Re: [CODE4LIB] more on MARC char encoding: Now we're about ISO_2709 and MARC21
Although, if you are using non-US style QWERTY keyboards, Key Curry may not be appropriate. At the moment we develop keyboard layouts using Key Curry, KeymanWeb and a web based input system that is part of wikipedia. These approaches tend to fall over on mobile devices, but there are some interesting developments going on in that area. Andrew On Friday, 20 April 2012, Peter Noerr pno...@museglobal.com wrote: On the matter of input of characters, the following email from the Unicode list may be of interest to those working through or developing a web UI. Note that Key Curry is a work-in-progress, and has received a fair bit of it doesn't have comment on the Unicode list. But it is a good basis. Peter -- From: unicode-bou...@unicode.org on behalf of Ed Trager [ ed.tra...@gmail.com] Sent: Tuesday, April 17, 2012 2:41 PM To: Unicode Mailing List Subject:Key Curry : Attempting to make it easy to type world languages and orthographies on the web A long time in the making, I am finally making Key Curry public! Key Curry is a web application and set of web components that allows one to easily type many world languages and specialized orthographies on the web. Please check it out and provide me feedback: http://unifont.org/keycurry/ In addition to supporting major world languages and orthographies, I hope that Key Curry makes it easy for language advocates and web developers to provide support for the orthographies of minority languages -- many of which are not currently supported (or are only poorly supported) by the major operating system vendors. Under the hood, the software uses a javascript user interface framework that I wrote called Gladiator Components along with the popular jQuery javascript library as a foundation. I have used HTML 5 technologies such as localStorage to implement certain features. Currently, Key Curry appears to work well in the latest versions of Google Chrome, Firefox, and Safari on devices with standard QWERTY keyboards (e.g. laptops, desktop computers, netbooks, etc.). Recent versions of Opera and Internet Explorer version 9 appear to have bugs which limit the ability of Key Curry to operate as designed. The app is not likely to work well on older versions of any browser. I have not yet tested IE 10 on Windows 8. Although Key Curry appears to load flawlessly on the very few Android and Apple iOS tablet and/or mobile devices that I have dabbled with, the virtual keyboards on those devices are very different from physical keyboards and I have not yet investigated that problem area at all - so don't expect it to work on your iPad or other mobile device. Constructive criticism and feedback is most welcome. I have many additional plans for Key Curry in the works - but I'll leave further commentary to another day! - Ed - -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Robert Haschart Sent: Thursday, April 19, 2012 2:23 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding: Now we're about ISO_2709 and MARC21 On 4/18/2012 12:08 PM, Jonathan Rochkind wrote: On 4/18/2012 11:09 AM, Doran, Michael D wrote: I don't believe that is the case. Take UTF-8 out of the picture, and consider the MARC-8 character set with its escape sequences and combining characters. A character such as an n with a tilde would consist of two bytes. The Greek small letter alpha, if invoked in accordance with ANSI X3.41, would consist of five bytes (two bytes for the initial escape sequence, a byte for the character, and then two bytes for the escape sequence returning to the default character set). ISO 2709 doesn't care how many bytes your characters are. The directory and offsets and other things count bytes, not characters. (which was, in my opinion, the _right_ decision, for once with marc!) How bytes translate into characters is not a concern of ISO 2709. The majority of non-7-bit-ASCII encodings will have chars that are more than one byte, either sometimes or always. This is true of MARC8 (some chars), UTF8 (some chars), and UTF16 (all chars), all of them. (It is not true of Latin-1 though, for instance, I don't think). ISO 2709 doesn't care what char encodings you use, and there's no standard ISO 2709 way to determine what char encodings are used for _data_ in the MARC record. ISO 2709 does say that _structural_ elements like field names, subfield names, the directory itself, seperator chars, etc, all need to be (essentially, over-simplifying) 7-bit-ASCII. The actual data itself is application dependent, 2709 doesn't care, and 2709 doesn't give any standard cross-2709 way to determine it. That is my conclusion at the moment, helped by all of you all in this thread, thanks! The conclusion that I came to in the work I have done
[CODE4LIB] Europeana launches Hack4Europe! 2012
Europeana launches Hack4Europe! 2012 As part of the 'Connecting Society to Culture Programme', Europeana will be inviting this year developers and designers to try out their ideas for creative re-use of the Europeana content and build applications showcasing the social and business value of open cultural data. Possible development themes include mobile apps, mash-ups, social curation, user annotations and World War One. Participants will have access to the diverse and rich Europeana collections containing over 21 million records, Europeana Search API (incl. a test key and technical documentation), digitized WW1 memorabilia collected during the Europeana WW1 road shows in spring 2012 and Europeana Linked Open Data Pilot datasets, which currently comprise about 2.5 million Europeana records available under a CC0 license. Hack4Europe! 2012 road show will include 3 hackathons in 3 different countries organised by Europeana and selected Europeana Awareness partners between 9 May and 21 June. More details on the registration to the hackathons are available at http://pro.europeana.eu/web/guest/hack4europe-2012 Each hackathon will announce at the end of the competition its own winners in 4 categories: *Best commercial viability *Greatest social impact *Most innovative app *Developers' pick Winners from the individual hackathons will be then further evaluated and one finalist per category will be invited and awarded a special prize during the Digital Agenda Assembly on 21-22 June in Brussels. Check the individual event websites for registration and more details about the organisation, categories and prizes at http://pro.europeana.eu/web/guest/hack4europe-2012 The Europeana office --- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. If you are not the named addressee you should not disseminate, distribute or copy this email. Please notify the sender immediately by email if you have received this email by mistake and delete this email from your system. P Please consider your environmental responsibility before printing this e-mail.
Re: [CODE4LIB] more on MARC char encoding
If a canned cleaner can be added in MarcEdit to deal with smart quotes/values, that will be great! Besides the smart quotes, please consider other special characters including Chemistry and mathematics symbols (these are different types of special characters, right?) To better understand the character encoding issue, can anybody point me to some resources or list like UTF8 encoded data but not in the MARC8 character set? Thanks a lot. Sophie -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Jonathan Rochkind Sent: Thursday, April 19, 2012 2:14 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding Ah, thanks Terry. That canned cleaner in MarcEdit sounds potentially useful -- I'm in a continuing battle to keep the character encoding in our local marc corpus clean. (The real blame here is on cataloger interfaces that let catalogers save data that are illegal bytes for the character set it's being saved as. And/or display the data back to the cataloger using a translation that lets them show up as expected even though they are _wrong_ for the character set being saved as. Connexion is theoretically the rolls royce of cataloger interfaces, does it do this? Gosh I hope not.) On 4/19/2012 2:20 PM, Reese, Terry wrote: Actually -- the issue isn't one of MARC8 versus UTF8 (since this data is being harvested from DSpace and is UTF8 encoded). It's actually an issue with user entered data -- specifically, smart quotes and the like. These values obviously are not in the MARC8 characterset and cause many who transform user entered data (which tend to be used by default on Windows) from XML to MARC. If you are sticking with a strickly UTF8 based system, there generally are not issues because these are valid characters. If you move them into a system where the data needs to be represented in MARC -- then you have more problems. We do a lot of harvesting, and because of that, we run into these types of issues moving data that is in UTF8, but has characters not represented in MARC8, from into Connexion and having some of that data flattened. Given the wide range of data not in the MARC8 set that can show up in UTF8, it's not a surprise that this would happen. My guess is that you could add a template to your XSLT translation that attempted to filter the most common forms of these smart quotes/values and replace them with the more standard values. Likewise, if there was a great enough need, I could provide a canned cleaner in MarcEdit that could fix many of the most common varieties of these smart quotes/values. --TR -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Jonathan Rochkind Sent: Thursday, April 19, 2012 11:13 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding If your records are really in MARC8 not UTF8, your best bet is to use a tool to convert them to UTF8 before hitting your XSLT. The open source 'yaz' command line tools can do it for Marc21. The Marc4J package can do it in java, and probably work for any MARC variant not just Marc21. Char encoding issues are tricky. You might want to first figure out if your records are really in Marc8, thus the problems, or if instead they illegally contain bad data or data in some other encoding (Latin1). Char encoding is a tricky topic, you might want to do some reading on it in general. The Unicode docs are pretty decent. On 4/19/2012 11:06 AM, Deng, Sai wrote: Hi list, I am a Metadata librarian but not a programmer, sorry if my question seems naïve. We use XSLT stylesheet to transform some harvested DC records from DSpace to MARC in MarcEdit, and then export them to OCLC. Some characters do not display correctly and need manual editing, for example: In MarcEditor Transferred to OCLC Edit in OCLC Bayes’ theorem Bayes⁰́₉ theorem Bayes' theorem ―it won‘t happen here‖ attitude ⁰́₅it won⁰́₈t happen here⁰́₆ attitude it won't happen here attitude “Generation Y” ⁰́₋Generation Y⁰́₊ Generation Y listeners‟ evaluations listeners⁰́ evaluations listeners' evaluations high school – from high school ⁰́₃ from high school – from Co₀․₅Zn₀․₅Fe₂O₄ Co²́⁰⁰́Þ²́⁵Zn²́⁰⁰́Þ²́⁵Fe²́²O²́⁴ Co0.5Zn0.5Fe2O4? μ Îơ
Re: [CODE4LIB] more on MARC char encoding
Dealing with smart quotes is easy -- dealing with chemistry and mathematics symbols is much more challenging because there is so much variety. If you sent me some example documents off list so I could put together some sample files, I could take a closer look, but couldn't make any promises outside of the general smart quote issue. --TR -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Deng, Sai Sent: Friday, April 20, 2012 6:55 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding If a canned cleaner can be added in MarcEdit to deal with smart quotes/values, that will be great! Besides the smart quotes, please consider other special characters including Chemistry and mathematics symbols (these are different types of special characters, right?) To better understand the character encoding issue, can anybody point me to some resources or list like UTF8 encoded data but not in the MARC8 character set? Thanks a lot. Sophie -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Jonathan Rochkind Sent: Thursday, April 19, 2012 2:14 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding Ah, thanks Terry. That canned cleaner in MarcEdit sounds potentially useful -- I'm in a continuing battle to keep the character encoding in our local marc corpus clean. (The real blame here is on cataloger interfaces that let catalogers save data that are illegal bytes for the character set it's being saved as. And/or display the data back to the cataloger using a translation that lets them show up as expected even though they are _wrong_ for the character set being saved as. Connexion is theoretically the rolls royce of cataloger interfaces, does it do this? Gosh I hope not.) On 4/19/2012 2:20 PM, Reese, Terry wrote: Actually -- the issue isn't one of MARC8 versus UTF8 (since this data is being harvested from DSpace and is UTF8 encoded). It's actually an issue with user entered data -- specifically, smart quotes and the like. These values obviously are not in the MARC8 characterset and cause many who transform user entered data (which tend to be used by default on Windows) from XML to MARC. If you are sticking with a strickly UTF8 based system, there generally are not issues because these are valid characters. If you move them into a system where the data needs to be represented in MARC -- then you have more problems. We do a lot of harvesting, and because of that, we run into these types of issues moving data that is in UTF8, but has characters not represented in MARC8, from into Connexion and having some of that data flattened. Given the wide range of data not in the MARC8 set that can show up in UTF8, it's not a surprise that this would happen. My guess is that you could add a template to your XSLT translation that attempted to filter the most common forms of these smart quotes/values and replace them with the more standard values. Likewise, if there was a great enough need, I could provide a canned cleaner in MarcEdit that could fix many of the most common varieties of these smart quotes/values. --TR -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Jonathan Rochkind Sent: Thursday, April 19, 2012 11:13 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding If your records are really in MARC8 not UTF8, your best bet is to use a tool to convert them to UTF8 before hitting your XSLT. The open source 'yaz' command line tools can do it for Marc21. The Marc4J package can do it in java, and probably work for any MARC variant not just Marc21. Char encoding issues are tricky. You might want to first figure out if your records are really in Marc8, thus the problems, or if instead they illegally contain bad data or data in some other encoding (Latin1). Char encoding is a tricky topic, you might want to do some reading on it in general. The Unicode docs are pretty decent. On 4/19/2012 11:06 AM, Deng, Sai wrote: Hi list, I am a Metadata librarian but not a programmer, sorry if my question seems naïve. We use XSLT stylesheet to transform some harvested DC records from DSpace to MARC in MarcEdit, and then export them to OCLC. Some characters do not display correctly and need manual editing, for example: In MarcEditor Transferred to OCLC Edit in OCLC Bayes’ theorem Bayes⁰́₉ theorem Bayes' theorem ―it won‘t happen here‖ attitude ⁰́₅it won⁰́₈t happen here⁰́₆ attitude it won't happen here attitude “Generation Y” ⁰́₋Generation Y⁰́₊
[CODE4LIB] LYRASIS Identified as Organizational Home for ArchivesSpace
On behalf of the ArchivesSpace team, I am pleased to announce that LYRASIS will become the organizational home for the ArchivesSpace open source archives management system. The identification of LYRASIS as the organizational home for ArchivesSpace is an important step toward ensuring a sustainable future for the financial, technical, and governance life of the ArchivesSpace system. In turn, it ensures continuity for the hundreds of archives that now depend on the Archivists' Toolkit (AT) or the Archon systems to support the management of and access to archives. Engaging the ArchivesSpace user community in a new membership and governance structure will be the central factor in sustaining a vibrant software tool. LYRASIS’ demonstrated ability to foster collaboration among its member libraries and other archival institutions positions it well to support this activity. Development of the ArchivesSpace software system is slated to commence in summer 2012, with release by the end of 2013. For more information about the ArchivesSpace project, please visit http://www.archivesspace.org. About LYRASIS: Created in April 2009 by the merger of the PALINET and SOLINET library services consortia, and joined shortly thereafter by NELINET, LYRASIS is the largest regional membership organization serving libraries and information professionals in the United States. LYRASIS includes more than 1700 member institutions across the US and internationally. Though large in scale, LYRASIS is known for its local touch - fostering collaboration and cooperation among members and facilitating their success through networking and programming, innovative solutions, and significant cost savings through group purchasing for products and services. For more information, please visit http://www.lyrasis.org. For the full press release, please visit: http://forens.es/eo Mark A. Matienzo Technical Architect, ArchivesSpace http://archivesspace.org
Re: [CODE4LIB] Atlanta area digital library meetup
Ross, Well, I meant the tech side of libraries, and I guess I should have said archives and museums too. I'm interested in HOW people are doing cool things with data, or delivering services, and what tools they are using, etc. So, shorthand would stuff you'd see at code4lib. This went to a few lists, so I wanted to make a distinction that this is not focusing on teaching pedagogy, information literacy, acquisitions or similar other facets of library world, though it could be included if those are being done in a cool way with tech. I was thinking this was going to be an evening pub meetup type thing, but most of the response thus far has been from people a little too far to come out for a night, so might have to morph into something more like a regional code4lib, which I'm also interested, but a little more hesitant to spearhead. I'm fairly confident in my ability to make a reservation, show up at a bar/cafe, and talk about stuff. Less so about mini-conference organizing. Chad Chad Nelson Web Services Programmer University Library Georgia State University e: cnelso...@gsu.edu t: 404 413 2771 My Calendar From: Code for Libraries [CODE4LIB@LISTSERV.ND.EDU] on behalf of Ross Singer [rossfsin...@gmail.com] Sent: Friday, April 20, 2012 9:51 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] Atlanta area digital library meetup Hi Chad, Can you define 'digital library' in this context? -Ross. On Apr 19, 2012, at 5:05 PM, Chad Benjamin Nelson wrote: Hey Atlanta folk, Hey y'all Anyone interested in an occasional code4lib style Atlanta-area digital libraries meetup? I am! Hear what your colleagues at other institutions (or maybe even your own!) are up to, borrow and donate some ideas, and do it all in a friendly and social environment. At least, that's the idea. So, if you'd like to help (start to) organize, or just want to let me know you be interested in coming, drop me a line, cnelson17 AT gsu DOT edu or find me on twitter @bibliotechyhttp://twitter.com/#!/bibliotechy. Chad Nelson Web Services Programmer University Library Georgia State University e: cnelso...@gsu.edu t: 404 413 2771 My Calendarhttp://bit.ly/qybPLJ
Re: [CODE4LIB] more on MARC char encoding
Hi Sophie, To better understand the character encoding issue, can anybody point me to some resources or list like UTF8 encoded data but not in the MARC8 character set? That question doesn't lend itself to an easy answer. The full MARC-8 repertoire (when you include all of the alternate character sets) has over 16,000 characters. The latest version of Unicode consists of a repertoire of more than 110,000 characters. So a list of UTF8 encoded data not in the MARC8 character set, would be a pretty long list. For a more *general* understanding of character encoding issues, I would recommend the following resources: For a quick library-centric overview, Coded Character Sets: A Technical Primer for Librarians web page [1]. Included is a page on Resources on the Web, which has an emphasis on library automation and the internet environment [2]. For a good explanation about how character sets work in relational databases (as part of the more general topic of globalization/I18n), the Oracle Globalization Support Guide [3]. For all the ins and outs of Unicode, the book Unicode Explained by Jukka Korpela [4]. -- Michael [1] http://rocky.uta.edu/doran/charsets/ [2] http://rocky.uta.edu/doran/charsets/resources.html [3] http://docs.oracle.com/cd/B19306_01/server.102/b14225/toc.htm [4] http://www.amazon.com/gp/product/059610121X/ # Michael Doran, Systems Librarian # University of Texas at Arlington # 817-272-5326 office # 817-688-1926 mobile # do...@uta.edu # http://rocky.uta.edu/doran/ -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Deng, Sai Sent: Friday, April 20, 2012 8:55 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding If a canned cleaner can be added in MarcEdit to deal with smart quotes/values, that will be great! Besides the smart quotes, please consider other special characters including Chemistry and mathematics symbols (these are different types of special characters, right?) To better understand the character encoding issue, can anybody point me to some resources or list like UTF8 encoded data but not in the MARC8 character set? Thanks a lot. Sophie -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Jonathan Rochkind Sent: Thursday, April 19, 2012 2:14 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding Ah, thanks Terry. That canned cleaner in MarcEdit sounds potentially useful -- I'm in a continuing battle to keep the character encoding in our local marc corpus clean. (The real blame here is on cataloger interfaces that let catalogers save data that are illegal bytes for the character set it's being saved as. And/or display the data back to the cataloger using a translation that lets them show up as expected even though they are _wrong_ for the character set being saved as. Connexion is theoretically the rolls royce of cataloger interfaces, does it do this? Gosh I hope not.) On 4/19/2012 2:20 PM, Reese, Terry wrote: Actually -- the issue isn't one of MARC8 versus UTF8 (since this data is being harvested from DSpace and is UTF8 encoded). It's actually an issue with user entered data -- specifically, smart quotes and the like. These values obviously are not in the MARC8 characterset and cause many who transform user entered data (which tend to be used by default on Windows) from XML to MARC. If you are sticking with a strickly UTF8 based system, there generally are not issues because these are valid characters. If you move them into a system where the data needs to be represented in MARC -- then you have more problems. We do a lot of harvesting, and because of that, we run into these types of issues moving data that is in UTF8, but has characters not represented in MARC8, from into Connexion and having some of that data flattened. Given the wide range of data not in the MARC8 set that can show up in UTF8, it's not a surprise that this would happen. My guess is that you could add a template to your XSLT translation that attempted to filter the most common forms of these smart quotes/values and replace them with the more standard values. Likewise, if there was a great enough need, I could provide a canned cleaner in MarcEdit that could fix many of the most common varieties of these smart quotes/values. --TR -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Jonathan Rochkind Sent: Thursday, April 19, 2012 11:13 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] more on MARC char encoding If your records are really in MARC8 not UTF8, your best bet is to use a tool to convert them to UTF8 before hitting your XSLT. The open source 'yaz' command line tools can do it for Marc21. The Marc4J package can do it in java, and probably work for any MARC variant not just
[CODE4LIB] Omeka and CoSign
We're hoping to use our campus CoSign authentication system with Omeka, allowing campus users to log in with our campus single sign-on and (where appropriate permissions have been granted to that user ID in Omeka) getting the user to the admin pages, bypassing the Omeka login screen. Has anyone done this? If so, could you lend us some advice (or code)? Ken -- Ken Varnum Web Systems Manager E: var...@umich.edu University of Michigan LibraryT: 734-615-3287 300C Hatcher Graduate Library F: 734-647-6897 Ann Arbor, MI 48109-1190 http://www.lib.umich.edu/users/varnum
Re: [CODE4LIB] Omeka and CoSign
Hi Ken, You may get a response here, but the Omeka Google Group community offers really great support. I'd ask there as well. Ethan On Fri, Apr 20, 2012 at 12:30 PM, Varnum, Ken var...@umich.edu wrote: We're hoping to use our campus CoSign authentication system with Omeka, allowing campus users to log in with our campus single sign-on and (where appropriate permissions have been granted to that user ID in Omeka) getting the user to the admin pages, bypassing the Omeka login screen. Has anyone done this? If so, could you lend us some advice (or code)? Ken -- Ken Varnum Web Systems Manager E: var...@umich.edu University of Michigan LibraryT: 734-615-3287 300C Hatcher Graduate Library F: 734-647-6897 Ann Arbor, MI 48109-1190 http://www.lib.umich.edu/users/varnum
[CODE4LIB] SEC4LIB or Hack, Crack, and Frakk breakout sessions
At IUG I talked to a few people about security of library services and applications. Becky had mentioned doing a breakout session to discuss security at the next IUG or conference. Would anyone be interested in helping plan a breakout session and discussing security of library services and application? A recent presentation lead me to believe it would also be of great value to have a set of good practices that are very accessible to those who do not have a security, or even IT, background. Or would anyone be interested in forming an informal SEC4LIB discussion group. This would be an informal group to discuss existing security features and shortcomings of library services and applications. Ideally this would include a blend of high and low level skills and knowledge. I am personally interested in documenting known and patched vulnerabilities of current and past library software and services.
[CODE4LIB] Interest in Toronto/GTA Meetup?
Hi All, In light of seeing some of the other meetups going on, I thought cool, reminds me of the Web 2.0 meetups I used to have in Ottawa, I wondered why I hadn't heard of one in Toronto. I've been told there isn't one! However, before trying to organize one, I was wondering if there was interest in having a Toronto Meetup? Would be interested in what others think. -Cynthia
Re: [CODE4LIB] SEC4LIB or Hack, Crack, and Frakk breakout sessions
On this issue, the following paper may be of interest. It contemplates an orderly trade in exploits: http://securityevaluators.com/files/papers/0daymarket.pdf . Thank you, Al Matthews, Software Dev, Atlanta University Center From: Code for Libraries [CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Peter Murray [peter.mur...@lyrasis.org] Sent: Friday, April 20, 2012 1:47 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] SEC4LIB or Hack, Crack, and Frakk breakout sessions I remember the related discussion from last month (http://serials.infomotions.com/code4lib/archive/2012/201203/thread.html#777) -- and kudos for bringing it up again -- and I find I'm still of mixed feelings about it. Security is an important aspect of software development, no argument, but I wonder if there is something separate or distinct for libraries about the topic. What I do wonder about, though, is if there is a role for a generic-to-libraries security incident response team that would responsibly take in reports of security problems, work with vendors and/or software developers, and publish outcomes. I could see a need for such a team that was respected in our field and had contacts with people from the vendor community and FOSS projects. Peter On Apr 20, 2012, at 12:35 PM, Erin Germ wrote: At IUG I talked to a few people about security of library services and applications. Becky had mentioned doing a breakout session to discuss security at the next IUG or conference. Would anyone be interested in helping plan a breakout session and discussing security of library services and application? A recent presentation lead me to believe it would also be of great value to have a set of good practices that are very accessible to those who do not have a security, or even IT, background. Or would anyone be interested in forming an informal SEC4LIB discussion group. This would be an informal group to discuss existing security features and shortcomings of library services and applications. Ideally this would include a blend of high and low level skills and knowledge. I am personally interested in documenting known and patched vulnerabilities of current and past library software and services. -- Peter Murray Assistant Director, Technology Services Development LYRASIS peter.mur...@lyrasis.org +1 678-235-2955 1438 West Peachtree Street NW Suite 200 Atlanta, GA 30309 Toll Free: 800.999.8558 Fax: 404.892.7879 www.lyrasis.org LYRASIS: Great Libraries. Strong Communities. Innovative Answers. - ** The contents of this email and any attachments are confidential. They are intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to anyone or make copies. ** IronMail scanned this email for viruses, vandals and malicious content. ** **
Re: [CODE4LIB] SEC4LIB or Hack, Crack, and Frakk breakout sessions
Thank you for the link Al. My personal interest is not for that. It's for working with vendors to harden their services and applications, and seeing common trends. On Fri, Apr 20, 2012 at 2:03 PM, Al Matthews amatth...@auctr.edu wrote: On this issue, the following paper may be of interest. It contemplates an orderly trade in exploits: http://securityevaluators.com/files/papers/0daymarket.pdf . Thank you, Al Matthews, Software Dev, Atlanta University Center From: Code for Libraries [CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Peter Murray [peter.mur...@lyrasis.org] Sent: Friday, April 20, 2012 1:47 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] SEC4LIB or Hack, Crack, and Frakk breakout sessions I remember the related discussion from last month ( http://serials.infomotions.com/code4lib/archive/2012/201203/thread.html#777) -- and kudos for bringing it up again -- and I find I'm still of mixed feelings about it. Security is an important aspect of software development, no argument, but I wonder if there is something separate or distinct for libraries about the topic. What I do wonder about, though, is if there is a role for a generic-to-libraries security incident response team that would responsibly take in reports of security problems, work with vendors and/or software developers, and publish outcomes. I could see a need for such a team that was respected in our field and had contacts with people from the vendor community and FOSS projects. Peter On Apr 20, 2012, at 12:35 PM, Erin Germ wrote: At IUG I talked to a few people about security of library services and applications. Becky had mentioned doing a breakout session to discuss security at the next IUG or conference. Would anyone be interested in helping plan a breakout session and discussing security of library services and application? A recent presentation lead me to believe it would also be of great value to have a set of good practices that are very accessible to those who do not have a security, or even IT, background. Or would anyone be interested in forming an informal SEC4LIB discussion group. This would be an informal group to discuss existing security features and shortcomings of library services and applications. Ideally this would include a blend of high and low level skills and knowledge. I am personally interested in documenting known and patched vulnerabilities of current and past library software and services. -- Peter Murray Assistant Director, Technology Services Development LYRASIS peter.mur...@lyrasis.org +1 678-235-2955 1438 West Peachtree Street NW Suite 200 Atlanta, GA 30309 Toll Free: 800.999.8558 Fax: 404.892.7879 www.lyrasis.org LYRASIS: Great Libraries. Strong Communities. Innovative Answers. - ** The contents of this email and any attachments are confidential. They are intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to anyone or make copies. ** IronMail scanned this email for viruses, vandals and malicious content. ** **
Re: [CODE4LIB] Interest in Toronto/GTA Meetup?
Yes, Al Matthews, Software Dev, Atlanta University Center From: Code for Libraries [CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Joselito Dela Cruz [jdelac...@hodges.edu] Sent: Friday, April 20, 2012 2:06 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] Interest in Toronto/GTA Meetup? A Florida Meetup would be nice as well. Thanks, Jay Dela Cruz, MLIS Electronic Resources Librarian Hodges University | 2655 Northbrooke Drive, Naples, FL 34119-7932 (239) 598-6211 | (800) 466-8017 x 6211 | f. (239) 598-6250 jdelac...@hodges.edu | www.hodges.edu -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Cynthia Ng Sent: Friday, April 20, 2012 1:50 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: [CODE4LIB] Interest in Toronto/GTA Meetup? Hi All, In light of seeing some of the other meetups going on, I thought cool, reminds me of the Web 2.0 meetups I used to have in Ottawa, I wondered why I hadn't heard of one in Toronto. I've been told there isn't one! However, before trying to organize one, I was wondering if there was interest in having a Toronto Meetup? Would be interested in what others think. -Cynthia - ** The contents of this email and any attachments are confidential. They are intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to anyone or make copies. ** IronMail scanned this email for viruses, vandals and malicious content. ** **
Re: [CODE4LIB] Interest in Toronto/GTA Meetup?
I'm down. -nruest On 2012-04-20, at 15:28, Sarah Wiebe swi...@georgebrown.ca wrote: Hi Cynthia, I'd be interested. :) Cheers, Sarah -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Cynthia Ng Sent: April-20-12 1:50 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: [CODE4LIB] Interest in Toronto/GTA Meetup? Hi All, In light of seeing some of the other meetups going on, I thought cool, reminds me of the Web 2.0 meetups I used to have in Ottawa, I wondered why I hadn't heard of one in Toronto. I've been told there isn't one! However, before trying to organize one, I was wondering if there was interest in having a Toronto Meetup? Would be interested in what others think. -Cynthia
