Tiny Core Base > Release Candidate Testing

Core v6.2rc2

<< < (4/8) > >>

Juanito:
does this still happen if your firefox extension is not loaded?

As mentioned elsewhere the vlc recompile is in the maintainers task queue.

coreplayer2:
Since previously mentioned re wbar disappearing,  after a full system update (dep's and extensions) I no longer experience this anomaly

I think it's safe to assume it is caused by outdated extensions



Sent from my iPhone using Tapatalk

nitram:

--- Quote from: nitram on April 26, 2015, 09:51:40 PM ---- Apps > Maintenance > Md5 Checking: Many users probably check their entire install, not just select extensions. Would be great if there was a select all checkbox and any problematic md5 checks were flagged in red or yellow text, rather than scrolling a long list of black and white OKs.

- Dependencies > Update .dep files: Painfully slow to update. Takes ~10 minutes to complete while Apps window blanks with hourglass cursor. Shouldn't this be completed within a few seconds or a minute? Conky shows <10% CPU usage (800MHz system), some network activity, good wired DSL connection, not performing any background tasks and system otherwise runs great. Optional folder has 409 files/120MB and OnDemand list 10 items. Apps window usually redraws itself when completed, otherwise Alt-Tab between applications redraws Apps window contents.

--- End quote ---
Quick follow-up. All items noted in my earlier post remain with the exception of the following. Hope someone can address them either way - any feedback is appreciated.

Regarding the two items quoted above:

- Just noticed the subtle yellowish line and FAILED flag on a failed md5 - that's great thanks. Maybe just too subtle for my ageing eyes or maybe because i'm using Xvesa.

- Dependencies > Update .dep files ran quick for me today. Tested twice and only took ~45 seconds each trial. Not sure why so slow when i reported the issue earlier. If nobody else experiences this slowness then maybe just my system. My hardware is old, limited and had just finished compiling with numerous extensions loaded. Since the initial slowness issue, i've also removed several extensions (primarily Xorg related) but the optional folder is still 371 files, 120 MB.

New item, is this a security concern? Apps > md5 Checking loads all .tcz.md5.txt files but doesn't check to ensure all extensions have an associated md5.txt file. These extensions, therefore, never get flagged or md5 checked. This obviously occurs when extensions i've compiled are copied into optional without an md5.txt file. So in theory if someone gets into a system, swaps in a compromised .tcz extension and removes the md5.txt file, no one would be the wiser. Shouldn't Apps check, flag and report missing md5.txt files?

Juanito:

--- Quote from: nitram on April 28, 2015, 08:09:10 PM ---New item, is this a security concern? Apps > md5 Checking loads all .tcz.md5.txt files but doesn't check to ensure all extensions have an associated md5.txt file. These extensions, therefore, never get flagged or md5 checked.

--- End quote ---

For me this is a good way to avoid having personal extensions continually flagged - if they don't have an md5sum, then they are ignored.

nitram:
Thanks for the response. Your point is understood but to me this issue is an oversight. Just wanted to report a potential exploit. If i knew how to program i would attempt a patch, reporting any optional folder .tcz extensions not associated with an md5.txt file, but i can't so up to you/developers whether it's worthy of addressing.

Given the choice, i typically prefer security over convenience. Probably not a big concern for the average home user, but maybe for kiosk operators, etc. Flagging missing md5.txt files wouldn't need to compromise the functionality of the .tcz extension, just ensure the end user is notified of a potential issue.

Navigation

[0] Message Index

[#] Next page

[*] Previous page