10:44 a.m.
What is the status of the inkboard feature ? Is it considered stable ?
More importantly, is it considered safe (from a security standpoint) ?
We had requests in Fedora to have the feature enabled and so am doing
some testing on my side. It was originally turned off because it was
pretty unstable and would often crash in the loudmouth library, but that
was a while ago...
thx!
-denis
11:35 a.m.
.44 Inkboard was relatively stable at release, points to note were that
multi user sessions only worked on compliant servers (wildfire or latest
svn of ejabberd)
Im not completely certain about the state of its security, david yip would
probably be better to comment on this, but i cannot see how any unsafe
code could be injected
http://wiki.inkscape.org/wiki/index.php/User:Daleharvey
will give you a bit of insight into the state of the current incarnation of
the whiteboard, as well as a timeline
11:49 a.m.
Hi,
On Tue, Aug 29, 2006 at 12:44:58PM +0200, Denis Leroy wrote:
What is the status of the inkboard feature ? Is it considered stable
?
More importantly, is it considered safe (from a security standpoint) ?
We had requests in Fedora to have the feature enabled and so am doing
some testing on my side. It was originally turned off because it was
pretty unstable and would often crash in the loudmouth library, but that
was a while ago...
Yes, that's a good question. Requests for this have also been submitted to
debian's BTS. So for me it would be especially interesting how safe and
stable the implementation in 0.44 and 0.44.1 is since this is probably
the version which will be released with debian etch (the next stable
release of debian, ETA december this year)
thanks,
Wolfi
thx!
-denis
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&...
_______________________________________________
Inkscape-devel mailing list
Inkscape-devel(a)lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/inkscape-devel
1:47 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Denis Leroy wrote:
What is the status of the inkboard feature ? Is it considered stable
?
The version in Inkscape trunk is not yet stable. The .44 Inkboard had a
number of stability fixes applied to it, but it is still disabled by
default (partly because of security concerns).
More importantly, is it considered safe (from a security standpoint)
?
Inkboard's security status is probably best labeled as unknown.
Although there haven't been any major security flaws shown to exist in
Inkboard (.44 or trunk), neither Inkboard codebase has been audited for
security, and a rewrite certainly doesn't help us insofar as security is
concerned.
We had requests in Fedora to have the feature enabled and so am doing
some testing on my side. It was originally turned off because it was
pretty unstable and would often crash in the loudmouth library, but that
was a while ago...
A number of crash bugs (and some rather silly mistakes) were fixed in
the .44 release; you might want to give that a try. If you encounter
problems, please let us know.
As Dale pointed out, some Inkboard features -- such as multi-user
conferences -- don't work across all Jabber servers, due to deviations
from behaviors specified in the JEPs.
thx!
-denis
- - David
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&...
_______________________________________________
Inkscape-devel mailing list
Inkscape-devel(a)lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/inkscape-devel
* Reasons for rewrite in Inkscape trunk:
(1) A whiteboarding JEP has been drafted as part of another SoC project,
sponsored by the Jabber Software Foundation. (Dale Harvey, one of
Inkscape's SoC students, also had a hand in forming the JEP draft.)
Dale and I (and others, I suspect) feel that it is important for
Inkscape to be able to interoperate with other Jabber SVG whiteboarding
clients.
This JEP, while influenced by .44's Inkboard protocols, defines slightly
different protocols for session initiation, transmitting document
changes, and (very) different protocols for conflict resolution. A
draft is available at http://mya.el-tramo.be/psi-wb/jeps/tmp_wb/wb.xml.
(2) Implementing a new protocol (obviously) does not require a rewrite.
The version in Inkscape trunk, however, is using a new Jabber library
written by Bob Jamison, called Pedro. One large factor in favor of this
move is that Pedro runs stably on Windows, whereas Loudmouth is still
somewhat unstable on Windows.
Pedro exposes a simpler, but very different, interface for receiving and
sending Jabber events. A lot of the Loudmouth code in the original
Inkboard -- and the structure built around that code -- thus ended up
being gutted.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFE9EVeC+LlyKjktFMRAhoWAJ9pacxegiMMyxg8UGikYalDqYtFdwCeJihR
Mfip4Xua+QcT4kjhhOgqvzA=
=4r20
-----END PGP SIGNATURE-----
5:32 p.m.
On Tue, 2006-08-29 at 09:47 -0400, David Yip wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Denis Leroy wrote:
> What is the status of the inkboard feature ? Is it considered stable ?
The version in Inkscape trunk is not yet stable. The .44 Inkboard had a
number of stability fixes applied to it, but it is still disabled by
default (partly because of security concerns).
> More importantly, is it considered safe (from a security standpoint) ?
Inkboard's security status is probably best labeled as unknown.
Although there haven't been any major security flaws shown to exist in
Inkboard (.44 or trunk), neither Inkboard codebase has been audited for
security, and a rewrite certainly doesn't help us insofar as security is
concerned.
I think we should enable this feature by default (in configure and in
the menu) to get more people to help out. I've been compiling in the
with-perl and with-python and have contributed some superficial fixes
that I wouldn't have seen without enabling those features.
If we enabled now, we could help stabilize this code. This seems to be
important because we should show proudly our summer of code work upon
next release. Do you all agree?
I've implemented several jabber infrastructures and should lend a hand
as well...
> We had requests in Fedora to have the feature enabled and so am
doing
> some testing on my side. It was originally turned off because it was
> pretty unstable and would often crash in the loudmouth library, but that
> was a while ago...
A number of crash bugs (and some rather silly mistakes) were fixed in
the .44 release; you might want to give that a try. If you encounter
problems, please let us know.
As Dale pointed out, some Inkboard features -- such as multi-user
conferences -- don't work across all Jabber servers, due to deviations
from behaviors specified in the JEPs.
Do we have an ejabberd server test setup? If not, we should as its the
most compliant and stable. I've contributed to this project in the past
and have experience with it...
Jon
<snip />
--
Jon Phillips
San Francisco, CA
USA PH 510.499.0894
jon@...235...
http://www.rejon.org
MSN, AIM, Yahoo Chat: kidproto
Jabber Chat: rejon@...896...
IRC: rejon@...897...
Inkscape (http://inkscape.org)
Open Clip Art Library (www.openclipart.org)
Creative Commons (www.creativecommons.org)
San Francisco Art Institute (www.sfai.edu)
5:42 p.m.
I think we should enable this feature by default (in configure and in
the menu) to get more people to help out. I've been compiling in the
with-perl and with-python and have contributed some superficial fixes
that I wouldn't have seen without enabling those features.
If we enabled now, we could help stabilize this code. This seems to be
important because we should show proudly our summer of code work upon
next release. Do you all agree?
I plan on having a version that would be suitable to be enabled by
default for next week, the timeline in my first email shows my schedule
Do we have an ejabberd server test setup? If not, we should as its the
most compliant and stable. I've contributed to this project in
the past
and have experience with it...
I talked to aaron about this before, I really think we need a tested
compliant server set up for testing, already having problems with gristle.
wildfire or latest svn of ejabberd are the best candidates, but ill do more
testing on both to make sure, the 2 issues are the roster order, and that
stanzas are processed in order, neither of which gristle do
2:20 a.m.
On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
> Do we have an ejabberd server test setup? If not, we should as
its the
>most compliant and stable. I've contributed to this project in the past
>and have experience with it...
>
I talked to aaron about this before, I really think we need a tested
compliant server set up for testing, already having problems with gristle.
wildfire or latest svn of ejabberd are the best candidates, but ill do more
testing on both to make sure, the 2 issues are the roster order, and that
stanzas are processed in order, neither of which gristle do
How do we stand as far as a test jabber server for inkboard? I think
for 0.46 it would be a good goal to get the whiteboard feature much more
stable, and having a test server would probably be a big step towards
that.
Would there be any major risks if we ran wildfire or ejabberd (or both)
off of inkscape.org? Do they consume excessive bandwidth or trigger any
stability problems in the kernel or apache? I think we could easily
give inkboard developers accounts and sudo access on inkscape.org for
restarting the jabber server(s).
Also, on the topic of status - what plans are afoot for future
development work? Are there tasks that others could assist with?
Bryce
3:46 a.m.
bah... I get the meaning of Birds Of Feather...
see my logo at zensui.org
Each drop is a contribution in Free and Open Source Software. People should
not worry if the platform/OS is or not freely distributable. They do it
anyway!
2007/1/22, Bryce Harrington <bryce@...961...>:
On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
> > Do we have an ejabberd server test setup? If not, we should as its the
> >most compliant and stable. I've contributed to this project in the past
> >and have experience with it...
> >
>
> I talked to aaron about this before, I really think we need a tested
> compliant server set up for testing, already having problems with
gristle.
>
> wildfire or latest svn of ejabberd are the best candidates, but ill do
more
> testing on both to make sure, the 2 issues are the roster order, and
that
> stanzas are processed in order, neither of which gristle do
How do we stand as far as a test jabber server for inkboard? I think
for 0.46 it would be a good goal to get the whiteboard feature much more
stable, and having a test server would probably be a big step towards
that.
Would there be any major risks if we ran wildfire or ejabberd (or both)
off of inkscape.org? Do they consume excessive bandwidth or trigger any
stability problems in the kernel or apache? I think we could easily
give inkboard developers accounts and sudo access on inkscape.org for
restarting the jabber server(s).
Also, on the topic of status - what plans are afoot for future
development work? Are there tasks that others could assist with?
Bryce
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share
your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CI...
_______________________________________________
Inkscape-devel mailing list
Inkscape-devel(a)lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/inkscape-devel
--
http://www.zensui.org
4:51 a.m.
Bryce Harrington wrote:
On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
>> Do we have an ejabberd server test setup? If not, we should as its the
>> most compliant and stable. I've contributed to this project in the past
>> and have experience with it...
>>
>>
> I talked to aaron about this before, I really think we need a tested
> compliant server set up for testing, already having problems with gristle.
>
> wildfire or latest svn of ejabberd are the best candidates, but ill do more
> testing on both to make sure, the 2 issues are the roster order, and that
> stanzas are processed in order, neither of which gristle do
>
How do we stand as far as a test jabber server for inkboard? I think
for 0.46 it would be a good goal to get the whiteboard feature much more
stable, and having a test server would probably be a big step towards
that.
Would there be any major risks if we ran wildfire or ejabberd (or both)
off of inkscape.org? Do they consume excessive bandwidth or trigger any
stability problems in the kernel or apache? I think we could easily
give inkboard developers accounts and sudo access on inkscape.org for
restarting the jabber server(s).
Also, on the topic of status - what plans are afoot for future
development work? Are there tasks that others could assist with?
Bryce
I would definitely recommend Wildfire. It is very mature
and robust, and seems to be up-to-date on standards. It
also has web-based admin, which makes maintenance a lot
easier. You need to install Java on the machine, but Java 6 is
very sweet and much lighter on resources than its predecessors.
Besides that, there are no dependencies. I run it on my desktop
when I need to test Pedro, and it doesn't seem to burden the
machine at all.
bob
4:57 a.m.
+laughs+
what about Fogo?! He's Firefox. My pet... lets kill Windows! go my little
pet, clone yourself!
<wolf>
ahooo
</wolf>
2007/1/22, Bob Jamison <rwjj@...127...>:
Bryce Harrington wrote:
> On Tue, Aug 29, 2006 at 06:42:58PM +0100, Dale Harvey wrote:
>
>>> Do we have an ejabberd server test setup? If not, we should as its the
>>> most compliant and stable. I've contributed to this project in the
past
>>> and have experience with it...
>>>
>>>
>> I talked to aaron about this before, I really think we need a tested
>> compliant server set up for testing, already having problems with
gristle.
>>
>> wildfire or latest svn of ejabberd are the best candidates, but ill do
more
>> testing on both to make sure, the 2 issues are the roster order, and
that
>> stanzas are processed in order, neither of which gristle do
>>
>
> How do we stand as far as a test jabber server for inkboard? I think
> for 0.46 it would be a good goal to get the whiteboard feature much more
> stable, and having a test server would probably be a big step towards
> that.
>
> Would there be any major risks if we ran wildfire or ejabberd (or both)
> off of inkscape.org? Do they consume excessive bandwidth or trigger any
> stability problems in the kernel or apache? I think we could easily
> give inkboard developers accounts and sudo access on inkscape.org for
> restarting the jabber server(s).
>
> Also, on the topic of status - what plans are afoot for future
> development work? Are there tasks that others could assist with?
>
> Bryce
>
>
I would definitely recommend Wildfire. It is very mature
and robust, and seems to be up-to-date on standards. It
also has web-based admin, which makes maintenance a lot
easier. You need to install Java on the machine, but Java 6 is
very sweet and much lighter on resources than its predecessors.
Besides that, there are no dependencies. I run it on my desktop
when I need to test Pedro, and it doesn't seem to burden the
machine at all.
bob
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share
your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CI...
_______________________________________________
Inkscape-devel mailing list
Inkscape-devel(a)lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/inkscape-devel
--
http://www.zensui.org
9:02 a.m.
I wasnt sure if it was wildfire, but one of either wildfire or ejabberd had
a problem with sending messages out of order, the seriality of messages can
be patched into the inkboard, however its a standard defined into xmpp so I
wasnt keen on patching for non compliant servers until the Inkboard was
fully functional and stable.
Ill give it a test today, I certainly think having a test server is a good
idea forward, just want to install the best candidate. Following work on
Inkboard during the summer a patch was committed to ejabberd to fix the
roster order bug which also affected us, so that isnt an issue in the newer
releases of ejabberd
6091
days inactive
6238
days old
inkscape-devel@lists.inkscape.org
10 comments
8 participants
participants (8)
-
Bob Jamison -
Bryce Harrington -
Dale Harvey -
David Yip -
Denis Leroy -
Esteban Barahona -
Jon Phillips -
Wolfram Quester