| planetzopebot | Security vulnerability announcement: 20110928 - Arbitrary Code Execution (Plone News) http://plone.org/products/plone/security/advisories/20110928 | 00:09 |
|---|---|---|
| *** m8 has joined #zope | 00:13 | |
| *** xanalogica_ has quit IRC | 00:19 | |
| *** xanalogica_ has joined #zope | 00:21 | |
| *** thetet has quit IRC | 00:27 | |
| *** evilbungle has joined #zope | 00:28 | |
| *** J1m has quit IRC | 00:30 | |
| *** J1m has joined #zope | 00:31 | |
| *** Wu has joined #zope | 00:45 | |
| *** m8 has quit IRC | 00:48 | |
| TresEquis | For the few watching here: that vulnerability is actually not Plone-specific: all recent versions of Zope 2.12.x and 2.13.x are vulnerable | 00:51 |
| *** runyaga has quit IRC | 00:53 | |
| *** hobu has quit IRC | 00:56 | |
| *** TresEquis has quit IRC | 00:56 | |
| *** hobu has joined #zope | 00:56 | |
| *** J1m has quit IRC | 00:57 | |
| *** sp0cksbeard has quit IRC | 01:00 | |
| *** do3cc has quit IRC | 01:02 | |
| *** jelle has quit IRC | 01:18 | |
| *** d2m has left #zope | 01:27 | |
| *** evilbungle has quit IRC | 01:42 | |
| *** ajkaanbal has quit IRC | 01:56 | |
| *** supton_ has joined #zope | 02:03 | |
| *** supton has quit IRC | 02:06 | |
| planetzopebot | Security vulnerabiity 20110928: Arbitrary CodeExecution (pre-announcement) (gmane.comp.web.zope.announce) http://permalink.gmane.org/gmane.comp.web.zope.announce/1509 | 02:09 |
| *** do3cc has joined #zope | 02:13 | |
| *** rogererens has quit IRC | 02:24 | |
| *** Wu has quit IRC | 02:53 | |
| *** _mup_ has quit IRC | 03:00 | |
| *** _mup_ has joined #zope | 03:00 | |
| *** TomBlockley has quit IRC | 03:08 | |
| *** alga has quit IRC | 03:11 | |
| *** hever has quit IRC | 03:16 | |
| *** fairlite has quit IRC | 03:21 | |
| *** fairlite has joined #zope | 03:21 | |
| *** fairlite has joined #zope | 03:21 | |
| *** J1m has joined #zope | 03:28 | |
| *** J1m has quit IRC | 03:46 | |
| *** daMaestro has quit IRC | 03:47 | |
| kosh | betabug: are you around? | 03:47 |
| *** tiwula has quit IRC | 03:50 | |
| *** tiwula has joined #zope | 04:22 | |
| *** do3cc has quit IRC | 04:23 | |
| *** do3cc has joined #zope | 04:27 | |
| *** srichter has quit IRC | 04:32 | |
| *** srichter has joined #zope | 04:41 | |
| *** do3cc has quit IRC | 04:51 | |
| *** avn has quit IRC | 04:54 | |
| *** avn has joined #zope | 04:57 | |
| *** gawel has quit IRC | 05:00 | |
| *** gawel has joined #zope | 05:00 | |
| *** avn has quit IRC | 05:05 | |
| *** avn has joined #zope | 05:13 | |
| *** davisagli has quit IRC | 05:18 | |
| *** davisagli has joined #zope | 05:19 | |
| *** sp0cksbeard has joined #zope | 05:26 | |
| *** dayne has joined #zope | 05:42 | |
| *** srichter has quit IRC | 06:01 | |
| *** srichter has joined #zope | 06:03 | |
| *** sp0cksbeard has quit IRC | 06:33 | |
| *** Rakshith has joined #zope | 07:14 | |
| *** hobu has quit IRC | 07:15 | |
| *** hobu has joined #zope | 07:17 | |
| *** Sada has joined #zope | 07:32 | |
| *** patul has joined #zope | 07:34 | |
| *** gawel has quit IRC | 07:35 | |
| *** planetzopebot has quit IRC | 07:35 | |
| *** kiorky has quit IRC | 07:35 | |
| *** purserj has quit IRC | 07:35 | |
| *** planetzopebot has joined #zope | 07:38 | |
| *** purserj has joined #zope | 07:38 | |
| *** gawel has joined #zope | 07:44 | |
| *** kiorky has joined #zope | 07:44 | |
| *** Gautam has joined #zope | 07:49 | |
| *** Gautam is now known as Guest29585 | 07:50 | |
| *** Allmity has joined #zope | 07:58 | |
| *** tisto has joined #zope | 07:58 | |
| *** Dikeshwar has joined #zope | 08:01 | |
| *** tiwula has quit IRC | 08:13 | |
| *** do3cc has joined #zope | 08:23 | |
| *** Allmity has quit IRC | 08:24 | |
| *** Allmity has joined #zope | 08:24 | |
| *** fairlite has quit IRC | 08:46 | |
| *** do3cc has quit IRC | 08:48 | |
| *** d2m has joined #zope | 08:59 | |
| *** __mac__ has joined #zope | 09:02 | |
| *** tisto_ has joined #zope | 09:10 | |
| *** tisto has quit IRC | 09:13 | |
| betabug | kosh: now I am | 09:15 |
| *** mr_jolly has joined #zope | 09:29 | |
| *** agroszer has joined #zope | 09:34 | |
| *** goschtl has joined #zope | 09:39 | |
| *** jelle has joined #zope | 10:02 | |
| *** Wu has joined #zope | 10:02 | |
| *** planetzopebot has quit IRC | 10:08 | |
| *** planetzopebot has joined #zope | 10:08 | |
| *** yvl has joined #zope | 10:09 | |
| *** agroszer has quit IRC | 10:11 | |
| *** agroszer has joined #zope | 10:13 | |
| *** Allmity has quit IRC | 10:30 | |
| *** MrTango has joined #zope | 10:43 | |
| *** rogererens has joined #zope | 10:45 | |
| *** d2m has quit IRC | 11:10 | |
| *** jelle has left #zope | 11:13 | |
| *** fredvd has joined #zope | 11:20 | |
| *** evilbungle has joined #zope | 11:31 | |
| *** hobu has quit IRC | 11:33 | |
| *** fredvd has quit IRC | 11:33 | |
| *** fredvd has joined #zope | 11:33 | |
| *** hobu has joined #zope | 11:34 | |
| *** d2m has joined #zope | 11:45 | |
| *** evilbungle has quit IRC | 11:49 | |
| *** TomBlockley has joined #zope | 11:55 | |
| *** tisto has joined #zope | 11:55 | |
| *** TomBlockley has quit IRC | 11:56 | |
| *** tisto_ is now known as tisto | 11:56 | |
| *** TomBlockley has joined #zope | 11:56 | |
| *** mitchell`off is now known as mitchell` | 12:00 | |
| *** eperez has joined #zope | 12:04 | |
| *** d2m has quit IRC | 12:07 | |
| *** ccomb has joined #zope | 12:12 | |
| *** Sada has quit IRC | 12:14 | |
| *** evilbungle has joined #zope | 12:17 | |
| *** avoinea has joined #zope | 12:23 | |
| *** fredvd has quit IRC | 12:31 | |
| *** mr_jolly has quit IRC | 12:35 | |
| *** rogererens has quit IRC | 12:38 | |
| *** d2m has joined #zope | 12:40 | |
| *** rogererens has joined #zope | 12:41 | |
| *** alga has joined #zope | 12:47 | |
| *** RichardBarrell has joined #zope | 12:49 | |
| *** menesis has joined #zope | 12:52 | |
| *** mr_jolly has joined #zope | 12:54 | |
| *** menesis has quit IRC | 12:56 | |
| *** mr_jolly_ has joined #zope | 13:04 | |
| *** teix has joined #zope | 13:05 | |
| *** mr_jolly has quit IRC | 13:07 | |
| *** mr_jolly_ is now known as mr_jolly | 13:07 | |
| *** menesis has joined #zope | 13:11 | |
| *** RichardBarrell has quit IRC | 13:13 | |
| *** RichardBarrell has joined #zope | 13:14 | |
| *** menesis has quit IRC | 13:27 | |
| *** mr_jolly_ has joined #zope | 13:31 | |
| *** menesis has joined #zope | 13:32 | |
| *** mr_jolly__ has joined #zope | 13:34 | |
| *** mr_jolly has quit IRC | 13:34 | |
| *** mr_jolly__ is now known as mr_jolly | 13:34 | |
| *** mr_jolly_ has quit IRC | 13:38 | |
| *** TomBlockley has quit IRC | 13:42 | |
| *** TomBlockley has joined #zope | 13:43 | |
| *** Sada has joined #zope | 13:57 | |
| *** menesis has quit IRC | 14:07 | |
| *** tisto is now known as tisto|lunch | 14:10 | |
| *** d2m has quit IRC | 14:16 | |
| *** J1m has joined #zope | 14:46 | |
| *** fredvd has joined #zope | 14:49 | |
| *** Wu has quit IRC | 14:55 | |
| *** eperez has quit IRC | 14:55 | |
| *** Sada has quit IRC | 14:58 | |
| *** hobu has quit IRC | 15:01 | |
| *** menesis has joined #zope | 15:01 | |
| *** xanalogica_ has quit IRC | 15:03 | |
| *** hobu has joined #zope | 15:03 | |
| *** xanalogica_ has joined #zope | 15:03 | |
| *** xanalogica_ has quit IRC | 15:08 | |
| *** Guest29585 has quit IRC | 15:15 | |
| *** patul has quit IRC | 15:15 | |
| *** do3cc has joined #zope | 15:16 | |
| *** Dikeshwar has quit IRC | 15:16 | |
| *** Rakshith has quit IRC | 15:16 | |
| *** crissi has joined #zope | 15:22 | |
| *** J1m has quit IRC | 15:22 | |
| *** xanalogica_ has joined #zope | 15:22 | |
| crissi | hello. i have a question regarding zope2. i use a external method to instanciate a python class. accessing this class works fine (e.g. __repr__) but accessing a method of it doesnt work.. zope tells me that i need loggedin for that which is wrong. | 15:23 |
| crissi | how i can allow to access the methods of my object getting from external method? | 15:24 |
| crissi | create a external method for each function from object is like hell and is not what i want. | 15:25 |
| kosh | you normally create a python product since you need to declare the security on every method you want to allow access to | 15:26 |
| kosh | betabug: wake up! | 15:26 |
| betabug | hey | 15:27 |
| kosh | betabug: so how are things going today? | 15:27 |
| betabug | ok | 15:27 |
| crissi | b ah! | 15:27 |
| kosh | betabug: how do you feel about watching a 5 minute screencast I made on the value of caching and taking about 30 seconds to fill out a form on it for one of my classes? | 15:27 |
| betabug | sure, why not | 15:27 |
| kosh | http://www.youtube.com/watch?v=F3fYgIbigCk | 15:28 |
| kosh | https://docs.google.com/spreadsheet/viewform?hl=en_US&formkey=dEhZN3FsOXJqbmlDUUVfMG1fYjNncGc6MQ#gid=0 | 15:28 |
| kosh | thanks a lot | 15:28 |
| betabug | great screencast | 15:35 |
| kosh | thanks | 15:35 |
| betabug | now lets see for the report :-) | 15:35 |
| kosh | you can share it with anyone you want I don't mind | 15:35 |
| *** yvl has quit IRC | 15:35 | |
| betabug | ok :-) | 15:36 |
| crissi | got it | 15:36 |
| betabug | kosh: and sent in my response too | 15:38 |
| kosh | thanks | 15:38 |
| kosh | yeah I do need to do more to show how to implement it, the problem is the details on how to implement it change with each server software you use | 15:39 |
| kosh | however for zope I already have a product people can use to implement it | 15:39 |
| kosh | I should probably put that in there at the end a link to my github project for that | 15:39 |
| betabug | kosh: well, the implementation wouldn't be in the same screen cast | 15:40 |
| kosh | oh yeah I was thinking another set of screencasts or written docs could cover that but I only really know how to do it for zope | 15:41 |
| kosh | so I could tell someone how to implement it in a product | 15:41 |
| kosh | or how to use my already built product to use it with their existing objects | 15:41 |
| betabug | yeah, you could show it based on that or just give an overview how to do it | 15:41 |
| kosh | yeah | 15:41 |
| betabug | I wonder how it would best be done for pyramid | 15:42 |
| kosh | someone was telling me on their 3g connection they get 600ms average latency and that would take that 7.7 seconds time and put it up to 40 seconds or so but the versioned urls would still be at about 1.8 :) | 15:42 |
| kosh | the entire idea of revalidating content because the data at the url might change is the problem | 15:43 |
| betabug | haha, when I'm using the mobile connection, sometimes I don't even have 3g | 15:43 |
| betabug | but then I usually browse with lynx :-) | 15:43 |
| *** crissi has left #zope | 15:44 | |
| kosh | the class I have is on technical communication so I wanted to do something useful and something I have had lots of arguements with people about | 15:44 |
| betabug | yeah | 15:45 |
| kosh | so has greece burned to the ground yet? have you used the bankers to get the fire started? | 15:51 |
| *** Rakshith has joined #zope | 16:02 | |
| *** __mac__ has quit IRC | 16:03 | |
| *** Dikeshwar has joined #zope | 16:05 | |
| *** Gautam has joined #zope | 16:05 | |
| *** patul has joined #zope | 16:05 | |
| *** Gautam is now known as Guest78069 | 16:05 | |
| *** __mac__ has joined #zope | 16:07 | |
| *** dayne has quit IRC | 16:08 | |
| *** zagy has quit IRC | 16:08 | |
| *** kiorky_ has quit IRC | 16:08 | |
| *** dayne has joined #zope | 16:10 | |
| *** zagy has joined #zope | 16:10 | |
| *** kiorky_ has joined #zope | 16:10 | |
| *** kiorky_ has quit IRC | 16:11 | |
| *** kiorky_ has joined #zope | 16:12 | |
| *** J1m has joined #zope | 16:12 | |
| betabug | we're working on it | 16:13 |
| kosh | get to working on it faster, we need some good examples to follow | 16:15 |
| *** ajkaanbal has joined #zope | 16:15 | |
| *** J1m has quit IRC | 16:17 | |
| *** yvl has joined #zope | 16:19 | |
| *** sp0cksbeard has joined #zope | 16:19 | |
| *** eperez has joined #zope | 16:22 | |
| *** patul has quit IRC | 16:24 | |
| *** d2m has joined #zope | 16:25 | |
| *** Guest78069 has quit IRC | 16:35 | |
| *** Rakshith has quit IRC | 16:35 | |
| *** mgedmin has quit IRC | 16:41 | |
| *** mgedmin has joined #zope | 16:41 | |
| *** Rakshith has joined #zope | 16:42 | |
| *** Rakshith has quit IRC | 16:44 | |
| *** tisto|lunch is now known as tisto | 16:50 | |
| *** dayne has quit IRC | 16:53 | |
| *** __mac__ has quit IRC | 17:00 | |
| *** do3cc has quit IRC | 17:05 | |
| *** Wu has joined #zope | 17:14 | |
| *** RichardBarrell has quit IRC | 17:14 | |
| *** RichardB_ has joined #zope | 17:14 | |
| *** yvl has quit IRC | 17:15 | |
| *** RichardB_ has quit IRC | 17:15 | |
| *** RichardBarrell has joined #zope | 17:15 | |
| teix | kosh: why? are you portuguese like me? :) | 17:16 |
| *** BlueAidan has joined #zope | 17:17 | |
| BlueAidan | did anyone in the room help with the zope.org web server migration? I'm trying to access http://old.zope.org/Members/speedbird but it keeps spinning | 17:17 |
| betabug | old.zope.org is sometimes very slow | 17:17 |
| BlueAidan | basically trying to get my hands on an old copy of zforum | 17:17 |
| betabug | probably they have something that restarts it from time to time, because a couple of hours later it often comes back | 17:17 |
| betabug | doing software archeology? :-) | 17:18 |
| BlueAidan | client request | 17:18 |
| BlueAidan | ;) | 17:18 |
| betabug | haha | 17:18 |
| bigkevmcd | page loads for me | 17:19 |
| bigkevmcd | but no downloads | 17:19 |
| bigkevmcd | links to zforum.org instead | 17:19 |
| *** do3cc has joined #zope | 17:19 | |
| BlueAidan | heh, thanks. that gives me another place to look. | 17:21 |
| bigkevmcd | http://plone.org/products/zforum/releases | 17:21 |
| bigkevmcd | BlueAidan: ^^^ I downloaded from there | 17:21 |
| BlueAidan | thanks | 17:23 |
| kosh | teix: no I am not portugese | 17:25 |
| teix | kosh: well I thought so because I believe Portugal is the next country that will follow after Greece :) | 17:27 |
| *** Dikeshwar has quit IRC | 17:29 | |
| *** daMaestro has joined #zope | 17:53 | |
| *** zagy has quit IRC | 18:02 | |
| *** davetoo has joined #zope | 18:03 | |
| d2m | hei, already wanted to tell you earlier but got distracted - old.zope.org has filesystem full (needs a pack an clean), that is logins won't work atm | 18:04 |
| davetoo | Are zope.event subscriptions made by weakrefs? | 18:04 |
| d2m | davetoo: look at the source, its 4 lines | 18:04 |
| davetoo | ok :) | 18:04 |
| davetoo | Do you know which module/file, off the top? I'm just getting started with zca stuff. | 18:05 |
| d2m | zope.event ;) | 18:05 |
| davetoo | d'oh :) | 18:05 |
| *** do3cc has quit IRC | 18:08 | |
| *** d2m has left #zope | 18:08 | |
| kosh | see you freaks later | 18:09 |
| *** goschtl has quit IRC | 18:11 | |
| *** tisto has quit IRC | 18:17 | |
| *** tisto has joined #zope | 18:24 | |
| *** __mac__ has joined #zope | 18:28 | |
| lewellyn | kosh hates us :) | 18:28 |
| *** tiwula has joined #zope | 18:36 | |
| *** tisto has quit IRC | 18:37 | |
| *** __mac__ has quit IRC | 18:44 | |
| *** fredvd has quit IRC | 18:59 | |
| *** supton has joined #zope | 19:06 | |
| *** davetoo has left #zope | 19:18 | |
| *** do3cc has joined #zope | 19:22 | |
| *** Arfrever has joined #zope | 19:27 | |
| *** menesis has quit IRC | 19:41 | |
| *** evilbungle has quit IRC | 19:49 | |
| *** evilbungle has joined #zope | 19:49 | |
| *** agroszer has quit IRC | 19:55 | |
| *** zagy has joined #zope | 19:56 | |
| *** TomBlockley has quit IRC | 20:09 | |
| *** do3cc has quit IRC | 20:21 | |
| *** evilbungle has quit IRC | 20:23 | |
| *** rogererens has quit IRC | 20:25 | |
| *** do3cc has joined #zope | 20:32 | |
| *** Wu has quit IRC | 20:32 | |
| kosh | lewellyn: what gave you that idea? | 20:35 |
| lewellyn | it was wishful thinking, sorry ;) | 20:35 |
| kosh | hehe | 20:35 |
| kosh | want to look at my caching screencast about 5 mins long | 20:36 |
| *** mitchell` is now known as mitchell`off | 20:37 | |
| lewellyn | at the moment, no. i'm having problems deploying a war :/ | 20:44 |
| lewellyn | ebil java! | 20:44 |
| kosh | hehe | 20:48 |
| *** menesis has joined #zope | 20:54 | |
| *** evilbungle has joined #zope | 20:55 | |
| *** ccomb has quit IRC | 21:16 | |
| *** avoinea has quit IRC | 21:30 | |
| *** avoinea has joined #zope | 21:35 | |
| *** __mac__ has joined #zope | 21:36 | |
| *** zagy has quit IRC | 21:45 | |
| *** avoinea has quit IRC | 22:00 | |
| *** RichardBarrell has quit IRC | 22:05 | |
| *** m8 has joined #zope | 22:17 | |
| *** Taggnostr has quit IRC | 22:23 | |
| *** Taggnostr has joined #zope | 22:23 | |
| *** mitchell`off has quit IRC | 22:26 | |
| *** mitchell`off has joined #zope | 22:27 | |
| *** menesis has quit IRC | 22:30 | |
| *** ajmitch_ has joined #zope | 22:41 | |
| *** xanalogica_ has quit IRC | 22:49 | |
| *** do3cc has quit IRC | 22:51 | |
| *** ajmitch has quit IRC | 22:54 | |
| *** davisagli has quit IRC | 22:54 | |
| *** planetzopebot has quit IRC | 22:55 | |
| *** ajmitch has joined #zope | 22:56 | |
| *** ajmitch has joined #zope | 22:56 | |
| *** davisagli has joined #zope | 22:56 | |
| *** __mac__1 has joined #zope | 23:06 | |
| *** ajmitch has quit IRC | 23:07 | |
| *** ajmitch has joined #zope | 23:07 | |
| *** __mac__1 has quit IRC | 23:09 | |
| *** __mac__ has quit IRC | 23:09 | |
| *** planetzopebot has joined #zope | 23:15 | |
| *** teix has quit IRC | 23:33 | |
| *** teix has joined #zope | 23:33 | |
| *** TresEquis has joined #zope | 23:56 | |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!