review committee that reviews implementations (for > a fee) and helps others get certified using our code. > > > > Does anyone have any comments on the change? > > > > Ron Teitelbaum > > Squeak Cryptography Team Leader > > Ron(a)USMedRec.com > > > > _____ > > From: cryptography-bounces(a)lists.squeakfoundation.org > [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of > Matthew S. Hamrick > Sent: Tuesday, January 10, 2006 4:22 PM > To: Ron(a)USMedRec.com; Cryptography Team Development List > Subject: Re: [Cryptography Team] Squeak Cryptography Team Code > CommercialAcceptance > > > > > > On Jan 10, 2006, at 10:30 AM, Ron Teitelbaum wrote: > > > > Does anyone have a suggestion for how to certify our code? > > > > In general... when talking about Security, you want to have the design > reviewed prior to having the code reviewed... but I guess we can be agile > about it. Maybe the thing to do would be to document what we have in terms > of architecture, find someone to do an independent review of the > architecture, incorporate architecture changes recommended by the reviewer, > then make code changes, then have the code reviewed. > > > > The word "certify" has a lot of different meanings to different people. If > you're looking for FIPS certification, that's a long process... and it costs > money. The OpenSSL FIPS certification process has been going on for at least > a year or two with the bill being footed by OSSI, HP, DoD and a couple other > people whose names escape me at the moment. > > > > The motivation there was that HP and DoD believed the certification was an > investment... pay a little up front so they can benefit from the cost > savings of using an open implementation of various crypto algorithms. The > last time I was involved in a CMVP effort, the total bill to the independent > lab was something on the order of about $12k US. With the recent devaluation > of the US peso, I'm guessing it would probably run at least $18k US these > days. > > > > I think it would > > be helpful if what we have done to prove our work (testing documentation > > ...), the qualifications of the person writing the code, and any reference. > > materials were all kept in a single place. It would be helpful as a > > reference for others, and some proof that may be needed before someone > > considers adoption. What do you all think? > > > > I definitely agree with this! > >

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Box-Admins January 2006