Re: [JPP-Devel] Virus/Spyware 'Troj/Agent-KRQ' in OpenJump 1.3 zip file

[Sunburned Surveyor]

This has been a good discussion. I think there are only (at this
point) two reasonable solutions:

(1) Keep using the batch file.
(2) Code a custom executable "launcher" for OpenJUMP in the C
programming language. This launcher would read a configuration file
and launch OJ in the JVM. We'd have to compile the C code for each
operating system, but we've got to maintain separate launch scripts
right now anyways.

Here is another "theoretical solution":

Write a launcher in Java that parses the configuration file and then
uses the Runtime object to execute OpenJUMP with the specified
parameters.

This approach would be easier for me to code than a launcher in C, but
I don't know if it would work. (I think it would.) The downside is
that it would require that two (2) JVM's be running for OpenJUMP (one
for the launcher and one for the actual program) unless I find a way
to shutdown the launcher. Maybe this isn't  a problem, since OJ may
continue running after the launcher's main method terminates. Here is
what the Javadoc for the Process class says:

"The subprocess is not killed when there are no more references to the
Process object, but rather the subprocess continues executing
asynchronously."

Has anyone fooled with this way of launching Java programs before?

I can try coding a Java launcher. It would probably take me a couple
days (after work or on lunch breaks). A launcher in C will take me a
week or two.

The Sunburned Surveyor

On Mon, Sep 14, 2009 at 11:11 PM, Rahkonen Jukka
 wrote:
> Hi,
>
> For a user like me who must always edit openjump.bat file manually at least 
> for adding proxy settings OJ.exe does not give much extra. It would be nice 
> if program launcher had some kind of configuration assistant for setting 
> proxy and Java settings and perhaps logging level as well.
>
> -Jukka Rahkonen-
>
>> -Alkuperäinen viesti-
>> Lähettäjä: Stefan Steiniger [mailto:sst...@geo.uzh.ch]
>> Lähetetty: 15. syyskuuta 2009 8:40
>> Vastaanottaja: OpenJump develop and use
>> Aihe: Re: [JPP-Devel] Virus/Spyware 'Troj/Agent-KRQ' in
>> OpenJump 1.3 zip file
>>
>> thanks for the analysis Ede and the comments (Larry et al).
>> Not sure what we are going to do - as I think the risk of a
>> virus is probably small. The question is how to check that
>> properly (with minimal effort ;) A network sniffer?
>>
>> btw. for the earlier versions of OJ.exe we used jsmooth
>> already. But, as others pointed out: Then we can not use the
>> *.bat file for configuration, which is really nice right now.
>> Setting up a proper ini system is something above my skills
>> by now... unfortunately
>>
>> my 2 cents (although a bit biased, avoiding to make a new
>> release ;) stefan
>>
>> Larry Becker schrieb:
>> > I believe the Manifest currently being generated includes
>> all of the
>> > lib entries.  You can run the jar directly, but there is still the
>> > issue of the "-properties" and "-plug-in-directory" command line
>> > parameters, not to mention the "-Xms512M", etc. Java OPTS.
>> >
>> > I can build an executable "batch file runner" using AutoIt,
>> but some
>> > virus programs will flag it too for the same reasons
>> already mentioned.
>> > On the other hand, SkyJUMP uses a modified version of the Eclipse
>> > runner app, which is (theoretically) cross platform.
>> However the ini
>> > file it uses gives far less control over options than some
>> users would
>> > like.  It would seem that there is no perfect, or even good
>> solution
>> > for launching Java apps.
>> >
>> > regards,
>> > Larry
>> >
>> > On Mon, Sep 14, 2009 at 11:02 AM, > > > wrote:
>> >
>> >     well,
>> >
>> >     it is a tradeoff,
>> >
>> >     pro is the execution of the batch file which allows to
>> change the
>> >     runtime environment startup variables (even after the
>> startup exe is
>> >     already created)
>> >     con is the probable false detection because a windows
>> binary tries to
>> >     start a batch file ...
>> >
>> >     What is really needed is a configurable launcher.
>> Recent java runtime
>> >     environments setup windows and others to execute jars
>> if a correct
>> >     manifest file is included. Maybe we should stop using
>> platform specific
>> >     workarounds to build classpaths and add memory
>> variables and implement
>> >     this in a pure java launcher?
>> >
>> >     ... ede
>> >
>> >
>> >     On 14.09.2009 17:07, Sunburned Surveyor wrote:
>> >      > This really stinks.
>> >      >
>> >      > Has anyone tried a program like JSmooth?
>> >      >
>> >      > http://jsmooth.sourceforge.net/
>> >      >
>> >      > Or Janel?
>> >      >
>> >      > http://www.redskaper.com/Janel.jsp
>> >      >
>> >      > I know just enough C programming to be really
>> dangerous. In the worst
>> >      > case scenario I could try whipping up a native
>> launcher for OJ. I'd
>> >      > probably try it first on Linux, and then on MS Windows.
>> >      >
>> >      > The Sunburned Surveyor
>> >      >

Re: [JPP-Devel] Virus/Spyware 'Troj/Agent-KRQ' in OpenJump 1.3 zip file

[Sunburned Surveyor]

Javadoc for the Process class:

http://java.sun.com/j2se/1.4.2/docs/api/java/lang/Process.html

Javadoc for the Runtime class:

http://java.sun.com/j2se/1.4.2/docs/api/java/lang/Runtime.html

SS

On Tue, Sep 15, 2009 at 8:41 AM, Sunburned Surveyor
 wrote:
> This has been a good discussion. I think there are only (at this
> point) two reasonable solutions:
>
> (1) Keep using the batch file.
> (2) Code a custom executable "launcher" for OpenJUMP in the C
> programming language. This launcher would read a configuration file
> and launch OJ in the JVM. We'd have to compile the C code for each
> operating system, but we've got to maintain separate launch scripts
> right now anyways.
>
> Here is another "theoretical solution":
>
> Write a launcher in Java that parses the configuration file and then
> uses the Runtime object to execute OpenJUMP with the specified
> parameters.
>
> This approach would be easier for me to code than a launcher in C, but
> I don't know if it would work. (I think it would.) The downside is
> that it would require that two (2) JVM's be running for OpenJUMP (one
> for the launcher and one for the actual program) unless I find a way
> to shutdown the launcher. Maybe this isn't  a problem, since OJ may
> continue running after the launcher's main method terminates. Here is
> what the Javadoc for the Process class says:
>
> "The subprocess is not killed when there are no more references to the
> Process object, but rather the subprocess continues executing
> asynchronously."
>
> Has anyone fooled with this way of launching Java programs before?
>
> I can try coding a Java launcher. It would probably take me a couple
> days (after work or on lunch breaks). A launcher in C will take me a
> week or two.
>
> The Sunburned Surveyor
>
> On Mon, Sep 14, 2009 at 11:11 PM, Rahkonen Jukka
>  wrote:
>> Hi,
>>
>> For a user like me who must always edit openjump.bat file manually at least 
>> for adding proxy settings OJ.exe does not give much extra. It would be nice 
>> if program launcher had some kind of configuration assistant for setting 
>> proxy and Java settings and perhaps logging level as well.
>>
>> -Jukka Rahkonen-
>>
>>> -Alkuperäinen viesti-
>>> Lähettäjä: Stefan Steiniger [mailto:sst...@geo.uzh.ch]
>>> Lähetetty: 15. syyskuuta 2009 8:40
>>> Vastaanottaja: OpenJump develop and use
>>> Aihe: Re: [JPP-Devel] Virus/Spyware 'Troj/Agent-KRQ' in
>>> OpenJump 1.3 zip file
>>>
>>> thanks for the analysis Ede and the comments (Larry et al).
>>> Not sure what we are going to do - as I think the risk of a
>>> virus is probably small. The question is how to check that
>>> properly (with minimal effort ;) A network sniffer?
>>>
>>> btw. for the earlier versions of OJ.exe we used jsmooth
>>> already. But, as others pointed out: Then we can not use the
>>> *.bat file for configuration, which is really nice right now.
>>> Setting up a proper ini system is something above my skills
>>> by now... unfortunately
>>>
>>> my 2 cents (although a bit biased, avoiding to make a new
>>> release ;) stefan
>>>
>>> Larry Becker schrieb:
>>> > I believe the Manifest currently being generated includes
>>> all of the
>>> > lib entries.  You can run the jar directly, but there is still the
>>> > issue of the "-properties" and "-plug-in-directory" command line
>>> > parameters, not to mention the "-Xms512M", etc. Java OPTS.
>>> >
>>> > I can build an executable "batch file runner" using AutoIt,
>>> but some
>>> > virus programs will flag it too for the same reasons
>>> already mentioned.
>>> > On the other hand, SkyJUMP uses a modified version of the Eclipse
>>> > runner app, which is (theoretically) cross platform.
>>> However the ini
>>> > file it uses gives far less control over options than some
>>> users would
>>> > like.  It would seem that there is no perfect, or even good
>>> solution
>>> > for launching Java apps.
>>> >
>>> > regards,
>>> > Larry
>>> >
>>> > On Mon, Sep 14, 2009 at 11:02 AM, >> > > wrote:
>>> >
>>> >     well,
>>> >
>>> >     it is a tradeoff,
>>> >
>>> >     pro is the execution of the batch file which allows to
>>> change the
>>> >     runtime environment startup variables (even after the
>>> startup exe is
>>> >     already created)
>>> >     con is the probable false detection because a windows
>>> binary tries to
>>> >     start a batch file ...
>>> >
>>> >     What is really needed is a configurable launcher.
>>> Recent java runtime
>>> >     environments setup windows and others to execute jars
>>> if a correct
>>> >     manifest file is included. Maybe we should stop using
>>> platform specific
>>> >     workarounds to build classpaths and add memory
>>> variables and implement
>>> >     this in a pure java launcher?
>>> >
>>> >     ... ede
>>> >
>>> >
>>> >     On 14.09.2009 17:07, Sunburned Surveyor wrote:
>>> >      > This really stinks.
>>> >      >
>>> >      > Has anyone tried a program like JSmooth?
>>> >      >
>>> >      > http://jsmooth.source

[JPP-Devel] It looks like the wiki is still down...

[Sunburned Surveyor]

Should we shoot a quick e-mail to Jon?

SS

--
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
___
Jump-pilot-devel mailing list
Jump-pilot-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jump-pilot-devel