• Home
  • Script library
  • AltME Archive
  • Mailing list
  • Articles Index
  • Site search
 

World: r4wp

[#Red] Red language group

DocKimbel
29-Oct-2012
[3113x2]
I've just got an answer from F-Prot, they just whitelisted the sample 
binary I've sent to them but didn't send me any info about their 
heuristics... So I think that in order to avoid loosing my time trying 
to get any info from those AV vendors, I'll just add a specific signature 
to Red generated binaries, so that they can be whitelisted by all 
AV vendors (when possible). I can't see what else I could do, except 
warn users about some crappy AV software.
So, I could just add a static c-string!, what good unique signature 
sequence could we use, and how long should it be?
BrianH
29-Oct-2012
[3115]
Be sure to not include such a signature in Red's output of user binaries. 
We want to keep Red itself whitelisted even if Red's users decide 
to make malware with it.
DocKimbel
29-Oct-2012
[3116x2]
Good point.
OTOH, that could be a good selling point for Red. ;-)
BrianH
29-Oct-2012
[3118]
Not for long, since they'll stop whitelisting Red. It's similar to 
leaking your authenticode signature to malware writers.
Kaj
29-Oct-2012
[3119]
What point is virus scanning if you need generic signatures that 
it will let through?
BrianH
29-Oct-2012
[3120]
Afaik, authenticode is supposed to handle that process, at least 
to a certain extent. You cryptographically sign your binaries so 
when they do bad things there's someone to blame. If your binaries 
aren't signed, they're assumed to be bad by some people.
Kaj
29-Oct-2012
[3121]
That's signing the complete binary, that's much stronger than adding 
a signature
BrianH
29-Oct-2012
[3122]
Right, it's definitely better than a whitelist constant.
Arnold
29-Oct-2012
[3123]
All these anti-virus program makers tell you something you already 
knew: your software does not qualify as a virus or did not contain 
any known viruses.

Or you are 1 of the worst script kiddies. Or you managed to disguise 
the virus relly well this time ;)
Kaj
29-Oct-2012
[3124]
Fixed the FPU configuration. The bindings are in good shape again
DocKimbel
30-Oct-2012
[3125]
Great! :-)
Kaj
30-Oct-2012
[3126x3]
I see Ruud prepared a new batch for you :-)
I'm sitting next to a Windows 7 Ultimate machine to test the bindings, 
but it's unusable because it has been updating itself unasked for 
hours, on shutdown and on startup, and now won't start up anymore
An Internet connection for a Windows machine is close to a lethal 
injection
AdrianS
30-Oct-2012
[3129]
why don't you just disable the auto  downloading?
Kaj
30-Oct-2012
[3130]
It would need to start up first to reach that...
AdrianS
30-Oct-2012
[3131x3]
well, that's the first thing I do when I set up a Windows machine
but then, I'm pretty anal about keeping the system up-to-date
what happens if you go to the "last known good configuration" - F8 
on startup?
DocKimbel
30-Oct-2012
[3134]
I do as Adrian: first thing when installing any Windows version, 
disable auto-updating.
Pekr
30-Oct-2012
[3135]
I never ever had issue caused by Windows auto-updating. You guys 
don't like Windows so much, that you are seeing a ghosts :-)
DocKimbel
30-Oct-2012
[3136]
Second thing I do: install Microsoft Security Essential (it's free) 
and forget about all common antivirus issues (slowness, instability, 
intrusive ads, false positives, ...).
Kaj
30-Oct-2012
[3137x2]
It's not my machine, and safe mode or F8 doesn't provide an option 
to restore the configuration
Petr, this machine just became a ghost
Pekr
30-Oct-2012
[3139x2]
format C:
:-)
Kaj
30-Oct-2012
[3141]
It's already planned to install Linux Mint
DocKimbel
30-Oct-2012
[3142]
Kaj: I get a lot of type casting warnings since the last commit on 
GTK-widget.reds, could you please check if they are legitimate or 
not?
Kaj
30-Oct-2012
[3143]
I get one on the GTK binding and one on WebKit. I haven't seen them 
before the 0.3.0 merge
NatasjaK
30-Oct-2012
[3144x2]
All that talk about my machine, I touched one button and it awoke 
again ;-)
Wich doesn't mean the problems are solved, but it's a start ;-\
DocKimbel
30-Oct-2012
[3146x2]
Kaj: the changes I did today are generating a lot of warnings with 
GTK binding, I will have a look at it later to see if it's a bug 
or if the binding code needs some minor changes.
Natasja: seems that you'll have a brand new system soon. :-)
Kaj
30-Oct-2012
[3148]
Is it correct that Red/System can't print Unicode on Windows like 
the other systems?
NatasjaK
30-Oct-2012
[3149]
DocKimbel: That would be very welcome :-)
PeterWood
30-Oct-2012
[3150]
AFAIK, windows consoles only supporting Windows 8-bit codepages or 
UTF16. Red/System can print the full range of UTF-8 characters (as 
can REBOL) but the console can't display them.
Kaj
30-Oct-2012
[3151]
Ah, right, I'd have to use UTF-16 source text
PeterWood
30-Oct-2012
[3152x3]
Probably the easiiest way would be to inculde the Red runtime and 
use red/unicode/load-utf8 to create a Red string and Red/Platform/print-ucs4 
to print it.
You would need to check that the Windows console is set to display 
UTF-16B.


This commit ( https://github.com/dockimbel/Red/commit/be271889ff03e44bdb55af04b60ea2bb280cb18f
) shows how.
) shows how.
Kaj
30-Oct-2012
[3155]
Thanks
PeterWood
30-Oct-2012
[3156]
The other way is to convert the utf-8 c-string! to  UTF-16E integers 
on the fly  and feed them into llibc putwchar yourself. More work 
upfront but may be easier in the long term.


The code in red/runitme/platform/win32.reds is a pretty clear exmpale 
of how to do it but you wuld still need to write the UTF-8 to UTF16-LE 
on the fly conversion yourself. (That one is UCS-4 to UTF16LE).
DocKimbel
31-Oct-2012
[3157x2]
Kaj: you can switch the Windows console to an UTF-8 compatible mode 
using _setmode():
http://msdn.microsoft.com/en-us/library/tw4k6df8.aspx


I haven't test it but it should work. Windows uses natively UTF-16LE, 
so you would probably have a speed penalty using that mode.
Question for everyone: I was thinking since a while to publish on 
red-lang.org the donations I get, including donator names (unless 
they want to remain anonymous). Is that ok? Are they best practices 
for doing that?
Pekr
31-Oct-2012
[3159x2]
I would not mind. Something like "sponsored by" or any other text 
would be ok with me ... not sure about the amounts of money displayed, 
but maybe then two lists - top donators, others who contributed too. 
Dunno - simply put - someone might make one donation for higher amount 
of money, so ask such person, if he would mind if only one list is 
available ...
The trouble with amounts displayed might be twofold - 1) legal one 
2) personal one - e.g. your girlfriend/wife noticing, that instead 
of going to vacation, you are sponsoring Red :-)
Henrik
31-Oct-2012
[3161]
That should be an opt-in thing. I'm not sure I'd want donations to 
be public.
DocKimbel
31-Oct-2012
[3162]
So, maybe just an anonymous list?