headers
David MENTRE | 3 Feb 2006 10:04
Picon

zPhone of Philip Zimmermann

Hello,

Philip Zimmermann, author of PGP, works on secure VoIP (Voice over IP)
and is starting to make some noise about his zPhone (temporary name):
  http://www.philzimmermann.com/EN/zfone/
  http://www.voip-magazine.com/content/view/1674

No much precise information right now, however :
  - it should be "OpenSource" (but Free Software???) ;

  - it uses an new approach (to my knowledge) to authentication and
confidentiality:

   1. generate a session key with Diffie Hellman protocol,

   2. generate a fingerprint that users see on their screen and that
they can check by voice over the phone,

   3. this fingerprint is reused from one session to the other one
between 2 people, so that confidentiality and authentication from
session 1 to n is guaranteed by checking the fingerprint at session n;

 - no key server, neither centralised (PKI) or distributed (Web of Trust);

 - works within RTP protocol (UDP voice data stream) and an IETF draft
is prepared.

I find this approach very interesting, especially regarding end user
aspects (no key to generate, very simple, should work with NATs,
etc.).
(Continue reading)

Permalink | Reply | 2 comments |
headers
William D. Neumann | 3 Feb 2006 16:04
Picon

Re: zPhone of Philip Zimmermann

On Fri, 3 Feb 2006, David MENTRE wrote:

>  - it uses an new approach (to my knowledge) to authentication and
> confidentiality:

That sound like it's based on (or possibly the same as, I'd have to reread 
the paper) a scheme presented by Serge Vaudenay at Crypto'05.  If anyone 
is interested, the paper can be found at 
<http://lasecwww.epfl.ch/php_code/publications/search.php?ref=Vau05a>

William D. Neumann

---

"There's just so many extra children, we could just feed the
children to these tigers.  We don't need them, we're not doing 
anything with them.

Tigers are noble and sleek; children are loud and messy."

         -- Neko Case

Life is unfair.  Kill yourself or get over it.
 	-- Black Box Recorder
Permalink | Reply | 1 comment |
headers
David MENTRE | 3 Feb 2006 16:37
Picon

Re: zPhone of Philip Zimmermann

Hello William,

2006/2/3, William D. Neumann <wneumann <at> cs.unm.edu>:
> That sound like it's based on (or possibly the same as, I'd have to reread
> the paper) a scheme presented by Serge Vaudenay at Crypto'05.

We will have to wait for some code or protocol description of zPhone
to answer that question.

>  If anyone
> is interested, the paper can be found at
> <http://lasecwww.epfl.ch/php_code/publications/search.php?ref=Vau05a>

Thank you for the reference.

I've not read the paper but the abstract says "The extra channel uses
a weak notion of authentication in which strings cannot be forged nor
modified, but whose delivery can be maliciously stalled, canceled, or
replayed." The requirement that "the extra channel [...] in which
strings cannot be forged nor modified" seems pretty difficult to me to
have on the Internet alone. If you establish a session key with a
Diffie-Hellman and if you have a man in the middle attack, the
established channel cannot be considered strong enough so that
messages cannot be changed during transport.

>From what I have understood of Zimmermann's scheme, the only channel
used is the insecure Internet itself, so Vaudenay's scheme seems a
different one to me. We will see...

Best wishes,
(Continue reading)

Permalink | Reply | 0 comments |
headers
David MENTRE | 3 Feb 2006 21:02
Favicon

New strings to translate

Hello,

I've just committed a new patchset with needed calls to s_ and f_
functions of ocaml-gettext. So there are now new strings to translate in
fr.po. 

Fred (or any other translator), be careful that in strings having C-like
patterns (%s, %d, ...), one should keep the same pattern order. For more
information, see:
  http://webperso.easyconnect.fr/gildor/ocaml-gettext/reference-manual/ch03s03.html#ftn.printf-strings

Best wishes,
d.
--

-- 
pub  1024D/A3AD7A2A 2004-10-03 David MENTRE <dmentre <at> linux-france.org>
 5996 CC46 4612 9CA4 3562  D7AC 6C67 9E96 A3AD 7A2A
Permalink | Reply | 0 comments |
headers
David MENTRE | 5 Feb 2006 16:58
Favicon

Re: Any ideas to manipulate trees on a web page?

David MENTRE <dmentre <at> linux-france.org> writes:

> I'm trying to find a way to implement in HTML a tree folding/unfolding,
> similar to the GTK widget Tree View[1]... and I haven't many ideas. 
>
> Have you pointers on web interface to manipulate trees that you find
> nice? For example, what do you think of gmane interface[2]?

I hadn't many answers on that question. Any way, I've tried to look at
it on my own side. I've found an interesting web site with articles on
web technologies:
  http://www.alistapart.com/

On it, I've found an article that proposes a nice idea to display trees:
  http://www.alistapart.com/articles/complexdynamiclists
of which result can be seen here:
  http://www.alistapart.com/d/complexdynamiclists/order.html

What do you think of it? I'm not sure it can work on a browser without
Javascript but, except that, it seems pretty nice to me. The code is
freely re-usable.

Best wishes,
d.
--

-- 
pub  1024D/A3AD7A2A 2004-10-03 David MENTRE <dmentre <at> linux-france.org>
 5996 CC46 4612 9CA4 3562  D7AC 6C67 9E96 A3AD 7A2A
Permalink | Reply | 0 comments |
headers
David MENTRE | 6 Feb 2006 22:54
Favicon

Re: How to use a progress bar in a program loop

Hello Olivier,

Olivier Andrieu <oandrieu <at> nerim.net> writes:

> Hi David,
>
>  David MENTRE [Sunday 5 February 2006] :
>  > My program is doing lengthy computations or network access and I
>  > would like to add a progress bar showing progress. I have tried
>  > following code:
>  > 
>  > The main issue is that a gray area corresponding to the progress
>  > bar appears but the progress bar is never updated. I suppose this
>  > is because the GTK main loop is not called and the display is not
>  > refreshed.
>
> Yes.
>
>  > Is there any way to force such a refresh? 
>
> Yes, you just need to interrupt your lengthy computation regularly and
> call GTK so that it can process the events in its queue (including the
> event redawing the progess bar). You can do a single iteration of the
> GTK main loop using g_main_iteration [1].
> I use this function in one of my programs:
>
> ,----
> | let pump () =
> |   while Glib.Main.iteration false do () done
> `----
(Continue reading)

Permalink | Reply | 0 comments |
headers
Remi Vanicat | 7 Feb 2006 13:31
Picon

Re: How to use a progress bar in a program loop

2006/2/6, David MENTRE <dmentre <at> linux-france.org>:
>
> Well. In fact the lengthy update comes from network access time. I
> wanted to avoid thread issues for my relatively simple client
> application (I already have enough issues without chasing thread bugs
> ;). Maybe one day I'll redesign it with the GUI on one side and all the
> network/computation code on the other side, to allow for asynchronous
> behavior.

Note that by using equeue and the method to use equeue in lablgtk you
can make the gtk event loop to take care of yours network access time
(that is you can write your program with callback that are called when
one can read/write to the network)
Permalink | Reply | 0 comments |
headers
David MENTRE | 7 Feb 2006 19:57
Favicon

Re: Next SCM for > 0.8 releases

Hello Fred,

Frederic Lehobey <Frederic.Lehobey <at> free.fr> writes:

[ about debian SVK package backport ]
> I tried (with all the necessary dependencies) and the tests fail in
> the following way.  If you have any clue...

Fred, could you put somewhere a tarball of all the package directory
(sources, binaries, etc.) after a build failure? I would like to look at
it.

Best wishes,
d.
--

-- 
pub  1024D/A3AD7A2A 2004-10-03 David MENTRE <dmentre <at> linux-france.org>
 5996 CC46 4612 9CA4 3562  D7AC 6C67 9E96 A3AD 7A2A
Permalink | Reply | 0 comments |
headers
Felix HENRY | 7 Feb 2006 22:18
Picon
Favicon

Re: Any ideas to manipulate trees on a web page?

David MENTRE a écrit :

>Hello,
>
>I'm trying to find a way to implement in HTML a tree folding/unfolding,
>similar to the GTK widget Tree View[1]... and I haven't many ideas. 
>
>Have you pointers on web interface to manipulate trees that you find
>nice? For example, what do you think of gmane interface[2]?
>
>  
>
I think gmane interface is Ok. You can't really fold/unfold branches
with it, can you?
http://news.gmane.org/gmane.politics.organizations.demexp.fr

>This raises an architectural issue: this is the kind of interface where
>Javascript and iframes can be useful and used a lot, like for gmane. But
>such interfaces cannot be used on old browsers. Should we use a nicer
>interface, at the expense of limiting accessibility? Any idea to have a
>nice interface without requiring Javascript (of course Javascript could
>be used to improve the interface)?
>
>  
>
I am personally strongly in favor of slightly limiting accessibility
(restricting web interface to IE & firefox & Mozilla/SeaMonkey )
if this means that a nice functionality can be implemented more
easily. And I'm ready to cast a vote in demexp about it! (does it
sound like some kind of threat or what? :-) )
(Continue reading)

Permalink | Reply | 3 comments |
headers
David MENTRE | 8 Feb 2006 15:22
Picon

Re: Any ideas to manipulate trees on a web page?

2006/2/7, Felix HENRY <felix.henry <at> free.fr>:
> I think gmane interface is Ok. You can't really fold/unfold branches
> with it, can you?
> http://news.gmane.org/gmane.politics.organizations.demexp.fr

No, you can't fold/unfold branches. That's why the second interface I
proposed seems better to me. What do you think of it?

> I am personally strongly in favor of slightly limiting accessibility
> (restricting web interface to IE & firefox & Mozilla/SeaMonkey )
> if this means that a nice functionality can be implemented more
> easily. And I'm ready to cast a vote in demexp about it! (does it
> sound like some kind of threat or what? :-) )

You can threat me at will, as I'm the only developer I'll always have
the last word! :-P

Best wishes,
d.
Permalink | Reply | 2 comments |

Gmane