What is the status of the inkboard feature ? Is it considered stable ? More importantly, is it considered safe (from a security standpoint) ?
We had requests in Fedora to have the feature enabled and so am doing some testing on my side. It was originally turned off because it was pretty unstable and would often crash in the loudmouth library, but that was a while ago...
thx! -denis
.44 Inkboard was relatively stable at release, points to note were that multi user sessions only worked on compliant servers (wildfire or latest svn of ejabberd)
Im not completely certain about the state of its security, david yip would probably be better to comment on this, but i cannot see how any unsafe code could be injected
http://wiki.inkscape.org/wiki/index.php/User:Daleharvey
will give you a bit of insight into the state of the current incarnation of the whiteboard, as well as a timeline
Hi,
On Tue, Aug 29, 2006 at 12:44:58PM +0200, Denis Leroy wrote:
What is the status of the inkboard feature ? Is it considered stable ? More importantly, is it considered safe (from a security standpoint) ?
We had requests in Fedora to have the feature enabled and so am doing some testing on my side. It was originally turned off because it was pretty unstable and would often crash in the loudmouth library, but that was a while ago...
Yes, that's a good question. Requests for this have also been submitted to debian's BTS. So for me it would be especially interesting how safe and stable the implementation in 0.44 and 0.44.1 is since this is probably the version which will be released with debian etch (the next stable release of debian, ETA december this year)
thanks,
Wolfi
thx! -denis
Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&da... _______________________________________________ Inkscape-devel mailing list Inkscape-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/inkscape-devel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Denis Leroy wrote:
What is the status of the inkboard feature ? Is it considered stable ?
The version in Inkscape trunk is not yet stable. The .44 Inkboard had a number of stability fixes applied to it, but it is still disabled by default (partly because of security concerns).
More importantly, is it considered safe (from a security standpoint) ?
Inkboard's security status is probably best labeled as unknown. Although there haven't been any major security flaws shown to exist in Inkboard (.44 or trunk), neither Inkboard codebase has been audited for security, and a rewrite certainly doesn't help us insofar as security is concerned.
We had requests in Fedora to have the feature enabled and so am doing some testing on my side. It was originally turned off because it was pretty unstable and would often crash in the loudmouth library, but that was a while ago...
A number of crash bugs (and some rather silly mistakes) were fixed in the .44 release; you might want to give that a try. If you encounter problems, please let us know.
As Dale pointed out, some Inkboard features -- such as multi-user conferences -- don't work across all Jabber servers, due to deviations from behaviors specified in the JEPs.
thx! -denis
- - David
Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&da... _______________________________________________ Inkscape-devel mailing list Inkscape-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/inkscape-devel
* Reasons for rewrite in Inkscape trunk:
(1) A whiteboarding JEP has been drafted as part of another SoC project, sponsored by the Jabber Software Foundation. (Dale Harvey, one of Inkscape's SoC students, also had a hand in forming the JEP draft.) Dale and I (and others, I suspect) feel that it is important for Inkscape to be able to interoperate with other Jabber SVG whiteboarding clients.
This JEP, while influenced by .44's Inkboard protocols, defines slightly different protocols for session initiation, transmitting document changes, and (very) different protocols for conflict resolution. A draft is available at http://mya.el-tramo.be/psi-wb/jeps/tmp_wb/wb.xml.
(2) Implementing a new protocol (obviously) does not require a rewrite. The version in Inkscape trunk, however, is using a new Jabber library written by Bob Jamison, called Pedro. One large factor in favor of this move is that Pedro runs stably on Windows, whereas Loudmouth is still somewhat unstable on Windows.
Pedro exposes a simpler, but very different, interface for receiving and sending Jabber events. A lot of the Loudmouth code in the original Inkboard -- and the structure built around that code -- thus ended up being gutted.
On Tue, 2006-08-29 at 09:47 -0400, David Yip wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Denis Leroy wrote:
What is the status of the inkboard feature ? Is it considered stable ?
The version in Inkscape trunk is not yet stable. The .44 Inkboard had a number of stability fixes applied to it, but it is still disabled by default (partly because of security concerns).
More importantly, is it considered safe (from a security standpoint) ?
Inkboard's security status is probably best labeled as unknown. Although there haven't been any major security flaws shown to exist in Inkboard (.44 or trunk), neither Inkboard codebase has been audited for security, and a rewrite certainly doesn't help us insofar as security is concerned.
I think we should enable this feature by default (in configure and in the menu) to get more people to help out. I've been compiling in the with-perl and with-python and have contributed some superficial fixes that I wouldn't have seen without enabling those features.
If we enabled now, we could help stabilize this code. This seems to be important because we should show proudly our summer of code work upon next release. Do you all agree?
I've implemented several jabber infrastructures and should lend a hand as well...
We had requests in Fedora to have the feature enabled and so am doing some testing on my side. It was originally turned off because it was pretty unstable and would often crash in the loudmouth library, but that was a while ago...
A number of crash bugs (and some rather silly mistakes) were fixed in the .44 release; you might want to give that a try. If you encounter problems, please let us know.
As Dale pointed out, some Inkboard features -- such as multi-user conferences -- don't work across all Jabber servers, due to deviations from behaviors specified in the JEPs.
Do we have an ejabberd server test setup? If not, we should as its the most compliant and stable. I've contributed to this project in the past and have experience with it...
Jon
<snip />
I think we should enable this feature by default (in configure and in the menu) to get more people to help out. I've been compiling in the with-perl and with-python and have contributed some superficial fixes that I wouldn't have seen without enabling those features.
If we enabled now, we could help stabilize this code. This seems to be important because we should show proudly our summer of code work upon next release. Do you all agree?
I plan on having a version that would be suitable to be enabled by default for next week, the timeline in my first email shows my schedule
Do we have an ejabberd server test setup? If not, we should as its the
most compliant and stable. I've contributed to this project in the past and have experience with it...
I talked to aaron about this before, I really think we need a tested compliant server set up for testing, already having problems with gristle.
wildfire or latest svn of ejabberd are the best candidates, but ill do more testing on both to make sure, the 2 issues are the roster order, and that stanzas are processed in order, neither of which gristle do
On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
Do we have an ejabberd server test setup? If not, we should as its the most compliant and stable. I've contributed to this project in the past and have experience with it...
I talked to aaron about this before, I really think we need a tested compliant server set up for testing, already having problems with gristle.
wildfire or latest svn of ejabberd are the best candidates, but ill do more testing on both to make sure, the 2 issues are the roster order, and that stanzas are processed in order, neither of which gristle do
How do we stand as far as a test jabber server for inkboard? I think for 0.46 it would be a good goal to get the whiteboard feature much more stable, and having a test server would probably be a big step towards that.
Would there be any major risks if we ran wildfire or ejabberd (or both) off of inkscape.org? Do they consume excessive bandwidth or trigger any stability problems in the kernel or apache? I think we could easily give inkboard developers accounts and sudo access on inkscape.org for restarting the jabber server(s).
Also, on the topic of status - what plans are afoot for future development work? Are there tasks that others could assist with?
Bryce
bah... I get the meaning of Birds Of Feather...
see my logo at zensui.org
Each drop is a contribution in Free and Open Source Software. People should not worry if the platform/OS is or not freely distributable. They do it anyway!
2007/1/22, Bryce Harrington <bryce@...961...>:
On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
Do we have an ejabberd server test setup? If not, we should as its the most compliant and stable. I've contributed to this project in the past and have experience with it...
I talked to aaron about this before, I really think we need a tested compliant server set up for testing, already having problems with
gristle.
wildfire or latest svn of ejabberd are the best candidates, but ill do
more
testing on both to make sure, the 2 issues are the roster order, and
that
stanzas are processed in order, neither of which gristle do
How do we stand as far as a test jabber server for inkboard? I think for 0.46 it would be a good goal to get the whiteboard feature much more stable, and having a test server would probably be a big step towards that.
Would there be any major risks if we ran wildfire or ejabberd (or both) off of inkscape.org? Do they consume excessive bandwidth or trigger any stability problems in the kernel or apache? I think we could easily give inkboard developers accounts and sudo access on inkscape.org for restarting the jabber server(s).
Also, on the topic of status - what plans are afoot for future development work? Are there tasks that others could assist with?
Bryce
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=D... _______________________________________________ Inkscape-devel mailing list Inkscape-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/inkscape-devel
Bryce Harrington wrote:
On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
Do we have an ejabberd server test setup? If not, we should as its the most compliant and stable. I've contributed to this project in the past and have experience with it...
I talked to aaron about this before, I really think we need a tested compliant server set up for testing, already having problems with gristle.
wildfire or latest svn of ejabberd are the best candidates, but ill do more testing on both to make sure, the 2 issues are the roster order, and that stanzas are processed in order, neither of which gristle do
How do we stand as far as a test jabber server for inkboard? I think for 0.46 it would be a good goal to get the whiteboard feature much more stable, and having a test server would probably be a big step towards that.
Would there be any major risks if we ran wildfire or ejabberd (or both) off of inkscape.org? Do they consume excessive bandwidth or trigger any stability problems in the kernel or apache? I think we could easily give inkboard developers accounts and sudo access on inkscape.org for restarting the jabber server(s).
Also, on the topic of status - what plans are afoot for future development work? Are there tasks that others could assist with?
Bryce
I would definitely recommend Wildfire. It is very mature and robust, and seems to be up-to-date on standards. It also has web-based admin, which makes maintenance a lot easier. You need to install Java on the machine, but Java 6 is very sweet and much lighter on resources than its predecessors. Besides that, there are no dependencies. I run it on my desktop when I need to test Pedro, and it doesn't seem to burden the machine at all.
bob
+laughs+
what about Fogo?! He's Firefox. My pet... lets kill Windows! go my little pet, clone yourself!
<wolf> ahooo </wolf>
2007/1/22, Bob Jamison <rwjj@...127...>:
Bryce Harrington wrote:
On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
Do we have an ejabberd server test setup? If not, we should as its the most compliant and stable. I've contributed to this project in the
past
and have experience with it...
I talked to aaron about this before, I really think we need a tested compliant server set up for testing, already having problems with
gristle.
wildfire or latest svn of ejabberd are the best candidates, but ill do
more
testing on both to make sure, the 2 issues are the roster order, and
that
stanzas are processed in order, neither of which gristle do
How do we stand as far as a test jabber server for inkboard? I think for 0.46 it would be a good goal to get the whiteboard feature much more stable, and having a test server would probably be a big step towards that.
Would there be any major risks if we ran wildfire or ejabberd (or both) off of inkscape.org? Do they consume excessive bandwidth or trigger any stability problems in the kernel or apache? I think we could easily give inkboard developers accounts and sudo access on inkscape.org for restarting the jabber server(s).
Also, on the topic of status - what plans are afoot for future development work? Are there tasks that others could assist with?
Bryce
I would definitely recommend Wildfire. It is very mature and robust, and seems to be up-to-date on standards. It also has web-based admin, which makes maintenance a lot easier. You need to install Java on the machine, but Java 6 is very sweet and much lighter on resources than its predecessors. Besides that, there are no dependencies. I run it on my desktop when I need to test Pedro, and it doesn't seem to burden the machine at all.
bob
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=D... _______________________________________________ Inkscape-devel mailing list Inkscape-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/inkscape-devel
I wasnt sure if it was wildfire, but one of either wildfire or ejabberd had a problem with sending messages out of order, the seriality of messages can be patched into the inkboard, however its a standard defined into xmpp so I wasnt keen on patching for non compliant servers until the Inkboard was fully functional and stable.
Ill give it a test today, I certainly think having a test server is a good idea forward, just want to install the best candidate. Following work on Inkboard during the summer a patch was committed to ejabberd to fix the roster order bug which also affected us, so that isnt an issue in the newer releases of ejabberd
participants (8)
-
Bob Jamison -
Bryce Harrington -
Dale Harvey -
David Yip -
Denis Leroy -
Esteban Barahona -
Jon Phillips -
Wolfram Quester