Search Results: "bap"

30 October 2006

Jurij Smakov: Papers, please ?

Today I have witnessed an incident which involved a person getting kicked from #debian-devel, when he refused to disclose his real name (I did not notice any other disruptive behavior on his part). When I objected to that, I was quite surprised to find that quite a lot of people found this an acceptable administrative measure (the channel rules wiki page was promptly created to reflect that). While I find it totally acceptable, that a person must reveal his/her real name when becoming a Debian Developer, I think that having such a requirement in place for an unrestricted public Debian channel is completely inappropriate. In my opinion, the right to remain anonymous is fundamental, and I don’t care about the person’s real name, as long as he/she has something useful to contribute. I also believe that protection of this right is a part of the core Debian philosophy, as we refuse to recognize software as free, if it impedes on the person’s right to remain anonymous (”Dissident test” in the DFSG FAQ). Therefore, the support of fellow DDs (some of them actively involved in NM process) for such measures looks like nothing but pure hypocrisy to me. I have added a note stating my disagreement on this issue to the wiki page.

27 October 2006

Erich Schubert: Turbogears performance

I've chosen Turbogears for a recent web project. Up to now, I was pretty happy with this choice, as it allowed me to made changes to the application rather easily, I happen to like KID templating, and it all was rather painless. However, I'm stuck at two place right now. One is a rather expensive database query I have not yet added - I know that it's going to be expensive, and I'd need some way of caching the results easily. I havn't found a "turbogearish" way of caching these interim results yet. Since that brought me onto the performance thing - when writing an app you don't really know yet how it will be implemented, you best postpone performance considerations a bit, so you don't optimize too early - I did some measurements. And was pretty disappointed by the results. The testing virtual machine (sorry, I don't have hardware specs for the actual machine) is rather slow. But still, static apache can serve some 450 requests per second. Turbogears will serve static files at ~22 r/s and the main page of the webapp at just 4.5 r/s (measured with siege, when it's not crashing). I tried switching from sqlite to mysql in Turbogears, but unfortunately that just makes the application crash altogether at some point (no SQL queries succeed anymore: 'Page handler: "Commands out of sync; you can't run this command now"') Notice that this was by no means a fair benchmark of Turbogears (I'm not a turbogears expert, and the little documentation I've found so far didn't help me at all in optimizing it's performance). I was just evaluating where I'm at, and now I'm about to decide where to go next. So can anyone point me to some docs on how to get turbogears up to an acceptable speed (where acceptable would probably be >20 r/s on this hardware)? Otherwise I guess I'll start a rewrite now, maybe using Java JSF and Facelets. They seem to be a good choice if you want XML-based templating. Don't even suggest PHP to me, it's crap. And I won't be trying Ruby on Rails next, either. I don't need rapid prototyping anymore, but can go for the high-performance implementation now, even if it will be harder to read, write and modify. I have now a better grasp for what I need and how the architecture of the app should be like.

25 October 2006

Simon Richter: Redirecting to the preferred hostname

Evan thinks that Planet Debian should redirect people to the preferred hostname, and gives a set of rules for mod_rewrite to do it. Since I got fed up with writing complex rewrite rules for hosts that exist in multiple TLDs and both with and without the "www.", I hacked up an Apache module that does this. You list the preferred hostname as ServerName and all the others as ServerAlias, and then set "RedirectToServerName On". The package lacks documentation at present, but on the other hand it is not that difficult to use if you can describe the usage in one sentence. :-) Update:Corrected the name of the option. Thanks to Jeff Waugh for pointing me at the mistake

Alexis Sukrieh: WTF The Webapps Task Force strikes back!

We created the “Debian Webapps” alioth project a couple of months ago in order to write a Webapps Policy. Today, that team takes more responsability: it now maintains a couple of packages like, for instance, bugzilla which I find complex, rich and volatile enough to warrant a collaborative maintenance (long life to Subversion). TinyMCE - which can dynamically transform any textarea element into a rich-text area - will also be maintained by the team and is currently in the NEW queue (uploaded this morning).

21 October 2006

Steve Langasek: Gotta make the donuts

Hmm, let's see if we can turn britney hint file comments into a blog entry... The apache 2.2 transition is coming along rather well. This is good news, giving us a shot at including a version of apache2 in etch with support for files > 2GB in size. Even though pervasive LFS support has been a goal in Debian since before sarge, when a big part of the interface your library exports to users deals with files it gets tricky to switch on LFS support because of ABI changes. After tagging for removal a number of apache2 modules with unrelated build problems, that leaves us with these issues blocking the transition: Nothing that a medium-sized hammer can't take care of... The release managers have also issued a statement about where we stand now for non-free firmware in etch. I'm sure this isn't anything close to the last word on the subject, but hopefully it will be enough to let us begin moving forward again instead of spinning our wheels on vote discussions.

18 September 2006

Evan Prodromou: F te du G nie CCXIV

Today's the "day of Genius" in the French Revolutionary Calendar -- a festival to celebrate human reason, innovation, and inspiration. Something that deserves our respect and attention. My big genius accolades today are for the people who put on the Piknic Electronik Summer Sundays in Montreal. We stopped by the last one for 2006 yesterday, and it was a great time. Our friend John Usher (in town to defend his Ph.D. thesis) came along with us, but we also met friends Jeff and Anne-Marie, Lou and Candace and little Olive, Patti and Meg and Lucinda and Damian and Douglas and... lots of folks. Piknic remains one of my favorite parties in Quebec. An afternoon dance party under a giant Calder stabile on a beautiful island park in the St. Laurence River? Truly genius! I hope Piknic 2007 keeps growing and going with the mellow, friendly atmosphere that it's had in the past. tags:

Web 2.0 Conference So, I'm sad to see that the Web 2.0 Conference in San Francisco in November is sold out. Maj and I made plans to visit SF during this time just to get to the conference, but I guess it's all filled up. Now I'm trying to track down a spare ticket or two. Anybody got a miracle? tags:

R RS There's now a draft version of the Revised Report on the algorithmic language Scheme (R RS). It's not much news for folks who read the recent status report on R RS, but it's still pretty interesting. Most of the good ideas seem to have gotten into the spec, and the icky idea of doing immutable pairs seems to be gone now. Check out http://www.r6rs.org/ for a copy of the draft spec and a signup form for the discussion list. tags:

SxSW Panels and Wiki I'm pretty excited to see that the new 2007 South-by-Southwest Interactive panel voting interface is up today. I proposed a panel called Commercialization of Wikis: Open Community that Pays the Bills, to discuss different ways that private companies are creating wikis and investing in Wiki technology. I was surprised to hear that, for SxSW Interactive 2007, it's the only proposed Wiki panel! If you're thinking about SxSW 2007, or if you just feel like voting on things, please drop by and give the wiki panel your support. tags:

Ms. P. I'm really proud of my cousin, Lisa Prodromo, who's a teacher in Chicago. Lisa's from the poor branch of the family that can't afford a "u" at the end of their name, but she's overcome that hardship and is now a really great English teacher. She's got a blog at http://www.msprodromo.com/ for her students, but I'm waiting for her to bust out with one for grownups, too. Anyways, she was just nominated for the prestigious Golden Apple award, a Chicago-area teachers award. I'm sure she's going to win. tags: : What's the protocal for commenting here in your bliki? Edit now and ask questions later has always worked for me, so I'll try that. When am I got to get an introduction to the illustrious Chicago Ms. P? We're doing some scheming here in Chicago and would love to include her. --TedErnst

7 September 2006

Erich Schubert: Debian server abused

The security incident on alioth resulted in some rather bad press. Much of which isn't very accurate (the server was not cracked, certain applications installed by users were abused, but no privilege escalation happened) and not fair (this is not a "dumb" web server, but a server to be used by "third party users" to run web applications on). It's also worth noticing, that everybodys favorite Joerg Schilling commented [de] (read: flamed) on these articles in his best troll manner. In fact, he's known to be a frequent troll on heise, often posting "corrected" versions of articles related to Solaris or Linux. If you've read his posts there and his mails you just can't take him seriously. Don't feed the troll, and just ignore anything you hear from him. Including any cdrecord stuff, please switch to cdrkit/wodim! To avoid this type of problems I see the following choices: As you can see, the first option is the easiest, but it's contrary to the idea of alioth - being allowed to run custom web apps. Face it: a webserver serving only static pages is much easier to keep secure than one where users are allowed to install custom applications. And a project of Debians size needs to offer a web server where developers can run custom CGI. The other options mean much more work; especially the SELinux option would increase security a lot, even with PHP, but it means someone will have to spend a lot more time on administrating the system, and especially helping users when their web app doesn't work right because of SELinux security restrictions. For further increases in security PHP would need to be patched with some SELinux support: it shouldn't be allowed to include() or execute files written by the web server and not uploaded via ssh. For this, PHP needs to understand security contexts. One thing we should go for, however, is to provide more common services on alioth. For example wikis. Maybe we could setup a shared MoinMoin instance for all projects on alioth that want to have a wiki. And maybe offer "security supported" installations of other common webapps as well (e.g. forums, trac). Attacks usually exploit widely used applications such as wikis or forums. And even when 90% of the users on alioth upgrade their software on time, there are still 10% vulnerable. And maybe we can setup a box for the custom applications that actually is SELinux enabled in one or two years, when enough people are familiar with it and on how to write and maintain an appropriate policy.

5 September 2006

Paul van Tilburg: Journal Revamp

Although I have a lot to post it has been quiet on this journal. The main reason is that I wanted to wait with new posts until I had the new Hobix package ready. In the Debian/Ruby Extras team I have been working on the package and it’s getting along nicely. The new Hobix release features support for trackbacks, comments, tags, publishing via a webapp and has some more plugins out-of-the-box.

4 September 2006

Fumitoshi Ukai: ITP: libapache2-mod-estraier

http://sourceforge.net/projects/modestraier is one project of Summer Dojo 2005 (similar event as Google's Summer of Code, running by Free Software Initiative of Japan). The objective of this project is to develop apache module using Hyper Estraier as search engine, so that all html pages through the apache server will be automatically registered in Hyper Estraier's node server. Thus, you can search from html pages once you browsed ago. I intend to package this as libapache2-mod-estraier (Bug#320625) and put preliminary version on http://people.debian.org/~ukai/hyperestraier/ .

Benjamin Mako Hill: Musical Beds

During Wikimania, I was explaining to someone that Aziz Ridouan (Audionautes) was staying at Elizabeth Stark's apartment, that Elizabeth Stark was staying at Jean-Baptiste Soufron's apartment, and that Jean-Baptiste Soufron was staying at my apartment. In fact, all four of us have slept at least one night at both the Acetarium and at Jean-Baptiste's apartment in the last month and a half.

9 August 2006

Zak B. Elep: Achieving Arete

Today I installed Ubuntu Dapper on the old Pentium 4 machine at St John the Baptist Parish. This machine used to be eliza, where I did some Linux-2.6 on Debian Woody baking. But, since this was a milestone of sorts for this system, I decided to rename it to arete, after Socrates’ ideal of the perfect human being (showing my influence to Philo 173.) As usual, this install was yet another smooth, successful, working-out-of-the-box setup (arete’s HP Deskjet 3745 printer and ATI Radeon 7000 card running perfectly,) with only the Internal D-Link/Conexant modem the only thing needing gcc love. Tommorow, I’ll set up migrating the old files from my Dad’s Windows partition over to The Excellent Distribution™, and have him explore it, as he plans to move over the newsletter publishing system he set up for the parish (from M$ Publisher) to Scribus. Hat tip to all the Free Software that made this possible!

3 August 2006

Arnaud Vandyck: Debian packages upload

Yesterday, I uploaded libcommons-collection3-java to add the testframework jar (bug#268223). I investigate the security alert for tomcat5 (CVE2006-3835) as mentioned by Alec Berryman in bug#380361. Alec also filed this bug for tomcat5.5 but I was not able to reproduce the attack with the releases of tomcat in Debian. I filed a removal bug for libgnujaxp-java (bug#381014) which is in GNU-Classpath for a long time now. I uploaded a new upstream of libapache(2)-mod-jk (bug#338158). Today, I uploaded libmsv-xsdlib-java (the package was prepared by Eric Lavarde, but it was refused by ftpmasters because of the license) to non-free and solved the FTBFS of libjaxp1.3-java reported by Andreas Jochens (bug#379530). Except the security alert I closed because I think they were not affected releases of tomcat in Debian, I did not investigate more bugs of tomcat. But I’ll need it for my day-time and extra jobs so I hope I’ll be working on it after augustus 15. Update: I’m trying to fix argouml in Debian and that’s a huge job (well, the whole afternoon!)!
  1. Update libtoolbar-java (new upstream + comment issue#6);
  2. Update libswidgets-java (new upstream + comment issue#1);
  3. Downgrade libgef-java to match ArgoUML development;
  4. Update ArgoUML from 0.19.6 to 0.22.beta3 (new upstream + open issue#4391 and issue#4392). The main developer of ArgoUML said in the mailing list that this release will not be that much different to the final release and the new upstream upload (plus some corrections in the package) will permit to close some bugs: bug#342200, bug#217878, bug#335294, bug#353464, bug#368244, bug#289241.
Even with all this work, argouml does not want to start on my laptop. It’s a problem loading the ‘models’. I suspect a problem with the new mdr-model that I do not build because of dependencies not documented and not DFSG free. So I uploaded every package except argouml. I updated the subversion repository so the work is not lost and I’ll review the problem as soon as possible. You can find a copy of the generated package at my Debian’s webspace (click on the argouml directory).

2 August 2006

Roland Mas: Gforge in Debian, June 2006

...or, "Bits from a Gforge maintainer", if you'd like. After being neglected for way too long, the Gforge packages have finally started moving again. Packages for the most recent upstream release (4.5.14) are available in experimental, with quite a few improvements over the version currently in unstable: From a Debian maintainer's point of view, my Gforge-related TODO list now mainly sports three items. I suppose I could also try and migrate to the webapps-common framework, but I'll keep that for later. Of course, any help is welcome. Remember: the sooner I get the Gforge packages into a reasonable shape, the sooner they'll go to unstable, then testing, and the sooner I'll be backporting them to sarge, which means Alioth can be upgraded. But since I've heard a few complaints about Alioth being too damn slow or broken or whatever, I expect I'll get lots of patches (in bug reports, please) from disgruntled users eager to help.

Isaac Clerencia: Debconf6

After a bunch of trains, subways, planes, buses and taxis I’ve finally arrived at Oaxtepec (Mexico) to attend DebConf6, the annual Debian conference. Besides doing some Debian work, having some fun with long-time-no-seen friends and enjoying the swimming pool, there are several interesting talks I’m interested on: Time for lunch here!

31 July 2006

Rob Bradford: Lots of laughs (and not so many)

This weekend was quite a social razzmatazz. On Saturday night myself and two of the other interns I share an office with went to see the Laugh Olympics (they don’t appear to have a website) an English speaking improvisation show. In which the “Eastside” compete against their “Westside” counterparts in a series of improvisation sketches. The referee seeks various suggestions from the audience that are then incorporated into the act, all vaguely reminiscent of Radio 4 panel games. It was a fantastic experience (and very good value too, just 5), I intend to insist on taking everyone who comes to visit me to see it. It is on every Saturday, 9pm just off Rosenthaler Str. Full details can be found in the July edition of New Berlin Magazine. On Sunday we went to see Pirates of the Carribean at the Sony Center at Potsdamer Platz. It was rubbish. Don’t bother. It was just a setup for the third movie, very Matrixesque. After the film I cheered myself up by eating a Teutonic D ner, much much nicer than the British variety. And much much cheaper too ( 1.30- 2.80).

18 July 2006

Enrico Zini: Fourth day in Addis

Unix file permissions:
drwxr-xr-x   2 root root    38 2006-07-14
 
+- Is a directory
drwxr-xr-x   2 root root    38 2006-07-14
 ---
   
  +- User permissions (u)
drwxr-xr-x   2 root root    38 2006-07-14
    ---
      
     +- Group permissions (g)
drwxr-xr-x   2 root root    38 2006-07-14
       ---
         
        +- Permissions for others (o)
drwxr-xr-x   2 root root    38 2006-07-14
               ----
                 
                +- Owner user
drwxr-xr-x   2 root root    38 2006-07-14
                    ----
                      
        Owner group -+
Other bits:
  • 4000 Set user ID:
    • For executable files: run as the user who owns the file, instead of the user who runs the file
    • For directories: I think it's not used
  • 2000 Set group ID:
    • For executable files: run as the group who owns the file, instead of the group of the user who runs the file
    • For directories: when a file is created inside the directory, it belongs to the group of the directory instead of the default group of the user who created the file
  • 1000 Sticky bit:
    • For files: I think it's not used anymore
    • For directories: only the owner of a file can delete or rename the file
The executable bit for directories means "can access the files in the directory". If a directory is readable but not executable, then I can see the list of files (with ls) but I cannot access the files. To access a file, all the directories of its path up to / need to be executable. Commands to manipulate permissions:
  • chown - change file owner and group
  • chgrp - change group ownership
  • chmod - change file access permissions
  • sudo adduser enrico www-data adds the user enrico to the group www-data.
Example setup for a website for students:
# Create the group 'students'
mkdir /var/www/students
chgrp students /var/www/students
chmod 2775 /var/www/students
# If you don't want other users to read the files of the students:
chmod 2770 /var/www/students
adduser www-data students
 (this way the web server can read the
  pages)
# when you add a user to a group, it does not affect running processes:
 - users need to log out and in again
 - servers need to be restarted
Apache:
  • To install apache2 without a graphical interface:

    apt-cache search apache2   less
    sudo apt-get install apache2
    
  • By default, /var/www is where is the static website.

  • By default, ~/public_html is the personal webspace for every user, accessible as: http://localhost/~user

  • By default, /usr/lib/cgi-bin contains scripts that are executed when someone browses http://website/cgi-bin/script

  • By default, apache reads the server name from the DNS. If we don't have a name in the DNS and we want to use the IP, we need to set:

    ServerName 10.4.15.158
    
    in /etc/apache/apache2.conf (set it to your IP address)
  • To access the Apache manual: http://localhost/doc/apache2-doc/manual/

  • http://localhost/doc/apache2-doc/manual/mod/mod_access.html The access control module

  • http://localhost/doc/apache2-doc/manual/mod/mod_auth.html The user authentication module

  • To edit a user password file, use:

    htpasswd - Manage user files for basic authentication
    
  • Example .htaccess file to password protect a directory:

    AuthUserFile /etc/apache2/students
    AuthType Basic
    AuthName "Students"
    Require valid-user
    
  • Information about .htaccess is in http://localhost/doc/apache2-doc/manual/howto/htaccess.html

  • If you need to tell apache to listen on different ports, add a Listen directive to /etc/apache2/ports.conf. Then you can use:

    <VirtualHost www.training.aau.edu.et:9000>
    [...]
    </VirtualHost>
    
  • To setup an HTTPS website:

    • Documentation is in http://localhost/doc/apache2-doc/manual/ssl/

    • How to create a certificate: http://www.tc.umn.edu/~brams006/selfsign.html

    • Create a certificate:

      /usr/sbin/apache2-ssl-certificate -days 365
      
    • Create a virtual host on port 443:

      <VirtualHost www.training.aau.edu.et:443>
      [...]
      </VirtualHost>
      
    • Enable SSL in the VirtualHost:

      SSLEngine On
      SSLCertificateFile /etc/apache2/ssl/apache.pem
      
    • Enable listening on the HTTPS port (/etc/apache2/ports.conf):

      Listen 443
      
Apache troubleshooting:
  • check that there are no errors in the configuration file:

    apache2ctl configtest
    
    This it is always a good thing to do before restarting or reloading apache.
  • read logs in /var/log/apache2/

  • if you made a change but you don't see it on the web, it can be that you have the old page in the cache of the browser: try reloading a few times.

To install PHP
  • apt-get install libapache2-module-php5

  • then by default, every file .php is executed as php code

  • Small but useful test php file:

    <? phpinfo() ?>
    
To install MySQL
  • apt-get install mysql-client mysql-server

  • for administration run mysql as root:

    • Create a database with:

      create database students
      
  • Give a user access to the database:

    # Without password
    grant all on students.* to enrico;
    # With password
    grant all on students.* to enrico identified by "SECRET";
    
  • More information can be found at http://www-css.fnal.gov/dsg/external/freeware/mysqlAdmin.html

To use MySQL from PHP:
apt-get install php5-mysqli php5-mysql
Problems found today:
  • the apache2 manual in /usr/share/doc/manual can only be viewed using apache because it uses MultiView. So you need to have a working apache to read how to have a working apache.
  • chmod does not have examples in the manpage.

9 July 2006

Steve Kemp: And now she is a dancefloor tragedy

This weekend I’ve started getting militant about fighting spam. Every single spam mail I’ve recieved today and yesterday I have reported to the originators ISP. Most likely this won’t achieve much, but it made me feel slightly better. It also gave me a new appreciation for exactly how much spam I receive, and where from. My top three sources of spam are: To combat this I’ve done two things: My mailserver will now refuse to accept mails from hosts without reverse DNS. I think that is a legal thing to do, but I’ve never done it before. That combined with greylisting has cut my spam counts by about 200 messages a day. The only other thing I’ve done this weekend which was at all computery was to start writing a test suite for the Apache module I’ve been working on - which is now included in Debian sid.

MJ Ray: Debian-Legal Package List June 2006

I hope this time doesn't include any misfiled reports like last month... June 2006 traffic discussed packages domainkeys ipv6calc ircd-irc2 ktorrent libapache-mod-proxy-html libjlha-java opencascade open-xchange postfix postgresql pygaim shc sofia-sip sun-java5-jre truecrypt xfonts-scalable xfonts-utils [link to my index]

7 July 2006

Jordi Mallach: Jo no t'espere

Not at all! The Pope is visiting Val ncia next weekend. According to Rita Barber Noya, the mayor of the city during the last 16 years (I mildly remember her predecessor), All Valencians will welcome him warmly . Well, not exactly all. The Pope's visit was decided by the previous one a few years ago, and Ratzinger, shortly after being elected his successor, announced he would still visit Val ncia for the World Meeting of the Family. In principle, I would have no problems with him come visit the city, even if I have no sympathy at all towards his figure or the role of the Catholic church either in Spain or other places of the world. For example, I think the last two popes are direct responsables for the AIDS drama in many countries of the African continent. It is unacceptable and quite unethical that still today, after decades of fight against this deadly plage, the Vatican keep saying no to the usage of condoms. As I said, I would have no problems with his visit, if it was a normal visit. But no, this is the Val ncia, and the government likes to show that they can do things in a grand way. Not so long ago, Ratzinger visited Poland, and from what I've read, the authorities there didn't organise anything grotesque like what's going on here, in the sense that people living in the areas affected could more or less keep on with their lives, and the visit didn't cost much of their tax money. Val ncia won't work like this. Anyone who has visited us will probably know what I mean: the Ciutat de les Arts i les Ci ncies, Terra M tica, the America's Cup harbour... are examples of pharaonic projects, all funded with public money that are real black holes of budgets that never end up growing. The Pope will stay in Val ncia around 24 hours, and will give a series of sermons and speeches. For the ocassion, the Valencian local government has gone all the way to make his visit the most spectacular event of the decade. Although the government won't disclose it officially, the press talks about a cost of 30 or 40 million Euros, paid by all of us, including atheists, agnostics or muslims. Spain is not a catholic state, officially. Sadly, it is in practice. According to Vatican sources, 94% of Spaniards are catholic. The number goes down to 76.1% according to CIS, but the reality is that just a small fraction of these people are practising catholics. The Spanish church uses these figures to get funds from the state. I am included in that 76% just because I was baptised soon after I was born. There are people trying to apostatise, but it seems in most cases their efforts are futile, as the documentation sent to the eclesiastic authorities is either ignored or sent back with a hilarious excuse such as your baptism is a historic event and cannot be changed . Parts of Val ncia have been closed to transit for two months. This is because the authorities found that the optimal place to build his giant altar with a special microclimate was on top of the bridge of Mont Olivet, one of the arteries of south Val ncia if you want to leave the city. The neighbours of the area now popularly called "ground zero" have been subject to all kind of annoyances: the access to their houses is restricted, they've had to give lists of people living in each place, and they are now not allowed to use the upper terraces of their buildings (they are taken by snippers). The local police has designed a plan to restrict any kind of transit that affects basically half of the city, even my area which is like 6 kilometres away from the event. For months, our authorities have used this great opportunity to make religion and the greatness of our pope something normal and quotidian. I haven't seen such a big interference of my life by the church before, not even with the Aznar government, or when I was a small child and the dictatorship had just ended. They are also using the event to promote the achivements of the right-wing local government (via speeches and the propaganda that is distributed in the backpacks given to volunteers) and to bash the socialist central government (which recently approved gay marriage, a new education law that weakens the weight of religion study in public schools, etc.). I could go on and on, but this rant would get even more boring. I, like many others, think that all of this is not acceptable. As we tend to not shut up when things like these happen, a civic movement appeared two months ago, with a main goal of letting people know that we are not waiting for him, contrary to what the mayor says. The Jo no t'espere campaign has managed to make opposition to this pompous week by placing banners on balconies. Of course, I have my own, and I've also distributed a few more among my friends, one of them being placed a mere 70 metres away from the pope's altar.


No, jo tampoc t'espere Of course, the amount of Vatican flags outnumbers us greatly, in a ratio of at least 1:100, but anyway. There are so many Vatican flags that this looks more like St. Peter's Square. Others have taken the opportunity to exhibit Spanish flags all over the place, something that probably had not happened in Val ncia since the most obscure years of Franquism. Oh well, this is Val ncia. One piece of good news: due the chaos starting in just two hours, we're allowed to leave offices early today, so we can actually get back home. As soon as I get home and have lunch, I'll flee away to the mountains, like a maqui until the madness is over. The 1.5 million pilgrims can have my holy city. Have a nice time, Ratzinger!

2 July 2006

Evan Prodromou: 9 Messidor CCXIV

From the ever-fabulous Lambda the Ultimate programming languages blog, I found an article on the recently published Revised Report on Scheme Status Report. Yes, it's a report on a report. Each new version of the programming language Scheme has an associated Revised Report on Scheme, where n = a monotonically increasing integer. The current version is usually called "R RS" Scheme, but a new version is in the works. The R RS Status report is the status report on this new version. And R RS Scheme looks like it's got some very fun parts to it. First and foremost, a plan for a library (= module) system, which has probably been the single most difficult issue for making portable Scheme code. Next, a standard system for error-handling and exceptions. Also, standard records (AKA structures), and finally Unicode implementations. I think this sounds like the finest kind of standardization process: working from the dozens of existing Scheme implementations and ad hoc community standardization efforts like the fabuloso SRFI (Scheme Request For Implementation) project. It's identifying a problem (differences between implementations) and supplying a solution. There are some incompatibilities introduced too; top-level definitions are gone, which is a little sad but understandable. (eval) is going to have to (evolve) to deal with the new library format. These are unfortunate incompatibilities that serve a greater good. It's strange to see some other ideas bandied about, though, like making pairs immutable (no set-car! and set-cdr! any more), and requiring the cdr of a pair always to be a list. That way lies top-down revisionist language design, which is madness for a language with the maturity of Scheme. Codifying standard interfaces and implementations for features that are different in all Scheme implementations is a Good Thing; they're what everybody wants. Messing with the basics of the language is a Bad Thing; I don't think there's a Scheme programmer in the world who wants that to happen. tags:

NonCommercial So, one thing that I find kind of sad is that some contributors to Open Source or Open Content projects make particularly emphatic anti-commercial statements. It comes up on Creative Commons mailing lists and even Wikimedia or Wikitravel talk pages. A typical comment is, ''I don't want anyone to profit from my works.'' It's strange that the worst possible thing people can think of happening with their work is that someone could make money from it. You rarely see, "I don't want anyone to use my work to twist minds, justify racism or break the human spirit," nor "I don't want anyone to use my work to hurt others or themselves." Why is the idea of generating value with a work the worst we can imagine, when so many more destructive purposes are served with pieces of information, art, and software every day? It would be an interesting intellectual exercise to design a piece of software or a work of art from which no one could profit in any way, financially or otherwise. It would have to be uninformative, unpleasurable, inutile as a doorstop or sample bitstream. Of course, intellectual exercise is itself a benefit, so that'd have to be gotten rid of, too. Here is my wish: I wish that my work on the Internet and elsewhere is of use to many, many people for many years in ways I cannot imagine today. I hope it makes people think, it guides them through difficult waters, and that it amuses and provokes. Good luck with that, whoever you are. tags:

FastCGI So, I got Gauche-fastcgi installed on my server, as well as mod_fcgid. The builds were easy, and after a little bit of fiddling in the Apache configurations I had a sample wp:FastCGI script running on this server. With just a couple of lines of changes, I had my WiLiKi instance running FastCGI. Some httperf runs later, and I could see a 4-5x difference in speed between FastCGI and CGI. So, I couldn't resist: I've moved this whole site over to FastCGI. I've noticed a considerably peppier response time. I'm going to try to add some more WebSoftwareFriendly optimizations to the WiLiKi software soon, which should speed up the site even further. Hurrah for that! tags:

Long day Maj and I went to see the local Movies 4 Mommies matinee this morning at the Guzzo Cineplex in the March Central. Movies 4 Mommies are special showings for parents with babies less than 1 year old; the babies can cry or yell or whatever and nobody gets upset because everybody's got one. It was fun to go -- despite the name, I'd guess that 20-30% of the babies had daddies in tow, too -- and we met a few nice parents and cute bubbies. Unfortunately, the experience was ruined by the movie that was playing this morning: Click. I'm not an anti-wp:Adam Sandler snob; I'm fine with the fart jokes and the warbling voice. No sweat. But this movie was badly paced; the jokes were completely unfunny; the story was boring and the interactions were creepy and mean-spirited. It was our first day at Movies 4 Mommies, so that's probably the only reason we didn't walk out on this movie. It stunk really bad; the Rotten Tomatoes reviews of Click were pretty bad, too. Afterwards we felt dirtied by the experience, so we stopped by Santropol for some lunch with our friends Tara and Chris. We got hugantic sandwiches and salads and veggies and Amita June made a fantastic mess. For dinner tonight Niko stopped by; it was good to see him. He was in Paris while we were in California, so it was good to get back in touch. Maj made an excellent shrimp pasta and a big salad, which was good for this hot, humid weather we've been having. tags:

ClaimID I just signed up for a new ClaimID account: http://claimid.com/evanprodromou . ClaimID is a service for accumulating links to your various profiles, clippings, and other media mentions. It means you're claiming an identity assembled on the Web. I think this is a pretty good idea, but I'm not 100% sure why it's significantly better than my Me Other Places page. I do have a lot of on-line accounts -- too many -- but I'm not sure ClaimID is a good way to organize them. I dunno. It's great, though, that they support OpenID, which I think is the coolest shared identity system out there. Hopefully identity aggregators like ClaimID will start bringing some logic to our online identity systems. However... I'd sure like to see some other identity players, like TypeKey, starting to move towards OpenID. tags:

People I like Flipping through the Internet Identity Gang site, I tripped over a post by Bob Blakley on his blog, Ceci n'est pas un Bob. Bob was one of the members of the SAML committee when I worked on it for Outlook Technologies and then Securant. I found him to be an excellent explainer; I learned more on that technical committee about being clear and concise in technical communications than I'd learned before or since. So it's great to see that he has a blog; I've bookmarked it for further reading. tags:

Next.

Previous.