how to let activities write to file without risking security

2008-04-08 Thread Ties Stuij
Hey list, At OLE Nepal we need to let our etoys image allow writing to disk, however under rainbow the image is executed under another user id. What's the way to give an/our activity permission to write to certain directories without just making them world writable, which is surely not the way to

Re: how to let activities write to file without risking security

2008-04-08 Thread Korakurider
Hi, Before thinking about solution, could you explain specificaly what you want to write to disk and how that will be used? /Korakurider On Tue, Apr 8, 2008 at 3:50 PM, Ties Stuij [EMAIL PROTECTED] wrote: Hey list, At OLE Nepal we need to let our etoys image allow writing to disk, however

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Simon Schampijer
Dennis Gilmore wrote: On Monday 07 April 2008, Michael Stone wrote: cjb, cscott, and I just chatted about build names. We have absolutely no problem announcing official-703 (when candidate-703 becomes official) under whatever name seems good but we have no consensus about what that name

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Simon Schampijer
Morgan Collett wrote: On Tue, Apr 8, 2008 at 9:51 AM, Simon Schampijer [EMAIL PROTECTED] wrote: Dennis Gilmore wrote: On Monday 07 April 2008, Michael Stone wrote: cjb, cscott, and I just chatted about build names. We have absolutely no problem announcing official-703 (when

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Morgan Collett
On Tue, Apr 8, 2008 at 9:51 AM, Simon Schampijer [EMAIL PROTECTED] wrote: Dennis Gilmore wrote: On Monday 07 April 2008, Michael Stone wrote: cjb, cscott, and I just chatted about build names. We have absolutely no problem announcing official-703 (when candidate-703 becomes official)

Re: how to let activities write to file without risking security

2008-04-08 Thread Korakurider
On Tue, Apr 8, 2008 at 7:16 PM, Ties Stuij [EMAIL PROTECTED] wrote: But if someone has a good idea about saving an image and writing to the changes file on the XO, I'm all ears. If you just want to save your work during development in Squeak, the setup procedure in

Re: how to let activities write to file without risking security

2008-04-08 Thread Ties Stuij
On Tue, Apr 8, 2008 at 12:46 PM, Korakurider [EMAIL PROTECTED] wrote: Hi, Before thinking about solution, could you explain specificaly what you want to write to disk and how that will be used? /Korakurider Well, I was wondering on a general level how Sugar handles this, because I ran

Re: Bugs ML (or archiving) stop?

2008-04-08 Thread Simon Schampijer
Korakurider wrote: Hi. I can't see April archive of Bugs ML on http://lists.laptop.org/pipermail/bugs/ while there are surely some changes on Trac (see http://lists.laptop.org/pipermail/etoys-notify/2008-April/000472.html for instance). What's broken? I don't know whether bugs ML itself

trac stopped sending email to the bugs mailing list

2008-04-08 Thread Tomeu Vizoso
Hi Henry, looks like trac is not sending emails to the bugs ml any more since 29th March: http://lists.laptop.org/pipermail/bugs/ Can you please look at that? Thanks, Tomeu ___ Devel mailing list Devel@lists.laptop.org

Re: how to let activities write to file without risking security

2008-04-08 Thread Ties Stuij
On Tue, Apr 8, 2008 at 4:46 PM, Korakurider [EMAIL PROTECTED] wrote: On Tue, Apr 8, 2008 at 7:16 PM, Ties Stuij [EMAIL PROTECTED] wrote: But if someone has a good idea about saving an image and writing to the changes file on the XO, I'm all ears. If you just want to save your work

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Dennis Gilmore
On Monday 07 April 2008, Gary C Martin wrote: On 8 Apr 2008, at 04:53, Dennis Gilmore wrote: I honestly think we should call it OLPC 2 which matches the cvs/ build tag and signifies release number 2 OLPC 1 being ship.2 then we just increment the number for each stable release. we

Re: [Etoys] how to let activities write to file without risking security

2008-04-08 Thread karl
Ties Stuij wrote: On Tue, Apr 8, 2008 at 4:46 PM, Korakurider [EMAIL PROTECTED] wrote: On Tue, Apr 8, 2008 at 7:16 PM, Ties Stuij [EMAIL PROTECTED] wrote: But if someone has a good idea about saving an image and writing to the changes file on the XO, I'm all ears. If you just

Joyride builds are failing

2008-04-08 Thread Bert Freudenberg
See http://dev.laptop.org/~bert/joyride-pkgs.html Insufficient space in download directory /home/cscott/public_html/ xo-1/streams/joyride/build1841-20080408_0710/devel_jffs2/install_root/ var/cache/yum/olpc-joyride/packages to download - Bert - ___

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Aaron Konstam
On Tue, 2008-04-08 at 04:34 +0100, Gary C Martin wrote: Well, if this is a democracy, of sorts, I'll stick my neck out and vote to stick with a release-703, or official-703, kind'a format. I just really, really dislike dates floating into version naming (and even worse product naming -

Fwd: PEAP Configuration on OLPC

2008-04-08 Thread John Watlington
Does anybody know the answer to Where does gecko keep its configuration files ? Thanks, wad Begin forwarded message: From: Motaib Abdel Sent: Tuesday, April 01, 2008 11:34 AM To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' Cc: Bentahar Latif; Kerner Marty Subject: RE: PEAP Configuration on

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Walter Bender
Is Uruguay even using 703? Peru is. Mexico probably will... Mongolia probably will... While I like the discipline that is suggested by a date scheme, it doesn't really add much real value over simply sequential numbering. We certainly should avoid using seasonal names, as that will cause

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Paul Fox
walter wrote: I'm in favor of Dennis's suggestion. OLPC-1; OLPC-2, ... It is simple and, I argue, unambiguous. The hardware is XO-1, XO-2... as perhaps more of an outsider here, i'd say that this is not unambiguous. people with the laptops regularly refer to them as my OLPC -- perhaps

Re: Fwd: PEAP Configuration on OLPC

2008-04-08 Thread Simon Schampijer
You can use about:config in recent builds: http://wiki.laptop.org/go/Wifi_Connectivity#Proxy_Settings Best, Simon John Watlington wrote: Does anybody know the answer to Where does gecko keep its configuration files ? Thanks, wad Begin forwarded message: From: Motaib Abdel Sent:

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Walter Bender
This discussion reminds me of a favorite puzzle from Douglas Hofstadter 0, 1, 2, 3, 720!, ... That is a numbering scheme with lots of headroom. I agree that OLPC is the wrong name. There are reports that the software is now running, for example, on a Classmate PC. So any direct tie to OLPC is

Re: [Etoys] how to let activities write to file without risking security

2008-04-08 Thread Bert Freudenberg
On 08.04.2008, at 06:21, karl wrote: A activity with Squeak would be nice, and even useful :-) It could just be the Etoy dev image with write permission. Well, the Right Thing would be to check the image+changes files into the datastore. Problem is, it is unusably inefficient to do so

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Tomeu Vizoso
hmm, Sugar aims to be available as an alternative desktop in all kinds of linux distros, so would be a bad name for an OLPC-made distro. Tomeu On Tue, Apr 8, 2008 at 5:13 PM, Walter Bender [EMAIL PROTECTED] wrote: This discussion reminds me of a favorite puzzle from Douglas Hofstadter 0, 1,

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Walter Bender
True. How about OLPC-Fedora.1, ... -walter On Tue, Apr 8, 2008 at 11:21 AM, Tomeu Vizoso [EMAIL PROTECTED] wrote: hmm, Sugar aims to be available as an alternative desktop in all kinds of linux distros, so would be a bad name for an OLPC-made distro. Tomeu On Tue, Apr 8, 2008 at 5:13

Re: how to let activities write to file without risking security

2008-04-08 Thread Bert Freudenberg
On 07.04.2008, at 23:50, Ties Stuij wrote: Hey list, At OLE Nepal we need to let our etoys image allow writing to disk, however under rainbow the image is executed under another user id. What's the way to give an/our activity permission to write to certain directories without just making

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Polychronis Ypodimatopoulos
The prefix is much longer than the actual information that the name is supposed to provide ;-) p. Walter Bender wrote: True. How about OLPC-Fedora.1, ... -walter On Tue, Apr 8, 2008 at 11:21 AM, Tomeu Vizoso [EMAIL PROTECTED] wrote: hmm, Sugar aims to be available as an alternative

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Aaron Konstam
On Tue, 2008-04-08 at 10:38 -0400, Walter Bender wrote: Is Uruguay even using 703? Peru is. Mexico probably will... Mongolia probably will... Ok, maybe it was Mexico-703 but for reasons you state below that is the wrong way to go. OLPC-1, OLPC-2 , etc. sounds good to me. While I like the

XO-specific training for a support technician

2008-04-08 Thread Bryan Berry
howdy, I am training two teachers from our pilot schools how to maintain the XO, XS, and networking equipment. I have create a wiki page of the training program I have put together http://wiki.laptop.org/go/Nepal:_Support_Training i would very much appreciate the input of others. I have lots

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Kent Loobey
Here is my two cents on this subject. start-of-rant I worked for over ten years on a project that shipped software to states for localization and redistribution to their schools every fall. The following was true all of those years. The people that did the redistribution wanted a predictable

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Mitch Bradley
The right answer to the naming question depends on the meta-question of what will we be releasing. Are we going to continue down the path of bundling the OS and the activities into one giant release wad, or will we split out the separate components (OS, sugar, core activities) and release them

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Martin Langhoff
On Tue, Apr 8, 2008 at 11:38 AM, Walter Bender [EMAIL PROTECTED] wrote: As far as a feature-based scheme, that will just increase the pressure to do an end-run around our renewed pledge to do time-based releases. I'm in favor of Dennis's suggestion. OLPC-1; OLPC-2, ... It is simple and, I

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Walter Bender
I think we are all in complete agreement re predictable release schedules. It is the naming scheme we are struggling with. -walter On Tue, Apr 8, 2008 at 12:58 PM, Kent Loobey [EMAIL PROTECTED] wrote: Here is my two cents on this subject. start-of-rant I worked for over ten years on a

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Jim Gettys
Actually, it is a bit more complicated; whether we should reflect this in numbering, is, however, less clear to me. We have network protocols in the presence service we depend on, and which fundamentally affect interoperability between applications (flag days). I also posit we're very likely to

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Martin Langhoff
On Tue, Apr 8, 2008 at 2:30 PM, Martin Langhoff [EMAIL PROTECTED] wrote: After having worked in projects with many schemes, I find that the best communicator is a 3-part release name x.y.z where... Which is what Richard is saying too, except he is clearer ;-) For builds that are custom in

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Martin Langhoff
On Tue, Apr 8, 2008 at 2:35 PM, Jim Gettys [EMAIL PROTECTED] wrote: We have network protocols in the presence service we depend on, and which fundamentally affect interoperability between applications (flag days). I also posit we're very likely to have to face at least one more flag day

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Mitch Bradley
Perhaps it would be better to use a letter instead of a number for the generation code (major release). When confronted with a string of several numbers, the human mind tends to blank out. For some reason, letter - number - number is easier to remember and say than number - number - number .

Project name: TabletUI is set up

2008-04-08 Thread Henry Hardy
Mon, 7 Apr 2008 17:01:34 -0400, Patrick Dubroy [EMAIL PROTECTED] wrote: 1. Project name: TabletUI Done. Your tree is here: git+ssh://[EMAIL PROTECTED]/git/activities/tabletuihttp://[EMAIL PROTECTED]/git/activities/imagetosound Please follow instructions here for importing your project:

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Morgan Collett
On Tue, Apr 8, 2008 at 7:59 PM, Mitch Bradley [EMAIL PROTECTED] wrote: Perhaps it would be better to use a letter instead of a number for the generation code (major release). When confronted with a string of several numbers, the human mind tends to blank out. For some reason, letter -

Re: Mini-conference followup

2008-04-08 Thread Holger Levsen
Hi Scott, On Monday 07 April 2008 22:14, C. Scott Ananian wrote: I've got 11 DV tapes on my desk containing the mini-conference proceedings. We had to return the DV camera we were using to MIT, but hopefully we can borrow another one to get the bits off the tapes, and then I'll be

list server downtime

2008-04-08 Thread Henry Hardy
We had two hours downtime just now of our mailing lists due to an upgrade to pedal.laptop.org. We have restarted mailman and are testing the service now. --HH. ___ Devel mailing list Devel@lists.laptop.org http://lists.laptop.org/listinfo/devel

Latest news from Intel

2008-04-08 Thread Prakhar Agarwal
Sorry for cross posting. Could not resist myself. Please, visit the link below. Some of you might have read it already. There's a substantial mention of OLPC. http://news.bbc.co.uk/2/hi/technology/7334518.stm Regards, -- Prakhar Agarwal Technical Head - Library RD Team 3rd Year B.Tech, IT JIIT

Thread Summary. to date.

2008-04-08 Thread Charles Merriam
Can't tell your players without a program Micheal stone: no problem Andres Salomon: hmm. Apple Blueberry (named alphabetical) Gary Martin: No, official-703.. No to OLPC2 thats hardware Dennis Gilmore: OLPC2. Oh, an the next hardware is XO-2 and should have same releases. Simon: 802.month

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Charles Merriam
Here's may proposal: OLPC Year components major:minor [- special_build] OLPC 2008 OS 1:0 - Mexico OLPC 2009 Activity Bundle 2:14 SPE 2009 Student Bundle 1:0 - Approved by Sec. Mota OLPC = Built by OLPC. If the Secretariat of Public Education builds a custom, they name it SPE or

Re: Build Debate: Followup on Build Naming

2008-04-08 Thread Aaron Konstam
On Tue, 2008-04-08 at 14:40 -0300, Martin Langhoff wrote: On Tue, Apr 8, 2008 at 2:30 PM, Martin Langhoff [EMAIL PROTECTED] wrote: After having worked in projects with many schemes, I find that the best communicator is a 3-part release name x.y.z where... Which is what Richard is

Record activity broken in joyride-1842

2008-04-08 Thread Mark Bauer
I updated my g1g1 with the usual olpc-update -r -f joyride-1842 The update went ok, but when I attempted to play with the record activity, the camera doesn't give the normal video feedback, the image is frozen and can not take a picture. Switching from Video to Photo will cause the image

Lieutenant Governor Pat Quinn on HB5000

2008-04-08 Thread Edward Cherlin
I talked with Ryan Croke of Illinois Lieutenant Governor Pat Quinn's office today. They are keen on this project, and would like to arrange for us to assist in getting the program designed for the best possible outcome. HB5000 is moving rapidly through the House, and will then go to the Senate,

jnlp activity

2008-04-08 Thread Steve Lewis
Is anyone familiar with the status of the jnlp activity? -- Steven M. Lewis PhD email [EMAIL PROTECTED] ___ Devel mailing list Devel@lists.laptop.org http://lists.laptop.org/listinfo/devel

Re: Latest news from Intel

2008-04-08 Thread Charles Merriam
FYI, HP also announced a lower cost ($500) laptop aimed at classrooms today. http://www.mercurynews.com/ci_8848583 2008/4/8 Prakhar Agarwal [EMAIL PROTECTED]: Sorry for cross posting. Could not resist myself. Please, visit the link below. Some of you might have read it already. There's a

Cutting a slice of wikipedia - CDPedia

2008-04-08 Thread Martin Langhoff
Yesterday we had a mini-sprint with argentinian pythonistas and we discussed Alecu's CDPedia which is a Python toolchain that does are good job of cutting a slice of wikipedia and cutting off the least interesting parts to make it fit. His project is here http://code.google.com/p/cdpedia/

Chilling Effects paper at USENIX

2008-04-08 Thread Benjamin M. Schwartz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A paper called Freezing More Than Bits: Chilling Effects of the OLPC XO Security Model will be presented next Monday at USENIX UPSEC'08 [1]. The author has kindly posted the paper at [2], which I discovered after Google took me to her weblog [3]. It

Re: Lieutenant Governor Pat Quinn on HB5000

2008-04-08 Thread Edward Cherlin
On Tue, Apr 8, 2008 at 5:28 PM, Bobby Powers [EMAIL PROTECTED] wrote: Has anyone looked into the Encyclopedia of the Earth / Earth Portal? http://www.eoearth.org/ They have several ebooks and online textbooks, and peer-reviewed content (to edit, you have to apply, and all changes to the

Re: Chilling Effects paper at USENIX

2008-04-08 Thread Joshua N Pritikin
On Tue, Apr 08, 2008 at 10:24:34PM -0400, Benjamin M. Schwartz wrote: A paper called Freezing More Than Bits: Chilling Effects of the OLPC XO Security Model will be presented next Monday at USENIX UPSEC'08 [1]. The author has kindly posted the paper at [2], which I discovered after Google

Re: [OLPC library] Lieutenant Governor Pat Quinn on HB5000

2008-04-08 Thread Edward Cherlin
On Tue, Apr 8, 2008 at 7:59 PM, Jameson Chema Quinn [EMAIL PROTECTED] wrote: This is fascinating. I would say that the first triaging you should do to make this a reality for September is to reduce the number of grade levels you target to an absolute minimum. More than 3 would be crazy, two is

Re: Chilling Effects paper at USENIX

2008-04-08 Thread Jaya Kumar
On Tue, Apr 8, 2008 at 8:38 PM, Joshua N Pritikin [EMAIL PROTECTED] wrote: On Tue, Apr 08, 2008 at 10:24:34PM -0400, Benjamin M. Schwartz wrote: A paper called Freezing More Than Bits: Chilling Effects of the OLPC XO Security Model will be presented next Monday at USENIX UPSEC'08 [1]. The

Re: trac stopped sending email to the bugs mailing list ( [laptop.org #8969] )

2008-04-08 Thread Korakurider
On Wed, Apr 9, 2008 at 11:53 AM, Noah Kantrowitz [EMAIL PROTECTED] wrote: Trac thinks it is sending messages to [EMAIL PROTECTED] Beyond that I can't actually check. Then could you please nail down? + Is the ML is working actually? I tried to ping the ML from my gmail account but my message

Re: trac stopped sending email to the bugs mailing list ( [laptop.org #8969] )

2008-04-08 Thread Noah Kantrowitz
Nope, I don't have access to the mail server, so my testing stops at trac. --Noah On Apr 9, 2008, at 12:00 AM, Korakurider wrote: On Wed, Apr 9, 2008 at 11:53 AM, Noah Kantrowitz [EMAIL PROTECTED] wrote: Trac thinks it is sending messages to [EMAIL PROTECTED] Beyond that I can't actually

Re: Chilling Effects paper at USENIX

2008-04-08 Thread Mitch Bradley
It would have been nice if the criticisms had been delivered directly to OLPC, instead of broadcast in a public forum, where enemies of OLPC can cite and expand on them as evidence that OLPC is hopelessly screwed up, so you should buy our competing product instead. If you get my drift. I

Re: how to let activities write to file without risking security

2008-04-08 Thread Ties Stuij
On Tue, Apr 8, 2008 at 9:16 PM, Bert Freudenberg [EMAIL PROTECTED] wrote: On 07.04.2008, at 23:50, Ties Stuij wrote: Hey list, At OLE Nepal we need to let our etoys image allow writing to disk, however under rainbow the image is executed under another user id. What's the way to

Re: Chilling Effects paper at USENIX

2008-04-08 Thread Jaya Kumar
Moved the top post down. On Tue, Apr 8, 2008 at 9:21 PM, Mitch Bradley [EMAIL PROTECTED] wrote: It would have been nice if the criticisms had been delivered directly to OLPC, instead of broadcast in a public forum, where enemies of OLPC can cite and expand on them as evidence that OLPC is

Re:

2008-04-08 Thread John R . Hogerhuis
Let me take a crack at it... The closest thing to a valid criticism here is that bitfrost does not protect political dissidents from government monitoring and control. Similarly, a valid criticism of my shampoo is that it doesn't protect me from falling satellites. Which is the bigger threat to

Re: Get involved - Measure Activity on the XO

2008-04-08 Thread Arjun Sarwal
Perhaps someone @devel can comment... thanks Arjun On Fri, Apr 4, 2008 at 10:42 AM, Ravi Kondamuru [EMAIL PROTECTED] wrote: Hi Arjun, I am having trouble accessing git because of my corp firewall. Is there http access to the repository. My efforts so far have been unsuccessful. I was

Re: [Server-devel] BOF on apachecon Amsterdam

2008-04-08 Thread Marten Vijn
Hi I am preparing the bof, thanks for your input! see http://wiki.apache.org/apachecon/ when it's online again, I ll be on #schoolserver and might some help for anwering some question. time are not sure since i can't access their wiki. expected time: next wednessday 20:30 CET kind

Re: [Server-devel] BOF on apachecon Amsterdam

2008-04-08 Thread Martin Langhoff
On Tue, Apr 8, 2008 at 8:48 AM, Marten Vijn [EMAIL PROTECTED] wrote: I am preparing the bof, thanks for your input! Fantastic! Thanks for doing this. If you remember to keep notes and post something back (maybe CC'd to the key participants from the BoF) then we can continue the conversation