Re: [SECURITY] Google announced first SHA-1 collision - how to we deal with it in OFBiz?

[Taher Alkhateeb]

In reference to earlier threads and discussions, I propose the following:

1- Make the encryption algorithm a parameter, not hard-coded into the
system.
2- Implement a new stronger encryption algorithm.
3- Set the new algorithm as default.
4- Update our documentation to point existing users to upgrade passwords OR
change the encryption algorithm in settings back to old default of SHA1

WDYT?

On Sat, Feb 25, 2017 at 12:31 AM, Michael Brohl 
wrote:

> Another good reference: https://shattered.it
>
> Regards,
>
> Michael
>
> Am 24.02.17 um 22:07 schrieb Michael Brohl:
>
> Hi everyone,
>>
>> Google announced the first SHA1 collision [1]. See [2] for in-depth
>> explanations.
>> It's recommended to migrate to safer cryptographic hashes such as SHA-2
>> or SHA-3 as soon as possible.
>> See [3] for an overview of SHA. SHA-3 was announced as the official new
>> standard [4].
>>
>> Let's discuss how we want to deal with this in OFBiz, any help is greatly
>> appreciated.
>>
>> Best regards,
>> Michael
>>
>> [1] https://security.googleblog.com/2017/02/announcing-first-sha
>> 1-collision.html
>> [2] https://shattered.io/static/shattered.pdf
>> [3] https://en.wikipedia.org/wiki/Secure_Hash_Algorithm
>> [4] https://www.federalregister.gov/documents/2015/08/05/2015-19
>> 181/announcing-approval-of-federal-information-processing-
>> standard-fips-202-sha-3-standard
>>
>>
>
>

Re: [SECURITY] Google announced first SHA-1 collision - how to we deal with it in OFBiz?

[Michael Brohl]

Another good reference: https://shattered.it

Regards,

Michael

Am 24.02.17 um 22:07 schrieb Michael Brohl:

Hi everyone,

Google announced the first SHA1 collision [1]. See [2] for in-depth 
explanations.
It's recommended to migrate to safer cryptographic hashes such as 
SHA-2 or SHA-3 as soon as possible.
See [3] for an overview of SHA. SHA-3 was announced as the official 
new standard [4].


Let's discuss how we want to deal with this in OFBiz, any help is 
greatly appreciated.


Best regards,
Michael

[1] 
https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html

[2] https://shattered.io/static/shattered.pdf
[3] https://en.wikipedia.org/wiki/Secure_Hash_Algorithm
[4] 
https://www.federalregister.gov/documents/2015/08/05/2015-19181/announcing-approval-of-federal-information-processing-standard-fips-202-sha-3-standard







smime.p7s
Description: S/MIME Cryptographic Signature

[SECURITY] Google announced first SHA-1 collision - how to we deal with it in OFBiz?

[Michael Brohl]

Hi everyone,

Google announced the first SHA1 collision [1]. See [2] for in-depth 
explanations.
It's recommended to migrate to safer cryptographic hashes such as SHA-2 
or SHA-3 as soon as possible.
See [3] for an overview of SHA. SHA-3 was announced as the official new 
standard [4].


Let's discuss how we want to deal with this in OFBiz, any help is 
greatly appreciated.


Best regards,
Michael

[1] 
https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html

[2] https://shattered.io/static/shattered.pdf
[3] https://en.wikipedia.org/wiki/Secure_Hash_Algorithm
[4] 
https://www.federalregister.gov/documents/2015/08/05/2015-19181/announcing-approval-of-federal-information-processing-standard-fips-202-sha-3-standard




smime.p7s
Description: S/MIME Cryptographic Signature

Re: Welcome Deepak Dixit as a new PMC member

[gil portenseigne]

Congratulations Deepak !

Gil

Le 24/02/2017 à 14:08, Jacques Le Roux a écrit :
The OFBiz PMC has invited Deepak Dixit to become a new member of the 
committee; and the committee members are happy to announce that he has 
accepted.


Deepak has been involved in OFBiz for a long time now, and is a 
respected committer for 2 years.


We are sure Deepak will help us to take good decisions in favour of a 
bright future for OFBiz!


Please join me in welcoming and congratulating Deepak.

Thanks

Jacques
PS: Deepak, I let you change your status on the wiki PMC page :)

Re: Welcome Deepak Dixit as a new PMC member

[Avnindra Sharma]

Many congratulations Deepak!

Thanks & Regards

*Avnindra Sharma | Sr. Digital Commerce Consultant *
*cell: +91-8989-530074 | main : 0731-4093684*
*HotWax Systems Pvt Ltd. | www.hotwaxsystems.com
*
[image: HotWax Commerce powered by Apache OFBiz]


On Fri, Feb 24, 2017 at 7:46 PM, Rishi Solanki 
wrote:

> Congratulations Deepak!! :-)
>
> Rishi Solanki
> Manager, Enterprise Software Development
> HotWax Systems Pvt. Ltd.
> Direct: +91-9893287847
> http://www.hotwaxsystems.com
>
> On Fri, Feb 24, 2017 at 7:42 PM, Julien NICOLAS  >
> wrote:
>
> > Good news, congrats Deepak !
> >
> > Julien.
> >
> >
> >
> > On 24/02/2017 14:08, Jacques Le Roux wrote:
> >
> >> The OFBiz PMC has invited Deepak Dixit to become a new member of the
> >> committee; and the committee members are happy to announce that he has
> >> accepted.
> >>
> >> Deepak has been involved in OFBiz for a long time now, and is a
> respected
> >> committer for 2 years.
> >>
> >> We are sure Deepak will help us to take good decisions in favour of a
> >> bright future for OFBiz!
> >>
> >> Please join me in welcoming and congratulating Deepak.
> >>
> >> Thanks
> >>
> >> Jacques
> >> PS: Deepak, I let you change your status on the wiki PMC page :)
> >>
> >>
> >>
> >
>

Re: Welcome Deepak Dixit as a new PMC member

[Julien NICOLAS]

Good news, congrats Deepak !

Julien.


On 24/02/2017 14:08, Jacques Le Roux wrote:
The OFBiz PMC has invited Deepak Dixit to become a new member of the 
committee; and the committee members are happy to announce that he has 
accepted.


Deepak has been involved in OFBiz for a long time now, and is a 
respected committer for 2 years.


We are sure Deepak will help us to take good decisions in favour of a 
bright future for OFBiz!


Please join me in welcoming and congratulating Deepak.

Thanks

Jacques
PS: Deepak, I let you change your status on the wiki PMC page :)

Re: Welcome Deepak Dixit as a new PMC member

[Rishi Solanki]

Congratulations Deepak!! :-)

Rishi Solanki
Manager, Enterprise Software Development
HotWax Systems Pvt. Ltd.
Direct: +91-9893287847
http://www.hotwaxsystems.com

On Fri, Feb 24, 2017 at 7:42 PM, Julien NICOLAS 
wrote:

> Good news, congrats Deepak !
>
> Julien.
>
>
>
> On 24/02/2017 14:08, Jacques Le Roux wrote:
>
>> The OFBiz PMC has invited Deepak Dixit to become a new member of the
>> committee; and the committee members are happy to announce that he has
>> accepted.
>>
>> Deepak has been involved in OFBiz for a long time now, and is a respected
>> committer for 2 years.
>>
>> We are sure Deepak will help us to take good decisions in favour of a
>> bright future for OFBiz!
>>
>> Please join me in welcoming and congratulating Deepak.
>>
>> Thanks
>>
>> Jacques
>> PS: Deepak, I let you change your status on the wiki PMC page :)
>>
>>
>>
>

Re: Welcome Deepak Dixit as a new PMC member

[Pranay Pandey]

Perfect, many congratulations Deepak. You deserve to be. Wishing you all
the very best for this role.

Best regards,
Pranay Pandey

On 24-Feb-2017 6:38 PM, "Jacques Le Roux" 
wrote:

The OFBiz PMC has invited Deepak Dixit to become a new member of the
committee; and the committee members are happy to announce that he has
accepted.

Deepak has been involved in OFBiz for a long time now, and is a respected
committer for 2 years.

We are sure Deepak will help us to take good decisions in favour of a
bright future for OFBiz!

Please join me in welcoming and congratulating Deepak.

Thanks

Jacques
PS: Deepak, I let you change your status on the wiki PMC page :)

Re: Welcome Deepak Dixit as a new PMC member

[Suraj Khurana]

Many congratulations Deepak !!!

---
Best Regards,
Suraj Khurana
Sr. Enterprise Software Engineer
HotWax Systems  - *The global leader in
innovative enterprise commerce solutions **powered by Apache OFBiz.*



On Fri, Feb 24, 2017 at 6:38 PM, Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> The OFBiz PMC has invited Deepak Dixit to become a new member of the
> committee; and the committee members are happy to announce that he has
> accepted.
>
> Deepak has been involved in OFBiz for a long time now, and is a respected
> committer for 2 years.
>
> We are sure Deepak will help us to take good decisions in favour of a
> bright future for OFBiz!
>
> Please join me in welcoming and congratulating Deepak.
>
> Thanks
>
> Jacques
> PS: Deepak, I let you change your status on the wiki PMC page :)
>
>

Re: Welcome Deepak Dixit as a new PMC member

[Arun Patidar]

Many congratulations Deepak !!

-- 
Thanks & Regards
---
Arun Patidar
Manager,Enterprise Software Development
HotWax Mediawww.hotwaxsystems.com


On Fri, Feb 24, 2017 at 7:07 PM, Taher Alkhateeb  wrote:

> Happy to welcome and congratulate Deepak. I have fond memories of our work
> together and hope to get more done. Roll you sleeves :)
>
> On Feb 24, 2017 4:32 PM, "Pritam Kute" 
> wrote:
>
> > Many congratulations Deepak!!
> >
> > Thanks & Regards,
> > --
> > *Pritam Kute*
> > *HotWax Systems* | www.hotwaxsystems.com | *about.me/pritam.kute
> > *
> >
> > On Fri, Feb 24, 2017 at 6:58 PM, Harsh Vijaywargiya <
> > harsh.vijaywarg...@hotwaxsystems.com> wrote:
> >
> > > Great!! Many many congratulations to Deepak!!
> > >
> > > Thanks & Regards,
> > > Harsh
> > >
> > > On Friday 24 February 2017 06:38 PM, Jacques Le Roux wrote:
> > >
> > >> The OFBiz PMC has invited Deepak Dixit to become a new member of the
> > >> committee; and the committee members are happy to announce that he has
> > >> accepted.
> > >>
> > >> Deepak has been involved in OFBiz for a long time now, and is a
> > respected
> > >> committer for 2 years.
> > >>
> > >> We are sure Deepak will help us to take good decisions in favour of a
> > >> bright future for OFBiz!
> > >>
> > >> Please join me in welcoming and congratulating Deepak.
> > >>
> > >> Thanks
> > >>
> > >> Jacques
> > >> PS: Deepak, I let you change your status on the wiki PMC page :)
> > >>
> > >>
> > >
> >
>

Re: Welcome Deepak Dixit as a new PMC member

[Arvind Singh Tomar]

Many Congratulations to Deepak!!

Kind Regards -
Arvind Singh Tomar

On Fri, Feb 24, 2017 at 6:38 PM, Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> The OFBiz PMC has invited Deepak Dixit to become a new member of the
> committee; and the committee members are happy to announce that he has
> accepted.
>
> Deepak has been involved in OFBiz for a long time now, and is a respected
> committer for 2 years.
>
> We are sure Deepak will help us to take good decisions in favour of a
> bright future for OFBiz!
>
> Please join me in welcoming and congratulating Deepak.
>
> Thanks
>
> Jacques
> PS: Deepak, I let you change your status on the wiki PMC page :)
>
>

Re: Welcome Deepak Dixit as a new PMC member

[Ashish Vijaywargiya]

Many many congratulations, Deepak!! :-)

--
Kind Regards
Ashish Vijaywargiya
HotWax Systems - est. 1997 


On Fri, Feb 24, 2017 at 6:38 PM, Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> The OFBiz PMC has invited Deepak Dixit to become a new member of the
> committee; and the committee members are happy to announce that he has
> accepted.
>
> Deepak has been involved in OFBiz for a long time now, and is a respected
> committer for 2 years.
>
> We are sure Deepak will help us to take good decisions in favour of a
> bright future for OFBiz!
>
> Please join me in welcoming and congratulating Deepak.
>
> Thanks
>
> Jacques
> PS: Deepak, I let you change your status on the wiki PMC page :)
>
>

Re: Welcome Deepak Dixit as a new PMC member

[Michael Brohl]

Congratulations and welcome Deepak!

Regards,

Michael

Am 24.02.17 um 14:08 schrieb Jacques Le Roux:
The OFBiz PMC has invited Deepak Dixit to become a new member of the 
committee; and the committee members are happy to announce that he has 
accepted.


Deepak has been involved in OFBiz for a long time now, and is a 
respected committer for 2 years.


We are sure Deepak will help us to take good decisions in favour of a 
bright future for OFBiz!


Please join me in welcoming and congratulating Deepak.

Thanks

Jacques
PS: Deepak, I let you change your status on the wiki PMC page :)






smime.p7s
Description: S/MIME Cryptographic Signature

Re: Welcome Deepak Dixit as a new PMC member

[Taher Alkhateeb]

Happy to welcome and congratulate Deepak. I have fond memories of our work
together and hope to get more done. Roll you sleeves :)

On Feb 24, 2017 4:32 PM, "Pritam Kute" 
wrote:

> Many congratulations Deepak!!
>
> Thanks & Regards,
> --
> *Pritam Kute*
> *HotWax Systems* | www.hotwaxsystems.com | *about.me/pritam.kute
> *
>
> On Fri, Feb 24, 2017 at 6:58 PM, Harsh Vijaywargiya <
> harsh.vijaywarg...@hotwaxsystems.com> wrote:
>
> > Great!! Many many congratulations to Deepak!!
> >
> > Thanks & Regards,
> > Harsh
> >
> > On Friday 24 February 2017 06:38 PM, Jacques Le Roux wrote:
> >
> >> The OFBiz PMC has invited Deepak Dixit to become a new member of the
> >> committee; and the committee members are happy to announce that he has
> >> accepted.
> >>
> >> Deepak has been involved in OFBiz for a long time now, and is a
> respected
> >> committer for 2 years.
> >>
> >> We are sure Deepak will help us to take good decisions in favour of a
> >> bright future for OFBiz!
> >>
> >> Please join me in welcoming and congratulating Deepak.
> >>
> >> Thanks
> >>
> >> Jacques
> >> PS: Deepak, I let you change your status on the wiki PMC page :)
> >>
> >>
> >
>

RE: Welcome Deepak Dixit as a new PMC member

[Swapnil Shah]

Many congratulations Deepak !!


Thanks & Regards,
Swapnil

-Original Message-
From: Jacques Le Roux [mailto:jacques.le.r...@les7arts.com]
Sent: Friday, February 24, 2017 6:38 PM
To: dev@ofbiz.apache.org
Subject: Welcome Deepak Dixit as a new PMC member

The OFBiz PMC has invited Deepak Dixit to become a new member of the
committee; and the committee members are happy to announce that he has
accepted.

Deepak has been involved in OFBiz for a long time now, and is a respected
committer for 2 years.

We are sure Deepak will help us to take good decisions in favour of a bright
future for OFBiz!

Please join me in welcoming and congratulating Deepak.

Thanks

Jacques
PS: Deepak, I let you change your status on the wiki PMC page :)

Re: Welcome Deepak Dixit as a new PMC member

[Pritam Kute]

Many congratulations Deepak!!

Thanks & Regards,
--
*Pritam Kute*
*HotWax Systems* | www.hotwaxsystems.com | *about.me/pritam.kute
*

On Fri, Feb 24, 2017 at 6:58 PM, Harsh Vijaywargiya <
harsh.vijaywarg...@hotwaxsystems.com> wrote:

> Great!! Many many congratulations to Deepak!!
>
> Thanks & Regards,
> Harsh
>
> On Friday 24 February 2017 06:38 PM, Jacques Le Roux wrote:
>
>> The OFBiz PMC has invited Deepak Dixit to become a new member of the
>> committee; and the committee members are happy to announce that he has
>> accepted.
>>
>> Deepak has been involved in OFBiz for a long time now, and is a respected
>> committer for 2 years.
>>
>> We are sure Deepak will help us to take good decisions in favour of a
>> bright future for OFBiz!
>>
>> Please join me in welcoming and congratulating Deepak.
>>
>> Thanks
>>
>> Jacques
>> PS: Deepak, I let you change your status on the wiki PMC page :)
>>
>>
>

Re: Welcome Deepak Dixit as a new PMC member

[Harsh Vijaywargiya]

Great!! Many many congratulations to Deepak!!

Thanks & Regards,
Harsh
On Friday 24 February 2017 06:38 PM, Jacques Le Roux wrote:
The OFBiz PMC has invited Deepak Dixit to become a new member of the 
committee; and the committee members are happy to announce that he has 
accepted.


Deepak has been involved in OFBiz for a long time now, and is a 
respected committer for 2 years.


We are sure Deepak will help us to take good decisions in favour of a 
bright future for OFBiz!


Please join me in welcoming and congratulating Deepak.

Thanks

Jacques
PS: Deepak, I let you change your status on the wiki PMC page :)

Welcome Deepak Dixit as a new PMC member

[Jacques Le Roux]

The OFBiz PMC has invited Deepak Dixit to become a new member of the committee; 
and the committee members are happy to announce that he has accepted.

Deepak has been involved in OFBiz for a long time now, and is a respected 
committer for 2 years.

We are sure Deepak will help us to take good decisions in favour of a bright 
future for OFBiz!

Please join me in welcoming and congratulating Deepak.

Thanks

Jacques
PS: Deepak, I let you change your status on the wiki PMC page :)

Re: OFBIZ-3972

[Taher Alkhateeb]

I think I would prefer DATETIME. Some reasons are found here ->
http://stackoverflow.com/questions/409286/should-i-use-field-datetime-or-timestamp.
Given that OFBiz takes care of conversions, DATETIME seems like a more
appropriate choice

On Fri, Feb 24, 2017 at 12:13 PM, Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> Hi,
>
> At OFBIZ-3972 Deepak suggested
>
> < As we have only DATETIME set as sql type and this does not support
> Milliseconds, we need to use DATETIME(3) or DATETIME(6).>>
>
> I suggested
>
>  >>
>
> Deepak rightly mentioned that in both cases we need to create an entry in
> "data migration" wiki page
>
> << we need to run alter query manually (if someone want to upgrade custom
> solution to latest)>>
>
> Please let know your thoughts and suggestions if any
>
> Jacques
>
>

OFBIZ-3972

[Jacques Le Roux]

Hi,

At OFBIZ-3972 Deepak suggested

<>

I suggested

>

Deepak rightly mentioned that in both cases we need to create an entry in "data 
migration" wiki page

<< we need to run alter query manually (if someone want to upgrade custom solution to 
latest)>>

Please let know your thoughts and suggestions if any

Jacques