mirror of
https://github.com/almet/notmyidea.git
synced 2025-04-28 19:42:37 +02:00
Change the naming of the files
This commit is contained in:
parent
13ae98e0cd
commit
16ad19a295
94 changed files with 138 additions and 151 deletions
|
@ -1,11 +1,12 @@
|
||||||
Carto Forms - First steps
|
Carto Forms - First steps
|
||||||
#########################
|
#########################
|
||||||
|
|
||||||
|
:date: 17-11-2012
|
||||||
:status: draft
|
:status: draft
|
||||||
|
|
||||||
For an introduction on carto forms, please see this blog post:
|
For an introduction on carto forms, please see this blog post:
|
||||||
http://blog.notmyidea.org/carto-forms.html (and its variant in french if you
|
https://blog.notmyidea.org/carto-forms.html (and its variant in french if you
|
||||||
prefer: http://blog.notmyidea.org/carto-forms-fr.html)
|
prefer: https://blog.notmyidea.org/carto-forms-fr.html)
|
||||||
|
|
||||||
So, let's not talk too much about what we want to do, and rather explain how we
|
So, let's not talk too much about what we want to do, and rather explain how we
|
||||||
will do it instead ;)
|
will do it instead ;)
|
86
content/incubation/le-mail-doit-mourir.rst
Normal file
86
content/incubation/le-mail-doit-mourir.rst
Normal file
|
@ -0,0 +1,86 @@
|
||||||
|
Le mail doit mourir
|
||||||
|
###################
|
||||||
|
|
||||||
|
:status: draft
|
||||||
|
:date: 2015-11-24
|
||||||
|
:headline: Le mail est un protocole qui bien établi qui souffre de nombreux
|
||||||
|
problèmes. Est-ce qu'il ne serait pas temps de préparer la suite ?
|
||||||
|
|
||||||
|
|
||||||
|
J'utilise quotidiennent le protocole email, tant bien que mal, tout en sachant
|
||||||
|
que l'ensemble de mes messages passent en clair sur le réseau pour la plupart
|
||||||
|
de mes conversations, puisque trop peu de monde utilise le chiffrement des
|
||||||
|
messages.
|
||||||
|
|
||||||
|
Et même si j'arrive à convaincre certains de mes proches à installer PGP, je ne
|
||||||
|
suis pas satisfait du résultat: les méta-données (qui contacte qui à quel
|
||||||
|
moment, et pour lui dire quoi) transitent de toute manière, elles, en clair,
|
||||||
|
à la vue de tous.
|
||||||
|
|
||||||
|
Ce problème est lié directement au protocole email: il est *necessaire* de
|
||||||
|
faire fuiter les metadonnées (au moins le destinataire) pour avoir un protocole
|
||||||
|
mail fonctionnel.
|
||||||
|
|
||||||
|
Le mail réponds à un besoin de communication asynchrone qui permet des
|
||||||
|
conversations plus réfléchies qu'un simple chat. Il est tout à fait possible
|
||||||
|
d'utiliser certaines technologies existantes afin de constuire le futur de
|
||||||
|
l'email, pour lequel:
|
||||||
|
|
||||||
|
- Les méta-données sont chiffrées — Il ne soit pas possible de savoir qui
|
||||||
|
communique avec qui, et quand;
|
||||||
|
- Le chiffrement est fort et protégé d'une phrase de passe;
|
||||||
|
- La saisie d'une clé utilisée dans un échange ne permette pas de déchiffrer
|
||||||
|
l'ensemble des échanges (forward secrecy);
|
||||||
|
- Il ne soit pas possible de réutiliser les données pour incriminer l'emmeteur
|
||||||
|
ou le recepteur des messages (deniability);
|
||||||
|
|
||||||
|
Avec au moins ces besoins en tête, il semble qu'une revue de l'ensemble des
|
||||||
|
projets existants pointe du doigt vers `pond <https://github.com/agl/pond>`_,
|
||||||
|
ou vers Signal.
|
||||||
|
|
||||||
|
Malheureusement, Pond est le projet d'une seule personne, qui veut plutôt
|
||||||
|
utiliser ce code comme demonstration du concept en question.
|
||||||
|
|
||||||
|
Voici un tableau de certaines des solutions existantes. Je n'ai volontairement
|
||||||
|
pas repris l'ensemble des outils existants, et indiqué quelques points de
|
||||||
|
comparaisons qui me semblaient utiles (Nombre de developeurs, date du dernier
|
||||||
|
commit).
|
||||||
|
|
||||||
|
=========================== ====== ====== ====
|
||||||
|
Project Pond Signal PGP
|
||||||
|
=========================== ====== ====== ====
|
||||||
|
Forward secrecy
|
||||||
|
--------------------------- ------ ------ ----
|
||||||
|
Meta-data encryption
|
||||||
|
--------------------------- ------ ------ ----
|
||||||
|
Deniability
|
||||||
|
=========================== ====== ====== ====
|
||||||
|
|
||||||
|
Hi,
|
||||||
|
|
||||||
|
As a prelude, let me say that I've been following this mailing-list since over
|
||||||
|
a year now and I've learned a bunch of interesting things, so thanks to you
|
||||||
|
all.
|
||||||
|
|
||||||
|
If I understand correctly, the email protocol is badly broken, even if used
|
||||||
|
with PGP on top of it, mainly because metadata are leaking, by design (at least
|
||||||
|
for the emitters and recipients of the messages) and that it doesn't propose
|
||||||
|
forward secrecy.
|
||||||
|
|
||||||
|
I'm looking for a protocol that allows:
|
||||||
|
|
||||||
|
- Asynchronous messaging;
|
||||||
|
- Backup-able messages;
|
||||||
|
- Forward secrecy;
|
||||||
|
- Hiding of traffic information;
|
||||||
|
|
||||||
|
This looks a lot like Pond [0], with the twist that messages are expiring in
|
||||||
|
Pond (and I would like them not to). But, I could leave with expiration of
|
||||||
|
messages, if only Pond was maintained and still worked on actively.
|
||||||
|
|
||||||
|
So here are multiple questions:
|
||||||
|
|
||||||
|
- The ideas behind Pond looks great. Do you have any
|
||||||
|
|
||||||
|
|
||||||
|
[0] https://pond.imperialviolet.org/
|
|
@ -12,7 +12,7 @@ REST services are supposed to be discoverable, but in a lot of situations,
|
||||||
that's not the case, and it can be a pain to implement a client for them, even
|
that's not the case, and it can be a pain to implement a client for them, even
|
||||||
if most of what is being done there is shared between a lot of web services.
|
if most of what is being done there is shared between a lot of web services.
|
||||||
|
|
||||||
In cornice, we alreadygenerate some documentation, but this one is incomplete in
|
In cornice, we already generate some documentation, but this one is incomplete in
|
||||||
different ways. For instance, it is currently not possible to get information
|
different ways. For instance, it is currently not possible to get information
|
||||||
about the inputs you are waiting for, in the different locations (body,
|
about the inputs you are waiting for, in the different locations (body,
|
||||||
headers and query string).
|
headers and query string).
|
29
content/incubation/vote-electronique-a-distance.rst
Normal file
29
content/incubation/vote-electronique-a-distance.rst
Normal file
|
@ -0,0 +1,29 @@
|
||||||
|
L'heure pour un vote electronique à distance ?
|
||||||
|
##############################################
|
||||||
|
|
||||||
|
Ce matin, je me fais reveiller par le reveil. La radio. Je suis chez des amis,
|
||||||
|
à Paris, et le Front National à fait des scores incroyables. Du jamais vu.
|
||||||
|
|
||||||
|
En prenant le RER, je croise le regard de ces gens, probablements immigrés, qui
|
||||||
|
semblent abrutis par la situation. Je suis le fils d'une émigrée et je partage
|
||||||
|
leur rage, leur haine. Derrière ces beaux discours, le Front National souhaite
|
||||||
|
fermer les frontières, controler qui rentre pour les laisser chez eux, ces
|
||||||
|
personnes qui ont eu l'infortune de naitre ailleurs, la ou la terre est moins
|
||||||
|
propice.
|
||||||
|
|
||||||
|
Je me sens coupable, ce matin. Coupable de ne pas avoir été voter hier. Dans ma
|
||||||
|
bulle j'étais, absent. Cela fait plusieurs années que je ne vote plus, par
|
||||||
|
manque de foi en la politique qui est menée actuellement, et par dépis. J'attends,
|
||||||
|
mollement, le second tour pour exprimer mon suffrage. Pour ce qu'il vaut. Je ne
|
||||||
|
crois pas en la representativité sous sa forme actuelle.
|
||||||
|
|
||||||
|
Mais ce matin, je m'en veux quand même. Même sans croire à ce système de
|
||||||
|
representativité, j'aurais pu éviter que ces idées racistes et haineuses
|
||||||
|
n'étendent leur pouvoir à d'autres régions.
|
||||||
|
|
||||||
|
Il est trop tard pour changer la donne, le mal est fait. Mais j'aurais pu aller
|
||||||
|
voter. J'aurais du même.
|
||||||
|
|
||||||
|
La geule encore pateuse, au petit déjeuner, je me questionne sur mon
|
||||||
|
attachement à un territoir, et aux consequences de ce non-attachement sur mon
|
||||||
|
envie de voter.
|
|
@ -1,2 +0,0 @@
|
||||||
Citations
|
|
||||||
#########
|
|
|
@ -1,10 +0,0 @@
|
||||||
Ressources autour du sexisme
|
|
||||||
############################
|
|
||||||
|
|
||||||
:date: 14/08/2013
|
|
||||||
|
|
||||||
Je me retrouve à lire pas mal de textes sur le sexisme, alors pourquoi ne pas
|
|
||||||
essayer d'en garder trace, question de pouvoir les pointer si j'en ai besoin:
|
|
||||||
|
|
||||||
- http://www.crepegeorgette.com/2013/08/07/lheterocentrisme-ou-lobligation-du-rapport-penetratif/
|
|
||||||
- http://cqfd-journal.org/Liberation-surveillee
|
|
|
@ -1,4 +1,5 @@
|
||||||
Citations
|
Citations
|
||||||
#########
|
#########
|
||||||
|
|
||||||
"Plutôt périr que travailler sans joie" — Nietzsche
|
- "Plutôt périr que travailler sans joie" — Nietzsche
|
||||||
|
-
|
||||||
|
|
|
@ -1,14 +0,0 @@
|
||||||
Python, functools and aliases
|
|
||||||
#############################
|
|
||||||
|
|
||||||
:status: draft
|
|
||||||
|
|
||||||
I have been playing lately with python and functools to make method aliases. I
|
|
||||||
wanted to have something like this.
|
|
||||||
|
|
||||||
.. code-block:: python
|
|
||||||
|
|
||||||
class Baby(object):
|
|
||||||
|
|
||||||
def eat(self, thing):
|
|
||||||
self.intestine.digest(thing)
|
|
|
@ -1,105 +0,0 @@
|
||||||
Understanding Zamboni
|
|
||||||
#####################
|
|
||||||
|
|
||||||
:status: draft
|
|
||||||
|
|
||||||
Behind the `firefox marketplace <http://marketplace.firefox.com>`_ and
|
|
||||||
`AMO <http://addons.mozilla.com>`_ is a big giant codebase, named Zamboni (you
|
|
||||||
know, this big machine that goes and clean the playground after hockey games).
|
|
||||||
|
|
||||||
I've been working on it since quite some time now, and I'm still a bit scared
|
|
||||||
about it, because it contains code that's useful for both the marketplace and
|
|
||||||
AMO.
|
|
||||||
|
|
||||||
Since it's open-source, I think we can probably make it more useful to other
|
|
||||||
teams with different usecases, but the reality is that currently it's kinda
|
|
||||||
hard to understand what it's doing, and how.
|
|
||||||
|
|
||||||
So here is an attemp of introduction to this codebase; It's also useful to me
|
|
||||||
because I'm sure I'll understand more things about it all by doing this
|
|
||||||
description post.
|
|
||||||
|
|
||||||
File Structure
|
|
||||||
==============
|
|
||||||
|
|
||||||
The first thing I like to look at is the file structure.
|
|
||||||
In our case, we have something like this::
|
|
||||||
|
|
||||||
apps
|
|
||||||
mkt
|
|
||||||
|
|
||||||
lib
|
|
||||||
|
|
||||||
configs
|
|
||||||
default
|
|
||||||
docs
|
|
||||||
locale
|
|
||||||
media
|
|
||||||
migrations
|
|
||||||
requirements
|
|
||||||
scripts
|
|
||||||
services
|
|
||||||
sites
|
|
||||||
templates
|
|
||||||
vendor
|
|
||||||
wsgi
|
|
||||||
|
|
||||||
Yes, that's a bunch of folders. And each of them contains python packages and
|
|
||||||
modules :-)
|
|
||||||
|
|
||||||
Django applications
|
|
||||||
-------------------
|
|
||||||
|
|
||||||
The framework behind all this is the django framework. And it uses the concept
|
|
||||||
of "applications" to separate the concerns.
|
|
||||||
|
|
||||||
`apps` contains applications used by AMO, `mkt` is the code of the marketplace.
|
|
||||||
|
|
||||||
`mkt` is dependent on `apps`, but that's not true the other way around.
|
|
||||||
|
|
||||||
In apps:
|
|
||||||
|
|
||||||
* **abuse** contains some django models definitions and a helper to register
|
|
||||||
abuse on apps or users.
|
|
||||||
* **access** contains some utilities to manage ACLs.
|
|
||||||
|
|
||||||
In mkt:
|
|
||||||
|
|
||||||
*
|
|
||||||
|
|
||||||
Libraries
|
|
||||||
---------
|
|
||||||
|
|
||||||
Some of the code is not directly tied to django, and shouldn't; that's what we
|
|
||||||
call libraries. It's something different from the external libraries we depend
|
|
||||||
on; these are tied to the business we are in. In there, you can find the
|
|
||||||
following bits at the time of writing:
|
|
||||||
|
|
||||||
* **crypto** takes care of the app-signing and receipt-signing logic. You want
|
|
||||||
to use it for instance to sign an app (it generates a manifest and signature,
|
|
||||||
and deal with the exchanges that have to be done with the signing server).
|
|
||||||
* **es**, XXX what is this doing? It seems related to django, a kind of cache?
|
|
||||||
|
|
||||||
* **geoip** is taking care of calling the geoip server to turn IP adresses into
|
|
||||||
geographic information.
|
|
||||||
|
|
||||||
* **licences** contains the texts of different licences with an utility tool to
|
|
||||||
return their texts.
|
|
||||||
* **metrics** contains the logic that sends metric information to the different
|
|
||||||
systems (currently monolith and our internal hbase cluster)
|
|
||||||
* **pay_server** is a client for the pay_server.
|
|
||||||
* **product_json** contains json values; I'm not sure used for what. XXX
|
|
||||||
* **recommend** contains some C code and its python bindings to compute
|
|
||||||
correlation coefficients between lists of items.
|
|
||||||
* **video** contains a lib used to get information (screenshots, encodings, metadata) out of video files.
|
|
||||||
* there is also a bunch of python modules at the root of the `libs` folder XXX
|
|
||||||
|
|
||||||
|
|
||||||
Apps
|
|
||||||
----
|
|
||||||
|
|
||||||
Configs
|
|
||||||
-------
|
|
||||||
|
|
||||||
Default
|
|
||||||
-------
|
|
|
@ -113,7 +113,8 @@ dépendez quasiment toujours d'une autorité à qui vous ne faites peut être pa
|
||||||
confiance: Apple, Microsoft ou bien Google.
|
confiance: Apple, Microsoft ou bien Google.
|
||||||
|
|
||||||
On ne vous propose pas simplement de nous faire confiance, on vous propose la
|
On ne vous propose pas simplement de nous faire confiance, on vous propose la
|
||||||
possibilité de ne faire confiance qu'à ceux à qui vous souhaitez accorder votre confiance, et ça peut être vous si vous le souhaitez.
|
possibilité de ne faire confiance qu'à ceux à qui vous souhaitez accorder votre
|
||||||
|
confiance, et ça peut être vous si vous le souhaitez.
|
||||||
|
|
||||||
La décentralisation à ceci de bon qu'elle vous laisse le choix d'où vous
|
La décentralisation à ceci de bon qu'elle vous laisse le choix d'où vous
|
||||||
souhaitez stocker vos données.
|
souhaitez stocker vos données.
|
Loading…
Reference in a new issue