Re: [freenet-dev] Major problem with linux/java: We need an external daemon?

2008-02-14 Thread Jack O'Lantern
--- Matthew Toseland <[EMAIL PROTECTED]> wrote: > On Tuesday 12 February 2008 17:08, Matthew Toseland wrote: > > AFAICS this is the way forward. Since Java attempts to use POSIX priorities > > and they don't do anything on Linux, and since thread priorities work on > > Linux (and presumably on Sol

[freenet-dev] Major problem with linux/java: We need an external daemon?

2008-02-14 Thread Jack O'Lantern
--- Matthew Toseland wrote: > On Tuesday 12 February 2008 17:08, Matthew Toseland wrote: > > AFAICS this is the way forward. Since Java attempts to use POSIX priorities > > and they don't do anything on Linux, and since thread priorities work on > > Linux (and presumably on Solaris), it shouldn't

Re: [freenet-dev] Major problem with linux/java: We need an external daemon?

2008-02-09 Thread Jack O'Lantern
Matthew Toseland <[EMAIL PROTECTED]> wrote: > Beyond that, the only realistic option appears to be an external daemon > running at a lower nice level to do CPU-intensive jobs and FEC encoding and > decoding in particular. Thread.yield() comes to mind. But this is ugly. Wouldn't it be sufficient

[freenet-dev] Major problem with linux/java: We need an external daemon?

2008-02-09 Thread Jack O'Lantern
Matthew Toseland wrote: > Beyond that, the only realistic option appears to be an external daemon > running at a lower nice level to do CPU-intensive jobs and FEC encoding and > decoding in particular. Thread.yield() comes to mind. But this is ugly. Wouldn't it be sufficient if the java thread

Re: [freenet-dev] Mozilla/Gecko browser features destroying your anonymity on freenet?

2007-12-11 Thread Jack O'Lantern
--- Matthew Toseland <[EMAIL PROTECTED]> wrote: > Hmmm I still don't understand - show an error message if the user > types in a domain? There are fraudsters out there who set up sites which look exactly like some legitimate site. If you try to log on, they grab your credentials and perform action

[freenet-dev] Mozilla/Gecko browser features destroying your anonymity on freenet?

2007-12-11 Thread Jack O'Lantern
--- Matthew Toseland wrote: > Hmmm I still don't understand - show an error message if the user > types in a domain? There are fraudsters out there who set up sites which look exactly like some legitimate site. If you try to log on, they grab your credentials and perform actions on the legitimate

Re: [freenet-dev] Usability testing results

2007-12-11 Thread Jack O'Lantern
--- Matthew Toseland <[EMAIL PROTECTED]> wrote: > is a major problem, but I'm not sure what we can do about it. It's > mentioned in the README (well the 0.5 readme at least), but who > reads it? The web interface of 0.5 has a prominent link to the README in the Node Information box on the left. Th

[freenet-dev] Usability testing results

2007-12-11 Thread Jack O'Lantern
--- Matthew Toseland wrote: > is a major problem, but I'm not sure what we can do about it. It's > mentioned in the README (well the 0.5 readme at least), but who > reads it? The web interface of 0.5 has a prominent link to the README in the Node Information box on the left. That should sufficien

Re: [freenet-dev] Mozilla/Gecko browser features destroying your anonymity on freenet?

2007-12-11 Thread Jack O'Lantern
--- Florent Daignière <[EMAIL PROTECTED]> wrote: > There is at least a fourth one we are immune to in .7... The "If I > read anything looking like a RSS feed, I decide to ignore the > mime-type" one. Thanks for this information. I take it this is true for ATOM feeds to? Jack

[freenet-dev] Mozilla/Gecko browser features destroying your anonymity on freenet?

2007-12-11 Thread Jack O'Lantern
--- Florent Daigni?re wrote: > There is at least a fourth one we are immune to in .7... The "If I > read anything looking like a RSS feed, I decide to ignore the > mime-type" one. Thanks for this information. I take it this is true for ATOM feeds to? Jack ___

[freenet-dev] Mozilla/Gecko browser features destroying your anonymity on freenet?

2007-12-09 Thread Jack O'Lantern
Hi, I'm in the process of updating the README of 0.5 and found the section on securing Mozilla in need of a rewrite. I haven't found a similar section in the 0.7 README, so the follwing information might be of interest for 0.7, too. I know of three Mozilla features potentially destroying your ano

[freenet-dev] Mozilla/Gecko browser features destroying your anonymity on freenet?

2007-12-09 Thread Jack O'Lantern
Hi, I'm in the process of updating the README of 0.5 and found the section on securing Mozilla in need of a rewrite. I haven't found a similar section in the 0.7 README, so the follwing information might be of interest for 0.7, too. I know of three Mozilla features potentially destroying your ano

Re: [freenet-dev] 0.5 unstable build.xml

2007-12-07 Thread Jack O'Lantern
--- Matthew Toseland <[EMAIL PROTECTED]> wrote: > Are you planning on maintaining the unstable branch (0.6) ? If so, > why? We deprecated it, is there any good reason to revive it? The differences between stable and unstable are very small (try diff -ruwB -x .svn stable/ unstable/, that returns on

[freenet-dev] 0.5 unstable build.xml

2007-12-07 Thread Jack O'Lantern
--- Matthew Toseland wrote: > Are you planning on maintaining the unstable branch (0.6) ? If so, > why? We deprecated it, is there any good reason to revive it? The differences between stable and unstable are very small (try diff -ruwB -x .svn stable/ unstable/, that returns only few dozen K of d

[freenet-dev] 0.5 unstable build.xml

2007-12-06 Thread Jack O'Lantern
Hi, I've applied the Diffie-Hellman patch to unstable now. Could Nextgens or a different site admin apply the same patch to the unstable build.xml that was applied to the stable one in revs 16002/16003/16113, please? Thank you! Jack ___

[freenet-dev] 0.5 unstable build.xml

2007-12-06 Thread Jack O'Lantern
Hi, I've applied the Diffie-Hellman patch to unstable now. Could Nextgens or a different site admin apply the same patch to the unstable build.xml that was applied to the stable one in revs 16002/16003/16113, please? Thank you! Jack ___

Re: [freenet-dev] Proposal: change legacy build.xml to reflect current repository locations

2007-11-29 Thread Jack O'Lantern
My reply to this message appears to have gone lost, so I'll try again: --- Florent Daignière <[EMAIL PROTECTED]> wrote: > I've commited something in r16002. Thanks! But the auto-generated http://downloads.freenetproject.org/freenet-stable-latest.tgz still contains jars from build 5107. The timest

[freenet-dev] Proposal: change legacy build.xml to reflect current repository locations

2007-11-29 Thread Jack O'Lantern
My reply to this message appears to have gone lost, so I'll try again: --- Florent Daigni?re wrote: > I've commited something in r16002. Thanks! But the auto-generated http://downloads.freenetproject.org/freenet-stable-latest.tgz still contains jars from build 5107. The timestamps are from May 1

Re: [freenet-dev] Proposal: change legacy build.xml to reflect current repository locations

2007-11-26 Thread Jack O'Lantern
--- Florent Daignière <[EMAIL PROTECTED]> wrote: > * Jack O'Lantern <[EMAIL PROTECTED]> [2007-11-25 > 05:33:22]: > > > Hi, > > > > currently, the official public freenet repository is > > svn://freenet.googlecode.com/svn, while the > &

[freenet-dev] Proposal: change legacy build.xml to reflect current repository locations

2007-11-26 Thread Jack O'Lantern
--- Florent Daigni?re wrote: > * Jack O'Lantern [2007-11-25 > 05:33:22]: > > > Hi, > > > > currently, the official public freenet repository is > > svn://freenet.googlecode.com/svn, while the > > sourceforge CVS repository is obsolete. I propos

[freenet-dev] Proposal: change legacy build.xml to reflect current repository locations

2007-11-25 Thread Jack O'Lantern
Hi, currently, the official public freenet repository is svn://freenet.googlecode.com/svn, while the sourceforge CVS repository is obsolete. I propose to change the legacy build.xml file to reflect this situation. The proposed new file and its diff to r15948 are attached to this message. Here is

[freenet-dev] Proposal: change legacy build.xml to reflect current repository locations

2007-11-25 Thread Jack O'Lantern
Hi, currently, the official public freenet repository is svn://freenet.googlecode.com/svn, while the sourceforge CVS repository is obsolete. I propose to change the legacy build.xml file to reflect this situation. The proposed new file and its diff to r15948 are attached to this message. Here is

Re: [freenet-dev] automated builds, svn sync

2007-11-24 Thread Jack O'Lantern
--- Juiceman <[EMAIL PROTECTED]> wrote: > On Nov 24, 2007 2:45 PM, Thomas <[EMAIL PROTECTED]> > wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA512 > > > > freenet.googlecode.com is only synced once a day, r15947 and r15948 are commits from today, so they > > should be in the google-repo

[freenet-dev] automated builds, svn sync

2007-11-24 Thread Jack O'Lantern
--- Juiceman wrote: > On Nov 24, 2007 2:45 PM, Thomas > wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA512 > > > > freenet.googlecode.com is only synced once a day, r15947 and r15948 are commits from today, so they > > should be in the google-repo tomorrow. > > The auto-builder uses

[freenet-dev] automated builds, svn sync

2007-11-24 Thread Jack O'Lantern
Hi, there is something strange going on with the automated freenet 0.5 builds. http://downloads.freenetproject.org/freenet-stable-latest.src.tbz contains the latest (build 5108) source code. But the jars in the dist/ directory are still the from the old 5107 build. http://downloads.freenetproject.

[freenet-dev] automated builds, svn sync

2007-11-24 Thread Jack O'Lantern
Hi, there is something strange going on with the automated freenet 0.5 builds. http://downloads.freenetproject.org/freenet-stable-latest.src.tbz contains the latest (build 5108) source code. But the jars in the dist/ directory are still the from the old 5107 build. http://downloads.freenetproject.

Re: [freenet-dev] [freenet-cvs] r15948 - in branches/legacy/stable: . src/freenet/crypt

2007-11-24 Thread Jack O'Lantern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - --- Florent Daignière <[EMAIL PROTECTED]> wrote: > Needless to say that it has broken the auto-builder. > I have fixed the svn permissions on the buildfile. auto-builder? Tell me more! In any case, it does build now with "ant dist". One question co

[freenet-dev] [freenet-cvs] r15948 - in branches/legacy/stable: . src/freenet/crypt

2007-11-24 Thread Jack O'Lantern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - --- Florent Daigni?re wrote: > Needless to say that it has broken the auto-builder. > I have fixed the svn permissions on the buildfile. auto-builder? Tell me more! In any case, it does build now with "ant dist". One question concerning repositori

[freenet-dev] Diffie-Hellman security fix for freenet 0.5

2007-11-02 Thread Jack O'Lantern
Hi, it took me some time but I managed to subscribe to this list through TOR. I've sent and canceled a previous message, sorry for the confusion. I've attached a patch for freenet 0.5. It fixes the Diffie-Hellman exponential weakness. I hope I caught every instance of this weakness in the code. P

[freenet-dev] Diffie-Hellman security fix for freenet 0.5

2007-11-02 Thread Jack O'Lantern
Hi, it took me some time but I managed to subscribe to this list through TOR. I've sent and canceled a previous message, sorry for the confusion. I've attached a patch for freenet 0.5. It fixes the Diffie-Hellman exponential weakness. I hope I caught every instance of this weakness in the code. P