IRC log of #zope for Thursday, 2011-09-29

planetzopebotSecurity vulnerability announcement: 20110928 - Arbitrary Code Execution (Plone News)  http://plone.org/products/plone/security/advisories/2011092800:09
*** m8 has joined #zope00:13
*** xanalogica_ has quit IRC00:19
*** xanalogica_ has joined #zope00:21
*** thetet has quit IRC00:27
*** evilbungle has joined #zope00:28
*** J1m has quit IRC00:30
*** J1m has joined #zope00:31
*** Wu has joined #zope00:45
*** m8 has quit IRC00:48
TresEquisFor the few watching here:  that vulnerability is actually not Plone-specific:  all recent versions of Zope 2.12.x and 2.13.x are vulnerable00:51
*** runyaga has quit IRC00:53
*** hobu has quit IRC00:56
*** TresEquis has quit IRC00:56
*** hobu has joined #zope00:56
*** J1m has quit IRC00:57
*** sp0cksbeard has quit IRC01:00
*** do3cc has quit IRC01:02
*** jelle has quit IRC01:18
*** d2m has left #zope01:27
*** evilbungle has quit IRC01:42
*** ajkaanbal has quit IRC01:56
*** supton_ has joined #zope02:03
*** supton has quit IRC02:06
planetzopebotSecurity vulnerabiity 20110928: Arbitrary CodeExecution (pre-announcement) (gmane.comp.web.zope.announce)  http://permalink.gmane.org/gmane.comp.web.zope.announce/150902:09
*** do3cc has joined #zope02:13
*** rogererens has quit IRC02:24
*** Wu has quit IRC02:53
*** _mup_ has quit IRC03:00
*** _mup_ has joined #zope03:00
*** TomBlockley has quit IRC03:08
*** alga has quit IRC03:11
*** hever has quit IRC03:16
*** fairlite has quit IRC03:21
*** fairlite has joined #zope03:21
*** fairlite has joined #zope03:21
*** J1m has joined #zope03:28
*** J1m has quit IRC03:46
*** daMaestro has quit IRC03:47
koshbetabug: are you around?03:47
*** tiwula has quit IRC03:50
*** tiwula has joined #zope04:22
*** do3cc has quit IRC04:23
*** do3cc has joined #zope04:27
*** srichter has quit IRC04:32
*** srichter has joined #zope04:41
*** do3cc has quit IRC04:51
*** avn has quit IRC04:54
*** avn has joined #zope04:57
*** gawel has quit IRC05:00
*** gawel has joined #zope05:00
*** avn has quit IRC05:05
*** avn has joined #zope05:13
*** davisagli has quit IRC05:18
*** davisagli has joined #zope05:19
*** sp0cksbeard has joined #zope05:26
*** dayne has joined #zope05:42
*** srichter has quit IRC06:01
*** srichter has joined #zope06:03
*** sp0cksbeard has quit IRC06:33
*** Rakshith has joined #zope07:14
*** hobu has quit IRC07:15
*** hobu has joined #zope07:17
*** Sada has joined #zope07:32
*** patul has joined #zope07:34
*** gawel has quit IRC07:35
*** planetzopebot has quit IRC07:35
*** kiorky has quit IRC07:35
*** purserj has quit IRC07:35
*** planetzopebot has joined #zope07:38
*** purserj has joined #zope07:38
*** gawel has joined #zope07:44
*** kiorky has joined #zope07:44
*** Gautam has joined #zope07:49
*** Gautam is now known as Guest2958507:50
*** Allmity has joined #zope07:58
*** tisto has joined #zope07:58
*** Dikeshwar has joined #zope08:01
*** tiwula has quit IRC08:13
*** do3cc has joined #zope08:23
*** Allmity has quit IRC08:24
*** Allmity has joined #zope08:24
*** fairlite has quit IRC08:46
*** do3cc has quit IRC08:48
*** d2m has joined #zope08:59
*** __mac__ has joined #zope09:02
*** tisto_ has joined #zope09:10
*** tisto has quit IRC09:13
betabugkosh: now I am09:15
*** mr_jolly has joined #zope09:29
*** agroszer has joined #zope09:34
*** goschtl has joined #zope09:39
*** jelle has joined #zope10:02
*** Wu has joined #zope10:02
*** planetzopebot has quit IRC10:08
*** planetzopebot has joined #zope10:08
*** yvl has joined #zope10:09
*** agroszer has quit IRC10:11
*** agroszer has joined #zope10:13
*** Allmity has quit IRC10:30
*** MrTango has joined #zope10:43
*** rogererens has joined #zope10:45
*** d2m has quit IRC11:10
*** jelle has left #zope11:13
*** fredvd has joined #zope11:20
*** evilbungle has joined #zope11:31
*** hobu has quit IRC11:33
*** fredvd has quit IRC11:33
*** fredvd has joined #zope11:33
*** hobu has joined #zope11:34
*** d2m has joined #zope11:45
*** evilbungle has quit IRC11:49
*** TomBlockley has joined #zope11:55
*** tisto has joined #zope11:55
*** TomBlockley has quit IRC11:56
*** tisto_ is now known as tisto11:56
*** TomBlockley has joined #zope11:56
*** mitchell`off is now known as mitchell`12:00
*** eperez has joined #zope12:04
*** d2m has quit IRC12:07
*** ccomb has joined #zope12:12
*** Sada has quit IRC12:14
*** evilbungle has joined #zope12:17
*** avoinea has joined #zope12:23
*** fredvd has quit IRC12:31
*** mr_jolly has quit IRC12:35
*** rogererens has quit IRC12:38
*** d2m has joined #zope12:40
*** rogererens has joined #zope12:41
*** alga has joined #zope12:47
*** RichardBarrell has joined #zope12:49
*** menesis has joined #zope12:52
*** mr_jolly has joined #zope12:54
*** menesis has quit IRC12:56
*** mr_jolly_ has joined #zope13:04
*** teix has joined #zope13:05
*** mr_jolly has quit IRC13:07
*** mr_jolly_ is now known as mr_jolly13:07
*** menesis has joined #zope13:11
*** RichardBarrell has quit IRC13:13
*** RichardBarrell has joined #zope13:14
*** menesis has quit IRC13:27
*** mr_jolly_ has joined #zope13:31
*** menesis has joined #zope13:32
*** mr_jolly__ has joined #zope13:34
*** mr_jolly has quit IRC13:34
*** mr_jolly__ is now known as mr_jolly13:34
*** mr_jolly_ has quit IRC13:38
*** TomBlockley has quit IRC13:42
*** TomBlockley has joined #zope13:43
*** Sada has joined #zope13:57
*** menesis has quit IRC14:07
*** tisto is now known as tisto|lunch14:10
*** d2m has quit IRC14:16
*** J1m has joined #zope14:46
*** fredvd has joined #zope14:49
*** Wu has quit IRC14:55
*** eperez has quit IRC14:55
*** Sada has quit IRC14:58
*** hobu has quit IRC15:01
*** menesis has joined #zope15:01
*** xanalogica_ has quit IRC15:03
*** hobu has joined #zope15:03
*** xanalogica_ has joined #zope15:03
*** xanalogica_ has quit IRC15:08
*** Guest29585 has quit IRC15:15
*** patul has quit IRC15:15
*** do3cc has joined #zope15:16
*** Dikeshwar has quit IRC15:16
*** Rakshith has quit IRC15:16
*** crissi has joined #zope15:22
*** J1m has quit IRC15:22
*** xanalogica_ has joined #zope15:22
crissihello. i have a question regarding zope2. i use a external method to instanciate a python class. accessing this class works fine (e.g. __repr__) but accessing a method of it doesnt work.. zope tells me that i need loggedin for that which is wrong.15:23
crissihow i can allow to access the methods of my object getting from external method?15:24
crissicreate a external method for each function from object is like hell and is not what i want.15:25
koshyou normally create a python product since you need to declare the security on every method you want to allow access to15:26
koshbetabug: wake up!15:26
betabughey15:27
koshbetabug: so how are things going today?15:27
betabugok15:27
crissib ah!15:27
koshbetabug: how do you feel about watching a 5 minute screencast I made on the value of caching and taking about 30 seconds to fill out a form on it for one of my classes?15:27
betabugsure, why not15:27
koshhttp://www.youtube.com/watch?v=F3fYgIbigCk15:28
koshhttps://docs.google.com/spreadsheet/viewform?hl=en_US&formkey=dEhZN3FsOXJqbmlDUUVfMG1fYjNncGc6MQ#gid=015:28
koshthanks a lot15:28
betabuggreat screencast15:35
koshthanks15:35
betabugnow lets see for the report :-)15:35
koshyou can share it with anyone you want I don't mind15:35
*** yvl has quit IRC15:35
betabugok :-)15:36
crissigot it15:36
betabugkosh: and sent in my response too15:38
koshthanks15:38
koshyeah I do need to do more to show how to implement it, the problem is the details on how to implement it change with each server software you use15:39
koshhowever for zope I already have a product people can use to implement it15:39
koshI should probably put that in there at the end a link to my github project for that15:39
betabugkosh: well, the implementation wouldn't be in the same screen cast15:40
koshoh yeah I was thinking another set of screencasts or written docs could cover that but I only really know how to do it for zope15:41
koshso I could tell someone how to implement it in a product15:41
koshor how to use my already built product to use it with their existing objects15:41
betabugyeah, you could show it based on that or just give an overview how to do it15:41
koshyeah15:41
betabugI wonder how it would best be done for pyramid15:42
koshsomeone was telling me on their 3g connection they get 600ms average latency and that would take that 7.7 seconds time and put it up to 40 seconds or so but the versioned urls would still be at about 1.8 :)15:42
koshthe entire idea of revalidating content because the data at the url might change is the problem15:43
betabughaha, when I'm using the mobile connection, sometimes I don't even have 3g15:43
betabugbut then I usually browse with lynx :-)15:43
*** crissi has left #zope15:44
koshthe class I have is on technical communication so I wanted to do something useful and something I have had lots of arguements with people about15:44
betabugyeah15:45
koshso has greece burned to the ground yet? have you used the bankers to get the fire started?15:51
*** Rakshith has joined #zope16:02
*** __mac__ has quit IRC16:03
*** Dikeshwar has joined #zope16:05
*** Gautam has joined #zope16:05
*** patul has joined #zope16:05
*** Gautam is now known as Guest7806916:05
*** __mac__ has joined #zope16:07
*** dayne has quit IRC16:08
*** zagy has quit IRC16:08
*** kiorky_ has quit IRC16:08
*** dayne has joined #zope16:10
*** zagy has joined #zope16:10
*** kiorky_ has joined #zope16:10
*** kiorky_ has quit IRC16:11
*** kiorky_ has joined #zope16:12
*** J1m has joined #zope16:12
betabugwe're working on it16:13
koshget to working on it faster, we need some good examples to follow16:15
*** ajkaanbal has joined #zope16:15
*** J1m has quit IRC16:17
*** yvl has joined #zope16:19
*** sp0cksbeard has joined #zope16:19
*** eperez has joined #zope16:22
*** patul has quit IRC16:24
*** d2m has joined #zope16:25
*** Guest78069 has quit IRC16:35
*** Rakshith has quit IRC16:35
*** mgedmin has quit IRC16:41
*** mgedmin has joined #zope16:41
*** Rakshith has joined #zope16:42
*** Rakshith has quit IRC16:44
*** tisto|lunch is now known as tisto16:50
*** dayne has quit IRC16:53
*** __mac__ has quit IRC17:00
*** do3cc has quit IRC17:05
*** Wu has joined #zope17:14
*** RichardBarrell has quit IRC17:14
*** RichardB_ has joined #zope17:14
*** yvl has quit IRC17:15
*** RichardB_ has quit IRC17:15
*** RichardBarrell has joined #zope17:15
teixkosh: why? are you portuguese like me? :)17:16
*** BlueAidan has joined #zope17:17
BlueAidandid anyone in the room help with the zope.org web server migration? I'm trying to access http://old.zope.org/Members/speedbird but it keeps spinning17:17
betabugold.zope.org is sometimes very slow17:17
BlueAidanbasically trying to get my hands on an old copy of zforum17:17
betabugprobably they have something that restarts it from time to time, because a couple of hours later it often comes back17:17
betabugdoing software archeology? :-)17:18
BlueAidanclient request17:18
BlueAidan;)17:18
betabughaha17:18
bigkevmcdpage loads for me17:19
bigkevmcdbut no downloads17:19
bigkevmcdlinks to zforum.org instead17:19
*** do3cc has joined #zope17:19
BlueAidanheh, thanks. that gives me another place to look.17:21
bigkevmcdhttp://plone.org/products/zforum/releases17:21
bigkevmcdBlueAidan: ^^^ I downloaded from there17:21
BlueAidanthanks17:23
koshteix: no I am not portugese17:25
teixkosh: well I thought so because I believe Portugal is the next country that will follow after Greece :)17:27
*** Dikeshwar has quit IRC17:29
*** daMaestro has joined #zope17:53
*** zagy has quit IRC18:02
*** davetoo has joined #zope18:03
d2mhei, already wanted to tell you earlier but got distracted - old.zope.org has filesystem full (needs a pack an clean), that is logins won't work atm18:04
davetooAre zope.event subscriptions made by weakrefs?18:04
d2mdavetoo: look at the source, its 4 lines18:04
davetoook :)18:04
davetooDo you know which module/file, off the top?  I'm just getting started with zca stuff.18:05
d2mzope.event ;)18:05
davetood'oh :)18:05
*** do3cc has quit IRC18:08
*** d2m has left #zope18:08
koshsee you freaks later18:09
*** goschtl has quit IRC18:11
*** tisto has quit IRC18:17
*** tisto has joined #zope18:24
*** __mac__ has joined #zope18:28
lewellynkosh hates us :)18:28
*** tiwula has joined #zope18:36
*** tisto has quit IRC18:37
*** __mac__ has quit IRC18:44
*** fredvd has quit IRC18:59
*** supton has joined #zope19:06
*** davetoo has left #zope19:18
*** do3cc has joined #zope19:22
*** Arfrever has joined #zope19:27
*** menesis has quit IRC19:41
*** evilbungle has quit IRC19:49
*** evilbungle has joined #zope19:49
*** agroszer has quit IRC19:55
*** zagy has joined #zope19:56
*** TomBlockley has quit IRC20:09
*** do3cc has quit IRC20:21
*** evilbungle has quit IRC20:23
*** rogererens has quit IRC20:25
*** do3cc has joined #zope20:32
*** Wu has quit IRC20:32
koshlewellyn: what gave you that idea?20:35
lewellynit was wishful thinking, sorry ;)20:35
koshhehe20:35
koshwant to look at my caching screencast about 5 mins long20:36
*** mitchell` is now known as mitchell`off20:37
lewellynat the moment, no. i'm having problems deploying a war :/20:44
lewellynebil java!20:44
koshhehe20:48
*** menesis has joined #zope20:54
*** evilbungle has joined #zope20:55
*** ccomb has quit IRC21:16
*** avoinea has quit IRC21:30
*** avoinea has joined #zope21:35
*** __mac__ has joined #zope21:36
*** zagy has quit IRC21:45
*** avoinea has quit IRC22:00
*** RichardBarrell has quit IRC22:05
*** m8 has joined #zope22:17
*** Taggnostr has quit IRC22:23
*** Taggnostr has joined #zope22:23
*** mitchell`off has quit IRC22:26
*** mitchell`off has joined #zope22:27
*** menesis has quit IRC22:30
*** ajmitch_ has joined #zope22:41
*** xanalogica_ has quit IRC22:49
*** do3cc has quit IRC22:51
*** ajmitch has quit IRC22:54
*** davisagli has quit IRC22:54
*** planetzopebot has quit IRC22:55
*** ajmitch has joined #zope22:56
*** ajmitch has joined #zope22:56
*** davisagli has joined #zope22:56
*** __mac__1 has joined #zope23:06
*** ajmitch has quit IRC23:07
*** ajmitch has joined #zope23:07
*** __mac__1 has quit IRC23:09
*** __mac__ has quit IRC23:09
*** planetzopebot has joined #zope23:15
*** teix has quit IRC23:33
*** teix has joined #zope23:33
*** TresEquis has joined #zope23:56

Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!