-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matthew Toseland wrote:
> Freenet 0.7 build 1203 is now available. Please upgrade.
> 
> The main change in 1203 is that history cloaking is removed. It is very messy 
> code-wise and does not really solve the problem - for example, if a user 
> posted the key for something they had inserted, and forgot to remove 
> the ?secureid= added by history cloaking, a malicious website could then 
> probe for that key with the secureid.
> 
> The real solution to browser history stealing is simply to use a separate 
> browser for Freenet than the one you use for the wider web. We now warn users 
> about this at the beginning of the first time wizard. 

^^ That is one more reason for the suggestion of a separate UI that I
made on freenet.uservoice.com. And I feel that I have to restate what I
said there to prefer XUL for such a client as for the following reasons:
1.) widely used already (stable language, although not community driven)
2.) easy to learn (it's just some XML paired with ECMA-Script - even a
lazy JEE/web developer like me was able to master that)
3.) common look and feel intregrated (most of the users already use some
other XUL based apps like Firefox, Thunderbird, aso.)
4.) easy to extend (regarding to plugins, extensions, themes, aso.)
5.) runs on nearly every platform

> There are also some 
> German translation updates by an anonymous contributor, and some work on the 
> README and the website. 
> 
> Apart from the above, Zero3 has started to commit his new windows installer. 
> saces has continued to work on his wxFCP project, which hopefully will result 
> in a custom browser for Freenet, which we may or may not use when it is 
> finished, and robert has committed a spec file for generating RPMs for 
> Freenet.

^^ RPM? I would rather need DEB or S5R4 datastreams. JRPM over at
sourceforge is a straight forward library for creating/parsing RPMs
regardless of the platform it runs on. The software I'm developing on at
work makes extensive use of the JRPM library and it is used in many
production systems so it can be considered as stable. Also it supports
noarch packages. I was already about to start working on something
similar for Solaris PKG, as the very basics (CPIO streams) is the same
in both the RPM and S5R4 package system. Only the stuff around that
differs a lot but even on windows one can unpack a datastream PKG with
the standalone windows builds of GNU dd and cpio. So there's not much
magic. I don't like projects that deliver just one package format (and
RPM is really not my favorite one). When you are planning to release
freenet in package formats please do it for all or for none. But I would
suspect that creating a good MSI would be the hardest task anyway.

Greetz,

AncoL

> 
> 1202 was related to history cloaking (making it configurable), and 1201 fixed 
> a bug causing the activelinks enabled setting not to be read on startup.
> 
> If you find any bugs, please report them on the bug tracker:
> https://bugs.freenetproject.org/
> 
> Thanks.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Support mailing list
> Support@freenetproject.org
> http://news.gmane.org/gmane.network.freenet.support
> Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
> Or mailto:support-requ...@freenetproject.org?subject=unsubscribe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkl485QACgkQHwxOsqv2bG3R6wCeMSd/xhz33Lp4VltG1tx31mwQ
XWQAoMWo3uDplXNLHTsTuiV2mMfA5rDV
=kzG2
-----END PGP SIGNATURE-----
_______________________________________________
Support mailing list
Support@freenetproject.org
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:support-requ...@freenetproject.org?subject=unsubscribe

Reply via email to