#instantbird log on 09 07 2009

All times are UTC.

00:43:51 <instantbot> romain@bezut.info added attachment 238 to bug 235.
00:43:52 <instantbot> romain@bezut.info cancelled review?(florian@instantbird .org) for attachment 237 on bug 235.
00:43:54 <instantbot> romain@bezut.info requested review from florian@instantbird .org for attachment 238 on bug 235.
00:43:55 <instantbot> Bug https://bugzilla.instantbird.org/show_bug.cgi?id=235 enh, --, 0.2b1, romain, ASSI, Make the textbox auto-expandable
01:24:28 <instantbot> New Instantbird (UI) bug 236 filed by jahkae@gmail.com.
01:24:30 <instantbot> Bug https://bugzilla.instantbird.org/show_bug.cgi?id=236 enh, --, ---, nobody, UNCO, Typing Notification on the taskbar
03:29:54 --> DGMurdock has joined #instantbird
03:35:36 <DGMurdock> hey anyone
04:08:19 <instantbot> New purplexpcom - General bug 237 filed by dgmurdockiii@gmail.com.
04:08:23 <instantbot> Bug https://bugzilla.instantbird.org/show_bug.cgi?id=237 enh, --, ---, nobody, UNCO, Identi.ca
04:25:30 <-- Eventreur has quit (Connection reset by peer)
04:30:02 --> Eventreur has joined #instantbird
04:30:02 * ChanServ sets mode +o Eventreur 
04:54:20 <DGMurdockIII> 2(Eventreur2): hey what are you working on for the website now
06:26:45 <DGMurdock> wwitch one
06:26:58 <-- DGMurdock has left #instantbird ()
06:50:10 <-- flo has quit (Quit: Instantbird 0.2b1pre)
08:34:57 --> flo has joined #instantbird
08:34:58 * ChanServ sets mode +qo flo flo 
08:34:59 <instantbot> Welcome back flo, I missed you.
08:48:49 --> fqueze_ has joined #instantbird
08:48:49 * ChanServ sets mode +qo fqueze_ fqueze_ 
09:02:29 <-- DGMurdockIII has quit (Quit: http://www.2404.org the best pc gaming news • :: www.unitedservers.de ««« (Gamers.IRC) »»» gamersirc.net ::)
09:03:07 <flo> bonjour !
09:17:48 --> Mic has joined #instantbird
09:20:14 <Mic> hello
09:22:28 --> sonny has joined #instantbird
09:23:51 <flo> Mic: that idea about filtering text modifiers that use external content is interesting
09:25:08 <flo> I'm not sure using external content for a text modifier is a good idea though. If you need to fetch data from the internet for each message display, it could make instantbird look very slow
09:25:42 <Mic> hmm, not necessarily for each message display
09:26:06 <Mic> application could be some gamers who'd like to put their current rank next to their names
09:26:14 <Mic> or maybe a bad word-filtering
09:26:27 <Mic> so you just have to update once a day, a week, or even less
09:27:00 <flo> if it's just a list of words, or of numbers (ranks), you don't have anything risky to filter out
09:27:20 <flo> and the content should probably verified/filtered at the time it is fetched
09:28:48 <Mic> hopefully .. but would you rely on all extension programmers working so thoroughly?
09:29:43 <flo> yes
09:30:33 <flo> if they don't care about what they do, they are probably unlikely to use the text modifier API (which is only interesting from a performance point of view, there are lots of other (less efficient) ways to modify the content displayed in conversations)
09:31:43 <flo> we can't do anything to prevent an extension developer to damage the application by a poor extension. Mitigating that problem is the whole point of the sandbox system on the addon website
09:33:29 <Mic> Let's do it the other way: why isn't the filtering applied to added/modified nodes?
09:34:05 <flo> because the filtering removes all <img> tags, including smileys
09:40:08 <Mic> hmm, but don't you have support for differently strict filtering anyways?
09:40:23 <flo> sure
09:40:55 <flo> but even the most permissive mode would still filter out smileys (no external content should be allowed to use internal resources)
09:44:26 <Mic> I suggested setting the strictness of filtering for messages and locally added content independently if I recall that correctly
09:45:23 <Mic> images could be allowed for the latter
09:49:47 <flo> if we allow the usage of internal resources, we can allow scripts too
09:49:59 <flo> and then, I don't really see what's left to filter out
09:51:39 <Mic> I don't see the reason behind this?
09:52:41 <flo> I don't see which security you hope to gain by this, and against which kinds of attacks we are trying to protect here
09:57:01 <Mic> There's lets say and extension to hide 'bad words' which updates the list from a server frequently. This extension maybe does bad filtering or no filtering at all on this file .. what harm could a bad guy with access to the list on the server do in this case?
09:58:52 <flo> so, you are describing a broken extension that uses remote data. Whatever we do, that extension is a huge security hole, and will gain the remote attacker a complete access to the local system, not only the conversation area.
10:00:02 <flo> looking for the ways used to fetch remote data, and how it is filtered/protected is one of the most important things addon reviewers do for addons.mozilla.org
10:01:38 <Mic> hmm, why were you interested in this idea in first case when it seems to be clear as daylight that it is of no use..
10:01:50 <Mic> could have ssaved us half an hour of discussing .
10:01:57 <flo> because it wasn't clear before thinking about it ;)
10:02:31 <Mic> hehe, ok
10:06:05 <Mic> hmm, hmm .. instead of loading the file and going through all the trouble filtering, I'd do a text box where people have to paste the contents of the file and put a big red label next to it saying: "you're solely responsible for what you paste into this area" :P
10:09:08 <flo> you can also make the filtering trivially simple
10:09:45 <flo> for example, use JSON as the exchange format, and instead of "loading" it into a JS object with eval(), just use JSON.parse(). It will throw if anything is not pure data but contains code.
10:10:37 <flo> and then, if you need to insert some text into the conversation, escape HTML special characters, and you are safe.
10:11:44 <Mic> Useful tips on the chat. How I'd like to select these lines and set a sort of bookmark ;)
10:12:29 <flo> that will be possible with 0.4
10:12:32 <flo> at least, I hope so!
10:12:48 <flo> so often I'd like to mark a small portion of a conversation, add a little comment, and tags
10:12:53 <Mic> Could as well show a star or a mark on the scrollbar
10:13:10 <Mic> (Eclipse has something like that for errors and such, doesn't it)
10:13:28 <flo> a mark on the scrollbar is very hard (almost impossible) to do, because the scrollbars are native OS widgets
10:13:51 <flo> but we will find a way to highlight them :)
10:40:30 <Mitch> Make the conversation text box a table, and have one column that has clickable cell thingies.
11:04:45 --> pvagner has joined #instantbird
11:07:27 <pvagner> Guys congratulations for the new tab system.
11:08:29 <Mic> hello
11:19:08 --> Raven has joined #instantbird
11:36:01 <-- Mic has left #instantbird ()
11:38:53 <-- Raven has left #instantbird ()
12:52:34 <-- pvagner has left #instantbird ()
13:59:46 <-- flo has quit (Quit: Instantbird 0.2b1pre)
14:14:31 <-- sonny has quit (Ping timeout)
14:16:49 --> sonny has joined #instantbird
14:33:21 <-- SM0TVI has quit (Connection reset by peer)
14:34:17 --> SM0TVI has joined #instantbird
15:31:20 <-- sonny has quit (Ping timeout)
15:33:12 --> sonny has joined #instantbird
15:38:41 --> Morian_ has joined #instantbird
15:39:58 <-- Morian has quit (Ping timeout)
15:51:11 --> flo has joined #instantbird
15:51:11 * ChanServ sets mode +qo flo flo 
15:51:12 <instantbot> Welcome back flo, I missed you.
16:06:33 <instantbot> Check-in: http://hg.instantbird.org/instantbird/rev/ec1f8bf20f85 - Florian Qu?ze - Remove useless 'base' folder.
16:49:11 * Morian_ is now known as Morian
16:58:29 --> DGMurdockIII has joined #instantbird
17:33:40 <-- DGMurdockIII has quit (Quit: http://www.2404.org the best pc gaming news • :: www.unitedservers.de ««« (Gamers.IRC) »»» gamersirc.net ::)
17:52:14 --> Morian_ has joined #instantbird
17:52:59 <-- Morian has quit (Ping timeout)
18:23:11 --> idechix has joined #instantbird
18:33:23 --> DGMurdockIII has joined #instantbird
18:41:47 --> Morian__ has joined #instantbird
18:43:30 <-- Morian_ has quit (Ping timeout)
19:21:23 <-- sonny has quit (Quit: Leaving.)
19:36:59 --> sonny has joined #instantbird
20:18:07 * Morian__ is now known as Morian
20:31:08 <-- sonny has left #instantbird (Leaving.)
20:32:51 <-- chaosblade has quit (Ping timeout)
20:39:38 --> chaosblade has joined #instantbird
20:52:37 --> Mic has joined #instantbird
20:53:06 <Mic> hi
20:53:39 <flo> hey
20:55:50 <DGMurdockIII> hey
20:56:37 <DGMurdockIII> is that one pidgin fork still alive
20:58:54 <Mic> Eventreur: I ran into this (orphaned) article: https://wiki.instantbird.org/Instantbird:Creating_a_new_localization_%28Mercurial%29
21:12:45 <flo> good night
21:14:30 --> Morian_ has joined #instantbird
21:16:03 <-- Morian has quit (Ping timeout)
21:41:39 <Mic> Morian: Scrolling with middle click works in most cases
21:42:23 <Mic> "first tab of each window" might be misleading , it's "the tab that was used to open a new window"
21:43:31 <-- idechix has left #instantbird ()
21:51:09 <Morian_> ah
21:51:10 <Morian_> yes
21:51:12 <Morian_> indeed
21:51:21 <Morian_> that's what I wanted to mean :)
21:51:36 <Mic> I added a comment anyways ..
21:51:41 <Morian_> anyway the person who will fix it knows
21:51:43 <Morian_> ok
21:51:53 * Morian_ is now known as Morian
21:52:32 <Morian> I am on the same connexion as instantbot, my router has some problems, I get disconnected but not instantbot
21:52:34 <Morian> ><'
21:52:58 <Mic> I like https://wiki.instantbird.org/Instantbird:KeyFeatures
21:53:31 <Morian> lol
21:53:32 <Mic> I guess we can be glad it's an orphaned page (no other page linking to it;)
21:53:38 <Morian> I like french sentence XD
21:54:12 <Morian> in an english paragraph
21:55:03 <Morian> instantbird will have a unique bugged textbox !
21:57:41 * Morian whishes that the next patch is the good one ... it's the 7th now ...
22:00:47 --> Morian_ has joined #instantbird
22:02:02 <-- Morian has quit (Ping timeout)
22:40:16 <instantbot> romain@bezut.info added attachment 240 to bug 235.
22:40:17 <instantbot> romain@bezut.info cancelled review?(florian@instantbird .org) for attachment 239 on bug 235.
22:40:19 <instantbot> romain@bezut.info requested review from florian@instantbird .org for attachment 240 on bug 235.
22:40:20 <instantbot> Bug https://bugzilla.instantbird.org/show_bug.cgi?id=235 enh, --, 0.2b1, romain, ASSI, Make the textbox auto-expandable
22:41:32 <Morian_> OMG a good idea in firefox 3.7 !
22:41:43 <Morian_> new tabs are opened right after the current one
22:42:03 <Morian_> I won't have to scroll my 50+ tabs to have the new ones :-D
22:42:49 <Mic> :)
22:43:02 <Mic> good night
22:43:07 <Morian_> night !
22:43:10 <-- Mic has left #instantbird ()
23:44:40 --> instantbot has joined #instantbird
23:44:40 topic changed by gravel.mozilla.org to "Ask questions about Instantbird here. Official website: http://www.instantbird.com. Latest release: 0.2a1. Read http://blog.instantbird.org/. Nightly builds are at http://ftp.instantbird.com/instantbird/nightly/latest-trunk/ (for testing purpose only)."
23:44:40 * ChanServ sets mode +v instantbot 
23:45:05 * Morian_ is now known as Morian