LiveCode Forums

richmond62 wrote: ↑

Mon Apr 22, 2024 7:09 pm

It is interesting to note that somebody else, somewhere else, sorted out that problem in a matter of about 90 minutes.

You can do the same.

For anyone affected by this, all you need to do is create an image object before using a painting tool to paint into it.

Sounds like incomplete tool implementation.

I can read everything I type. Physical access= root.

The question is, can the bad guys read it?

What I mean is, using HTTP/HTTPS protocols makes it easy to debug using tools like Proxyman and Charles Proxy. However, I haven't found a tool that can read data streams when using port 22. Even with Wireshark, analysis is only possible up to the exchange of public and private keys. The encryption ...

richmond62 wrote: ↑

Sun Apr 21, 2024 9:00 pm

that makes the mods to the revMenubar stack after it's been instantiated

That is exactly what I am trying to avoid,

Why?

Many years ago I wrote a stack to modify the revMenBar stack on the fly to make it horizontal, vertical, black, blue and sky-blue-pink. The revMenuBar is generated from a script-only stack: I should like to have a way where end-users of the LC IDE can modify the appearance of the revMenuBar so that...

That is part of what I meant. But, just as a script-only stack can create another stack with lots of controls, I want to know if one can reverse the process where a "stack with lots of controls" can be saved as a script-only stack in such a fashion that on that script-only stack being opened inwith...

keliko wrote: ↑

Sun Apr 21, 2024 5:46 am

Using HTTP protocol (port 80) can be easily intercepted with tools like Proxyman or Charles. I prefer using port 22 because LiveCode does not have an `ssh()` command, so I use PuTTY.

LiveCode supports HTTPS, the most common solution for secure file retrieval and API calls.

LiveCode has a pretty good reputation for maintaining backward compatibility.

How much of the information in the Lessons has been invalidated by changes in later versions?

In my experience, on the rare occasion I spot one I just report it and the lesson gets updated in a reasonable time frame.

I like that suggestion. Elevating this to a Lesson stands a better chance of helping new systems designers adopt industry practices.

Anton, please help me understand the scope of risk. The request is to shorten the length of time in which a decrypted variable remains in memory. It's understood that the duration cannot be zero, since the unencrypted form must be used during at least one moment. A potential attacker would need phys...

SparkOut wrote: ↑

Mon Apr 15, 2024 8:09 am

That wasn't what I was answering. Windows uses volume names for drive referencing (by humans). LiveCode returns a resolved file path on Windows which invariably has a drive letter.

Yes, that was my concern about the solution the OP is considering.

SparkOut wrote: ↑

Sun Apr 14, 2024 12:00 am

Windows has always used volume names. Those volumes may or may not be assigned a drive letter.

In file paths, such as the value returned from "the long name of this stack"?

Does Windows now identify volumes by name rather than letter designation?

Vendor lock-in is desirable to shareholders, but not to customers, particularly enterprise. AppleTalk was dropped in favor of TCP long ago. AOL, CompuServe, GENIE, eWorld...all gave way to the open web. Even today's social media is diversifying, with the closest thing to an emerging common ground be...

The product name? That was the pattern at the time. Apple bundled useful tools, but in those days intentionally stopped short of making truly feature-rich apps, leaving the market open for third parties. It was a new platform and Apple made their money on hardware, so they worked hard to bring in th...