seaside-dev August 2018

seaside-dev@lists.squeakfoundation.org

9 participants
3 discussions

Smalltalk Security Landscape - survey for ESUG 2018
by Jerry Kott 30 Aug '18

30 Aug '18

Dear Smalltalkers and friends, I am planning to have a presentation titled ‘Smalltalk Security Landscape’ at this year’s ESUG conference. In my presentation I hope to increase cybersecurity awareness within the Smalltalk community and help shape the evolution of the language and its ecosystem. I have put together a survey to help me research the topic. I ask for your kind help to get a picture of where Smalltalk stands in the area of cybersecurity. The survey is completely anonymous, and should take less than 15 minutes to complete. I appreciate your time and participation. If you are in a management role, I would like your help by forwarding this to your team members to help reach the broad Smalltalk community. Here is a link: https://www.surveymonkey.com/r/esug2018 <https://www.surveymonkey.com/r/esug2018> Thank you for your help, and hope to see you in Cagliari! Jerry Kott This message has been digitally signed. PGP Fingerprint: A9181736DD2F1B6CC7CF9E51AC8514F48C0979A5

2 2

seasiders at esug?
by Johan Brichau 23 Aug '18

23 Aug '18

Hi Seasiders, Who will be attending esug? I’m going to be there only from sunday evening to wednesday morning (unfortunately). But would be nice to meet up. cheers Johan

6 5

Seaside and CSRF attacks
by tim Rowledge 23 Aug '18

23 Aug '18

It's been a looong time since I did any work with Seaside. In fact I suspect the last thing I did with it was to persuade Avi that separate template files etc weren't nice and I think that lead to seaside 2. Right now I need to remember/relearn where the system deals with the keys that ensure the incoming requests talk to the right widgets. I have a problem with convincing some potential customers that a seaside application is resistant to a CSRF attack and I'm having a hell of a time digging into the current code. Pointers to to the relevant classes would save some strain on my aging eyes. If anyone has any specific knowledge about the whole CSRF thing I'd be delighted to hear about it! I've tried testing with some OWASP tools (nasty icky java) but it's hard trying to make sense of the problem. (It doesn't help that this is within a VW8.3 system and I haven't used VW since I stopped being the manager of the VW development group - in '95! ) tim -- tim Rowledge; tim(a)rowledge.org; http://www.rowledge.org/tim Eagles may soar, but weasels aren't sucked into jet engines.

7 15

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

seaside-dev August 2018