World: r4wp
[#Red] Red language group
older newer | first last |
DocKimbel 29-Oct-2012 [3113x2] | I've just got an answer from F-Prot, they just whitelisted the sample binary I've sent to them but didn't send me any info about their heuristics... So I think that in order to avoid loosing my time trying to get any info from those AV vendors, I'll just add a specific signature to Red generated binaries, so that they can be whitelisted by all AV vendors (when possible). I can't see what else I could do, except warn users about some crappy AV software. |
So, I could just add a static c-string!, what good unique signature sequence could we use, and how long should it be? | |
BrianH 29-Oct-2012 [3115] | Be sure to not include such a signature in Red's output of user binaries. We want to keep Red itself whitelisted even if Red's users decide to make malware with it. |
DocKimbel 29-Oct-2012 [3116x2] | Good point. |
OTOH, that could be a good selling point for Red. ;-) | |
BrianH 29-Oct-2012 [3118] | Not for long, since they'll stop whitelisting Red. It's similar to leaking your authenticode signature to malware writers. |
Kaj 29-Oct-2012 [3119] | What point is virus scanning if you need generic signatures that it will let through? |
BrianH 29-Oct-2012 [3120] | Afaik, authenticode is supposed to handle that process, at least to a certain extent. You cryptographically sign your binaries so when they do bad things there's someone to blame. If your binaries aren't signed, they're assumed to be bad by some people. |
Kaj 29-Oct-2012 [3121] | That's signing the complete binary, that's much stronger than adding a signature |
BrianH 29-Oct-2012 [3122] | Right, it's definitely better than a whitelist constant. |
Arnold 29-Oct-2012 [3123] | All these anti-virus program makers tell you something you already knew: your software does not qualify as a virus or did not contain any known viruses. Or you are 1 of the worst script kiddies. Or you managed to disguise the virus relly well this time ;) |
Kaj 29-Oct-2012 [3124] | Fixed the FPU configuration. The bindings are in good shape again |
DocKimbel 30-Oct-2012 [3125] | Great! :-) |
Kaj 30-Oct-2012 [3126x3] | I see Ruud prepared a new batch for you :-) |
I'm sitting next to a Windows 7 Ultimate machine to test the bindings, but it's unusable because it has been updating itself unasked for hours, on shutdown and on startup, and now won't start up anymore | |
An Internet connection for a Windows machine is close to a lethal injection | |
AdrianS 30-Oct-2012 [3129] | why don't you just disable the auto downloading? |
Kaj 30-Oct-2012 [3130] | It would need to start up first to reach that... |
AdrianS 30-Oct-2012 [3131x3] | well, that's the first thing I do when I set up a Windows machine |
but then, I'm pretty anal about keeping the system up-to-date | |
what happens if you go to the "last known good configuration" - F8 on startup? | |
DocKimbel 30-Oct-2012 [3134] | I do as Adrian: first thing when installing any Windows version, disable auto-updating. |
Pekr 30-Oct-2012 [3135] | I never ever had issue caused by Windows auto-updating. You guys don't like Windows so much, that you are seeing a ghosts :-) |
DocKimbel 30-Oct-2012 [3136] | Second thing I do: install Microsoft Security Essential (it's free) and forget about all common antivirus issues (slowness, instability, intrusive ads, false positives, ...). |
Kaj 30-Oct-2012 [3137x2] | It's not my machine, and safe mode or F8 doesn't provide an option to restore the configuration |
Petr, this machine just became a ghost | |
Pekr 30-Oct-2012 [3139x2] | format C: |
:-) | |
Kaj 30-Oct-2012 [3141] | It's already planned to install Linux Mint |
DocKimbel 30-Oct-2012 [3142] | Kaj: I get a lot of type casting warnings since the last commit on GTK-widget.reds, could you please check if they are legitimate or not? |
Kaj 30-Oct-2012 [3143] | I get one on the GTK binding and one on WebKit. I haven't seen them before the 0.3.0 merge |
NatasjaK 30-Oct-2012 [3144x2] | All that talk about my machine, I touched one button and it awoke again ;-) |
Wich doesn't mean the problems are solved, but it's a start ;-\ | |
DocKimbel 30-Oct-2012 [3146x2] | Kaj: the changes I did today are generating a lot of warnings with GTK binding, I will have a look at it later to see if it's a bug or if the binding code needs some minor changes. |
Natasja: seems that you'll have a brand new system soon. :-) | |
Kaj 30-Oct-2012 [3148] | Is it correct that Red/System can't print Unicode on Windows like the other systems? |
NatasjaK 30-Oct-2012 [3149] | DocKimbel: That would be very welcome :-) |
PeterWood 30-Oct-2012 [3150] | AFAIK, windows consoles only supporting Windows 8-bit codepages or UTF16. Red/System can print the full range of UTF-8 characters (as can REBOL) but the console can't display them. |
Kaj 30-Oct-2012 [3151] | Ah, right, I'd have to use UTF-16 source text |
PeterWood 30-Oct-2012 [3152x3] | Probably the easiiest way would be to inculde the Red runtime and use red/unicode/load-utf8 to create a Red string and Red/Platform/print-ucs4 to print it. |
You would need to check that the Windows console is set to display UTF-16B. This commit ( https://github.com/dockimbel/Red/commit/be271889ff03e44bdb55af04b60ea2bb280cb18f ) shows how. | |
) shows how. | |
Kaj 30-Oct-2012 [3155] | Thanks |
PeterWood 30-Oct-2012 [3156] | The other way is to convert the utf-8 c-string! to UTF-16E integers on the fly and feed them into llibc putwchar yourself. More work upfront but may be easier in the long term. The code in red/runitme/platform/win32.reds is a pretty clear exmpale of how to do it but you wuld still need to write the UTF-8 to UTF16-LE on the fly conversion yourself. (That one is UCS-4 to UTF16LE). |
DocKimbel 31-Oct-2012 [3157x2] | Kaj: you can switch the Windows console to an UTF-8 compatible mode using _setmode(): http://msdn.microsoft.com/en-us/library/tw4k6df8.aspx I haven't test it but it should work. Windows uses natively UTF-16LE, so you would probably have a speed penalty using that mode. |
Question for everyone: I was thinking since a while to publish on red-lang.org the donations I get, including donator names (unless they want to remain anonymous). Is that ok? Are they best practices for doing that? | |
Pekr 31-Oct-2012 [3159x2] | I would not mind. Something like "sponsored by" or any other text would be ok with me ... not sure about the amounts of money displayed, but maybe then two lists - top donators, others who contributed too. Dunno - simply put - someone might make one donation for higher amount of money, so ask such person, if he would mind if only one list is available ... |
The trouble with amounts displayed might be twofold - 1) legal one 2) personal one - e.g. your girlfriend/wife noticing, that instead of going to vacation, you are sponsoring Red :-) | |
Henrik 31-Oct-2012 [3161] | That should be an opt-in thing. I'm not sure I'd want donations to be public. |
DocKimbel 31-Oct-2012 [3162] | So, maybe just an anonymous list? |
older newer | first last |