Re: Disabling the Suhosin patch by default in Debian Wheezy (Debian Testing)

[Omer Zak]

Very interesting and depressing article.
The general problem is one of securing large software packages.

On one hand, there are optional security patches for the Linux kernel.
Some of them retain their independence for a while.  Others get merged
into the stock kernel.

On the other hand, I don't remember seeing similar problems with Perl or
Python.  Somehow, they manage to incorporate all security fixes into the
standard interpreters, so there is no need for patches like PHP's
Suhosin.

Why is there a difference among PHP, Linux kernel and Perl/Python
handling of security vulnerabilities?

P.S.:  One must remember that the Free Software/Open Source nature of
all those projects allows people to at all develop and apply independent
security patches - something whose absence is overwhelming in ecosystems
like MS-Windows.

--- Omer


On Sun, 2012-02-26 at 04:07 +0200, Baruch Siach wrote:
> Hi Omer,
> 
> On Sat, Feb 25, 2012 at 11:21:38PM +0200, Omer Zak wrote:
> > Today, when I upgraded my old PC, which is running Debian Testing
> > (currently Debian Wheezy), I was informed of the following:
> > 
> > php5 (5.3.9-4) unstable; urgency=low
> > 
> >   * The Suhosin patch is now disabled in the default build.
> > 
> >   If you want to re-enable it again for your installation, you can
> >   set the option PHP5_SUHOSIN=yes in debian/rules and recompile PHP.
> > 
> >  -- Ondřej Surý   Sat, 28 Jan 2012 08:39:36 +0100
> > 
> > Does anyone know why did the packers decide to reverse the previous
> > policy of installing PHP5 with the Suhosin patch by default?
> 
> See http://lwn.net/Articles/479716/ for the full story.
> 
> baruch
> 

-- 
PHP - the language of the Vogons.
My own blog is at http://www.zak.co.il/tddpirate/

My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

libreoffice+hebrew nikud

[Arie Skliarouk]

Hi,

A friend of mine asked me for a solution to type weekly "daf-kesher" for
his boy's school. His requirements are pretty basic - all interface to be
on hebrew, basic text editing, rashi fonts, nikud, way to scan or transfer
photos from a camera and embed them into the document.

He has no prior experience with computers, so re-learning is not an issue
here.

Ubuntu with hebrew-enabled intertface and libreoffice so far fit the
requirements. So far he has not mentioned "responsa" or similar, which
would stop ubuntu approach in its tracks.

I am concerned on the nikud part, e.g. how well libreoffice supports it.
Googling shows rendering issues. The https://bugs.freedesktop.org is down
at the moment, so I could not perform more detailed analysis. Can someone
testify on the level the hebrew nikud is supported in the libreoffice?

Also, the page with nikud extension for openoffice is down:
http://extensions.services.openoffice.org/en/project/nikud
Does anyone know the where I can download up-to-date version of the
extension?

--
Arie
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Lior Kaplan]

2012/2/26 Arie Skliarouk 

> Also, the page with nikud extension for openoffice is down:
> http://extensions.services.openoffice.org/en/project/nikud
> Does anyone know the where I can download up-to-date version of the
> extension?
>

There's no newer version since tkos stopped working on this.
A backup is here:
http://mirror.hamakor.org.il/pub/mirrors/openoffice.org/extensions/Nikud-1.0.0.oxt

Kaplan
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

http://www.ubuntu.com/devices/android

[Raz]

Could it be that the underdog days are over ?

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Nadav Har'El]

On Sun, Feb 26, 2012, Arie Skliarouk wrote about "libreoffice+hebrew nikud":
> I am concerned on the nikud part, e.g. how well libreoffice supports it.
> Googling shows rendering issues. The https://bugs.freedesktop.org is down

In my experience, the quality of the niqqud rendering directly depends
on the font. For example, the free Culmus fonts, notably David and Frank
Reuhl, show niqqud very well. Note that Culmus's Frank Reuhl used to
have problems rendering niqqud, until the last Culmus release fixed
these problems.

One problem I do have with niqqud - and maybe other people can suggest a
solution - is how to type them. What I usually do is to cut-and-paste
words with niqqud from other texts (or an online dictionary). I never
figured out how to set up a keyboard mapping or something to
conveniently type niqqud.

Nadav.


-- 
Nadav Har'El|Sunday, Feb 26 2012, 
n...@math.technion.ac.il |-
Phone +972-523-790466, ICQ 13349191 |In Fortran, God is real unless declared
http://nadav.harel.org.il   |an integer.

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: http://www.ubuntu.com/devices/android

[Erez D]

any experiance with that ?

On Sun, Feb 26, 2012 at 11:44 AM, Raz  wrote:

> Could it be that the underdog days are over ?
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: http://www.ubuntu.com/devices/android

[Raz]

not yet. I need hardware.

On Sun, Feb 26, 2012 at 12:36 PM, Erez D  wrote:
> any experiance with that ?
>
> On Sun, Feb 26, 2012 at 11:44 AM, Raz  wrote:
>>
>> Could it be that the underdog days are over ?
>>
>> ___
>> Linux-il mailing list
>> Linux-il@cs.huji.ac.il
>> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: http://www.ubuntu.com/devices/android

[Erez D]

I have galaxy s2 which will probably do

do i install it on andorid or instead ?

where do i get the image from ?

On Sun, Feb 26, 2012 at 12:38 PM, Raz  wrote:

> not yet. I need hardware.
>
> On Sun, Feb 26, 2012 at 12:36 PM, Erez D  wrote:
> > any experiance with that ?
> >
> > On Sun, Feb 26, 2012 at 11:44 AM, Raz  wrote:
> >>
> >> Could it be that the underdog days are over ?
> >>
> >> ___
> >> Linux-il mailing list
> >> Linux-il@cs.huji.ac.il
> >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> >
> >
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Dotan Cohen]

2012/2/26 Arie Skliarouk :
> Hi,
>
> A friend of mine asked me for a solution to type weekly "daf-kesher" for his
> boy's school. His requirements are pretty basic - all interface to be on
> hebrew, basic text editing, rashi fonts, nikud, way to scan or transfer
> photos from a camera and embed them into the document.
>
> He has no prior experience with computers, so re-learning is not an issue
> here.
>
> Ubuntu with hebrew-enabled intertface and libreoffice so far fit the
> requirements. So far he has not mentioned "responsa" or similar, which would
> stop ubuntu approach in its tracks.
>
> I am concerned on the nikud part, e.g. how well libreoffice supports it.
> Googling shows rendering issues. The https://bugs.freedesktop.org is down at
> the moment, so I could not perform more detailed analysis. Can someone
> testify on the level the hebrew nikud is supported in the libreoffice?
>
> Also, the page with nikud extension for openoffice is down:
> http://extensions.services.openoffice.org/en/project/nikud
> Does anyone know the where I can download up-to-date version of the
> extension?
>

I use the Hebrew keymap Lyx to type Nikud. All the nikud are easy to
find, Kamatz is on Shift-ק, Patach on Shift-פ, and so forth. Just
enable it in the Keyboard settings.


-- 
Dotan Cohen

http://gibberish.co.il
http://what-is-what.com

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Mordechai Behar]

On Sun, Feb 26, 2012 at 12:11 PM, Nadav Har'El wrote:

> On Sun, Feb 26, 2012, Arie Skliarouk wrote about "libreoffice+hebrew
> nikud":
> > I am concerned on the nikud part, e.g. how well libreoffice supports it.
> > Googling shows rendering issues. The https://bugs.freedesktop.org is
> down
>
> In my experience, the quality of the niqqud rendering directly depends
> on the font. For example, the free Culmus fonts, notably David and Frank
> Reuhl, show niqqud very well. Note that Culmus's Frank Reuhl used to
> have problems rendering niqqud, until the last Culmus release fixed
> these problems.
>
> One problem I do have with niqqud - and maybe other people can suggest a
> solution - is how to type them. What I usually do is to cut-and-paste
> words with niqqud from other texts (or an online dictionary). I never
> figured out how to set up a keyboard mapping or something to
> conveniently type niqqud.
>

The DejaVu fonts also support nikkud pretty well (some nikkudim better than
others).
My only experience with nikkud was to occasionally insert a single nikkud
where necessary, and for that Insert>Special character was enough (select
Basic Hebrew in the Subset pulldown menu).


>
> Nadav.
>
>
> --
> Nadav Har'El|Sunday, Feb 26
> 2012,
> n...@math.technion.ac.il
> |-
> Phone +972-523-790466, ICQ 13349191 |In Fortran, God is real unless
> declared
> http://nadav.harel.org.il   |an integer.
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Dotan Cohen]

On Sun, Feb 26, 2012 at 12:11, Nadav Har'El  wrote:
> On Sun, Feb 26, 2012, Arie Skliarouk wrote about "libreoffice+hebrew nikud":
>> I am concerned on the nikud part, e.g. how well libreoffice supports it.
>> Googling shows rendering issues. The https://bugs.freedesktop.org is down
>
> In my experience, the quality of the niqqud rendering directly depends
> on the font. For example, the free Culmus fonts, notably David and Frank
> Reuhl, show niqqud very well. Note that Culmus's Frank Reuhl used to
> have problems rendering niqqud, until the last Culmus release fixed
> these problems.
>
> One problem I do have with niqqud - and maybe other people can suggest a
> solution - is how to type them. What I usually do is to cut-and-paste
> words with niqqud from other texts (or an online dictionary). I never
> figured out how to set up a keyboard mapping or something to
> conveniently type niqqud.
>

Like I said earlier, use the Lyx keyboard layout, not to be confused
with the LyX document processor. I use it with LibreOffice with no
issues at all. Shall I attach sample documents?



-- 
Dotan Cohen

http://gibberish.co.il
http://what-is-what.com

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Dan Kenigsberg]

On Sun, Feb 26, 2012 at 05:28:57PM +0200, Dotan Cohen wrote:
> On Sun, Feb 26, 2012 at 12:11, Nadav Har'El  wrote:
> > On Sun, Feb 26, 2012, Arie Skliarouk wrote about "libreoffice+hebrew nikud":
> >> I am concerned on the nikud part, e.g. how well libreoffice supports it.
> >> Googling shows rendering issues. The https://bugs.freedesktop.org is down
> >
> > In my experience, the quality of the niqqud rendering directly depends
> > on the font. For example, the free Culmus fonts, notably David and Frank
> > Reuhl, show niqqud very well. Note that Culmus's Frank Reuhl used to
> > have problems rendering niqqud, until the last Culmus release fixed
> > these problems.
> >
> > One problem I do have with niqqud - and maybe other people can suggest a
> > solution - is how to type them. What I usually do is to cut-and-paste
> > words with niqqud from other texts (or an online dictionary). I never
> > figured out how to set up a keyboard mapping or something to
> > conveniently type niqqud.
> >
> 
> Like I said earlier, use the Lyx keyboard layout, not to be confused
> with the LyX document processor. I use it with LibreOffice with no
> issues at all. Shall I attach sample documents?

ditto. I've been using the "lyx" layout ever since Tzafrir had incorporated it
to xkb (but not very often). They are almost sensible (you cannot ask for more
when it comes to Hebrew niqqud)... Dagesh is AltGr-Daleth, Segol is
AltGr-Samech. No mnemonics for the Hatafim, I'm afraid. So
/usr/share/X11/xkb/symbols/il comes handy when I need to type them.

Dan.

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Disabling the Suhosin patch by default in Debian Wheezy (Debian Testing)

[Amos Shapira]

I'm not on top of PHP ecosystem, but this article makes Suhosin for PHP
sound like what anti viruses are for windows - just fix the bloody core
instead of patching around its sub-par code quality.
On Feb 26, 2012 7:25 PM, "Omer Zak"  wrote:

> Very interesting and depressing article.
> The general problem is one of securing large software packages.
>
> On one hand, there are optional security patches for the Linux kernel.
> Some of them retain their independence for a while.  Others get merged
> into the stock kernel.
>
> On the other hand, I don't remember seeing similar problems with Perl or
> Python.  Somehow, they manage to incorporate all security fixes into the
> standard interpreters, so there is no need for patches like PHP's
> Suhosin.
>
> Why is there a difference among PHP, Linux kernel and Perl/Python
> handling of security vulnerabilities?
>
> P.S.:  One must remember that the Free Software/Open Source nature of
> all those projects allows people to at all develop and apply independent
> security patches - something whose absence is overwhelming in ecosystems
> like MS-Windows.
>
> --- Omer
>
>
> On Sun, 2012-02-26 at 04:07 +0200, Baruch Siach wrote:
> > Hi Omer,
> >
> > On Sat, Feb 25, 2012 at 11:21:38PM +0200, Omer Zak wrote:
> > > Today, when I upgraded my old PC, which is running Debian Testing
> > > (currently Debian Wheezy), I was informed of the following:
> > >
> > > php5 (5.3.9-4) unstable; urgency=low
> > >
> > >   * The Suhosin patch is now disabled in the default build.
> > >
> > >   If you want to re-enable it again for your installation, you can
> > >   set the option PHP5_SUHOSIN=yes in debian/rules and recompile PHP.
> > >
> > >  -- Ondřej Surý   Sat, 28 Jan 2012 08:39:36 +0100
> > >
> > > Does anyone know why did the packers decide to reverse the previous
> > > policy of installing PHP5 with the Suhosin patch by default?
> >
> > See http://lwn.net/Articles/479716/ for the full story.
> >
> > baruch
> >
>
> --
> PHP - the language of the Vogons.
> My own blog is at http://www.zak.co.il/tddpirate/
>
> My opinions, as expressed in this E-mail message, are mine alone.
> They do not represent the official policy of any organization with which
> I may be affiliated in any way.
> WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html
>
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Reminder: The Israeli 2012 Perl Workshop - 28 February 2012 (This Tuesday - Two Days from Now!)

[Shlomi Fish]

Hi all,

this is a reminder that we will hold the Israeli 2012 Perl Workshop on 28
February, 2012 (two days from now!) in Shenkar College in Ramat-Gan. Attendance
is free, but registration is required. We hope to see you there! More details
are given below.

Regards,

Shlomi Fish

[Posted to several mailing lists at once. Please only reply to one.]

## Israeli Perl Workshop 2012 - 28 February 2012

(The Hebrew text will be followed by an English one).

[סדנת הפרל הישראלית לשנת 2012](http://act.perl.org.il/ilpw2012/) תתקיים ב-28
בפברואר, 2012. זהו כנס יומי שיתקיים [במכללת שנקר
ברמת-גן](http://act.perl.org.il/ilpw2012/location.html). לעיונכם נתונה [רשימת
המצגות](http://act.perl.org.il/ilpw2012/talks) שתינתנה בסדנה, בה יהיו שני
מסלולים.

אף על פי שהכנס הוא ללא תשלום, הרי שיש צורך להירשם, אז הקדימו להירשם היום.
בנוסף, אם אתם, או חברה מסחרית אחרת שאתם מכירים מעוניינים לתת חסות לסדנה, אנא
פנו למארגניה.

פרל הינה שפת תכנות דינמית וחזקה שנמצאת תחת פיתוח פעיל, ושיש לה מאגר הרחבות פעיל
ופורה בשם [CPAN (Comprehensive Perl Archive
Network)](http://en.wikipedia.org/wiki/CPAN). [דף הבית של שוחרי הפרל
הישראליים](http://perl.org.il/) מכיל מידע נוסף וקישורים נוספים לגבי הפעילות של
חובבי השפה בישראל.

### English Version

The [Israeli Perl Workshop of 2012](http://act.perl.org.il/ilpw2012/) will take
place at 28 February, 2012. It will be a daily conference which will take place
[in Shenkar College in Ramat
Gan](http://act.perl.org.il/ilpw2012/location.html). One can view the [list of
talks](http://act.perl.org.il/ilpw2012/talks) that will be given in the
conference, where there are going to be two tracks.

Even though the conference is free-of-charge, there is a need to register, so
please register as soon as possible. In addition, if you, or a different
company that you know, are willing to sponsor the workshop, please contact is
organisers.

Perl is a dynamic and powerful programming language which is under active
developer, and which has an active and comprehensive extension repository
called [CPAN (Comprehensive Perl Archive
Network)](http://en.wikipedia.org/wiki/CPAN). [The home page of the Israeli
Perl Mongers](http://perl.org.il/) contains other information and more links
about the activity of Perl's Israeli enthusiasts.


-- 
-
Shlomi Fish   http://www.shlomifish.org/
Interview with Ben Collins-Sussman - http://shlom.in/sussman

There was one Napoleon, one George Washington, and one me!
— Big Boy Caprice in
   http://en.wikiquote.org/wiki/Dick_Tracy_%281990_film%29

Please reply to list if it's a mailing list post - http://shlom.in/reply .

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Nadav Har'El]

On Sun, Feb 26, 2012, Dan Kenigsberg wrote about "Re: libreoffice+hebrew nikud":
> ditto. I've been using the "lyx" layout ever since Tzafrir had incorporated it
> to xkb (but not very often). They are almost sensible (you cannot ask for more
> when it comes to Hebrew niqqud)... Dagesh is AltGr-Daleth, Segol is
> AltGr-Samech. No mnemonics for the Hatafim, I'm afraid. So
> /usr/share/X11/xkb/symbols/il comes handy when I need to type them.

Very nice!
I was able to enable this with the following command:

setxkbmap -option grp:switch,grp:shift_toggle,grp_led:scroll us,il ,lyx

(what an ugly command line... Even the weird "," isn't redundant...
Users of KDE or GNOME probably have a more graphical way of enabling these
options).

For me (with the above command), the niqqud is actually chosen with the shift
(either left or right, it doesn't matter), NOT with the right ALT key.
But it is indeed working well.

-- 
Nadav Har'El|Sunday, Feb 26 2012, 
n...@math.technion.ac.il |-
Phone +972-523-790466, ICQ 13349191 |Quotation, n.: The act of repeating
http://nadav.harel.org.il   |erroneously the words of another.

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Amos Shapira]

On 27 February 2012 08:39, Nadav Har'El  wrote:

> (what an ugly command line... Even the weird "," isn't redundant...
> Users of KDE or GNOME probably have a more graphical way of enabling these
> options).
>

At least on Debian Wheezy with Gnome 3:

Go to "System Settings" -> "Region and Language" -> "Layouts" (tab)

Then "+" to add the Lyx layout and you can play with the combinations of
keys to switch layouts. I haven't done this when I needed nikud for the
first time in ages a few weeks ago and instead I turned on the "3rd Level
Layout" but it's far from being as intuitive as Lyx, from what I see in
this thread.

--Amos

 [image: View my profile on LinkedIn]

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: libreoffice+hebrew nikud

[Yedidyah Bar-David]

On Sun, Feb 26, 2012 at 11:39:19PM +0200, Nadav Har'El wrote:
> On Sun, Feb 26, 2012, Dan Kenigsberg wrote about "Re: libreoffice+hebrew 
> nikud":
> > ditto. I've been using the "lyx" layout ever since Tzafrir had incorporated 
> > it
> > to xkb (but not very often). They are almost sensible (you cannot ask for 
> > more
> > when it comes to Hebrew niqqud)... Dagesh is AltGr-Daleth, Segol is
> > AltGr-Samech. No mnemonics for the Hatafim, I'm afraid. So
> > /usr/share/X11/xkb/symbols/il comes handy when I need to type them.
> 
> Very nice!
> I was able to enable this with the following command:
> 
> setxkbmap -option grp:switch,grp:shift_toggle,grp_led:scroll us,il ,lyx
> 
> (what an ugly command line... Even the weird "," isn't redundant...
> Users of KDE or GNOME probably have a more graphical way of enabling these
> options).
> 
> For me (with the above command), the niqqud is actually chosen with the shift
> (either left or right, it doesn't matter), NOT with the right ALT key.
> But it is indeed working well.

BTW, there is a similar setup for Windows, done by Sivan Toledo:
http://www.tau.ac.il/~stoledo/Tools/Keyboards/
The page also has a nice explanation and a map.
-- 
Didi


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il