You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@commons.apache.org by "dam6923 ." <da...@gmail.com> on 2013/11/29 06:26:18 UTC
[Compress] Hiring Coder
Hello,
Is there any policy in place or method already laid out for putting
bounties on certain task items? In particular, I could chip something
in for the following two tickets:
1) https://issues.apache.org/jira/browse/COMPRESS-88
2) https://issues.apache.org/jira/browse/COMPRESS-238
Both are of interest to me and have professional value, but I don't
have a lot of free time coming up and I am already using other 3rd
party libraries that are a bit clunky but fit the bill currently.
Thanks.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Compress] Hiring Coder
Posted by Phil Steitz <ph...@gmail.com>.
On 11/28/13, 9:26 PM, dam6923 . wrote:
> Hello,
>
> Is there any policy in place or method already laid out for putting
> bounties on certain task items?
You are obviously free to do whatever you want as an individual or
as part of $dayjob or other means to connect people wanting to get
paid to write code that ends up contributed here. There is no way,
however, and I don't expect there ever will be a way, to use the ASF
as an intermediary in this. I would personally see "bounty" posts
as OT for this list. You could use jobs@apache though.
Phil
> In particular, I could chip something
> in for the following two tickets:
>
> 1) https://issues.apache.org/jira/browse/COMPRESS-88
> 2) https://issues.apache.org/jira/browse/COMPRESS-238
>
> Both are of interest to me and have professional value, but I don't
> have a lot of free time coming up and I am already using other 3rd
> party libraries that are a bit clunky but fit the bill currently.
>
> Thanks.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Compress] Hiring Coder
Posted by Stefan Bodewig <bo...@apache.org>.
On 2013-11-29, dam6923 . wrote:
> I'm looking for the encryption that Windows XP provides for ZIP files.
> I believe it's the old, lame, encryption. Is that correct?
TBH, I have no idea. You may be able to tell by looking at the general
purpose bit of an encrypted entry. Bit 0 would be set when encryption
is used and bit 6 would not be set for old crypto if I read the spec
correctly.
> Right now I'm working with http://sevenzipjbind.sourceforge.net/ and
> it fits the bill but is a bit clunky.
Looks like it was using the 7Zip C++ libs under the covers so likely
doesn't implement the crypto stuff itself.
Hmm, I just saw Bear Gilles had attached some example code that does
traditional PKWare encryption to COMPRESS-88 two years ago. Somehow I
forgot about it even though I commented on it. Maybe it is about time
to incorporate it without doing the "proper API" first - no promises,
though.
Stefan
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Compress] Hiring Coder
Posted by "dam6923 ." <da...@gmail.com>.
I'm looking for the encryption that Windows XP provides for ZIP files.
I believe it's the old, lame, encryption. Is that correct? Right
now I'm working with http://sevenzipjbind.sourceforge.net/ and it fits
the bill but is a bit clunky. Is that something that could be
accepted into ASF?
As always, thanks for your input!
On Fri, Nov 29, 2013 at 2:57 AM, Stefan Bodewig <bo...@apache.org> wrote:
> On 2013-11-29, dam6923 . wrote:
>
>> Is there any policy in place or method already laid out for putting
>> bounties on certain task items? In particular, I could chip something
>> in for the following two tickets:
>
> What Phil said.
>
>> 1) https://issues.apache.org/jira/browse/COMPRESS-88
>> 2) https://issues.apache.org/jira/browse/COMPRESS-238
>
> Note that COMPRESS-88 is extremely unlikely to end up in an official ASF
> distribution anyway - the real problem is PKWARE's licensing of the
> encryption parts of the spec. This is unless you mean the WinZIP AES
> implementation or the "old encryption" rather than the strong crypto
> protocol described by PKWARE.
>
> What Compress can do is provide hooks that an implementation of
> COMPRESS-88 can be maintained outside of Compress. I plan to seriously
> get the ball rolling for Compress 2.x (which should provide said hooks
> in the ZIP package) after christmas but have too much on my plate to
> drive this right now.
>
> Stefan
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Compress] Hiring Coder
Posted by Stefan Bodewig <bo...@apache.org>.
On 2013-11-29, Bear Giles wrote:
> What are the license issues? I had looked at the legal stuff briefly
> but could have easily overlooked it since I was only looking at the
> tech note that documents their numerous versions.
Section 10 of the current APPNOTE.TXT:
10.1 The Use or Implementation in a product of APPNOTE technological
components pertaining to either strong encryption or patching
requires a separate, executed license agreement from PKWARE.
Stefan
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Compress] Hiring Coder
Posted by Bear Giles <bg...@coyotesong.com>.
I've been looking at the strong crypto side of it. I have a test file but the published spec is vague at times (unless you are in windows and can use their crypto library), not a huge hurdle but I've been busy. I should at least submit a patch that recognizes the four addl block types even if we don't do anything with them. ( I do NOT want to peek at other implementations. Cleanroom all the way.)
What are the license issues? I had looked at the legal stuff briefly but could have easily overlooked it since I was only looking at the tech note that documents their numerous versions.
Bear
Sent from my iPad
> On Nov 29, 2013, at 12:57 AM, Stefan Bodewig <bo...@apache.org> wrote:
>
>> On 2013-11-29, dam6923 . wrote:
>>
>> Is there any policy in place or method already laid out for putting
>> bounties on certain task items? In particular, I could chip something
>> in for the following two tickets:
>
> What Phil said.
>
>> 1) https://issues.apache.org/jira/browse/COMPRESS-88
>> 2) https://issues.apache.org/jira/browse/COMPRESS-238
>
> Note that COMPRESS-88 is extremely unlikely to end up in an official ASF
> distribution anyway - the real problem is PKWARE's licensing of the
> encryption parts of the spec. This is unless you mean the WinZIP AES
> implementation or the "old encryption" rather than the strong crypto
> protocol described by PKWARE.
>
> What Compress can do is provide hooks that an implementation of
> COMPRESS-88 can be maintained outside of Compress. I plan to seriously
> get the ball rolling for Compress 2.x (which should provide said hooks
> in the ZIP package) after christmas but have too much on my plate to
> drive this right now.
>
> Stefan
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Compress] Hiring Coder
Posted by Stefan Bodewig <bo...@apache.org>.
On 2013-11-29, dam6923 . wrote:
> Is there any policy in place or method already laid out for putting
> bounties on certain task items? In particular, I could chip something
> in for the following two tickets:
What Phil said.
> 1) https://issues.apache.org/jira/browse/COMPRESS-88
> 2) https://issues.apache.org/jira/browse/COMPRESS-238
Note that COMPRESS-88 is extremely unlikely to end up in an official ASF
distribution anyway - the real problem is PKWARE's licensing of the
encryption parts of the spec. This is unless you mean the WinZIP AES
implementation or the "old encryption" rather than the strong crypto
protocol described by PKWARE.
What Compress can do is provide hooks that an implementation of
COMPRESS-88 can be maintained outside of Compress. I plan to seriously
get the ball rolling for Compress 2.x (which should provide said hooks
in the ZIP package) after christmas but have too much on my plate to
drive this right now.
Stefan
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org