Re: [Caml-list] Computing with big numbers?

2008-12-04 Thread David Thomas
That depends on the threat model.  If the question is, "presuming no active 
attack, how likely is it to break?", then the cryptanalytic results against the 
hash are irrelevant.  If the question is "how secure is it if someone is 
maliciously manipulating files", then they are certainly relevant.

If you're operating between reasonably secure machines, where an attacker 
having write access is already more catastrophic than a failure of Unison, then 
the first is what matters.  If someone else has control over some of the files, 
then you've gotta watch the second.


--- On Thu, 12/4/08, Florian Hars <[EMAIL PROTECTED]> wrote:

> From: Florian Hars <[EMAIL PROTECTED]>
> Subject: Re: [Caml-list] Computing with big numbers?
> To: "Alan Schmitt" <[EMAIL PROTECTED]>
> Cc: [EMAIL PROTECTED]
> Date: Thursday, December 4, 2008, 8:06 AM
> Alan Schmitt schrieb:
> > But I don't think this applies here, as the hashes
> I'm
> > looking at are the one used by Unison to identify file
> contents.
> 
> Then it is *especially* relevant, as it is quite trivial to
> generate
> several files with  different content and the same MD5
> hash, all you
> need is a Playstation 3:
> http://www.win.tue.nl/hashclash/Nostradamus/
> 
> - Florian
> -- 
> But our moral language is fragmented; our contemporaries
> reject the Kantian
> hunch that choosing those things most admirable and
> plausible as ends in
> themselves is the best practice; autonomous sources of the
> good are everywhere
> brown and broken. Thus we have PHP.
> http://lambda-the-ultimate.org/node/1463
> 
> ___
> Caml-list mailing list. Subscription management:
> http://yquem.inria.fr/cgi-bin/mailman/listinfo/caml-list
> Archives: http://caml.inria.fr
> Beginner's list:
> http://groups.yahoo.com/group/ocaml_beginners
> Bug reports: http://caml.inria.fr/bin/caml-bugs


  

___
Caml-list mailing list. Subscription management:
http://yquem.inria.fr/cgi-bin/mailman/listinfo/caml-list
Archives: http://caml.inria.fr
Beginner's list: http://groups.yahoo.com/group/ocaml_beginners
Bug reports: http://caml.inria.fr/bin/caml-bugs


Re: [Caml-list] [announce] O'Browser : OCaml on browsers

2008-11-18 Thread David Thomas
I'd like to see a plugin that makes available to JS a function to execute ocaml 
bytecode.  There could be a standard way to check for support, and the pure 
javascript interpreter could be loaded if it is missing (for those 
browsers/computers on which performance is reasonable).



--- On Tue, 11/18/08, Vincent Balat <[EMAIL PROTECTED]> wrote:

> From: Vincent Balat <[EMAIL PROTECTED]>
> Subject: Re: [Caml-list] [announce] O'Browser : OCaml on browsers
> To: caml-list@yquem.inria.fr
> Cc: [EMAIL PROTECTED]
> Date: Tuesday, November 18, 2008, 10:32 AM
> Hi,
> 
> On Tuesday 18 November 2008 19:15:28 Kuba Ober wrote:
> > On Tuesday 18 November 2008, you wrote:
> > > On Mon, 2008-11-17 at 22:43 -0500, Kuba Ober
> wrote:
> > > > > Please note that this is an early
> version, in particular the DOM
> > > > > interface module is neither pretty nor
> well typed.
> > > > > However, it can already be used to
> create little applets or scripts
> > > > > (as in the tutorial [2], the examples
> of the distribution [3] or my
> > > > > webpage [4]) and we'll be glad to
> receive your comments or bug
> > > > > reports.
> > > >
> > > > And the reason is?
> > >
> > > To me, the fact that you can write portable
> lightweight applets sounds
> > > like a good enough reason. That and the fact that
> I can see this being
> > > used by stuff like Ocsigen to make for (even)
> richer client-server
> > > applications.
> >
> > I presume that one can have some Javascript library to
> abstract out
> > platform differences, but to have a whole new
> language? Well, of course
> > what works works, the question is if the performance
> is any good.
> 
> Our final goal is of course to write the whole Web
> application in OCaml (both 
> server and client sides). And thus to get the same static
> guarantees for the 
> code beeing executed on the browser as we have on server
> side with Ocsigen 
> (for example valid xhtml, etc).
> 
> To run OCaml on a browser, there are several solutions: 
> For example you can use a compiler to js (see for example
> ocamljs), or a 
> plugin. O'Browser is an alternative. It seems to be
> efficient enough for most 
> uses. For tasks requiring very high efficiency, the only
> solution is a plugin
> _and_ a very efficient xhtml/css rendering engine.
> 
> Cheers,
> Vincent Balat
> 
> ___
> Caml-list mailing list. Subscription management:
> http://yquem.inria.fr/cgi-bin/mailman/listinfo/caml-list
> Archives: http://caml.inria.fr
> Beginner's list:
> http://groups.yahoo.com/group/ocaml_beginners
> Bug reports: http://caml.inria.fr/bin/caml-bugs


  

___
Caml-list mailing list. Subscription management:
http://yquem.inria.fr/cgi-bin/mailman/listinfo/caml-list
Archives: http://caml.inria.fr
Beginner's list: http://groups.yahoo.com/group/ocaml_beginners
Bug reports: http://caml.inria.fr/bin/caml-bugs


Re: [Caml-list] Haskell vs OCaml

2008-08-13 Thread David Thomas



--- On Wed, 8/13/08, Jon Harrop <[EMAIL PROTECTED]> wrote:

> I consider them all to be untested because nobody has ever done anything 
> significant using Haskell AFAIK.


Besides the window manager I'm currently using... :-P


  

___
Caml-list mailing list. Subscription management:
http://yquem.inria.fr/cgi-bin/mailman/listinfo/caml-list
Archives: http://caml.inria.fr
Beginner's list: http://groups.yahoo.com/group/ocaml_beginners
Bug reports: http://caml.inria.fr/bin/caml-bugs