Re: HMAC and timing based attacks - ticket #14445

2010-10-13 Thread Luke Plant
On Wed, 2010-10-13 at 09:44 +0100, Luke Plant wrote: > You're right. I've posted a question here: > > http://cstheory.stackexchange.com/questions/2159/creating-hmac-keys-using-a-fixed-prefix-and-a-random-string OK, we got some answers, from the theoretical angle at least. But it leaves me in th

Re: It is real to add ticket #8054 to 1.3 milestone?

2010-10-13 Thread Alex Kamedov
Hi All, I uploaded patch with tests and little improvements http://code.djangoproject.com/attachment/ticket/8054/8054-list-column.5.diff I think it ready for review. I really sorry, but I couldn't write good documentation because English isn't my own language. The maximum of my possibility in wri

Re: #6735 -- Class based generic views: call for comment

2010-10-13 Thread Roald de Vries
Hi Ben, I like your implementation, but I don't really like the class name 'View'; I would opt for 'Resource' (or 'ResourceHandle'). Why I don't like 'View': - It's a very abstract thing, it's conceptually defined as 'the thing that maps a request to a response', or something alike - Insta

Re: Translating Django's documentation

2010-10-13 Thread Jannis Leidel
On 13.10.2010, at 11:52, Ian Lewis wrote: > On Wed, Oct 13, 2010 at 4:58 PM, Jannis Leidel wrote: > > Do you have this uploaded somewhere where I can take a look at it? We will > probably be doing a translation sprint here around the end of next month and > I'd like to have an idea what might

Re: Translating Django's documentation

2010-10-13 Thread Ian Lewis
On Wed, Oct 13, 2010 at 4:58 PM, Jannis Leidel wrote: > > > The current state-of-the-art is in the somewhat-badly-named > > "community_redux" branch on my Github account: > > http://github.com/jacobian/djangoproject.com/tree/community_redux, and > > I would *gladly* take input and/or patches into

Re: HMAC and timing based attacks - ticket #14445

2010-10-13 Thread Luke Plant
On Wed, 2010-10-13 at 15:59 +1300, Nick Phillips wrote: > > Since we are effectively using > > SHA1(different_fixed_string_for_each_application + SECRET_KEY) as the > > key, it isn't obvious to me that using > > SHA1(entirely_different_random_string_for_each_application) is really > > any differen

Re: Translating Django's documentation

2010-10-13 Thread Jannis Leidel
On 13.10.2010, at 04:56, Jacob Kaplan-Moss wrote: > On Tue, Oct 12, 2010 at 9:32 PM, Russell Keith-Magee > wrote: >> There are a bunch of modifications that we want to make to >> docs.djangoproject.com, and providing support for other languages is >> part of those improvements. Some recent additi