Re: Perl Tech meeting Tues Oct 14th - Shell-Shocker CGI and Perl DoS bugs

2014-10-13 Thread Bill Ricker
While today is a holiday for some, tomorrow is Boston.PM anyway.
(Worse, next month we're on 11/11.)
And Boston Perl Monger's 2nd Tuesday comes as late as possible this month,
so falls the day before BLU 3rd Wednesday.
   (I hear some operating system also issues patches that day, doesn't
affect me.)

TOPIC: Shell-Shocker CGI and Perl DoS bugs
DATE: Tuesday, October 14
TIME: 7:00 – 10:00 PM
ROOM: E51-376
SPEAKER: Bill Ricker (lead)

We will examine the implications for the ShellShock BASH bug for Perl
-- it's much wider than just about BASH CGI or even Perl CGI scripts
-- and also a recently discovered/fixed but comparably long-lurking
Perl DoS bug in a core module (Data::Dumper stack smash CVE-2014-4330)
and how is it possibly remotely triggerable.

The good news is ShellShocker was slightly over-hyped; unlike
Heartbleed, this one does NOT generally affect the Internet of Things,
you internet-enabled toaster is likely immune. But Windows and Mac are
not entirely immune to this Linux bug.

[ Anyone who has examined either bug or its implications is welcome to
contribute or co-present - contacting me off-list is recommended,
although in our interactive style I'll cheerfully include ambush
collaborators. ]

Boilerplate details

Tech Meetings are held on the 2nd Tuesday of every month at MIT
building E51, Sloan School Tang Center [not the other Tang building!]
nearer to Kendall Sq than Mass Ave.
 (directions http://boston-pm.wikispaces.com/MIT+Directions).
Talk begins at 7:30.
Refreshments in the hallway prior.
RSVP for count encouraged but not required, to bill.n1...@gmail.com or
Boston-PM list, by 4pm Tuesday.


(NOTE: we're staying in the wider room 376 where we were in summer,
after being in squarish 372 for winter/spring.)

website - boston.pm.org

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


simulating chorded keyboards

2014-10-13 Thread David Rysdam
Remember the MIDI son? This is a different son, Kyle, with a different
project. He's interested in chorded keyboards. You can find these here
and there online, but he wants to design his own. To start, he wants to
simulate one with a regular keyboard.

We've been looking into ways to let him flexibly define keyboard input
(chords, modifier keys, etc) but without requiring a ton of low-level
programming.

1) A simple game engine (pygame, e.g.) that reports key down and key
up events rather than simply delivering a pressed key via something
like read(), getchar(), etc. He needs to get between these events to
figure out the current chord. Even pygame is more programming than he
really wants to do, though.

2) xkeycaps looks like the opposite of what I want, but it's described
so poorly I can't tell for sure. It looks like I can generate multiple
keysyms from a single key press, but not vice versa.

3) emacs! This was actually my first suggestion, since it does almost
everything he wants. Of course, he'd have to learn emacs first. However,
there's another problem that I'm not sure can be overcome. Aren't emacs
sequences limited such that you can't have one be a prefix of another?

For instance, he'd like to be able to do this:

'i' key down followed by 'i' key up: 'i'
'i' down followed by 'k' down followed by 'i' and 'k' both up: 'm'

but with emacs you can have i+k mapped to m but then not 'i' mapped to
'i'.
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Any takers for some computer parts?

2014-10-13 Thread Neil Schelly
I have a pile of parts looking for a home. They are all pretty old,
but they are free, and I figured someone in GNHLUG may have an excuse
to need something here. I live in Merrimack, NH and work in
Manchester, NH, and I can be pretty flexible to drive parts to meet
you. I'd prefer not to see any of this go to waste if someone has a
use for it, but hese are all going to electronics recycling in a week
or so if I don't get any takers.

I've got pictures of everything here and can take more if anyone needs them:
http://www.jenandneil.com/gallery3/index.php/miscellaneous/forsale/Computer-Parts
-Neil

Drives:
* 3.5 Floppy Drive
* Zip Drive Collection (1 USB and 2 Parallel drives, but I only have a
power adapter for a parallel port one. I don't know if they work or
not. I also have a single zip 100 disk, but I'll only let that go if I
can watch it get wiped.
* Plextor PlexWriter 16/10/40A

Networking:
* D-Link DFE-530TX NIC
* D-Link Router WBR-1310
* Linksys WMP54G PCI Wireless Card
* Netgear FA310TX NIC
* Netgear MA401 PCMCIA
* Network Everywhere NC100 NIC

Multimedia:
* Altec Lansing ACS340 speakers and subwoofer
* Hauppauge remote (for one of the WinTV cards)
* Hauppauge WinTV-D tuner card
* Hauppauge WinTV tuner card
* Sound Blaster Live 24-bit sound card

Miscellaneous Parts:
* ATI Radeon 7000 32MB DDR Dual Head video card with cable
* EVGA e-GeForce 7100 video card
* Intel E33681 Socket 775 CPU fan
* Memory (various)
* MSI NX6200AX-TD128LF GeForce 6200 video card
* OpenMoko FreeRunner with 2 batteries, external batter charger,
stylus/pen, USB Micro-SD card reader, and original box with
international plug adapters.
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/