From j16sdiz+freenet at gmail.com  Sun Jun  1 15:11:04 2008
From: j16sdiz+freenet at gmail.com (Daniel Cheng)
Date: Sun, 1 Jun 2008 23:11:04 +0800
Subject: [Tech] prototype of wiki inside freenet
In-Reply-To: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>
References: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>
Message-ID: <ff6a9c820806010811x63e32777g5891db6fe889d303@mail.gmail.com>

On Sun, Jun 1, 2008 at 5:03 AM, Ahmed MANSOUR <911freak at gmail.com> wrote:
> Hi,
> I discovered recently a wiki system called "wiki on the stick" and
> TiddlyWiki.com, they are both single file wiki system made
> in JavaScript so they run inside the browser without the need of a
> webserver or other scripting languages.

er.. FProxy strip out javascripts ...

This is essential for user privacy (until someone come up with a
custom browser that won't access the internet)

> I think this kind of wiki can be useful in the freenet: the user
> download the file, change it and then upload the modified single
> file back to the network.
> please try it and tell me what to you think about?
>
> http://www.tiddlywiki.com/
> http://sf.net/projects/stickwiki/


From nextgens at freenetproject.org  Mon Jun  2 02:09:53 2008
From: nextgens at freenetproject.org (Florent =?iso-8859-1?Q?Daigni=E8re?=)
Date: Mon, 2 Jun 2008 04:09:53 +0200
Subject: [Tech] prototype of wiki inside freenet
In-Reply-To: <ff6a9c820806010811x63e32777g5891db6fe889d303@mail.gmail.com>
References: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>
	<ff6a9c820806010811x63e32777g5891db6fe889d303@mail.gmail.com>
Message-ID: <20080602020951.GA3513@freenetproject.org>

* Daniel Cheng <j16sdiz+freenet at gmail.com> [2008-06-01 23:11:04]:

> On Sun, Jun 1, 2008 at 5:03 AM, Ahmed MANSOUR <911freak at gmail.com> wrote:
> > Hi,
> > I discovered recently a wiki system called "wiki on the stick" and
> > TiddlyWiki.com, they are both single file wiki system made
> > in JavaScript so they run inside the browser without the need of a
> > webserver or other scripting languages.
> 
> er.. FProxy strip out javascripts ...
> 
> This is essential for user privacy (until someone come up with a
> custom browser that won't access the internet)
> 

It strips it out because we don't have a javascript filter yet... Maybe
it's a good reason to code one :)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://emu.freenetproject.org/pipermail/tech/attachments/20080602/a6ad50c5/attachment.pgp 

From j16sdiz+freenet at gmail.com  Mon Jun  2 14:19:45 2008
From: j16sdiz+freenet at gmail.com (Daniel Cheng)
Date: Mon, 2 Jun 2008 22:19:45 +0800
Subject: [Tech] prototype of wiki inside freenet
In-Reply-To: <20080602020951.GA3513@freenetproject.org>
References: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>
	<ff6a9c820806010811x63e32777g5891db6fe889d303@mail.gmail.com>
	<20080602020951.GA3513@freenetproject.org>
Message-ID: <ff6a9c820806020719v5de498a9k268857b9ec8d89a8@mail.gmail.com>

2008/6/2 Florent Daigni?re <nextgens at freenetproject.org>:
> * Daniel Cheng <j16sdiz+freenet at gmail.com> [2008-06-01 23:11:04]:
>
>> On Sun, Jun 1, 2008 at 5:03 AM, Ahmed MANSOUR <911freak at gmail.com> wrote:
>> > Hi,
>> > I discovered recently a wiki system called "wiki on the stick" and
>> > TiddlyWiki.com, they are both single file wiki system made
>> > in JavaScript so they run inside the browser without the need of a
>> > webserver or other scripting languages.
>>
>> er.. FProxy strip out javascripts ...
>>
>> This is essential for user privacy (until someone come up with a
>> custom browser that won't access the internet)
>>
>
> It strips it out because we don't have a javascript filter yet... Maybe
> it's a good reason to code one :)
>

Is that doable?
An attacker can change the .src attribute of a <img> tag pointing to
an external site.
There are several DOM and non-DOM method for changing that. A
whitelist approach will make many Object in javascript non-usable.


From nextgens at freenetproject.org  Mon Jun  2 14:35:13 2008
From: nextgens at freenetproject.org (Florent =?iso-8859-1?Q?Daigni=E8re?=)
Date: Mon, 2 Jun 2008 16:35:13 +0200
Subject: [Tech] prototype of wiki inside freenet
In-Reply-To: <ff6a9c820806020719v5de498a9k268857b9ec8d89a8@mail.gmail.com>
References: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>
	<ff6a9c820806010811x63e32777g5891db6fe889d303@mail.gmail.com>
	<20080602020951.GA3513@freenetproject.org>
	<ff6a9c820806020719v5de498a9k268857b9ec8d89a8@mail.gmail.com>
Message-ID: <20080602143512.GG3513@freenetproject.org>

* Daniel Cheng <j16sdiz+freenet at gmail.com> [2008-06-02 22:19:45]:

> 2008/6/2 Florent Daigni?re <nextgens at freenetproject.org>:
> > * Daniel Cheng <j16sdiz+freenet at gmail.com> [2008-06-01 23:11:04]:
> >
> >> On Sun, Jun 1, 2008 at 5:03 AM, Ahmed MANSOUR <911freak at gmail.com> wrote:
> >> > Hi,
> >> > I discovered recently a wiki system called "wiki on the stick" and
> >> > TiddlyWiki.com, they are both single file wiki system made
> >> > in JavaScript so they run inside the browser without the need of a
> >> > webserver or other scripting languages.
> >>
> >> er.. FProxy strip out javascripts ...
> >>
> >> This is essential for user privacy (until someone come up with a
> >> custom browser that won't access the internet)
> >>
> >
> > It strips it out because we don't have a javascript filter yet... Maybe
> > it's a good reason to code one :)
> >
> 
> Is that doable?
> An attacker can change the .src attribute of a <img> tag pointing to
> an external site.
> There are several DOM and non-DOM method for changing that. A
> whitelist approach will make many Object in javascript non-usable.

We could interpret the JS in a sandbox(VM) and determine if we want to
filter it or not.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://emu.freenetproject.org/pipermail/tech/attachments/20080602/d2f25c14/attachment.pgp 

From 911freak at gmail.com  Mon Jun  2 15:50:21 2008
From: 911freak at gmail.com (Ahmed MANSOUR)
Date: Mon, 2 Jun 2008 15:50:21 +0000
Subject: [Tech] prototype of wiki inside freenet
In-Reply-To: <20080602020951.GA3513@freenetproject.org>
References: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>
	<ff6a9c820806010811x63e32777g5891db6fe889d303@mail.gmail.com>
	<20080602020951.GA3513@freenetproject.org>
Message-ID: <bce90bfb0806020850q5f4f0150vabe6a3e2d56b1534@mail.gmail.com>

>
> It strips it out because we don't have a javascript filter yet... Maybe
> it's a good reason to code one :)
>

actually there is a popular Firefox extension than enable/disable
javascript easily by a simple click.Called "No Script".
https://addons.mozilla.org/en-US/firefox/addon/722


From toad at amphibian.dyndns.org  Tue Jun  3 16:26:57 2008
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Tue, 3 Jun 2008 17:26:57 +0100
Subject: [Tech] prototype of wiki inside freenet
In-Reply-To: <ff6a9c820806020719v5de498a9k268857b9ec8d89a8@mail.gmail.com>
References: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>
	<20080602020951.GA3513@freenetproject.org>
	<ff6a9c820806020719v5de498a9k268857b9ec8d89a8@mail.gmail.com>
Message-ID: <200806031726.58470.toad@amphibian.dyndns.org>

On Monday 02 June 2008 15:19, Daniel Cheng wrote:
> 2008/6/2 Florent Daigni?re <nextgens at freenetproject.org>:
> > * Daniel Cheng <j16sdiz+freenet at gmail.com> [2008-06-01 23:11:04]:
> >
> >> On Sun, Jun 1, 2008 at 5:03 AM, Ahmed MANSOUR <911freak at gmail.com> wrote:
> >> > Hi,
> >> > I discovered recently a wiki system called "wiki on the stick" and
> >> > TiddlyWiki.com, they are both single file wiki system made
> >> > in JavaScript so they run inside the browser without the need of a
> >> > webserver or other scripting languages.
> >>
> >> er.. FProxy strip out javascripts ...
> >>
> >> This is essential for user privacy (until someone come up with a
> >> custom browser that won't access the internet)
> >>
> >
> > It strips it out because we don't have a javascript filter yet... Maybe
> > it's a good reason to code one :)
> >
> 
> Is that doable?
> An attacker can change the .src attribute of a <img> tag pointing to
> an external site.
> There are several DOM and non-DOM method for changing that. A
> whitelist approach will make many Object in javascript non-usable.

It IS feasible IMHO, however it would be a pretty big project. It would likely 
require modifying the javascript to introduce run time type analysis, as well 
as providing sanitised versions of various setters and so on...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/tech/attachments/20080603/8de40c6e/attachment.pgp 

From thomas at wingate.se  Tue Jun  3 16:47:50 2008
From: thomas at wingate.se (Thomas Wingate)
Date: Tue, 03 Jun 2008 18:47:50 +0200
Subject: [Tech] prototype of wiki inside freenet
In-Reply-To: <200806031726.58470.toad@amphibian.dyndns.org>
References: <bce90bfb0805311403t2186a7adi737064a904d15595@mail.gmail.com>	<20080602020951.GA3513@freenetproject.org>	<ff6a9c820806020719v5de498a9k268857b9ec8d89a8@mail.gmail.com>
	<200806031726.58470.toad@amphibian.dyndns.org>
Message-ID: <484575B6.9010600@wingate.se>


Matthew Toseland wrote:
> On Monday 02 June 2008 15:19, Daniel Cheng wrote:
>> 2008/6/2 Florent Daigni?re <nextgens at freenetproject.org>:
>>> * Daniel Cheng <j16sdiz+freenet at gmail.com> [2008-06-01 23:11:04]:
>>>
>>>> On Sun, Jun 1, 2008 at 5:03 AM, Ahmed MANSOUR <911freak at gmail.com> wrote:
>>>>> Hi,
>>>>> I discovered recently a wiki system called "wiki on the stick" and
>>>>> TiddlyWiki.com, they are both single file wiki system made
>>>>> in JavaScript so they run inside the browser without the need of a
>>>>> webserver or other scripting languages.
>>>> er.. FProxy strip out javascripts ...
>>>>
>>>> This is essential for user privacy (until someone come up with a
>>>> custom browser that won't access the internet)
>>>>
>>> It strips it out because we don't have a javascript filter yet... Maybe
>>> it's a good reason to code one :)
>>>
>> Is that doable?
>> An attacker can change the .src attribute of a <img> tag pointing to
>> an external site.
>> There are several DOM and non-DOM method for changing that. A
>> whitelist approach will make many Object in javascript non-usable.
> 
> It IS feasible IMHO, however it would be a pretty big project. It would likely 
> require modifying the javascript to introduce run time type analysis, as well 
> as providing sanitised versions of various setters and so on...
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Tech mailing list
> Tech at freenetproject.org
> http://emu.freenetproject.org/cgi-bin/mailman/listinfo/tech

I know Jeremy (who coded Tiddlywiki) a little bit and wouldn't be surprised if 
he'd be interested in contributing towards this. By all means send him a an 
email and ask


From ian at freenetproject.org  Sun Jun 29 16:16:59 2008
From: ian at freenetproject.org (Ian Clarke)
Date: Sun, 29 Jun 2008 11:16:59 -0500
Subject: [Tech] Freenet summit - London July 6th,
	"The Woolpack" bar near London Bridge
Message-ID: <823242bd0806290916g459b951cped905d09577c3469@mail.gmail.com>

We are having a Freenet get-together on the afternoon of Sunday 6th
July in London.  We have reserved some tables at "The Woolpack" bar in
London Bridge, the full address is:

  98, Bermondsey St,
  London,
  SE1 3UB

Our tables are booked from 12.30pm, and they do serve food.

If you intend to join us, its important that you join this Google
group and send an email to it so that we can maintain a count of how
many people to expect (currently 7):

  http://groups.google.com/group/freenet-summit-2008

I'll be there, along with Matthew, Oskar, and others.

Ian.

-- 
Email: ian at uprizer.com
Cell: +1 512 422 3588
Skype: sanity


From bombe at pterodactylus.net  Sun Jun 29 22:09:55 2008
From: bombe at pterodactylus.net (David =?utf-8?q?=E2=80=98Bombe=E2=80=99_Roden?=)
Date: Mon, 30 Jun 2008 00:09:55 +0200
Subject: [Tech] Freenet summit - London July 6th,
	"The Woolpack" bar near London Bridge
In-Reply-To: <823242bd0806290916g459b951cped905d09577c3469@mail.gmail.com>
References: <823242bd0806290916g459b951cped905d09577c3469@mail.gmail.com>
Message-ID: <200806300010.00977.bombe@pterodactylus.net>

On Sunday 29 June 2008 18:16:59 Ian Clarke wrote:

> We are having a Freenet get-together on the afternoon of Sunday 6th
> July in London.  We have reserved some tables at "The Woolpack" bar in
> London Bridge

Sounds cool but the date is pretty unfortunate.

a) it?s only a week away which leaves no time for further planning (or cheap 
flight tickets), and
b) it?s on a sunday which also makes visiting it over the weekend extremely 
inconvenient. :)


	David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://emu.freenetproject.org/pipermail/tech/attachments/20080630/204bb90b/attachment.pgp 

From bombe at pterodactylus.net  Sun Jun 29 22:31:03 2008
From: bombe at pterodactylus.net (David =?utf-8?q?=E2=80=98Bombe=E2=80=99_Roden?=)
Date: Mon, 30 Jun 2008 00:31:03 +0200
Subject: [Tech] Switch Repository to Git
Message-ID: <200806300031.03920.bombe@pterodactylus.net>

Hey folks,

I have been looking at and working with Git for the last four or five weeks 
and I must say that I?m very impressed by it. It?s easy to use, it?s 
extremely powerful, it enables developers to perform the most tedious tasks 
in a very short time and in general simply wipes the floor with 
subversion. :)

It is possible to import subversion repositories into Git, keeping the 
complete history and even branches, and it?s even possible to commit changes 
made in a local repository back to subversion; I just tested that tonight 
when I fixed nextgens? backport of toad?s BucketChainBucket?it even made 
finding the bug simple.

Git repositories can be served by a special git-daemon or by a normal, 
run-off-the-mill HTTP server without any special modules. No DAV, no CGI, no 
nothing, just plain HTTP.

I?d suggest that we move to Git rather sooner than later; most of the trouble 
we had with bug #2440 (which resulted from the faulty backport) would never 
have occured in the first place with Git. (Sure, of course you can make 
changes in the wrong branch but Git will happily apply a commit from one 
branch to another so the backport could have been done in two minutes.)

Anybody in favor? Anybody opposed?


	David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://emu.freenetproject.org/pipermail/tech/attachments/20080630/b0a415b7/attachment.pgp 

From j16sdiz+freenet at gmail.com  Mon Jun 30 01:29:08 2008
From: j16sdiz+freenet at gmail.com (Daniel Cheng)
Date: Mon, 30 Jun 2008 09:29:08 +0800
Subject: [Tech] Switch Repository to Git
In-Reply-To: <200806300031.03920.bombe@pterodactylus.net>
References: <200806300031.03920.bombe@pterodactylus.net>
Message-ID: <ff6a9c820806291829p592b07r22e84b14f405de0d@mail.gmail.com>

2008/6/30 David 'Bombe' Roden <bombe at pterodactylus.net>:
> Hey folks,
>
> I have been looking at and working with Git for the last four or five weeks
> and I must say that I'm very impressed by it. It's easy to use, it's
> extremely powerful, it enables developers to perform the most tedious tasks
> in a very short time and in general simply wipes the floor with
> subversion. :)
>
> It is possible to import subversion repositories into Git, keeping the
> complete history and even branches, and it's even possible to commit changes
> made in a local repository back to subversion; I just tested that tonight
> when I fixed nextgens' backport of toad's BucketChainBucket?it even made
> finding the bug simple.
>
> Git repositories can be served by a special git-daemon or by a normal,
> run-off-the-mill HTTP server without any special modules. No DAV, no CGI, no
> nothing, just plain HTTP.
>
> I'd suggest that we move to Git rather sooner than later; most of the trouble
> we had with bug #2440 (which resulted from the faulty backport) would never
> have occured in the first place with Git. (Sure, of course you can make
> changes in the wrong branch but Git will happily apply a commit from one
> branch to another so the backport could have been done in two minutes.)
>
> Anybody in favor? Anybody opposed?
>

I have been using git-svn since the first day I commit to the freenet
repository and love it.
Branching and merging is extremely easy.

The last time I hear a complain is about IDE-support from nextgen...

There are plugins for both netbeans and eclipse, neither of them is complete.
   http://git.or.cz/gitwiki/NetBeansPlugin
   http://git.or.cz/gitwiki/EclipsePlugin

>
>        David
>
> _______________________________________________
> Tech mailing list
> Tech at freenetproject.org
> http://emu.freenetproject.org/cgi-bin/mailman/listinfo/tech
>


From bombe at pterodactylus.net  Mon Jun 30 06:11:37 2008
From: bombe at pterodactylus.net (David =?windows-1252?q?=91Bombe=92_Roden?=)
Date: Mon, 30 Jun 2008 08:11:37 +0200
Subject: [Tech] Switch Repository to Git
In-Reply-To: <ff6a9c820806291829p592b07r22e84b14f405de0d@mail.gmail.com>
References: <200806300031.03920.bombe@pterodactylus.net>
	<ff6a9c820806291829p592b07r22e84b14f405de0d@mail.gmail.com>
Message-ID: <200806300812.06192.bombe@pterodactylus.net>

On Monday 30 June 2008 03:29:08 Daniel Cheng wrote:

> The last time I hear a complain is about IDE-support from nextgen...

I think I left out that point on purpose, at least the Eclipse plugin?though 
it works?still leaves a lot to miss. :)


	David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://emu.freenetproject.org/pipermail/tech/attachments/20080630/aa2879ab/attachment.pgp