Re: [pydotorg-www] Editing LocalUserGroups to include Helsinki Python
On 3/7/24 05:49, Cal Paterson wrote: Hi, I'd like to edit this page: https://wiki.python.org/moin/LocalUserGroups To reference the newly restarted Helsinki Python group, whose homepage (for the moment) is meetup.com: https://www.meetup.com/helpy-meetups/ Please could someone either make this change or allow my new account (CalPaterson) editing rights? Also, I think python.fi is dead but I'm not 100% sure so will investigate. I've had mail bounce from there at least You're now added as an editor based on the wiki name. Feel free to contribute elsewhere too :-) the wiki always needs lots of love and attention. ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
[pydotorg-www] Editing LocalUserGroups to include Helsinki Python
Hi, I'd like to edit this page: https://wiki.python.org/moin/LocalUserGroups To reference the newly restarted Helsinki Python group, whose homepage (for the moment) is meetup.com: https://www.meetup.com/helpy-meetups/ Please could someone either make this change or allow my new account (CalPaterson) editing rights? Also, I think python.fi is dead but I'm not 100% sure so will investigate. I've had mail bounce from there at least Regards, Cal Paterson ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
On 10.11.2016 14:50, Florian Ludwig wrote: >> >> >> >> Thanks. The problem appears to have been related to the hash >> value you see on the right. >> >> Please try again now. I applied this patch to the installation: >> >> http://hg.moinmo.in/moin/1.9/diff/561b7a9c2bd9/MoinMoin/ >> security/textcha.py >> >> > Works for me now, > thanks! Great ! Thanks for checking. Cheers, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Experts (#1, Nov 10 2016) >>> Python Projects, Coaching and Consulting ... http://www.egenix.com/ >>> Python Database Interfaces ... http://products.egenix.com/ >>> Plone/Zope Database Interfaces ... http://zope.egenix.com/ ::: We implement business ideas - efficiently in both time and costs ::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
> > > > Thanks. The problem appears to have been related to the hash > value you see on the right. > > Please try again now. I applied this patch to the installation: > > http://hg.moinmo.in/moin/1.9/diff/561b7a9c2bd9/MoinMoin/ > security/textcha.py > > Works for me now, thanks! Florian ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
On 09.11.2016 22:30, Florian Ludwig wrote: > 2016-11-09 22:22 GMT+01:00 Chris Angelico : > >> On Thu, Nov 10, 2016 at 8:19 AM, Florian Ludwig >> wrote: >>> Thank you very much. >>> >>> Sadly I could not edit the page as it always complains I am not correctly >>> answering the captcha: "TextCha: Wrong answer! Try again below..." >>> >>> Interestingly the captcha shortens with every try. For example: >>> >>> # on first try, answer is 2 ;) >>> l = [1,2,3]; l.remove(1); l[0] == >>> >>> # after pressing save, the captcha just looks like this: >>> l = [1,2,3]; l.remove(1); >>> >>> # and saving again it would look like: >>> l = [1,2,3]; l.re >>> >> >> Fascinating. You're not the first to report textcha issues, but you're >> the first to mention this. M-A, does this help track down what's going >> on? >> > > I experimented a little bit more and observed the http headers while trying > to edit the wiki, here an example: > >1. textcha-question: >l = [1,2,3]; del l[1]; l[0] == 1478726674f2fb6a09d140a9c28cee575a2a528191 >2. textcha-answer: >2 > > If you need anything else for debugging, please let me know. Thanks. The problem appears to have been related to the hash value you see on the right. Please try again now. I applied this patch to the installation: http://hg.moinmo.in/moin/1.9/diff/561b7a9c2bd9/MoinMoin/security/textcha.py -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Experts (#1, Nov 10 2016) >>> Python Projects, Coaching and Consulting ... http://www.egenix.com/ >>> Python Database Interfaces ... http://products.egenix.com/ >>> Plone/Zope Database Interfaces ... http://zope.egenix.com/ ::: We implement business ideas - efficiently in both time and costs ::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
On 10.11.2016 13:07, M.-A. Lemburg wrote: > On 10.11.2016 11:44, Xavier Combelle wrote: >> looks like a byte/unicode problem > > This is likely, yes. > >> I have little idea for the truncation but for the TypeError, looks like >> safe_str_equal seems the buggy one is >> a lot too much overkill, as it is very unlikely that someone would want >> to make a timing attack on captcha. >> >> So I would suggest as a quick fix to replace safe_str_equal by a classic == >> >> A long term improvement would be to log the full stack trace on all >> exceptions > > The truncation appears to be the result of this method: > > http://hg.moinmo.in/moin/1.9/file/561b7a9c2bd9/MoinMoin/security/textcha.py#l175 > > which blindly removes characters from the question in combination > with this bug: > > http://hg.moinmo.in/moin/1.9/diff/561b7a9c2bd9/MoinMoin/security/textcha.py > > (hmac.new() defaults to MD5, but the ._extract_form_values() method > removes data based on the length of an SHA1 hash) > > I guess it would be better to use a regexp for splitting off > the hash and timestamp. > > I'll apply the fix for the hmac.new() manually now. After applying the patch, the problem with the truncation appears to have gone. I was also able to successfully edit pages. Could you please also try and check ? Thanks. >> Le 10/11/2016 à 10:42, M.-A. Lemburg a écrit : >>> I checked the logs. They are full of entries like these: >>> >>> [Thu Nov 10 08:06:36 2016] [error] 2016-11-10 08:06:36,257 INFO >>> MoinMoin.security.textcha:159 TextCha: failure (u='x.x.x.x', a='van', >>> re='[Never match for cheaters]', q='What is van Rossum's fir', >>> rsn='TypeError during signature check') >>> >>> Here's the associated code: >>> >>> http://hg.moinmo.in/moin/1.9/file/561b7a9c2bd9/MoinMoin/security/textcha.py#l129 >>> >>> What's strange is the truncated question and the TypeError. >>> >>> I've put Thomas Waldmann on CC. Perhaps he can add some more >>> insights. >>> >>> Thomas: I have upgraded the moin installation to 1.9.9 and >>> we're getting lots of textcha errors since then. Questions >>> get truncated and TypeErrors appear to prevent any textcha >>> from succeeding, it seems. >>> >>> Any ideas ? >>> >>> Thanks, >> >> >> ___ >> pydotorg-www mailing list >> pydotorg-www@python.org >> https://mail.python.org/mailman/listinfo/pydotorg-www >> > -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Experts (#1, Nov 10 2016) >>> Python Projects, Coaching and Consulting ... http://www.egenix.com/ >>> Python Database Interfaces ... http://products.egenix.com/ >>> Plone/Zope Database Interfaces ... http://zope.egenix.com/ ::: We implement business ideas - efficiently in both time and costs ::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
On 10.11.2016 11:44, Xavier Combelle wrote: > looks like a byte/unicode problem This is likely, yes. > I have little idea for the truncation but for the TypeError, looks like > safe_str_equal seems the buggy one is > a lot too much overkill, as it is very unlikely that someone would want > to make a timing attack on captcha. > > So I would suggest as a quick fix to replace safe_str_equal by a classic == > > A long term improvement would be to log the full stack trace on all > exceptions The truncation appears to be the result of this method: http://hg.moinmo.in/moin/1.9/file/561b7a9c2bd9/MoinMoin/security/textcha.py#l175 which blindly removes characters from the question in combination with this bug: http://hg.moinmo.in/moin/1.9/diff/561b7a9c2bd9/MoinMoin/security/textcha.py (hmac.new() defaults to MD5, but the ._extract_form_values() method removes data based on the length of an SHA1 hash) I guess it would be better to use a regexp for splitting off the hash and timestamp. I'll apply the fix for the hmac.new() manually now. > Le 10/11/2016 à 10:42, M.-A. Lemburg a écrit : >> I checked the logs. They are full of entries like these: >> >> [Thu Nov 10 08:06:36 2016] [error] 2016-11-10 08:06:36,257 INFO >> MoinMoin.security.textcha:159 TextCha: failure (u='x.x.x.x', a='van', >> re='[Never match for cheaters]', q='What is van Rossum's fir', >> rsn='TypeError during signature check') >> >> Here's the associated code: >> >> http://hg.moinmo.in/moin/1.9/file/561b7a9c2bd9/MoinMoin/security/textcha.py#l129 >> >> What's strange is the truncated question and the TypeError. >> >> I've put Thomas Waldmann on CC. Perhaps he can add some more >> insights. >> >> Thomas: I have upgraded the moin installation to 1.9.9 and >> we're getting lots of textcha errors since then. Questions >> get truncated and TypeErrors appear to prevent any textcha >> from succeeding, it seems. >> >> Any ideas ? >> >> Thanks, > > > ___ > pydotorg-www mailing list > pydotorg-www@python.org > https://mail.python.org/mailman/listinfo/pydotorg-www > -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Experts (#1, Nov 10 2016) >>> Python Projects, Coaching and Consulting ... http://www.egenix.com/ >>> Python Database Interfaces ... http://products.egenix.com/ >>> Plone/Zope Database Interfaces ... http://zope.egenix.com/ ::: We implement business ideas - efficiently in both time and costs ::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
looks like a byte/unicode problem I have little idea for the truncation but for the TypeError, looks like safe_str_equal seems the buggy one is a lot too much overkill, as it is very unlikely that someone would want to make a timing attack on captcha. So I would suggest as a quick fix to replace safe_str_equal by a classic == A long term improvement would be to log the full stack trace on all exceptions Le 10/11/2016 à 10:42, M.-A. Lemburg a écrit : > I checked the logs. They are full of entries like these: > > [Thu Nov 10 08:06:36 2016] [error] 2016-11-10 08:06:36,257 INFO > MoinMoin.security.textcha:159 TextCha: failure (u='x.x.x.x', a='van', > re='[Never match for cheaters]', q='What is van Rossum's fir', > rsn='TypeError during signature check') > > Here's the associated code: > > http://hg.moinmo.in/moin/1.9/file/561b7a9c2bd9/MoinMoin/security/textcha.py#l129 > > What's strange is the truncated question and the TypeError. > > I've put Thomas Waldmann on CC. Perhaps he can add some more > insights. > > Thomas: I have upgraded the moin installation to 1.9.9 and > we're getting lots of textcha errors since then. Questions > get truncated and TypeErrors appear to prevent any textcha > from succeeding, it seems. > > Any ideas ? > > Thanks, ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
I checked the logs. They are full of entries like these: [Thu Nov 10 08:06:36 2016] [error] 2016-11-10 08:06:36,257 INFO MoinMoin.security.textcha:159 TextCha: failure (u='x.x.x.x', a='van', re='[Never match for cheaters]', q='What is van Rossum's fir', rsn='TypeError during signature check') Here's the associated code: http://hg.moinmo.in/moin/1.9/file/561b7a9c2bd9/MoinMoin/security/textcha.py#l129 What's strange is the truncated question and the TypeError. I've put Thomas Waldmann on CC. Perhaps he can add some more insights. Thomas: I have upgraded the moin installation to 1.9.9 and we're getting lots of textcha errors since then. Questions get truncated and TypeErrors appear to prevent any textcha from succeeding, it seems. Any ideas ? Thanks, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Experts (#1, Nov 10 2016) >>> Python Projects, Coaching and Consulting ... http://www.egenix.com/ >>> Python Database Interfaces ... http://products.egenix.com/ >>> Plone/Zope Database Interfaces ... http://zope.egenix.com/ ::: We implement business ideas - efficiently in both time and costs ::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/ http://www.malemburg.com/ On 09.11.2016 22:56, M.-A. Lemburg wrote: > On 09.11.2016 22:22, Chris Angelico wrote: >> On Thu, Nov 10, 2016 at 8:19 AM, Florian Ludwig >> wrote: >>> Thank you very much. >>> >>> Sadly I could not edit the page as it always complains I am not correctly >>> answering the captcha: "TextCha: Wrong answer! Try again below..." >>> >>> Interestingly the captcha shortens with every try. For example: >>> >>> # on first try, answer is 2 ;) >>> l = [1,2,3]; l.remove(1); l[0] == >>> >>> # after pressing save, the captcha just looks like this: >>> l = [1,2,3]; l.remove(1); >>> >>> # and saving again it would look like: >>> l = [1,2,3]; l.re >>> >> >> Fascinating. You're not the first to report textcha issues, but you're >> the first to mention this. M-A, does this help track down what's going >> on? > > Has this been happening only since yesterday or before that as > well ? I'm asking because I upgraded moin on the VM yesterday, > so it may be related to the upgrade. > ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
On 09.11.2016 22:22, Chris Angelico wrote: > On Thu, Nov 10, 2016 at 8:19 AM, Florian Ludwig wrote: >> Thank you very much. >> >> Sadly I could not edit the page as it always complains I am not correctly >> answering the captcha: "TextCha: Wrong answer! Try again below..." >> >> Interestingly the captcha shortens with every try. For example: >> >> # on first try, answer is 2 ;) >> l = [1,2,3]; l.remove(1); l[0] == >> >> # after pressing save, the captcha just looks like this: >> l = [1,2,3]; l.remove(1); >> >> # and saving again it would look like: >> l = [1,2,3]; l.re >> > > Fascinating. You're not the first to report textcha issues, but you're > the first to mention this. M-A, does this help track down what's going > on? Has this been happening only since yesterday or before that as well ? I'm asking because I upgraded moin on the VM yesterday, so it may be related to the upgrade. -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Experts (#1, Nov 09 2016) >>> Python Projects, Coaching and Consulting ... http://www.egenix.com/ >>> Python Database Interfaces ... http://products.egenix.com/ >>> Plone/Zope Database Interfaces ... http://zope.egenix.com/ ::: We implement business ideas - efficiently in both time and costs ::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
2016-11-09 22:22 GMT+01:00 Chris Angelico : > On Thu, Nov 10, 2016 at 8:19 AM, Florian Ludwig > wrote: > > Thank you very much. > > > > Sadly I could not edit the page as it always complains I am not correctly > > answering the captcha: "TextCha: Wrong answer! Try again below..." > > > > Interestingly the captcha shortens with every try. For example: > > > > # on first try, answer is 2 ;) > > l = [1,2,3]; l.remove(1); l[0] == > > > > # after pressing save, the captcha just looks like this: > > l = [1,2,3]; l.remove(1); > > > > # and saving again it would look like: > > l = [1,2,3]; l.re > > > > Fascinating. You're not the first to report textcha issues, but you're > the first to mention this. M-A, does this help track down what's going > on? > I experimented a little bit more and observed the http headers while trying to edit the wiki, here an example: 1. textcha-question: l = [1,2,3]; del l[1]; l[0] == 1478726674f2fb6a09d140a9c28cee575a2a528191 2. textcha-answer: 2 If you need anything else for debugging, please let me know. Best, Florian ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
On Thu, Nov 10, 2016 at 8:19 AM, Florian Ludwig wrote: > Thank you very much. > > Sadly I could not edit the page as it always complains I am not correctly > answering the captcha: "TextCha: Wrong answer! Try again below..." > > Interestingly the captcha shortens with every try. For example: > > # on first try, answer is 2 ;) > l = [1,2,3]; l.remove(1); l[0] == > > # after pressing save, the captcha just looks like this: > l = [1,2,3]; l.remove(1); > > # and saving again it would look like: > l = [1,2,3]; l.re > Fascinating. You're not the first to report textcha issues, but you're the first to mention this. M-A, does this help track down what's going on? ChrisA ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
Thank you very much. Sadly I could not edit the page as it always complains I am not correctly answering the captcha: "TextCha: Wrong answer! Try again below..." Interestingly the captcha shortens with every try. For example: # on first try, answer is 2 ;) l = [1,2,3]; l.remove(1); l[0] == # after pressing save, the captcha just looks like this: l = [1,2,3]; l.remove(1); # and saving again it would look like: l = [1,2,3]; l.re Any ideas? Thanks. ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Editing LocalUserGroups
On Wed, Nov 2, 2016 at 8:15 AM, Florian Ludwig wrote: > i started a user group [0] and want to add it to the LocalUserGroups page. > > Therefor I created an account on the wiki using "FlorianLudwig" as username. > > Would be great if someone could grant me access to change that page (or add > the group for me :)) > Sounds great! Go for it! ChrisA ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
[pydotorg-www] Editing LocalUserGroups
Hi there! i started a user group [0] and want to add it to the LocalUserGroups page. Therefor I created an account on the wiki using "FlorianLudwig" as username. Would be great if someone could grant me access to change that page (or add the group for me :)) Thank you in advance! [0] https://www.meetup.com/de-DE/Ruhr-py/ Best regards, Florian Ludwig ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
