[Newbies] How to remove the need of the Squeak.source file

2007-03-06 Thread Hilaire Fernandes
For distribution purpose to end user, I don't want to ship the 
Squeak.source file.

How can we remove the check of the sourcefile at image start up ?

Hilaire

___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


RE: [Newbies] Where do I put it?

2007-03-06 Thread Ron Teitelbaum
Hi Blake,

I agree that you questions have general value and I'm happy to help
publicly.  I only offered to help you offline because it is clear that you
are getting something from our conversation so I wanted to remove the
distractions of the public list if it was causing any difficulty.

It does seem that there are games where the deck arrangement is so different
that it needs its own coding.  The benefit of the factory implementation
that I showed you is that you now have a deckFactory superclass to write
code that is common among all decks (like shuffle).  Ultimately the greatest
benefit of shared code comes from having more then one game that can use the
same deck.  In that case all you have to do is implement the deckType on
your game and you are good to go.

You are asking very good questions, please keep them coming!

Ron

 -Original Message-
 From: Blake 
 
 On Mon, 05 Mar 2007 08:20:39 -0800, Ron Teitelbaum [EMAIL PROTECTED]
 wrote:
 
  I just wrote all this off the top of my head and didn't test any of it,
  and I didn't include all the code you need.  I guess I'm just giving you
  a
  pattern that will work, but that leaves you plenty to learn on your
  own.  I tried to make it simple, but I've been told that I don't do that
  very well.  So if you need a more detailed explanation I can go over
  each step in my
  thinking, please don't be afraid to ask.  If you like we can continue
  this conversation offline, either way works for me.
 
 Well, I hope the questions I post have some general educational value. I'm
 building mini-Smalltalk lessons and decided to do a series on card games
 because when =I= was learning, each game defined its own deck of cards
 with its own set of code. (If suit wasn't important to a game, for
 example, the program simply wouldn't specify it.) Lotta duplicated
 read-only code. A deck of cards seemed like a good, beginning design
 question, but I began to think (overthink?) the relationships of physical
 cards, decks, the symbols used, etc.
 
 I hadn't thought of using a factory; I'll brood on that one.
 
 Thanks.
 
   ===Blake===


___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


RE: [Newbies] Squeak in commercial projects

2007-03-06 Thread Ron Teitelbaum
Hi JP,

This is not an easy question.  There are a number of things that you need to
consider.  First you need to decide how secure the update needs to be.  If
you are not worried about security then you have a much easier job and many
more options.  In general Squeak is not secure, but it is also not less
secure then many other tools that are sent to end users.

So first answer some questions.

Is your system likely to be used by people that are interested in cracking
the system?

Does your system have access to network facilities that attach to other
installations of your system?

Are you concerned that someone might try to build a patch and upload that
code to your system installations?  (i.e. spyware, worms, viruses)

Are you trying to prevent users from using features of your system without
authorization?  (i.e. Try before you buy?)

There are no easy answers but I do believe it is a very interesting
discussion.

Ron Teitelbaum
President / Principal Software Engineer
US Medical Record Specialists
www.usmedrec.com 
Squeak Cryptography Team Leader


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:beginners-
 [EMAIL PROTECTED] On Behalf Of Jens Pall
 Sent: Tuesday, March 06, 2007 2:09 AM
 To: Squeak Beginners
 Subject: [Newbies] Squeak in commercial projects
 
 Hi
 
 How can I use Squeak in a commercial closed source project (whole image)?
 
 How about upgrades? I want to be able to send an upgrade to the customer
 which only contains the changed code.
 
 Thanks,
 JP
 ___
 Beginners mailing list
 Beginners@lists.squeakfoundation.org
 http://lists.squeakfoundation.org/mailman/listinfo/beginners


___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


[Newbies] Squeak slows to start up in Windows

2007-03-06 Thread Hilaire Fernandes
I am pretty sure I read it somewhere in the Squeak mailing list why 
Squeak can be slow to start in Windows... but I cannot find the information.


I have just rename the image and executable with the same name, located 
in the same directory, but it start a bit slowly, about 20s.


What is the trick?

Hilaire

___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


RE: [Newbies] Squeak slows to start up in Windows

2007-03-06 Thread Emilio Oca
Hilaire

I think the reason is something like that Squeaks queries Windows to now if
an image is available in its directory, if there are more than one it opens
a file chooser.
If you create a shortcut and within you state the appropriate image as a
parameter the time to start-up is greatly reduced.

Emilio



 -Mensaje original-
 De: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] nombre de
 Hilaire Fernandes
 Enviado el: Martes, 06 de Marzo de 2007 12:39
 Para: beginners@lists.squeakfoundation.org
 Asunto: [Newbies] Squeak slows to start up in Windows


 I am pretty sure I read it somewhere in the Squeak mailing list why
 Squeak can be slow to start in Windows... but I cannot find the
 information.

 I have just rename the image and executable with the same name, located
 in the same directory, but it start a bit slowly, about 20s.

 What is the trick?

 Hilaire

 ___
 Beginners mailing list
 Beginners@lists.squeakfoundation.org
 http://lists.squeakfoundation.org/mailman/listinfo/beginners


___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak slows to start up in Windows

2007-03-06 Thread Brad Fuller

Hilaire Fernandes wrote:
I am pretty sure I read it somewhere in the Squeak mailing list why 
Squeak can be slow to start in Windows... but I cannot find the 
information.


I have just rename the image and executable with the same name, located 
in the same directory, but it start a bit slowly, about 20s.


What is the trick?


It's much faster if you drop the image file on a shortcut of the VM 
(.exe). You can have the shortcut on your desktop and then drag whatever 
image you'd like to start. It starts up pretty fast this way.


--
brad fuller
www.bradfuller.com
+1 (408) 799-6124
___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Jens Pall

Ron Teitelbaum wrote:

Hi JP,

This is not an easy question.  There are a number of things that you need to
consider.  First you need to decide how secure the update needs to be.  If
you are not worried about security then you have a much easier job and many
more options.  In general Squeak is not secure, but it is also not less
secure then many other tools that are sent to end users.

So first answer some questions.

Is your system likely to be used by people that are interested in cracking
the system?


Some of the end-users might try this but most of them will not. They 
just want a system that works and does its job. We are working with 
partners who are distributing our software and I know that some of them 
will try to open up the software, modify it and, in some cases, try to 
sell it as their own if it is easy to get at the source. If the source 
is not available and it is a bit hard to get access to the developing 
interface then I believe this risk is greatly reduced.



Does your system have access to network facilities that attach to other
installations of your system?


Yes. This is a distributed networked application. It lives and breathes 
on the network.



Are you concerned that someone might try to build a patch and upload that
code to your system installations?  (i.e. spyware, worms, viruses)


Well, not really. Our installations mainly run on private WAN networks 
owned by the customer but you never know what malicious internal users 
might do. We plan on being able to run this over the Internet where this 
is a major concern but will try to limit it by using secure network 
connections.



Are you trying to prevent users from using features of your system without
authorization?  (i.e. Try before you buy?)


Yes. We must be able to issue licenses for using features of the system.


There are no easy answers but I do believe it is a very interesting
discussion.


It indeed is and one that needs to be addressed if Squeak is to be 
seriously considered as a commercial vehicle. It has huge potential in 
that area if the proper hooks are in place.


As a side note I might mention that our current system is implemented in 
C++ and, if it turns out to be possible with respect to the topic of 
this thread, we are seriously considering porting it to Squeak. Croquet 
will also play a major role as the monitoring / management tool.



Ron Teitelbaum
President / Principal Software Engineer
US Medical Record Specialists
www.usmedrec.com 
Squeak Cryptography Team Leader




-Original Message-
From: [EMAIL PROTECTED] [mailto:beginners-
[EMAIL PROTECTED] On Behalf Of Jens Pall
Sent: Tuesday, March 06, 2007 2:09 AM
To: Squeak Beginners
Subject: [Newbies] Squeak in commercial projects

Hi

How can I use Squeak in a commercial closed source project (whole image)?

How about upgrades? I want to be able to send an upgrade to the customer
which only contains the changed code.

Thanks,
JP



___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


[Newbies] Uploading Patches and Enabling Features in Commercial Systems

2007-03-06 Thread Ron Teitelbaum
Hi JP,

OK before answering let me say that these are only suggestions and you are
responsible for taking suggestions as suggestions.  In other words I can not
be responsible for anything that goes wrong on your system, use my
suggestions at your own risk.

THE OPINION IS PROVIDED AS IS, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE OPINION OR THE USE OR OTHER DEALINGS IN SOFTWARE.

I'm sure all that goes without saying but now it is said.

The first question you asked was: how does a system update itself?

Here are the issues as I see them.

1) A system must be able to ensure that it is updating itself from a trusted
location.
2) A system must be able to ensure that only the trusted system can ask it
to update itself.
3) A system must be able to ensure that it can securely store an update
location.
4) A system must be able to securely change the update location.
5) All communications must be encrypted.
6) A System must be able to verify patches before applying them.
7) A System must be able to automatically load the patch.
8) A System should be able to update without restarting the application.
9) A System must be able to report back success or failure of patch
installation.
10) A System must be able to recover from a failed patch. 

Ok so basic caveat, I just made these up and I'm sure I left something out.

The second question is how you can limit functionally in your system unless
and until payment is received.

1) A system must be able to enable features for a single instance and
prevent those features from being shared to other systems.
2) A system could be able to detect features being used inappropriately
3) A system could be able to periodically check for permission (trial
software)

Ok so since I ran out of time I'll try to take each point one at a time
starting tomorrow.

Does this list help the conversation?  Can you add to the list things that
you think the system needs to do?

Ron Teitelbaum
President / Principal Software Engineer
US Medical Record Specialists
Squeak Cryptography Team Leader



 From: Jens Pall
 Sent: Tuesday, March 06, 2007 3:10 PM
 
 Ron Teitelbaum wrote:
  Hi JP,
 
  This is not an easy question.  There are a number of things that you
 need to
  consider.  First you need to decide how secure the update needs to be.
 If
  you are not worried about security then you have a much easier job and
 many
  more options.  In general Squeak is not secure, but it is also not less
  secure then many other tools that are sent to end users.
 
  So first answer some questions.
 
  Is your system likely to be used by people that are interested in
 cracking
  the system?
 
 Some of the end-users might try this but most of them will not. They
 just want a system that works and does its job. We are working with
 partners who are distributing our software and I know that some of them
 will try to open up the software, modify it and, in some cases, try to
 sell it as their own if it is easy to get at the source. If the source
 is not available and it is a bit hard to get access to the developing
 interface then I believe this risk is greatly reduced.
 
  Does your system have access to network facilities that attach to other
  installations of your system?
 
 Yes. This is a distributed networked application. It lives and breathes
 on the network.
 
  Are you concerned that someone might try to build a patch and upload
 that
  code to your system installations?  (i.e. spyware, worms, viruses)
 
 Well, not really. Our installations mainly run on private WAN networks
 owned by the customer but you never know what malicious internal users
 might do. We plan on being able to run this over the Internet where this
 is a major concern but will try to limit it by using secure network
 connections.
 
  Are you trying to prevent users from using features of your system
 without
  authorization?  (i.e. Try before you buy?)
 
 Yes. We must be able to issue licenses for using features of the system.
 
  There are no easy answers but I do believe it is a very interesting
  discussion.
 
 It indeed is and one that needs to be addressed if Squeak is to be
 seriously considered as a commercial vehicle. It has huge potential in
 that area if the proper hooks are in place.
 
 As a side note I might mention that our current system is implemented in
 C++ and, if it turns out to be possible with respect to the topic of
 this thread, we are seriously considering porting it to Squeak. Croquet
 will also play a major role as the monitoring / management tool.
 
  Ron Teitelbaum
  President / Principal Software Engineer
  US Medical Record Specialists
  www.usmedrec.com
  Squeak Cryptography Team Leader
 
 
  

Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Jens Pall

Bert Freudenberg wrote:
You could buy impara's Plopp (made in Squeak), and if you find it secure 
enough, contact them for how they did it:


http://store.eSellerate.net/s.aspx?s=STR8699827788

- Bert -



Interesting! Thanks for the tip, Bert.

JP
___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Brad Fuller

Jens Pall wrote:

Hi

How can I use Squeak in a commercial closed source project (whole image)?


Have you seen how to lock down?
http://wiki.squeak.org/squeak/518

___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Jens Pall

Brad Fuller wrote:

Jens Pall wrote:

Hi

How can I use Squeak in a commercial closed source project (whole image)?


Have you seen how to lock down?
http://wiki.squeak.org/squeak/518



Yes, I've seen bits and pieces of the lock down procedure but haven't 
been able to successfully lock an image (haven't tried very hard 
though). This is a step inn the right direction but I'm a bit concerned 
about upgrades. How would I ship an upgrade without sending the whole 
image again? Can I somehow export the new/changed bytecode and import it 
at the customer's site?


JP
___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Brad Fuller

Jens Pall wrote:

Brad Fuller wrote:

Jens Pall wrote:

Hi

How can I use Squeak in a commercial closed source project (whole 
image)?


Have you seen how to lock down?
http://wiki.squeak.org/squeak/518



Yes, I've seen bits and pieces of the lock down procedure but haven't 
been able to successfully lock an image (haven't tried very hard 
though). 


There were msgs about a month or two back in the squeak-dev ML about the 
lock down package not working correctly on 3.9. But, I think there were 
workarounds. Check the archives.


This is a step inn the right direction but I'm a bit concerned
about upgrades. How would I ship an upgrade without sending the whole 
image again? Can I somehow export the new/changed bytecode and import it 
at the customer's site?


Can you not employ a similar procedure as squeaksource? Make your own 
mini SqueakMap that points only to your repo?


Or put a friendly frontend to Monticello pointing to your repo only? 
Maybe you could also send update alerts if the person is online to 
remind them to update.


brad

___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak slows to start up in Windows

2007-03-06 Thread Blake

Takes about 3 seconds here, with image in different directory from VM.

On Tue, 06 Mar 2007 07:39:08 -0800, Hilaire Fernandes  
[EMAIL PROTECTED] wrote:


I am pretty sure I read it somewhere in the Squeak mailing list why  
Squeak can be slow to start in Windows... but I cannot find the  
information.


I have just rename the image and executable with the same name, located  
in the same directory, but it start a bit slowly, about 20s.


What is the trick?

Hilaire

___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners



___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Blake

On Tue, 06 Mar 2007 12:10:00 -0800, Jens Pall [EMAIL PROTECTED] wrote:

As a side note I might mention that our current system is implemented in  
C++ and, if it turns out to be possible with respect to the topic of  
this thread, we are seriously considering porting it to Squeak. Croquet  
will also play a major role as the monitoring / management tool.


You may be able to do a partial port, and by keeping some sections in C++,  
be able to prevent theft.

___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak slows to start up in Windows

2007-03-06 Thread Asselin Raymond
Takes about 3 seconds here, with image in different directory
from VM.

On Tue, 06 Mar 2007 07:39:08 -0800, Hilaire Fernandes  
[EMAIL PROTECTED] wrote:

 I am pretty sure I read it somewhere in the Squeak mailing list
why  
 Squeak can be slow to start in Windows... but I cannot find the  
 information.

Bonjour Hilaire,
si je me souviens bien (IIRC) the problem was that windows look
lot of places to find the .image and this is long.  If you drop the
.image directly ont the squeak.exec you’ll have a fast start, I
think.

Salut
___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Jens Pall

Brad Fuller wrote:

Jens Pall wrote:

This is a step inn the right direction but I'm a bit concerned
about upgrades. How would I ship an upgrade without sending the whole 
image again? Can I somehow export the new/changed bytecode and import 
it at the customer's site?


Can you not employ a similar procedure as squeaksource? Make your own 
mini SqueakMap that points only to your repo?


Or put a friendly frontend to Monticello pointing to your repo only? 
Maybe you could also send update alerts if the person is online to 
remind them to update.


But doesn't this imply that the source is downloaded, making it easy 
(easier) to hack the system? I could make the private Monticello 
connection secure, update the system and then delete the source... just 
thinking out loud.


JP
___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners


Re: [Newbies] Squeak in commercial projects

2007-03-06 Thread Jens Pall

Blake wrote:

On Tue, 06 Mar 2007 12:10:00 -0800, Jens Pall [EMAIL PROTECTED] wrote:

As a side note I might mention that our current system is implemented 
in C++ and, if it turns out to be possible with respect to the topic 
of this thread, we are seriously considering porting it to Squeak. 
Croquet will also play a major role as the monitoring / management tool.


You may be able to do a partial port, and by keeping some sections in 
C++, be able to prevent theft.


Can you elaborate a bit on this point? How would this prevent access to 
the Smalltalk code in the image?


JP
___
Beginners mailing list
Beginners@lists.squeakfoundation.org
http://lists.squeakfoundation.org/mailman/listinfo/beginners