Re: permanency of an unsigned Android app on the phone?

[J. Landman Gay via use-livecode]

On July 20, 2023 7:48:13 PM Richard Gaskin via use-livecode 
 wrote:



J. Landman Gay jacque wrote:

Depending on the Android version the user

may need to bypass

a scary warning, accept some permissions, and turn on

the ability

to download from unknown sources in system settings


...and after the app is installed then immediatel turn sideloading back off.

It's powerful.  And the bad guys know it.  Don't run with it turned on.


One nice thing about Android 13 (and I think 12?) is that it allows you to 
permit downloads by app, rather than toggling a global property. That way 
you don't need to turn on unknown sources in system settings. Of course, 
you can still get yourself in trouble if you give permissions to your 
browser and then binge download everything you see.


--
Jacqueline Landman Gay | jac...@hyperactivesw.com
HyperActive Software | http://www.hyperactivesw.com




___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: OT - a new release of WinSignHelper for macOS

[J. Landman Gay via use-livecode]

Very useful info, thank you. Especially the part about using the token on 
different machines. I was duped into believing everything I read on the 
internet. :)


--
Jacqueline Landman Gay | jac...@hyperactivesw.com
HyperActive Software | http://www.hyperactivesw.com
On July 20, 2023 4:20:59 PM matthias rebbe via use-livecode 
 wrote:


Am 20.07.2023 um 17:21 schrieb J. Landman Gay via use-livecode 
:


Thanks Matthias. I've been reading about it and I think the cert is stored 
on the machine but it is tied to that computer and not exportable.




If you get a new computer you need to buy a new certificate.
I don't think that is true. The new type of certificate has to be stored on 
a secure device. That's what the eToken is for. The private key is also 
stored on the eToken and the certificate and the private key cannot be 
exported. You should be able to use that token on multiple computers. You 
just have to install the eToken driver to an other computer and attach the 
eToken to it.


This is what Trustzone is saying about it:
"The token-based type of Standard Code Signing certificates can also be 
used on multiple computers. The same goes for token-based EV certificates. 
But no token-based certificate can ever be used simultaneously on two 
computers since the SafeNet token can only be plugged into one computer at 
a time."


As i never had such eToken, i do not know, if the certificate and the 
private key can be accessed as files through Finder. And what extension do 
they have. I've read the osslsigncode can use also certificates and key 
files with .cem extension.
So if the eToken contains such files, WinSignHelper could be slightly 
adjusted to work with the eToken. But that's just an assumption.


Matthias


So I don't think I'll experiment, and we'll just do the whole thing on the 
Windows box.


The sad part is that if we'd renewed just a couple of weeks earlier we'd 
have been within the cutoff date and could have purchased the old type of 
certificate.


Same here. I was about 5 days to late otherwise i could have ordered the 
olde type.



If anyone else has used the new token hardware I'd be grateful for any tips 
or suggestions. This is all new to me.


I am using a cloud based OV certificate from Certum. I just need to install 
the Software SimplySign Desktop. The software "integrates" the certificate 
into Windows' certificate storage (or what ever this is called) after i 
logged in using that SimplySign Desktop software.

Microsoft's signtool can then directly access the certificate.



--
Jacqueline Landman Gay | jac...@hyperactivesw.com
HyperActive Software | http://www.hyperactivesw.com
On July 19, 2023 4:20:23 PM matthias rebbe via use-livecode 
 wrote:



To be honest, i do not know.
I am currently using a cloud code signing certificate which i can only use 
on Windows.
I've chosen the cloud version because of the price, but later i noticed 
that it seems that those cloud certificates cannot be used on macOS.

Or maybe they can, but i do not know how, especially with ossl signcode
WinSignHelper uses ossl signcode and currently that tool needs a path to a 
certificate


Do you know where the certificate is stored with the eToken solution? Is it 
stored also on the eToken or anywhere else on the Mac?
If you have the certificate as a physical file it maybe could be possible 
to select that file in the WinSignHelper prefs.


But as  i alread wrote, i really don't know exactly.

I am currently thinking of purchasing a 2nd certificate as eToken solution, 
but there is not yet a decision made, if i should spent money for this, as 
i have a working cloud certificate which expires in 3 years.


Regards,
Matthias

Am 19.07.2023 um 22:53 schrieb J. Landman Gay via use-livecode 
:


@Matthias: does the upgraded WinSignHelper work with the new hardware 
eTokens? Those are required now.


If so, do the instructions change on how to use your tool?


On 12/23/22 10:44 AM, matthias rebbe via use-livecode wrote:

i've upgraded my free tool WinSignHelper.
For those who do not know what WinSignHelper is...
It's a GUI for osslsigncode. Osslsigncode is command line tool that can do 
the Authenticode signing and timestamping. With it you can code sign 
Windows applications  using an appropriate code signing certificate.
You just drag a folder with your Windows application into WinSignHelper and 
it signs all components of your standalone (.exe and .dll).
WinSignHelper Help section gives enough information about how to install 
osslsigncode.

So if anyone is interested in testing
The version is  notarized and is an universal build for X86 and Arm
Zip
https://dl.qck.nu/?dl=WinSignHelper_universal.zip
DMG
https://dl.qck.nu/?dl=WinSignHelper_universal.dmg
Hope this is of help for one or the other.



--
Jacqueline Landman Gay | jac...@hyperactivesw.com
HyperActive Software   | http://www.hyperactivesw.com


___
use-livecode mailing 

Re: Has anyone experimented with using Python within LC?

[Geoff Canyon via use-livecode]

I just checked, and this in a stack script works perfectly:

function pythonFile p
   put the filename of this stack into fp
   set the itemdel to "/"
   put the long seconds into fn
   replace "." with "_" in fn
   put "_temp.py" after fn
   put fn into item -1 of fp
   put p into url ("file:" & fp)
   return shell(quote & "" & quote && quote & fp & quote)
end pythonFile

In the real world you'd probably want to set up a single external file (or
set of files? if performance is important and the files need to be used
repeatedly?) and check to make sure you're not accidentally overwriting
something.

On Thu, Jul 20, 2023 at 4:07 PM Bob Sneidar via use-livecode <
use-livecode@lists.runrev.com> wrote:

> Interesting. Ostensibly you could use low level file commands to create
> they python file? Or does the Python script need to be processed by Python
> first?
>
> Bob S
>
>
> > On Jul 20, 2023, at 12:33 PM, Geoff Canyon via use-livecode <
> use-livecode@lists.runrev.com> wrote:
> >
> > I've now figured out that calling a Python file from within LC is as easy
> > as:
> >
> > put shell(quote & "" & quote && quote &
> > "" & quote)
> >
> > Then whatever gets print()'ed in Python gets returned to LC. Has anyone
> > done work this way and has ideas on best practices for some sort of
> >
> > 1. generate python code
> > 2. write python code to a file
> > 3. write data to a (separate?) file
> > 4. call the code
> > 5. process the results
> >
> > ...loop?
> >
> > gc
>
>
> ___
> use-livecode mailing list
> use-livecode@lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>
___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: What is your best practice for setting a script in a script?

[Richard Gaskin via use-livecode]

Paul Dupuis wrote:
> So in the instances where you have a script that creates an object
> and then sets the script of that object (example below), what is you
> best practice for having the script in a script and still be readable?
 
Why?
 
Among other concerns (robustness, debugging, maintenance), setting the script 
of an object requires turning off script encryption.
 
Dick Kriesel wrote:
>

Hi, Paul. The best way to set the script may be not to; that is, instead
> set the new object’s behavior to a button that contains the readable script.
 
^ this.
 
Simple, clean, with-the-grain.
 
Know the engine.
Trust the engine.
Use the engine.
 
--  
Richard Gaskin
Fourth World System
 

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: permanency of an unsigned Android app on the phone?

[Richard Gaskin via use-livecode]

J. Landman Gay jacque wrote:
> Depending on the Android version the user
may need to bypass
> a scary warning, accept some permissions, and turn on
the ability
> to download from unknown sources in system settings
 
...and after the app is installed then immediatel turn sideloading back off.
 
It's powerful.  And the bad guys know it.  Don't run with it turned on.
 
-- 
Richard Gaskin
Fourth World System
 

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: Has anyone experimented with using Python within LC?

[Bob Sneidar via use-livecode]

Interesting. Ostensibly you could use low level file commands to create they 
python file? Or does the Python script need to be processed by Python first? 

Bob S


> On Jul 20, 2023, at 12:33 PM, Geoff Canyon via use-livecode 
>  wrote:
> 
> I've now figured out that calling a Python file from within LC is as easy
> as:
> 
> put shell(quote & "" & quote && quote &
> "" & quote)
> 
> Then whatever gets print()'ed in Python gets returned to LC. Has anyone
> done work this way and has ideas on best practices for some sort of
> 
> 1. generate python code
> 2. write python code to a file
> 3. write data to a (separate?) file
> 4. call the code
> 5. process the results
> 
> ...loop?
> 
> gc


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

RE: Has anyone experimented with using Python within LC?

[Ralph DiMola via use-livecode]

Late to the game... I use the same method for PHP. I needed to batch minify
html/js/css files. There is a great PHP script to do it. Batch it up with LC
and one button did it all. There is a ton of open source useful PHP that can
be integrated with ease to LC. I'll remember this if I need some Python in
the future.

Thanks Geoff.

Ralph DiMola
IT Director
Evergreen Information Services
rdim...@evergreeninfo.net

-Original Message-
From: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] On Behalf
Of Geoff Canyon via use-livecode
Sent: Thursday, July 20, 2023 3:34 PM
To: How to use LiveCode
Cc: Geoff Canyon
Subject: Has anyone experimented with using Python within LC?

I've now figured out that calling a Python file from within LC is as easy
as:

put shell(quote & "" & quote && quote &
"" & quote)

Then whatever gets print()'ed in Python gets returned to LC. Has anyone done
work this way and has ideas on best practices for some sort of

1. generate python code
2. write python code to a file
3. write data to a (separate?) file
4. call the code
5. process the results

...loop?

gc
___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: OT - a new release of WinSignHelper for macOS

[matthias rebbe via use-livecode]

> Am 20.07.2023 um 17:21 schrieb J. Landman Gay via use-livecode 
> :
> 
> Thanks Matthias. I've been reading about it and I think the cert is stored on 
> the machine but it is tied to that computer and not exportable.


> If you get a new computer you need to buy a new certificate.
I don't think that is true. The new type of certificate has to be stored on a 
secure device. That's what the eToken is for. The private key is also stored on 
the eToken and the certificate and the private key cannot be exported. You 
should be able to use that token on multiple computers. You just have to 
install the eToken driver to an other computer and attach the eToken to it.

This is what Trustzone is saying about it:
"The token-based type of Standard Code Signing certificates can also be used on 
multiple computers. The same goes for token-based EV certificates. But no 
token-based certificate can ever be used simultaneously on two computers since 
the SafeNet token can only be plugged into one computer at a time."

As i never had such eToken, i do not know, if the certificate and the private 
key can be accessed as files through Finder. And what extension do they have. 
I've read the osslsigncode can use also certificates and key files with .cem 
extension. 
So if the eToken contains such files, WinSignHelper could be slightly adjusted 
to work with the eToken. But that's just an assumption.

Matthias


> So I don't think I'll experiment, and we'll just do the whole thing on the 
> Windows box.
> 
> The sad part is that if we'd renewed just a couple of weeks earlier we'd have 
> been within the cutoff date and could have purchased the old type of 
> certificate.
> 
Same here. I was about 5 days to late otherwise i could have ordered the olde 
type.


> If anyone else has used the new token hardware I'd be grateful for any tips 
> or suggestions. This is all new to me.

I am using a cloud based OV certificate from Certum. I just need to install the 
Software SimplySign Desktop. The software "integrates" the certificate into 
Windows' certificate storage (or what ever this is called) after i logged in 
using that SimplySign Desktop software.
Microsoft's signtool can then directly access the certificate.


> --
> Jacqueline Landman Gay | jac...@hyperactivesw.com
> HyperActive Software | http://www.hyperactivesw.com
> On July 19, 2023 4:20:23 PM matthias rebbe via use-livecode 
>  wrote:
> 
>> To be honest, i do not know.
>> I am currently using a cloud code signing certificate which i can only use 
>> on Windows.
>> I've chosen the cloud version because of the price, but later i noticed that 
>> it seems that those cloud certificates cannot be used on macOS.
>> Or maybe they can, but i do not know how, especially with ossl signcode
>> WinSignHelper uses ossl signcode and currently that tool needs a path to a 
>> certificate
>> 
>> Do you know where the certificate is stored with the eToken solution? Is it 
>> stored also on the eToken or anywhere else on the Mac?
>> If you have the certificate as a physical file it maybe could be possible to 
>> select that file in the WinSignHelper prefs.
>> 
>> But as  i alread wrote, i really don't know exactly.
>> 
>> I am currently thinking of purchasing a 2nd certificate as eToken solution, 
>> but there is not yet a decision made, if i should spent money for this, as i 
>> have a working cloud certificate which expires in 3 years.
>> 
>> Regards,
>> Matthias
>> 
>>> Am 19.07.2023 um 22:53 schrieb J. Landman Gay via use-livecode 
>>> :
>>> 
>>> @Matthias: does the upgraded WinSignHelper work with the new hardware 
>>> eTokens? Those are required now.
>>> 
>>> If so, do the instructions change on how to use your tool?
>>> 
>>> 
>>> On 12/23/22 10:44 AM, matthias rebbe via use-livecode wrote:
 i've upgraded my free tool WinSignHelper.
 For those who do not know what WinSignHelper is...
 It's a GUI for osslsigncode. Osslsigncode is command line tool that can do 
 the Authenticode signing and timestamping. With it you can code sign 
 Windows applications  using an appropriate code signing certificate.
 You just drag a folder with your Windows application into WinSignHelper 
 and it signs all components of your standalone (.exe and .dll).
 WinSignHelper Help section gives enough information about how to install 
 osslsigncode.
 So if anyone is interested in testing
 The version is  notarized and is an universal build for X86 and Arm
 Zip
 https://dl.qck.nu/?dl=WinSignHelper_universal.zip
 DMG
 https://dl.qck.nu/?dl=WinSignHelper_universal.dmg
 Hope this is of help for one or the other.
>>> 
>>> 
>>> --
>>> Jacqueline Landman Gay | jac...@hyperactivesw.com
>>> HyperActive Software   | http://www.hyperactivesw.com
>>> 
>>> 
>>> ___
>>> use-livecode mailing list
>>> use-livecode@lists.runrev.com
>>> Please visit this url to subscribe, unsubscribe and 

Has anyone experimented with using Python within LC?

[Geoff Canyon via use-livecode]

I've now figured out that calling a Python file from within LC is as easy
as:

put shell(quote & "" & quote && quote &
"" & quote)

Then whatever gets print()'ed in Python gets returned to LC. Has anyone
done work this way and has ideas on best practices for some sort of

1. generate python code
2. write python code to a file
3. write data to a (separate?) file
4. call the code
5. process the results

...loop?

gc
___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: Android and USB footswitch

[Klaus major-k via use-livecode]

Am 20.07.2023 um 18:14 schrieb Klaus major-k via use-livecode 
:
> 
> Hi all,
> 
>> Am 20.07.2023 um 15:58 schrieb Klaus major-k via use-livecode 
>> :
>> Hi all,
>> 
>>> Am 18.07.2023 um 21:30 schrieb Klaus major-k via use-livecode 
>>> :
>>> ...
 We really need LC to give us access to the public documents folder.
>>> The "Downloads" or "Documents" folder would be a good start, otherwise we 
>>> cannot create apps
>>> where the user needs to add more files.
>> FYI: there is a feature request for this, please add a comment if you like 
>> to have this in the next version:
>> 
>> I see that other apps offer something like this, so it IS in fact possible 
>> somehow... 8-)
> 
> someone from a german bass player forum sent me an screenshot of the app 
> "MobileSheets":
> 
> 
> This appears after clicking the PLUS sign (or "Import" button?) in that app, 
> which looks like a "regular" "Open..." dialog:
> 

Received another screenshot, this is from the app "Songbook Pro":


--
Klaus Major
https://www.major-k.de
https://www.major-k.de/bass
kl...@major-k.de


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: Android and USB footswitch

[Klaus major-k via use-livecode]

Hi all,

> Am 20.07.2023 um 15:58 schrieb Klaus major-k via use-livecode 
> :
> Hi all,
> 
>> Am 18.07.2023 um 21:30 schrieb Klaus major-k via use-livecode 
>> :
>> ...
>>> We really need LC to give us access to the public documents folder.
>> The "Downloads" or "Documents" folder would be a good start, otherwise we 
>> cannot create apps
>> where the user needs to add more files.
> FYI: there is a feature request for this, please add a comment if you like to 
> have this in the next version:
> 
> I see that other apps offer something like this, so it IS in fact possible 
> somehow... 8-)

someone from a german bass player forum sent me an screenshot of the app 
"MobileSheets":


This appears after clicking the PLUS sign (or "Import" button?) in that app, 
which looks like a "regular" "Open..." dialog:


So I dare to naively ask: Why can't LC offer something like this? 8-)


Best

Klaus

--
Klaus Major
https://www.major-k.de
https://www.major-k.de/bass
kl...@major-k.de


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: OT - a new release of WinSignHelper for macOS

[J. Landman Gay via use-livecode]

Thanks Matthias. I've been reading about it and I think the cert is stored 
on the machine but it is tied to that computer and not exportable. If you 
get a new computer you need to buy a new certificate. So I don't think I'll 
experiment, and we'll just do the whole thing on the Windows box.


The sad part is that if we'd renewed just a couple of weeks earlier we'd 
have been within the cutoff date and could have purchased the old type of 
certificate.


If anyone else has used the new token hardware I'd be grateful for any tips 
or suggestions. This is all new to me.

--
Jacqueline Landman Gay | jac...@hyperactivesw.com
HyperActive Software | http://www.hyperactivesw.com
On July 19, 2023 4:20:23 PM matthias rebbe via use-livecode 
 wrote:



To be honest, i do not know.
I am currently using a cloud code signing certificate which i can only use 
on Windows.
I've chosen the cloud version because of the price, but later i noticed 
that it seems that those cloud certificates cannot be used on macOS.

Or maybe they can, but i do not know how, especially with ossl signcode
WinSignHelper uses ossl signcode and currently that tool needs a path to a 
certificate


Do you know where the certificate is stored with the eToken solution? Is it 
stored also on the eToken or anywhere else on the Mac?
If you have the certificate as a physical file it maybe could be possible 
to select that file in the WinSignHelper prefs.


But as  i alread wrote, i really don't know exactly.

I am currently thinking of purchasing a 2nd certificate as eToken solution, 
but there is not yet a decision made, if i should spent money for this, as 
i have a working cloud certificate which expires in 3 years.


Regards,
Matthias

Am 19.07.2023 um 22:53 schrieb J. Landman Gay via use-livecode 
:


@Matthias: does the upgraded WinSignHelper work with the new hardware 
eTokens? Those are required now.


If so, do the instructions change on how to use your tool?


On 12/23/22 10:44 AM, matthias rebbe via use-livecode wrote:

i've upgraded my free tool WinSignHelper.
For those who do not know what WinSignHelper is...
It's a GUI for osslsigncode. Osslsigncode is command line tool that can do 
the Authenticode signing and timestamping. With it you can code sign 
Windows applications  using an appropriate code signing certificate.
You just drag a folder with your Windows application into WinSignHelper and 
it signs all components of your standalone (.exe and .dll).
WinSignHelper Help section gives enough information about how to install 
osslsigncode.

So if anyone is interested in testing
The version is  notarized and is an universal build for X86 and Arm
Zip
https://dl.qck.nu/?dl=WinSignHelper_universal.zip
DMG
https://dl.qck.nu/?dl=WinSignHelper_universal.dmg
Hope this is of help for one or the other.



--
Jacqueline Landman Gay | jac...@hyperactivesw.com
HyperActive Software   | http://www.hyperactivesw.com


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your 
subscription preferences:

http://lists.runrev.com/mailman/listinfo/use-livecode



___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your 
subscription preferences:

http://lists.runrev.com/mailman/listinfo/use-livecode





___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: Android and USB footswitch

[Klaus major-k via use-livecode]

Hi all,

> Am 18.07.2023 um 21:30 schrieb Klaus major-k via use-livecode 
> :
> ...
>> We really need LC to give us access to the public documents folder.
> The "Downloads" or "Documents" folder would be a good start, otherwise we 
> cannot create apps
> where the user needs to add more files.

FYI: there is a feature request for this, please add a comment if you like to 
have this in the next version:


I see that other apps offer something like this, so it IS in fact possible 
somehow... 8-)


Best

Klaus

--
Klaus Major
https://www.major-k.de
https://www.major-k.de/bass
kl...@major-k.de


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: missing folders in resource folder

[Klaus major-k via use-livecode]

FYI I added a bug report for this:


> Am 18.07.2023 um 21:47 schrieb Klaus major-k via use-livecode 
> :
> 
> Hi friends,
> 
> I added a folder "daten" in the "Copy files" tab in the "Standalone 
> Application settings".
> Inside of this folder are five more folders and two of them are EMPTY.
> 
> The two empty folders do NOT appear in the Android runtime if I do:
> ...
> put specialfolderpath("resources") & "/daten" into tFolder
> put folders(tFolder) into fld xyz
> ## I only get the NOT empty folders in the field!?
> ...
> Is this a feature or a bug?

--
Klaus Major
https://www.major-k.de
https://www.major-k.de/bass
kl...@major-k.de


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode