World: r3wp

Connection problems again today, it seems.

Almost constant 'Internet busy...' - can hardly stay connected long 
enough to post this message...

Is it better now?

So what does it take to host this world somewhere else? At this point, 
I'm almost inclined to pay a little for better service, due to the 
quality of the information that can be found here.

Just a linux box connected 24/7 and an open port

I used to run a backup rebol altme server when it altme used to go 
down for ages at a time but that server is now otherwise occupied.

It's hard to get enthused about using altme when this particular 
server is so flaky

Does the headless AltME server not cost money?

I use AltMe from a few different computers.
I just observed many messages missing.

It just looks as if messages are disappearing, even ones I am sure 
I wrote and saw already

It's almost useless now :/

I agree.


its currently, totally, broken because the server seems to be freezing 
all the time. 

 there is a serious flaw in altme's tcp design.

do we know that? AltME has run fine until about a year ago. Do other 
worlds run off the same servers have the same trouble?

the flaw is in handling the connections errors... altme does everything 
the wrong way.  blanks screens, looses messages, freezes up, doesn't 
properly recover, when just reconnecting to world manually actually 
brings a client back up for a little while.


the server has been noted by Carl as being afflicted by a few networking 
issues, but the server is clearly available in some way, so the server/client 
protocol isn't very fault-tolerant IMHO.

it seems to be back to being responsive... is it better for others 
here too?

works here too

noticed a strange problem.  my altme shows On-line.

then I post... BUT it actually only synced and received posts in 
other groups, and DID NOT post my new message.


after the sync, it still says On-line... yes... there is something 
very screwed up here.

now that it synced... it works as usuall... very strange.

AltME seems to be back to normal - seen from here.

yep now seems to be back to "nominal" operation.

But I lost some messages on one of the computers, i use to access 
AltMe. 

And I don't mean the common bug, that I do net get the recent messages.

I think we are waiting for Carl to update the DNS records for AltME.

However, if someone else wants to take over this Server, I think 
we are open to that.

Kaj, does altme server run under syallable :)  ?

Need to know some things, if I am to try the server on Linode:


- RAM requirements for server with the current REBOL3 world. My server 
has 384 MB RAM and is already doing other stuff.
- Can I run headless?

- Can I make a copy of this world which people can connect to for 
testing? Just to minimize downtime in case it won't work.

We need Carl to speak up here.

I think that last time Carl told that this world is already too big 
and the best way would be to setup a new one.

I don't see how that would help on a periodic networking problem, 
but... oh well.

It would help that your linode server does not need to handle sync 
of all files for all users. At least.

I guess we should observe whether the problem is worse when many 
users are connected and whether it's self-amplifying, when users 
try to re-connect all the time when the problem is there.

AFAIK, it was a network problem, not a software problem, so the size 
of the world has nothing to do with it.

when the server is instable, I can confirm its not really better 
even when we are alone in the world.  I checked the last time and 
was the only one here a few times and it was as bad as when some 
of you appeared.

I still wonder if there is any log of possible intrusions.

strange - started up altme and ms anti virus reported a trojan virus

file:C:\Altme\worlds\rebol3\chat\380.set->(SCRIPT0001)

must be a false warning

JS ?

There was discussion about a JS exploit a while ago. It could be 
in that file.

6-May-2008, someone posted a bunch of Javascript asking about SQL 
injection code, could that be it?

possibly - that was a suprise

Carl has been finally getting around to attending to this world, 
things should start working again....

I've moved to my new windows 7 laptop and have setup Altme in it's 
own directory at c:\altme

now if I don't run as admin, it says it can't write to the state 
file.

sounds as annoying as vista

Fix the permissions of the directory. AltME (like many REBOL programs) 
doesn't act like a proper Windows app, it acts like a portable app. 
It doesn't put its files in the right place for an installed Windows 
app. Vista and 7 are right to complain.

Wouldn't it be "more right" if Vista let the program be a portable 
application, and in fact supported this "correct" way of doing things?

Chrome works like AltME and works just fine with the Windows 2000 
security model. It does this by putting the program and its files 
in the local settings directory, then checking it before running. 
MySpace IM used to do this to allow students to load the program 
onto half-locked-down computers at their schools without getting 
permission from the admins (I was one such admin, so this was annoying), 
but Chrome seems to be much less of a security hole. AltME could 
quite easily work the same way.

The real problem is that no program in some directory under the Program 
Files directory should be putting its data files (or allowing writing) 
to the same directory as the program files. That's a Win9x thing, 
and insecure. If programs that are running outside of the system 
directories run with less privileges, then all the better.

As it is, Win7 (and to a lesser extent Vista) do exactly that kind 
of workaround for bad programs under Program Files, redirecting their 
data files to another ProgramFiles directory under local settings. 
It's tricky, but not as tricky as trying to make the programs secure 
otherwise. However, if you put your program directory somewhere where 
it can't figure out that aliasing, the system has to assume that 
you know what you are doing and you have to act accordingly and fix 
the permissions on the directory to match what you want to do.

Of course, this is all a consequence of user-based security being 
kind of a bad idea in the first place.

Giving myself write privgs on the altme directory has fixed the issue. 
 Tiresome this.  What exactly is the security problem with storing 
data with programs?

the problem is that windows sucks; the "don't write here" is ms's 
work around that.