Hi Christophe,
Christophe Gragnic christophegrag...@gmail.com writes:
It should be possible to
find the original values from another instance of picolisp, for example.
Is it always possible?
try it:
in 1st console:
$ ~/picoLisp/p
: call
- 267631
: ^d
in 2nd console:
$ ~/picoLisp/p
:
Christophe Gragnic
christophegrag...@gmail.com writes:
On Mon, Sep 1, 2014 at 10:02 PM, Thorsten Jolitz
tjol...@gmail.com wrote:
could you elaborate on this a bit?
Sorry, I cannot give you better info that what is in the ref:
http://www.tcl.tk/man/tcl8.6/TclCmd/interp.htm#M4
thx for the
On Mon, Sep 1, 2014 at 5:52 AM, Tomas Hlavaty t...@logand.com wrote:
[…] it is unsafe by design.
[…]
even if you bind those symbols to 'prog', an attacker could set them to
the original values, which are simple numbers.
Hey, this is a very nice idea and answer to my question of safe interps.
Christophe Gragnic
christophegrag...@gmail.com writes:
Hi Christophe,
On Mon, Sep 1, 2014 at 5:52 AM, Tomas Hlavaty
Or simply call something that crashes PicoLisp, e.g.
[…]
Here comes the power of embedded interpreters, which PicoLisp
does not have.
could you elaborate on this a bit?
--
On Mon, Sep 1, 2014 at 10:02 PM, Thorsten Jolitz tjol...@gmail.com wrote:
could you elaborate on this a bit?
Sorry, I cannot give you better info that what is in the ref:
http://www.tcl.tk/man/tcl8.6/TclCmd/interp.htm#M4
chri
--
http://profgra.org/lycee/ (site pro)
Hi Christophe,
Christophe Gragnic christophegrag...@gmail.com writes:
On Sat, Aug 30, 2014 at 11:31 AM, Tomas Hlavaty t...@logand.com wrote:
Executing a script doesn't mean every line will work as expected!
`rm -fr /` can be executed, but doesn't always work ;)
You see, then you are not
On Sun, Aug 31, 2014 at 12:09 PM, Tomas Hlavaty t...@logand.com wrote:
would this clasify?
You mean «clarify»?
$ cat /dev/null
rm -fr /
^d
I executed arbitrary script while limiting its effects.
Indeed.
The most important missing part is to define, what functionality exactly
do you
Hi Christophe,
Christophe Gragnic christophegrag...@gmail.com writes:
On Sun, Aug 31, 2014 at 12:09 PM, Tomas Hlavaty t...@logand.com wrote:
would this clasify?
You mean «clarify»?
sorry, I meant classify.
Cheers,
Tomas
--
UNSUBSCRIBE: mailto:picolisp@software-lab.de?subject=Unsubscribe
Hi Christophe,
Then, the most glaring security risks are the 'call' and 'pipe'
functions, and the pipe functionalities of 'in', 'out' and 'load'. They
allow a REPL user to directly access the interlying system. If these
were disabled (can probably done on the Lisp level in the 'repl'
On Sat, Aug 30, 2014 at 8:52 AM, Alexander Burger a...@software-lab.de wrote:
Hi Christophe,
Hi Alex,
I would not disable them system-wide.
Oops. Indeed.
In fact I'm still very influenced by Tcl. Tch has an «interp» command
that allow to create, and in fact cascade, interpreters.
Untrusted
Christophe Gragnic christophegrag...@gmail.com writes:
On Fri, Aug 29, 2014 at 9:43 PM, Tomas Hlavaty t...@logand.com wrote:
that is impossible, and even contradictory! You can't allow arbitrary
functionality and disallow some functionality at the same time.
Executing a script doesn't mean
Hi Amaury,
Amaury Hernández Águila amhe...@gmail.com writes:
A Container is basically a VM, but cheaper.
kind of, but not really. You can say that in the context of your
accepted trade-offs but it is not true in general.
The downsides negligible,
like the limitation of running only a
On Sat, Aug 30, 2014 at 11:31 AM, Tomas Hlavaty t...@logand.com wrote:
Executing a script doesn't mean every line will work as expected!
`rm -fr /` can be executed, but doesn't always work ;)
You see, then you are not allowing arbitrary functionality.
Maybe I should have said:
«Execute
Hi All,
Is it hard to implement minimalist version of minipicolisp in browser ?
Like http://tryclj.com/ ?
In addition to the proposed solutions involving JavaScript versions
of PicoLisp:
Perhaps not many people are aware that standard PicoLisp comes with a
REPL in the browser GUI since many
Hi,
On 29. aug. 2014, at 06:27, H. Hirzel hannes.hir...@gmail.com wrote:
On 8/28/14, Christophe Gragnic christophegrag...@gmail.com wrote:
On Thu, Aug 28, 2014 at 9:32 PM, Jon Kleiser jon.klei...@fsat.no wrote:
Thanks to suggestions from Christophe, I have
re-structured the code,
And
Thanks a lot Alex.
PicoLisp already has everything except ease of learning!
Hi Christophe,
On Fri, Aug 29, 2014 at 8:30 AM, Alexander Burger a...@software-lab.de
wrote:
I didn't announce it much. I've never put it into a publicly accessible
application or demo, for the obviously HUGE security reasons.
Just an idea I have to tell. I guess this idea I'll describe
Alexander Burger a...@software-lab.de writes:
Hi Alex,
Is it hard to implement minimalist version of minipicolisp in browser ?
Like http://tryclj.com/ ?
In addition to the proposed solutions involving JavaScript versions
of PicoLisp:
Perhaps not many people are aware that standard
Imagine the interactive PicoLisp web tutorials that could be written if
there would actually be a safe PicoLisp interpreter as proposed -
thats a nice idea.
Or would it suffice to define the tutorial functions and start a
server that only allows these functions and nothing else?
check out
I have been working on collaborative and interactive software development
for the past year. I can build a particular solution for PicoLisp (I had
been working with Common Lisp and newLISP). The safe execution environment
is achieved by running the code in a Docker container.
I could modify a
How do I quote someone? (I'm not that social and I've never participated in
a mailing list before, do I just copy and paste and add the ?)
Christophe Gragnic,
If you use Docker containers, as with my proposed solution, you can do
whatever you want with the container (a mini virtual machine) and
On Fri, Aug 29, 2014 at 6:45 PM, Amaury Hernández Águila
amhe...@gmail.com wrote:
How do I quote someone? (I'm not that social and I've never participated in
a mailing list before, do I just copy and paste and add the ?)
It's just what email clients do (including gmail, be it online, android
Alright, let me try:
It's just what email clients do (including gmail, be it online, android
app…).
Note that you just quoted me at the end. Maybe you just have to
click somewhere to avoid what is called «top posting» (posting a message
with the answer before the email where the question is).
Hi Amaury,
Amaury Hernández Águila amhe...@gmail.com writes:
[...]
The safe
execution environment is achieved by running the code in a Docker
container.
what do you mean by safe? It's certainly not secure.
Using VM like Alex suggests is better.
Cheers,
Tomas
--
UNSUBSCRIBE:
Hi Christophe
Christophe Gragnic christophegrag...@gmail.com writes:
The idea here is not access to the REPL, but (quote from the Tcl ref):
«safe to execute an arbitrary script from your worst enemy without
fear of that script damaging the enclosing application or the rest of
your computing
On Fri, Aug 29, 2014 at 9:43 PM, Tomas Hlavaty t...@logand.com wrote:
that is impossible, and even contradictory! You can't allow arbitrary
functionality and disallow some functionality at the same time.
Executing a script doesn't mean every line will work as expected!
`rm -fr /` can be
The safe
execution environment is achieved by running the code in a Docker
container.
what do you mean by safe? It's certainly not secure.
Okay, there's a Host machine that is running all the Docker containers
(also called Jails). When a user starts a session, a Container gets
created.
Maybe not with Emscripten.
On August 28, 2014 7:41:12 PM CEST, Mike Pechkin mike.pech...@gmail.com wrote:
hi,
Is it hard to implement minimalist version of minipicolisp in browser ?
Like http://tryclj.com/ ?
Mike
--
Skickat från min Android-telefon med K-9 E-post. Ursäkta min fåordighet.
The 64 bit version of picolisp can be ported to any machine. There
is an existing emulator that generates C code, another emulator that
generated Javascript would be cool!
-Michel
On Thu, Aug 28, 2014 at 10:41 AM, Mike Pechkin mike.pech...@gmail.com wrote:
hi,
Is it hard to implement
Hi Mike,
I would also be interested in minipicolisp running under Emscripten.
In the meantime, have you seen Jon Kleiser's EmuLisp:
http://folk.uio.no/jkleiser/pico/emuLisp/console.html ?
On Thu, Aug 28, 2014 at 1:41 PM, Mike Pechkin mike.pech...@gmail.com wrote:
hi,
Is it hard to implement
On Thu, Aug 28, 2014 at 7:53 PM, Jakob Eriksson ja...@aurorasystems.eu wrote:
Is it hard to implement minimalist version of minipicolisp in browser ?
Like http://tryclj.com/ ?
Hi Mike.
There is EmuLisp, a JS implementation by Jon Kleiser.
It is not advertised much on the official PicoLisp
Hi,
The Home page and Console of my EmuLisp that Christophe mentions, relates
to the first version of EmuLisp, which may now be regarded as obsolete. Thanks
to suggestions from Christophe, I have re-structured the code, corrected some
errors, and implemented a few new functions (more coming).
On Thu, Aug 28, 2014 at 9:32 PM, Jon Kleiser jon.klei...@fsat.no wrote:
Thanks to suggestions from Christophe, I have
re-structured the code,
And removed some trailing whitespace! (more to come (crossing fingers)).
corrected some errors,
and implemented a few new functions (more coming).
On 8/28/14, Christophe Gragnic christophegrag...@gmail.com wrote:
On Thu, Aug 28, 2014 at 9:32 PM, Jon Kleiser jon.klei...@fsat.no wrote:
Thanks to suggestions from Christophe, I have
re-structured the code,
And removed some trailing whitespace! (more to come (crossing fingers)).
corrected
34 matches
Mail list logo
