RE: KCP & 3.6

"Andreas Raab" <[email protected]> wrote:

> > I don't think we're anywhere near ready for beta right now; 
> > just for an example in my area there is the DeclarativePools
> > stuff to decide on. 
> 
> Which reminds me of something else - you did integrate Anthony's primitives
> in VMMaker, right? Weren't there any image-side changes (thinking of special
> objects etc) that came along with it?
Yes, I have those few new prims in the latest VMMAker.sar (rather than
the currently released one) and as I recall all the rest is fileins.
Once there is some decision on the DeclarativePools stuff I can release
it, along with your new separate .sar for the B3dplugin and all that
stuff.

 tim
--
Tim Rowledge, [email protected], http://sumeru.stanford.edu/tim
Strange OpCodes: LINO: Last In, Never Out mode
From [email protected] Fri Jun 20 03:30:53 2003
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: (qmail 27903 invoked from network); 20 Jun 2003 03:30:53 -0000
Received: from vrx.net (HELO ns1.vrx.net) (216.13.126.22)
  by mail.theinternetone.net with SMTP; 20 Jun 2003 03:30:53 -0000
Received: from smalltalkconsulting.com (h24-70-203-126.gv.shawcable.net
	[24.70.203.126])	by ns1.vrx.net (Postfix) with ESMTP id 73725D281
	for <[email protected]>;
	Thu, 19 Jun 2003 23:30:49 -0400 (EDT)
Date: Thu, 19 Jun 2003 20:30:47 -0700
Subject: Re: [Squeakfoundation]Squeak downloads
Content-Type: text/plain; delsp=yes; charset=US-ASCII; format=flowed
Mime-Version: 1.0 (Apple Message framework v552)
From: John M McIntosh <[email protected]>
To: Discussing the Squeak Foundation
	<[email protected]>
Content-Transfer-Encoding: 7bit
In-Reply-To: <[email protected]>
Message-Id: <[email protected]>
X-Mailer: Apple Mail (2.552)
X-BeenThere: [email protected]
X-Mailman-Version: 2.1
Precedence: list
Reply-To: Discussing the Squeak Foundation
	<[email protected]>
List-Id: Discussing the Squeak Foundation
 <squeakfoundation.lists.squeakfoundation.org>
List-Unsubscribe: <http://lists.squeakfoundation.org/listinfo/squeakfoundation>,
	<mailto:[email protected]?subject=unsubscribe>
List-Archive: <http://lists.squeakfoundation.org/pipermail/squeakfoundation>
List-Post: <mailto:[email protected]>
List-Help: <mailto:[email protected]?subject=help>
List-Subscribe: <http://lists.squeakfoundation.org/listinfo/squeakfoundation>,
	<mailto:[email protected]?subject=subscribe>
X-List-Received-Date: Fri, 20 Jun 2003 03:30:54 -0000

Ya, for some time now I've been PGP signing the macintosh VMs (classic  
& os-x). However I'ven not been doing that for
the plugins (yet...). I can't say anyone has ever check this  
information, and we don't have anyway for joe novice to check. Some  
packaging systems do check md5 checksums and/or signatures and do  
complain which I believe caught some Trojans in the past.

Certainly having something that would tell you the files have been  
altered, would either point out a Trojan, or more likely that you've  
corrupted things in the download, which always seems a sore point for  
joe  novice user.  Can say how we do this tho.

On Thursday, June 19, 2003, at 02:23  PM, Stephen Pair wrote:

> Looks good to me...however, I doubt I would trust it being on a Swiki  
> (for the security reasons previously discussed).  Here are some ideas  
> for how to mitigate that issue:
>
> - add submissions/approval capability to Swiki
> - keep the download page on a regular web server and use WebDav to  
> give publishing authorization to VM publishers
> - strongly recommend that VM publishers also cryptographically sign  
> their download files (and write some instructions and exactly how to  
> do this so that everyone follows the same procedure...and ensure that  
> those procedures are good ones)
--
======================================================================== 
===
John M. McIntosh <[email protected]> 1-800-477-2659
Corporate Smalltalk Consulting Ltd.  http://www.smalltalkconsulting.com
======================================================================== 
===